Re: Unable to change password of FIPS enabled internal key token

2008-10-09 Thread Ian G
David Stutzman wrote: The security policy in case anyone is interested and doesn't have it: http://www.mozilla.org/projects/security/pki/nss/fips/secpolicy.pdf Thanks Dave, I'm interested, and flicked through, but most of it is way above my pay grade. It looks like a huge investment put into

RE: Unable to change password of FIPS enabled internal key token

2008-10-09 Thread David Stutzman
The security policy in case anyone is interested and doesn't have it: http://www.mozilla.org/projects/security/pki/nss/fips/secpolicy.pdf Dave smime.p7s Description: S/MIME cryptographic signature ___ dev-tech-crypto mailing list

Re: Unable to change password of FIPS enabled internal key token

2008-10-09 Thread Kyle Hamilton
2008/10/9 Ian G [EMAIL PROTECTED]: David Stutzman wrote: The security policy in case anyone is interested and doesn't have it: http://www.mozilla.org/projects/security/pki/nss/fips/secpolicy.pdf Thanks Dave, I'm interested, and flicked through, but most of it is way above my pay grade. It

Re: Unable to change password of FIPS enabled internal key token

2008-10-09 Thread Wan-Teh Chang
2008/10/9 Ian G [EMAIL PROTECTED]: Why is there DSA key generation but not RSA key generation? e.g., page 10, pt 23. This is because CMVP doesn't test RSA key generation. On the RSA validation list at http://csrc.nist.gov/groups/STM/cavp/documents/dss/rsaval.html you can see that only

Re: Unable to change password of FIPS enabled internal key token

2008-10-08 Thread Robert Relyea
Kyle Hamilton wrote: On Tue, Oct 7, 2008 at 5:22 PM, Subrata Mazumdar [EMAIL PROTECTED] wrote: I guess that the problem is in documentation and the PSM GUI. The PSM GUI should have clearly stated the password policy requirement in the password change dialog window. Also, NSS should have

Re: Unable to change password of FIPS enabled internal key token

2008-10-08 Thread Kyle Hamilton
2008/10/8 Robert Relyea [EMAIL PROTECTED]: Kyle Hamilton wrote: On Tue, Oct 7, 2008 at 5:22 PM, Subrata Mazumdar [EMAIL PROTECTED] wrote: I guess that the problem is in documentation and the PSM GUI. The PSM GUI should have clearly stated the password policy requirement in the password

Re: Unable to change password of FIPS enabled internal key token

2008-10-07 Thread Subrata Mazumdar
Wan-Teh Chang wrote: 2008/10/6 Kai Engert [EMAIL PROTECTED]: Wan-Teh Chang wrote: - The password must be at least seven characters long. - The password must consist of characters from three or more character classes (uppercase, lowercase, digits, etc.). NSS rejects

Re: Unable to change password of FIPS enabled internal key token

2008-10-07 Thread Kyle Hamilton
On Tue, Oct 7, 2008 at 5:22 PM, Subrata Mazumdar [EMAIL PROTECTED] wrote: I guess that the problem is in documentation and the PSM GUI. The PSM GUI should have clearly stated the password policy requirement in the password change dialog window. Also, NSS should have enforced the FIPS password

Re: Unable to change password of FIPS enabled internal key token

2008-10-06 Thread Kai Engert
Subrata Mazumdar wrote: I am using Firefox 3.0.3. I have FIPS enabled the software security device using Secuirty Devices dialog window in PSM. This step forced me to add password protect the internal Key token (Software security device). Then, I tried to change the password of the internal key

Re: Unable to change password of FIPS enabled internal key token

2008-10-06 Thread Kai Engert
Kai Engert wrote: Subrata Mazumdar wrote: I am using Firefox 3.0.3. I have FIPS enabled the software security device using Secuirty Devices dialog window in PSM. This step forced me to add password protect the internal Key token (Software security device). Then, I tried to change the password

Re: Unable to change password of FIPS enabled internal key token

2008-10-06 Thread Wan-Teh Chang
On Thu, Oct 2, 2008 at 11:11 PM, Subrata Mazumdar [EMAIL PROTECTED] wrote: Hi, I am using Firefox 3.0.3. I have FIPS enabled the software security device using Secuirty Devices dialog window in PSM. This step forced me to add password protect the internal Key token (Software security device).

Re: Unable to change password of FIPS enabled internal key token

2008-10-06 Thread Kai Engert
Wan-Teh Chang wrote: - The password must be at least seven characters long. - The password must consist of characters from three or more character classes (uppercase, lowercase, digits, etc.). NSS rejects abcDEF7 although it matches your above description. Kai smime.p7s Description:

Re: Unable to change password of FIPS enabled internal key token

2008-10-06 Thread Wan-Teh Chang
2008/10/6 Kai Engert [EMAIL PROTECTED]: Wan-Teh Chang wrote: - The password must be at least seven characters long. - The password must consist of characters from three or more character classes (uppercase, lowercase, digits, etc.). NSS rejects abcDEF7 although it matches your above

Unable to change password of FIPS enabled internal key token

2008-10-03 Thread Subrata Mazumdar
Hi, I am using Firefox 3.0.3. I have FIPS enabled the software security device using Secuirty Devices dialog window in PSM. This step forced me to add password protect the internal Key token (Software security device). Then, I tried to change the password of the internal key token using the