awaforge

rsa

Apache-2.0Release 1L3

RSA-OAEP + RSA-PSS (FIPS 186-5 §5.4 / RFC 8017) — asymmetric encryption + signatures. PKCS#1 v1.5 explicit reject.

Module rsa | Source packages/front/fw/src/crypto/pkc/rsa.js | Deps sha256, bitArray, utf8, hex | Worker-safe yes

CRT auto-enabled for decrypt/sign (4× speedup). Chaum/Pollard RSA blinding enabled by default (anti-Boneh-Brumley 2003 timing attack).

Resolve

const rsa = runtime.resolve('rsa');
// Returns: { oaepEncrypt, oaepDecrypt, pssSign, pssVerify, pkcs1v15*, _internal }

API

Method Signature Returns
oaepEncrypt(pub, msg, hashMod?) — Ciphertext bytes
oaepDecrypt(priv, ct, hashMod?) — Plaintext or false (constant-time anti-Manger)
pssSign(priv, msg, hashMod?, sLen?, salt?) — Signature
pssVerify(pub, msg, sig, hashMod?, sLen?) — boolean
pkcs1v15Sign/Verify () => false DEPRECATED explicit reject
pkcs1v15Encrypt/Decrypt () => false DEPRECATED|UNSAFE (Bleichenbacher)
_internal.{rsaep, rsadp, mgf1} — Primitives + RSA blinding control

Examples

OAEP-SHA-256

const { rsa, rsaKeygen } = fw.runtime.resolveAll(['rsa', 'rsaKeygen']);

const { publicKey, secretKey } = rsaKeygen.generate(2048);

const msg = new TextEncoder().encode('Hello, RSA!');
const ct  = rsa.oaepEncrypt(publicKey, msg);
const pt  = rsa.oaepDecrypt(secretKey, ct);
new TextDecoder().decode(pt);   // 'Hello, RSA!'

PSS-SHA-256

const sig = rsa.pssSign(secretKey, msg);
const ok  = rsa.pssVerify(publicKey, msg, sig);   // true

Disable blinding (benchmark)

const pt = rsa._internal.rsadp(secretKey, ct, { blinding: false });

Worker Usage

// RSA-2048 modexp = ~50ms. Delegate to avoid blocking the UI.
const worker = fw.createWorker(
    function ({ libs, args }) {
        self.postMessage(libs.rsa.oaepDecrypt(args[0], args[1]));
    },
    { dependencies: ['rsa'], args: [secretKey, ct] }
);

Notes

  • PKCS #1 v1.5 rejected: pkcs1v15Sign/Verify/Encrypt/Decrypt return false + DEPRECATED|UNSAFE warn (SP 800-131A Rev.2 + Bleichenbacher 2006).
  • RSA blinding default ON: opt-out via _internal.rsadp(p, c, {blinding:false}) for benchmarks; covers Boneh-Brumley 2003 anti-timing.
  • OAEP decrypt constant-time anti-Manger: separator scanned without early-exit.

See also