canmove, Confirmed users
937
edits
Rolesandservices: Difference between revisions
Jump to navigation
Jump to search
→Feedback of Authentication Data
| Line 75: | Line 75: | ||
The NSS cryptographic module has four PKCS #11 functions that take passwords as input arguments: | The NSS cryptographic module has four PKCS #11 functions that take passwords as input arguments: | ||
* <code>FC_InitToken</code>: <code>FC_InitToken</code> initializes the token. The <code>pPin</code> argument is the Security Officer's initial password. (The Security Officer in PKCS #11 has a very limited role: to initialize the token and to set the normal user's password. For our module, the | * <code>FC_InitToken</code>: <code>FC_InitToken</code> initializes the token. The <code>pPin</code> argument is the Security Officer's initial password. (The Security Officer in PKCS #11 has a very limited role: to initialize the token and to set the normal user's password. For our module, the Security Officer is roughly equivalent to the crypto officer role.) | ||
* <code>FC_InitPIN</code>: <code>FC_InitPIN</code> initializes the user's password. The <code>pPin</code> argument is the user's initial password. | * <code>FC_InitPIN</code>: <code>FC_InitPIN</code> initializes the user's password. The <code>pPin</code> argument is the user's initial password. | ||
* <code>FC_SetPIN</code>: <code>FC_SetPIN</code> changes the user's password. The <code>pOldPin</code> argument is the user's old password, and the <code>pNewPin</code> argument is the user's new password. | * <code>FC_SetPIN</code>: <code>FC_SetPIN</code> changes the user's password. The <code>pOldPin</code> argument is the user's old password, and the <code>pNewPin</code> argument is the user's new password. | ||