RESOLVED FIXED 124472
RSASSA-PKCS1-v1_5 JWK import doesn't check key size
https://bugs.webkit.org/show_bug.cgi?id=124472
Summary RSASSA-PKCS1-v1_5 JWK import doesn't check key size
Alexey Proskuryakov
Reported 2013-11-17 15:56:09 PST
JWA spec says that a key of size 2048 bits or larger MUST be used with "RS256", "RS384", and "RS512" algorithms.
Attachments
proposed patch (8.76 KB, patch)
2013-11-17 16:02 PST, Alexey Proskuryakov
sam: review+
Alexey Proskuryakov
Comment 1 2013-11-17 16:02:17 PST
Created attachment 217158 [details] proposed patch
Alexey Proskuryakov
Comment 2 2013-11-17 17:16:45 PST
Note You need to log in before you can comment on or make changes to this bug.