Make CKM_AES_GCM usable.

mozilla/security/nss/lib/pk11wrap/pk11mech.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /*
  * This file maps various PKCS #11 Mechanisms to related mechanisms, key
  * types, and ASN.1 encodings.
  */
 #include "seccomon.h"
 #include "secmod.h"
 #include "secmodi.h"
@@ skipping 203 matching lines @@
         return CKK_SEED;
     case CKM_CAMELLIA_ECB:
     case CKM_CAMELLIA_CBC:
     case CKM_CAMELLIA_MAC:
     case CKM_CAMELLIA_MAC_GENERAL:
     case CKM_CAMELLIA_CBC_PAD:
     case CKM_CAMELLIA_KEY_GEN:
         return CKK_CAMELLIA;
     case CKM_AES_ECB:
     case CKM_AES_CBC:
+    case CKM_AES_CCM:
+    case CKM_AES_CTR:
+    case CKM_AES_CTS:
+    case CKM_AES_GCM:

[wtc, 2013/03/26 18:24:46]

This function (PK11_GetKeyType) is called by PK11_ImportSymKey().
Without adding these cases to the switch statement, the
imported symmetric key will have the wrong type
(CKK_GENERIC_SECRET) and can't be used with CKM_AES_GCM
later.

I suspect we can work around this bug by padding
CKM_AES_ECB to PK11_ImportSymKey.  Since there are other
problems that can't be worked around, I didn't test this
workaround.

     case CKM_AES_MAC:
     case CKM_AES_MAC_GENERAL:
     case CKM_AES_CBC_PAD:
     case CKM_AES_KEY_GEN:
     case CKM_NETSCAPE_AES_KEY_WRAP:
     case CKM_NETSCAPE_AES_KEY_WRAP_PAD:
         return CKK_AES;
     case CKM_DES_ECB:
     case CKM_DES_CBC:
     case CKM_DES_MAC:
@@ skipping 1629 matching lines @@
     case SEC_OID_MISSI_DSS:
     case SEC_OID_MISSI_DSS_OLD:
     case SEC_OID_MISSI_KEA_DSS_OLD:
     case SEC_OID_BOGUS_DSA_SIGNATURE_WITH_SHA1_DIGEST:
         return SEC_OID_ANSIX9_DSA_SIGNATURE;
     default:
         break;
     }
     return algTag;
 }