aspose file tools*
The moose likes Security and the fly likes Does java.security.MessageDigest use the NSS libraries provided by Mozilla? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Soft Skills this week in the Jobs Discussion forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "Does java.security.MessageDigest use the NSS libraries provided by Mozilla?" Watch "Does java.security.MessageDigest use the NSS libraries provided by Mozilla?" New topic
Author

Does java.security.MessageDigest use the NSS libraries provided by Mozilla?

Ravi Danum
Ranch Hand

Joined: Jan 13, 2009
Posts: 104

Hello,

I want to use the Mozilla JSS security software that accesses the NSS libraries.

The problem is that some of the JSS classes have been deprecated in favor of the java JCE classes, for example MessageDigest should be used instead of JSSMessageDigest.

Does java.security.MessageDigest use the NSS libaries?

Thanks in advance.

-ravi


Tim Moores
Rancher

Joined: Sep 21, 2011
Posts: 2408
Why does it matter? What's so special about the NSS libraries?
Ravi Danum
Ranch Hand

Joined: Jan 13, 2009
Posts: 104

They are FIPS compliant. FIPS is a government regulation.

-ravi
Tim Moores
Rancher

Joined: Sep 21, 2011
Posts: 2408
Cryptographic algorithms are standardized - SHA-2 is the same everywhere, as is AES.
Ravi Danum
Ranch Hand

Joined: Jan 13, 2009
Posts: 104


There is a FIPS validation which Network Security Services (NSS) has completed for its PKCS#11 module.

I'm just learning about it now, so I don't have all the answers.

Mozilla provides both JSS, a java wrapper to NSS as well as NSS c libraries.

Here's a website that explains JSS:

https://developer.mozilla.org/En/JSS

On this page you will find the following statement:

When NSS is put in FIPS mode, JSS ensures FIPS compliance by ensuring that all cryptographic operations are performed by the NSS cryptographic module.

-ravi




Ravi Danum
Ranch Hand

Joined: Jan 13, 2009
Posts: 104

An explanation of FIPS can be found here:

https://developer.mozilla.org/en/NSS/FIPS_Mode_-_an_explanation



-ravi
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Does java.security.MessageDigest use the NSS libraries provided by Mozilla?