w3c / webcrypto

The W3C Web Cryptography API
https://w3c.github.io/webcrypto/
Other
267 stars 56 forks source link

Extractable property not set in `SubtleCrypto.deriveKey` #383

Closed gmta closed 1 week ago

gmta commented 1 week ago

Similar to SubtleCrypto.importKey, .deriveKey should set the [[extractable]] internal slot of the resulting key. None of the algorithms actually set this property on the key.

twiss commented 1 week ago

Thanks for catching that! As @panva noticed, the [[usages]] internal slot should be set as well :)

(Btw, if tests didn't catch that one, perhaps we should test that more extensively?)