w3c/webcrypto

View on GitHub

The W3C Web Cryptography API

Stars: 294
Forks: 78
Open beginner issues: 0
Indexed issues: 59

Dominant language: HTML
License: No license data
Last GitHub push: Aug 11, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

59 open issues indexed

Proposal: `randomUUIDv7()` Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/webcrypto#561 · 8 comments · 5 reactions · Opened Aug 27, 2026
ECDH deriveBits: step 5's OperationError precedes the curve-mismatch check, but no browser does that Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

w3c/webcrypto#560 · 3 comments · Opened Aug 21, 2026
Consider explicitly allowing `digest` for non-secure origins Open

Difficulty 5/5 Over a week Newbie friendliness 28/100

w3c/webcrypto#556 · 1 comment · 3 reactions · Opened Apr 28, 2026
Was pre-hashed input considered for ECDSA? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#431 · 11 comments · 1 reaction · Opened Mar 17, 2026
Allow creating hedged ECDSA signatures? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/webcrypto#430 · 3 comments · Opened Mar 16, 2026
Allow creating hedged EdDSA signatures? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#424 · 1 comment · Opened Jan 28, 2026
Make small-order checks in EdDSA optional? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/webcrypto#423 · Opened Jan 28, 2026
support SharedArrayBuffers with crypto.getRandomValues Open

needs implementor interest needs tests

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/webcrypto#421 · 2 comments · Opened Jan 26, 2026
Consider dropping the secure context requirement for `randomUUID()` Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#408 · 5 comments · 6 reactions · Opened Jul 10, 2025
Provide a way to derive a public key from a private key? Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/webcrypto#406 · 2 comments · 4 reactions · Opened Jul 3, 2025
Add `raw-private` (and possibly `raw-public` and `raw-secret`) key formats? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#393 · 1 comment · 4 reactions · Opened Dec 31, 2024
Reconsider "in parallel"? Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

w3c/webcrypto#389 · 20 comments · Opened Dec 19, 2024
Throw for all truncation in ECDH? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#369 · 12 comments · Opened Sep 16, 2024
Support for PQC algorithms: ML-KEM, ML-DSA and SLH-DSA ? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#367 · 6 comments · 8 reactions · Opened Aug 21, 2024
Normalize an algorithm calls recursively itself with an argument of the wrong type Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

w3c/webcrypto#365 · 1 comment · Opened Jul 24, 2024
Unspecified `importKey` behavior for PKCS8-encoded raw private keys Open

Difficulty 5/5 Over a week Newbie friendliness 32/100

w3c/webcrypto#356 · 6 comments · Opened Oct 13, 2023
standardize device biometrics / PIN check as a 2nd factor to support web crypto operations Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#354 · 1 comment · 2 reactions · Opened Aug 31, 2023
sign browser key iff biometrics/os account passcode verified (mimic passkeys in the browser and build on its implementations in browsers/OS) Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#350 · 11 comments · 6 reactions · Opened Jul 7, 2023
JSON conversion Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

w3c/webcrypto#349 · 2 comments · Opened Jun 30, 2023
Can we expose Crypto/SubtleCrypto to all Worklet / all scopes? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#338 · 2 comments · Opened Apr 13, 2023
[feature request] importing SPKI from X.509 Certificates Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/webcrypto#332 · 6 comments · 1 reaction · Opened Feb 18, 2023
Persistent storage of key Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#331 · Opened Nov 28, 2022
problems importing PEM from Httb Bis WGs Signatures 13 draft Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

w3c/webcrypto#330 · 1 comment · Opened Nov 6, 2022
SHA-3 (Keccak) support Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#319 · 13 comments · 11 reactions · Opened Jul 31, 2022
ECDSA adding curve brainpoolP384 Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#317 · 1 comment · Opened Jul 21, 2022
Add support for SM3 Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#316 · 6 comments · 1 reaction · Opened Jul 19, 2022
Allow `derivedKeyAlgorithm == 'HKDF'` for `deriveKey()` Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/webcrypto#314 · 4 comments · 9 reactions · Opened May 28, 2022
Add support for BLAKE2 (RFC7693) Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/webcrypto#313 · 2 comments · 4 reactions · Opened May 15, 2022
Ambiguity of the Web Crypto API Doc Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

w3c/webcrypto#310 · 1 comment · Opened Mar 7, 2022
Test importing spki and pkcs8 keys with algorithm-specific OIDs Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

w3c/webcrypto#307 · 15 comments · Opened Dec 15, 2021
Consider supporting CAESAR recommendations Open

needs implementor interest proposal

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#306 · 2 comments · 2 reactions · Opened Dec 15, 2021
No tests for `jwk.alg` property in RSA imports and exports Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

w3c/webcrypto#304 · 1 reaction · Opened Dec 14, 2021
AES-CBC without PKCS#7 padding for 16-byte aligned blocks Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#295 · 6 comments · 6 reactions · Opened Oct 29, 2021
Remove extensibility Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#294 · 2 comments · 2 reactions · Opened Oct 26, 2021
Mark CryptoKeyPair members as required Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

w3c/webcrypto#290 · Opened Oct 25, 2021
Why isn't `crypto.getRandomValues` accept a data view? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#284 · 1 comment · Opened Sep 24, 2021
[security] Please strongly discourage pure javascript implementation Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#277 · 4 comments · 1 reaction · Opened Sep 2, 2021
timingSafeEqual functionality Open

needs implementor interest proposal

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#270 · 24 comments · 23 reactions · Opened Aug 13, 2021
Editorial: adopt Infra Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

w3c/webcrypto#268 · 1 reaction · Opened Jul 19, 2021
Proposal: better key derivation functions Open

needs implementor interest proposal

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#265 · 5 comments · 6 reactions · Opened May 22, 2021
PROPOSAL: Add support for general (hardware backed) cryptographic signatures and key exchange Open

needs implementor interest proposal

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#263 · 36 comments · 48 reactions · Opened May 7, 2021
Deterministically derive key pair from secret, salt, and context? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#254 · 2 reactions · Opened Apr 28, 2021
HashAlgorithmIdentifier refers another typedef name AlgorithmIdentifier Open

editorial question

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

w3c/webcrypto#235 · Opened Feb 13, 2020
Please add support for SM series algorithms. Open

needs implementor interest proposal

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#231 · 3 comments · Opened Dec 30, 2019
Using Math.getRandomValues() ? Open

editorial question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

w3c/webcrypto#227 · 3 comments · 1 reaction · Opened Oct 16, 2019
Please add support for chacha20-poly1305 Open

needs implementor interest positive signals from web developers proposal

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#223 · 7 comments · 40 reactions · Opened Jul 12, 2019
Crypto needs defensive deep-copy constructor Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/webcrypto#220 · 1 comment · Opened Mar 6, 2019
Accept Blob and SharedArrayBuffer too? Open

needs implementor interest proposal

Difficulty 5/5 Over a week Newbie friendliness 25/100

w3c/webcrypto#216 · 2 comments · 2 reactions · Opened Jan 14, 2019
PBKDF2 to ECDSA/EdDSA key Open

needs implementor interest proposal

Difficulty 5/5 Over a week Newbie friendliness 20/100

w3c/webcrypto#212 · 8 comments · 9 reactions · Opened Nov 6, 2018
FrozenArray for CryptoKey.usages? Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

w3c/webcrypto#208 · Opened Jul 21, 2018

w3c/webcrypto

Get new issues in your inbox