312081 2026-04-12 00:02:37 -0700 Support algorithm -8 (Ed25519) and -257 (RS256) in AuthenticatorAttestationResponse.getPublicKey() 2026-04-19 00:03:11 -0700 1 1 1 Unclassified WebKit New Bugs Other Unspecified Unspecified NEW InRadar P2 Normal --- 1 pilcrow webkit-unassigned pascoe webkit-bug-importer oldest_to_newest 2199378 0 pilcrow 2026-04-12 00:02:37 -0700 The level 2 spec of the Web Authentication API (https://www.w3.org/TR/webauthn-2/) states that user agents MUST be able to return a non-null value for getPublicKey() when the public key has the algorithm -7 (ES256), -8 (Ed25519), or -257 (RS256). https://www.w3.org/TR/webauthn-2/#sctn-public-key-easy However, the latest version of WebKit only supports algorithm -7 (ES256). While RSA isn't common, Ed25519 is already supported by various external security keys like the YubiKey series 5. 2201938 1 webkit-bug-importer 2026-04-19 00:03:11 -0700 <rdar://problem/175102806>