linzer 0.3.2 → 0.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8d894c6969ed3ed090305c6232eba9b9c277893ade58afc49df8f34adebfe8f2
-  data.tar.gz: a33efff10c8805011949f49e26a8777a7b1c4bf592ba4b5974de3c753cb4ed02
+  metadata.gz: e05d05474d794c882d28a6fb83949147497218f141ae1e40e6c07e750407b421
+  data.tar.gz: 58b26e247acd0ca13e9029ace69ebb7459f1639b7908733e07ac88566ac255d1
 SHA512:
-  metadata.gz: 199983c83faa155354b4f9d0ee433fcf67ec5c2aac02deaf8be2be6ab3db612e68b062f43885f643643bbcbb5a150c2dc81021bc5de5ffbc1f99d32b05254bf9
-  data.tar.gz: a8e0299826535468912457200eb479a115b395b6f20966f7584e3f257a05be01fb27f49f5dfd822baed973efd5b20ae824000faf2b427a19266ac28eb936c97c
+  metadata.gz: 3af97f2888d5c4bd40900c490945590077604b93c954819c9308d2ab8fe767c491a08d2cbe5054aaced580a4da568a1d1cf11f82048048532feb5150dd59dfea
+  data.tar.gz: b4a47fd541623baef9582cc0b361975b504cc7824fd926f47f56f7f692f6a6d8dec0d8e4afdb5e64967d6e1d7a2107656165b95f383af5e902bddd26f0efe387

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 ## [Unreleased]
 
+## [0.4.1] - 2024-03-25
+
+- Fix one-off error on ECDSA P-256 and P-384 curve signature generation.
+  In some cases, an invalid signature of 63 or 95 bytes could be generated.
+
+## [0.4.0] - 2024-03-16
+
+- Add support for capitalized HTTP header names.
+
 ## [0.3.2] - 2024-03-16
 
 - Force signature component name strings to be encoded as ASCII.

data/lib/linzer/ecdsa.rb

@@ -25,12 +25,12 @@ module Linzer
         case digest
         when "SHA256"
           raise Linzer::Error.new(msg) if sig.length != 64
-          r_bn = OpenSSL::BN.new(sig[0..31].unpack1("H*").to_i(16))
-          s_bn = OpenSSL::BN.new(sig[32..63].unpack1("H*").to_i(16))
+          r_bn = OpenSSL::BN.new(sig[0..31].unpack1("H64").to_i(16))
+          s_bn = OpenSSL::BN.new(sig[32..63].unpack1("H64").to_i(16))
         when "SHA384"
           raise Linzer::Error.new(msg) if sig.length != 96
-          r_bn = OpenSSL::BN.new(sig[0..47].unpack1("H*").to_i(16))
-          s_bn = OpenSSL::BN.new(sig[48..95].unpack1("H*").to_i(16))
+          r_bn = OpenSSL::BN.new(sig[0..47].unpack1("H96").to_i(16))
+          s_bn = OpenSSL::BN.new(sig[48..95].unpack1("H96").to_i(16))
         else
           msg = "Cannot verify signature, unsupported digest algorithm: '%s'" % digest
           raise Linzer::Error.new(msg)
@@ -44,13 +44,21 @@ module Linzer
       end
 
       def decode_der_signature(der_sig)
+        digest = @params[:digest]
+        msg = "Unsupported digest algorithm: '%s'" % digest
         OpenSSL::ASN1
           .decode(der_sig)
           .value
-          .map { |n| n.value.to_s(16) }
-          .map { |s| [s].pack("H*")   }
+          .map do |n|
+            case digest
+            when "SHA256" then "%.64x" % n.value
+            when "SHA384" then "%.96x" % n.value
+            else raise Linzer::Error.new(msg)
+            end
+          end
+          .map { |s| [s].pack("H#{s.length}") }
           .reduce(:<<)
-          .force_encoding(Encoding::ASCII_8BIT)
+          .encode(Encoding::ASCII_8BIT)
       end
     end
   end

data/lib/linzer/message.rb

@@ -3,8 +3,10 @@
 module Linzer
   class Message
     def initialize(request_data)
-      @headers = Hash(request_data[:headers].clone).freeze
       @http    = Hash(request_data[:http].clone).freeze
+      @headers = Hash(request_data.fetch(:headers, {})
+                        .transform_keys(&:downcase)
+                        .clone).freeze
       freeze
     end
 

data/lib/linzer/signature.rb

@@ -27,6 +27,8 @@ module Linzer
       private :new
 
       def build(headers, options = {})
+        basic_validate headers
+        headers.transform_keys!(&:downcase)
         validate headers
 
         input = parse_field(headers, "signature-input")
@@ -51,9 +53,12 @@ module Linzer
 
       private
 
-      def validate(headers)
+      def basic_validate(headers)
         raise Error.new "Cannot build signature: Request headers cannot be null"      if headers.nil?
         raise Error.new "Cannot build signature: No request headers found"            if headers.empty?
+      end
+
+      def validate(headers)
         raise Error.new "Cannot build signature: No \"signature-input\" header found" unless headers.key?("signature-input")
         raise Error.new "Cannot build signature: No \"signature\" header found"       unless headers.key?("signature")
       end

data/lib/linzer/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Linzer
-  VERSION = "0.3.2"
+  VERSION = "0.4.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: linzer
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 0.4.1
 platform: ruby
 authors:
 - Miguel Landaeta
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-03-16 00:00:00.000000000 Z
+date: 2024-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ed25519