fixup! crypto: add SubleCrypto.supports feature detection in Web Crypto API

panva · panva · commit cb66676d6c55 · 2025-03-02T11:23:36.000+01:00
diff --git a/lib/internal/crypto/webcrypto.js b/lib/internal/crypto/webcrypto.js
@@ -41,6 +41,8 @@ const {
 const {
   bigIntArrayToUnsignedInt,
   getBlockSize,
+  getCiphers,
+  getCurves,
   normalizeAlgorithm,
   normalizeHashName,
   validateBitLength,
@@ -1033,6 +1035,28 @@ function check(op, alg, length) {
     return false;
   }
 
+  if (
+    normalizedAlgorithm.namedCurve &&
+    !getCurves().includes(kNamedCurveAliases[normalizedAlgorithm.namedCurve])
+  ) {
+    return false;
+  }
+
+  if (normalizedAlgorithm.name.startsWith('AES') && normalizedAlgorithm.length) {
+    const mode = normalizedAlgorithm.name.substring(4).toLowerCase()
+    let cipher;
+    switch (mode) {
+      case 'kw':
+        cipher = `aes${length}-wrap`
+        break;
+      default:
+        cipher = `aes-${length}-${mode}`
+    }
+    if (!getCiphers().includes(cipher)) {
+      return false;
+    }
+  }
+
   if (op === 'wrapKey') return true;
   if (op === 'unwrapKey') return true;
   if (op === 'exportKey') return true;
@@ -1046,12 +1070,6 @@ function check(op, alg, length) {
       return false;
     }
 
-    if (normalizedAlgorithm.namedCurve) {
-      if (!ArrayPrototypeIncludes(ObjectKeys(kNamedCurveAliases), normalizedAlgorithm.namedCurve)) {
-        return false;
-      }
-    }
-
     return true;
   }
 
