With a diff like +PASS Can wrap and unwrap RSA-OAEP private key keys using pkcs8 and AES-KW +PASS Can wrap and unwrap RSA-OAEP private key keys as non-extractable using pkcs8 and AES-KW where I've also seen RSA-PSS instead of RSA-OAEP. That is, these tests sometimes run, and sometimes don't. The tests will run if the following function returns true: function wrappingIsPossible(exportedKey, algorithmName) { if ("byteLength" in exportedKey && algorithmName === "AES-KW") { return exportedKey.byteLength % 8 === 0; } ... I suspect that we don't guarantee that the length is correct (but it might also be something else entirely).
(In reply to Ms2ger from comment #0) > With a diff like > > +PASS Can wrap and unwrap RSA-OAEP private key keys using pkcs8 and AES-KW > +PASS Can wrap and unwrap RSA-OAEP private key keys as non-extractable using > pkcs8 and AES-KW > > where I've also seen RSA-PSS instead of RSA-OAEP. That is, these tests > sometimes run, and sometimes don't. > > The tests will run if the following function returns true: > > function wrappingIsPossible(exportedKey, algorithmName) { > if ("byteLength" in exportedKey && algorithmName === "AES-KW") { > return exportedKey.byteLength % 8 === 0; > } > ... > > I suspect that we don't guarantee that the length is correct (but it might > also be something else entirely). That seems tree. Does this sound the same? https://github.com/w3c/web-platform-tests/pull/6102 I have filed a PR long time ago but no reviewers wish to take any actions or maybe I am missing something to motivate them.
(In reply to Jiewen Tan from comment #1) > (In reply to Ms2ger from comment #0) > > With a diff like > > > > +PASS Can wrap and unwrap RSA-OAEP private key keys using pkcs8 and AES-KW > > +PASS Can wrap and unwrap RSA-OAEP private key keys as non-extractable using > > pkcs8 and AES-KW > > > > where I've also seen RSA-PSS instead of RSA-OAEP. That is, these tests > > sometimes run, and sometimes don't. > > > > The tests will run if the following function returns true: > > > > function wrappingIsPossible(exportedKey, algorithmName) { > > if ("byteLength" in exportedKey && algorithmName === "AES-KW") { > > return exportedKey.byteLength % 8 === 0; > > } > > ... > > > > I suspect that we don't guarantee that the length is correct (but it might > > also be something else entirely). > > That seems tree. > > Does this sound the same? https://github.com/w3c/web-platform-tests/pull/6102 > > I have filed a PR long time ago but no reviewers wish to take any actions or > maybe I am missing something to motivate them. I don't think it's the same, but it seems similar. (If you rebase the PR and ping me there, I can probably merge it.)