Algorithm support - "Native" versus "Polyfilled"

The Web Crypto API doesn't rely on a provider concept like most other cryptographic APIs do.

A provider only supports a specific set of algorithms and it is usually impossible to expand the set without exporting the key material in clear.

Let's say that you want to do a ECDH operation with a specific KDF and the provider doesn't support the KDF you want to use.  AFAICT you are stuck unless the provider also supports "raw" ECDH which allows polyfilling of the missing KDF.

I don't quite understand how the Web Crypto API deals with this issue.

Anders

Received on Tuesday, 4 December 2012 07:33:30 UTC