Robert Relyea wrote:
> Typically
> needsUserInit means there isn't a password record in your key database.
> Without this you can not store any keys. The difference between 'not
> initialized', 'doesn't have a master password', and 'has master a
> password' is as follows:
> 
>   1) 'not initialized' --- no password record.
>   2) 'doesn't have a master password' --- has a password record, and the
> password record is encrypted with a key derived from 'NULL' (\0).
>   3) 'has a master password' - has a password record, and key isn't
> derived from NULL.

Bob, correct me if I'm wrong, but that distinction is purely in PSM, not
in NSS, right?

IINM in NSS, there are only two states:
  - no password record
  - password record exists
and NSS does not give special treatment to the null password case,
but rather PSM handles that.

Do I remember that correctly?
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to