Re: NYT story on CleverSafe (user of NSS)

2006-08-21 Thread Nelson Bolyard
Frank Hecker wrote: > Nelson Bolyard wrote: >> Frank, Where did you find any mention of NSS in all that stuff? >> I looked briefly but didn't find any. > > The Cleversafe.org mentions NSS right on the home page, in the dark gray > box titled "Cleversafe Dispersed Storage Project", as an item under

Re: NYT story on CleverSafe (user of NSS)

2006-08-21 Thread Frank Hecker
Nelson Bolyard wrote: Frank, Where did you find any mention of NSS in all that stuff? I looked briefly but didn't find any. The Cleversafe.org mentions NSS right on the home page, in the dark gray box titled "Cleversafe Dispersed Storage Project", as an item under the "what's new" heading: "*

Re: NSS Cache question

2006-08-21 Thread Rob Crittenden
Nelson B wrote: Rob Crittenden wrote: I'm having an issue with mod_nss, an Apache module I wrote that provides SSL using NSS. The way Apache loads modules is a tad strange. I'd say it's more than a tad! What it does is it loads them one time in order to get its list of configuration direc

Re: NYT story on CleverSafe (user of NSS)

2006-08-21 Thread Bob Relyea
Nelson Bolyard wrote: Frank Hecker wrote: From Slashdot I found this New York Times story http://www.nytimes.com/2006/08/21/technology/21storage.html on Cleversafe, an open source project to develop a dispersed data storage system to store data in encrypted form using an "m of n" recovery t

Re: CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-21 Thread Bob Relyea
Oscar So wrote: Hi, If my PKCS#11 module only supports CKM_RSA_PKCS_PSS padding (not even PKCS#1 padding), in C_GetMechanismList, should it just return the following CKMs: CKM_RSA_PKCS_KEY_PAIR_GEN CKM_RSA_PKCS_PSS CKM_RSA_X_509 CKM_SHA_1 Since I am only return these CKMs, FireFox does not rec

Re: NYT story on CleverSafe (user of NSS)

2006-08-21 Thread Nelson Bolyard
Frank Hecker wrote: > From Slashdot I found this New York Times story > > http://www.nytimes.com/2006/08/21/technology/21storage.html > > on Cleversafe, an open source project to develop a dispersed data > storage system to store data in encrypted form using an "m of n" > recovery technique: > >

Re: CMS (in)definite length encoding

2006-08-21 Thread Nelson Bolyard
Michiel van Meersbergen wrote: > Can anyone tell me if it is also possible to get a definite-length DER > structure as output to the CMS_EncoderStart / -Update / -Finish > functions? This is a good question, and requires some research. I think no one can answer it extemporaneously. > I did get

Re: Encryption/Decryption with client-certificates

2006-08-21 Thread Nelson Bolyard
Erik Siegemund wrote: > I look for an answer for following problem: > > In the mozilla was imported a client certificate. > > 1.) How is the way to get this certificate inside an applet > for using for encryption? (Assuming java sun plugin > 2.) How is the way to use this certificate for dec

Re: Encryption/Decryption with client-certificates

2006-08-21 Thread Arshad Noor
Ah, now I see what you're trying to do. Let me go over this again: a) If you're trying to encrypt data from the client to the server, then either requesting the server encryption certificate from the applet (or including it in the form in the applet) is one way of solving this; b) If y

Re: CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-21 Thread Nelson Bolyard
Oscar So wrote: > If my PKCS#11 module only supports CKM_RSA_PKCS_PSS padding > (not even PKCS#1 padding), in C_GetMechanismList, > should it just return the following CKMs: > > CKM_RSA_PKCS_KEY_PAIR_GEN > CKM_RSA_PKCS_PSS > CKM_RSA_X_509 > CKM_SHA_1 > > Since I am only return these CKMs, FireFo

CKM_RSA_PKCS_PSS supports in PKCS#11 module with FireFox

2006-08-21 Thread Oscar So
Hi, If my PKCS#11 module only supports CKM_RSA_PKCS_PSS padding (not even PKCS#1 padding), in C_GetMechanismList, should it just return the following CKMs: CKM_RSA_PKCS_KEY_PAIR_GEN CKM_RSA_PKCS_PSS CKM_RSA_X_509 CKM_SHA_1 Since I am only return these CKMs, FireFox does not recognize my PKCS#11

NYT story on CleverSafe (user of NSS)

2006-08-21 Thread Frank Hecker
From Slashdot I found this New York Times story http://www.nytimes.com/2006/08/21/technology/21storage.html on Cleversafe, an open source project to develop a dispersed data storage system to store data in encrypted form using an "m of n" recovery technique: http://www.cleversafe.org/ Besid

Re: Get only personal certificates

2006-08-21 Thread Glen Beasley
JSS does not have a method to just return the EE certs. To do this first call getPermCerts to get all the certs then you can build your list by checking the CertUsage and making a list of the certs that have the usages you want. example code that should help you write what you to do: http://lx

Re: encrypt with firefox (and other mozilla browsers)

2006-08-21 Thread Wan-Teh Chang
Firefox 2.0 will have some encryption and decryption functions exported from NSS to XPCOM. But it seems that RC4 is the only supported cipher even though the interface seems to have been designed to support AES (in CBC mode) as well. The bug report for this feature is: https://bugzilla.mozilla.

CMS (in)definite length encoding

2006-08-21 Thread Michiel van Meersbergen
Hello again, Can anyone tell me if it is also possible to get a definite-length DER structure as output to the CMS_EncoderStart / -Update / -Finish functions? I did get a definite-lenght encoded structure using the SEC_PKCS7* variants, but I understand that the CMS functions are the way of the fu

Re: Encryption/Decryption with client-certificates

2006-08-21 Thread Erik Siegemund
Thanks very much! But, to clearify - I'm not sure if there are some missunderstandings: The client certificates data are stored in browsers database/keystore. (assume it was requested from/with OpenCA and imported via download). The only way to ask this certificate inside the applet is to ask f