Re: Cryptoki interface to decrypt mail with thunderbird

2014-03-18 Thread Robert Relyea
On 03/18/2014 04:29 AM, Leon Brits wrote: > Robert, > > Thanks for your help. This discussion has helped me to find the error in our > padding implementation for symmetric ciphers using OpenSSL which defaults to > "always pad". > > Encryption and decryption via thunderbird now works just fine. g

RE: Cryptoki interface to decrypt mail with thunderbird

2014-03-18 Thread Leon Brits
Robert, Thanks for your help. This discussion has helped me to find the error in our padding implementation for symmetric ciphers using OpenSSL which defaults to "always pad". Encryption and decryption via thunderbird now works just fine. Thanks LJB -- dev-tech-crypto mailing list dev-tech-c

Re: Cryptoki interface to decrypt mail with thunderbird

2014-03-14 Thread Robert Relyea
On 03/14/2014 04:42 AM, Leon Brits wrote: > Robert, > > Thanks for your time. > >> cmscipher does call DecryptUpdate, but for the symmetric portion, not the >> asymmetric portion. We were talking about key unwrapping/decrypt in RSA. >> This is clearly an symmetric operation (DES3 or AES or somethin

RE: Cryptoki interface to decrypt mail with thunderbird

2014-03-14 Thread Leon Brits
Robert, Thanks for your time. > cmscipher does call DecryptUpdate, but for the symmetric portion, not the > asymmetric portion. We were talking about key unwrapping/decrypt in RSA. > This is clearly an symmetric operation (DES3 or AES or something). Ok. Sorry if I misunderstood and gave the inco

RE: Cryptoki interface to decrypt mail with thunderbird

2014-03-14 Thread Leon Brits
Herewith the log: Breakpoint 2, C_DecryptUpdate (hSession=4776606912, pEncryptedPart=0x112a23028 "X\a?\022*?\006a??@!?\027\020???b???\030?J??\0327|??:?p}{?w??{?6uc m;#?&??\023q?3?M?\t?7?\024?\005?\006@$o\ng]?[?#S?{W??b7\020???DFjx\034??;??1$?$B,S?KY?", ulEncryptedPartLen=393

Re: Cryptoki interface to decrypt mail with thunderbird

2014-03-13 Thread Kai Engert
On Do, 2014-03-13 at 14:12 +0200, Leon Brits wrote: > Attached is a log of the backtrace Hi Leon, the mailing list probably discards attachments. Could you please paste the stack trace as plain text into a new message? Thanks Kai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.o

Re: Cryptoki interface to decrypt mail with thunderbird

2014-03-13 Thread Robert Relyea
On 03/13/2014 05:12 AM, Leon Brits wrote: > Robert, > > Attached is a log of the backtrace when I try to use Thunderbird to decrypt > an email. As you can see in the log it reaches C_DecryptUpdate(), but then > asserts at cmscipher.c:452. I don't see the attachment? did you forget or did the mai

RE: Cryptoki interface to decrypt mail with thunderbird

2014-03-13 Thread Leon Brits
Robert, Attached is a log of the backtrace when I try to use Thunderbird to decrypt an email. As you can see in the log it reaches C_DecryptUpdate(), but then asserts at cmscipher.c:452. Now we use OpenSSL to perform these cryptographic operations and if you give its DecryptUpdate() function e

RE: Cryptoki interface to decrypt mail with thunderbird

2014-03-10 Thread Leon Brits
Robert, > So I don't understand why you are seeing C_DecryptUpdate() in this case, > unless you call C_DecryptUpdate() internally from your PKCS #11 module > from C_Decrypt(). Nope. I will compile Thunderbird and let you know. Thanks Leon Brits -- dev-tech-crypto mailing list dev-tech-crypto

Re: Cryptoki interface to decrypt mail with thunderbird

2014-03-10 Thread Robert Relyea
On 03/10/2014 12:48 AM, Leon Brits wrote: > Hi Robert, > > Thanks for the reply. > >> ...I'm assuming we are talking >> about an RSA operation here and not an symetric key operation like AES or >> DES. > Yes RSA. > >> Yes, I just checked. We we are unwrapping a key (which is what the logical >> fun

Re: Cryptoki interface to decrypt mail with thunderbird

2014-03-10 Thread helpcrypto helpcrypto
Our pkcs#11 is working properly for that scenario (we dont digests, just decrypt, so the key is provided by thunderbird). I suggest u trying opensc pkcs11-spy and check logfiles On Mon, Mar 10, 2014 at 8:48 AM, Leon Brits wrote: > Hi Robert, > > Thanks for the reply. > > > ...I'm assuming we ar

RE: Cryptoki interface to decrypt mail with thunderbird

2014-03-10 Thread Leon Brits
Hi Robert, Thanks for the reply. > ...I'm assuming we are talking > about an RSA operation here and not an symetric key operation like AES or > DES. Yes RSA. > Yes, I just checked. We we are unwrapping a key (which is what the logical > function RSA Decrypt supports), We check to see if the tok

Re: Cryptoki interface to decrypt mail with thunderbird

2014-03-07 Thread Robert Relyea
On 03/07/2014 07:02 AM, Leon Brits wrote: > Hi, > > We have a security device which is used via cryptoki (PKCS#11) to perform > cryptographic operations such as sign/verify and en/decrypt of emails. > Sign works via our device while Verify and Encrypt is done by the PC. Our > problem is with Decr