1050785 - RSA-OAEP encrypt/decrypt should accept strings as AlgorithmIdentifiers

Status: RESOLVED FIXED

(Core :: Security, defect)

Description

[Tim Taubert [:ttaubert] (inactive)]

dictionary RsaOaepParams : Algorithm {
  // The optional label/application data to associate with the message
  CryptoOperationData? label;
};

RsaOaepParams are the only interface that might just carry the algorithm name due to |label| being optional. encrypt() and decrypt() take an AlgorithmIdentifier so given that there are no other required parameters this should work right?

> crypto.subtle.encrypt("RSA-OAEP", pubKey, data);

I'm a little confused because the section about "normalizing an algorithm" [1] talks about returning a KeyAlgorithm in case the given algorithm identifier is a DOMString...

[1] https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#dfn-normalize-an-algorithm

Comment 1

[Tim Taubert [:ttaubert] (inactive)]

Attachment: 0001-Bug-1050785-RSA-OAEP-encrypt-decrypt-should-accept-s.patch

So... in case I got this right, here's a patch.

Comment 2

[Tim Taubert [:ttaubert] (inactive)]

https://hg.mozilla.org/integration/mozilla-inbound/rev/8f65aea3ba06

Comment 3

[Nigel Babu [:nigelb]]

https://hg.mozilla.org/mozilla-central/rev/8f65aea3ba06