@atproto/crypto 0.2.2 → 0.3.0

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# @atproto/crypto
+
+## 0.3.0
+
+### Minor Changes
+
+- [#1839](https://github.com/bluesky-social/atproto/pull/1839) [`e1b5f253`](https://github.com/bluesky-social/atproto/commit/e1b5f2537a5ba4d8b951a741269b604856028ae5) Thanks [@dholms](https://github.com/dholms)! - Prevent signature malleability through DER-encoded signatures
+
+## 0.2.3
+
+### Patch Changes
+
+- [#1788](https://github.com/bluesky-social/atproto/pull/1788) [`84e2d4d2`](https://github.com/bluesky-social/atproto/commit/84e2d4d2b6694f344d80c18672c78b650189d423) Thanks [@bnewbold](https://github.com/bnewbold)! - update license to "MIT or Apache2"

package/LICENSE.txt

@@ -0,0 +1,7 @@
+Dual MIT/Apache-2.0 License
+
+Copyright (c) 2022-2023 Bluesky PBC, and Contributors
+
+Except as otherwise noted in individual files, this software is licensed under the MIT license (<http://opensource.org/licenses/MIT>), or the Apache License, Version 2.0 (<http://www.apache.org/licenses/LICENSE-2.0>).
+
+Downstream projects and end users may chose either license individually, or both together, at their discretion. The motivation for this dual-licensing is the additional software patent assurance provided by Apache 2.0.

package/README.md

@@ -1,3 +1,51 @@
-# ATP Crypto Library
+# @atproto/crypto
 
-ATP's common cryptographic operations.
+TypeScript library providing basic cryptographic helpers as needed in [atproto](https://atproto.com).
+
+[![NPM](https://img.shields.io/npm/v/@atproto/crypto)](https://www.npmjs.com/package/@atproto/crypto)
+[![Github CI Status](https://github.com/bluesky-social/atproto/actions/workflows/repo.yaml/badge.svg)](https://github.com/bluesky-social/atproto/actions/workflows/repo.yaml)
+
+This package implements the two currently supported cryptographic systems:
+
+- P-256 elliptic curve: aka "NIST P-256", aka secp256r1 (note the r), aka prime256v1
+- K-256 elliptic curve: aka "NIST K-256", aka secp256k1 (note the k)
+
+The details of cryptography in atproto are described in [the specification](https://atproto.com/specs/cryptography). This includes string encodings, validity of "low-S" signatures, byte representation "compression", hashing, and more.
+
+## Usage
+
+```typescript
+import { verifySignature, Secp256k1Keypair, P256Keypair } from '@atproto/crypto'
+
+// generate a new random K-256 private key
+const keypair = await Secp256k1Keypair.create({ exportable: true })
+
+// sign binary data, resulting signature bytes.
+// SHA-256 hash of data is what actually gets signed.
+// signature output is often base64-encoded.
+const data = new Uint8Array([1, 2, 3, 4, 5, 6, 7, 8])
+const sig = await keypair.sign(data)
+
+// serialize the public key as a did:key string, which includes key type metadata
+const pubDidKey = keypair.did()
+console.log(pubDidKey)
+
+// output would look something like: 'did:key:zQ3shVRtgqTRHC7Lj4DYScoDgReNpsDp3HBnuKBKt1FSXKQ38'
+
+// verify signature using public key
+const ok = verifySignature(pubDidKey, data, sig)
+if (!ok) {
+  throw new Error('Uh oh, something is fishy')
+} else {
+  console.log('Success')
+}
+```
+
+## License
+
+This project is dual-licensed under MIT and Apache 2.0 terms:
+
+- MIT license ([LICENSE-MIT.txt](https://github.com/bluesky-social/atproto/blob/main/LICENSE-MIT.txt) or http://opensource.org/licenses/MIT)
+- Apache License, Version 2.0, ([LICENSE-APACHE.txt](https://github.com/bluesky-social/atproto/blob/main/LICENSE-APACHE.txt) or http://www.apache.org/licenses/LICENSE-2.0)
+
+Downstream projects and end users may chose either license individually, or both together, at their discretion. The motivation for this dual-licensing is the additional software patent assurance provided by Apache 2.0.

package/build.js

@@ -1,16 +1,8 @@
-const pkgJson = require('@npmcli/package-json')
 const { nodeExternalsPlugin } = require('esbuild-node-externals')
 
 const buildShallow =
   process.argv.includes('--shallow') || process.env.ATP_BUILD_SHALLOW === 'true'
 
-if (process.argv.includes('--update-main-to-dist')) {
-  return pkgJson
-    .load(__dirname)
-    .then((pkg) => pkg.update({ main: 'dist/index.js' }))
-    .then((pkg) => pkg.save())
-}
-
 require('esbuild').build({
   logLevel: 'info',
   entryPoints: ['src/index.ts'],

package/dist/index.js

@@ -17,10 +17,7 @@ var __copyProps = (to, from3, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__getProtoOf(mod2)) : {}, __copyProps(
-  isNodeMode || !mod2 || !mod2.__esModule ? __defProp(target, "default", { value: mod2, enumerable: true }) : target,
-  mod2
-));
+var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__getProtoOf(mod2)) : {}, __copyProps(isNodeMode || !mod2 || !mod2.__esModule ? __defProp(target, "default", { value: mod2, enumerable: true }) : target, mod2));
 var __toCommonJS = (mod2) => __copyProps(__defProp({}, "__esModule", { value: true }), mod2);
 
 // src/index.ts
@@ -59,7 +56,7 @@ var DID_KEY_PREFIX = "did:key:";
 var P256_JWT_ALG = "ES256";
 var SECP256K1_JWT_ALG = "ES256K";
 
-// ../../node_modules/uint8arrays/esm/src/concat.js
+// ../../node_modules/.pnpm/uint8arrays@3.0.0/node_modules/uint8arrays/esm/src/concat.js
 function concat(arrays, length2) {
   if (!length2) {
     length2 = arrays.reduce((acc, curr) => acc + curr.length, 0);
@@ -73,7 +70,7 @@ function concat(arrays, length2) {
   return output2;
 }
 
-// ../../node_modules/uint8arrays/esm/src/equals.js
+// ../../node_modules/.pnpm/uint8arrays@3.0.0/node_modules/uint8arrays/esm/src/equals.js
 function equals(a, b) {
   if (a === b) {
     return true;
@@ -89,13 +86,13 @@ function equals(a, b) {
   return true;
 }
 
-// ../../node_modules/multiformats/esm/src/bases/identity.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/identity.js
 var identity_exports = {};
 __export(identity_exports, {
   identity: () => identity
 });
 
-// ../../node_modules/multiformats/esm/vendor/base-x.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/vendor/base-x.js
 function base(ALPHABET, name2) {
   if (ALPHABET.length >= 255) {
     throw new TypeError("Alphabet too long");
@@ -231,7 +228,7 @@ var src = base;
 var _brrp__multiformats_scope_baseX = src;
 var base_x_default = _brrp__multiformats_scope_baseX;
 
-// ../../node_modules/multiformats/esm/src/bytes.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bytes.js
 var empty = new Uint8Array(0);
 var equals2 = (aa, bb) => {
   if (aa === bb)
@@ -259,7 +256,7 @@ var coerce = (o) => {
 var fromString = (str) => new TextEncoder().encode(str);
 var toString = (b) => new TextDecoder().decode(b);
 
-// ../../node_modules/multiformats/esm/src/bases/base.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base.js
 var Encoder = class {
   constructor(name2, prefix, baseEncode) {
     this.name = name2;
@@ -412,7 +409,7 @@ var rfc4648 = ({ name: name2, prefix, bitsPerChar, alphabet: alphabet2 }) => {
   });
 };
 
-// ../../node_modules/multiformats/esm/src/bases/identity.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/identity.js
 var identity = from({
   prefix: "\0",
   name: "identity",
@@ -420,7 +417,7 @@ var identity = from({
   decode: (str) => fromString(str)
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base2.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base2.js
 var base2_exports = {};
 __export(base2_exports, {
   base2: () => base2
@@ -432,7 +429,7 @@ var base2 = rfc4648({
   bitsPerChar: 1
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base8.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base8.js
 var base8_exports = {};
 __export(base8_exports, {
   base8: () => base8
@@ -444,7 +441,7 @@ var base8 = rfc4648({
   bitsPerChar: 3
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base10.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base10.js
 var base10_exports = {};
 __export(base10_exports, {
   base10: () => base10
@@ -455,7 +452,7 @@ var base10 = baseX({
   alphabet: "0123456789"
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base16.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base16.js
 var base16_exports = {};
 __export(base16_exports, {
   base16: () => base16,
@@ -474,7 +471,7 @@ var base16upper = rfc4648({
   bitsPerChar: 4
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base32.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base32.js
 var base32_exports = {};
 __export(base32_exports, {
   base32: () => base32,
@@ -542,7 +539,7 @@ var base32z = rfc4648({
   bitsPerChar: 5
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base36.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base36.js
 var base36_exports = {};
 __export(base36_exports, {
   base36: () => base36,
@@ -559,7 +556,7 @@ var base36upper = baseX({
   alphabet: "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base58.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base58.js
 var base58_exports = {};
 __export(base58_exports, {
   base58btc: () => base58btc,
@@ -576,7 +573,7 @@ var base58flickr = baseX({
   alphabet: "123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base64.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base64.js
 var base64_exports = {};
 __export(base64_exports, {
   base64: () => base64,
@@ -609,7 +606,7 @@ var base64urlpad = rfc4648({
   bitsPerChar: 6
 });
 
-// ../../node_modules/multiformats/esm/src/bases/base256emoji.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/bases/base256emoji.js
 var base256emoji_exports = {};
 __export(base256emoji_exports, {
   base256emoji: () => base256emoji
@@ -647,7 +644,7 @@ var base256emoji = from({
   decode: decode2
 });
 
-// ../../node_modules/multiformats/esm/src/hashes/sha2.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/hashes/sha2.js
 var sha2_exports = {};
 __export(sha2_exports, {
   sha256: () => sha256,
@@ -655,7 +652,7 @@ __export(sha2_exports, {
 });
 var import_crypto = __toESM(require("crypto"), 1);
 
-// ../../node_modules/multiformats/esm/vendor/varint.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/vendor/varint.js
 var encode_1 = encode3;
 var MSB = 128;
 var REST = 127;
@@ -714,7 +711,7 @@ var varint = {
 var _brrp_varint = varint;
 var varint_default = _brrp_varint;
 
-// ../../node_modules/multiformats/esm/src/varint.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/varint.js
 var decode4 = (data, offset = 0) => {
   const code2 = varint_default.decode(data, offset);
   return [
@@ -730,7 +727,7 @@ var encodingLength = (int) => {
   return varint_default.encodingLength(int);
 };
 
-// ../../node_modules/multiformats/esm/src/hashes/digest.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/hashes/digest.js
 var create = (code2, digest2) => {
   const size = digest2.byteLength;
   const sizeOffset = encodingLength(code2);
@@ -767,7 +764,7 @@ var Digest = class {
   }
 };
 
-// ../../node_modules/multiformats/esm/src/hashes/hasher.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/hashes/hasher.js
 var from2 = ({ name: name2, code: code2, encode: encode5 }) => new Hasher(name2, code2, encode5);
 var Hasher = class {
   constructor(name2, code2, encode5) {
@@ -785,7 +782,7 @@ var Hasher = class {
   }
 };
 
-// ../../node_modules/multiformats/esm/src/hashes/sha2.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/hashes/sha2.js
 var sha256 = from2({
   name: "sha2-256",
   code: 18,
@@ -797,7 +794,7 @@ var sha512 = from2({
   encode: (input) => coerce(import_crypto.default.createHash("sha512").update(input).digest())
 });
 
-// ../../node_modules/multiformats/esm/src/hashes/identity.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/hashes/identity.js
 var identity_exports2 = {};
 __export(identity_exports2, {
   identity: () => identity2
@@ -813,11 +810,11 @@ var identity2 = {
   digest
 };
 
-// ../../node_modules/multiformats/esm/src/codecs/json.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/codecs/json.js
 var textEncoder = new TextEncoder();
 var textDecoder = new TextDecoder();
 
-// ../../node_modules/multiformats/esm/src/cid.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/cid.js
 var CID = class {
   constructor(version2, code2, multihash, bytes2) {
     this.code = code2;
@@ -1122,7 +1119,7 @@ if (cid) {
 }
 `;
 
-// ../../node_modules/multiformats/esm/src/basics.js
+// ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/src/basics.js
 var bases = {
   ...identity_exports,
   ...base2_exports,
@@ -1140,7 +1137,7 @@ var hashes = {
   ...identity_exports2
 };
 
-// ../../node_modules/uint8arrays/esm/src/util/bases.js
+// ../../node_modules/.pnpm/uint8arrays@3.0.0/node_modules/uint8arrays/esm/src/util/bases.js
 function createCodec(name2, prefix, encode5, decode6) {
   return {
     name: name2,
@@ -1185,7 +1182,7 @@ var BASES = {
 };
 var bases_default = BASES;
 
-// ../../node_modules/uint8arrays/esm/src/from-string.js
+// ../../node_modules/.pnpm/uint8arrays@3.0.0/node_modules/uint8arrays/esm/src/from-string.js
 function fromString2(string2, encoding = "utf8") {
   const base3 = bases_default[encoding];
   if (!base3) {
@@ -1194,7 +1191,7 @@ function fromString2(string2, encoding = "utf8") {
   return base3.decoder.decode(`${base3.prefix}${string2}`);
 }
 
-// ../../node_modules/uint8arrays/esm/src/to-string.js
+// ../../node_modules/.pnpm/uint8arrays@3.0.0/node_modules/uint8arrays/esm/src/to-string.js
 function toString2(array, encoding = "utf8") {
   const base3 = bases_default[encoding];
   if (!base3) {
@@ -1203,7 +1200,7 @@ function toString2(array, encoding = "utf8") {
   return base3.encoder.encode(array).substring(1);
 }
 
-// ../../node_modules/@noble/hashes/esm/_assert.js
+// ../../node_modules/.pnpm/@noble+hashes@1.3.1/node_modules/@noble/hashes/esm/_assert.js
 function number(n) {
   if (!Number.isSafeInteger(n) || n < 0)
     throw new Error(`Wrong positive integer: ${n}`);
@@ -1247,11 +1244,11 @@ var assert = {
 };
 var assert_default = assert;
 
-// ../../node_modules/@noble/hashes/esm/cryptoNode.js
+// ../../node_modules/.pnpm/@noble+hashes@1.3.1/node_modules/@noble/hashes/esm/cryptoNode.js
 var nc = __toESM(require("node:crypto"), 1);
 var crypto2 = nc && typeof nc === "object" && "webcrypto" in nc ? nc.webcrypto : void 0;
 
-// ../../node_modules/@noble/hashes/esm/utils.js
+// ../../node_modules/.pnpm/@noble+hashes@1.3.1/node_modules/@noble/hashes/esm/utils.js
 var u8a = (a) => a instanceof Uint8Array;
 var createView = (arr) => new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
 var rotr = (word, shift) => word << 32 - shift | word >>> shift;
@@ -1302,7 +1299,7 @@ function randomBytes(bytesLength = 32) {
   throw new Error("crypto.getRandomValues must be defined");
 }
 
-// ../../node_modules/@noble/hashes/esm/hmac.js
+// ../../node_modules/.pnpm/@noble+hashes@1.3.1/node_modules/@noble/hashes/esm/hmac.js
 var HMAC = class extends Hash {
   constructor(hash2, _key) {
     super();
@@ -1367,7 +1364,7 @@ var HMAC = class extends Hash {
 var hmac = (hash2, key, message) => new HMAC(hash2, key).update(message).digest();
 hmac.create = (hash2, key) => new HMAC(hash2, key);
 
-// ../../node_modules/@noble/curves/esm/abstract/utils.js
+// ../../node_modules/.pnpm/@noble+curves@1.1.0/node_modules/@noble/curves/esm/abstract/utils.js
 var utils_exports = {};
 __export(utils_exports, {
   bitGet: () => bitGet,
@@ -1581,7 +1578,7 @@ function validateObject(object, validators, optValidators = {}) {
   return object;
 }
 
-// ../../node_modules/@noble/curves/esm/abstract/modular.js
+// ../../node_modules/.pnpm/@noble+curves@1.1.0/node_modules/@noble/curves/esm/abstract/modular.js
 var _0n2 = BigInt(0);
 var _1n2 = BigInt(1);
 var _2n2 = BigInt(2);
@@ -1833,7 +1830,7 @@ function hashToPrivateScalar(hash2, groupOrder, isLE2 = false) {
   return mod(num, groupOrder - _1n2) + _1n2;
 }
 
-// ../../node_modules/@noble/curves/esm/abstract/curve.js
+// ../../node_modules/.pnpm/@noble+curves@1.1.0/node_modules/@noble/curves/esm/abstract/curve.js
 var _0n3 = BigInt(0);
 var _1n3 = BigInt(1);
 function wNAF(c, bits) {
@@ -1933,7 +1930,7 @@ function validateBasic(curve) {
   });
 }
 
-// ../../node_modules/@noble/curves/esm/abstract/weierstrass.js
+// ../../node_modules/.pnpm/@noble+curves@1.1.0/node_modules/@noble/curves/esm/abstract/weierstrass.js
 function validatePointOpts(curve) {
   const opts = validateBasic(curve);
   validateObject(opts, {
@@ -2655,7 +2652,7 @@ function weierstrass(curveDef) {
   };
 }
 
-// ../../node_modules/@noble/curves/esm/_shortw_utils.js
+// ../../node_modules/.pnpm/@noble+curves@1.1.0/node_modules/@noble/curves/esm/_shortw_utils.js
 function getHash(hash2) {
   return {
     hash: hash2,
@@ -2668,7 +2665,7 @@ function createCurve(curveDef, defHash) {
   return Object.freeze({ ...create2(defHash), create: create2 });
 }
 
-// ../../node_modules/@noble/hashes/esm/_sha2.js
+// ../../node_modules/.pnpm/@noble+hashes@1.3.1/node_modules/@noble/hashes/esm/_sha2.js
 function setBigUint64(view, byteOffset, value, isLE2) {
   if (typeof view.setBigUint64 === "function")
     return view.setBigUint64(byteOffset, value, isLE2);
@@ -2768,7 +2765,7 @@ var SHA2 = class extends Hash {
   }
 };
 
-// ../../node_modules/@noble/hashes/esm/sha256.js
+// ../../node_modules/.pnpm/@noble+hashes@1.3.1/node_modules/@noble/hashes/esm/sha256.js
 var Chi = (a, b, c) => a & b ^ ~a & c;
 var Maj = (a, b, c) => a & b ^ a & c ^ b & c;
 var SHA256_K = new Uint32Array([
@@ -2934,7 +2931,7 @@ var SHA224 = class extends SHA256 {
 var sha2562 = wrapConstructor(() => new SHA256());
 var sha224 = wrapConstructor(() => new SHA224());
 
-// ../../node_modules/@noble/curves/esm/p256.js
+// ../../node_modules/.pnpm/@noble+curves@1.1.0/node_modules/@noble/curves/esm/p256.js
 var Fp = Field(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"));
 var CURVE_A = Fp.create(BigInt("-3"));
 var CURVE_B = BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b");
@@ -2962,7 +2959,7 @@ var decompressPubkey = (compressed) => {
   return point.toRawBytes(false);
 };
 
-// ../../node_modules/@noble/curves/esm/secp256k1.js
+// ../../node_modules/.pnpm/@noble+curves@1.1.0/node_modules/@noble/curves/esm/secp256k1.js
 var secp256k1P = BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f");
 var secp256k1N = BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141");
 var _1n5 = BigInt(1);
@@ -3043,16 +3040,30 @@ var decompressPubkey2 = (compressed) => {
 };
 
 // src/p256/operations.ts
-var verifyDidSig = async (did, data, sig) => {
+var verifyDidSig = async (did, data, sig, opts) => {
   const { jwtAlg, keyBytes } = parseDidKey(did);
   if (jwtAlg !== P256_JWT_ALG) {
     throw new Error(`Not a P-256 did:key: ${did}`);
   }
-  return verifySig(keyBytes, data, sig);
+  return verifySig(keyBytes, data, sig, opts);
 };
-var verifySig = async (publicKey, data, sig) => {
+var verifySig = async (publicKey, data, sig, opts) => {
+  const allowMalleable = opts?.allowMalleableSig ?? false;
   const msgHash = await sha2562(data);
-  return p256.verify(sig, msgHash, publicKey, { lowS: true });
+  if (!allowMalleable && !isCompactFormat(sig)) {
+    return false;
+  }
+  return p256.verify(sig, msgHash, publicKey, {
+    lowS: !allowMalleable
+  });
+};
+var isCompactFormat = (sig) => {
+  try {
+    const parsed = p256.Signature.fromCompact(sig);
+    return equals(parsed.toCompactRawBytes(), sig);
+  } catch {
+    return false;
+  }
 };
 
 // src/p256/plugin.ts
@@ -3064,16 +3075,30 @@ var p256Plugin = {
 var plugin_default = p256Plugin;
 
 // src/secp256k1/operations.ts
-var verifyDidSig2 = async (did, data, sig) => {
+var verifyDidSig2 = async (did, data, sig, opts) => {
   const { jwtAlg, keyBytes } = parseDidKey(did);
   if (jwtAlg !== SECP256K1_JWT_ALG) {
     throw new Error(`Not a secp256k1 did:key: ${did}`);
   }
-  return verifySig2(keyBytes, data, sig);
+  return verifySig2(keyBytes, data, sig, opts);
 };
-var verifySig2 = async (publicKey, data, sig) => {
+var verifySig2 = async (publicKey, data, sig, opts) => {
+  const allowMalleable = opts?.allowMalleableSig ?? false;
   const msgHash = await sha2562(data);
-  return secp256k1.verify(sig, msgHash, publicKey, { lowS: true });
+  if (!allowMalleable && !isCompactFormat2(sig)) {
+    return false;
+  }
+  return secp256k1.verify(sig, msgHash, publicKey, {
+    lowS: !allowMalleable
+  });
+};
+var isCompactFormat2 = (sig) => {
+  try {
+    const parsed = secp256k1.Signature.fromCompact(sig);
+    return equals(parsed.toCompactRawBytes(), sig);
+  } catch {
+    return false;
+  }
 };
 
 // src/secp256k1/plugin.ts
@@ -3093,10 +3118,7 @@ var parseMultikey = (multikey) => {
   if (!multikey.startsWith(BASE58_MULTIBASE_PREFIX)) {
     throw new Error(`Incorrect prefix for multikey: ${multikey}`);
   }
-  const prefixedBytes = fromString2(
-    multikey.slice(BASE58_MULTIBASE_PREFIX.length),
-    "base58btc"
-  );
+  const prefixedBytes = fromString2(multikey.slice(BASE58_MULTIBASE_PREFIX.length), "base58btc");
   const plugin = plugins_default.find((p) => hasPrefix(prefixedBytes, p.prefix));
   if (!plugin) {
     throw new Error("Unsupported key type");
@@ -3207,18 +3229,18 @@ var randomIntFromSeed = async (seed, high, low = 0) => {
 };
 
 // src/verify.ts
-var verifySignature = (didKey, data, sig) => {
+var verifySignature = (didKey, data, sig, opts) => {
   const parsed = parseDidKey(didKey);
   const plugin = plugins_default.find((p) => p.jwtAlg === parsed.jwtAlg);
   if (!plugin) {
-    throw new Error(`Unsupported signature alg: :${parsed.jwtAlg}`);
+    throw new Error(`Unsupported signature alg: ${parsed.jwtAlg}`);
   }
-  return plugin.verifySignature(didKey, data, sig);
+  return plugin.verifySignature(didKey, data, sig, opts);
 };
-var verifySignatureUtf8 = async (didKey, data, sig) => {
+var verifySignatureUtf8 = async (didKey, data, sig, opts) => {
   const dataBytes = fromString2(data, "utf8");
   const sigBytes = fromString2(sig, "base64url");
-  return verifySignature(didKey, dataBytes, sigBytes);
+  return verifySignature(didKey, dataBytes, sigBytes, opts);
 };
 
 // src/p256/keypair.ts