--- a/spec/Overview-WebCryptoAPI.xml	Thu Feb 27 17:44:40 2014 -0800
+++ b/spec/Overview-WebCryptoAPI.xml	Thu Feb 27 17:54:45 2014 -0800
@@ -3239,7 +3239,7 @@
             <x:codeblock language="idl">
 dictionary <dfn id="dfn-RsaKeyGenParams">RsaKeyGenParams</dfn> : <a href="#dfn-Algorithm">Algorithm</a> {
   <span class="comment">// The length, in bits, of the RSA modulus</span>
-  unsigned long modulusLength;
+  [EnforceRange] unsigned long modulusLength;
   <span class="comment">// The RSA public exponent</span>
   <a href="#dfn-BigInteger">BigInteger</a> publicExponent;
 };
@@ -4140,7 +4140,7 @@
             <x:codeblock language="idl">
 dictionary <dfn id="dfn-RsaPssParams">RsaPssParams</dfn> : <a href="#dfn-Algorithm">Algorithm</a> {
   <span class="comment">// The desired length of the random salt</span>
-  unsigned long saltLength;
+  [EnforceRange] unsigned long saltLength;
 };
             </x:codeblock>
           </div>
@@ -8570,7 +8570,7 @@
   <span class="comment">// The length (in bytes) of the key to generate. If unspecified, the
   // recommended length will be used, which is the size of the associated hash function's block
   // size.</span>
-  unsigned long length;
+  [EnforceRange] unsigned long length;
 };
             </x:codeblock>
           </div>
@@ -8581,7 +8581,7 @@
   <span class="comment">// The length (in bytes) of the key to generate. If unspecified, the
   // recommended length will be used, which is the size of the associated hash function's block
   // size.</span>
-  unsigned long length;
+  [EnforceRange] unsigned long length;
 };
             </x:codeblock>
           </div>
@@ -10345,7 +10345,7 @@
             <x:codeblock language="idl">
 dictionary <dfn id="dfn-Pbkdf2Params">Pbkdf2Params</dfn> : <a href="#dfn-Algorithm">Algorithm</a> {
   CryptoOperationData salt;
-  [Clamp] unsigned long iterations;
+  [EnforceRange] unsigned long iterations;
   AlgorithmIdentifier prf;
   CryptoOperationData? password;
 };

--- a/spec/Overview.html	Thu Feb 27 17:44:40 2014 -0800
+++ b/spec/Overview.html	Thu Feb 27 17:54:45 2014 -0800
@@ -3246,7 +3246,7 @@
             <div class="block"><div class="blockTitleDiv"><span class="blockTitle">IDL</span></div><div class="blockContent"><pre class="code"><code class="idl-code">
 dictionary <dfn id="dfn-RsaKeyGenParams">RsaKeyGenParams</dfn> : <a href="#dfn-Algorithm">Algorithm</a> {
   <span class="comment">// The length, in bits, of the RSA modulus</span>
-  unsigned long modulusLength;
+  [EnforceRange] unsigned long modulusLength;
   <span class="comment">// The RSA public exponent</span>
   <a href="#dfn-BigInteger">BigInteger</a> publicExponent;
 };
@@ -4141,7 +4141,7 @@
             <div class="block"><div class="blockTitleDiv"><span class="blockTitle">IDL</span></div><div class="blockContent"><pre class="code"><code class="idl-code">
 dictionary <dfn id="dfn-RsaPssParams">RsaPssParams</dfn> : <a href="#dfn-Algorithm">Algorithm</a> {
   <span class="comment">// The desired length of the random salt</span>
-  unsigned long saltLength;
+  [EnforceRange] unsigned long saltLength;
 };
             </code></pre></div></div>
           </div>
@@ -8563,7 +8563,7 @@
   <span class="comment">// The length (in bytes) of the key to generate. If unspecified, the
   // recommended length will be used, which is the size of the associated hash function's block
   // size.</span>
-  unsigned long length;
+  [EnforceRange] unsigned long length;
 };
             </code></pre></div></div>
           </div>
@@ -8574,7 +8574,7 @@
   <span class="comment">// The length (in bytes) of the key to generate. If unspecified, the
   // recommended length will be used, which is the size of the associated hash function's block
   // size.</span>
-  unsigned long length;
+  [EnforceRange] unsigned long length;
 };
             </code></pre></div></div>
           </div>
@@ -10337,7 +10337,7 @@
             <div class="block"><div class="blockTitleDiv"><span class="blockTitle">IDL</span></div><div class="blockContent"><pre class="code"><code class="idl-code">
 dictionary <dfn id="dfn-Pbkdf2Params">Pbkdf2Params</dfn> : <a href="#dfn-Algorithm">Algorithm</a> {
   CryptoOperationData salt;
-  [Clamp] unsigned long iterations;
+  [EnforceRange] unsigned long iterations;
   AlgorithmIdentifier prf;
   CryptoOperationData? password;
 };