Wan-Teh Chang wrote:
On Wed, 15 Dec 2004 10:39:07 GMT, Mehul <[EMAIL PROTECTED]> wrote:
I am trying to write a C program to wrap and unwrap the data using AES wrap
implementation available in freebl library of NSS. Can somebody point me to
any sample/test application ?
Nelson Bolyard is the best person to answer this question.
He was assigned to implement AES wrap for XML Encryption
support, but that code is not yet exposed at NSS's PKCS 11
layer.
The priority of that work was reduced to a point far below many
other bugs and RFEs. The people who originally requested it ceased
to show interest in it.
The following two bugs are relevant. The first bug is fixed.
The second bug is on exposing the algorithm at the PKCS 11
layer. It even contains a test program.
https://bugzilla.mozilla.org/show_bug.cgi?id=167818
https://bugzilla.mozilla.org/show_bug.cgi?id=213795
There's a fundamental flaw in that program, IMO. It assumes that
the keywrap algorithm is a general purpose symmetric encryption
algorithm, rather than being a KEY WRAP algorithm.
I imagine that, if/when that algorithm is exposed via PKCS11, it
will be accessible via the PKCS11 primitives for wrapping and
unwrapping keys, and not as a general purpose symmetric cipher.
Wan-Teh
--
Nelson B
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto
