Safari WebCrypto API RSA-OAEP 加密

Question

我有以下代码来测试 WebCrypto API。它在 Firefox 和 Chrome 中工作，我正试图让它在 Safari 中工作。

 function ab2str(buf) {
      return String.fromCharCode.apply(null, new Uint16Array(buf));
    }

//converts a forge 0.6.x string of bytes to an ArrayBuffer
function str2ab(str) {
  var b = new ArrayBuffer(str.length);
  var view = new Uint8Array(b);
  for(var i = 0; i < str.length; ++i) {
    view[i] = str.charCodeAt(i);
  }
  return b;
}


function _arrayBufferToBase64( buffer ) {
    var binary = '';
    var bytes = new Uint8Array( buffer );
    var len = bytes.byteLength;
    for (var i = 0; i < len; i++) {
        binary += String.fromCharCode( bytes[ i ] );
    }
    return window.btoa( binary );
}

var pubKey;
var privKey;

var s_pubKey="MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tieEkcDAqAp/baSmNIdg5ezJMcWJX63+hM/DQolgKtw9Dvc0c8GRUqK2r/idZ1iXJzOjWQ3KIFIzmgTRHOKe3aPgJADdZ2vyAqu2woKtsgQ8nTcDYI86dmyfYsHFbgbSn/qeoE8WEzwyT3OoGgn54zoMuQmUmLbGaJYY2XN5bxwqxsRJSoXetBu9o1G9Wy4V1fdxwjRtaO/2FrZfkLp/P5Tc5Hk1Ev7PIPrkRhrl/7lF4JblVRG5m90aeviErvFIN0LdlqiY90UaQY3gyTsylrheTlqRq6yyzKf3dWnF78+CeAqppsOMI+WHURThNLkN56EOTX6TaBrG6f2XjxeqQIDAQAB";

var cripto= window.crypto || window.msCrypto;
var subtle= cripto.subtle || window.crypto.webkitSubtle;

subtle.generateKey(
        {
            name: "RSA-OAEP",
            modulusLength: 2048, //can be 1024, 2048, or 4096
            publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
            hash: {name: "SHA-256"}, //can be "SHA-1", "SHA-256", "SHA-384", or "SHA-512"
        },
        true, //whether the key is extractable (i.e. can be used in exportKey)
        ["encrypt", "decrypt"] //must contain both "encrypt" and "decrypt"
    )
    .then(function(key){
        //returns a keypair object
        //console.log(key);
        //console.log(key.publicKey);
        //console.log(key.privateKey);
        subtle.exportKey(
                "jwk", //can be "jwk" (public or private), "spki" (public only), or "pkcs8" (private only)
                key.publicKey //can be a publicKey or privateKey, as long as extractable was true
            )
            .then(function(keydata){
                //returns the exported key data

                console.log("publicKey:"+_arrayBufferToBase64(keydata));
                subtle.exportKey(
                        "jwk", //can be "jwk" (public or private), "spki" (public only), or "pkcs8" (private only)
                        key.privateKey //can be a publicKey or privateKey, as long as extractable was true
                    )
                    .then(function(keydata){
                        //returns the exported key data

                        console.log("privateKey:"+_arrayBufferToBase64(keydata));
                    });

                subtle.importKey(                       
                        "jwk", //can be "jwk" (public or private), "spki" (public only), or "pkcs8" (private only)
                        keydata,
                        {   //these are the algorithm options
                            name: "RSA-OAEP",
                            hash: {name: "SHA-256"}, //can be "SHA-1", "SHA-256", "SHA-384", or "SHA-512"
                        },
                        false, //whether the key is extractable (i.e. can be used in exportKey)
                        ["encrypt"] //"encrypt" for public key import, "decrypt" for private key imports
                    )
                    .then(function(publicKey){
                        //returns a publicKey (or privateKey if you are importing a private key)
                        console.log(publicKey);

                        subtle.encrypt(
                                {
                                    name: "RSA-OAEP",
                                    //label: Uint8Array([...]) //optional
                                },
                                publicKey, //from generateKey or importKey above
                                str2ab("hola mundo") //ArrayBuffer of data you want to encrypt
                            )
                            .then(function(encrypted){
                                //returns an ArrayBuffer containing the encrypted data
                                //console.log(new Uint8Array(encrypted));
                                console.log("enc: "+_arrayBufferToBase64(encrypted));
                            })
                            .catch(function(err){
                                console.error(err);
                            });
                    })

            })

    })
    .catch(function(err){
        console.error(err);
    });

问题是 subtle.encrypt 显然没有执行。 console.log 和 console.error 都没有被调用。任何线索发生了什么？上一行 "console.log(publicKey);" 工作正常。

Answer 1

在您的 'generateKey' 调用之后，key.publicKey 和 key.privateKey 实际上是 CryptoKey 对象吗？在我修改 Safari（在 iPad 上）时，它们看起来只是对象......当我调用 'exportKey' 时，我得到一个 TypeError 被抛出

p.s。没关系，我使用的是 'RSASSA-PKCS1-v1_5'，而不是 'RSA-OAEP'。

Answer 2

当前版本的 Safari、Safari Technology Preview 和 WebKit 不支持 RSA-OAEP-256。他们只支持带有 SHA-1 的旧版 RSA-OAEP：

https://bugs.webkit.org/show_bug.cgi?id=151308

Answer 3

WebCrypto 的 Safari 实现以及 Edge 实现目前存在许多问题。由于浏览器之间的算法支持差异，这很复杂。

您可以通过访问以下网址了解给定浏览器支持的内容：https://peculiarventures.github.io/pv-webcrypto-tests/

鉴于这些差异，我们实现了这个库来掩盖许多差异并添加了一些算法（可选）以使它们互操作：https://github.com/PeculiarVentures/webcrypto-liner/blob/master/BrowserSupport.md

在 Safari 的情况下，他们仅支持以下带有 RSA-OAEP 的内容：

RSA-OAEP mod:2048 pubExp:3 /w SHA1 format:jwk
RSA-OAEP mod:2048 pubExp:65535 /w SHA1 format:jwk

如果你改变：哈希：{名称："SHA-256"}

致：哈希：{名称："SHA-1"}

我怀疑这会奏效。

Safari WebCrypto API RSA-OAEP 加密

Safari WebCrypto API RSA-OAEP encryption

javascript

safari

webcrypto-api