You are currently viewing a snapshot of www.mozilla.org taken on April 21, 2008. Most of this content is highly out of date (some pages haven't been updated since the project began in 1998) and exists for historical purposes only. If there are any pages on this archive site that you think should be added back to www.mozilla.org, please file a bug.



Open Source PKI Projects


What's New

17 November 2006
NSS 3.11.4 is now available. This release is the version that we submitted to NIST for FIPS 140-2 validation.
21 May 2003
JSS 3.4 is now available. This release includes support for RC2/CBC/PKCS5Padding and several bug fixes.
29 January 2003
NSS 3.7.1 is now available. This release includes several bug fixes.
31 December 2002
JSS 3.3 is now available. This release provides more support for algorithms in the Java Cryptography Architecture (JCA) and Java Cryptography Extension (JCE). It also has a new implementation of SecretDecoderRing and supports the AES algorithm.
20 December 2002
NSS 3.7 is now available. This release uses a new version of the NSS certificate database that supports large CRLs and multiple email addresses for the subject of a certificate.
4 December 2002
NSS 3.6.1 is now available. This release includes several bug fixes.
18 October 2002
NSS 3.6 is now available. This release includes several performance enhancements in certificate lookup and listing, certificate verification, CRL handling, ASN.1 DER decoding, and SSL. It also has a new PKCS #11 session logging facility.
14 August 2002
JSS 3.2 is now available. This release contains a JCA provider that supports algorithms in the Java Cryptography Architecture (JCA) and Java Cryptography Extension (JCE).
1 July 2002
NSS 3.5 is now available. This release is an interim release created for Mozilla 1.0.1 and Netscape 7.
10 June 2002
NSS 3.4.2 is now available. This release includes several bug fixes.
6 May 2002
NSS 3.4.1 is now available. This release includes several bug fixes.
6 May 2002
NSS 3.4 is now available. This release has several new SSL functions, a new SSL server session cache implementation, and six new AES TLS ciphersuites. It also contains a partial implementation of the NSS 4.0 (code name Stan) functions.
12 December 2001
NSS 3.3.2 is now available.  This release includes several bug fixes.
12 November 2001
JSS 3.1.1 is now available.  This release includes several bug fixes.
9 November 2001
NSS 3.3.1 is now available.  This release includes several bug fixes.
26 July 2001
NSS 3.3 is now available. This release enables JSS (3.1 or newer) to use NSS shared libraries and implements five new DHE cipher suites for SSL/TLS on the client side (courtesy of Dr. Stephen Henson).
6 April 2001
NSS 3.2.1 is now available. This release includes improved SSL performance, bug fixes, and simplified build instructions.
12 March 2001
JSS 3.0, the first public release of a Java interface for NSS 3.2, is now available.
2 March 2001

archived news.

Projects

Open source PKI projects include:

Network Security Services (NSS)
Libraries designed to support cross-platform development of security-enabled applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Netscape and Sun use NSS to support these standards in a wide range of products, including iPlanet Certificate Management System, Netscape Certificate Management System, iPlanet Web Server, Netscape Enterprise Server, iPlanet Directory Server, Netscape Directory Server, iPlanet Messaging Server, and Netscape Messaging Server. NSS also provides the security foundation for Netscape Communicator.
Network Security Services for Java (JSS)
A Java interface to NSS that supports most of the security standards and encryption technologies supported by NSS. JSS also provides a pure Java interface for ASN.1 types and BER/DER encoding.
Personal Security Manager (PSM)
Libraries and a daemon designed to support cross-platform development of security-enabled client applications. Built on top of NSS, these libraries are currently being used by Netscape for ongoing development of a security module for use with Netscape Communicator 4.7.
PKCS #11 Conformance Testing
Test suites designed to test PKCS #11 implementations.

Download Information

Open Source PKI Goals

  • Improve the quality, scalability, and feature set of security code used to create PKI products.
  • Encourage the development and deployment of PKI-enabled applications and services throughout the industry, including support for PKI features in more open source applications.
  • Improve confidence in security software by encouraging open review of source code.
  • Accelerate the growth of a standards-based security foundation for ecommerce and the Internet.

News & Information

Press releases and other sources of information:

To participate in ongoing technical discussions related to NSS and PSM, tune in to the IRC channel #mozcrypto on the server irc.mozilla.org.

Newsgroup: mozilla.dev.tech.crypto