276916 2024-07-22 16:11:22 -0700 [WebCrypto] ECDH and X25519 derive bits should return an empty string when length is zero 2024-10-28 14:37:52 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 282002 282096 1 jfernandez nitinmahendru commit-queue nitinmahendru webkit-bug-importer oldest_to_newest 2047623 0 jfernandez 2024-07-22 16:11:22 -0700 We have reached an important agreement [1] to change the last draft of the WebCrypto API specification to solve a long-term interoperability issue in the deriveBits operation to define the 'length' parameter as optional. In such conversation it's been agreed that a zero value for the 'length' parameter should return an empty string instead of the whole derived key, as currently WebKit does. It's worth mentioning that the current draft already specify such behavior for the ECDH and X25519 algorithms, so WebKit's implementation is not spec-compliant on this regard. [1] https://github.com/w3c/webcrypto/pull/345 2047982 1 jfernandez 2024-07-24 03:40:12 -0700 Pull request: https://github.com/WebKit/WebKit/pull/31146 2049260 2 webkit-bug-importer 2024-07-29 16:12:24 -0700 <rdar://problem/132761687> 2064189 3 jfernandez 2024-09-30 03:53:45 -0700 There is an ongoing discussion [1] to throw an OperatonError exception on any value passed in the 'length' parameter that implies truncating the derivedKey material. So if that's approved, this bug should be changed or closed as invalid. 2064190 4 jfernandez 2024-09-30 03:54:26 -0700 (In reply to Javier Fernandez from comment #3) > There is an ongoing discussion [1] to throw an OperatonError exception on > any value passed in the 'length' parameter that implies truncating the > derivedKey material. > > So if that's approved, this bug should be changed or closed as invalid. [1] https://github.com/w3c/webcrypto/issues/369 2069046 5 ews-feeder 2024-10-18 01:03:20 -0700 Committed 285383@main (0b46039641c2): <https://commits.webkit.org/285383@main> Reviewed commits have been landed. Closing PR #31146 and removing active labels. 2070187 6 commit-queue 2024-10-23 13:45:42 -0700 Re-opened since this is blocked by bug 282002 2070658 7 nitinmahendru 2024-10-25 14:30:42 -0700 Pull request: https://github.com/WebKit/WebKit/pull/35739 2071060 8 ews-feeder 2024-10-28 14:37:49 -0700 Committed 285789@main (f9e55bf363c1): <https://commits.webkit.org/285789@main> Reviewed commits have been landed. Closing PR #35739 and removing active labels.