Re: Developing pkcs11 module for Firefox

2011-12-29 Thread Matej Kurpel
On 29. 12. 2011 23:08, Brian Smith wrote: Matej Kurpel wrote: On 22. 12. 2011 10:36, Imen Ibn Hotab wrote: I`m developing pkcs#11 module for Firefox. I was developing a PKCS#11 module as well. Just out of curiosity, what do your PKCS#11 modules do? Would it make things easier for either

Re: Developing pkcs11 module for Firefox

2011-12-23 Thread Matej Kurpel
On 22. 12. 2011 10:36, Imen Ibn Hotab wrote: Hi all! I`m developing pkcs#11 module for Firefox. Now I`m testing on my windows XP machine. When I try to load my module using graphic interface in Mozilla Firefox 8.0.1 I have unable to load module message. I try to load my module in Firefox 6.0 but

Re: does anyone try to use AES_CBC ???

2011-07-22 Thread Matej Kurpel
On 22. 7. 2011 15:09, florent ainardi wrote: On 22 juil, 14:41, helpcrypto helpcryptohelpcry...@gmail.com wrote: As i tell you a few minutes ago, i have working code for openssl AES_CBC operations using a certificate. All the info its available at openssl.org (im not very happy with the doc,

Re: does anyone try to use AES_CBC ???

2011-07-22 Thread Matej Kurpel
On 22. 7. 2011 18:36, Brian Smith wrote: - Original Message - From: Matej Kurpelmkur...@gmail.com On 22 juil, 14:41, helpcrypto helpcryptohelpcry...@gmail.com wrote: at this time, i had just to make some test about the AES_CBC or AES_ECB like time to encrypt, time to decrypt,how memory

Adding a PKCS#11 module when device is not connected

2011-03-24 Thread Matej Kurpel
Hello, I am developing a PKCS#11 module and I would like to improve it a bit - let me explain: Currently, when adding a new PKCS#11 module via the GUI (or modutil), the module is not added when it returns CKR_DEVICE_REMOVED on C_Initialize and it says a rather nothing-saying error message

Re: Two-factor auth for Bugzilla

2011-02-03 Thread Matej Kurpel
On 3. 2. 2011 9:21, Anders Rundgren wrote: Matej Kurpel wrote: On 2. 2. 2011 13:37, Gervase Markham wrote: On 01/02/11 18:08, Matej Kurpel wrote: @Q4: I am doing this as my diploma thesis, it works for Windows Mobile phones/PDAs and is tested with Firefox and Thunderbird. Certificate login

Re: Two-factor auth for Bugzilla

2011-02-02 Thread Matej Kurpel
On 2. 2. 2011 13:37, Gervase Markham wrote: On 01/02/11 18:08, Matej Kurpel wrote: @Q4: I am doing this as my diploma thesis, it works for Windows Mobile phones/PDAs and is tested with Firefox and Thunderbird. Certificate login works fine in Firefox. Can you tell us a bit more about

Re: Two-factor auth for Bugzilla

2011-02-01 Thread Matej Kurpel
On 1. 2. 2011 17:56, Gervase Markham wrote: Dear crypto-hackers, Your thoughts on the following problem would be appreciated. Goal: fix bug 570252. Provide 2-factor authentication for some Bugzilla accounts. https://bugzilla.mozilla.org/show_bug.cgi?id=570252 Sub-goal: do it in a way which

Re: S/MIME encrypted e-mails

2011-01-30 Thread Matej Kurpel
On 30. 1. 2011 10:57, Nelson B Bolyard wrote: On 2011-01-29 06:41 PDT, Matej Kurpel wrote: Hello, as far as I know, Thunderbird sends encrypted e-mails as an attachment named smime.p7m. Can anybody let me briefly know what this file contains? Yes, it contains a message in the Cryptographic

S/MIME encrypted e-mails

2011-01-29 Thread Matej Kurpel
Hello, as far as I know, Thunderbird sends encrypted e-mails as an attachment named smime.p7m. Can anybody let me briefly know what this file contains? I know this from previous e-mail conversation from this mailing list: The sender generates an ephemeral 3-DES key one for each receiver,

Re: Unable to add module, but why?

2011-01-24 Thread Matej Kurpel
On 25. 1. 2011 1:17, Daniel Veditz wrote: Forwarding question to the mozilla.dev.tech.crypto group. Is this a module you're creating yourself, or one you know works fine with Firefox for other people? On 1/21/11 6:21 PM, Lbm wrote: Hi, first of all I hope I'm posting this question in the

Re: NSS SoftToken Capabilities

2011-01-05 Thread Matej Kurpel
On 5. 1. 2011 21:33, Anders Rundgren wrote: Matej Kurpel wrote: On 4. 1. 2011 22:23, Robert Relyea wrote: On 01/03/2011 01:04 PM, Anders Rundgren wrote: Hi, I'm in the starting phase upgrading Firefox so that it can provision credentials in a way that that banks and governments require which

Re: NSS SoftToken Capabilities

2011-01-04 Thread Matej Kurpel
On 4. 1. 2011 22:23, Robert Relyea wrote: On 01/03/2011 01:04 PM, Anders Rundgren wrote: Hi, I'm in the starting phase upgrading Firefox so that it can provision credentials in a way that that banks and governments require which among many things include E2ES (End-to-End Security) and issuer-

Re: Thunderbird crashing when C_SignInit returns other than CKR_OK

2010-12-27 Thread Matej Kurpel
On 21. 12. 2010 15:35, Marsh Ray wrote: On 12/21/2010 06:44 AM, Matej Kurpel wrote: How can I check if I am doing something bad to the heap, please? Sadly, I am not so skilled C++ programmer (well, rather a noobish one) and I mostly don't know about the inside stuff you were talking about here

Re: Thunderbird crashing when C_SignInit returns other than CKR_OK

2010-12-27 Thread Matej Kurpel
On 27. 12. 2010 18:15, Nelson B Bolyard wrote: On 2010-12-27 01:44 PDT, Matej Kurpel wrote: If I only was able to load the source code of Thunderbird in Visual Studio, that would be great. I could debug it line-by-line as usual. You can. Download and unpack the sources from ftp

Re: Thunderbird crashing when C_SignInit returns other than CKR_OK

2010-12-21 Thread Matej Kurpel
On 19. 12. 2010 9:27, Nelson Bolyard wrote: On 2010-12-16 19:21 PDT, Marsh Ray wrote: On 12/16/2010 04:39 PM, Matej Kurpel wrote: ChildEBP RetAddr Args to Child 0015f130 5fa0c52b e06d7363 0001 0003 KERNELBASE!RaiseException+0x58 (FPO: [Non-Fpo]) 0015f168 5fa14f13 0015f178 5fa7aa24

Re: Thunderbird crashing when C_SignInit returns other than CKR_OK

2010-12-16 Thread Matej Kurpel
On 16. 12. 2010 14:02, Nelson Bolyard wrote: On 2010-12-11 11:57 PDT, Matej Kurpel wrote: Ah, that's because I tried CKR_FUNCTION_NOT_SUPPORTED then and copied the wrong pkcs log. But that's not really the point since it crashes everytime, no matter which CKR_ return code I use (apart from

Re: Thunderbird crashing when C_SignInit returns other than CKR_OK

2010-12-16 Thread Matej Kurpel
On 16. 12. 2010 21:59, Marsh Ray wrote: On 12/16/2010 01:02 PM, Matej Kurpel wrote: (164c.1560): C++ EH exception - code e06d7363 (first chance) Nelson may know more specifics, but if I were you I would configure the debugger to break when C++ exceptions are thrown. (Debug menu - Event

Re: Thunderbird crashing when C_SignInit returns other than CKR_OK

2010-12-11 Thread Matej Kurpel
On 11. 12. 2010 19:05, Nelson B Bolyard wrote: Matej, Your message contains an obvious self-contradiction. Observe: On 2010-12-10 09:57 PDT, Matej Kurpel wrote: CK_RV CK_ENTRY C_SignInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism, CK_OBJECT_HANDLE hKey) { return

Thunderbird crashing when C_SignInit returns other than CKR_OK

2010-12-10 Thread Matej Kurpel
Hello, I am implementing a PKCS#11 module. I would like to implement authentication on my device (using a pin-pad) everytime a signature is requested from it. The idea is that on C_SignInit, I ask the user for the PIN and if the PIN is incorrect (or user has cancelled for whatever reason),

Re: Certificate login in Firefox - how does it work?

2010-11-28 Thread Matej Kurpel
On 26. 11. 2010 22:20, ryan-mozdevtechcry...@sleevi.com wrote: -Original Message- Sent: Friday, November 26, 2010 3:16 PM To: mozilla's crypto code discussion list Subject: Certificate login in Firefox - how does it work? Hello, I am developing a PKCS#11 module and currently I am having

Re: Certificate login in Firefox - how does it work?

2010-11-28 Thread Matej Kurpel
On 28. 11. 2010 17:24, Matej Kurpel wrote: On 26. 11. 2010 22:20, ryan-mozdevtechcry...@sleevi.com wrote: -Original Message- Sent: Friday, November 26, 2010 3:16 PM To: mozilla's crypto code discussion list Subject: Certificate login in Firefox - how does it work? Hello, I am

Certificate login in Firefox - how does it work?

2010-11-26 Thread Matej Kurpel
Hello, I am developing a PKCS#11 module and currently I am having problems getting the certificate login working in Firefox. I load a page, click on login button and then Firefox starts communicating with my PKCS#11 module (the page wants its users to log in using their certificates). It lets

Re: Firefox forgets to C_CloseAllSessions and C_Finalize when closing it

2010-11-20 Thread Matej Kurpel
On 16. 11. 2010 14:53, Matej Kurpel wrote: Hello, I am implementing a PKCS#11 module and have just implemented C_GenerateKeyPair. For this purpose, I have set up a html page with the keygen tag which sends the form data to my php script to write back to me what was sent. Now, everything works

C_Initialize CKR_CRYPTOKI_ALREADY_INITIALIZED

2010-11-14 Thread Matej Kurpel
Hello, I am developing a PKCS#11 module and stumbled upon a confusion as how to manage multiple applications calling Cryptoki calls. I can't seem to get an answer by reading the PKCS#11 specification, nor by googling, so I am asking you :) Currently, I have a boolean flag indicating whether

Thunderbird can decrypt without private key?

2010-11-10 Thread Matej Kurpel
Hello, I am implementing a PKCS#11 module for Thunderbird and I have stuck upon a weird behavior of Thunderbird. Let me explain: For the purposes of testing, I have created a second gmail account. I have also generated the keys and certificate for this account but only imported its certificate

Thunderbird UnwrapKey on message decryption?

2010-11-01 Thread Matej Kurpel
Hello, I am implementing a PKCS#11 module. Today I tried to send encrypted e-mail to my second gmail account, and it works perfectly (in fact, nothing is needed from my token to support this). However, when the message arrives and I try to read it, Thunderbird calls C_UnwrapKey (which, of

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: Could not verify this certificate for unknown reasons]

2010-10-29 Thread Matej Kurpel
On 29. 10. 2010 14:11, Nelson B Bolyard wrote: On 2010/10/28 02:14 PDT, Jean-Marc Desperrier wrote: Nelson B Bolyard wrote: Please don't file a bug without a stack trace showing the crash is in NSS. [...] If the back trace shows the crash is not in NSS, but in some other library, please direct

pk11util

2010-10-29 Thread Matej Kurpel
Hello, I would like to get my hands on pk11util to check my PKCS#11 module for conformance to said standard (my search on the net yielded that pk11util is suitable for this purpose). However, the precompiled NSS for windows does not contain this utility. I have tried to compile it myself (yes,

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: Could not verify this certificate for unknown reasons]

2010-10-26 Thread Matej Kurpel
On 26. 10. 2010 10:43, Jean-Marc Desperrier wrote: Matej Kurpel wrote: In the Type field for S:, O:, OU: and CN: I always provided 0x0c which is utf-8 string, but in the certificate there was 0x13 - printable string. After I changed it - voila, it's working in Thunderbird, and certutil doesn't

Re: Thunderbird: Could not verify this certificate for unknown reasons

2010-10-25 Thread Matej Kurpel
On 24. 10. 2010 20:59, Nelson B Bolyard wrote: On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] You can clearly see both my CA and user certificates. Certutil has used my PKCS#11 module to obtain my user certificate. Then I launched the second commany you were suggesting: certutil -d . -L

Re: Thunderbird: Could not verify this certificate for unknown reasons

2010-10-25 Thread Matej Kurpel
On 25. 10. 2010 12:16, Matej Kurpel wrote: On 24. 10. 2010 20:59, Nelson B Bolyard wrote: On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] You can clearly see both my CA and user certificates. Certutil has used my PKCS#11 module to obtain my user certificate. Then I launched the second

Re: Thunderbird: Could not verify this certificate for unknown reasons

2010-10-24 Thread Matej Kurpel
On 23. 10. 2010 22:18, Nelson B Bolyard wrote: On 2010-10-21 13:31 PDT, Matej Kurpel wrote: This looks like Thunderbird cannot find the user certificate in its database. Well, it shouldn't anyway, since it resides on the token provided by a PKCS#11 module I am developing. Right. It's

Re: Thunderbird: Could not verify this certificate for unknown reasons

2010-10-21 Thread Matej Kurpel
On 20. 10. 2010 21:01, Nelson B Bolyard wrote: On 2010-10-20 09:54 PDT, Matej Kurpel wrote: Hello, I have set up my own CA and issued one certificate signed by this CA. However, I cannot use this certificate to send signed e-mail from Thunderbird. It says Could not verify this certificate

Thunderbird: Could not verify this certificate for unknown reasons

2010-10-20 Thread Matej Kurpel
Hello, I have set up my own CA and issued one certificate signed by this CA. However, I cannot use this certificate to send signed e-mail from Thunderbird. It says Could not verify this certificate for unknown reasons. I don't understand; I have added the root CA certificate into the

Re: PKCS#11: C_Sign provides invalid signature

2010-10-16 Thread Matej Kurpel
On 16. 10. 2010 18:33, Nelson B Bolyard wrote: On 2010-10-16 06:25 PDT, Matej Kurpel wrote: Hello, I am developing a PKCS#11 module to be used with Thunderbird. However, I have trouble providing a valid signature for e-mails. The mechanism used is CKM_RSA_PKCS and I have a 1024bit private

Re: NSS and PKCS#11 Certificate+Private key

2010-10-10 Thread Matej Kurpel
On 9. 10. 2010 14:44, Matej Kurpel wrote: Hello, I am developing a PKCS#11 module for my diploma thesis and I am having problems with Thunderbird not recognizing my certificate for signing. When I want to set it for signing using the Security tab of Account settings (by clicking Select

Re: NSS and PKCS#11 Certificate+Private key

2010-10-10 Thread Matej Kurpel
On 10. 10. 2010 14:41, Matej Kurpel wrote: On 9. 10. 2010 14:44, Matej Kurpel wrote: Hello, I am developing a PKCS#11 module for my diploma thesis and I am having problems with Thunderbird not recognizing my certificate for signing. When I want to set it for signing using the Security tab

NSS and PKCS#11 Certificate+Private key

2010-10-09 Thread Matej Kurpel
where is the problem?... I am attaching my opensc-spy log with unneccessary info stripped out. Thanks in advance for any clues. Matej Kurpel --- SPY LOG BEGIN 9: C_OpenSession [in] slotID = 0x0 [in] flags = 0x4 pApplication=067E3000 Notify

Re: 64bit NSS build on windows 7 x64

2010-09-16 Thread Matej Kurpel
On 16. 9. 2010 15:28, David Stutzman wrote: configure: error: installation or configuration problem: C compiler cannot creat e executables. Just guessing here... could this be a problem with UAC? (User Account Control) M. Kurpel -- dev-tech-crypto mailing list

Re: PKCS#11 module: C_GetAttributeValue problems

2010-08-13 Thread Matej Kurpel
Dňa 13. 8. 2010 18:35, Robert Relyea wrote / napísal(a): On 08/13/2010 05:37 AM, Konstantin Andreev wrote: On 08/13/10 04:44, Robert Relyea wrote: On Wed, Aug 11, 2010 at 1:18 PM, Matej Kurpelmkur...@gmail.com wrote: [ ... skip ... ] Later, thunderbird asks for its attributes CKA_TOKEN and

Re: PKCS#11 module: C_GetAttributeValue problems

2010-08-12 Thread Matej Kurpel
Dňa 12. 8. 2010 11:03, Konstantin Andreev wrote / napísal(a): On 08/12/10 00:18, Matej Kurpel wrote: [ ... skip ...] Later, thunderbird asks for its attributes CKA_TOKEN and CKA_LABEL but gives zero-sized buffers for both values. This is where my problem lies - I don't know what to return

PKCS#11 module: C_GetAttributeValue problems

2010-08-11 Thread Matej Kurpel
Hello, I am trying to implement a PKCS#11 module for my diploma thesis. It is intended to be used with thunderbird. I am using opensc pkcs11-spy module to debug it. I have a problem for quite some days I don't seem to be able to solve myself. At first, thunderbird searches for token