Right. Thanks.

Another thing: if I want to specify a PBE algo for my key generation and I
want to use the algo with OID =
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC
but JSS' PBEAlgorithm class gives me only PBE_SHA1_DES3_CBC, which is a
little vague because it could map to:
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC, or
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_2KEY_TRIPLE_DES_CBC, or
SEC_OID_PKCS12_PBE_WITH_SHA1_AND_TRIPLE_DES_CBC.
Which is it?

Also if I want to use the fromOID method in PBEAlgorithm, how do I build the
required OBJECT_IDENTIFIER object from just the name
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC? I need at least the
corresponding OID *numbers* but can I find them in JSS (I suppose I could
pull them from the PKCS#12 spec but if there's a easier way...)?

-- P

"Jamie Nicolson" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>   Call KeyGenerator.initialize() with a PBEKeyGenParams object.
>
> Patrick wrote:
>
> >I want to generate a symmetric key using a PBE algo. I have the password
and
> >salt already to go but...
> >I got a KeyGenerator initialzed with the proper PBE algo via
CryptoManager,
> >but I don't see where in the KeyGenerator I specify the password or the
> >salt...I need to do that before I can call on the generate()
method...Does
> >JSS call the password callback function set in CryptoManager? But what if
I
> >want to pass in a password string directly? No can do? And what about the
> >salt, where is it set?
> >
> >Did I miss something?
> >
> >-- P
> >
> >
>



Reply via email to