TLS 1.3 Implementation Ignores Key Usage

87 views

Skip to first unread message

Eno Compton

unread,

May 4, 2023, 9:23:33 PM5/4/23

to golang-nuts

Doing some work with TLS 1.3 in both Go and Java, I recently found that Go ignores Key Usage status flags. On the other hand, Java's implementation checks key usage following the RFC. I'm thinking in particular about the digital signature signature bit:

> the digitalSignature bit MUST be set if the Key Usage extension is present

Reading the comment in verify.go, I see that Go didn't implement this feature given its inconsistent usage in the world.