javascript - Safari WebCrypto API RSA-OAEP 加密

Question

我有以下代码来测试 WebCrypto API。它适用于 Firefox 和 Chrome，我正在尝试使其适用于 Safari。

 function ab2str(buf) {
      return String.fromCharCode.apply(null, new Uint16Array(buf));
    }

//converts a forge 0.6.x string of bytes to an ArrayBuffer
function str2ab(str) {
  var b = new ArrayBuffer(str.length);
  var view = new Uint8Array(b);
  for(var i = 0; i < str.length; ++i) {
    view[i] = str.charCodeAt(i);
  }
  return b;
}


function _arrayBufferToBase64( buffer ) {
    var binary = '';
    var bytes = new Uint8Array( buffer );
    var len = bytes.byteLength;
    for (var i = 0; i < len; i++) {
        binary += String.fromCharCode( bytes[ i ] );
    }
    return window.btoa( binary );
}

var pubKey;
var privKey;

var s_pubKey="MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tieEkcDAqAp/baSmNIdg5ezJMcWJX63+hM/DQolgKtw9Dvc0c8GRUqK2r/idZ1iXJzOjWQ3KIFIzmgTRHOKe3aPgJADdZ2vyAqu2woKtsgQ8nTcDYI86dmyfYsHFbgbSn/qeoE8WEzwyT3OoGgn54zoMuQmUmLbGaJYY2XN5bxwqxsRJSoXetBu9o1G9Wy4V1fdxwjRtaO/2FrZfkLp/P5Tc5Hk1Ev7PIPrkRhrl/7lF4JblVRG5m90aeviErvFIN0LdlqiY90UaQY3gyTsylrheTlqRq6yyzKf3dWnF78+CeAqppsOMI+WHURThNLkN56EOTX6TaBrG6f2XjxeqQIDAQAB";

var cripto= window.crypto || window.msCrypto;
var subtle= cripto.subtle || window.crypto.webkitSubtle;

subtle.generateKey(
        {
            name: "RSA-OAEP",
            modulusLength: 2048, //can be 1024, 2048, or 4096
            publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
            hash: {name: "SHA-256"}, //can be "SHA-1", "SHA-256", "SHA-384", or "SHA-512"
        },
        true, //whether the key is extractable (i.e. can be used in exportKey)
        ["encrypt", "decrypt"] //must contain both "encrypt" and "decrypt"
    )
    .then(function(key){
        //returns a keypair object
        //console.log(key);
        //console.log(key.publicKey);
        //console.log(key.privateKey);
        subtle.exportKey(
                "jwk", //can be "jwk" (public or private), "spki" (public only), or "pkcs8" (private only)
                key.publicKey //can be a publicKey or privateKey, as long as extractable was true
            )
            .then(function(keydata){
                //returns the exported key data

                console.log("publicKey:"+_arrayBufferToBase64(keydata));
                subtle.exportKey(
                        "jwk", //can be "jwk" (public or private), "spki" (public only), or "pkcs8" (private only)
                        key.privateKey //can be a publicKey or privateKey, as long as extractable was true
                    )
                    .then(function(keydata){
                        //returns the exported key data

                        console.log("privateKey:"+_arrayBufferToBase64(keydata));
                    });

                subtle.importKey(                       
                        "jwk", //can be "jwk" (public or private), "spki" (public only), or "pkcs8" (private only)
                        keydata,
                        {   //these are the algorithm options
                            name: "RSA-OAEP",
                            hash: {name: "SHA-256"}, //can be "SHA-1", "SHA-256", "SHA-384", or "SHA-512"
                        },
                        false, //whether the key is extractable (i.e. can be used in exportKey)
                        ["encrypt"] //"encrypt" for public key import, "decrypt" for private key imports
                    )
                    .then(function(publicKey){
                        //returns a publicKey (or privateKey if you are importing a private key)
                        console.log(publicKey);

                        subtle.encrypt(
                                {
                                    name: "RSA-OAEP",
                                    //label: Uint8Array([...]) //optional
                                },
                                publicKey, //from generateKey or importKey above
                                str2ab("hola mundo") //ArrayBuffer of data you want to encrypt
                            )
                            .then(function(encrypted){
                                //returns an ArrayBuffer containing the encrypted data
                                //console.log(new Uint8Array(encrypted));
                                console.log("enc: "+_arrayBufferToBase64(encrypted));
                            })
                            .catch(function(err){
                                console.error(err);
                            });
                    })

            })

    })
    .catch(function(err){
        console.error(err);
    });

问题是 subtle.encrypt 显然没有被执行。 console.log 和 console.error 都没有被调用。任何线索发生了什么？上一行“console.log(publicKey);”工作正常。

Answer 1

当前版本的 Safari、Safari Technology Preview 和 WebKit 不支持 RSA-OAEP-256。它们仅支持带有 SHA-1 的较旧的 RSA-OAEP:

https://bugs.webkit.org/show_bug.cgi?id=151308