sqrl-core 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9ed49b9ca739655cee06b71573b4ef1c7f8c799e2a3692fb35e7dd0f1d80d212
-  data.tar.gz: a2a6f2e31558e35661eb5d882616c837d174359786a19f5e5ba85d03fb4326a6
+  metadata.gz: 1146c068eb45ee56e853601aab7d2cc529814e6667254579a9133d3a44977a63
+  data.tar.gz: 87ec42fb26124ec1d0d23fc6d11f74d4dc434c22f17dafc0ef803053555cba22
 SHA512:
-  metadata.gz: d878db822fc637d3e9e9aa6a4c93b2b168c65a1432f4496b5dc013c1b16d4e7a0ee8acb946561091addc966e71479c00fd9467c8719e74454d3a46590c7ce456
-  data.tar.gz: 0c1ea6ad5a25c496b2bb43c871f5ce7355bd7143ae7cbcdb2c1bc33755952f8854ef6a4c1fa4d96bbf42ca40bcee13cf399c739b903f961460b3148d6e68cded
+  metadata.gz: 4fd9a937c4b7c134ca7c85900dd46184c9275bca550744b942864beacb4c486a704c99e18fb05e67096dca828aa205be1c8d52af077c112a5b128e80eb79aa28
+  data.tar.gz: 5a7477a6d9a87ab52987087c7afb009a21037928b446171a6e8353837be995f6a8c318020c7c48234ddbdd579e8bec6f42b960a65cebc3396ad238105d1073fa

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.1.1 — 2026-10-20
+
+- Fixed: Ed25519 and X25519 keys are built from their DER encodings when the openssl gem
+  has no `OpenSSL::PKey.new_raw_private_key` / `new_raw_public_key` (openssl 3.0 and 3.1,
+  bundled with Ruby 3.1 and 3.2). 0.1.0 raised `NoMethodError` on those Rubies as soon as
+  an identity was derived, signed or verified.
+
 ## 0.1.0 — 2026-10-20
 
 First release.

data/lib/sqrl/crypto.rb

@@ -19,6 +19,25 @@ module SQRL
     # Default scrypt log2(N) used by SQRL clients (N = 512).
     DEFAULT_LOG_N = 9
 
+    # Whether the openssl gem has OpenSSL::PKey.new_raw_private_key / new_raw_public_key
+    # (openssl 3.2, bundled with Ruby 3.3). Older supported versions (openssl 3.0 and 3.1,
+    # bundled with Ruby 3.1 and 3.2) build the same keys from their DER encodings instead.
+    RAW_KEY_API = OpenSSL::PKey.respond_to?(:new_raw_private_key) && OpenSSL::PKey.respond_to?(:new_raw_public_key)
+
+    # DER prefixes that turn a 32-byte Ed25519 / X25519 key into a PKCS#8 PrivateKeyInfo or
+    # a SubjectPublicKeyInfo (RFC 8410): the key bytes follow the prefix verbatim.
+    DER_PREFIXES = {
+      "ED25519" => {
+        private: ["302e020100300506032b657004220420"].pack("H*"),
+        public: ["302a300506032b6570032100"].pack("H*")
+      },
+      "X25519" => {
+        private: ["302e020100300506032b656e04220420"].pack("H*"),
+        public: ["302a300506032b656e032100"].pack("H*")
+      }
+    }.freeze
+    private_constant :DER_PREFIXES
+
     module_function
 
     # SHA-256 digest.
@@ -130,12 +149,12 @@ module SQRL
     def ed25519_from_seed(seed)
       raise CryptoError, "ed25519 seed must be 32 bytes" unless seed.bytesize == 32
 
-      OpenSSL::PKey.new_raw_private_key("ED25519", seed.b)
+      raw_private_key("ED25519", seed.b)
     end
 
     # Public key bytes of the Ed25519 key derived from +seed+.
     def ed25519_public(seed)
-      ed25519_from_seed(seed).raw_public_key
+      raw_public_bytes(ed25519_from_seed(seed))
     end
 
     # Sign +msg+ with the Ed25519 key derived from +seed+; returns the 64-byte signature.
@@ -147,20 +166,44 @@ module SQRL
     def ed25519_verify(public_key, msg, signature)
       return false unless public_key.bytesize == 32 && signature.bytesize == 64
 
-      OpenSSL::PKey.new_raw_public_key("ED25519", public_key.b).verify(nil, signature.b, msg.b)
+      raw_public_key("ED25519", public_key.b).verify(nil, signature.b, msg.b)
     rescue OpenSSL::PKey::PKeyError
       false
     end
 
     # X25519 public key for a scalar (scalar multiplication of the base point).
     def x25519_base(scalar)
-      OpenSSL::PKey.new_raw_private_key("X25519", scalar.b).raw_public_key
+      raw_public_bytes(raw_private_key("X25519", scalar.b))
     end
 
     # X25519 Diffie-Hellman: +scalar * point+.
     def x25519(scalar, point)
-      OpenSSL::PKey.new_raw_private_key("X25519", scalar.b)
-                   .derive(OpenSSL::PKey.new_raw_public_key("X25519", point.b))
+      raw_private_key("X25519", scalar.b).derive(raw_public_key("X25519", point.b))
+    end
+
+    # Private key object of +type+ ("ED25519" or "X25519") from its 32 raw bytes.
+    # @api private
+    def raw_private_key(type, bytes)
+      return OpenSSL::PKey.new_raw_private_key(type, bytes) if RAW_KEY_API
+
+      OpenSSL::PKey.read(DER_PREFIXES.fetch(type)[:private] + bytes)
+    end
+
+    # Public key object of +type+ ("ED25519" or "X25519") from its 32 raw bytes.
+    # @api private
+    def raw_public_key(type, bytes)
+      return OpenSSL::PKey.new_raw_public_key(type, bytes) if RAW_KEY_API
+
+      OpenSSL::PKey.read(DER_PREFIXES.fetch(type)[:public] + bytes)
+    end
+
+    # The 32 raw public key bytes of an Ed25519 or X25519 key object.
+    # @api private
+    def raw_public_bytes(pkey)
+      return pkey.raw_public_key if RAW_KEY_API
+
+      # A SubjectPublicKeyInfo for these key types is the 12-byte prefix followed by the key.
+      pkey.public_to_der[-32, 32]
     end
   end
 end

data/lib/sqrl/version.rb

@@ -2,5 +2,5 @@
 
 module SQRL
   # Version shared by every gem in the family.
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sqrl-core
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Daniel P. Clark