Bug 124472 - RSASSA-PKCS1-v1_5 JWK import doesn't check key size
Summary: RSASSA-PKCS1-v1_5 JWK import doesn't check key size
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Alexey Proskuryakov
Depends on:
Blocks: 122679
  Show dependency treegraph
Reported: 2013-11-17 15:56 PST by Alexey Proskuryakov
Modified: 2013-11-17 17:16 PST (History)
1 user (show)

See Also:

proposed patch (8.76 KB, patch)
2013-11-17 16:02 PST, Alexey Proskuryakov
sam: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Alexey Proskuryakov 2013-11-17 15:56:09 PST
JWA spec says that a key of size 2048 bits or larger MUST be used with "RS256", "RS384", and "RS512" algorithms.
Comment 1 Alexey Proskuryakov 2013-11-17 16:02:17 PST
Created attachment 217158 [details]
proposed patch
Comment 2 Alexey Proskuryakov 2013-11-17 17:16:45 PST
Committed <http://trac.webkit.org/r159393>.