Extractable vs Non Extractable Keys
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 15/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Active
- Tech stack
- javascript
- Domain
- cryptography, security
Research direction
Start from the exported-secret example in the explainer, where raw bytes are imported into WebCrypto, and compare it with how a non-extractable CryptoKey would be handled. The issue only proposes an API and documentation, so the first step is a maintainer decision on the API shape and scope, with the MLS RFC as the reference for derived keys. Done would be an agreed proposal, not a code change.
Written by the indexing model from the issue text.
Description
The exported-secret example returns raw bytes that the application imports into WebCrypto. This is flexible, but it exposes secret material to application code.
may be adding an api that returns non-extractable CryptoKey and documenting how derived keys related to group epoch/label and so on might be helpful ( however the latter is covered mostly on mls rfc too)
- Dominant language
- No language data
- Stars
- 1
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from mozilla/mls-webapi-explainer
-
Difficulty 1/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
-
Difficulty 5/5 Over a week Newbie friendliness 18/100
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
All issues in mozilla/mls-webapi-explainer
Similar issues
-
track: content
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
0xAndersen/witness-log#10 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 78/100
btclib-org/btclib-wallet#350 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
French BIP39 wordlist starts with a UTF-8 BOM, so generated French mnemonics carry U+FEFF and derive a non-canonical seedPossibly taken @Kshot3000 claimed this 1 day ago. Open
Difficulty 1/5 Under an hour Newbie friendliness 91/100
ergoplatform/sigma-rust#976 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
bitcoin-core/secp256k1#1958 ·
Maintainers usually reply within 1 day