Skip to content

Commit 8bfb8f5

Browse files
tniessenrichardlau
authored andcommitted
doc,crypto: further clarify RSA_PKCS1_PADDING support
PR-URL: #51799 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Luigi Pinca <[email protected]> Reviewed-By: Michael Dawson <[email protected]>
1 parent c7baf7b commit 8bfb8f5

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

doc/api/crypto.md

+7-4
Original file line numberDiff line numberDiff line change
@@ -4514,8 +4514,9 @@ changes:
45144514
- v21.6.2
45154515
- v20.11.1
45164516
- v18.19.1
4517-
pr-url: https://github.com/nodejs-private/node-private/pull/525
4518-
description: The `RSA_PKCS1_PADDING` padding was disabled.
4517+
pr-url: https://github.com/nodejs-private/node-private/pull/515
4518+
description: The `RSA_PKCS1_PADDING` padding was disabled unless the
4519+
OpenSSL build supports implicit rejection.
45194520
- version: v15.0.0
45204521
pr-url: https://github.com/nodejs/node/pull/35093
45214522
description: Added string, ArrayBuffer, and CryptoKey as allowable key
@@ -4557,8 +4558,10 @@ If `privateKey` is not a [`KeyObject`][], this function behaves as if
45574558
object, the `padding` property can be passed. Otherwise, this function uses
45584559
`RSA_PKCS1_OAEP_PADDING`.
45594560

4560-
The `crypto.constants.RSA_PKCS1_PADDING` padding is disabled in
4561-
[`crypto.privateDecrypt()`][] since the February 2024 security releases. <span class="deprecated-inline"></span>
4561+
Using `crypto.constants.RSA_PKCS1_PADDING` in [`crypto.privateDecrypt()`][]
4562+
requires OpenSSL to support implicit rejection (`rsa_pkcs1_implicit_rejection`).
4563+
If the version of OpenSSL used by Node.js does not support this feature,
4564+
attempting to use `RSA_PKCS1_PADDING` will fail.
45624565

45634566
### `crypto.privateEncrypt(privateKey, buffer)`
45644567

0 commit comments

Comments
 (0)