`api.SubtleCrypto` - Break out algorithm support

[ddbeck]

What type of issue is this?

Incorrect support data (example: BrowserX says "86" but support was added in "40")

What information was incorrect, unhelpful, or incomplete?

SubtleCrypto API data mixes partial_implementation and notes and subfeatures to show support for specific algorithms. This is inconsistent and, as a consumer, difficult to work with.

What browsers does this problem apply to, if applicable?

No response

What did you expect to see?

It'd be nice if specific algorithms (such as ECDSA) were broken out into subfeatures like x25519 and ed25519 are.

Did you test this? If so, how?

N/A

Can you link to any release notes, bugs, pull requests, or MDN pages related to this?

web-features had to override BCD to reconcile our data with the way caniuse represents this information. See web-platform-dx/web-features#3268.

Do you have anything more you want to share?

No response

MDN URL

https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto#browser_compatibility

MDN metadata

No response

[caugner]

Here's an overview generated witih ChatGPT 5:

api.SubtleCrypto.decrypt

• Edge (≤79): Not supported: AES-CTR.
• Deno (≤1.15 / ≤1.18): Not supported: AES-CTR, AES-CBC, AES-GCM.

api.SubtleCrypto.deriveBits

• Deno (≤1.14–1.15): Not supported: ECDH.
• Edge (≤12–79): Not supported: ECDH.; Not supported: HKDF, PBKDF2.
• Node.js (≥15): Supports: NODE-DH; Supports: NODE-SCRYPT.
• x25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].

api.SubtleCrypto.deriveKey

• Edge (≤12–79): Not supported: ECDH.; Not supported: HKDF, PBKDF2.
• Node.js (≥15): Supports: NODE-DH; Supports: NODE-SCRYPT.
• x25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].

api.SubtleCrypto.exportKey

• Deno (≤1.14–1.18): Not supported: ECDSA, ECDH.; Not supported: ECDSA, ECDH, AES-CTR, AES-CBC, AES-GCM, AES-KW.
• Edge (≤12–79): Not supported: RSA-PSS, ECDSA, ECDH.; Not supported: AES-CTR.
• Node.js (≥15): Supports: NODE-DSA; Supports: NODE-DH; Supports: NODE-SCRYPT.
• ed25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].
• x25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].

api.SubtleCrypto.generateKey

• Deno (≤1.12–1.14): Not supported: RSA-OAEP, ECDSA P-521, ECDH, AES-CTR, AES-CBC, AES-GCM, AES-KW.; Not supported: ECDSA P-521, ECDH P-521.
• Edge (≤12–79): Not supported: RSA-PSS, ECDSA, ECDH.; Not supported: AES-CTR.
• Node.js (≥15): Supports: NODE-DSA; Supports: NODE-DH.
• ed25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].
• x25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].

api.SubtleCrypto.importKey

• Deno (≤1.14–1.17): Not supported: ECDSA, ECDH, AES-CTR, AES-CBC, AES-GCM, AES-KW.; Not supported: ECDH.; Not supported: ECDSA P-521, ECDH P-521.
• Edge (≤12–79): Not supported: RSA-PSS, ECDSA, ECDH.; Not supported: AES-CTR, HKDF, PBKDF2.
• Node.js (≥15): Supports: NODE-DSA; Supports: NODE-DH; Supports: NODE-SCRYPT.
• ed25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].
• x25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].

api.SubtleCrypto.sign

• Edge (≤12–79): Not supported: RSA-PSS, ECDSA.
• Node.js (≥15): Supports: NODE-DSA.
• ed25519 (Safari ≥17): Generates randomized signatures as per draft-irtf-cfrg-det-sigs-with-noise, instead of deterministic signatures as per RFC 8032.
• ed25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].

api.SubtleCrypto.verify

• Deno (≤1.12–1.14): Not supported: ECDSA, HMAC.
• Edge (≤12–79): Not supported: RSA-PSS, ECDSA.
• Node.js (≥15): Supports: NODE-DSA.
• ed25519 (Node.js ≥16.17.0): Marked as ['Stability 1' - Experimental].

Given the number of algorithms (eg. for importKey()), this will be hard to maintain manually, so we probably need collector tests.