decryptRsaOaepOrThrow

decryptRsaOaepOrThrow

Decrypt an RSA-OAEP ciphertext with the matching private key.

The key must have been generated or imported with { kind: 'rsa', scheme: 'oaep' }, and options.label must repeat the label used at encryption time (if any).

function decryptRsaOaepOrThrow(
	privateKey: CryptoKey,
	ciphertext: Uint8Array,
	options: RsaOaepOptions,
): Promise<Uint8Array>

Parameters

• privateKey: CryptoKey — RSA-OAEP private CryptoKey with decrypt usage
• ciphertext: Uint8Array — Ciphertext produced by encryptRsaOaep (or any RSA-OAEP encryptor)
• options: RsaOaepOptions — OAEP label matching the one bound at encryption

Throws

• Error — If the key is not an RSA-OAEP private decryption key, or decryption fails — wrong key, wrong label, or corrupted ciphertext (OAEP deliberately does not reveal which)

See also

• encryptRsaOaepOrThrow for the inverse operation
• decryptRsaOaep for the Result-returning variant

Examples

const plaintext = await decryptRsaOaepOrThrow(keys.privateKey, ciphertext);