Re: Feedback on DOMCryptInternalAPI

2012-05-03 Thread Wan-Teh Chang
David, Here are my review comments on https://wiki.mozilla.org/DOMCryptInternalAPI: 1. I don't understand the difference between the two methods that generate key pairs: PKGenerateKeyPair SigGenerateKeyPair 2. PKEncrypt just need a public key, not a key pair. 3. I suggest not assigning

Re: Feedback on DOMCryptInternalAPI

2012-05-03 Thread Kyle Hamilton
On Thu, Apr 26, 2012 at 12:32 AM, helpcrypto helpcrypto helpcry...@gmail.com wrote: Supporting smart cards in the spec and first implementations is not a goal, however, I think a lot of the base work we are doing will help in a future iteration. For instance, I hope that this Gecko

Re: Feedback on DOMCryptInternalAPI

2012-05-03 Thread Kyle Hamilton
David, I'll go into my vision of what I aspire to (The Truly Universal PKI) in another message. Why I focus on what I do may become clearer then. tl;dr: 1. CMS is the primary motivator for BER indefinite reading, if not writing/digesting. 2. To prevent ECB and non-KDF key agreement,

Re: Importing public and private keys into nss

2012-05-03 Thread VJ
On Thursday, 3 May 2012 00:21:59 UTC+8, Robert Relyea wrote: On 05/01/2012 12:01 PM, VJ wrote: On Tuesday, 1 May 2012 00:46:21 UTC+8, Robert Relyea wrote: On 04/30/2012 02:22 AM, VJ wrote: Hi, I've tested encryption, decryption, signing and verification with public

Re: Feedback on DOMCryptInternalAPI

2012-05-03 Thread Kyle Hamilton
On Thu, May 3, 2012 at 4:27 PM, Wan-Teh Chang w...@google.com wrote: David, Here are my review comments on https://wiki.mozilla.org/DOMCryptInternalAPI: 1. I don't understand the difference between the two methods that generate key pairs:    PKGenerateKeyPair    SigGenerateKeyPair