Does java.security.MessageDigest use the NSS libraries provided by Mozilla?

Hello,

I want to use the Mozilla JSS security software that accesses the NSS libraries.

The problem is that some of the JSS classes have been deprecated in favor of the java JCE classes, for example MessageDigest should be used instead of JSSMessageDigest.

Does java.security.MessageDigest use the NSS libaries?

Thanks in advance.

-ravi

Why does it matter? What's so special about the NSS libraries?

They are FIPS compliant. FIPS is a government regulation.

-ravi

Cryptographic algorithms are standardized - SHA-2 is the same everywhere, as is AES.

There is a FIPS validation which Network Security Services (NSS) has completed for its PKCS#11 module.

I'm just learning about it now, so I don't have all the answers.

Mozilla provides both JSS, a java wrapper to NSS as well as NSS c libraries.

Here's a website that explains JSS:

https://developer.mozilla.org/En/JSS

On this page you will find the following statement:

When NSS is put in FIPS mode, JSS ensures FIPS compliance by ensuring that all cryptographic operations are performed by the NSS cryptographic module.

-ravi

An explanation of FIPS can be found here:

https://developer.mozilla.org/en/NSS/FIPS_Mode_-_an_explanation

-ravi