Open jelhan opened 7 years ago
Investigated that one a little bit:
all major browsers but HMAC-SHA-256 hash function is not
You likely just did not find it, because it's used in the .sign
API, not the hash one.
Actually, it looks supported: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/sign#HMAC
(That MDN doc has been updated some time ago. Thanks to the fact that someone™ complained. :wink: And Mozilla fixed it, of course… :hugs:)
Currently all encryption / decryption is done by Stanford JavaScript Crypto Library (sjcl). Since Web Cryptography API is now a recommendation and implemented by Firefox and Chrome we should investigate if we could use that one if it exists.
Using Web Cryptography API might be less performant than sjcl if these benchmarks are still valid.