Use noble-hashes for pbkdf2, sha, hmac

[paulmillr]

Hey, saw #202. I've also made noble-hashes recently, which implements all primitives in very minimal format.

It's going to be audited soon, unlike forge, so you should switch to it.

[hugomrdias]

Hey @paulmillr I have a stash at least for pbk so I will get there soon enough. But what would be really important for us would be swap out forge for the RSA stuff but web crypto is well .... Do you have any suggestions for libs that can proper RSA sign/verify in the browser ?

[paulmillr]

Web crypto has rsa implementation built-in. https://gist.github.com/deiu/2c3208c89fbc91d23226

[dignifiedquire]

but it is missing PKCS support for encryption, which we need for compatibility reasons

[paulmillr]

https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey are you sure?

[dignifiedquire]

unfortunately yes: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt

supports only OAEP
it supports pkcs for signing only, one of the many unpleasant things about the webcrypto api

[hugomrdias]

https://cryptosense.com/blog/choice-of-algorithms-in-the-w3c-crypto-api Hugo Dias

…

On Sun, Oct 24, 2021, 10:51 Friedel Ziegelmayer ***@***.***> wrote: unfortunately yes: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt supports only OAEP it supports pkcs for signing only, one of the many unpleasant things about the webcrypto api — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#205 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AACMWTWR6ZKISSPGBP5LLALUIPJKFANCNFSM5GSDTXXQ> .

[paulmillr]

It's been audited now, see the blog post.