Ryan Hurst

icon indicating a website link unmitigatedrisk.com icon indicating an email [email protected]

icon company Peculiar Ventures icon location Seattle, San Francisco icon location @google, @letsencrypt, @globalsign, @microsoft, @PeculiarVentures and others. I like cryptography and modern web applications.

Results 412 comments of Ryan Hurst

Signing a digest

I don’t love deviating from the WebCrypto API but think this might be a good change but don’t want to do it for the sake of doing it. E.g we...

Memory leak when verifying ECDSA signatures

We will try to look as soon as possible with new years coming up it may take a few days.

Memory leak when verifying ECDSA signatures

That would help.

Memory leak when verifying ECDSA signatures

What is the growth like? Each key imported would realistically increase the memory footprint.

HMAC sign/verify ignores algorithm param length

@witchent is this for the regular signal client or a personal project?

HMAC sign/verify ignores algorithm param length

A matrix to signal bridge would be interesting. Yes, I am worried about the v1->v2 difference for sure. Just wanted to asses how much effort to put in once that's...

AES-KW key unwrapping does not check for integrity

Thanks for the quality bug. We will investigate.

Add list of algorithms and functions supported to readme

This is another way to represent this information https://www.chromium.org/blink/webcrypto

Need to update readme to make it clear how to use on Windows

My best guess is Appveyor is picking up an older version of OpenSSL. It seems like its [installing 1.02](https://ci.appveyor.com/project/hildjj/node-webcrypto-ossl/build/1.0.33#L6), which isn't the latest but I would expect that function to...

Need to update readme to make it clear how to use on Windows

This makes sense to me but I want to hear what @microshine thinks also. As for your questions, the first I will leave to @microshine. For the second I think...