Re: Algorithm aliasing and JWK algorithm names

31 ÿíâ. 2014 ã., â 22:03, Jim Schaad <ietf@augustcellars.com> íàïèñàë(à):

> For example, if I import a JWK key that has {“alg”:”RS256”,…} in it, this means that the hash algorithm is, in theory, a fixed value.  However this is not information that is currently defined for the RSA key generation dictionary.  As such the value would not be visible as part of the Key.algorithm since this is defined to return only the generation dictionary elements.

FWIW, WebKit implementation enforces the hash algorithm specified in JWK, and also exposes it as Key.algorithm.hash.

> I am also not sure how an export call is supposed to make the decision between A128GCM and A128GCMKW (unless possibly there is some alias indicator or we drop a hint of using keyusage as a distinguisher) when doing an export using the jwk format.

Agreed that it would be helpful to better align specs in this regard.

You might also find this bug relevant: https://www.w3.org/Bugs/Public/show_bug.cgi?id=24450

- WBR, Alexey Proskuryakov

Received on Saturday, 1 February 2014 18:09:42 UTC