Wondering what’s next for npm?Check out our public roadmap! »

    webcrypto-shim-commonjs

    0.1.1 • Public • Published

    webcrypto-shim.js

    Web Cryptography API shim for legacy browsers.

    Quick start with Bower

    Install the package

    $ bower install webcrypto-shim

    and link scripts into your html code

    <script src="bower_components/promiz/promiz.js"></script>
    <script src="bower_components/webcrypto-shim/webcrypto-shim.js"></script>

    Now you can use webcrypto api through the window.crypto and window.crypto.subtle objects.

    Note that IE11 lacks support of Promise-s and requires promiz.js to work properly. You can replace promiz.js with any Promise/A+-compatible implementation.

    Supported browsers

    The library is targeted to fix these browsers having prefixed and buggy webcrypto api implementations:

    • Internet Explorer 11, Mobile Internet Explorer 11,
    • Safari 8+, iOS Safari 8+.

    These browsers have unprefixed and conforming webcrypto api implementations, so no need in shim:

    • Chrome 43+, Chrome for Android 44+,
    • Opera 24+,
    • Firefox 34+,
    • Edge 12+.

    Crossbrowser support of algorithms & operations

    • SHA-256, SHA-384: digest

    • HMAC: sign, verify, generateKey, importKey, exportKey

      • with hash SHA-1, SHA-256, SHA-384
    • AES-CBC: encrypt, decrypt, generateKey, importKey, exportKey, wrapKey, unwrapKey

      • TODO tests
    • AES-KW: generateKey, importKey, exportKey, wrapKey, unwrapKey

      • TODO tests
    • RSASSA-PKCS1-v1_5: sign, verify, generateKey, importKey, exportKey

      • with hash SHA-256, SHA-384
      • and modulusLength at least 2048 bits
    • RSA-OAEP: encrypt, decrypt, generateKey, importKey, exportKey, wrapKey, unwrapKey

      • with hash SHA-1
      • and modulusLength at least 2048 bits
      • FIXME only "jwk" format for wrapped/unwrapped keys

    Known limitations

    deriveKey, deriveBits are not supported under IE11 and Safari since there is no implementation of any algorithm providing key derivation.

    Under IE11 exception is thrown in case of empty input data since IE11 silently discards empty data and leaves returned Promise object never resolved nor rejected.

    Other browsers support

    See https://vibornoff.github.io/webcrypto-examples/index.html

    Sponsored by

    BrowserStack — automated & manual crossbrowser testing solution.

    Install

    npm i webcrypto-shim-commonjs

    DownloadsWeekly Downloads

    2

    Version

    0.1.1

    License

    MIT

    Last publish

    Collaborators

    • avatar