Skip to content

Commit f7f213e

Browse files
authored
doc: undeprecate RSA_PKCS1_PADDING
1 parent fe22990 commit f7f213e

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

doc/api/crypto.md

+7-4
Original file line numberDiff line numberDiff line change
@@ -4392,8 +4392,9 @@ changes:
43924392
- v21.6.2
43934393
- v20.11.1
43944394
- v18.19.1
4395-
pr-url: https://github.com/nodejs-private/node-private/pull/525
4396-
description: The `RSA_PKCS1_PADDING` padding was disabled.
4395+
pr-url: https://github.com/nodejs-private/node-private/pull/515
4396+
description: The `RSA_PKCS1_PADDING` padding was disabled unless the
4397+
OpenSSL build supports implicit rejection.
43974398
- version: v15.0.0
43984399
pr-url: https://github.com/nodejs/node/pull/35093
43994400
description: Added string, ArrayBuffer, and CryptoKey as allowable key
@@ -4435,8 +4436,10 @@ If `privateKey` is not a [`KeyObject`][], this function behaves as if
44354436
object, the `padding` property can be passed. Otherwise, this function uses
44364437
`RSA_PKCS1_OAEP_PADDING`.
44374438

4438-
The `crypto.constants.RSA_PKCS1_PADDING` padding is disabled in
4439-
[`crypto.privateDecrypt()`][] since the February 2024 security releases. <span class="deprecated-inline"></span>
4439+
Using `crypto.constants.RSA_PKCS1_PADDING` in [`crypto.privateDecrypt()`][]
4440+
requires OpenSSL to support implicit rejection (`rsa_pkcs1_implicit_rejection`).
4441+
If the version of OpenSSL used by Node.js does not support this feature,
4442+
attempting to use `RSA_PKCS1_PADDING` will fail.
44404443

44414444
### `crypto.privateEncrypt(privateKey, buffer)`
44424445

0 commit comments

Comments
 (0)