NEW312081
Support algorithm -8 (Ed25519) and -257 (RS256) in AuthenticatorAttestationResponse.getPublicKey() 
https://bugs.webkit.org/show_bug.cgi?id=312081
Summary Support algorithm -8 (Ed25519) and -257 (RS256) in AuthenticatorAttestationRe...
pilcrow
Reported 2026-04-12 00:02:37 PDT
The level 2 spec of the Web Authentication API (https://www.w3.org/TR/webauthn-2/) states that user agents MUST be able to return a non-null value for getPublicKey() when the public key has the algorithm -7 (ES256), -8 (Ed25519), or -257 (RS256). https://www.w3.org/TR/webauthn-2/#sctn-public-key-easy However, the latest version of WebKit only supports algorithm -7 (ES256). While RSA isn't common, Ed25519 is already supported by various external security keys like the YubiKey series 5.
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-04-19 00:03:11 PDT
<rdar://problem/175102806>
Note You need to log in before you can comment on or make changes to this bug.