Throw on truncation in the X25519 and X448 derive bits operation

Author: javifernandez

index.html

@@ -167,24 +167,17 @@ <h4>Operations</h4>
             </li>
             <li>
               <dl class="switch">
-                <dt>If |length| is null:</dt>
-                <dd>Return |secret|</dd>
-                <dt>Otherwise:</dt>
+                <dt>
+                  If |length| is  not null, and not equal to the length of |secret| in bits:
+                </dt>
+                <dd>
+                  [= exception/throw =] an {{OperationError}}.
+                </dd>
+                <dt>
+                  Otherwise:
+                </dt>
                 <dd>
-                  <dl class="switch">
-                    <dt>
-                      If the length of |secret| in bits is less than
-                      |length|:
-                    </dt>
-                    <dd>
-                      [= exception/throw =] an
-                      {{OperationError}}.
-                    </dd>
-                    <dt>Otherwise:</dt>
-                    <dd>
-                      Return an <a data-cite="WebCryptoAPI#octet-string-containing">octet string containing</a> the first |length| bits of |secret|.
-                    </dd>
-                  </dl>
+                  Return |secret|.
                 </dd>
               </dl>
             </li>
@@ -1019,24 +1012,17 @@ <h4>Operations</h4>
             </li>
             <li>
               <dl class="switch">
-                <dt>If |length| is null:</dt>
-                <dd>Return |secret|</dd>
-                <dt>Otherwise:</dt>
+                <dt>
+                  If |length| is  not null, and not equal to the length of |secret| in bits:
+                </dt>
+                <dd>
+                  [= exception/throw =] an {{OperationError}}.
+                </dd>
+                <dt>
+                  Otherwise:
+                </dt>
                 <dd>
-                  <dl class="switch">
-                    <dt>
-                      If the length of |secret| in bits is less than
-                      |length|:
-                    </dt>
-                    <dd>
-                      [= exception/throw =] an
-                      {{OperationError}}.
-                    </dd>
-                    <dt>Otherwise:</dt>
-                    <dd>
-                      Return an <a data-cite="WebCryptoAPI#octet-string-containing">octet string containing</a> the first |length| bits of |secret|.
-                    </dd>
-                  </dl>
+                  Return |secret|.
                 </dd>
               </dl>
             </li>