Modern Algorithms in WebCrypto

### WebKittens @annevk ### Title of the proposal Modern Algorithms in the Web Cryptography API ### URL to the spec https://wicg.github.io/webcrypto-modern-algos/ ### URL to the spec's repository https://github.com/WICG/webcrypto-modern-algos/ ### Issue Tracker URL _No response_ ### Explainer URL _No response_ ### TAG Design Review URL _No response_ ### Mozilla standards-positions issue URL https://github.com/mozilla/standards-positions/issues/1282 ### WebKit Bugzilla URL _No response_ ### Radar URL _No response_ ### Description This proposal aims to add a number of post-quantum secure and modern cryptographic algorithms to the [Web Cryptography API](https://www.w3.org/TR/webcrypto-2/), namely ML-KEM, ML-DSA, SLH-DSA, AES-OCB, ChaCha20-Poly1305, SHA-3, cSHAKE, TurboSHAKE, KangarooTwelve, KMAC, and Argon2. As per usual for WebCrypto, the algorithms are not mandatory to implement, so it's possible to choose to (initially) implement a subset of the mentioned algorithms. So far, Chromium has [started to implement](https://chromestatus.com/feature/5198951632470016) ML-KEM, ML-DSA, and ChaCha20-Poly1305. Mozilla has started to implement ML-KEM, ML-DSA, and SHA-3, to my knowledge. In addition, the proposal suggests a `SubtleCrypto.supports()` feature detection method to make it easier to detect which algorithms are supported, as well as a `subtle.crypto.getPublicKey()` helper method to aid the implementation of HPKE as well as other protocols.