Skip to content
This repository has been archived by the owner on Nov 3, 2021. It is now read-only.

Support RC2 and 3DES-CBC for PKCS12 #55

Open
rmhrisk opened this issue May 18, 2016 · 1 comment
Open

Support RC2 and 3DES-CBC for PKCS12 #55

rmhrisk opened this issue May 18, 2016 · 1 comment

Comments

@rmhrisk
Copy link
Contributor

rmhrisk commented May 18, 2016

Unfortunately, it seems that all versions of Windows (even Windows 10) still produces PKCS #12’s using pbeWithSHAAnd3-KeyTripleDES-CBC for “privacy” of keys and privacy of certificates it uses pbeWithSHAAnd40BitRC2-CBC. It then relies on the HMAC scheme for integrity.

For us to support PKCS#12 in a way an interoperable with Windows we will need to support these weak algorithms. They are not specified in WebCrypto (because they are weak) but we can still choose to support them.

@fuson
Copy link

fuson commented May 27, 2017

Yep, it will be very nice!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants