Function testImportPkcs8

test/parallel/test-webcrypto-export-import-ml-kem.js:98–148

({ name, privateUsages }, extractable)

}

async function testImportPkcs8({ name, privateUsages }, extractable) {
  let key;
  try {
    key = await subtle.importKey(
      'pkcs8',
      keyData[name].pkcs8,
      { name },
      extractable,
      privateUsages);
  } catch (err) {
    if (process.features.openssl_is_boringssl) {
      assert.strictEqual(err.name, 'DataError');
      // It should really only be ERR_OSSL_EVP_PRIVATE_KEY_WAS_NOT_SEED
      // but BoringSSL is inconsistent between handling ML-KEM and ML-DSA
      // Fixed in https://github.com/google/boringssl/commit/94c4c7f9e0eeeff72ea1ac6abf1aed5bd2a82c0c
      assert.match(err.cause.code, /ERR_OSSL_EVP_UNSUPPORTED_ALGORITHM|ERR_OSSL_EVP_PRIVATE_KEY_WAS_NOT_SEED/);
      common.printSkipMessage('Skipping unsupported private key format test');
      return;
    }
    throw err;
  }
  assert.strictEqual(key.type, 'private');
  assert.strictEqual(key.extractable, extractable);
  assert.deepStrictEqual(key.usages, privateUsages);
  assert.deepStrictEqual(key.algorithm.name, name);
  assert.strictEqual(key.algorithm, key.algorithm);
  assert.strictEqual(key.usages, key.usages);

  if (extractable) {
    // Test the roundtrip
    const pkcs8 = await subtle.exportKey('pkcs8', key);
    assert.strictEqual(
      Buffer.from(pkcs8).toString('hex'),
      keyData[name].pkcs8_seed_only.toString('hex'));
  } else {
    await assert.rejects(
      subtle.exportKey('pkcs8', key), {
        message: /key is not extractable/,
        name: 'InvalidAccessError',
      });
  }

  await assert.rejects(
    subtle.importKey(
      'pkcs8',
      keyData[name].pkcs8,
      { name },
      extractable,
      [/* empty usages */]),
    { name: 'SyntaxError', message: 'Usages cannot be empty when importing a private key.' });
}

async function testImportPkcs8SeedOnly({ name, privateUsages }, extractable) {
  const key = await subtle.importKey(