1846723 - SecretDecoderRing (SDR) should use AES

Status: NEW

(Core :: Security: PSM, enhancement, P3)

Description

[Kai Engert [:KaiE:]]

As of today nsISecretDecoderRing uses triple-DES.
I suggest to switch it to use AES by default when encrypting.

That will require that the NSS database contains another symmetric key of type AES.

(I don't know yet if there will be any adjustments necessary for the primary password, for handling both the legacy triple-DES and the new AES key.)

I think the decryption code should be able to handle data encrypted with any algorithm, as explained in bug 198090.

I wonder if we should add another Encrypt API function call, that allows explicitly specifying which algo to use. At least for development/testing it would be helpful.

Comment 1

[Kai Engert [:KaiE:]]

Attachment: WIP: Bug 1846723 - Extend nsISecretDecoderRing to support encryption with AES.

Comment 2

[Kai Engert [:KaiE:]]

Code to experiment using the JS console:

let sdr=Cc["@mozilla.org/security/sdr;1"].getService(Ci.nsISecretDecoderRing);
sdr.encryptString("a");
sdr.encryptStringAES("a");