Bug 125114

Summary: WebCrypto HMAC doesn't check key algorithm's hash
Product: WebKit Reporter: Alexey Proskuryakov <ap>
Component: WebCore Misc.Assignee: Alexey Proskuryakov <ap>
Status: RESOLVED FIXED    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 122679    
Attachments:
Description Flags
proposed fix andersca: review+

Alexey Proskuryakov
Reported 2013-12-02 15:26:12 PST
Seems unlikely that there are any cryptographic consequences here, but for consistency with other operations, HMAC should fail if key and operation algorithms don't match precisely.
Attachments
proposed fix (5.10 KB, patch)
2013-12-02 15:28 PST, Alexey Proskuryakov 		andersca: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1 2013-12-02 15:28:38 PST
Created attachment 218227 [details] proposed fix
Alexey Proskuryakov
Comment 2 2013-12-02 15:40:36 PST
Committed <http://trac.webkit.org/r159975>.
Alexey Proskuryakov
Comment 3 2013-12-03 12:03:13 PST
Corrected test result in <http://trac.webkit.org/r160027>.
Note You need to log in before you can comment on or make changes to this bug.