233705 2021-12-01 08:12:31 -0800 PKCS8 EC private keys without the public key component cannot be imported with SubtleCrypto.importKey 2026-03-06 05:05:29 -0800 1 1 1 Unclassified WebKit WebKit Misc. Other All All NEW InRadar P2 Normal --- 1 panva.ip webkit-unassigned ahmad.saleem792 bfulgham davertay karlcow katherine_cheney pranjal.jain webkit-bug-importer oldest_to_newest 1819245 0 panva.ip 2021-12-01 08:12:31 -0800 Steps to reproduce: // PKCS8 representation of a private P-384 EC key with the public key omitted const pkcs8 = new Uint8Array([48, 78, 2, 1, 0, 48, 16, 6, 7, 42, 134, 72, 206, 61, 2, 1, 6, 5, 43, 129, 4, 0, 34, 4, 55, 48, 53, 2, 1, 1, 4, 48, 32, 52, 118, 9, 96, 116, 119, 172, 168, 251, 251, 197, 230, 33, 132, 85, 243, 25, 150, 105, 121, 46, 248, 180, 102, 250, 168, 123, 220, 103, 121, 129, 68, 200, 72, 221, 3, 102, 30, 237, 90, 198, 36, 97, 52, 12, 234, 150]) crypto.subtle.importKey('pkcs8', pkcs8, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['sign']) Actual result: importKey is rejected with DataError: Data provided to an operation does not meet requirements Expected result: EC private key PKCS8 without the public key component should import as in other browsers and Web Cryptography API implementations (we expect interoperability in this regard) 1821563 1 webkit-bug-importer 2021-12-08 08:13:44 -0800 <rdar://problem/86211792> 2020064 2 ahmad.saleem792 2024-03-11 05:33:11 -0700 Using this in console for all browsers, I get similar error; const pkcs8 = new Uint8Array([48, 78, 2, 1, 0, 48, 16, 6, 7, 42, 134, 72, 206, 61, 2, 1, 6, 5, 43, 129, 4, 0, 34, 4, 55, 48, 53, 2, 1, 1, 4, 48, 32, 52, 118, 9, 96, 116, 119, 172, 168, 251, 251, 197, 230, 33, 132, 85, 243, 25, 150, 105, 121, 46, 248, 180, 102, 250, 168, 123, 220, 103, 121, 129, 68, 200, 72, 221, 3, 102, 30, 237, 90, 198, 36, 97, 52, 12, 234, 150]) crypto.subtle.importKey('pkcs8', pkcs8, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['sign']) ___ Safari 17.4, Chrome Canary 124 and Firefox Nightly 125. 2020067 3 ahmad.saleem792 2024-03-11 05:38:58 -0700 Actually I might have copied code wrong in Chrome: const pkcs8 = new Uint8Array([48, 78, 2, 1, 0, 48, 16, 6, 7, 42, 134, 72, 206, 61, 2, 1, 6, 5, 43, 129, 4, 0, 34, 4, 55, 48, 53, 2, 1, 1, 4, 48, 32, 52, 118, 9, 96, 116, 119, 172, 168, 251, 251, 197, 230, 33, 132, 85, 243, 25, 150, 105, 121, 46, 248, 180, 102, 250, 168, 123, 220, 103, 121, 129, 68, 200, 72, 221, 3, 102, 30, 237, 90, 198, 36, 97, 52, 12, 234, 150]) crypto.subtle.importKey('pkcs8', pkcs8, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['sign']) __ It shows `Promise <pending>`. 2143805 4 davertay 2025-09-17 16:31:24 -0700 Confirming that an EC private key PKCS8 without the public key fails to import in this manner. And I have further found that if the a private key payload (RFC5915) does contain the public key, but also contains a `parameters` field then this too will fail to import. For things to work, the inner EC Private Key needs to both include the public key and omit the parameters. 2187755 5 pranjal.jain 2026-03-06 05:00:07 -0800 *** Bug 309347 has been marked as a duplicate of this bug. *** 2187758 6 pranjal.jain 2026-03-06 05:05:29 -0800 Is nobody going to fix this issue?