1889153 - EdDSA WebCrypto Improvements

Status: ASSIGNED

(NSS :: Libraries, enhancement, P2)

Description

[Anna Weine]

Tracking implementation of EdDSA.

Comment 1

[Anna Weine]

Attachment: Bug 1804788 - Ed25519 Enchancement Part III: check if R has a small order or non-canonical

https://github.com/web-platform-tests/wpt/blob/master/WebCryptoAPI/sign_verify/eddsa_vectors.js#L111

Comment 2

[Anna Weine]

Attachment: Bug 1804788 - ED25519 verification enchancement Part II: Checking pk for small order

Comment 3

[Anna Weine]

Attachment: Bug 1804788 - Ed25519 enchancement. Part I: Implementing correctness check of Ed25519 public key (pk == privateKey * bP)

https://wpt.fyi/results/WebCryptoAPI/import_export/okp_importKey_failures_Ed25519.https.any.html?label=experimental&label=master&aligned

Invalid key pair: importKey(jwk(private), {name: Ed25519}, true, [sign]) checks that the public key corresponds to the private key.

Comment 4

[Anna Weine]

Important.

These bugs are aimed in improving the Ed25519 security for WebCrypto.

We still do not pass the test 3 (Ed25519 Verification checks with small-order key of order) from https://wpt.fyi/results/WebCryptoAPI/sign_verify/eddsa.https.any.html?label=experimental&label=master&aligned.

Comment 5

[Phabricator Automation]

Comment on attachment 9394543 [details]
Bug 1804788 - Ed25519 enchancement. Part I: Implementing correctness check of Ed25519 public key (pk == privateKey * bP)

Revision D205933 was moved to bug 1804788. Setting attachment 9394543 [details] to obsolete.