AES-KW can only wrap a JWK key if its serialization happens to be 8*n bytes long from Alexey Proskuryakov on 2014-01-31 (public-webcrypto@w3.org from January 2014)

From: Alexey Proskuryakov <ap@webkit.org>
Date: Fri, 31 Jan 2014 12:25:23 -0800
To: public-webcrypto@w3.org
Message-id: <E349FCD5-4B5B-45B7-8646-4CF460D892AE@webkit.org>

Hi,

I think that there are some omissions in how wrapping a JWK key should work. AES-KW in particular requires that input is 8*n bytes long, which is of course not guaranteed with JWK serialization.

Filed <https://www.w3.org/Bugs/Public/show_bug.cgi?id=24457>, my proposal is to pad JWK with spaces for AES-KW. Not sure if any other algorithms are similarly affected.

- WBR, Alexey Proskuryakov

Received on Friday, 31 January 2014 20:26:01 UTC