Function rsaImportKey

lib/internal/crypto/rsa.js:170–245

(
  format,
  keyData,
  algorithm,
  extractable,
  usages)

}

function rsaImportKey(
  format,
  keyData,
  algorithm,
  extractable,
  usages) {
  const allowedUsages = kUsages[algorithm.name];
  const usagesSet = new SafeSet(usages);
  let handle;
  switch (format) {
    case 'KeyObjectHandle':
      verifyAcceptableKeyUse(
        algorithm.name,
        usagesSet,
        keyData.getKeyType() === kKeyTypePublic ?
          allowedUsages.public :
          allowedUsages.private);
      handle = keyData;
      break;
    case 'spki': {
      verifyAcceptableKeyUse(
        algorithm.name, usagesSet, allowedUsages.public);
      handle = importDerKey(keyData, true);
      break;
    }
    case 'pkcs8': {
      verifyAcceptableKeyUse(
        algorithm.name, usagesSet, allowedUsages.private);
      handle = importDerKey(keyData, false);
      break;
    }
    case 'jwk': {
      const expectedUse = algorithm.name === 'RSA-OAEP' ? 'enc' : 'sig';
      validateJwk(keyData, 'RSA', extractable, usagesSet, expectedUse);

      if (keyData.alg !== undefined) {
        const expected =
          normalizeHashName(algorithm.hash.name,
                            algorithm.name === 'RSASSA-PKCS1-v1_5' ? normalizeHashName.kContextJwkRsa :
                              algorithm.name === 'RSA-PSS' ? normalizeHashName.kContextJwkRsaPss :
                                normalizeHashName.kContextJwkRsaOaep);

        if (expected && keyData.alg !== expected)
          throw lazyDOMException(
            'JWK "alg" does not match the requested algorithm',
            'DataError');
      }

      const isPublic = keyData.d === undefined;
      verifyAcceptableKeyUse(
        algorithm.name,
        usagesSet,
        isPublic ? allowedUsages.public : allowedUsages.private);
      handle = importJwkKey(isPublic, keyData);
      break;
    }
    default:
      return undefined;