WebCrypto OAEP specification missing hash algorithm parameter from Mike Jones on 2013-09-28 (public-webcrypto@w3.org from September 2013)

From: Mike Jones <Michael.Jones@microsoft.com>
Date: Sat, 28 Sep 2013 02:22:02 +0000
To: "public-webcrypto@w3.org" <public-webcrypto@w3.org>
Message-ID: <4E1F6AAD24975D4BA5B168042967394371FFD436@TK5EX14MBXC290.redmond.corp.microsoft.>

There is a bug in http://www.w3.org/TR/WebCryptoAPI/#rsa-oaep, in which there isn't a parameter defined for specifying the hash function to be used.  The JWA alg "RSA-OAEP" requires this hash function to be SHA-1 (the default from RFC 3447).  This parameter needs to be added to ensure that the JWA alg can be specified using WebCrypto, as well as to ensure that other hash functions, such as SHA-256, can be specified.

Should I file an issue about this?

                                                            -- Mike

Received on Saturday, 28 September 2013 02:23:07 UTC