crypto: reject duplicate ML-KEM JWK key_ops

[panva]

I missed this in #62706. Web Cryptography JWK import must reject duplicate entries in the JWK's key_ops.

[nodejs-github-bot]

Review requested:

• @nodejs/crypto

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.62%. Comparing base (acb1bd7) to head (ca2bb43).
⚠️ Report is 51 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #62905      +/-   ##
==========================================
- Coverage   91.43%   89.62%   -1.82%     
==========================================
  Files         356      706     +350     
  Lines      150580   219201   +68621     
  Branches    23602    41989   +18387     
==========================================
+ Hits       137686   196449   +58763     
- Misses      12625    14629    +2004     
- Partials      269     8123    +7854     

Files with missing lines	Coverage Δ
lib/internal/crypto/util.js	95.53% <100.00%> (+2.85%)	⬆️

... and 472 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/72908/

[ChALkeR]

It's a bit unfortunate that the api allows unrecognized keys (which was why this failed open and wasn't noticed)
Not an impl issue though

[panva]

It's a bit unfortunate that the api allows unrecognized keys (which was why this failed open and wasn't noticed) Not an impl issue though

That's the nature of depending on formats that are meant to be extensible. If this was rejecting unrecognized you couldn't evolve the JWK format with additional ops.

Not that key_ops in JWK is ever used in practice though. It's an annoyance. The "use" parameter or better yet an explicit "alg" is more than enough.

[nodejs-github-bot]

Landed in 8f348bc