webcrypto-shim.js

Web Cryptography API shim for legacy browsers.

Quick start with Bower

Install the package

$ bower install webcrypto-shim

and link scripts into your html code

<script src="bower_components/promiz/promiz.js"></script>
<script src="bower_components/webcrypto-shim/webcrypto-shim.js"></script>

Now you can use webcrypto api through the window.crypto and window.crypto.subtle objects.

Note that IE11 lacks support of Promise-s and requires promiz.js to work properly. You can replace promiz.js with any Promise/A+-compatible implementation.

Supported browsers

The library is targeted to fix these browsers having prefixed and buggy webcrypto api implementations:

Internet Explorer 11, Mobile Internet Explorer 11,
Safari 8 - 10, iOS Safari 8 - 10.

These browsers have unprefixed and conforming webcrypto api implementations, so no need in shim:

Chrome 43+, Chrome for Android 44+,
Opera 24+,
Firefox 34+,
Edge 12+.
Safari 11+.

Crossbrowser support of algorithms & operations

SHA-256, SHA-384: digest
HMAC: sign, verify, generateKey, importKey, exportKey
- with hash SHA-1, SHA-256, SHA-384
AES-CBC: encrypt, decrypt, generateKey, importKey, exportKey, wrapKey, unwrapKey
- TODO tests
AES-KW: generateKey, importKey, exportKey, wrapKey, unwrapKey
- TODO tests
RSASSA-PKCS1-v1_5: sign, verify, generateKey, importKey, exportKey
- with hash SHA-256, SHA-384
- and modulusLength at least 2048 bits
RSA-OAEP: encrypt, decrypt, generateKey, importKey, exportKey, wrapKey, unwrapKey
- with hash SHA-1
- and modulusLength at least 2048 bits
- FIXME only "jwk" format for wrapped/unwrapped keys

Known limitations

deriveKey, deriveBits are not supported under IE11 and Safari since there is no implementation of any algorithm providing key derivation.

Under IE11 exception is thrown in case of empty input data since IE11 silently discards empty data and leaves returned Promise object never resolved nor rejected.

Other browsers support

See https://vibornoff.github.io/webcrypto-examples/index.html