{"action":"created","issue":{"url":"https://api.github.com/repos/agix/secretin/issues/3","labels_url":"https://api.github.com/repos/agix/secretin/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/agix/secretin/issues/3/comments","events_url":"https://api.github.com/repos/agix/secretin/issues/3/events","html_url":"https://github.com/agix/secretin/pull/3","id":112374819,"number":3,"title":"Strengthen the publicExponent","user":{"login":"jas-","id":422084,"avatar_url":"https://avatars.githubusercontent.com/u/422084?v=3","gravatar_id":"","url":"https://api.github.com/users/jas-","html_url":"https://github.com/jas-","followers_url":"https://api.github.com/users/jas-/followers","following_url":"https://api.github.com/users/jas-/following{/other_user}","gists_url":"https://api.github.com/users/jas-/gists{/gist_id}","starred_url":"https://api.github.com/users/jas-/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jas-/subscriptions","organizations_url":"https://api.github.com/users/jas-/orgs","repos_url":"https://api.github.com/users/jas-/repos","events_url":"https://api.github.com/users/jas-/events{/privacy}","received_events_url":"https://api.github.com/users/jas-/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-10-20T13:58:00Z","updated_at":"2015-10-20T14:38:55Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/agix/secretin/pulls/3","html_url":"https://github.com/agix/secretin/pull/3","diff_url":"https://github.com/agix/secretin/pull/3.diff","patch_url":"https://github.com/agix/secretin/pull/3.patch"},"body":"Using a random value for the publicExponent of window.crypto.subtle.generateKey() will help protect against inadequate padding as well as strengthen the key generation.\r\n\r\nRef: http://crypto.stackexchange.com/questions/3110/impacts-of-not-using-rsa-exponent-of-65537"},"comment":{"url":"https://api.github.com/repos/agix/secretin/issues/comments/149587788","html_url":"https://github.com/agix/secretin/pull/3#issuecomment-149587788","issue_url":"https://api.github.com/repos/agix/secretin/issues/3","id":149587788,"user":{"login":"agix","id":2556191,"avatar_url":"https://avatars.githubusercontent.com/u/2556191?v=3","gravatar_id":"","url":"https://api.github.com/users/agix","html_url":"https://github.com/agix","followers_url":"https://api.github.com/users/agix/followers","following_url":"https://api.github.com/users/agix/following{/other_user}","gists_url":"https://api.github.com/users/agix/gists{/gist_id}","starred_url":"https://api.github.com/users/agix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agix/subscriptions","organizations_url":"https://api.github.com/users/agix/orgs","repos_url":"https://api.github.com/users/agix/repos","events_url":"https://api.github.com/users/agix/events{/privacy}","received_events_url":"https://api.github.com/users/agix/received_events","type":"User","site_admin":false},"created_at":"2015-10-20T14:38:55Z","updated_at":"2015-10-20T14:38:55Z","body":"I'm not sure if you or I don't understand what to pass in publicExponent.\r\nIt should be a BigInteger http://www.w3.org/TR/WebCryptoAPI/#dfn-BigInteger.\r\n\r\n>The BigInteger typedef is a Uint8Array that holds an arbitrary magnitude unsigned integer in big-endian order.\r\n\r\nSo 0x010001 == 65537.\r\n\r\nI don't think you should pass a 65537 bytes long array.\r\n\r\naccording to http://src.chromium.org/viewvc/blink/trunk/LayoutTests/crypto/subtle/rsa-oaep/generate-non-extractable-key.html?revision=190912\r\n\r\nand https://github.com/diafygi/webcrypto-examples#rsa-oaep---generatekey\r\n"}}