canmove, Confirmed users
937
edits
VE 07KeyMgmt: Difference between revisions
→Entity Association Assurance
| Line 79: | Line 79: | ||
Each instance of the NSS cryptographic module is owned by a single operator (the ''module owner''). | Each instance of the NSS cryptographic module is owned by a single operator (the ''module owner''). | ||
By definition, all the secret and private keys in the NSS cryptographic module are associated with the module owner. | |||
The public and private keys are correlated based on their PKCS #11 CKA_ID attribute. The public and private keys in a key pair have the same CKA_ID value. In the NSS cryptographic module, the CKA_ID attribute of a public key or private key is the SHA-1 hash of (a component of) the (associated) public key. | The public and private keys are correlated based on their PKCS #11 CKA_ID attribute. The public and private keys in a key pair have the same CKA_ID value. In the NSS cryptographic module, the CKA_ID attribute of a public key or private key is the SHA-1 hash of (a component of) the (associated) public key. | ||