2018000 - CKA_SEED missing from isPrivate in the database.

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P3)

Description

[Robert Relyea]

CKA_SEED is missing from 'isPrivate', which will cause the CKA_SEED value to become invalid if we try to change the password because it won't get updated. This will only affect exporting an ml_dsa private key (where it will loose the seed value on export), since the key only needs CKA_VALUE internally.

Comment 1

[Robert Relyea]

Attachment: Bug 2018000 CKA_SEED missing from isPrivate in the database.

CKA_SEED is missing from 'isPrivate', which will cause the CKA_SEED value to become invalid if we try to change the password because it won't get updated. This will only affect exporting an ml_dsa private key (where it will loose the seed value on export), since the key only needs CKA_VALUE internally.

Comment 2

[Anna Weine]

Mmm, was not this bug already in bugzilla?

Comment 3

[Robert Relyea]

Yes, turns out the main issue was already fixed in bug 1981034. There was one part that wasn't (the deleting of the hmac signature when deleting the object). I missed that the first part was fixed because the value was added to the array at a different point than downstream, but the auto bot caught it.

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/projects/nss/rev/a8308e2566f7
CKA_SEED missing from isPrivate in the database.