Function decapsulateBitsImpl

lib/internal/crypto/webcrypto.js:1479–1519

(decapsulationAlgorithm, decapsulationKey, ciphertext)

}

function decapsulateBitsImpl(decapsulationAlgorithm, decapsulationKey, ciphertext) {
  emitExperimentalWarning('The decapsulateBits Web Crypto API method');
  const prefix = prepareSubtleMethod(
    this, 'decapsulateBits', arguments.length, 3);
  let i = 0;
  decapsulationAlgorithm = convertSubtleArgument(
    prefix, 'AlgorithmIdentifier', decapsulationAlgorithm, i++);
  decapsulationKey = convertSubtleArgument(
    prefix, 'CryptoKey', decapsulationKey, i++);
  ciphertext = convertSubtleArgument(prefix, 'BufferSource', ciphertext, i++);

  const normalizedDecapsulationAlgorithm =
    normalizeAlgorithm(decapsulationAlgorithm, 'decapsulate');
  const keyAlgorithm = getCryptoKeyAlgorithm(decapsulationKey);

  if (normalizedDecapsulationAlgorithm.name !== keyAlgorithm.name) {
    throw lazyDOMException(
      'key algorithm mismatch',
      'InvalidAccessError');
  }

  if (!hasCryptoKeyUsage(decapsulationKey, 'decapsulateBits')) {
    throw lazyDOMException(
      'decapsulationKey does not have decapsulateBits usage',
      'InvalidAccessError');
  }

  switch (keyAlgorithm.name) {
    case 'ML-KEM-512':
    case 'ML-KEM-768':
    case 'ML-KEM-1024':
      return require('internal/crypto/ml_kem')
        .mlKemDecapsulate(decapsulationKey, ciphertext);
    /* c8 ignore start */
    default: {
      const assert = require('internal/assert');
      assert.fail('Unreachable code');
    }
    /* c8 ignore stop */
  }
}

function decapsulateKey(
  decapsulationAlgorithm,