cloudflare / cloudflare/blindrsa-ts

Partially-Blind RSA verification not supported in browser

Open
#67 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
34
Forks
7
Avg merge
4m
Merged PRs (30d)
1

Description

This library currently doesn't support PBRSA verification in browser due to `crypto.subtle` not allowing large public exponents, as mentioned in `README.md`.

I've created a small reproducible example here: https://github.com/karx1/blindrsa-repro that will illustrate the gap. Ideally, the browser page should show `valid? true`, but instead it shows `ERROR: OperationError`.

Contributor guide

Open the contributing guide

Research direction

Start with the browser limitations described in README.md and run the linked blindrsa-repro example to observe the crypto.subtle OperationError. Trace the browser verification path in the library and determine what change is needed so the example reports valid? true without the error.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
cryptography, web-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.