1238277 - WebCrypto API doesn't support PBKDF2 with PRFs other than SHA-1

Status: RESOLVED FIXED

(Core :: DOM: Security, defect)

Description

[daniel]

Attachment: ff.html

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36

Steps to reproduce:

I start from the example given here :
https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveKey
I correct few typos and add three basic conversion functions.
The test runs correctly on Chrome (47) but fails in Firefox (43.0.1)


Actual results:

The method deriveKey() does'nt exit on the then()
The console gives :
OperationError: The operation failed for an operation-specific reason


Expected results:

Output of the derived key and hex trace for proof

Comment 1

[daniel]

Line 50 of the HTML : just replace "SHA-256" by "SHA-1" and it works.

Comment 2

[Tim Taubert [:ttaubert] (inactive)]

This is going to be fixed after bug 1228410. We first need the NSS 3.22 in mozilla-central to support PRFs other than SHA-1 for PBKDF2. I btw fixed that in bug 554827 a while ago.

Comment 3

[Tim Taubert [:ttaubert] (inactive)]

Bug 1216109 confirms that this is now fixed for Firefox 47.