feat(ext/crypto): add x25519 and Ed25519 CFRG curves (#14119)

1 files changed, 100 insertions, 130 deletions

diff --git a/tools/wpt/expectation.json b/tools/wpt/expectation.json
index f1b476faf..8bab05159 100644
--- a/tools/wpt/expectation.json
+++ b/tools/wpt/expectation.json
@@ -573,62 +573,8 @@
       "successes_RSASSA-PKCS1-v1_5.https.any.worker.html?11-20": true,
       "successes_RSASSA-PKCS1-v1_5.https.any.worker.html?21-30": true,
       "successes_RSASSA-PKCS1-v1_5.https.any.worker.html?31-last": true,
-      "failures_Ed25519.https.any.html": [
-        "Bad usages: generateKey({name: Ed25519}, true, [encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [deriveBits])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, deriveBits])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, deriveBits])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, deriveBits])",
-        "Empty usages: generateKey({name: Ed25519}, false, [])",
-        "Empty usages: generateKey({name: Ed25519}, true, [])"
-      ],
-      "failures_Ed25519.https.any.worker.html": [
-        "Bad usages: generateKey({name: Ed25519}, true, [encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, encrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, decrypt])",
-        "Bad usages: generateKey({name: Ed25519}, true, [wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, wrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, unwrapKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, deriveKey])",
-        "Bad usages: generateKey({name: Ed25519}, true, [deriveBits])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, deriveBits])",
-        "Bad usages: generateKey({name: Ed25519}, true, [verify, sign, deriveBits])",
-        "Bad usages: generateKey({name: Ed25519}, true, [sign, verify, sign, sign, verify, deriveBits])",
-        "Empty usages: generateKey({name: Ed25519}, false, [])",
-        "Empty usages: generateKey({name: Ed25519}, true, [])"
-      ],
+      "failures_Ed25519.https.any.html": true,
+      "failures_Ed25519.https.any.worker.html": true,
       "failures_Ed448.https.any.html": [
         "Bad usages: generateKey({name: Ed448}, true, [encrypt])",
         "Bad usages: generateKey({name: Ed448}, true, [sign, encrypt])",
@@ -685,74 +631,8 @@
         "Empty usages: generateKey({name: Ed448}, false, [])",
         "Empty usages: generateKey({name: Ed448}, true, [])"
       ],
-      "failures_X25519.https.any.html": [
-        "Bad usages: generateKey({name: X25519}, true, [encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, unwrapKey])",
-        "Empty usages: generateKey({name: X25519}, false, [])",
-        "Empty usages: generateKey({name: X25519}, true, [])"
-      ],
-      "failures_X25519.https.any.worker.html": [
-        "Bad usages: generateKey({name: X25519}, true, [encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, encrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, decrypt])",
-        "Bad usages: generateKey({name: X25519}, true, [sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, sign])",
-        "Bad usages: generateKey({name: X25519}, true, [verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, verify])",
-        "Bad usages: generateKey({name: X25519}, true, [wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, wrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, deriveKey, unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveBits, unwrapKey])",
-        "Bad usages: generateKey({name: X25519}, true, [deriveKey, deriveBits, deriveKey, deriveBits, deriveKey, deriveBits, unwrapKey])",
-        "Empty usages: generateKey({name: X25519}, false, [])",
-        "Empty usages: generateKey({name: X25519}, true, [])"
-      ],
+      "failures_X25519.https.any.html": true,
+      "failures_X25519.https.any.worker.html": true,
       "failures_X448.https.any.html": [
         "Bad usages: generateKey({name: X448}, true, [encrypt])",
         "Bad usages: generateKey({name: X448}, true, [deriveKey, encrypt])",
@@ -821,12 +701,12 @@
         "Empty usages: generateKey({name: X448}, false, [])",
         "Empty usages: generateKey({name: X448}, true, [])"
       ],
-      "successes_Ed25519.https.any.html": false,
-      "successes_Ed25519.https.any.worker.html": false,
+      "successes_Ed25519.https.any.html": true,
+      "successes_Ed25519.https.any.worker.html": true,
       "successes_Ed448.https.any.html": false,
       "successes_Ed448.https.any.worker.html": false,
-      "successes_X25519.https.any.html": false,
-      "successes_X25519.https.any.worker.html": false,
+      "successes_X25519.https.any.html": true,
+      "successes_X25519.https.any.worker.html": true,
       "successes_X448.https.any.html": false,
       "successes_X448.https.any.worker.html": false
     },
@@ -899,8 +779,98 @@
       "rsa_importKey.https.any.worker.html": true,
       "symmetric_importKey.https.any.html": true,
       "symmetric_importKey.https.any.worker.html": true,
-      "okp_importKey.https.any.html": false,
-      "okp_importKey.https.any.worker.html": false
+      "okp_importKey.https.any.html": [
+        "Good parameters: Ed25519 bits (spki, buffer(44), {name: Ed25519}, true, [])",
+        "Good parameters: Ed25519 bits (jwk, object(kty, crv, x), {name: Ed25519}, true, [])",
+        "Good parameters: Ed25519 bits (pkcs8, buffer(48), {name: Ed25519}, true, [sign])",
+        "Good parameters: Ed25519 bits (jwk, object(crv, d, x, kty), {name: Ed25519}, true, [sign])",
+        "Good parameters: Ed25519 bits (spki, buffer(44), {name: Ed25519}, false, [])",
+        "Good parameters: Ed25519 bits (jwk, object(kty, crv, x), {name: Ed25519}, false, [])",
+        "Good parameters: Ed25519 bits (pkcs8, buffer(48), {name: Ed25519}, false, [sign])",
+        "Good parameters: Ed25519 bits (jwk, object(crv, d, x, kty), {name: Ed25519}, false, [sign])",
+        "Good parameters: Ed448 bits (spki, buffer(69), {name: Ed448}, true, [])",
+        "Good parameters: Ed448 bits (jwk, object(kty, crv, x), {name: Ed448}, true, [])",
+        "Good parameters: Ed448 bits (pkcs8, buffer(73), {name: Ed448}, true, [sign])",
+        "Good parameters: Ed448 bits (jwk, object(crv, d, x, kty), {name: Ed448}, true, [sign])",
+        "Good parameters: Ed448 bits (spki, buffer(69), {name: Ed448}, false, [])",
+        "Good parameters: Ed448 bits (jwk, object(kty, crv, x), {name: Ed448}, false, [])",
+        "Good parameters: Ed448 bits (pkcs8, buffer(73), {name: Ed448}, false, [sign])",
+        "Good parameters: Ed448 bits (jwk, object(crv, d, x, kty), {name: Ed448}, false, [sign])",
+        "Good parameters: X25519 bits (spki, buffer(44), {name: X25519}, true, [])",
+        "Good parameters: X25519 bits (jwk, object(kty, crv, x), {name: X25519}, true, [])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, true, [deriveKey])",
+        "Good parameters: X25519 bits (jwk, object(crv, d, x, kty), {name: X25519}, true, [deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, true, [deriveBits, deriveKey])",
+        "Good parameters: X25519 bits (jwk, object(crv, d, x, kty), {name: X25519}, true, [deriveBits, deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, true, [deriveBits])",
+        "Good parameters: X25519 bits (jwk, object(crv, d, x, kty), {name: X25519}, true, [deriveBits])",
+        "Good parameters: X25519 bits (jwk, object(kty, crv, x), {name: X25519}, false, [])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, false, [deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, false, [deriveBits, deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, false, [deriveBits])",
+        "Good parameters: X448 bits (spki, buffer(68), {name: X448}, true, [])",
+        "Good parameters: X448 bits (jwk, object(kty, crv, x), {name: X448}, true, [])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, true, [deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, true, [deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, true, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, true, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, true, [deriveBits])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, true, [deriveBits])",
+        "Good parameters: X448 bits (spki, buffer(68), {name: X448}, false, [])",
+        "Good parameters: X448 bits (jwk, object(kty, crv, x), {name: X448}, false, [])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, false, [deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, false, [deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, false, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, false, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, false, [deriveBits])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, false, [deriveBits])"
+      ],
+      "okp_importKey.https.any.worker.html": [
+        "Good parameters: Ed25519 bits (spki, buffer(44), {name: Ed25519}, true, [])",
+        "Good parameters: Ed25519 bits (jwk, object(kty, crv, x), {name: Ed25519}, true, [])",
+        "Good parameters: Ed25519 bits (pkcs8, buffer(48), {name: Ed25519}, true, [sign])",
+        "Good parameters: Ed25519 bits (jwk, object(crv, d, x, kty), {name: Ed25519}, true, [sign])",
+        "Good parameters: Ed25519 bits (spki, buffer(44), {name: Ed25519}, false, [])",
+        "Good parameters: Ed25519 bits (jwk, object(kty, crv, x), {name: Ed25519}, false, [])",
+        "Good parameters: Ed25519 bits (pkcs8, buffer(48), {name: Ed25519}, false, [sign])",
+        "Good parameters: Ed25519 bits (jwk, object(crv, d, x, kty), {name: Ed25519}, false, [sign])",
+        "Good parameters: Ed448 bits (spki, buffer(69), {name: Ed448}, true, [])",
+        "Good parameters: Ed448 bits (jwk, object(kty, crv, x), {name: Ed448}, true, [])",
+        "Good parameters: Ed448 bits (pkcs8, buffer(73), {name: Ed448}, true, [sign])",
+        "Good parameters: Ed448 bits (jwk, object(crv, d, x, kty), {name: Ed448}, true, [sign])",
+        "Good parameters: Ed448 bits (spki, buffer(69), {name: Ed448}, false, [])",
+        "Good parameters: Ed448 bits (jwk, object(kty, crv, x), {name: Ed448}, false, [])",
+        "Good parameters: Ed448 bits (pkcs8, buffer(73), {name: Ed448}, false, [sign])",
+        "Good parameters: Ed448 bits (jwk, object(crv, d, x, kty), {name: Ed448}, false, [sign])",
+        "Good parameters: X25519 bits (spki, buffer(44), {name: X25519}, true, [])",
+        "Good parameters: X25519 bits (jwk, object(kty, crv, x), {name: X25519}, true, [])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, true, [deriveKey])",
+        "Good parameters: X25519 bits (jwk, object(crv, d, x, kty), {name: X25519}, true, [deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, true, [deriveBits, deriveKey])",
+        "Good parameters: X25519 bits (jwk, object(crv, d, x, kty), {name: X25519}, true, [deriveBits, deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, true, [deriveBits])",
+        "Good parameters: X25519 bits (jwk, object(crv, d, x, kty), {name: X25519}, true, [deriveBits])",
+        "Good parameters: X25519 bits (jwk, object(kty, crv, x), {name: X25519}, false, [])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, false, [deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, false, [deriveBits, deriveKey])",
+        "Good parameters: X25519 bits (pkcs8, buffer(48), {name: X25519}, false, [deriveBits])",
+        "Good parameters: X448 bits (spki, buffer(68), {name: X448}, true, [])",
+        "Good parameters: X448 bits (jwk, object(kty, crv, x), {name: X448}, true, [])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, true, [deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, true, [deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, true, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, true, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, true, [deriveBits])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, true, [deriveBits])",
+        "Good parameters: X448 bits (spki, buffer(68), {name: X448}, false, [])",
+        "Good parameters: X448 bits (jwk, object(kty, crv, x), {name: X448}, false, [])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, false, [deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, false, [deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, false, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, false, [deriveBits, deriveKey])",
+        "Good parameters: X448 bits (pkcs8, buffer(72), {name: X448}, false, [deriveBits])",
+        "Good parameters: X448 bits (jwk, object(crv, d, x, kty), {name: X448}, false, [deriveBits])"
+      ]
     },
     "randomUUID.https.any.html": true,
     "randomUUID.https.any.worker.html": true,