Function rsaSignVerify

lib/internal/crypto/rsa.js:247–285

(key, data, { saltLength }, signature)

}

function rsaSignVerify(key, data, { saltLength }, signature) {
  const mode = signature === undefined ? kSignJobModeSign : kSignJobModeVerify;
  const type = mode === kSignJobModeSign ? 'private' : 'public';

  if (getCryptoKeyType(key) !== type)
    throw lazyDOMException(`Key must be a ${type} key`, 'InvalidAccessError');

  const algorithm = getCryptoKeyAlgorithm(key);
  if (algorithm.name === 'RSA-PSS') {
    try {
      validateInt32(
        saltLength,
        'algorithm.saltLength',
        0,
        MathCeil((algorithm.modulusLength - 1) / 8) -
          getDigestSizeInBytes(algorithm.hash.name) - 2);
    } catch (err) {
      throw lazyDOMException(
        'The operation failed for an operation-specific reason',
        { name: 'OperationError', cause: err });
    }
  }

  return jobPromise(() => new SignJob(
    kCryptoJobWebCrypto,
    signature === undefined ? kSignJobModeSign : kSignJobModeVerify,
    getCryptoKeyHandle(key),
    undefined,
    undefined,
    undefined,
    undefined,
    data,
    normalizeHashName(algorithm.hash.name),
    saltLength,
    algorithm.name === 'RSA-PSS' ? RSA_PKCS1_PSS_PADDING : undefined,
    undefined,
    undefined,
    signature));
}


module.exports = {