w3c / w3c/webcrypto

PBKDF2 to ECDSA/EdDSA key

Open
#212 8 comments 9 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

needs implementor interest proposal
Dominant language
HTML
Stars
294
Forks
78
PR merge metrics
No merged PRs in 30d

Description

Currently is possible to derivate a user-password to a AES key, using the PBKDF2. However, it's not possible to create a ECDSA key.

I think it's possible to take the PBKDF2 result and create the ECDSA key. If it's a invalid point, throw a return a error.

Currently the WebCrypto don't support EdDSA (Ed25519 for instance), which is bad. The EdDSA seems easier to implement than ECDSA,

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue proposes deriving ECDSA or EdDSA keys from PBKDF2 output and notes that WebCrypto lacks EdDSA support. Start by reviewing the existing PBKDF2, ECDSA, and key-generation specification sections; clarify invalid-point behavior and the intended EdDSA scope. Done requires an agreed specification and corresponding tests, but no files or tests are named here.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.