27783 2015-01-07 22:30:20 +0000 Incompatible specification for how usages is enforced for ECDH 2016-05-24 00:25:37 +0000 1 1 1 Unclassified Web Cryptography Web Cryptography API Document unspecified PC Windows NT RESOLVED MOVED P2 normal --- 1 ietf sleevi ericroman mitar.w3 public-webcrypto watsonm oldest_to_newest 116902 0 ietf 2015-01-07 22:30:20 +0000 ECDH says that key usages must contain deriveKey or deriveBits in step 3 for type jwk. ECDH says that key usages must be empty in step 4 for type jwk. The two are mutually incompatable. I assume one is supposed to be for when d is absent as both are marked as being for d being present. 116903 1 sleevi 2015-01-07 22:41:07 +0000 Can you please provide a link to the revision you are quoting? From the current https://dvcs.w3.org/hg/webcrypto-api/raw-file/d73602c274f0/spec/Overview.html#ecdh-operations Import Key JWK 3. If the "d" field is present and if usages contains an entry which is not "deriveKey" or "deriveBits" then throw a SyntaxError. 4. If the "d" field is present and if usages is not empty then throw a SyntaxError. 116907 2 ericroman 2015-01-08 00:33:44 +0000 I agree with Jim, the language in step 4 seems reversed. It would make more sense if it read: If the "d" field is *NOT* present and if usages is not empty then throw a SyntaxError. Which phrased differently is "public ECDH keys must have empty usages". (The prohibition of private ECDH keys having empty usages is already covered by the generic language of importKey() which place such a restriction on secret/private keys) 125354 3 ietf 2016-03-04 02:34:03 +0000 as near as I can tell this has been fixed,