WPT
wpt / WebCryptoAPI / encrypt_decrypt / rsa_oaep.https.any.html
Spec: Web Cryptography ↗
Runs: Chrome 155.0.8041.0 (wpt@a1690333b, 2026-09-04) | Firefox 157.0a1 (wpt@a1690333b, 2026-09-04) | Safari 251 preview (wpt@a1e944e7a, 2026-09-04) | Ladybird 1.0-a7825 (wpt@9298d21d2, 2026-09-04) | Servo Servo 0.6 (wpt@7e3d005d7, 2026-09-03) | Blitz a50cb8971 (wpt@a95401e4e, 2026-09-03)
View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi
| Chrome | Firefox | Safari | Ladybird | Servo | Blitz | |
|---|---|---|---|---|---|---|
| Total | 181/181 | 157/181 | 157/181 | 181/181 | 181/181 | NOT RUN |
| Subtest | Chrome | Firefox | Safari | Ladybird | Servo | Blitz |
|---|---|---|---|---|---|---|
| setup | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label decryption | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label decryption with altered ciphertext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label decryption with altered ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label decryption with transferred ciphertext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label decryption with transferred ciphertext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label using publicKey to decrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label no decrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label with altered plaintext during call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label with altered plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label with transferred plaintext during call | PASS | FAIL | FAIL | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label with transferred plaintext after call | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label too long plaintext | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label using privateKey to encrypt | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and no label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and no label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and no label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and no label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and empty label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and empty label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and empty label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and empty label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-1 and a label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-256 and a label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-384 and a label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |
| RSA-OAEP with SHA-512 and a label no encrypt usage | PASS | PASS | PASS | PASS | PASS | — |