RE: Commitment request from Mozilla and/or Microsoft

 

 

From: Ryan Sleevi [mailto:sleevi@google.com] 
Sent: Monday, March 28, 2016 12:57 AM
To: Jim Schaad <ietf@augustcellars.com>
Cc: public-webcrypto@w3.org; Ryan Hurst <rmh@google.com>; GALINDO Virginie <Virginie.Galindo@gemalto.com>
Subject: Re: Commitment request from Mozilla and/or Microsoft

 


On Mar 27, 2016 6:59 PM, "Jim Schaad" <ietf@augustcellars.com <mailto:ietf@augustcellars.com> > wrote:
>
> Can we get a commitment from Mozilla and/or Microsoft to implement the
> import and export of private keys using the pkcs8 structure for ECDSA and
> ECDH?
>
> This is the gating factor to keeping the option 1 ASN.1 import/export
> functions as outlined in my previous mail.
>
> As the chair - can you try and get answers for this Virginie?
>
> Jim

Jim,

Is there a reason you focused only on ECDSA and ECDH, rather than RSA (PKCS#1 v1.5, PSS, and OAEP)?

Regardless of scope, the question you pose has been repeatedly asked and left unanswered for several months. I appreciate the new calls for it, but we are precisely in this position because of the multiple unanswered calls in the past, on the list, from the chair, and from other implementors.

Ryan,

Because, as implied in my message above, for the option 1 that I laid out in a previous message they all work.  I believe that I have done a successful import of keys for RSA v1.5, RSA PSS and RSA OAEP using the rsaEncryption OID.  I have successfully done import for ECDSA and ECDH for JWK public, JWK private, and ASN.1 public using ecPublicKey but do not have a success for using ecPublicKey to do private key import.

Jim