Re: CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-22 Thread Bob Relyea
Hi Oscar. Thanks, So yes, the failure to find your token is a failure in firefox (psm in this case) to find a token that can do CKM_RSA_PKCS. Firefox looks for tokens that are writable that can to the PKCS mechanism since pretty much all it's operations is done with PKCS. Oscar So wrote:

Re: CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-22 Thread Glen Beasley
Oscar So wrote: Hi Nelson, I have no idea if NSS supports CKM_RSA_PKCS_PSS at all. Any idea ? NSS does not support CKM_RSA_PKCS_PSS To check this use http://lxr.mozilla.org/security/ to look at current NSS source. CKM_RSA_PKCS_PSS is defined only in the header pkcs11t.h, but not used the co

Re: CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-22 Thread Oscar So
Hi Nelson, I have no idea if NSS supports CKM_RSA_PKCS_PSS at all. Any idea ? Oscar Nelson Bolyard wrote: Oscar, Does NSS ever need/want a module with just those mechanisms? Does NSS ever want the CKM_RSA_PKCS_PSS or CKM_RSA_X_509 mechanisms at all? ___

Re: CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-21 Thread Bob Relyea
Oscar So wrote: Hi, If my PKCS#11 module only supports CKM_RSA_PKCS_PSS padding (not even PKCS#1 padding), in C_GetMechanismList, should it just return the following CKMs: CKM_RSA_PKCS_KEY_PAIR_GEN CKM_RSA_PKCS_PSS CKM_RSA_X_509 CKM_SHA_1 Since I am only return these CKMs, FireFox does not rec

Re: CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-21 Thread Nelson Bolyard
Oscar So wrote: > If my PKCS#11 module only supports CKM_RSA_PKCS_PSS padding > (not even PKCS#1 padding), in C_GetMechanismList, > should it just return the following CKMs: > > CKM_RSA_PKCS_KEY_PAIR_GEN > CKM_RSA_PKCS_PSS > CKM_RSA_X_509 > CKM_SHA_1 > > Since I am only return these CKMs, FireFo

CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-21 Thread Oscar So
Hi, If my PKCS#11 module only supports CKM_RSA_PKCS_PSS padding (not even PKCS#1 padding), in C_GetMechanismList, should it just return the following CKMs: CKM_RSA_PKCS_KEY_PAIR_GEN CKM_RSA_PKCS_PSS CKM_RSA_X_509 CKM_SHA_1 Since I am only return these CKMs, FireFox does not recognize my PKCS#11