Modern Algorithms in WebCrypto

[twiss]

Introduction

This proposal aims to modernize the set of cryptographic algorithms available in the Web Cryptography API, such that web applications can make use of post-quantum secure and performant cryptographic algorithms.

For more details, see the draft specification.

Feedback

I welcome feedback in this thread, but encourage you to file bugs against the repo.

[mikewest]

Moving this to WICG for additional discussion would be a good idea. I'm confident that folks in Chrome will be interested, though I'm not at all confident there's commitment to implement all of the suggested algorithms.

[Frosne]

As a member of the Firefox team, I strongly support the addition of new primitives to the WebCrypto API. However, in alignment with Mike’s perspective, we do not currently intend to implement all of them at this stage.

[twiss]

Thanks, both! Btw, just for clarity, none of the algorithms in the draft spec are marked as mandatory to implement, so that's perfectly fine and understandable.

[panva]

I welcome this proposal and support its move to WICG. On the Node.js side of things I'm already going through an implementation of some of these algorithms and new methods.

[jasnell]

From both a Node.js and Cloudflare Workers point of view, I support this and would look to implement.

[dadrian]

Agree we should move this to WICG. At minimum, Chrome is interested in ML-KEM, ML-DSA, and ChaChaPoly1305

[yoavweiss]

The repo now lives in https://github.com/WICG/webcrypto-modern-algos

Happy incubating!!

[twiss]

Thanks a lot! :)