@blamejs/pki 0.3.33 → 0.4.0

package/CHANGELOG.md

@@ -4,7 +4,24 @@ All notable changes to `@blamejs/pki` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## v0.3.33 — 2026-08-06
+## v0.4.0 — 2026-08-06
+
+CRL issuance and verification, PKCS#12 build and open, attribute-certificate issuance, and the key-material lifecycle graduate to stable, and pki.schema.c509 adds the compact policyMappings and policyConstraints value forms -- a C509 certificate's policy mappings and policy constraints now ride their specific draft-20 CBOR shape and interoperate with a conformant C509 implementation rather than only this decoder.
+
+### Added
+
+- pki.schema.c509 encodes and decodes the compact value forms for the policyMappings and policyConstraints extensions (draft-ietf-cose-cbor-encoded-cert-20 sec. 3.3): a policy mapping's issuerDomainPolicy and subjectDomainPolicy each ride the sec. 8.9 registry-integer / unwrapped-OID policy space the certificatePolicies extension uses (a policy mapping to or from the special anyPolicy is preserved, matching what a certificate's own decoder accepts), and a policy constraints value rides the fixed two-element [requireExplicitPolicy, inhibitPolicyMapping] array, each field a non-negative skip count or absent. Both directions invert to the DER extnValue byte-for-byte, so a certificate carrying either extension is the specific compact shape a conformant C509 implementation reads rather than an opaque DER byte string. The encoder is guarded: a value the compact form cannot hold falls the whole extension back to the unwrapped-OID byte-string form instead of encoding lossily; a malformed compact value -- an empty or both-absent policy constraints, an odd-length or empty policy-mappings array, a policy mapping member that is not a two-policy pair, or an unregistered policy integer -- fails closed with a typed C509Error.
+
+### Changed
+
+- pki.crl.sign / verify / isRevoked (RFC 5280 sec. 5), pki.pkcs12.build / open / verifyMac (RFC 7292 / RFC 9579), pki.attrcert.sign (RFC 5755), and the key-material lifecycle pki.key.encrypt / decrypt / export / import / generate / publicFromPrivate (PKCS#8 / RFC 5958, RFC 8018) graduate from experimental to stable. Their governing standards are settled and each is proven against an independent implementation in the integration harness (OpenSSL), or for the attribute-certificate format through the toolkit's own conformance-vector round-trip plus coverage-guided fuzzing. They are now covered by the stability contract: a breaking change to any of them ships only after a prior deprecation cycle, never silently in a minor (the published LTS support window itself takes effect at v1.0).
+- A C509 certificate carrying policyMappings or policyConstraints now encodes to -- and decodes from -- its compact CBOR value shape rather than the unwrapped-OID byte-string form an earlier release emitted; both reconstruct the same DER, but the CBOR bytes differ, so re-encode any C509 produced by an earlier release.
+
+### Fixed
+
+- The C509 encoder now bounds the basicConstraints path length and the inhibitAnyPolicy and policyConstraints skip counts to the same non-negative 31-bit range the toolkit's own certificate decoders enforce. A native C509 carrying one of these counts past that range now fails closed with a typed C509Error rather than reconstructing a DER an X.509 decoder -- this toolkit's included -- would then reject.
+
+## v0.3.33 — 2026-08-05
 
 pki.schema.c509 encodes and decodes the compact certificatePolicies value form -- a C509 certificate's policy identifiers ride their draft-20 registry integers (or unwrapped OIDs) and their CPS-URI and UserNotice qualifiers ride the specific compact CBOR shape, interoperating with a conformant C509 implementation rather than only this decoder.
 

package/README.md

@@ -204,7 +204,7 @@ is callable today; nothing below is a stub.
 | `pki.webcrypto` | A W3C WebCrypto (`SubtleCrypto`) engine over `node:crypto` — `sign`/`verify`/`encrypt`/`decrypt`/`deriveBits`/`digest`/`generateKey`/`importKey`/`exportKey` across RSA, ECDSA, ECDH, Ed25519/Ed448, AES, HMAC, HKDF, PBKDF2, SHA — **and** post-quantum ML-DSA-44/65/87 and SLH-DSA signatures, plus ML-KEM-512/768/1024 key generation and certificate/PKCS#8 import — the RFC 9935 seed / expandedKey / both private-key CHOICE is validated fail-closed, so an OpenSSL-legacy bare-seed or an internally inconsistent key is rejected with a typed error (KEM encapsulation lands with CMS KEM-decrypt). Zero-dependency, OpenSSL-interoperable |
 | `pki.schema` | The schema family — `parse` detects which PKI format DER / PEM encodes and routes to the right parser, `all` enumerates the registered formats, and the engine + per-format members are grouped here |
 | `pki.schema.x509` | Parse DER / PEM certificates into structured, validated fields, with named + partly-decoded extensions — including the RFC 3739 / ETSI EN 319 412-5 qualified-certificate `qcStatements` (EU-qualified declaration, reliance limit, QSCD flag, certificate type, retention, PDS URLs, country of qualification; unknown statements preserved opaque) and the Microsoft Active Directory Certificate Services enrollment extensions (certificate template, CA version, previous-CA-certificate hash, application policies), fail-closed — `parse`, `pemDecode`, `pemEncode` |
-| `pki.schema.c509` | Parse **and encode** C509 CBOR-encoded certificates (draft-ietf-cose-cbor-encoded-cert) — the compact CBOR profile of X.509, decoded fail-closed under deterministic CBOR; an explicit `parse` call (CBOR, not DER, so not auto-routed). `encode(input)` is the byte-exact inverse: a DER X.509 v3 certificate forward-transforms to a compact type-3 C509 whose reconstruction reproduces the original DER byte for byte (so the original signature still verifies), or a `parse` result re-emits its native array — canonical deterministic CBOR with the registry integer shorthands, the C509 compressions, and the compact draft-20 per-extension value forms — the scalar extensions (keyUsage, basicConstraints, extended key usage, subject key identifier, and more), the general-name-bearing extensions (subjectAltName, issuer alt name, name constraints, CRL distribution points, authority/subject information access, and the full authority key identifier) over one shared GeneralNames value codec, and certificate policies (registry-integer or OID policy identifiers with their CPS-URI and UserNotice qualifiers); a certificate outside the invertible set throws a typed `C509Error` |
+| `pki.schema.c509` | Parse **and encode** C509 CBOR-encoded certificates (draft-ietf-cose-cbor-encoded-cert) — the compact CBOR profile of X.509, decoded fail-closed under deterministic CBOR; an explicit `parse` call (CBOR, not DER, so not auto-routed). `encode(input)` is the byte-exact inverse: a DER X.509 v3 certificate forward-transforms to a compact type-3 C509 whose reconstruction reproduces the original DER byte for byte (so the original signature still verifies), or a `parse` result re-emits its native array — canonical deterministic CBOR with the registry integer shorthands, the C509 compressions, and the compact draft-20 per-extension value forms — the scalar extensions (keyUsage, basicConstraints, extended key usage, subject key identifier, and more), the general-name-bearing extensions (subjectAltName, issuer alt name, name constraints, CRL distribution points, authority/subject information access, and the full authority key identifier) over one shared GeneralNames value codec, certificate policies (registry-integer or OID policy identifiers with their CPS-URI and UserNotice qualifiers), and policy mappings and policy constraints; a certificate outside the invertible set throws a typed `C509Error` |
 | `pki.schema.crl` | Parse DER / PEM X.509 CRLs per RFC 5280 §5 — revoked serials with real-`Date` revocation times, named + partly-decoded extensions, fail-closed — `parse`, `pemDecode`, `pemEncode` |
 | `pki.schema.csr` | Parse DER / PEM PKCS#10 certification requests per RFC 2986 — subject DN, public key, requested attributes, signature, fail-closed — `parse`, `pemDecode`, `pemEncode` |
 | `pki.schema.pkcs8` | Parse DER / PEM PKCS#8 private keys per RFC 5208 / 5958 — algorithm, raw key bytes, attributes, optional public key, fail-closed; encrypted keys recognized (not decrypted) — `parse`, `parseEncrypted`, `pemDecode`, `pemEncode` |

package/lib/attrcert-sign.js

@@ -408,7 +408,7 @@ function _buildExtensions(extSpec, aaSpki) {
  * @primitive pki.attrcert.sign
  * @signature pki.attrcert.sign(spec, issuer, opts?) -> Promise<Buffer|string>
  * @since 0.3.2
- * @status experimental
+ * @status stable
  * @spec RFC 5755
  * @defends forged-attribute-certificate (CWE-347)
  * @related pki.schema.attrcert.parse, pki.x509.sign

package/lib/crl-sign.js

@@ -454,7 +454,7 @@ function _sign(spec, issuer, opts) {
  * @primitive pki.crl.sign
  * @signature pki.crl.sign(spec, issuer, opts?) -> Promise<Buffer|string>
  * @since 0.3.9
- * @status experimental
+ * @status stable
  * @spec RFC 5280 sec. 5, RFC 9882, RFC 9814
  * @defends crl-forgery (CWE-347)
  * @related pki.schema.crl.parse, pki.crl.verify, pki.path.crlChecker
@@ -510,7 +510,7 @@ function _resolveIssuerSpki(issuer) {
  * @primitive pki.crl.verify
  * @signature pki.crl.verify(crl, issuer) -> Promise<boolean>
  * @since 0.3.9
- * @status experimental
+ * @status stable
  * @spec RFC 5280 sec. 5.1.1.3, RFC 9814
  * @defends crl-signature-bypass (CWE-347)
  * @related pki.crl.sign, pki.path.crlChecker, pki.schema.crl.parse
@@ -549,7 +549,7 @@ function _serialHexOf(serial) {
  * @primitive pki.crl.isRevoked
  * @signature pki.crl.isRevoked(crl, serialNumber) -> entry | null
  * @since 0.3.9
- * @status experimental
+ * @status stable
  * @spec RFC 5280 sec. 5.1.2.6
  * @related pki.crl.verify, pki.schema.crl.parse
  *

package/lib/key.js

@@ -81,7 +81,7 @@ async function _toPrivateKeyDer(input) {
  * @primitive pki.key.encrypt
  * @signature pki.key.encrypt(privateKey, password, opts?) -> Promise<Buffer|string>
  * @since 0.3.10
- * @status experimental
+ * @status stable
  * @spec RFC 5958 sec. 3, RFC 8018
  * @related pki.key.decrypt, pki.schema.pkcs8.parseEncrypted, pki.cms.encrypt
  *
@@ -132,7 +132,7 @@ async function encrypt(privateKey, password, opts) {
  * @primitive pki.key.decrypt
  * @signature pki.key.decrypt(encrypted, password, opts?) -> Promise<Buffer|string>
  * @since 0.3.10
- * @status experimental
+ * @status stable
  * @spec RFC 5958 sec. 3, RFC 8018 sec. 6.2, RFC 8018 sec. 8
  * @defends pbes2-padding-oracle (CWE-208), pbkdf2-work-dos (CWE-400)
  * @related pki.key.encrypt, pki.schema.pkcs8.parse
@@ -187,7 +187,7 @@ function _decryptPbes2(encAlg, ciphertext, password, opts) {
  * @primitive pki.key.export
  * @signature pki.key.export(key, opts?) -> Promise<Buffer|string>
  * @since 0.3.10
- * @status experimental
+ * @status stable
  * @spec RFC 5958, RFC 5280 sec. 4.1.2.7, RFC 8410 sec. 3
  * @related pki.key.import, pki.key.publicFromPrivate, pki.schema.pkcs8.parse
  *
@@ -222,7 +222,7 @@ async function export_(key, opts) {
  * @primitive pki.key.import
  * @signature pki.key.import(input, opts?) -> Promise<CryptoKey>
  * @since 0.3.10
- * @status experimental
+ * @status stable
  * @spec RFC 5958, RFC 5280 sec. 4.1.2.7, RFC 8018
  * @related pki.key.export, pki.key.decrypt
  *
@@ -265,7 +265,7 @@ async function import_(input, opts) {
  * @primitive pki.key.generate
  * @signature pki.key.generate(algorithm, opts?) -> Promise<{ privateKey, publicKey }>
  * @since 0.3.10
- * @status experimental
+ * @status stable
  * @spec W3C WebCrypto, FIPS 203, FIPS 204
  * @related pki.key.export, pki.key.publicFromPrivate
  *
@@ -296,7 +296,7 @@ async function generate(algorithm, opts) {
  * @primitive pki.key.publicFromPrivate
  * @signature pki.key.publicFromPrivate(privateKey, opts?) -> Promise<Buffer|string>
  * @since 0.3.10
- * @status experimental
+ * @status stable
  * @spec RFC 5280 sec. 4.1.2.7, RFC 8410 sec. 3
  * @related pki.key.export, pki.key.import
  *

package/lib/pkcs12-build.js

@@ -403,7 +403,7 @@ function _normalizeSpec(spec, opts) {
  * @primitive pki.pkcs12.build
  * @signature pki.pkcs12.build(spec, opts?) -> Promise<Buffer|string>
  * @since 0.3.11
- * @status experimental
+ * @status stable
  * @spec RFC 7292, RFC 9579, RFC 8018
  * @related pki.schema.pkcs12.parse, pki.pkcs12.verifyMac
  *
@@ -468,7 +468,7 @@ async function build(spec, opts) {
  * @primitive pki.pkcs12.verifyMac
  * @signature pki.pkcs12.verifyMac(pfx, password, opts?) -> Promise<boolean>
  * @since 0.3.11
- * @status experimental
+ * @status stable
  * @spec RFC 7292 sec. 5.1, RFC 9579
  * @defends pkcs12-mac-forgery (CWE-347)
  * @related pki.pkcs12.build, pki.schema.pkcs12.parse
@@ -533,7 +533,7 @@ function _capWork(iterations, salt, opts, keyLength, hardCap) {
  * @primitive pki.pkcs12.open
  * @signature pki.pkcs12.open(pfx, password, opts?) -> Promise<OpenResult>
  * @since 0.3.12
- * @status experimental
+ * @status stable
  * @spec RFC 7292 sec. 5.1, RFC 9579, RFC 8018
  * @defends pkcs12-unauthenticated-decrypt (CWE-347), pbes2-padding-oracle (CWE-208)
  * @related pki.pkcs12.build, pki.pkcs12.verifyMac, pki.schema.pkcs12.parse

package/lib/schema-c509.js

@@ -89,6 +89,8 @@ var EXT_BY_INT = {
   9: _name("authorityInfoAccess"),
   25: _name("issuerAltName"),
   26: _name("nameConstraints"),
+  27: _name("policyMappings"),
+  28: _name("policyConstraints"),
   29: _name("freshestCRL"),
   30: _name("inhibitAnyPolicy"),
   31: _name("subjectInfoAccess"),
@@ -102,6 +104,7 @@ var EXT_COMPACT = {
   extKeyUsage: 1, inhibitAnyPolicy: 1, ocspNoCheck: 1, tlsFeature: 1,
   subjectAltName: 1, issuerAltName: 1, nameConstraints: 1, cRLDistributionPoints: 1,
   freshestCRL: 1, authorityInfoAccess: 1, subjectInfoAccess: 1, certificatePolicies: 1,
+  policyMappings: 1, policyConstraints: 1,
 };
 // sec. 8.12 Extended Key Usages registry (C509 int -> registered id-kp purpose name). A KeyPurposeId
 // outside this set encodes as an unwrapped ~oid; a C509 int outside it fails closed on decode.
@@ -289,6 +292,14 @@ function _cborIntVal(node, label) {
   if (node.majorType !== 0 && node.majorType !== 1) throw _err("c509/bad-extensions", "a " + label + " value must be a CBOR integer");
   return cbor.read.int(node);
 }
+// A non-negative reconstruct-side count (a policyConstraints / inhibitAnyPolicy SkipCerts, a basicConstraints
+// pathLenConstraint) narrowed to [0, 2^31-1] via the SAME guard.range.uint31 the toolkit's own DER decoders
+// (schema-pkix) bound these INTEGER (0..MAX) counts through. A native CBOR value past 2^31-1 fails closed here
+// rather than reconstructing a DER the toolkit's own decoder would then reject -- the reconstruct path must
+// produce nothing that decoder rejects. Returns a Number; b.integer narrows it to the minimal DER INTEGER.
+function _boundCount(value, label) {
+  return guard.range.uint31(value, _err, "c509/bad-extensions", label + " (0..2^31-1)");
+}
 // A C509 KeyPurposeId (int registry alias OR unwrapped ~oid) -> the dotted extended-key-usage OID.
 function _ekuPurposeOid(node) {
   if (node.majorType === 0 || node.majorType === 1) {
@@ -686,7 +697,7 @@ function _extValueToDer(name, node) {
       var iv = _cborIntVal(node, "basicConstraints");
       if (iv === -2n) return b.sequence([]);                                  // cA false (omitted)
       if (iv === -1n) return b.sequence([b.boolean(true)]);                   // cA true, no pathLen
-      if (iv >= 0n) return b.sequence([b.boolean(true), b.integer(iv)]);      // cA true, pathLen
+      if (iv >= 0n) return b.sequence([b.boolean(true), b.integer(_boundCount(iv, "a basicConstraints pathLenConstraint"))]);   // cA true, pathLen (0..2^31-1, as the DER decoder bounds it)
       throw _err("c509/bad-extensions", "a basicConstraints int " + iv + " is outside the -2/-1/pathLen range");
     }
     case "authorityKeyIdentifier":   // keyId-only bytes, or [ keyId, authorityCertIssuer, serial ] (sec. 3.3)
@@ -710,8 +721,8 @@ function _extValueToDer(name, node) {
       }
       return b.sequence(items.map(function (it) { return b.oid(_ekuPurposeOid(it)); }));
     }
-    case "inhibitAnyPolicy":       // uint -> INTEGER SkipCerts
-      return b.integer(_cborUint(node, "inhibitAnyPolicy"));
+    case "inhibitAnyPolicy":       // uint -> INTEGER SkipCerts (0..2^31-1, as the DER decoder bounds it)
+      return b.integer(_boundCount(_cborUint(node, "inhibitAnyPolicy"), "an inhibitAnyPolicy SkipCerts"));
     case "ocspNoCheck":            // null -> NULL
       if (node.majorType !== 7 || !(Buffer.isBuffer(node.bytes) && node.bytes.length === 1 && node.bytes[0] === 0xf6)) throw _err("c509/bad-extensions", "an ocspNoCheck value must be the CBOR simple value null");
       return b.nullValue();
@@ -770,6 +781,27 @@ function _extValueToDer(name, node) {
       }
       return b.sequence(polInfos);
     }
+    case "policyMappings": {        // [ idp, sdp, idp, sdp, ... ] -> SEQUENCE OF SEQUENCE { OID, OID } (sec. 3.3)
+      if (node.majorType !== 4 || !node.children) throw _err("c509/bad-extensions", "a policyMappings value must be a CBOR array");
+      var pmKids = node.children;
+      if (pmKids.length === 0 || pmKids.length % 2 !== 0) throw _err("c509/bad-extensions", "a policyMappings array must be non-empty (issuerDomainPolicy, subjectDomainPolicy) pairs (sec. 3.3)");
+      var maps = [];
+      // each member is a CertPolicyId -- the same sec. 8.9 int/~oid policy space as certificatePolicies (an int
+      // outside sec. 8.9 fails closed in _policyIdToDerOid). anyPolicy is accepted: RFC 5280 sec. 4.2.1.5's
+      // "MUST NOT map to/from anyPolicy" is a generation rule the toolkit's own DER decoder does not reject.
+      for (var mi = 0; mi + 1 < pmKids.length; mi += 2) maps.push(b.sequence([b.oid(_policyIdToDerOid(pmKids[mi])), b.oid(_policyIdToDerOid(pmKids[mi + 1]))]));
+      return b.sequence(maps);
+    }
+    case "policyConstraints": {      // [ requireExplicitPolicy: uint/null, inhibitPolicyMapping: uint/null ] -> SEQUENCE { [0]?, [1]? }
+      if (node.majorType !== 4 || !node.children || node.children.length !== 2) throw _err("c509/bad-extensions", "a policyConstraints value must be a 2-element CBOR array [ requireExplicitPolicy, inhibitPolicyMapping ] (sec. 3.3)");
+      var pcFields = [], repN = node.children[0], ipmN = node.children[1];
+      if (!_isCborNull(repN)) pcFields.push(b.implicit(0, b.integer(_boundCount(_cborUint(repN, "a policyConstraints requireExplicitPolicy"), "a policyConstraints requireExplicitPolicy"))));   // requireExplicitPolicy [0] IMPLICIT SkipCerts
+      if (!_isCborNull(ipmN)) pcFields.push(b.implicit(1, b.integer(_boundCount(_cborUint(ipmN, "a policyConstraints inhibitPolicyMapping"), "a policyConstraints inhibitPolicyMapping"))));   // inhibitPolicyMapping [1] IMPLICIT SkipCerts
+      // both-null is the empty-SEQUENCE case RFC 5280 sec. 4.2.1.11 forbids ("either ... MUST be present"); the
+      // toolkit's own DER decoder rejects the empty PolicyConstraints, so the reconstruct fails closed too.
+      if (pcFields.length === 0) throw _err("c509/bad-extensions", "policyConstraints must contain requireExplicitPolicy or inhibitPolicyMapping (RFC 5280 sec. 4.2.1.11)");
+      return b.sequence(pcFields);   // positional slot -> tag makes [0] < [1] unique + ascending by construction
+    }
     default:
       throw _err("c509/bad-extensions", "extension " + name + " has no compact value decoder");
   }
@@ -906,6 +938,32 @@ function _extValueFromDer(name, der) {
       }
       return cbor.build.array(cpOut);
     }
+    case "policyMappings": {                                        // SEQUENCE OF SEQUENCE { OID, OID } -> [ idp, sdp, ... ]
+      if (node.tagClass !== "universal" || node.tagNumber !== asn1.TAGS.SEQUENCE || !node.children || node.children.length < 1) return null;
+      var pmOut = [];
+      for (var pm = 0; pm < node.children.length; pm++) {
+        var mp = node.children[pm];
+        if (mp.tagClass !== "universal" || mp.tagNumber !== asn1.TAGS.SEQUENCE || !mp.children || mp.children.length !== 2) return null;
+        pmOut.push(_policyIdFromDer(asn1.read.oid(mp.children[0])));
+        pmOut.push(_policyIdFromDer(asn1.read.oid(mp.children[1])));
+      }
+      return cbor.build.array(pmOut);
+    }
+    case "policyConstraints": {                                     // SEQUENCE { [0] rep?, [1] ipm? } -> [ rep/null, ipm/null ]
+      if (node.tagClass !== "universal" || node.tagNumber !== asn1.TAGS.SEQUENCE || !node.children || node.children.length < 1 || node.children.length > 2) return null;
+      var repC = cbor.build.nullValue(), ipmC = cbor.build.nullValue(), pcLast = -1;
+      for (var pci = 0; pci < node.children.length; pci++) {
+        var f = node.children[pci];
+        if (f.tagClass !== "context" || f.tagNumber <= pcLast) return null;   // DER: unique + ascending [0] < [1]
+        pcLast = f.tagNumber;
+        var sv = asn1.read.integerImplicit(f, f.tagNumber);
+        if (sv < 0n) return null;                                             // SkipCerts (0..MAX) -- a negative is non-compact
+        if (f.tagNumber === 0) repC = cbor.build.uint(sv);
+        else if (f.tagNumber === 1) ipmC = cbor.build.uint(sv);
+        else return null;
+      }
+      return cbor.build.array([repC, ipmC]);
+    }
     default:
       return null;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.3.33",
+  "version": "0.4.0",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:d39fe4d9-9f98-4126-8a96-8660ce1805e0",
+  "serialNumber": "urn:uuid:40b5fc50-7b82-41d2-9e80-f01b6be97878",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-08-06T04:08:23.299Z",
+    "timestamp": "2026-08-06T23:41:09.454Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.3.33",
+      "bom-ref": "@blamejs/pki@0.4.0",
       "type": "application",
       "name": "pki",
-      "version": "0.3.33",
+      "version": "0.4.0",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.3.33",
+      "purl": "pkg:npm/%40blamejs/pki@0.4.0",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.3.33",
+      "ref": "@blamejs/pki@0.4.0",
       "dependsOn": []
     }
   ]