WebCrypto RSA-PSS 签名与验证实践

概述RSA-PSS 提供强健的基于填充的签名方案。本文给出生成、签名与验证流程。生成与签名验证async function genPSS() { return crypto.subtle.generateKey({ name:'RSA-PSS', modulusLength:2048, publicExponent:new Uint8Array([1,0,1]), hash:'SHA-256' }, true, ['sign','verify']); } async function signPSS(key, bytes) { const sig = await crypto.subtle.sign({ name:'RSA-PSS', saltLength:32 }, key.privateKey, bytes); return new Uint8Array(sig); } async function verifyPSS(key, bytes, sig) { return crypto.subtle.verify({ name:'RSA-PSS', saltLength:32 }, key.publicKey, sig, bytes); }