227480 2021-06-29 02:48:49 -0700 [WebCrypto] WebKit accepts elliptic curve key whose point is not on the curve 2021-07-06 02:49:17 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Unspecified Unspecified NEW https://bugs.webkit.org/show_bug.cgi?id=227432 InRadar P2 Normal --- 1 yoshiaki.jitsukawa webkit-unassigned ap cdumez jiewen_tan katherine_cheney webkit-bug-importer oldest_to_newest 1773361 0 yoshiaki.jitsukawa 2021-06-29 02:48:49 -0700 It might be an implementation-defined behavior but WebKit doesn't throw when importing an elliptic curve key whose point (x, y) is not on the curve. For example, on Chrome, a DOM exception is thrown with the following code, while not on Safari: var jwkKey = { kty: "EC", use: "enc", ext: true, crv: "P-384", x: "1bHwFrsaPRjYq-zFOyLXK8Ugv3EqbVF075ct7ouTl_pwyhjeBu03JHjKTsyVbNWK", y: "1bHwFrsaPRjYq-zFOyLXK8Ugv3EqbVF075ct7ouTl_pwyhjeBu03JHjKTsyVbNWK", // (x, y) is not on the P-384 curve // y: "OPQLbvRDpocNk4FRQLUVRBbqiauWcnUn7cAC2uSOH6GpSLoTo6B-4LtHq0ydd-iu", // x and this y is on the curve }; var extractable = true; crypto.subtle.importKey("jwk", jwkKey, { name: "ECDH", namedCurve: "P-384" }, extractable, [ ]).then(function(result) { publicKey = result; }); 1774910 1 webkit-bug-importer 2021-07-06 02:49:17 -0700 <rdar://problem/80201774>