125643 2013-12-12 10:31:08 -0800 Public key in a generated KeyPair should always be extractable 2013-12-12 10:40:17 -0800 1 1 1 Unclassified WebKit WebCore Misc. 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 122679 1 ap ap oldest_to_newest 959230 0 ap 2013-12-12 10:31:08 -0800 WebCrypto API doesn't provide for a way to specify different extractability for keys in a generated key pair, so if the caller wants a non-extractable private key, the public key is not extractable too. This makes no sense, and is tracked as <https://www.w3.org/Bugs/Public/show_bug.cgi?id=23013>/<https://www.w3.org/Bugs/Public/show_bug.cgi?id=23695>. 959232 1 219095 ap 2013-12-12 10:33:51 -0800 Created attachment 219095 proposed patch 959236 2 ap 2013-12-12 10:40:17 -0800 Committed <http://trac.webkit.org/changeset/160496> (with a bad ChangeLog, thank you commit-log-editor). 219095 2013-12-12 10:33:51 -0800 2013-12-12 10:34:52 -0800 proposed patch RSAGeneratePair.txt text/plain 6431 ap SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE2MDQ5MSkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDEzLTEyLTEyICBBbGV4ZXkg UHJvc2t1cnlha292ICA8YXBAYXBwbGUuY29tPgorCisgICAgICAgIFB1YmxpYyBrZXkgaW4gYSBn ZW5lcmF0ZWQgS2V5UGFpciBzaG91bGQgYWx3YXlzIGJlIGV4dHJhY3RhYmxlCisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMjU2NDMKKworICAgICAgICBS ZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBUaGUgc3BlYyBkb2Vzbid0IGV4 cGxhaW4gaG93IGdlbmVyYXRlS2V5IHdvcmtzIHdpdGgga2V5IHBhaXJzICh0aGVyZSBhcmUgb3Bl biBidWdzCisgICAgICAgIGFib3V0IHRoYXQpLiBNYWtpbmcgcHVibGljIGtleXMgbm9uLWV4dHJh Y3RhYmxlIG1ha2VzIG5vIHNlbnNlIG9uZSB3YXkgb3IgYW5vdGhlci4KKworICAgICAgICBUZXN0 OiBjcnlwdG8vc3VidGxlL3JzYS1vYWVwLWdlbmVyYXRlLW5vbi1leHRyYWN0YWJsZS1rZXkuaHRt bAorCisgICAgICAgICogY3J5cHRvL21hYy9DcnlwdG9LZXlSU0FNYWMuY3BwOiAoV2ViQ29yZTo6 Q3J5cHRvS2V5UlNBOjpnZW5lcmF0ZVBhaXIpOgorCiAyMDEzLTEyLTEyICBBbGV4ZXkgUHJvc2t1 cnlha292ICA8YXBAYXBwbGUuY29tPgogCiAgICAgICAgIE1ha2UgYWxnb3JpdGhtLm5hbWUgcmV0 dXJuIHJlZ2lzdGVyZWQgbmFtZSwgbm90IG5vcm1hbGl6ZWQgb25lCkluZGV4OiBTb3VyY2UvV2Vi Q29yZS9jcnlwdG8vbWFjL0NyeXB0b0tleVJTQU1hYy5jcHAKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNl L1dlYkNvcmUvY3J5cHRvL21hYy9DcnlwdG9LZXlSU0FNYWMuY3BwCShyZXZpc2lvbiAxNjA0NTMp CisrKyBTb3VyY2UvV2ViQ29yZS9jcnlwdG8vbWFjL0NyeXB0b0tleVJTQU1hYy5jcHAJKHdvcmtp bmcgY29weSkKQEAgLTI2Nyw3ICsyNjcsNyBAQCB2b2lkIENyeXB0b0tleVJTQTo6Z2VuZXJhdGVQ YWlyKENyeXB0b0FsCiAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgIH0KICAgICAgICAgZGlz cGF0Y2hfYXN5bmMoZGlzcGF0Y2hfZ2V0X21haW5fcXVldWUoKSwgXnsKLSAgICAgICAgICAgIFJl ZlB0cjxDcnlwdG9LZXlSU0E+IHB1YmxpY0tleSA9IENyeXB0b0tleVJTQTo6Y3JlYXRlKGFsZ29y aXRobSwgQ3J5cHRvS2V5VHlwZTo6UHVibGljLCBjY1B1YmxpY0tleSwgZXh0cmFjdGFibGUsIHVz YWdlKTsKKyAgICAgICAgICAgIFJlZlB0cjxDcnlwdG9LZXlSU0E+IHB1YmxpY0tleSA9IENyeXB0 b0tleVJTQTo6Y3JlYXRlKGFsZ29yaXRobSwgQ3J5cHRvS2V5VHlwZTo6UHVibGljLCBjY1B1Ymxp Y0tleSwgdHJ1ZSwgdXNhZ2UpOwogICAgICAgICAgICAgUmVmUHRyPENyeXB0b0tleVJTQT4gcHJp dmF0ZUtleSA9IENyeXB0b0tleVJTQTo6Y3JlYXRlKGFsZ29yaXRobSwgQ3J5cHRvS2V5VHlwZTo6 UHJpdmF0ZSwgY2NQcml2YXRlS2V5LCBleHRyYWN0YWJsZSwgdXNhZ2UpOwogICAgICAgICAgICAg KCpsb2NhbENhbGxiYWNrKSgqQ3J5cHRvS2V5UGFpcjo6Y3JlYXRlKHB1YmxpY0tleS5yZWxlYXNl KCksIHByaXZhdGVLZXkucmVsZWFzZSgpKSk7CiAgICAgICAgICAgICBkZWxldGUgbG9jYWxDYWxs YmFjazsKSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRU ZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDE2MDQ5MSkKKysrIExheW91dFRlc3RzL0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDEzIEBACisyMDEzLTEyLTEyICBBbGV4ZXkgUHJv c2t1cnlha292ICA8YXBAYXBwbGUuY29tPgorCisgICAgICAgIFB1YmxpYyBrZXkgaW4gYSBnZW5l cmF0ZWQgS2V5UGFpciBzaG91bGQgYWx3YXlzIGJlIGV4dHJhY3RhYmxlCisgICAgICAgIGh0dHBz Oi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMjU2NDMKKworICAgICAgICBSZXZp ZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAqIGNyeXB0by9zdWJ0bGUvcnNhLW9h ZXAtZ2VuZXJhdGUtbm9uLWV4dHJhY3RhYmxlLWtleS1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAg ICAgICAqIGNyeXB0by9zdWJ0bGUvcnNhLW9hZXAtZ2VuZXJhdGUtbm9uLWV4dHJhY3RhYmxlLWtl eS5odG1sOiBBZGRlZC4KKwogMjAxMy0xMi0xMiAgQWxleGV5IFByb3NrdXJ5YWtvdiAgPGFwQGFw cGxlLmNvbT4KIAogICAgICAgICBNYWtlIGFsZ29yaXRobS5uYW1lIHJldHVybiByZWdpc3RlcmVk IG5hbWUsIG5vdCBub3JtYWxpemVkIG9uZQpJbmRleDogTGF5b3V0VGVzdHMvY3J5cHRvL3N1YnRs ZS9yc2Etb2FlcC1nZW5lcmF0ZS1ub24tZXh0cmFjdGFibGUta2V5LWV4cGVjdGVkLnR4dAo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9jcnlwdG8vc3VidGxlL3JzYS1vYWVwLWdlbmVyYXRlLW5v bi1leHRyYWN0YWJsZS1rZXktZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVz dHMvY3J5cHRvL3N1YnRsZS9yc2Etb2FlcC1nZW5lcmF0ZS1ub24tZXh0cmFjdGFibGUta2V5LWV4 cGVjdGVkLnR4dAkod29ya2luZyBjb3B5KQpAQCAtMCwwICsxLDIzIEBACitUZXN0IHRoYXQgZXZl biB3aGVuIG5vbi1leHRyYWN0YWJpbGl0eSBpcyByZXF1ZXN0ZWQsIHRoZSBwdWJsaWMga2V5IGlz IHN0aWxsIGV4dHJhY3RhYmxlLgorCitPbiBzdWNjZXNzLCB5b3Ugd2lsbCBzZWUgYSBzZXJpZXMg b2YgIlBBU1MiIG1lc3NhZ2VzLCBmb2xsb3dlZCBieSAiVEVTVCBDT01QTEVURSIuCisKKworR2Vu ZXJhdGluZyBhIGtleSBwYWlyLi4uCitQQVNTIGtleVBhaXIudG9TdHJpbmcoKSBpcyAnW29iamVj dCBLZXlQYWlyXScKK1BBU1Mga2V5UGFpci5wdWJsaWNLZXkudHlwZSBpcyAncHVibGljJworUEFT UyBrZXlQYWlyLnB1YmxpY0tleS5leHRyYWN0YWJsZSBpcyB0cnVlCitQQVNTIGtleVBhaXIucHVi bGljS2V5LmFsZ29yaXRobS5uYW1lIGlzICdSU0EtT0FFUCcKK1BBU1Mga2V5UGFpci5wdWJsaWNL ZXkuYWxnb3JpdGhtLm1vZHVsdXNMZW5ndGggaXMgMjA0OAorUEFTUyBieXRlc1RvSGV4U3RyaW5n KGtleVBhaXIucHVibGljS2V5LmFsZ29yaXRobS5wdWJsaWNFeHBvbmVudCkgaXMgJzAxMDAwMScK K1BBU1Mga2V5UGFpci5wdWJsaWNLZXkuYWxnb3JpdGhtLmhhc2ggaXMgdW5kZWZpbmVkLgorUEFT UyBrZXlQYWlyLnByaXZhdGVLZXkudHlwZSBpcyAncHJpdmF0ZScKK1BBU1Mga2V5UGFpci5wcml2 YXRlS2V5LmV4dHJhY3RhYmxlIGlzIGZhbHNlCitQQVNTIGtleVBhaXIucHJpdmF0ZUtleS5hbGdv cml0aG0ubmFtZSBpcyAnUlNBLU9BRVAnCitQQVNTIGtleVBhaXIucHJpdmF0ZUtleS5hbGdvcml0 aG0ubW9kdWx1c0xlbmd0aCBpcyAyMDQ4CitQQVNTIGJ5dGVzVG9IZXhTdHJpbmcoa2V5UGFpci5w cml2YXRlS2V5LmFsZ29yaXRobS5wdWJsaWNFeHBvbmVudCkgaXMgJzAxMDAwMScKK1BBU1Mga2V5 UGFpci5wcml2YXRlS2V5LmFsZ29yaXRobS5oYXNoIGlzIHVuZGVmaW5lZC4KK1BBU1Mgc3VjY2Vz c2Z1bGx5UGFyc2VkIGlzIHRydWUKKworVEVTVCBDT01QTEVURQorCgpQcm9wZXJ0eSBjaGFuZ2Vz IG9uOiBMYXlvdXRUZXN0cy9jcnlwdG8vc3VidGxlL3JzYS1vYWVwLWdlbmVyYXRlLW5vbi1leHRy YWN0YWJsZS1rZXktZXhwZWN0ZWQudHh0Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KQWRkZWQ6IHN2bjptaW1lLXR5cGUK IyMgLTAsMCArMSAjIwordGV4dC9wbGFpbgpcIE5vIG5ld2xpbmUgYXQgZW5kIG9mIHByb3BlcnR5 CkFkZGVkOiBzdm46ZW9sLXN0eWxlCiMjIC0wLDAgKzEgIyMKK25hdGl2ZQpcIE5vIG5ld2xpbmUg YXQgZW5kIG9mIHByb3BlcnR5CkluZGV4OiBMYXlvdXRUZXN0cy9jcnlwdG8vc3VidGxlL3JzYS1v YWVwLWdlbmVyYXRlLW5vbi1leHRyYWN0YWJsZS1rZXkuaHRtbAo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlv dXRUZXN0cy9jcnlwdG8vc3VidGxlL3JzYS1vYWVwLWdlbmVyYXRlLW5vbi1leHRyYWN0YWJsZS1r ZXkuaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2NyeXB0by9zdWJ0bGUvcnNhLW9h ZXAtZ2VuZXJhdGUtbm9uLWV4dHJhY3RhYmxlLWtleS5odG1sCSh3b3JraW5nIGNvcHkpCkBAIC0w LDAgKzEsNDcgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQgc3Jj PSIuLi8uLi9yZXNvdXJjZXMvanMtdGVzdC1wcmUuanMiPjwvc2NyaXB0PgorPHNjcmlwdCBzcmM9 InJlc291cmNlcy9jb21tb24uanMiPjwvc2NyaXB0PgorPC9oZWFkPgorPGJvZHk+Cis8cCBpZD0i ZGVzY3JpcHRpb24iPjwvcD4KKzxkaXYgaWQ9ImNvbnNvbGUiPjwvZGl2PgorCis8c2NyaXB0Pgor ZGVzY3JpcHRpb24oIlRlc3QgdGhhdCBldmVuIHdoZW4gbm9uLWV4dHJhY3RhYmlsaXR5IGlzIHJl cXVlc3RlZCwgdGhlIHB1YmxpYyBrZXkgaXMgc3RpbGwgZXh0cmFjdGFibGUuIik7CisKK2pzVGVz dElzQXN5bmMgPSB0cnVlOworCit2YXIgYWxnb3JpdGhtS2V5R2VuID0geworICAgIG5hbWU6ICJS U0EtT0FFUCIsCisgICAgLy8gUnNhS2V5R2VuUGFyYW1zCisgICAgbW9kdWx1c0xlbmd0aDogMjA0 OCwKKyAgICBwdWJsaWNFeHBvbmVudDogbmV3IFVpbnQ4QXJyYXkoWzB4MDEsIDB4MDAsIDB4MDFd KSwgIC8vIEVxdWl2YWxlbnQgdG8gNjU1MzcKK307Cit2YXIgbm9uRXh0cmFjdGFibGUgPSBmYWxz ZTsKKworZGVidWcoIkdlbmVyYXRpbmcgYSBrZXkgcGFpci4uLiIpOworY3J5cHRvLnN1YnRsZS5n ZW5lcmF0ZUtleShhbGdvcml0aG1LZXlHZW4sIG5vbkV4dHJhY3RhYmxlLCBbXSkudGhlbihmdW5j dGlvbihyZXN1bHQpIHsKKyAgICBrZXlQYWlyID0gcmVzdWx0OworICAgIHNob3VsZEJlKCJrZXlQ YWlyLnRvU3RyaW5nKCkiLCAiJ1tvYmplY3QgS2V5UGFpcl0nIik7CisgICAgc2hvdWxkQmUoImtl eVBhaXIucHVibGljS2V5LnR5cGUiLCAiJ3B1YmxpYyciKTsKKyAgICBzaG91bGRCZSgia2V5UGFp ci5wdWJsaWNLZXkuZXh0cmFjdGFibGUiLCAidHJ1ZSIpOworICAgIHNob3VsZEJlKCJrZXlQYWly LnB1YmxpY0tleS5hbGdvcml0aG0ubmFtZSIsICInUlNBLU9BRVAnIik7CisgICAgc2hvdWxkQmUo ImtleVBhaXIucHVibGljS2V5LmFsZ29yaXRobS5tb2R1bHVzTGVuZ3RoIiwgIjIwNDgiKTsKKyAg ICBzaG91bGRCZSgiYnl0ZXNUb0hleFN0cmluZyhrZXlQYWlyLnB1YmxpY0tleS5hbGdvcml0aG0u cHVibGljRXhwb25lbnQpIiwgIicwMTAwMDEnIik7CisgICAgc2hvdWxkQmVVbmRlZmluZWQoImtl eVBhaXIucHVibGljS2V5LmFsZ29yaXRobS5oYXNoIik7CisgICAgc2hvdWxkQmUoImtleVBhaXIu cHJpdmF0ZUtleS50eXBlIiwgIidwcml2YXRlJyIpOworICAgIHNob3VsZEJlKCJrZXlQYWlyLnBy aXZhdGVLZXkuZXh0cmFjdGFibGUiLCAiZmFsc2UiKTsKKyAgICBzaG91bGRCZSgia2V5UGFpci5w cml2YXRlS2V5LmFsZ29yaXRobS5uYW1lIiwgIidSU0EtT0FFUCciKTsKKyAgICBzaG91bGRCZSgi a2V5UGFpci5wcml2YXRlS2V5LmFsZ29yaXRobS5tb2R1bHVzTGVuZ3RoIiwgIjIwNDgiKTsKKyAg ICBzaG91bGRCZSgiYnl0ZXNUb0hleFN0cmluZyhrZXlQYWlyLnByaXZhdGVLZXkuYWxnb3JpdGht LnB1YmxpY0V4cG9uZW50KSIsICInMDEwMDAxJyIpOworICAgIHNob3VsZEJlVW5kZWZpbmVkKCJr ZXlQYWlyLnByaXZhdGVLZXkuYWxnb3JpdGhtLmhhc2giKTsKKworICAgIGZpbmlzaEpTVGVzdCgp OworfSk7Cis8L3NjcmlwdD4KKworPHNjcmlwdCBzcmM9Ii4uLy4uL3Jlc291cmNlcy9qcy10ZXN0 LXBvc3QuanMiPjwvc2NyaXB0PgorPC9ib2R5PgorPC9odG1sPgoKUHJvcGVydHkgY2hhbmdlcyBv bjogTGF5b3V0VGVzdHMvY3J5cHRvL3N1YnRsZS9yc2Etb2FlcC1nZW5lcmF0ZS1ub24tZXh0cmFj dGFibGUta2V5Lmh0bWwKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXwpBZGRlZDogc3ZuOm1pbWUtdHlwZQojIyAtMCwwICsx ICMjCit0ZXh0L2h0bWwKXCBObyBuZXdsaW5lIGF0IGVuZCBvZiBwcm9wZXJ0eQo=