RE: Web Cryptography API

2019-12-20 Thread Jason Pyeron
> From: Franziskus Kiefer
> Sent: Friday, December 20, 2019 1:21 AM
> 
> Hi Jason,
> 
> which webcrypto features do you need?

Quoting 4.3 of the spec: 
Additionally, this API does not deal with or address the discovery of
cryptographic modules, as such concepts are dependent upon the underlying
user agent and are not concepts that are portable between common operating
systems, cryptographic libraries, and implementations.

> Firefox supports WebCrypto [1]. You can check out what's supported here
> [2].

None of the browsers support loading / using keys managed by the OS or other
PKCS#11 interface.

My best suspicions would be to either enhance importKey or add a new,
non-standard (yet) CryptoKey enumeration.

> 
> Cheers
> 
> [1] https://bugzilla.mozilla.org/show_bug.cgi?id=865789
> [2] https://diafygi.github.io/webcrypto-examples/
> 
> On Fri, Dec 20, 2019 at 12:05 AM Jason Pyeron  wrote:
> 
> > In our product backlog we have items that require the Web Cryptography
> > API [2] to integrate with the OS provided crypto providers. Since
> > these features [1] to not seem to be available in FF yet, we are
> > thinking about taking a crack at a patch [3] or extension [4] to add
> > the missing API support. Where should we go next?
> >
> > 1: https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API
> >
> > 2: https://w3c.github.io/webcrypto/
> >
> > 3:
> >
> > https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/How_t
> > o_Subm
> > it_a_Patch
> >
> > 4:
> >
> > https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions
> > /Your_
> > first_WebExtension
> >
> > --
> > Jason Pyeron  | Architect
> > Contractor|
> > PD Inc|
> > 10 w 24th St  |
> > Baltimore, MD |
> >
> > .mil: [email protected]
> > .com: [email protected]
> > tel : 202-741-9397
> >
> >
> >
> >
> >
> > --
> > dev-tech-crypto mailing list
> > [email protected]
> > https://lists.mozilla.org/listinfo/dev-tech-crypto
> >
> --
> dev-tech-crypto mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-tech-crypto

-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: Web Cryptography API

2019-12-19 Thread Franziskus Kiefer
Hi Jason,

which webcrypto features do you need?
Firefox supports WebCrypto [1]. You can check out what's supported here [2].

Cheers

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=865789
[2] https://diafygi.github.io/webcrypto-examples/

On Fri, Dec 20, 2019 at 12:05 AM Jason Pyeron  wrote:

> In our product backlog we have items that require the Web Cryptography API
> [2] to integrate with the OS provided crypto providers. Since these
> features
> [1] to not seem to be available in FF yet, we are thinking about taking a
> crack at a patch [3] or extension [4] to add the missing API support. Where
> should we go next?
>
> 1: https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API
>
> 2: https://w3c.github.io/webcrypto/
>
> 3:
>
> https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/How_to_Subm
> it_a_Patch
>
> 4:
>
> https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Your_
> first_WebExtension
>
> --
> Jason Pyeron  | Architect
> Contractor|
> PD Inc|
> 10 w 24th St  |
> Baltimore, MD |
>
> .mil: [email protected]
> .com: [email protected]
> tel : 202-741-9397
>
>
>
>
>
> --
> dev-tech-crypto mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-tech-crypto
>
-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto


Web Cryptography API

2019-12-19 Thread Jason Pyeron
In our product backlog we have items that require the Web Cryptography API
[2] to integrate with the OS provided crypto providers. Since these features
[1] to not seem to be available in FF yet, we are thinking about taking a
crack at a patch [3] or extension [4] to add the missing API support. Where
should we go next?

1: https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API

2: https://w3c.github.io/webcrypto/

3:
https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/How_to_Subm
it_a_Patch

4:
https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Your_
first_WebExtension

--
Jason Pyeron  | Architect
Contractor|
PD Inc|
10 w 24th St  |
Baltimore, MD |

.mil: [email protected]
.com: [email protected]
tel : 202-741-9397





-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: deactivate Web Cryptography API

2019-05-24 Thread Ryan Sleevi
On Sat, May 25, 2019 at 2:03 AM  wrote:

> Hello,
>
> we are using Firefox. But we want to deactivate the API "Web Cryptography
> API". We are using an addon for this case -> "WEB API MANAGER". Our target
> is to deactivate this setting without using an addon.
>
> Is there any possibility for our Use Case ?
>
>
> The Addon blocks the following things:
>
> "Crypto.prototype.getRandomValues",
> "SubtleCrypto.prototype.decrypt",
> "SubtleCrypto.prototype.deriveBits",
> "SubtleCrypto.prototype.deriveKey",
> "SubtleCrypto.prototype.digest",
> "SubtleCrypto.prototype.encrypt",
> "SubtleCrypto.prototype.exportKey",
> "SubtleCrypto.prototype.generateKey",
> "SubtleCrypto.prototype.importKey",
> "SubtleCrypto.prototype.sign",
> "SubtleCrypto.prototype.unwrapKey",
> "SubtleCrypto.prototype.verify",
> "SubtleCrypto.prototype.wrapKey",
> "window.crypto"
> --


Why do you want to remove Web Platform APIs? Especially those that have no
storage or hardware interaction?

>
>
-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto


deactivate Web Cryptography API

2019-05-24 Thread r . intrau
Hello,

we are using Firefox. But we want to deactivate the API "Web Cryptography API". 
We are using an addon for this case -> "WEB API MANAGER". Our target is to 
deactivate this setting without using an addon.

Is there any possibility for our Use Case ?


The Addon blocks the following things:

"Crypto.prototype.getRandomValues",
"SubtleCrypto.prototype.decrypt",
"SubtleCrypto.prototype.deriveBits",
"SubtleCrypto.prototype.deriveKey",
"SubtleCrypto.prototype.digest",
"SubtleCrypto.prototype.encrypt",
"SubtleCrypto.prototype.exportKey",
"SubtleCrypto.prototype.generateKey",
"SubtleCrypto.prototype.importKey",
"SubtleCrypto.prototype.sign",
"SubtleCrypto.prototype.unwrapKey",
"SubtleCrypto.prototype.verify",
"SubtleCrypto.prototype.wrapKey",
"window.crypto"
-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto