servo

mirror of https://github.com/servo/servo synced 2026-05-08 16:12:15 +02:00

Files

Kingsley Yung 33443d21aa script: Use hkdf crate for HKDF in WebCrypto (#40650 )

We currently use the crate `aws-lc-rs` for HKDF in the WebCrypto API.
When generating output bytes from the output of HKDF-Expand operation
(OKM, Output Key Material), it enforces the requested output length must
match the length of key type (see error condition of `Okm::fill` at
https://docs.rs/aws-lc-rs/1.14.1/aws_lc_rs/hkdf/struct.Okm.html#method.fill).
However, according to the WebCrypto API specification, user should be
allowed to choose the output length
(https://w3c.github.io/webcrypto/#hkdf-operations-derive-bits). The
restriction from `aws-lc-rs` causes several HKDF-related WPT tests to
fail.

This patch switches to use a more flexible crate `hkdf`
(https://crates.io/crates/hkdf) for implementing HKDF in our WebCrypto
API, and allowing variable length output. This helps to make those
HKDF-related WPT tests pass.

Testing: Pass some WPT tests that were expected to fail.

---------

Signed-off-by: Kingsley Yung <kingsley@kkoyung.dev>

2025-11-15 09:19:11 +00:00

aes_operation.rs

script: Use base64ct instead of base64 in SubtleCrypto (#40334 )

2025-11-03 12:03:20 +00:00

ecdh_operation.rs

script: Correctly parse spki and pkcs8 of ECDH (#40605 )

2025-11-13 09:17:47 +00:00

ecdsa_operation.rs

script: Implement sign operation of ECDSA (#40591 )

2025-11-12 12:33:51 +00:00

ed25519_operation.rs

script: Use base64ct instead of base64 in SubtleCrypto (#40334 )