Use the NSS internal key slot for all temporary key operations

crypto/openpgp_symmetric_encryption.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "crypto/openpgp_symmetric_encryption.h"
 
 #include <stdlib.h>
 
 #include <sechash.h>
 #include <cryptohi.h>
@@ skipping 132 matching lines @@
     done += todo;
   }
 
   HASH_Destroy(hash_context);
 }
 
 // CreateAESContext sets up |out_key| to be an AES context, with the given key,
 // in ECB mode and with no IV.
 bool CreateAESContext(const uint8* key, unsigned key_len,
                       ScopedPK11Context* out_decryption_context) {
-  ScopedPK11Slot slot(PK11_GetBestSlot(CKM_AES_ECB, NULL));
+  ScopedPK11Slot slot(PK11_GetInternalSlot());
   if (!slot.get())
     return false;
   SECItem key_item;
   key_item.type = siBuffer;
   key_item.data = const_cast<uint8*>(key);
   key_item.len = key_len;
   ScopedPK11SymKey pk11_key(PK11_ImportSymKey(
       slot.get(), CKM_AES_ECB, PK11_OriginUnwrap, CKA_ENCRYPT, &key_item,
       NULL));
   if (!pk11_key.get())
@@ skipping 622 matching lines @@
     base::StringPiece plaintext,
     base::StringPiece passphrase) {
   EnsureNSSInit();
 
   Encrypter::ByteString b =
       Encrypter::Encrypt(plaintext, passphrase);
   return std::string(reinterpret_cast<const char*>(b.data()), b.size());
 }
 
 }  // namespace crypto