feat(ext/crypto): AES-GCM support for 128bit IVs (#13805)

1 files changed, 23 insertions, 79 deletions

diff --git a/tools/wpt/expectation.json b/tools/wpt/expectation.json
index b2a2ec86d..3f614bc2e 100644
--- a/tools/wpt/expectation.json
+++ b/tools/wpt/expectation.json
@@ -211,25 +211,7 @@
         "AES-GCM 256-bit key, 120-bit tag decryption with altered ciphertext",
         "AES-GCM 256-bit key, no additional data, 120-bit tag decryption with altered ciphertext",
         "AES-GCM 256-bit key, 128-bit tag decryption with altered ciphertext",
-        "AES-GCM 256-bit key, no additional data, 128-bit tag decryption with altered ciphertext",
-        "AES-GCM 128-bit key, illegal tag length 24-bits",
-        "AES-GCM 128-bit key, illegal tag length 48-bits",
-        "AES-GCM 128-bit key, illegal tag length 72-bits",
-        "AES-GCM 128-bit key, illegal tag length 95-bits",
-        "AES-GCM 128-bit key, illegal tag length 129-bits",
-        "AES-GCM 128-bit key, illegal tag length 256-bits",
-        "AES-GCM 192-bit key, illegal tag length 24-bits",
-        "AES-GCM 192-bit key, illegal tag length 48-bits",
-        "AES-GCM 192-bit key, illegal tag length 72-bits",
-        "AES-GCM 192-bit key, illegal tag length 95-bits",
-        "AES-GCM 192-bit key, illegal tag length 129-bits",
-        "AES-GCM 192-bit key, illegal tag length 256-bits",
-        "AES-GCM 256-bit key, illegal tag length 24-bits",
-        "AES-GCM 256-bit key, illegal tag length 48-bits",
-        "AES-GCM 256-bit key, illegal tag length 72-bits",
-        "AES-GCM 256-bit key, illegal tag length 95-bits",
-        "AES-GCM 256-bit key, illegal tag length 129-bits",
-        "AES-GCM 256-bit key, illegal tag length 256-bits"
+        "AES-GCM 256-bit key, no additional data, 128-bit tag decryption with altered ciphertext"
       ],
       "aes_gcm.https.any.worker.html": [
         "AES-GCM 128-bit key, 32-bit tag",
@@ -399,25 +381,7 @@
         "AES-GCM 256-bit key, 120-bit tag decryption with altered ciphertext",
         "AES-GCM 256-bit key, no additional data, 120-bit tag decryption with altered ciphertext",
         "AES-GCM 256-bit key, 128-bit tag decryption with altered ciphertext",
-        "AES-GCM 256-bit key, no additional data, 128-bit tag decryption with altered ciphertext",
-        "AES-GCM 128-bit key, illegal tag length 24-bits",
-        "AES-GCM 128-bit key, illegal tag length 48-bits",
-        "AES-GCM 128-bit key, illegal tag length 72-bits",
-        "AES-GCM 128-bit key, illegal tag length 95-bits",
-        "AES-GCM 128-bit key, illegal tag length 129-bits",
-        "AES-GCM 128-bit key, illegal tag length 256-bits",
-        "AES-GCM 192-bit key, illegal tag length 24-bits",
-        "AES-GCM 192-bit key, illegal tag length 48-bits",
-        "AES-GCM 192-bit key, illegal tag length 72-bits",
-        "AES-GCM 192-bit key, illegal tag length 95-bits",
-        "AES-GCM 192-bit key, illegal tag length 129-bits",
-        "AES-GCM 192-bit key, illegal tag length 256-bits",
-        "AES-GCM 256-bit key, illegal tag length 24-bits",
-        "AES-GCM 256-bit key, illegal tag length 48-bits",
-        "AES-GCM 256-bit key, illegal tag length 72-bits",
-        "AES-GCM 256-bit key, illegal tag length 95-bits",
-        "AES-GCM 256-bit key, illegal tag length 129-bits",
-        "AES-GCM 256-bit key, illegal tag length 256-bits"
+        "AES-GCM 256-bit key, no additional data, 128-bit tag decryption with altered ciphertext"
       ],
       "rsa_oaep.https.any.html": true,
       "rsa_oaep.https.any.worker.html": true
@@ -853,20 +817,7 @@
     "wrapKey_unwrapKey": {
       "wrapKey_unwrapKey.https.any.html": [
         "Can wrap and unwrap ECDH public key keys using spki and AES-CTR",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and AES-CTR",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using jwk and AES-CTR",
-        "Can unwrap AES-GCM non-extractable keys using jwk and AES-CTR",
         "Can wrap and unwrap ECDH public key keys using spki and AES-CBC",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and AES-CBC",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using jwk and AES-CBC",
-        "Can unwrap AES-GCM non-extractable keys using jwk and AES-CBC",
-        "Can wrap and unwrap ECDSA public key keys using spki and AES-GCM",
-        "Can wrap and unwrap ECDSA public key keys using jwk and AES-GCM",
-        "Can wrap and unwrap ECDSA private key keys using pkcs8 and AES-GCM",
-        "Can wrap and unwrap ECDSA private key keys as non-extractable using pkcs8 and AES-GCM",
-        "Can wrap and unwrap ECDSA private key keys using jwk and AES-GCM",
-        "Can wrap and unwrap ECDSA private key keys as non-extractable using jwk and AES-GCM",
-        "Can unwrap ECDSA private key non-extractable keys using jwk and AES-GCM",
         "Can wrap and unwrap ECDH public key keys using spki and AES-GCM",
         "Can wrap and unwrap ECDH public key keys using jwk and AES-GCM",
         "Can wrap and unwrap ECDH private key keys using pkcs8 and AES-GCM",
@@ -874,6 +825,11 @@
         "Can wrap and unwrap ECDH private key keys using jwk and AES-GCM",
         "Can wrap and unwrap ECDH private key keys as non-extractable using jwk and AES-GCM",
         "Can unwrap ECDH private key non-extractable keys using jwk and AES-GCM",
+        "Can wrap and unwrap HMAC keys using raw and AES-GCM",
+        "Can wrap and unwrap HMAC keys as non-extractable using raw and AES-GCM",
+        "Can wrap and unwrap HMAC keys using jwk and AES-GCM",
+        "Can wrap and unwrap HMAC keys as non-extractable using jwk and AES-GCM",
+        "Can unwrap HMAC non-extractable keys using jwk and AES-GCM",
         "Can wrap and unwrap AES-CTR keys using raw and AES-GCM",
         "Can wrap and unwrap AES-CTR keys as non-extractable using raw and AES-GCM",
         "Can wrap and unwrap AES-CTR keys using jwk and AES-GCM",
@@ -894,11 +850,20 @@
         "Can wrap and unwrap AES-KW keys using jwk and AES-GCM",
         "Can wrap and unwrap AES-KW keys as non-extractable using jwk and AES-GCM",
         "Can unwrap AES-KW non-extractable keys using jwk and AES-GCM",
-        "Can wrap and unwrap HMAC keys using raw and AES-GCM",
-        "Can wrap and unwrap HMAC keys as non-extractable using raw and AES-GCM",
-        "Can wrap and unwrap HMAC keys using jwk and AES-GCM",
-        "Can wrap and unwrap HMAC keys as non-extractable using jwk and AES-GCM",
-        "Can unwrap HMAC non-extractable keys using jwk and AES-GCM",
+        "Can wrap and unwrap ECDSA public key keys using spki and AES-GCM",
+        "Can wrap and unwrap ECDSA public key keys using jwk and AES-GCM",
+        "Can wrap and unwrap ECDSA private key keys using pkcs8 and AES-GCM",
+        "Can wrap and unwrap ECDSA private key keys as non-extractable using pkcs8 and AES-GCM",
+        "Can wrap and unwrap ECDSA private key keys using jwk and AES-GCM",
+        "Can wrap and unwrap ECDSA private key keys as non-extractable using jwk and AES-GCM",
+        "Can unwrap ECDSA private key non-extractable keys using jwk and AES-GCM",
+        "Can wrap and unwrap RSASSA-PKCS1-v1_5 public key keys using spki and AES-GCM",
+        "Can wrap and unwrap RSASSA-PKCS1-v1_5 public key keys using jwk and AES-GCM",
+        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys using pkcs8 and AES-GCM",
+        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys as non-extractable using pkcs8 and AES-GCM",
+        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys using jwk and AES-GCM",
+        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys as non-extractable using jwk and AES-GCM",
+        "Can unwrap RSASSA-PKCS1-v1_5 private key non-extractable keys using jwk and AES-GCM",
         "Can wrap and unwrap RSA-PSS public key keys using spki and AES-GCM",
         "Can wrap and unwrap RSA-PSS public key keys using jwk and AES-GCM",
         "Can wrap and unwrap RSA-PSS private key keys using pkcs8 and AES-GCM",
@@ -913,28 +878,11 @@
         "Can wrap and unwrap RSA-OAEP private key keys using jwk and AES-GCM",
         "Can wrap and unwrap RSA-OAEP private key keys as non-extractable using jwk and AES-GCM",
         "Can unwrap RSA-OAEP private key non-extractable keys using jwk and AES-GCM",
-        "Can wrap and unwrap RSASSA-PKCS1-v1_5 public key keys using spki and AES-GCM",
-        "Can wrap and unwrap RSASSA-PKCS1-v1_5 public key keys using jwk and AES-GCM",
-        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys using pkcs8 and AES-GCM",
-        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys as non-extractable using pkcs8 and AES-GCM",
-        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys using jwk and AES-GCM",
-        "Can wrap and unwrap RSASSA-PKCS1-v1_5 private key keys as non-extractable using jwk and AES-GCM",
-        "Can unwrap RSASSA-PKCS1-v1_5 private key non-extractable keys using jwk and AES-GCM",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and AES-KW",
-        "Can wrap and unwrap ECDH public key keys using spki and RSA-OAEP",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and RSA-OAEP",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using jwk and RSA-OAEP",
-        "Can unwrap AES-GCM non-extractable keys using jwk and RSA-OAEP"
+        "Can wrap and unwrap ECDH public key keys using spki and RSA-OAEP"
       ],
       "wrapKey_unwrapKey.https.any.worker.html": [
         "Can wrap and unwrap ECDH public key keys using spki and AES-CTR",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and AES-CTR",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using jwk and AES-CTR",
-        "Can unwrap AES-GCM non-extractable keys using jwk and AES-CTR",
         "Can wrap and unwrap ECDH public key keys using spki and AES-CBC",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and AES-CBC",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using jwk and AES-CBC",
-        "Can unwrap AES-GCM non-extractable keys using jwk and AES-CBC",
         "Can wrap and unwrap ECDSA public key keys using spki and AES-GCM",
         "Can wrap and unwrap ECDSA public key keys using jwk and AES-GCM",
         "Can wrap and unwrap ECDSA private key keys using pkcs8 and AES-GCM",
@@ -995,11 +943,7 @@
         "Can wrap and unwrap RSA-PSS private key keys using jwk and AES-GCM",
         "Can wrap and unwrap RSA-PSS private key keys as non-extractable using jwk and AES-GCM",
         "Can unwrap RSA-PSS private key non-extractable keys using jwk and AES-GCM",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and AES-KW",
-        "Can wrap and unwrap ECDH public key keys using spki and RSA-OAEP",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using raw and RSA-OAEP",
-        "Can wrap and unwrap AES-GCM keys as non-extractable using jwk and RSA-OAEP",
-        "Can unwrap AES-GCM non-extractable keys using jwk and RSA-OAEP"
+        "Can wrap and unwrap ECDH public key keys using spki and RSA-OAEP"
       ]
     }
   },