crypto: reject unintended raw key format string input

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #62974
Backport-PR-URL: #63173
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>

Author: panva

lib/internal/crypto/keys.js

@@ -765,7 +765,7 @@ function getKeyObjectHandleFromJwk(key, ctx) {
 
 
 functiongetKeyObjectHandleFromRaw(options,data,format){
-if(!isStringOrBuffer(data)){
+if(!isArrayBufferView(data)&&!isAnyArrayBuffer(data)){
 thrownewERR_INVALID_ARG_TYPE(
 'key.key',
 ['ArrayBuffer','Buffer','TypedArray','DataView'],

test/parallel/test-crypto-key-objects-raw.js

@@ -32,6 +32,50 @@ const { hasOpenSSL } = require('../common/crypto');
 }
 }
 
+// Raw key imports do not support strings.
+{
+constpubKeyObj=crypto.createPublicKey(
+fixtures.readKey('ed25519_public.pem','ascii'));
+constprivKeyObj=crypto.createPrivateKey(
+fixtures.readKey('ed25519_private.pem','ascii'));
+
+constrawPub=pubKeyObj.export({format: 'raw-public'});
+constrawPriv=privKeyObj.export({format: 'raw-private'});
+
+for(constencodingof['hex','base64','utf8','latin1','ascii']){
+assert.throws(()=>crypto.createPublicKey({
+key: rawPub.toString(encoding),
+ encoding,
+format: 'raw-public',
+asymmetricKeyType: 'ed25519',
+}),{code: 'ERR_INVALID_ARG_TYPE'});
+
+assert.throws(()=>crypto.createPrivateKey({
+key: rawPriv.toString(encoding),
+ encoding,
+format: 'raw-private',
+asymmetricKeyType: 'ed25519',
+}),{code: 'ERR_INVALID_ARG_TYPE'});
+}
+}
+
+// Raw seed imports do not support strings.
+if(hasOpenSSL(3,5)){
+constprivKeyObj=crypto.createPrivateKey(
+fixtures.readKey('ml_dsa_44_private.pem','ascii'));
+
+constrawSeed=privKeyObj.export({format: 'raw-seed'});
+
+for(constencodingof['hex','base64']){
+assert.throws(()=>crypto.createPrivateKey({
+key: rawSeed.toString(encoding),
+ encoding,
+format: 'raw-seed',
+asymmetricKeyType: 'ml-dsa-44',
+}),{code: 'ERR_INVALID_ARG_TYPE'});
+}
+}
+
 // Key types that don't support raw-* formats
 {
 for(const[type,pub,priv]of[