NSS:Roadmap: Difference between revisions

Line 23: Line 23:
=== Enable NSS to Use Tokens That Support ANSI X9.31 RSA Key Pair Generation ===
=== Enable NSS to Use Tokens That Support ANSI X9.31 RSA Key Pair Generation ===


ANSI X9.31 specifies a method to generate RSA public/private key pairs whose p and q values meet strong primes requirements. Some hardware security modules support X9.31 RSA key pair generation.
[http://www.rsasecurity.com/rsalabs/node.asp?id=2306 ANSI X9.31] specifies a method to generate RSA public/private key pairs whose p and q values meet strong primes requirements. Some hardware security modules support X9.31 RSA key pair generation.


We would like to enable one to pass the CKM_RSA_X9_31_KEY_PAIR_GEN mechanism to PK11_GenerateKeyPair. See Bugzilla bug 302219.
We would like to enable one to pass the CKM_RSA_X9_31_KEY_PAIR_GEN mechanism to PK11_GenerateKeyPair. See [https://bugzilla.mozilla.org/show_bug.cgi?id=302219 Bugzilla bug 302219].


=== Hardware Security Module (HSM) Key Generation Fixes ===  
=== Hardware Security Module (HSM) Key Generation Fixes ===  
118

edits