that contains the requested keys to do the crypto operations. As long as

  the application opens an NSS database and properly sets a pin callback. If

  it runs with native NSS, it should be able to use HSMs that provide PKCS #11

  The following example demonstrates a typical NSS application for signing.

  Always keep track of the size of the array you are working with.

  Often, code is more obviously correct when you keep a pointer

  past the last element of the array, and calculate the number of

  that pointer. The alternative, updating a separate variable

  every time when the position is advanced, is usually less

  obviously correct.

  `java.lang.Throwable`, but not from

  `java.lang.Exception`.

  careful programming (e.g., not dividing by zero). Checked

  exception are expected to be caught as they happen (e.g., when

  an input file is unexpectedly missing). Errors are impossible

  It is usually necessary to log errors. Otherwise, no trace of

  the problem might be left anywhere, making it very difficult

  `java.lang.Exception` to log and suppress all

  unexpected exceptions (for example, in a request dispatching

  loop), you should consider switching to

  In any case, classes referring to native resources must be

  declared `final`, and must not be serializeable

  the native side must be controlled carefully. Otherwise, it

  might be possible to create an object with inconsistent native

  state which results in a crash (or worse) when used (or perhaps

  It was introduced in Linux kernel 3.17, but before glibc 2.25 no API wrappers were

  provided. As such one could only use it via the syscall interface

  as `syscall(SYS_getrandom, (void*)dest, (size_t)size, (unsigned int)0)`.

  for the function beingavailable on run-time, and switch to another

  facility if the running kernel does not support this call.

  descriptors, descriptors are reused very quickly. Unless

  descriptor closing and other operations on the same file

  descriptor are synchronized (typically, using a mutex), there

  the wrong file descriptor.

  Sometimes, it is necessary to close a file descriptor

  ----

  +

  [source,xml]

  ----