On 29. 12. 2011 23:08, Brian Smith wrote:
Matej Kurpel wrote:
On 22. 12. 2011 10:36, Imen Ibn Hotab wrote:
I`m developing pkcs#11 module for Firefox.
I was developing a PKCS#11 module as well.
Just out of curiosity, what do your PKCS#11 modules do?
Would it make things easier for either of
On 22. 12. 2011 10:36, Imen Ibn Hotab wrote:
Hi all!
I`m developing pkcs#11 module for Firefox. Now I`m testing on my
windows XP machine. When I try to load my module using graphic
interface in Mozilla Firefox 8.0.1 I have "unable to load module"
message. I try to load my module in Firefox 6.0 bu
On 22. 7. 2011 18:36, Brian Smith wrote:
- Original Message -
From: "Matej Kurpel"
On 22 juil, 14:41, helpcrypto helpcrypto
wrote:
at this time, i had just to make some test about the AES_CBC or
AES_ECB like time to encrypt, time to decrypt,how memory used, how
cpu used
On 22. 7. 2011 15:09, florent ainardi wrote:
On 22 juil, 14:41, helpcrypto helpcrypto wrote:
As i tell you a few minutes ago, i have working code for openssl
AES_CBC operations using a certificate.
All the info its available at openssl.org (im not very happy with the
doc, but its enough)
Im mig
Hello,
I am developing a PKCS#11 module and I would like to improve it a bit -
let me explain:
Currently, when adding a new PKCS#11 module via the GUI (or modutil),
the module is not added when it returns CKR_DEVICE_REMOVED on
C_Initialize and it says a rather nothing-saying error message "Una
On 3. 2. 2011 9:21, Anders Rundgren wrote:
Matej Kurpel wrote:
On 2. 2. 2011 13:37, Gervase Markham wrote:
On 01/02/11 18:08, Matej Kurpel wrote:
@Q4: I am doing this as my diploma thesis, it works for Windows Mobile
phones/PDAs and is tested with Firefox and Thunderbird. Certificate
login
On 2. 2. 2011 13:37, Gervase Markham wrote:
On 01/02/11 18:08, Matej Kurpel wrote:
@Q4: I am doing this as my diploma thesis, it works for Windows Mobile
phones/PDAs and is tested with Firefox and Thunderbird. Certificate
login works fine in Firefox.
Can you tell us a bit more about this
On 1. 2. 2011 17:56, Gervase Markham wrote:
Dear crypto-hackers,
Your thoughts on the following problem would be appreciated.
Goal: fix bug 570252. Provide 2-factor authentication for some
Bugzilla accounts.
https://bugzilla.mozilla.org/show_bug.cgi?id=570252
Sub-goal: do it in a way which d
On 30. 1. 2011 10:57, Nelson B Bolyard wrote:
On 2011-01-29 06:41 PDT, Matej Kurpel wrote:
Hello,
as far as I know, Thunderbird sends encrypted e-mails as an attachment
named "smime.p7m".
Can anybody let me briefly know what this file contains?
Yes, it contains a message in the &quo
Hello,
as far as I know, Thunderbird sends encrypted e-mails as an attachment
named "smime.p7m".
Can anybody let me briefly know what this file contains? I know this
from previous e-mail conversation from this mailing list:
"The sender generates an ephemeral 3-DES key one for each receiver, t
On 25. 1. 2011 1:17, Daniel Veditz wrote:
Forwarding question to the mozilla.dev.tech.crypto group.
Is this a module you're creating yourself, or one you know works
fine with Firefox for other people?
On 1/21/11 6:21 PM, Lbm wrote:
Hi, first of all I hope I'm posting this question in the right
On 5. 1. 2011 21:33, Anders Rundgren wrote:
Matej Kurpel wrote:
On 4. 1. 2011 22:23, Robert Relyea wrote:
On 01/03/2011 01:04 PM, Anders Rundgren wrote:
Hi,
I'm in the starting phase upgrading Firefox so that it can provision
credentials in a way that that banks and governments require
On 4. 1. 2011 22:23, Robert Relyea wrote:
On 01/03/2011 01:04 PM, Anders Rundgren wrote:
Hi,
I'm in the starting phase upgrading Firefox so that it can provision
credentials in a way that that banks and governments require which
among many things include E2ES (End-to-End Security) and issuer-
s
On 27. 12. 2010 18:15, Nelson B Bolyard wrote:
On 2010-12-27 01:44 PDT, Matej Kurpel wrote:
If I only was able to load the source code of Thunderbird in Visual
Studio, that would be great. I could debug it line-by-line as usual.
You can. Download and unpack the sources from
ftp
On 21. 12. 2010 15:35, Marsh Ray wrote:
On 12/21/2010 06:44 AM, Matej Kurpel wrote:
How can I check if I am doing something bad to the heap, please? Sadly,
I am not so skilled C++ programmer (well, rather a noobish one) and I
mostly don't know about the inside stuff you were talking about
On 19. 12. 2010 9:27, Nelson Bolyard wrote:
On 2010-12-16 19:21 PDT, Marsh Ray wrote:
On 12/16/2010 04:39 PM, Matej Kurpel wrote:
ChildEBP RetAddr Args to Child
0015f130 5fa0c52b e06d7363 0001 0003
KERNELBASE!RaiseException+0x58 (FPO: [Non-Fpo])
0015f168 5fa14f13 0015f178 5fa7aa24
On 16. 12. 2010 21:59, Marsh Ray wrote:
On 12/16/2010 01:02 PM, Matej Kurpel wrote:
(164c.1560): C++ EH exception - code e06d7363 (first chance)
Nelson may know more specifics, but if I were you I would configure
the debugger to break when C++ exceptions are thrown. (Debug menu ->
Ev
On 16. 12. 2010 14:02, Nelson Bolyard wrote:
On 2010-12-11 11:57 PDT, Matej Kurpel wrote:
Ah, that's because I tried CKR_FUNCTION_NOT_SUPPORTED then and copied
the wrong pkcs log. But that's not really the point since it crashes
everytime, no matter which CKR_ return code I use (
On 11. 12. 2010 19:05, Nelson B Bolyard wrote:
Matej,
Your message contains an obvious self-contradiction. Observe:
On 2010-12-10 09:57 PDT, Matej Kurpel wrote:
CK_RV CK_ENTRY C_SignInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR
pMechanism, CK_OBJECT_HANDLE hKey)
{
return
Hello,
I am implementing a PKCS#11 module. I would like to implement
authentication on my device (using a pin-pad) everytime a signature is
requested from it. The idea is that on C_SignInit, I ask the user for
the PIN and if the PIN is incorrect (or user has cancelled for whatever
reason), it
On 28. 11. 2010 17:24, Matej Kurpel wrote:
On 26. 11. 2010 22:20, ryan-mozdevtechcry...@sleevi.com wrote:
-Original Message-
Sent: Friday, November 26, 2010 3:16 PM
To: mozilla's crypto code discussion list
Subject: Certificate login in Firefox - how does it work?
Hello,
On 26. 11. 2010 22:20, ryan-mozdevtechcry...@sleevi.com wrote:
-Original Message-
Sent: Friday, November 26, 2010 3:16 PM
To: mozilla's crypto code discussion list
Subject: Certificate login in Firefox - how does it work?
Hello,
I am developing a PKCS#11 module and currently I am having
Hello,
I am developing a PKCS#11 module and currently I am having problems
getting the certificate login working in Firefox.
I load a page, click on login button and then Firefox starts
communicating with my PKCS#11 module (the page wants its users to log in
using their certificates). It lets m
On 16. 11. 2010 14:53, Matej Kurpel wrote:
Hello,
I am implementing a PKCS#11 module and have just implemented
C_GenerateKeyPair. For this purpose, I have set up a html page with
the "keygen" tag which sends the form data to my php script to write
back to me what was sent.
Now,
Hello,
I am implementing a PKCS#11 module and have just implemented
C_GenerateKeyPair. For this purpose, I have set up a html page with the
"keygen" tag which sends the form data to my php script to write back to
me what was sent.
Now, everything works perfectly. It generates the key pair, then
Hello,
I am developing a PKCS#11 module and stumbled upon a confusion as how to
manage multiple applications calling Cryptoki calls. I can't seem to get
an answer by reading the PKCS#11 specification, nor by googling, so I am
asking you :)
Currently, I have a boolean flag indicating whether C_I
Hello,
I am implementing a PKCS#11 module for Thunderbird and I have stuck upon
a weird behavior of Thunderbird. Let me explain:
For the purposes of testing, I have created a second gmail account. I
have also generated the keys and certificate for this account but only
imported its certificate
Hello,
I am implementing a PKCS#11 module. Today I tried to send encrypted
e-mail to my second gmail account, and it works perfectly (in fact,
nothing is needed from my token to support this). However, when the
message arrives and I try to read it, Thunderbird calls C_UnwrapKey
(which, of cour
Hello,
I would like to get my hands on pk11util to check my PKCS#11 module for
conformance to said standard (my search on the net yielded that pk11util
is suitable for this purpose). However, the precompiled NSS for windows
does not contain this utility. I have tried to compile it myself (yes,
On 29. 10. 2010 14:11, Nelson B Bolyard wrote:
On 2010/10/28 02:14 PDT, Jean-Marc Desperrier wrote:
Nelson B Bolyard wrote:
Please don't file a bug without a stack trace showing the crash is in NSS.
[...]
If the back trace shows the crash is not in NSS, but in some other
library, please direct
On 28. 10. 2010 11:14, Jean-Marc Desperrier wrote:
Nelson B Bolyard wrote:
Please don't file a bug without a stack trace showing the crash is in
NSS.
[...]
If the back trace shows the crash is not in NSS, but in some other
library, please direct the bug report accordingly.
The report is that
On 26. 10. 2010 10:43, Jean-Marc Desperrier wrote:
Matej Kurpel wrote:
In the Type field for S:, O:, OU: and CN: I always provided 0x0c which
is utf-8 string, but in the certificate there was 0x13 - printable
string. After I changed it - voila, it's working in Thunderbird, and
certutil do
On 25. 10. 2010 12:16, Matej Kurpel wrote:
On 24. 10. 2010 20:59, Nelson B Bolyard wrote:
On 2010-10-24 02:12 PDT, Matej Kurpel wrote:
[snip]
You can clearly see both my CA and user certificates. Certutil has used
my PKCS#11 module to obtain my user certificate. Then I launched the
second
On 24. 10. 2010 20:59, Nelson B Bolyard wrote:
On 2010-10-24 02:12 PDT, Matej Kurpel wrote:
[snip]
You can clearly see both my CA and user certificates. Certutil has used
my PKCS#11 module to obtain my user certificate. Then I launched the
second commany you were suggesting:
certutil -d . -L
On 23. 10. 2010 22:18, Nelson B Bolyard wrote:
On 2010-10-21 13:31 PDT, Matej Kurpel wrote:
This looks like Thunderbird cannot find the user certificate in its
database. Well, it shouldn't anyway, since it resides on the token
provided by a PKCS#11 module I am developing.
Right. It&
On 20. 10. 2010 21:01, Nelson B Bolyard wrote:
On 2010-10-20 09:54 PDT, Matej Kurpel wrote:
Hello,
I have set up my own CA and issued one certificate signed by this CA.
However, I cannot use this certificate to send signed e-mail from
Thunderbird. It says "Could not verify this certificat
Hello,
I have set up my own CA and issued one certificate signed by this CA.
However, I cannot use this certificate to send signed e-mail from
Thunderbird. It says "Could not verify this certificate for unknown
reasons". I don't understand; I have added the root CA certificate into
the Authori
On 16. 10. 2010 18:33, Nelson B Bolyard wrote:
On 2010-10-16 06:25 PDT, Matej Kurpel wrote:
Hello,
I am developing a PKCS#11 module to be used with Thunderbird. However, I
have trouble providing a valid signature for e-mails. The mechanism used
is CKM_RSA_PKCS and I have a 1024bit private
Hello,
I am developing a PKCS#11 module to be used with Thunderbird. However, I
have trouble providing a valid signature for e-mails. The mechanism used
is CKM_RSA_PKCS and I have a 1024bit private key along with the
certificate, stored on the token. The signature is generated in a C#
.NET CF
On 10. 10. 2010 14:41, Matej Kurpel wrote:
On 9. 10. 2010 14:44, Matej Kurpel wrote:
Hello,
I am developing a PKCS#11 module for my diploma thesis and I am
having problems with Thunderbird not recognizing my certificate for
signing. When I want to set it for signing using the Security tab
On 9. 10. 2010 14:44, Matej Kurpel wrote:
Hello,
I am developing a PKCS#11 module for my diploma thesis and I am having
problems with Thunderbird not recognizing my certificate for signing.
When I want to set it for signing using the Security tab of Account
settings (by clicking Select
giving
it object handle 2 as my private key, so where is the problem?...
I am attaching my opensc-spy log with unneccessary info stripped out.
Thanks in advance for any clues.
Matej Kurpel
--- SPY LOG BEGIN
9: C_OpenSession
[in] slotID = 0x0
On 16. 9. 2010 15:28, David Stutzman wrote:
configure: error: installation or configuration problem: C compiler
cannot creat
e executables.
Just guessing here... could this be a problem with UAC? (User Account
Control)
M. Kurpel
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla
Hello,
I need to force authentication on the device everytime a sign operation
is requested from my PKCS#11 library. From the specification, I
understood that there is a flag CKA_ALWAYS_AUTHENTICATE of the private
key which should be set to TRUE. However, NSS does not request the value
of thi
Dňa 13. 8. 2010 18:35, Robert Relyea wrote / napísal(a):
On 08/13/2010 05:37 AM, Konstantin Andreev wrote:
On 08/13/10 04:44, Robert Relyea wrote:
On Wed, Aug 11, 2010 at 1:18 PM, Matej Kurpel
wrote:
[ ... skip ... ] Later, thunderbird asks for its attributes
CKA_TOKEN and CKA_LABEL but
Dňa 12. 8. 2010 11:03, Konstantin Andreev wrote / napísal(a):
On 08/12/10 00:18, Matej Kurpel wrote:
[ ... skip ...]
Later, thunderbird asks for its attributes CKA_TOKEN and CKA_LABEL
but gives zero-sized buffers for both values. This is where my
problem lies - I don't know what to r
Hello,
I am trying to implement a PKCS#11 module for my diploma thesis. It is
intended to be used with thunderbird. I am using opensc pkcs11-spy
module to debug it. I have a problem for quite some days I don't seem to
be able to solve myself.
At first, thunderbird searches for token certificat
47 matches
Mail list logo
