json-jwt 1.9.1 → 1.17.2

data/lib/json/jwk.rb

@@ -34,7 +34,7 @@ module JSON
       else
         raise UnknownAlgorithm.new('Unknown Digest Algorithm')
       end
-      UrlSafeBase64.encode64 digest.digest(normalize.to_json)
+      Base64.urlsafe_encode64 digest.digest(normalize.to_json), padding: false
     end
 
     def to_key
@@ -50,24 +50,16 @@ module JSON
       end
     end
 
-    private
-
     def rsa?
-      self[:kty].try(:to_sym) == :RSA
+      self[:kty]&.to_sym == :RSA
     end
 
     def ec?
-      self[:kty].try(:to_sym) == :EC
+      self[:kty]&.to_sym == :EC
     end
 
     def oct?
-      self[:kty].try(:to_sym) == :oct
-    end
-
-    def calculate_default_kid
-      self[:kid] = thumbprint
-    rescue
-      # ignore
+      self[:kty]&.to_sym == :oct
     end
 
     def normalize
@@ -95,53 +87,89 @@ module JSON
       end
     end
 
+    private
+
+    def calculate_default_kid
+      self[:kid] = thumbprint
+    rescue
+      # ignore
+    end
+
     def to_rsa_key
       e, n, d, p, q, dp, dq, qi = [:e, :n, :d, :p, :q, :dp, :dq, :qi].collect do |key|
         if self[key]
-          OpenSSL::BN.new UrlSafeBase64.decode64(self[key]), 2
+          OpenSSL::BN.new Base64.urlsafe_decode64(self[key]), 2
         end
       end
-      key = OpenSSL::PKey::RSA.new
-      if key.respond_to? :set_key
-        key.set_key n, e, d
-        key.set_factors p, q if p && q
-        key.set_crt_params dp, dq, qi if dp && dq && qi
-      else
-        key.e = e
-        key.n = n
-        key.d = d if d
-        key.p = p if p
-        key.q = q if q
-        key.dmp1 = dp if dp
-        key.dmq1 = dq if dq
-        key.iqmp = qi if qi
+
+      # Public key
+      data_sequence = OpenSSL::ASN1::Sequence([
+        OpenSSL::ASN1::Integer(n),
+        OpenSSL::ASN1::Integer(e),
+      ])
+
+      if d && p && q && dp && dq && qi
+        data_sequence = OpenSSL::ASN1::Sequence([
+          OpenSSL::ASN1::Integer(0),
+          OpenSSL::ASN1::Integer(n),
+          OpenSSL::ASN1::Integer(e),
+          OpenSSL::ASN1::Integer(d),
+          OpenSSL::ASN1::Integer(p),
+          OpenSSL::ASN1::Integer(q),
+          OpenSSL::ASN1::Integer(dp),
+          OpenSSL::ASN1::Integer(dq),
+          OpenSSL::ASN1::Integer(qi),
+        ])
       end
-      key
+
+      asn1 = OpenSSL::ASN1::Sequence(data_sequence)
+      OpenSSL::PKey::RSA.new(asn1.to_der)
     end
 
     def to_ec_key
-      curve_name = case self[:crv].try(:to_sym)
+      curve_name = case self[:crv]&.to_sym
       when :'P-256'
         'prime256v1'
       when :'P-384'
         'secp384r1'
       when :'P-521'
         'secp521r1'
+      when :secp256k1
+        'secp256k1'
       else
         raise UnknownAlgorithm.new('Unknown EC Curve')
       end
       x, y, d = [:x, :y, :d].collect do |key|
         if self[key]
-          UrlSafeBase64.decode64(self[key])
+          Base64.urlsafe_decode64(self[key])
         end
       end
-      key = OpenSSL::PKey::EC.new curve_name
-      key.private_key = OpenSSL::BN.new(d, 2) if d
-      key.public_key = OpenSSL::PKey::EC::Point.new(
+
+      point = OpenSSL::PKey::EC::Point.new(
         OpenSSL::PKey::EC::Group.new(curve_name),
         OpenSSL::BN.new(['04' + x.unpack('H*').first + y.unpack('H*').first].pack('H*'), 2)
       )
-      key
+
+      # Public key
+      data_sequence = OpenSSL::ASN1::Sequence([
+        OpenSSL::ASN1::Sequence([
+          OpenSSL::ASN1::ObjectId("id-ecPublicKey"),
+          OpenSSL::ASN1::ObjectId(curve_name)
+        ]),
+        OpenSSL::ASN1::BitString(point.to_octet_string(:uncompressed))
+      ])
+
+      if d
+        # Private key
+        data_sequence = OpenSSL::ASN1::Sequence([
+          OpenSSL::ASN1::Integer(1),
+          OpenSSL::ASN1::OctetString(OpenSSL::BN.new(d, 2).to_s(2)),
+          OpenSSL::ASN1::ObjectId(curve_name, 0, :EXPLICIT),
+          OpenSSL::ASN1::BitString(point.to_octet_string(:uncompressed), 1, :EXPLICIT)
+        ])
+      end
+
+      OpenSSL::PKey::EC.new(data_sequence.to_der)
     end
   end
 end

data/lib/json/jws.rb

@@ -6,23 +6,24 @@ module JSON
 
     NUM_OF_SEGMENTS = 3
 
-    attr_accessor :signature_base_string
+    attr_writer :signature_base_string
 
     def initialize(jwt)
       update jwt
     end
 
     def sign!(private_key_or_secret)
-      self.alg = autodetected_algorithm_from(private_key_or_secret) if algorithm == :autodetect
+      self.alg = autodetected_algorithm_from(private_key_or_secret) if alg == :autodetect
       self.signature = sign signature_base_string, private_key_or_secret
       self
     end
 
     def verify!(public_key_or_secret, algorithms = nil)
-      if alg.try(:to_sym) == :none
+      if alg&.to_sym == :none
+        raise UnexpectedAlgorithm unless algorithms.blank? || Array(algorithms).include?(:none)
         raise UnexpectedAlgorithm if public_key_or_secret
         signature == '' or raise VerificationFailed
-      elsif algorithms.blank? || Array(algorithms).include?(alg.try(:to_sym))
+      elsif algorithms.blank? || Array(algorithms).include?(alg&.to_sym)
         public_key_or_secret && valid?(public_key_or_secret) or
         raise VerificationFailed
       else
@@ -35,6 +36,7 @@ module JSON
       if hash_or_jwt.is_a? JSON::JWT
         self.header.update hash_or_jwt.header
         self.signature = hash_or_jwt.signature
+        self.blank_payload = hash_or_jwt.blank_payload
       end
       self
     end
@@ -42,34 +44,27 @@ module JSON
     private
 
     def digest
-      OpenSSL::Digest.new "SHA#{algorithm.to_s[2, 3]}"
+      OpenSSL::Digest.new "SHA#{alg.to_s[2, 3]}"
     end
 
     def hmac?
-      [:HS256, :HS384, :HS512].include? algorithm.try(:to_sym)
+      [:HS256, :HS384, :HS512].include? alg&.to_sym
     end
 
     def rsa?
-      [:RS256, :RS384, :RS512].include? algorithm.try(:to_sym)
+      [:RS256, :RS384, :RS512].include? alg&.to_sym
     end
 
     def rsa_pss?
-      if [:PS256, :PS384, :PS512].include? algorithm.try(:to_sym)
-        if OpenSSL::VERSION < '2.1.0'
-          raise "#{alg} isn't supported. OpenSSL gem v2.1.0+ is required to use #{alg}."
-        else
-          true
-        end
-      else
-        false
-      end
+      [:PS256, :PS384, :PS512].include? alg&.to_sym
     end
 
     def ecdsa?
-      [:ES256, :ES384, :ES512].include? algorithm.try(:to_sym)
+      [:ES256, :ES384, :ES512, :ES256K].include? alg&.to_sym
     end
 
     def autodetected_algorithm_from(private_key_or_secret)
+      private_key_or_secret = with_jwk_support private_key_or_secret
       case private_key_or_secret
       when String
         :HS256
@@ -83,6 +78,8 @@ module JSON
           :ES384
         when 'secp521r1'
           :ES512
+        when 'secp256k1'
+          :ES256K
         else
           raise UnknownAlgorithm.new('Unknown EC Curve')
         end
@@ -96,7 +93,7 @@ module JSON
         header.to_json,
         self.to_json
       ].collect do |segment|
-        UrlSafeBase64.encode64 segment
+        Base64.urlsafe_encode64 segment, padding: false
       end.join('.')
     end
 
@@ -116,7 +113,7 @@ module JSON
         private_key = private_key_or_secret
         verify_ecdsa_group! private_key
         asn1_to_raw(
-          private_key.dsa_sign_asn1(digest.digest signature_base_string),
+          private_key.sign(digest, signature_base_string),
           private_key
         )
       else
@@ -128,7 +125,8 @@ module JSON
       public_key_or_secret = with_jwk_support public_key_or_secret
       case
       when hmac?
-        secure_compare sign(signature_base_string, public_key_or_secret), signature
+        secret = public_key_or_secret
+        secure_compare sign(signature_base_string, secret), signature
       when rsa?
         public_key = public_key_or_secret
         public_key.verify digest, signature, signature_base_string
@@ -138,10 +136,7 @@ module JSON
       when ecdsa?
         public_key = public_key_or_secret
         verify_ecdsa_group! public_key
-        public_key.dsa_verify_asn1(
-          digest.digest(signature_base_string),
-          raw_to_asn1(signature, public_key)
-        )
+        public_key.verify digest, raw_to_asn1(signature, public_key), signature_base_string
       else
         raise UnexpectedAlgorithm.new('Unknown Signature Algorithm')
       end
@@ -152,14 +147,19 @@ module JSON
     def verify_ecdsa_group!(key)
       group_name = case digest.digest_length * 8
       when 256
-        :prime256v1
+        case key.group.curve_name
+        when 'secp256k1'
+          :secp256k1
+        else
+          :prime256v1
+        end
       when 384
         :secp384r1
       when 512
         :secp521r1
       end
-      key.group = OpenSSL::PKey::EC::Group.new group_name.to_s
-      key.check_key
+      newkey = OpenSSL::PKey::EC.generate(group_name.to_s)
+      newkey.check_key
     end
 
     def raw_to_asn1(signature, public_key)
@@ -175,25 +175,28 @@ module JSON
     end
 
     class << self
-      def decode_compact_serialized(input, public_key_or_secret, algorithms = nil)
+      def decode_compact_serialized(input, public_key_or_secret, algorithms = nil, allow_blank_payload = false)
         unless input.count('.') + 1 == NUM_OF_SEGMENTS
           raise InvalidFormat.new("Invalid JWS Format. JWS should include #{NUM_OF_SEGMENTS} segments.")
         end
-        header, claims, signature = input.split('.', JWS::NUM_OF_SEGMENTS).collect do |segment|
-          UrlSafeBase64.decode64 segment.to_s
+        header, claims, signature = input.split('.', NUM_OF_SEGMENTS).collect do |segment|
+          Base64.urlsafe_decode64 segment.to_s
         end
-        header, claims = [header, claims].collect do |json|
-          JSON.parse(json).with_indifferent_access
+        header = JSON.parse(header).with_indifferent_access
+        if allow_blank_payload && claims == ''
+          claims = nil
+        else
+          claims = JSON.parse(claims).with_indifferent_access
         end
         jws = new claims
         jws.header = header
         jws.signature = signature
-        jws.signature_base_string = input.split('.')[0, JWS::NUM_OF_SEGMENTS - 1].join('.')
+        jws.signature_base_string = input.split('.')[0, NUM_OF_SEGMENTS - 1].join('.')
         jws.verify! public_key_or_secret, algorithms unless public_key_or_secret == :skip_verification
         jws
       end
 
-      def decode_json_serialized(input, public_key_or_secret, algorithms = nil)
+      def decode_json_serialized(input, public_key_or_secret, algorithms = nil, allow_blank_payload = false)
         input = input.with_indifferent_access
         header, payload, signature = if input[:signatures].present?
           [
@@ -209,7 +212,7 @@ module JSON
           end
         end
         compact_serialized = [header, payload, signature].join('.')
-        decode_compact_serialized compact_serialized, public_key_or_secret, algorithms
+        decode_compact_serialized compact_serialized, public_key_or_secret, algorithms, allow_blank_payload
       end
     end
   end

data/lib/json/jwt.rb

@@ -1,11 +1,18 @@
 require 'openssl'
-require 'url_safe_base64'
+require 'base64'
+require 'faraday'
+require 'faraday/follow_redirects'
 require 'active_support'
 require 'active_support/core_ext'
 require 'json/jose'
 
 module JSON
   class JWT < ActiveSupport::HashWithIndifferentAccess
+    VERSION = ::File.read(
+      ::File.join(::File.dirname(__FILE__), '../../VERSION')
+    ).chomp
+
+    attr_accessor :blank_payload
     attr_accessor :signature
 
     class Exception < StandardError; end
@@ -19,10 +26,12 @@ module JSON
       @content_type = 'application/jwt'
       self.typ = :JWT
       self.alg = :none
-      [:exp, :nbf, :iat].each do |key|
-        claims[key] = claims[key].to_i if claims[key]
-      end
       update claims
+      unless claims.nil?
+        [:exp, :nbf, :iat].each do |key|
+          self[key] = self[key].to_i if self[key]
+        end
+      end
     end
 
     def sign(private_key_or_secret, algorithm = :autodetect)
@@ -46,7 +55,7 @@ module JSON
         self.to_json,
         signature
       ].collect do |segment|
-        UrlSafeBase64.encode64 segment.to_s
+        Base64.urlsafe_encode64 segment.to_s, padding: false
       end.join('.')
     end
 
@@ -54,23 +63,39 @@ module JSON
       case options[:syntax]
       when :general
         {
-          payload: UrlSafeBase64.encode64(self.to_json),
+          payload: Base64.urlsafe_encode64(self.to_json, padding: false),
           signatures: [{
-            protected: UrlSafeBase64.encode64(header.to_json),
-            signature: UrlSafeBase64.encode64(signature.to_s)
+            protected: Base64.urlsafe_encode64(header.to_json, padding: false),
+            signature: Base64.urlsafe_encode64(signature.to_s, padding: false)
           }]
         }
       when :flattened
         {
-          protected: UrlSafeBase64.encode64(header.to_json),
-          payload:   UrlSafeBase64.encode64(self.to_json),
-          signature: UrlSafeBase64.encode64(signature.to_s)
+          protected: Base64.urlsafe_encode64(header.to_json, padding: false),
+          payload:   Base64.urlsafe_encode64(self.to_json, padding: false),
+          signature: Base64.urlsafe_encode64(signature.to_s, padding: false)
         }
       else
         super
       end
     end
 
+    def to_json *args
+      if @blank_payload && args.empty?
+        ''
+      else
+        super
+      end
+    end
+
+    def update claims
+      if claims.nil?
+        @blank_payload = true
+      else
+        super
+      end
+    end
+
     def pretty_generate
       [
         JSON.pretty_generate(header),
@@ -79,23 +104,23 @@ module JSON
     end
 
     class << self
-      def decode_compact_serialized(jwt_string, key_or_secret, algorithms = nil, encryption_methods = nil)
+      def decode_compact_serialized(jwt_string, key_or_secret, algorithms = nil, encryption_methods = nil, allow_blank_payload = false)
         case jwt_string.count('.') + 1
         when JWS::NUM_OF_SEGMENTS
-          JWS.decode_compact_serialized jwt_string, key_or_secret, algorithms
+          JWS.decode_compact_serialized jwt_string, key_or_secret, algorithms, allow_blank_payload
         when JWE::NUM_OF_SEGMENTS
-          JWE.decode_compact_serialized jwt_string, key_or_secret, algorithms, encryption_methods
+          JWE.decode_compact_serialized jwt_string, key_or_secret, algorithms, encryption_methods, allow_blank_payload
         else
           raise InvalidFormat.new("Invalid JWT Format. JWT should include #{JWS::NUM_OF_SEGMENTS} or #{JWE::NUM_OF_SEGMENTS} segments.")
         end
       end
 
-      def decode_json_serialized(input, key_or_secret, algorithms = nil, encryption_methods = nil)
+      def decode_json_serialized(input, key_or_secret, algorithms = nil, encryption_methods = nil, allow_blank_payload = false)
         input = input.with_indifferent_access
         if (input[:signatures] || input[:signature]).present?
-          JWS.decode_json_serialized input, key_or_secret, algorithms
+          JWS.decode_json_serialized input, key_or_secret, algorithms, allow_blank_payload
         elsif input[:ciphertext].present?
-          JWE.decode_json_serialized input, key_or_secret, algorithms, encryption_methods
+          JWE.decode_json_serialized input, key_or_secret, algorithms, encryption_methods, allow_blank_payload
         else
           raise InvalidFormat.new("Unexpected JOSE JSON Serialization Format.")
         end
@@ -113,3 +138,4 @@ require 'json/jwe'
 require 'json/jwk'
 require 'json/jwk/jwkizable'
 require 'json/jwk/set'
+require 'json/jwk/set/fetcher'

metadata

@@ -1,17 +1,30 @@
 --- !ruby/object:Gem::Specification
 name: json-jwt
 version: !ruby/object:Gem::Version
-  version: 1.9.1
+  version: 1.17.2
 platform: ruby
 authors:
 - nov matake
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-02-23 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: url_safe_base64
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '4.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '4.2'
+- !ruby/object:Gem::Dependency
+  name: base64
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -25,7 +38,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: activesupport
+  name: bindata
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -39,7 +52,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: bindata
+  name: aes_key_wrap
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -53,7 +66,21 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: securecompare
+  name: faraday
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: faraday-follow_redirects
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -94,6 +121,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -130,10 +171,12 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/FUNDING.yml"
+- ".github/workflows/spec.yml"
 - ".gitignore"
 - ".gitmodules"
 - ".rspec"
-- ".travis.yml"
+- CHANGELOG.md
 - Gemfile
 - LICENSE
 - README.md
@@ -145,34 +188,13 @@ files:
 - lib/json/jwk.rb
 - lib/json/jwk/jwkizable.rb
 - lib/json/jwk/set.rb
+- lib/json/jwk/set/fetcher.rb
 - lib/json/jws.rb
 - lib/json/jwt.rb
-- spec/fixtures/ecdsa/256/private_key.pem
-- spec/fixtures/ecdsa/256/public_key.pem
-- spec/fixtures/ecdsa/384/private_key.pem
-- spec/fixtures/ecdsa/384/public_key.pem
-- spec/fixtures/ecdsa/512/private_key.pem
-- spec/fixtures/ecdsa/512/public_key.pem
-- spec/fixtures/rsa/private_key.der
-- spec/fixtures/rsa/private_key.pem
-- spec/fixtures/rsa/public_key.pem
-- spec/helpers/nimbus_spec_helper.rb
-- spec/helpers/sign_key_fixture_helper.rb
-- spec/interop/with_jsrsasign_spec.rb
-- spec/interop/with_nimbus_jose_spec.rb
-- spec/interop/with_rfc_example_spec.rb
-- spec/json/jwe_spec.rb
-- spec/json/jwk/jwkizable_spec.rb
-- spec/json/jwk/set_spec.rb
-- spec/json/jwk_spec.rb
-- spec/json/jws_spec.rb
-- spec/json/jwt_spec.rb
-- spec/spec_helper.rb
 homepage: https://github.com/nov/json-jwt
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -180,38 +202,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.4'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.6.11
-signing_key: 
+rubygems_version: 4.0.10
 specification_version: 4
 summary: JSON Web Token and its family (JSON Web Signature, JSON Web Encryption and
   JSON Web Key) in Ruby
-test_files:
-- spec/fixtures/ecdsa/256/private_key.pem
-- spec/fixtures/ecdsa/256/public_key.pem
-- spec/fixtures/ecdsa/384/private_key.pem
-- spec/fixtures/ecdsa/384/public_key.pem
-- spec/fixtures/ecdsa/512/private_key.pem
-- spec/fixtures/ecdsa/512/public_key.pem
-- spec/fixtures/rsa/private_key.der
-- spec/fixtures/rsa/private_key.pem
-- spec/fixtures/rsa/public_key.pem
-- spec/helpers/nimbus_spec_helper.rb
-- spec/helpers/sign_key_fixture_helper.rb
-- spec/interop/with_jsrsasign_spec.rb
-- spec/interop/with_nimbus_jose_spec.rb
-- spec/interop/with_rfc_example_spec.rb
-- spec/json/jwe_spec.rb
-- spec/json/jwk/jwkizable_spec.rb
-- spec/json/jwk/set_spec.rb
-- spec/json/jwk_spec.rb
-- spec/json/jws_spec.rb
-- spec/json/jwt_spec.rb
-- spec/spec_helper.rb
+test_files: []

data/.travis.yml

@@ -1,11 +0,0 @@
-before_install:
-  - gem install bundler
-  - git submodule update --init --recursive
-
-rvm:
-  - 2.3.6
-  - 2.4.3
-  - 2.5.0
-
-jdk:
-  - oraclejdk8

data/spec/fixtures/ecdsa/256/private_key.pem

@@ -1,5 +0,0 @@
------BEGIN EC PRIVATE KEY-----
-MHcCAQEEIHo5LvIgMVpOlEKjjZiE5n+xYtTxLm4Eumx7FRMgICyDoAoGCCqGSM49
-AwEHoUQDQgAEsaPyrO4Lh9kh2FxrF9y1QVmZznWnRRJwpr12UHqzrVYwzPhb3POq
-WsmGqv4nKum+WdogjJlAToN+uA+TEwDDUw==
------END EC PRIVATE KEY-----

data/spec/fixtures/ecdsa/256/public_key.pem

@@ -1,4 +0,0 @@
------BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsaPyrO4Lh9kh2FxrF9y1QVmZznWn
-RRJwpr12UHqzrVYwzPhb3POqWsmGqv4nKum+WdogjJlAToN+uA+TEwDDUw==
------END PUBLIC KEY-----

data/spec/fixtures/ecdsa/384/private_key.pem

@@ -1,6 +0,0 @@
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB1NRLzYeQa7oRUwWrnQFZOBVqzlyJ9n654/PFjCLJh/A/uGWeECoM2
-1hXEvp80pqGgBwYFK4EEACKhZANiAASmXMCnIWcrurOGDlechlsWPaFmgfZV2Xj5
-EWbsOew0wb23Kqul+rZHKN8oAFtwVG2LEHN9+GTd9xuZ6KkYuS9AE0LN42bpAveE
-5RMfogUHM4vRjsewZOik1NOykuOWK9s=
------END EC PRIVATE KEY-----

data/spec/fixtures/ecdsa/384/public_key.pem

@@ -1,5 +0,0 @@
------BEGIN PUBLIC KEY-----
-MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEplzApyFnK7qzhg5XnIZbFj2hZoH2Vdl4
-+RFm7DnsNMG9tyqrpfq2RyjfKABbcFRtixBzffhk3fcbmeipGLkvQBNCzeNm6QL3
-hOUTH6IFBzOL0Y7HsGTopNTTspLjlivb
------END PUBLIC KEY-----