Bug 124472 - RSASSA-PKCS1-v1_5 JWK import doesn't check key size
Summary: RSASSA-PKCS1-v1_5 JWK import doesn't check key size
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Alexey Proskuryakov
URL:
Keywords:
Depends on:
Blocks: 122679
  Show dependency tree / graph
 
Reported: 2013-11-17 15:56 PST by Alexey Proskuryakov
Modified: 2013-11-17 17:16 PST (History)
1 user (show)

See Also:

Attachments
proposed patch (8.76 KB, patch)
2013-11-17 16:02 PST, Alexey Proskuryakov 		sam: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexey Proskuryakov 2013-11-17 15:56:09 PST 
JWA spec says that a key of size 2048 bits or larger MUST be used with "RS256", "RS384", and "RS512" algorithms.
Comment 1 Alexey Proskuryakov 2013-11-17 16:02:17 PST 
Created attachment 217158 [details]
proposed patch
Comment 2 Alexey Proskuryakov 2013-11-17 17:16:45 PST 
Committed <http://trac.webkit.org/r159393>.