260469 2023-08-21 08:46:36 -0700 [WebCrypto] We lack a check for the Ed25519 priv/pub key pair during the JWK import 2023-09-08 01:44:42 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 245778 1 jfernandez jfernandez webkit-bug-importer oldest_to_newest 1972385 0 jfernandez 2023-08-21 08:46:36 -0700 When importing an Ed25519 key pair in JWK format we need to ensure that the value in the 'x' and 'd' keys correspond valid key pair. We need to ensure that the public key generated from the value got from the 'd' key matches the value imported from the 'x' value. It's worth mentioning that the Web Cryptography API spec doesn't describes explicitly such test, but I think it's implied by the need of ensure the integrity of the import of key pairs in the JWK format. Additionally, there are Web Platform Tests that fail due t the lack of this check in WebKit's implementation of the Ed25519 algorithm. 1972387 1 jfernandez 2023-08-21 09:01:28 -0700 Pull request: https://github.com/WebKit/WebKit/pull/16888 1972969 2 ews-feeder 2023-08-23 07:26:38 -0700 Committed 267184@main (8c9a448b18a4): <https://commits.webkit.org/267184@main> Reviewed commits have been landed. Closing PR #16888 and removing active labels. 1972970 3 webkit-bug-importer 2023-08-23 07:27:14 -0700 <rdar://problem/114322427>