@blamejs/pki 0.5.16 → 0.5.18

package/lib/webcrypto.js

@@ -5,6 +5,7 @@
  * @module     pki.webcrypto
  * @nav        Core
  * @title      WebCrypto
+ * @fullname   WebCrypto: a SubtleCrypto surface over node:crypto
  * @order      50
  * @featured   true
  * @slug       webcrypto
@@ -470,7 +471,7 @@ SubtleCrypto.prototype.encrypt = async function encrypt(algorithm, key, data) {
       return _withSecretBytes(key, function (kb) {
         var cipher = nodeCrypto.createCipheriv("aes-" + key.algorithm.length + "-gcm", kb, iv, { authTagLength: (alg.tagLength || 128) / 8 });
         if (aad) cipher.setAAD(aad);
-        var ct = Buffer.concat([cipher.update(buf), cipher.final()]);
+        var ct = guard.secret.cipherFinish(cipher, buf, WebCryptoError, "webcrypto/operation", "an AES-GCM encrypt intermediate");
         return Buffer.concat([ct, cipher.getAuthTag()]);
       });
     }, "encrypt"));
@@ -480,7 +481,7 @@ SubtleCrypto.prototype.encrypt = async function encrypt(algorithm, key, data) {
     return _toArrayBuffer(_runCipher(function () {
       return _withSecretBytes(key, function (kb) {
         var c2 = nodeCrypto.createCipheriv("aes-" + key.algorithm.length + "-cbc", kb, cbcIv);
-        return Buffer.concat([c2.update(buf), c2.final()]);
+        return guard.secret.cipherFinish(c2, buf, WebCryptoError, "webcrypto/operation", "an AES-CBC encrypt intermediate");
       });
     }, "encrypt"));
   }
@@ -490,7 +491,7 @@ SubtleCrypto.prototype.encrypt = async function encrypt(algorithm, key, data) {
     return _toArrayBuffer(_runCipher(function () {
       return _withSecretBytes(key, function (kb) {
         var c3 = nodeCrypto.createCipheriv("aes-" + key.algorithm.length + "-ctr", kb, ctrCounter);
-        return Buffer.concat([c3.update(buf), c3.final()]);
+        return guard.secret.cipherFinish(c3, buf, WebCryptoError, "webcrypto/operation", "an AES-CTR encrypt intermediate");
       });
     }, "encrypt"));
   }
@@ -528,7 +529,9 @@ SubtleCrypto.prototype.decrypt = async function decrypt(algorithm, key, data) {
         var d = nodeCrypto.createDecipheriv("aes-" + key.algorithm.length + "-gcm", kb, iv, { authTagLength: tagLen });
         if (gcmAad) d.setAAD(gcmAad);
         d.setAuthTag(tag);
-        return Buffer.concat([d.update(ct), d.final()]);
+        // The recovered plaintext exists in full before final() judges the tag, so a forged message
+        // would otherwise abandon a readable copy on the throw path.
+        return guard.secret.cipherFinish(d, ct, WebCryptoError, "webcrypto/operation", "the recovered AES-GCM plaintext");
       });
     }, "decrypt"));
   }
@@ -537,7 +540,7 @@ SubtleCrypto.prototype.decrypt = async function decrypt(algorithm, key, data) {
     return _toArrayBuffer(_runCipher(function () {
       return _withSecretBytes(key, function (kb) {
         var d2 = nodeCrypto.createDecipheriv("aes-" + key.algorithm.length + "-cbc", kb, cbcIv2);
-        return Buffer.concat([d2.update(buf), d2.final()]);
+        return guard.secret.cipherFinish(d2, buf, WebCryptoError, "webcrypto/operation", "the recovered AES-CBC plaintext");
       });
     }, "decrypt"));
   }
@@ -547,7 +550,7 @@ SubtleCrypto.prototype.decrypt = async function decrypt(algorithm, key, data) {
     return _toArrayBuffer(_runCipher(function () {
       return _withSecretBytes(key, function (kb) {
         var d3 = nodeCrypto.createDecipheriv("aes-" + key.algorithm.length + "-ctr", kb, ctrCounter2);
-        return Buffer.concat([d3.update(buf), d3.final()]);
+        return guard.secret.cipherFinish(d3, buf, WebCryptoError, "webcrypto/operation", "the recovered AES-CTR plaintext");
       });
     }, "decrypt"));
   }
@@ -874,7 +877,7 @@ SubtleCrypto.prototype.wrapKey = async function wrapKey(format, key, wrappingKey
     try {
       return _withSecretBytes(wrappingKey, function (wkBytes) {
         var c = nodeCrypto.createCipheriv("aes" + wrappingKey.algorithm.length + "-wrap", wkBytes, Buffer.from("A6A6A6A6A6A6A6A6", "hex"));
-        return _toArrayBuffer(Buffer.concat([c.update(bytes), c.final()]));
+        return _toArrayBuffer(guard.secret.cipherFinish(c, bytes, WebCryptoError, "webcrypto/operation", "an AES-KW wrap intermediate"));
       });
     } catch (e) { throw new WebCryptoError("webcrypto/operation", "wrapKey: AES-KW key wrap failed", e); }
   }
@@ -919,7 +922,7 @@ SubtleCrypto.prototype.unwrapKey = async function unwrapKey(format, wrappedKey,
     try {
       bytes = _withSecretBytes(unwrappingKey, function (kwBytes) {
         var d = nodeCrypto.createDecipheriv("aes" + unwrappingKey.algorithm.length + "-wrap", kwBytes, Buffer.from("A6A6A6A6A6A6A6A6", "hex"));
-        return Buffer.concat([d.update(wrapped), d.final()]);
+        return guard.secret.cipherFinish(d, wrapped, WebCryptoError, "webcrypto/operation", "the unwrapped key material");
       });
     } catch (e) { throw new WebCryptoError("webcrypto/operation", "unwrapKey: AES-KW key unwrap failed (integrity or length)", e); }
   } else {

package/lib/x509-sign.js

@@ -6,6 +6,7 @@
  * @module     pki.x509
  * @nav        Signing
  * @title      Certificates
+ * @fullname   X.509 certificates: parse, sign and inspect
  * @intro The X.509 certificate-issuance producing side. `pki.x509.sign` builds a `TBSCertificate`,
  *   signs it, and emits a `Certificate` (RFC 5280 sec. 4) that `pki.schema.x509.parse`,
  *   `pki.path.validate`, and OpenSSL all accept, self-signed or CA-signed, over any signature
@@ -52,6 +53,27 @@ var OID_SKI = O("subjectKeyIdentifier");
 
 // The recognized keys of the `extensions` spec object; an unknown key is a typo and throws at
 // config-time (a custom extension is passed as pre-encoded DER via the array form).
+// The three caller-owned objects pki.x509.sign reads, each with its own door. A key nothing here
+// names is a typo or a misplaced argument, and the failure it causes is invisible: the certificate
+// builds, signs, and simply does not carry what was asked for. `spec.extension` (one letter short
+// of `extensions`) emitted a certificate with NO extensions at all -- no basicConstraints on an
+// intended CA, no keyUsage on an intended constrained leaf. `spec.issuer` is the other shape: the
+// issuer is argument TWO, and nesting it in the spec left the certificate SELF-SIGNED with nothing
+// to read as a failure.
+//
+// Every table is derived from what the function actually reads, not from the doc block, because a
+// table naming a key nothing reads reopens the hole it was added to close.
+var KNOWN_SPEC_KEYS = {
+  subject: 1, subjectPublicKey: 1, notBefore: 1, notAfter: 1, serialNumber: 1, extensions: 1,
+};
+// The issuer names itself in one of two FORMS, and the cert form wins unconditionally: when
+// `issuer.cert` is present the builder takes the DN and the public key from it and never reads
+// `name` or `publicKey`. A union accepted `{ key, cert, name: "Different CA", publicKey }` and
+// signed under the certificate's identity while discarding the identity the caller wrote out.
+var KNOWN_ISSUER_CERT_KEYS = { key: 1, cert: 1 };
+var KNOWN_ISSUER_EXPLICIT_KEYS = { key: 1, name: 1, publicKey: 1 };
+var KNOWN_SIGN_OPTS = { digestAlgorithm: 1, pem: 1, pss: 1 };
+
 var KNOWN_EXT_KEYS = {
   subjectKeyIdentifier: 1, authorityKeyIdentifier: 1, keyUsage: 1, keyUsageCritical: 1,
   extendedKeyUsage: 1, extendedKeyUsageCritical: 1, basicConstraints: 1, subjectAltName: 1,
@@ -281,6 +303,22 @@ function _sign(spec, issuer, opts) {
   opts = opts || {};
   if (!spec || typeof spec !== "object" || Buffer.isBuffer(spec)) throw _err("x509/bad-input", "the certificate spec must be an object");
   issuer = issuer || {};
+  // Before a single field is read, so a misspelling is a refusal rather than an omission carried
+  // into a signed certificate. The issuer message names its own argument because the mistake this
+  // catches most often is putting the issuer inside the spec, where it self-signed in silence.
+  guard.identifier.assertKnownKeys(spec, KNOWN_SPEC_KEYS, _err, "x509/bad-input", function (k) {
+    return "unknown certificate spec field " + JSON.stringify(k) +
+      (k === "issuer" ? "; the issuer is the SECOND argument to pki.x509.sign, not a spec field" : "") +
+      (k === "extension" ? "; the extensions spec field is `extensions`" : "");
+  });
+  var byCert = issuer.cert != null;
+  guard.identifier.assertKnownKeys(issuer, byCert ? KNOWN_ISSUER_CERT_KEYS : KNOWN_ISSUER_EXPLICIT_KEYS,
+    _err, "x509/bad-input", function (k) {
+      return "unknown issuer field " + JSON.stringify(k) + " for the " + (byCert
+        ? "certificate form; issuer.cert supplies the name and the public key, so they are not read here"
+        : "explicit form; the issuer takes { key, name, publicKey }, or { key, cert } to take both from a certificate");
+    });
+  guard.identifier.assertKnownKeys(opts, KNOWN_SIGN_OPTS, _err, "x509/bad-input", "pki.x509.sign has an unknown option ");
   if (issuer.key == null) throw _err("x509/bad-input", "a signing key (issuer.key, a PKCS#8 private key) is required");
 
   var spki = _reqDer(spec.subjectPublicKey, "spec.subjectPublicKey (the SPKI DER of the certified key)");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.5.16",
+  "version": "0.5.18",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:4977fc76-9318-4187-883f-52d642638d7f",
+  "serialNumber": "urn:uuid:123ddb5e-05ea-4e65-9d7d-7a667c46e3a3",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-08-20T03:58:27.675Z",
+    "timestamp": "2026-08-20T20:31:47.390Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.5.16",
+      "bom-ref": "@blamejs/pki@0.5.18",
       "type": "application",
       "name": "pki",
-      "version": "0.5.16",
+      "version": "0.5.18",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.5.16",
+      "purl": "pkg:npm/%40blamejs/pki@0.5.18",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.5.16",
+      "ref": "@blamejs/pki@0.5.18",
       "dependsOn": []
     }
   ]