Section C Table IV

Table IV. Service Routine to Security Relevant Data Items Matrix

Service	Service Routine	Security Relevant Data Item	Read Access	Write Access
Certificate Storage and Retrieval	AddCertToPermDB()	CERTCertDBHandle	X	X
		CERTCertificate	X	X
		CERTCertTrust	X	X
		certDBEntryCert	X	-
	CERT_ClosePermCertDB()	CERTCertDBHandle	X	X
	SEC_FindPermCertByKey()	CERTCertDBHandle	X	X
		SECItem	X	X
		certDBEntryCert	X	-
	SEC_OpenPermCertDB()	CERTCertDBHandle	X	X
		SECStatus	X	-
	SEC_DeletePermCertificate()	CERTCertDBHandle	X	X
		CERTCertificate	X	X
		SECStatus	X	-
	SEC_TraversePermCerts()	CERTCertDBHandle	X	X
		SECStatus	X	-
Digital Signatures	DSA_SignDigest()	DSAPrivateKey	X	-
		SECStatus	X	-
	DSA_VerifyDigest()	DSAPublicKey	X	-
		SECStatus	X	-
	RSA_Sign()	SECKEYLowPrivateKey	X	-
		SECStatus	X	-
	RSA_CheckSign()	SECKEYLowPublicKey	X	-
		SECStatus	X	-
	RSA_CheckSignRecover()	SECKEYLowPublicKey	X	-
		SECStatus	X	-
	RSA_SignRaw()	SECKEYLowPrivateKey	X	-
		SECStatus	X	-
	RSA_CheckSignRaw()	SECKEYLowPublicKey	X	-
		SECStatus	X	-
	RSA_CheckSignRecoverRaw()	SECKEYLowPublicKey	X	-
		SECStatus	X	-
Encryption/ Decryption	DES_CreateContext()	DESContext	-	X
	DES_Encrypt()	DESContext	X	X
		SECStatus	X	-
	DES_Decrypt()	DESContext	X	X
		SECStatus	X	-
	DES_DestroyContext()	DESContext	-	X
Hashing	SHA1_NewContext()	SHA1Context	-	X
	SHA1_CloneContext()	SHA1Context	X	-
		SHA1Context	-	X
	SHA1_Begin()	SHA1Context	-	X
	SHA1_Update()	SHA1Context	X	X
	SHA1_End()	SHA1Context	X	X
	SHA1_HashBuf()	SECStatus	X	-
	SHA1_Hash()	SECStatus	X	-
	SHA1_DestroyContext()	SHA1Context	-	X
Key Generation	PQG_ParamGen()	PQGParams	-	X
		PQGVerify	-	X
		SECStatus	X	-
	PQG_ParamGenSeedLen()	PQGParams	-	X
		PQGVerify	-	X
		SECStatus	X	-
	PQG_VerifyParams()	PQGParams	X	-
		PQGVerify	X	-
		SECStatus	X	-
	DSA_NewKey()	PQGParams	X	-
		DSAPrivateKey	-	X
		SECStatus	X	-
	DSA_NewKeyFromSeed()	PQGParams	X	-
		DSAPrivateKey	-	X
		SECStatus	X	-
	RSA_NewKey()	RSAPrivateKey	-	X
	RSA_EncryptBlock()	SECKEYLowPublicKey	X	-
		SECStatus	X	-
	RSA_DecryptBlock()	SECKEYLowPrivateKey	X	-
		SECStatus	X	-
	RSA_EncryptRaw()	SECKEYLowPublicKey	X	-
		SECStatus	X	-
	RSA_DecryptRaw()	SECKEYLowPrivateKey	X	-
		SECStatus	X	-
PKCS #5 Password-Based Encryption	SEC_PKCS5GetSalt()	SECAlgorithmID	X	X
		SECItem	X	-
	SEC_PKCS5GetIV()	SECAlgorithmID	X	X
		SECItem	X	-
	SEC_PKCS5GetKey()	SECAlgorithmID	X	X
		SECItem	X	-
	SEC_PKCS5CipherData()	SECAlgorithmID	X	X
		SECItem	X	X
		SECItem	X	-
	SEC_PKCS5CreateAlgorithmID()	SECOidTag	X	-
		SECItem	X	X
		SECAlgorithmID	-	X
PKCS #12 Personal Information Exchange	SEC_PKCS12CreateExportContext()	SEC_PKCS12ExportContext	X	X
	SEC_PKCS12CreatePasswordPrivSafe()	SEC_PKCS12ExportContext	X	-
	SEC_PKCS12AddCertAndKey()	SEC_PKCS12ExportContext	X	-
		CERTCertificate	X	-
		SECStatus	X	-
	SEC_PKCS12Encode()	SEC_PKCS12ExportContext	X	-
		SECStatus	X	-
	SEC_PKCS12DestroyExportContext()	SEC_PKCS12ExportContext	-	X
	SEC_PKCS12DecoderStart()	SEC_PKCS12DecoderContext	X	X
	SEC_PKCS12DecoderUpdate()	SEC_PKCS12DecoderContext	X	-
		SECStatus	X	-
	SEC_PKCS12DecoderFinish()	SEC_PKCS12DecoderContext	-	X
Prime Number Generation	mpp_make_prime()	mp_int	X	X
		mp_err	X	-
	mpp_pprime()	mp_int	X	-
		mp_err	X	-
Private Key Storage and Retrieval	SECKEY_CloseKeyDB()	SECKEYKeyDBHandle	X	X
	SECKEY_DeleteKey()	SECKEYKeyDBHandle	X	X
		CERTCertificate	X	-
		SECStatus	X	-
	SECKEY_FindKeyByCert()	SECKEYKeyDBHandle	X	X
		CERTCertificate	X	X
		SECKEYLowPrivateKey	X	X
	SECKEY_OpenKeyDB()	SECKEYKeyDBHandle	X	-
	SECKEY_TraversePermKeys()	SECKEYKeyDBHandle	X	X
		SECStatus	X	-
	SECKEY_UpdateKeyDBPass1()	SECKEYKeyDBHandle	X	X
		SECStatus	X	-
	SECKEY_UpdateKeyDBPass2()	SECKEYKeyDBHandle	X	X
		SECItem	X	X
		SECStatus	X	-
Pseudorandom Number Generation	RNG_RNGInit()	SECStatus	X	-
	RNG_GenerateGlobalRandomBytes()	SECStatus	X	-
	RNG_RandomUpdate()	SECStatus	X	-
	RNG_RNGShutdown()	void	-	-
SSL Session ID Cache (Secret Management)	ssl_ChooseSessionIDProcs()	SSLSecurityInfo	X	X
		SSLSessionID	-	X
	SSL_ClearSessionCache()	SSLSessionID	X	X
	ssl_LookupSID()	SSLSessionID	X	X
		SSLSessionID	X	-
	ssl_FreeSID()	SSLSessionID	X	X
		SSLSessionID	-	X
SSL pre-master secrets	pk11_PRF()	const SECItem *secret	X	X