ModuleInterfaces: Difference between revisions

ModuleInterfaces (view source)

122 bytes added , 17 May 2006

m

198

edits

@@ Line 27: / Line 27: @@
 === PKCS #11===
-This defines NSS's PKCS#11 (Cryptoki) implementation. The API itself is considered to "define" the cryptographic boundary, thus all implementation is considered below the boundary.
+This defines NSS's PKCS#11 (Cryptoki) implementation. The API itself is considered to define the top edge of the cryptographic boundary, i.e., all application and upper level library access to the FIPS module is through this API.
-Also included in this module is the FIPS PKCS#11 token. This is a Cryptoki token designed specifically for FIPS, and allows applications using NSS to operate in a strictly FIPS-mode.
+Also included in this module is the FIPS PKCS#11 token and the crypto algorithm support library called freebl. The FIPS PKCS#11 token is a Cryptoki token designed specifically for FIPS, and allows applications using NSS to operate in a strictly FIPS-mode.
 === CRMF===