Three drafts published by the Web Cryptography Working Group

08 January 2013

The Web Cryptography Working Group has published three documents .

• A Working Draft of Web Cryptography API. This specification describes a JavaScript API for performing basic cryptographic operations in web applications, such as hashing, signature generation and verification, and encryption and decryption. Additionally, it describes an API for applications to generate and/or manage the keying material necessary to perform these operations. Uses for this API range from user or service authentication, document or code signing, and the confidentiality and integrity of communications.
• A First Public Working Draft of WebCrypto Key Discovery. This specification describes a JavaScript API for discovering named, origin-specific pre-provisioned cryptographic keys for use with the Web Cryptography API. Pre-provisioned keys are keys which have been made available to the UA by means other than the generation, derivation, imporation functions of the Web Cryptography API. Origin-specific keys are keys that are available only to a specified origin. Named keys are identified by a name assumed to be known to the origin in question and provisioned with the key itself.
• A First Public Working Draft of Web Cryptography API Use Cases. This document is an informative overview of the target use cases for a cryptographic API for the web. These use cases, described as scenarios, represent some of the set of expected functionality that may be achieved by the Web Cryptography API, which provides an API for cryptographic operations such as encryption and decryption, and the Key Discovery API, which specifically covers the ability to access cryptographic keys that have been pre-provisioned.

Learn more about the Security Activity. This document is