Bug 125114

Summary: WebCrypto HMAC doesn't check key algorithm's hash
Product: WebKit Reporter: Alexey Proskuryakov <ap>
Component: WebCore Misc.Assignee: Alexey Proskuryakov <ap>
Status: RESOLVED FIXED    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 122679    
Attachments:
Description Flags
proposed fix andersca: review+

Description Alexey Proskuryakov 2013-12-02 15:26:12 PST 
Seems unlikely that there are any cryptographic consequences here, but for consistency with other operations, HMAC should fail if key and operation algorithms don't match precisely.
Comment 1 Alexey Proskuryakov 2013-12-02 15:28:38 PST 
Created attachment 218227 [details]
proposed fix
Comment 2 Alexey Proskuryakov 2013-12-02 15:40:36 PST 
Committed <http://trac.webkit.org/r159975>.
Comment 3 Alexey Proskuryakov 2013-12-03 12:03:13 PST 
Corrected test result in <http://trac.webkit.org/r160027>.