213795 - Add PK11 wrapper functions for AES Key Wrap algorithm

Status: NEW

(NSS :: Libraries, enhancement, P3)

Description

[Tej Arora]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.1) Gecko/20020823 Netscape/7.0
Build Identifier: 

The AES wrap algorithm needs to be done with the entire
buffer in place and not in multiple steps (Init, update, update..., Final).
However, there is no PK11 wrapper exposed to do a one-step Encrypt
or Decrypt.

There is another related problem: CKM_NETSCAPE_AES_KEY_WRAP* is
missing from the switch statement in PK11_GetKeyType.

I'll be attaching a sample program that attempted to do
AES Unwrapping using the multi-step approach (init, update.. , final)
when the problem was dicsovered.



Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Tej Arora]

Attachment: sample program attempting AES unwrap

sample program attempting AES unwrap

Comment 2

[Wan-Teh Chang]

Assigned the bug to Nelson.

Nelson, are these the "to do" items you described
in bug 167818 comment 5 and bug 167818 comment 6?

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

Yes, this RFE is the one to which I referred in bug 167818 comment 6

Comment 4

[Nelson Bolyard (seldom reads bugmail)]

This is a feature that no-one seems to really want/need.   ->  P3