Skip to content

test: update WPT for WebCryptoAPI to e235e089b4 #65478

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nodejs-github-bot wants to merge 4 commits into
base: main
Choose a base branch
from
Open

test: update WPT for WebCryptoAPI to e235e089b4 #65478

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
8164154
test: update WPT for WebCryptoAPI to e235e089b4
nodejs-github-bot Aug 22, 2026
2343f9a
fixup! test: update WPT for WebCryptoAPI to e235e089b4
panva Aug 22, 2026
f59fa78
fixup! test: update WPT for WebCryptoAPI to e235e089b4
panva Aug 22, 2026
cbee6dd
fixup! test: update WPT for WebCryptoAPI to e235e089b4
panva Aug 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion test/fixtures/wpt/WebCryptoAPI/derive_bits_keys/derive.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -102,7 +102,7 @@ function registerDeriveTests(options) {
failureTest(
test.name,
"InvalidAccessError",
() => derive(algorithmName, test.key, privateKey)
() => derive(algorithmName, test.key, privateKey, test.length)
);
});

Expand Down
8 changes: 4 additions & 4 deletions test/fixtures/wpt/WebCryptoAPI/derive_bits_keys/derived_bits_length.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,16 +17,16 @@ function define_tests() {
derivedBits = await subtle.deriveBits(testData.deriveAlg, privateKey);
else
derivedBits = await subtle.deriveBits(testData.deriveAlg, privateKey, testParam.length);
if (testParam.expected === undefined) {
assert_unreached("deriveBits should have thrown an OperationError exception.");
if (testParam.expected === "TypeError" || testParam.expected === "OperationError") {
assert_unreached("deriveBits should have thrown an " + testParam.expected + " exception.");
}
assert_array_equals(new Uint8Array(derivedBits), testParam.expected, "Derived bits do not match the expected result.");
} catch (err) {
if (err instanceof AssertionError || testParam.expected !== undefined) {
if (err instanceof AssertionError || !(testParam.expected === "TypeError" || testParam.expected === "OperationError")) {
throw err;
}
assert_true(privateKey !== undefined, "Key should be valid.");
assert_equals(err.name, "OperationError", "deriveBits correctly threw OperationError: " + err.message);
assert_equals(err.name, testParam.expected, "deriveBits correctly threw " + testParam.expected + ": " + err.message);
}
}, algorithm + " derivation with " + testParam.length + " as 'length' parameter");
});
Expand Down
35 changes: 23 additions & 12 deletions test/fixtures/wpt/WebCryptoAPI/derive_bits_keys/derived_bits_length_testcases.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,38 +1,49 @@
var enforceRangeTestCases = [
// These cases should throw an error in all algorithms due to [EnforceRange]
{length: NaN, expected: "TypeError"},
{length: Infinity, expected: "TypeError"},
{length: -8, expected: "TypeError"},
{length: 2**32 + 8, expected: "TypeError"},
];
var testCases = {
"HKDF": [
{length: 256, expected: algorithms["HKDF"].derivation},
{length: 384, expected: algorithms["HKDF"].derivation384},
{length: 230, expected: undefined}, // should throw an exception, not multiple of 8
{length: 230, expected: "OperationError"}, // should throw an exception, not multiple of 8
{length: 0, expected: emptyArray},
{length: null, expected: undefined }, // should throw an exception
{length: undefined, expected: undefined }, // should throw an exception
{length: "omitted", expected: undefined }, // default value is null, so should throw
{length: null, expected: "OperationError"}, // should throw an exception
{length: undefined, expected: "OperationError"}, // should throw an exception
{length: "omitted", expected: "OperationError"}, // default value is null, so should throw
...enforceRangeTestCases,
],
"PBKDF2": [
{length: 256, expected: algorithms["PBKDF2"].derivation},
{length: 384, expected: algorithms["PBKDF2"].derivation384},
{length: 230, expected: undefined}, // should throw an exception, not multiple of 8
{length: 230, expected: "OperationError"}, // should throw an exception, not multiple of 8
{length: 0, expected: emptyArray},
{length: null, expected: undefined }, // should throw an exception
{length: undefined, expected: undefined }, // should throw an exception
{length: "omitted", expected: undefined }, // default value is null, so should throw
{length: null, expected: "OperationError"}, // should throw an exception
{length: undefined, expected: "OperationError"}, // should throw an exception
{length: "omitted", expected: "OperationError"}, // default value is null, so should throw
...enforceRangeTestCases,
],
"ECDH": [
{length: 256, expected: algorithms["ECDH"].derivation},
{length: 384, expected: undefined}, // should throw an exception, bigger than the output size
{length: 384, expected: "OperationError"}, // should throw an exception, bigger than the output size
{length: 230, expected: algorithms["ECDH"].derivation230},
{length: 0, expected: emptyArray},
{length: null, expected: algorithms["ECDH"].derivation},
{length: undefined, expected: algorithms["ECDH"].derivation},
{length: "omitted", expected: algorithms["ECDH"].derivation }, // default value is null
{length: "omitted", expected: algorithms["ECDH"].derivation}, // default value is null
...enforceRangeTestCases,
],
"X25519": [
{length: 256, expected: algorithms["X25519"].derivation},
{length: 384, expected: undefined}, // should throw an exception, bigger than the output size
{length: 384, expected: "OperationError"}, // should throw an exception, bigger than the output size
{length: 230, expected: algorithms["X25519"].derivation230},
{length: 0, expected: emptyArray},
{length: null, expected: algorithms["X25519"].derivation},
{length: undefined, expected: algorithms["X25519"].derivation},
{length: "omitted", expected: algorithms["X25519"].derivation }, // default value is null
{length: "omitted", expected: algorithms["X25519"].derivation}, // default value is null
...enforceRangeTestCases,
],
}
1 change: 1 addition & 0 deletions test/fixtures/wpt/WebCryptoAPI/derive_bits_keys/ecdh.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,7 @@ async function defineEcdhTests(operation) {
{
name: namedCurve + " mismatched curves",
key: keys[otherCurve].publicKey,
length: 256,
},
{
name: namedCurve +
Expand Down
11 changes: 10 additions & 1 deletion test/fixtures/wpt/WebCryptoAPI/generateKey/failures.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -101,13 +101,19 @@ function run_test(algorithmNames) {

if (algorithmName.toUpperCase().substring(0, 3) === "AES") {
// Specifier properties are name and length
[64, 127, 129, 255, 257, 512].forEach(function(length) {
[64, 127, 129, 255, 257, 512, 128 + 2**32, 128 - 2**32].forEach(function(length) {
results.push({name: algorithmName, length: length});
});
} else if (algorithmName.toUpperCase() === "HMAC") {
[128 + 2**32, 128 - 2**32].forEach(function(length) {
results.push({name: algorithmName, hash: "SHA-256", length: length});
});
} else if (algorithmName.toUpperCase().substring(0, 3) === "RSA") {
[new Uint8Array([1]), new Uint8Array([1,0,0])].forEach(function(publicExponent) {
results.push({name: algorithmName, hash: "SHA-256", modulusLength: 1024, publicExponent: publicExponent});
});
results.push({name: algorithmName, hash: "SHA-256", modulusLength: 1024 + 2 ** 32, publicExponent: new Uint8Array([1,0,1])});
results.push({name: algorithmName, hash: "SHA-256", modulusLength: 1024 - 2 ** 32, publicExponent: new Uint8Array([1,0,1])});
} else if (algorithmName.toUpperCase().substring(0, 2) === "EC") {
["P-512", "Curve25519"].forEach(function(curveName) {
results.push({name: algorithmName, namedCurve: curveName});
Expand Down Expand Up @@ -177,6 +183,9 @@ function run_test(algorithmNames) {
[false, true].forEach(function(extractable) {
if (name.substring(0,2) === "EC") {
testError(algorithm, extractable, usages, "NotSupportedError", "Bad algorithm property");
} else if (name.substring(0,3) === "RSA" && (algorithm.modulusLength < 0 || algorithm.modulusLength > 2**32) ||
(name.substring(0,3) === "AES" || name === "HMAC") && (algorithm.length < 0 || algorithm.length > 2**32)) {
testError(algorithm, extractable, usages, "TypeError", "Bad algorithm property");
} else {
testError(algorithm, extractable, usages, "OperationError", "Bad algorithm property");
}
Expand Down
64 changes: 64 additions & 0 deletions test/fixtures/wpt/WebCryptoAPI/supports-modern.tentative.https.any.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,70 @@ testSupportsMethod();
// Test standard WebCrypto algorithms for requested operations
runSupportsTests(modernAlgorithms, operations);

['ML-DSA-44', 'ML-DSA-65', 'ML-DSA-87'].forEach(name => {
['sign', 'verify'].forEach(operation => {
test(() => {
assert_true(
SubtleCrypto.supports(operation, {
name,
context: new Uint8Array(255),
}),
`${name} ${operation} supports a 255-byte context`
);
assert_false(
SubtleCrypto.supports(operation, {
name,
context: new Uint8Array(256),
}),
`${name} ${operation} rejects a 256-byte context`
);
}, `supports validates ${name} ${operation} context length`);
});
});

const mlKemImportedKeyCases = [
{
description: 'a matching HMAC length',
additionalAlgorithm: {name: 'HMAC', hash: 'SHA-256', length: 256},
expected: true,
},
{
description: 'an algorithm without raw-secret import',
additionalAlgorithm: 'Ed25519',
expected: false,
},
{
description: 'an HMAC length shorter than the shared secret',
additionalAlgorithm: {name: 'HMAC', hash: 'SHA-256', length: 128},
expected: false,
},
{
description: 'an HMAC length longer than the shared secret',
additionalAlgorithm: {name: 'HMAC', hash: 'SHA-256', length: 512},
expected: false,
},
];

['encapsulateKey', 'decapsulateKey'].forEach(operation => {
mlKemImportedKeyCases.forEach(({
description,
additionalAlgorithm,
expected,
}) => {
test(() => {
assert_equals(
SubtleCrypto.supports(
operation,
'ML-KEM-768',
additionalAlgorithm
),
expected,
`ML-KEM-768 ${operation} with ${description}`
);
}, `supports ${operation} with ${description}`);
});
});

// Test some algorithm objects with valid parameters
test(() => {
assert_true(
Expand Down
Loading
Loading