Skip to content
This repository has been archived by the owner on Jul 21, 2023. It is now read-only.

Use noble-hashes for pbkdf2, sha, hmac #205

Open
paulmillr opened this issue Oct 23, 2021 · 7 comments · May be fixed by #255
Open

Use noble-hashes for pbkdf2, sha, hmac #205

paulmillr opened this issue Oct 23, 2021 · 7 comments · May be fixed by #255
Labels
P3 Low: Not priority right now

Comments

@paulmillr
Copy link
Contributor

paulmillr commented Oct 23, 2021

Hey, saw #202. I've also made noble-hashes recently, which implements all primitives in very minimal format.

It's going to be audited soon, unlike forge, so you should switch to it.

@hugomrdias
Copy link
Member

Hey @paulmillr I have a stash at least for pbk so I will get there soon enough. But what would be really important for us would be swap out forge for the RSA stuff but web crypto is well .... Do you have any suggestions for libs that can proper RSA sign/verify in the browser ?

@paulmillr
Copy link
Contributor Author

Web crypto has rsa implementation built-in. https://gist.github.com/deiu/2c3208c89fbc91d23226

@dignifiedquire
Copy link
Member

but it is missing PKCS support for encryption, which we need for compatibility reasons

@paulmillr
Copy link
Contributor Author

@dignifiedquire
Copy link
Member

unfortunately yes: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt

supports only OAEP
it supports pkcs for signing only, one of the many unpleasant things about the webcrypto api

@hugomrdias
Copy link
Member

hugomrdias commented Oct 24, 2021 via email

@paulmillr
Copy link
Contributor Author

It's been audited now, see the blog post.

@BigLep BigLep added the P3 Low: Not priority right now label Sep 13, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
P3 Low: Not priority right now
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants