crypto-ISSUE-48 (jimsch): Does verify fulfill or rejectwhen a MAC/Signature does not verify [Web Cryptography API]

crypto-ISSUE-48 (jimsch): Does verify fulfill or rejectwhen a MAC/Signature does not verify [Web Cryptography API]

http://www.w3.org/2012/webcrypto/track/issues/48

Raised by: Jim Schaad
On product: Web Cryptography API

Raise issue to match mail list discussion so it gets documented.

It is not explicitly stated if verify returns true/false as the result or something else.

The correct answer for decrypt using AE algorithms would be a reject if the tags don't match as the result returned is an ArrayBuffer.

However verify is currently stated to return a boolean and thus false would seem to be an appropriate response.

Received on Monday, 8 July 2013 00:33:03 UTC