canmove, Confirmed users
937
edits
VE 07KeyMgmt: Difference between revisions
→Key Entry and Output Methods
| Line 104: | Line 104: | ||
<div class=note>'''Note:''' If the AES or Triple DES key is derived from a password, the encrypted secret or private key is considered to be in plaintext form because password-based encryption is not FIPS Approved.</div> | <div class=note>'''Note:''' If the AES or Triple DES key is derived from a password, the encrypted secret or private key is considered to be in plaintext form because password-based encryption is not FIPS Approved.</div> | ||
In the FIPS Approved mode of operation, secret | In the FIPS Approved mode of operation, secret keys, private keys, and TLS premaster secret may be established using automated methods (e.g., key transport protocols such as Key Wrapping using RSA keys). These keys can only be entered into or output from the NSS cryptographic module in encrypted form (using <code>FC_UnwrapKey</code> and <code>FC_WrapKey</code>). | ||
=Random Number Generator= | =Random Number Generator= | ||