258366 - port PKCS1 v1.5 data encryption funcs from 3.9 branch

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement, P2)

Description

[Nelson Bolyard (seldom reads bugmail)]

This bug was originally filed on Sept 1, 2004 as bugscape bug 57169, 
because buzilla.mozilla.org was down that day.

NSS has two functions that encrypt data with RSA public keys and decrypt data
with private keys.  These functiosn do "raw" RSA, not PKCS1 block formatting.
They were provided to facilitate SSL2, IIRC.  

NSS doesn't provide anything comparable that uses PKCS1 v1.5 block formatting.
NSS's public APIs facilitate PKCS1 RSA for key wrapping/unwrapping, but not
for data en/decryption.  

This has been fixed on the NSS 3.9 branch, with the introduction of two
new functions: PK11_PubEncryptPKCS1 and  PK11_PrivDecryptPKCS1.  See 
http://bonsai.mozilla.org/cvsview2.cgi?diff_mode=context&whitespace_mode=show&root=/cvsroot&subdir=mozilla/security/nss/lib/pk11wrap&command=DIFF_FRAMESET&root=/cvsroot&file=pk11skey.c&rev1=1.84.2.3&rev2=1.84.2.4


This bug requests that those fixes be ported to the trunk.  Note that the 
file names are different on the trunk, because the source has been refactored
there.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Attachment: patch - ported from 3.9 branch

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

Checking in pk11wrap/pk11obj.c;  new revision: 1.2; previous revision: 1.1
Checking in pk11wrap/pk11pub.h;  new revision: 1.2; previous revision: 1.1
Checking in nss/nss.def;         new revision: 1.134; previous revision: 1.133