[Bug 27591] New: Must the reflected "publicExponent" for generated RSA keys exactly match input?

https://www.w3.org/Bugs/Public/show_bug.cgi?id=27591

            Bug ID: 27591
           Summary: Must the reflected "publicExponent" for generated RSA
                    keys exactly match input?
           Product: Web Cryptography
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Web Cryptography API Document
          Assignee: sleevi@google.com
          Reporter: ericroman@google.com
                CC: public-webcrypto@w3.org

The Generate key operation for RSASSA-PKCS1-v1_5 says:

7. Set the publicExponent attribute of algorithm to equal the publicExponent
attribute of normalizedAlgorithm.

I am unsure if this implies that publicExponent is a normalized BigInteger or
not.

The section on BigIntegers says that "Values read from the API SHALL have
minimal typed array length"

Does this assignment count as such a "read"?

Example:

If generateKey() is called with publicExponent = 00000000000000010001, an
implementation should be able to reflect key.algorithm.publicExponent as 010001
and not preserve the zeros.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Received on Friday, 12 December 2014 02:56:47 UTC