505401 - Component should expose rewrapKey & verifyPassphrase methods

Status: RESOLVED FIXED

(Firefox :: Sync, defect)

Description

[Anant Narayanan [:anant]]

The WrapPrivateKey and UnwrapPrivate key methods should be scriptable - this helps us re-encrypt a private key with a new passphrase from JS.

Comment 1

[Dan Mills [:thunder]]

Perhaps a rewrap call with the current and new passphrases is better?

Comment 2

[Anant Narayanan [:anant]]

Yes! I think that is the best (or rather, the *only*) way to do this. NSS doesn't seem to allow export of unencrypted private keys :)

Comment 3

[Anant Narayanan [:anant]]

Attachment: Expose rewrapPrivateKey as a scriptable method

This function will do what we want. Unit test included.

Comment 4

[Anant Narayanan [:anant]]

While we're on the topic of changing crypto interfaces, I was thinking it will be nice to have a verifyPassphrase method that takes a key and passphrase and returns a boolean value. This will help us check for correctness of a user's passphrase before having to download the symmetric keys providing faster feedback.

Comment 5

[Anant Narayanan [:anant]]

Attachment: Adds a verifyPassphrase method in addition to rewrapPrivateKey

Unit tests included.

Comment 6

[Dan Mills [:thunder]]

Comment on attachment 389722 [details] [diff] [review]
Adds a verifyPassphrase method in addition to rewrapPrivateKey

r=thunder

Comment 7

[Anant Narayanan [:anant]]

http://hg.mozilla.org/labs/weave/rev/0aacfc2f8708