[WebCrypto] Add WebCryptoAPI WPT for CryptoKey serialization

hubertchao · chromium-wpt-export-bot · commit 2aa7252946c8 · 2026-05-16T19:52:19.000-07:00
We added ML-DSA and ML-KEM with broken CryptoKey serialization, but this wasn't exposed because there was no WPT test for it. Add a WPT test for serialization by roundtripping a message with a CryptoKey and comparing the exportKey results. (The other main way to do CryptoKey serialization is to use an IndexedDB. Posting messages was simpler.) Bug: 512509718 Change-Id: I7499ec3a05b6b9e72f22c00e0815f4f847027fe3 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7842729 Reviewed-by: Daniel Cheng <dcheng@chromium.org> Reviewed-by: David Benjamin <davidben@chromium.org> Commit-Queue: Hubert Chao <hchao@chromium.org> Cr-Commit-Position: refs/heads/main@{#1631811}
diff --git a/WebCryptoAPI/serialization/aes-cbc.https.window.js b/WebCryptoAPI/serialization/aes-cbc.https.window.js
@@ -0,0 +1,11 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'AES-CBC',
+    resultType: 'CryptoKey',
+    usages: ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'],
+    exportFormat: 'raw'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/aes-ctr.https.window.js b/WebCryptoAPI/serialization/aes-ctr.https.window.js
@@ -0,0 +1,11 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'AES-CTR',
+    resultType: 'CryptoKey',
+    usages: ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'],
+    exportFormat: 'raw'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/aes-gcm.https.window.js b/WebCryptoAPI/serialization/aes-gcm.https.window.js
@@ -0,0 +1,11 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'AES-GCM',
+    resultType: 'CryptoKey',
+    usages: ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'],
+    exportFormat: 'raw'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/aes-kw.https.window.js b/WebCryptoAPI/serialization/aes-kw.https.window.js
@@ -0,0 +1,11 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'AES-KW',
+    resultType: 'CryptoKey',
+    usages: ['wrapKey', 'unwrapKey'],
+    exportFormat: 'raw'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/aes-ocb.tentative.https.window.js b/WebCryptoAPI/serialization/aes-ocb.tentative.https.window.js
@@ -0,0 +1,11 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'AES-OCB',
+    resultType: 'CryptoKey',
+    usages: ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'],
+    exportFormat: 'raw-secret'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/chacha20-poly1305.tentative.https.window.js b/WebCryptoAPI/serialization/chacha20-poly1305.tentative.https.window.js
@@ -0,0 +1,11 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'ChaCha20-Poly1305',
+    resultType: 'CryptoKey',
+    usages: ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'],
+    exportFormat: 'raw-secret'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/ecdh.https.window.js b/WebCryptoAPI/serialization/ecdh.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'ECDH',
+    resultType: 'CryptoKeyPair',
+    usages: ['deriveKey', 'deriveBits'],
+    publicFormat: 'raw',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/ecdsa.https.window.js b/WebCryptoAPI/serialization/ecdsa.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'ECDSA',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'raw',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/ed25519.https.window.js b/WebCryptoAPI/serialization/ed25519.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'Ed25519',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'raw',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/ed448.https.window.js b/WebCryptoAPI/serialization/ed448.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'Ed448',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'raw',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/hmac.https.window.js b/WebCryptoAPI/serialization/hmac.https.window.js
@@ -0,0 +1,11 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'HMAC',
+    resultType: 'CryptoKey',
+    usages: ['sign', 'verify'],
+    exportFormat: 'raw'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/kmac.tentative.https.window.js b/WebCryptoAPI/serialization/kmac.tentative.https.window.js
@@ -0,0 +1,17 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'KMAC128',
+    resultType: 'CryptoKey',
+    usages: ['sign', 'verify'],
+    exportFormat: 'raw-secret'
+  },
+  {
+    name: 'KMAC256',
+    resultType: 'CryptoKey',
+    usages: ['sign', 'verify'],
+    exportFormat: 'raw-secret'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/mldsa.tentative.https.window.js b/WebCryptoAPI/serialization/mldsa.tentative.https.window.js
@@ -0,0 +1,27 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+
+run_test([
+  {
+    name: 'ML-DSA-44',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'raw-public',
+    privateFormat: 'raw-seed'
+  },
+  {
+    name: 'ML-DSA-65',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'raw-public',
+    privateFormat: 'raw-seed'
+  },
+  {
+    name: 'ML-DSA-87',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'raw-public',
+    privateFormat: 'raw-seed'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/mlkem.tentative.https.window.js b/WebCryptoAPI/serialization/mlkem.tentative.https.window.js
@@ -0,0 +1,32 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'ML-KEM-512',
+    resultType: 'CryptoKeyPair',
+    usages: [
+      'decapsulateBits', 'decapsulateKey', 'encapsulateBits', 'encapsulateKey'
+    ],
+    publicFormat: 'raw-public',
+    privateFormat: 'raw-seed'
+  },
+  {
+    name: 'ML-KEM-768',
+    resultType: 'CryptoKeyPair',
+    usages: [
+      'decapsulateBits', 'decapsulateKey', 'encapsulateBits', 'encapsulateKey'
+    ],
+    publicFormat: 'raw-public',
+    privateFormat: 'raw-seed'
+  },
+  {
+    name: 'ML-KEM-1024',
+    resultType: 'CryptoKeyPair',
+    usages: [
+      'decapsulateBits', 'decapsulateKey', 'encapsulateBits', 'encapsulateKey'
+    ],
+    publicFormat: 'raw-public',
+    privateFormat: 'raw-seed'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/resources/post-page.html b/WebCryptoAPI/serialization/resources/post-page.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<title>Post Target</title>
+
+<script>
+window.addEventListener('message', function(e) {
+  opener.postMessage(e.data);
+});
+</script>
diff --git a/WebCryptoAPI/serialization/rsa-oaep.https.window.js b/WebCryptoAPI/serialization/rsa-oaep.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'RSA-OAEP',
+    resultType: 'CryptoKeyPair',
+    usages: ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'],
+    publicFormat: 'spki',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/rsa-pss.https.window.js b/WebCryptoAPI/serialization/rsa-pss.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'RSA-PSS',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'spki',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/rsassa-pkcs1-v1_5.https.window.js b/WebCryptoAPI/serialization/rsassa-pkcs1-v1_5.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'RSASSA-PKCS1-v1_5',
+    resultType: 'CryptoKeyPair',
+    usages: ['sign', 'verify'],
+    publicFormat: 'spki',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/serialization.js b/WebCryptoAPI/serialization/serialization.js
@@ -0,0 +1,76 @@
+function run_test(vectors) {
+  function waitForEvent(obj, ev) {
+    return new Promise((resolve) => {
+      obj.addEventListener(ev, resolve, {once: true});
+    });
+  }
+
+  function testCryptoKeySerialization(
+      generateKeyAlgorithm, generateKeyUsages, exportFormat) {
+    promise_test(async t => {
+      var cryptoKey = await crypto.subtle.generateKey(
+          generateKeyAlgorithm, true, generateKeyUsages);
+      const keyExported =
+          await crypto.subtle.exportKey(exportFormat, cryptoKey);
+
+      const popup = window.open('resources/post-page.html');
+      t.add_cleanup(() => popup.close());
+
+
+      // Wait for window to load.
+      await waitForEvent(popup, 'load');
+      popup.postMessage({key: cryptoKey});
+      // Wait to get key back via post.
+      let evt = await waitForEvent(window, 'message');
+      const newKeyExported =
+          await crypto.subtle.exportKey(exportFormat, evt.data.key);
+      assert_true(equalBuffers(keyExported, newKeyExported));
+    }, 'serialization test ' + objectToString(generateKeyAlgorithm));
+  };
+
+  function testCryptoKeyPairSerialization(
+      generateKeyAlgorithm, generateKeyUsages, publicExportFormat,
+      privateExportFormat) {
+    promise_test(async t => {
+      var keyPair = await crypto.subtle.generateKey(
+          generateKeyAlgorithm, true, generateKeyUsages);
+      const publicKeyExported =
+          await crypto.subtle.exportKey(publicExportFormat, keyPair.publicKey);
+      const privateKeyExported = await crypto.subtle.exportKey(
+          privateExportFormat, keyPair.privateKey);
+
+      const popup = window.open('resources/post-page.html');
+      t.add_cleanup(() => popup.close());
+
+      // Wait for window to load.
+      await waitForEvent(popup, 'load');
+      popup.postMessage(
+          {publicKey: keyPair.publicKey, privateKey: keyPair.privateKey});
+      // Wait to get keys back via post.
+      let evt = await waitForEvent(window, 'message');
+      const newPublicKeyExported =
+          await crypto.subtle.exportKey(publicExportFormat, evt.data.publicKey);
+      assert_true(equalBuffers(publicKeyExported, newPublicKeyExported));
+      const newPrivateKeyExported = await crypto.subtle.exportKey(
+          privateExportFormat, evt.data.privateKey);
+      assert_true(equalBuffers(privateKeyExported, newPrivateKeyExported));
+    }, 'serialization test ' + objectToString(generateKeyAlgorithm));
+  };
+
+  vectors.forEach(function(vector) {
+    if (vector.resultType === 'CryptoKey') {
+      allAlgorithmSpecifiersFor(vector.name)
+          .forEach(function(generateKeyAlgorithm) {
+            testCryptoKeySerialization(
+                generateKeyAlgorithm, vector.usages, vector.exportFormat);
+          });
+    } else {
+      allAlgorithmSpecifiersFor(vector.name)
+          .forEach(function(generateKeyAlgorithm) {
+            testCryptoKeyPairSerialization(
+                generateKeyAlgorithm, vector.usages, vector.publicFormat,
+                vector.privateFormat);
+          });
+    }
+  });
+}
diff --git a/WebCryptoAPI/serialization/x25519.https.window.js b/WebCryptoAPI/serialization/x25519.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'X25519',
+    resultType: 'CryptoKeyPair',
+    usages: ['deriveKey', 'deriveBits'],
+    publicFormat: 'raw',
+    privateFormat: 'pkcs8'
+  },
+]);
diff --git a/WebCryptoAPI/serialization/x448.https.window.js b/WebCryptoAPI/serialization/x448.https.window.js
@@ -0,0 +1,12 @@
+// META: title=WebCryptoAPI: CryptoKey serialization
+// META: script=../util/helpers.js
+// META: script=serialization.js
+run_test([
+  {
+    name: 'X448',
+    resultType: 'CryptoKeyPair',
+    usages: ['deriveKey', 'deriveBits'],
+    publicFormat: 'raw',
+    privateFormat: 'pkcs8'
+  },
+]);
