Require extractable=false for KDF import

components/webcrypto/status.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_WEBCRYPTO_STATUS_H_
 #define COMPONENTS_WEBCRYPTO_STATUS_H_
 
 #include <stddef.h>
 
 #include <string>
@@ skipping 255 matching lines @@
 
   // No length parameter was provided for PBKDF2's Derive Bits operation.
   static Status ErrorPbkdf2DeriveBitsLengthNotSpecified();
 
   // PBKDF2's deriveBits() was called with an unsupported length of 0.
   static Status ErrorPbkdf2DeriveBitsLengthZero();
 
   // PBKDF2 was called with iterations == 0.
   static Status ErrorPbkdf2Iterations0();
 
+  // Tried importing a key with extractable=true for one of the *KDF
+  // algorithms.
+  static Status ErrorImportExtractableKdfKey();
+
  private:
   enum Type { TYPE_ERROR, TYPE_SUCCESS };
 
   // Constructs an error with the specified error type and message.
   Status(blink::WebCryptoErrorType error_type,
          const std::string& error_details_utf8);
 
   // Constructs a success or error without any details.
   explicit Status(Type type);
 
   Type type_;
   blink::WebCryptoErrorType error_type_;
   std::string error_details_;
 };
 
 }  // namespace webcrypto
 
 #endif  // COMPONENTS_WEBCRYPTO_STATUS_H_