ModuleInterfaces: Difference between revisions

''This is a draft''

== Module Interfaces ==

Interfaces for S/MIME version 3 and PKCS#7 secure mail. Not part of the cryptographic boundary.

Interfaces for Secure Sockets Layer and Transport Layer Security. Not part of the cryptographic boundary.

Used for high-level certificate calls, for example processing the parts of a certificate, and CRL management. Not part of cryptographic boundary.

High-level private/public key calls. Includes retrieving information about the key, such as its strength. Not part of cryptographic boundary.

Provides high-level access to hashing, signature, and verification operations. Not part of cryptographic boundary.

Interface for PKCS #12, Personal Information Storage and Retrieval. Used to allow import/export of certificates and private keys in a secure manner. Below cryptographic boundary.

This defines NSS's PKCS#11 (Cryptoki) implementation. The API itself is considered to "define" the cryptographic boundary, thus all implementation is considered below the boundary.

Also included in this module is the FIPS PKCS#11 token. This is a Cryptoki token designed specifically for FIPS, and allows applications using NSS to operate in a strictly FIPS-mode.

Interfaces for CRMF/CMMF. Not part of cryptographic boundary.

Signed object interface. Not part of cryptographic boundary.