This change loads opencryptoki and uses the TPM for keygen tags.

base/nss_util.h

Index: base/nss_util.h
diff --git a/base/nss_util.h b/base/nss_util.h
index 5502b08f5b25f3ff35bf5008c9975265b81601c1..466787fd366fb73d1002e3cfbce9fe9eeb49648b 100644
--- a/base/nss_util.h
+++ b/base/nss_util.h
@@ -6,6 +6,7 @@
 #define BASE_NSS_UTIL_H_
 #pragma once
 
+#include <string>
 #include "base/basictypes.h"
 
 #if defined(USE_NSS)
@@ -72,6 +73,9 @@ bool CheckNSSVersion(const char* version);
 #if defined(OS_CHROMEOS)
 // Open the r/w nssdb that's stored inside the user's encrypted home directory.
 void OpenPersistentNSSDB();
+
+// Get name for the built-in TPM token on ChromeOS.
+std::string GetTPMTokenName();
 #endif
 
 // Convert a NSS PRTime value into a base::Time object.