@blamejs/pki 0.6.34 → 0.6.36

package/CHANGELOG.md

@@ -4,6 +4,37 @@ All notable changes to `@blamejs/pki` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## v0.6.36 — 2026-09-04
+
+A natively signed C509 certificate is refused when it spells an algorithm generically instead of using the registry entry that names the same value.
+
+### Added
+
+- The subjectPublicKeyAlgorithm on a pki.schema.c509.parse result carries a parameters buffer when the certificate used a C509 registry integer, holding the parameters that entry names: the DER NULL for rsaEncryption and the namedCurve OID for an EC key. The generic OID forms already surfaced this field, so it is now present for every form that has parameters.
+
+### Fixed
+
+- pki.schema.c509.parse refuses a natively signed certificate (c509CertificateType 2) that writes an algorithm as an OID, or as an OID with parameters, when a C509 registry entry names that same value. Draft section 3.7 reserves the generic form for re-encoded certificates, where it stays accepted. An algorithm with no registry entry, and a registry OID whose parameters differ from the entry's, both keep the generic form.
+- pki.schema.c509.parse refuses an rsaEncryption subjectPublicKeyAlgorithm that does not carry the DER NULL parameters RFC 3279 section 2.3.1 requires, including the bare OID form that carries none. The type-3 reconstruction previously emitted the OID and a NULL regardless, so the rebuilt DER described an algorithm identifier the certificate had not encoded.
+- pki.schema.c509.encode writes an algorithm back as the form naming the same value. It previously chose the form by algorithm name alone, so re-encoding a certificate field by field could move an algorithm that carried no parameters onto a registry entry that names some, and could miss the entry for a key identified by its namedCurve parameters rather than by a curve name.
+- pki.schema.c509.encode refuses a serialNumber, RSA modulus or RSA exponent that is not a BigInt. A string was previously read as hexadecimal and truncated to an even number of digits, so a caller passing "abc" received a certificate carrying the serial 0xab, and a number was silently converted. A missing modulus or exponent reached the emitter as an untyped fault rather than a c509 error naming the field.
+- pki.schema.c509.encode reports every field it reads off a result as a typed c509 error naming that field. An extensions entry or an RDN that is not an object, an extension carrying neither an OID nor a registry name, an extension OID that is not a dotted-decimal string, and a keyUsageBits that is not a safe integer previously surfaced as a TypeError, a RangeError, or a fault from the OID or CBOR builders. An RDN value that is not a string is refused rather than converted, so a caller passing a number no longer receives a certificate naming its decimal spelling.
+- pki.schema.c509.encode refuses a sparse extensions or rdns array. Array iteration skips a hole, so such a list emitted fewer entries than it held without reporting anything.
+
+## v0.6.35 — 2026-09-04
+
+Three redundant C509 spellings are refused, so a certificate has one encoding and an issuer signature cannot cover two different C509 byte strings.
+
+### Fixed
+
+- pki.schema.c509.encode refuses a serialNumberHex that is not an even-length hexadecimal string instead of decoding a prefix of it. An odd-length or partly non-hexadecimal value previously became a different, valid serial number without any error, which the encoder's own re-parse could not catch. The check applies whether the result is re-emitted from its preserved field bytes or built field by field, so a caller is told the value is malformed rather than having it quietly ignored.
+
+### Security
+
+- pki.schema.c509.parse refuses an unsigned bignum whose first octet is 0x00, including a value that is only that octet, so every number has exactly one C509 encoding (draft sec. 3.1.2). A zero serial previously had two spellings that reconstructed byte-identical DER, letting one issuer signature cover two distinct C509 certificates. The rule covers the certificate serial number, the authorityKeyIdentifier serial, and the RSA modulus and exponent.
+- pki.schema.c509.parse refuses an RSA subjectPublicKey written as [modulus, 65537] instead of the bare modulus. Draft sec. 3.1.9 omits the array and the exponent when the exponent is 65537, so the array spelling of such a key is a second encoding of one certificate, reconstructing byte-identical DER. An RSA key with any other exponent still uses the array form.
+- pki.schema.c509.parse refuses a notAfter written as the epoch 253402300799 rather than the CBOR simple value null. Draft sec. 3.1.5 encodes the no-expiration time 99991231235959Z as null, so the explicit epoch is a second spelling that reconstructs the same GeneralizedTime and therefore the same DER. A notBefore is unaffected, and pki.schema.c509.encode refuses that Date on notAfter instead of emitting a form the decoder rejects.
+
 ## v0.6.34 — 2026-09-04
 
 An injected transport that does not return a promise is reported as a typed option error naming the option, in every client that accepts one.

package/lib/schema-c509.js

@@ -32,7 +32,22 @@ var b = asn1.build;
 var C = constants;
 var C509Error = frameworkError.C509Error;
 function _err(code, message, cause) { return new C509Error(code, message, cause); }
+/** @internal Name a caller-supplied value in a diagnostic without converting it: a Symbol has no
+ * string form and a BigInt has no JSON form, so formatting either one would throw from the message. */
+function _describe(v) {
+  if (v === null) return "null";
+  var t = typeof v;
+  if (t === "string") return JSON.stringify(v);
+  return t === "number" || t === "boolean" || t === "undefined" ? String(v) : t;
+}
+/** @internal A hole is skipped by forEach, so a sparse list would emit fewer items than it holds. */
+function _assertDense(list, code, label) {
+  for (var i = 0; i < list.length; i++) {
+    if (!(i in list)) throw _err(code, label + " must not be a sparse array; index " + i + " is a hole");
+  }
+}
 var MAX_EPOCH_SECONDS = 8640000000000n;
+var NO_EXPIRY_SECONDS = 253402300799n;
 
 function _name(n) { var d = oid.byName(n); if (!d) { throw new Error("schema-c509: unregistered OID name " + JSON.stringify(n)); } return n; }
 
@@ -142,14 +157,29 @@ function _biguint(node, code, label) {
   if (!node || node.majorType !== 2) throw _err(code, label + " must be an unwrapped CBOR byte string (~biguint)");
   var b = node.content;
   if (b.length > C.LIMITS.CBOR_MAX_BIGUINT_BYTES) throw _err(code, label + " exceeds the ~biguint byte cap");
-  if (b.length > 1 && b[0] === 0x00) throw _err("c509/non-minimal-serial", label + " has a redundant leading 0x00 (~biguint omits the sign octet)");
+  if (b.length > 0 && b[0] === 0x00) throw _err("c509/non-minimal-serial", label + " has a redundant leading 0x00 (~biguint omits the sign octet)");
   return b.length ? BigInt("0x" + b.toString("hex")) : 0n;
 }
 
+function _hexBytes(s, code, label) {
+  if (typeof s !== "string") throw _err(code, label + " must be a hexadecimal string");
+  if ((s.length % 2) !== 0) throw _err(code, label + " must have an even number of hexadecimal digits");
+  for (var i = 0; i < s.length; i++) {
+    var c = s.charCodeAt(i);
+    if (!((c >= 48 && c <= 57) || (c >= 97 && c <= 102) || (c >= 65 && c <= 70))) {
+      throw _err(code, label + " must be hexadecimal");
+    }
+  }
+  return Buffer.from(s, "hex");
+}
+
 function _time(node, allowNull, label) {
   if (allowNull && node.majorType === 7 && node.ai === 22) return null;
   if (node.majorType !== 0) throw _err("c509/bad-validity", label + " must be an unwrapped CBOR epoch integer (~time)");
   var secs = node.argument;
+  if (allowNull && secs === NO_EXPIRY_SECONDS) {
+    throw _err("c509/bad-validity", label + " of 99991231235959Z is encoded as the CBOR simple value null (draft sec. 3.1.5), not as the epoch " + NO_EXPIRY_SECONDS);
+  }
   if (secs > MAX_EPOCH_SECONDS) throw _err("c509/bad-validity", label + " is outside the representable Date range");
   return new Date(C.TIME.seconds(Number(secs)));
 }
@@ -162,19 +192,58 @@ function _oidName(node, code, label) {
   return { oid: dotted, name: oid.name(dotted) || dotted };
 }
 
-function _algorithm(node, byInt, code, label) {
+/**
+ * @internal Draft sec. 8.14 and 8.15 give each registry row a full DER AlgorithmIdentifier, so the
+ * row's parameters are part of the value it denotes: a signature row carries none, the rsaEncryption
+ * row carries NULL, and an ecPublicKey row carries its namedCurve.
+ */
+function _rowParameters(row) {
+  if (typeof row === "string") return null;
+  if (row.curve) return asn1.build.oid(oid.byName(row.curve));
+  return asn1.build.nullValue();
+}
+function _rowParametersMatch(row, params) {
+  if (row === undefined) return false;
+  var rowParams = _rowParameters(row);
+  return rowParams === null ? params === null : (params !== null && rowParams.equals(params));
+}
+function _specificInt(byInt, dotted, params, curve) {
+  var keys = Object.keys(byInt);
+  for (var i = 0; i < keys.length; i++) {
+    var row = byInt[keys[i]];
+    if (oid.byName(typeof row === "string" ? row : row.alg) !== dotted) continue;
+    var hit = params === null && curve ? (typeof row !== "string" && row.curve === curve)
+      : _rowParametersMatch(row, params);
+    if (hit) return Number(keys[i]);
+  }
+  return undefined;
+}
+function _hasSpecificForm(byInt, dotted, params) {
+  return _specificInt(byInt, dotted, params) !== undefined;
+}
+function _assertSpecificForm(byInt, dotted, params, isNative, label) {
+  if (!isNative || !_hasSpecificForm(byInt, dotted, params)) return;
+  throw _err("c509/non-specific-encoding", label + " has a C509 registry row, and a natively signed certificate uses only the specific CBOR encoding (draft sec. 3.7)");
+}
+
+function _algorithm(node, byInt, code, label, isNative) {
   if (node.majorType === 0 || node.majorType === 1) {
     var i = Number(cbor.read.int(node));
     var mapped = byInt[i];
     if (mapped === undefined) throw _err("c509/unknown-algorithm", label + " integer " + i + " has no C509 registry row");
     if (typeof mapped === "string") return { name: mapped, oid: oid.byName(mapped) };
-    return { name: mapped.alg, oid: oid.byName(mapped.alg), curve: mapped.curve || null };
+    return { name: mapped.alg, oid: oid.byName(mapped.alg), curve: mapped.curve || null, parameters: _rowParameters(mapped) };
+  }
+  if (node.majorType === 2) {
+    var r = _oidName(node, code, label);
+    _assertSpecificForm(byInt, r.oid, null, isNative, label);
+    return { name: r.name, oid: r.oid };
   }
-  if (node.majorType === 2) { var r = _oidName(node, code, label); return { name: r.name, oid: r.oid }; }
   if (node.majorType === 4 && node.children && node.children.length === 2) {
     var a = _oidName(node.children[0], code, label);
     if (node.children[1].majorType !== 2) throw _err(code, label + " algorithm parameters must be a CBOR byte string");
     if (node.children[1].content.length === 0) throw _err(code, label + " algorithm parameters must not be an empty byte string; omit them with the bare ~oid form (draft sec. 3.1.3)");
+    _assertSpecificForm(byInt, a.oid, node.children[1].content, isNative, label);
     return { name: a.name, oid: a.oid, parameters: node.children[1].content };
   }
   throw _err(code, label + " is not a C509 AlgorithmIdentifier (int / ~oid / [~oid, params])");
@@ -1404,6 +1473,10 @@ function _reconSpki(spkAlg, keyBytes, rsaKey) {
     return b.sequence([b.sequence([b.oid(oid.byName("ecPublicKey")), b.oid(oid.byName(spkAlg.curve))]), b.bitString(point, 0)]);
   }
   if (spkAlg.name === "rsaEncryption") {
+    /** @internal RFC 3279 sec. 2.3.1 fixes rsaEncryption parameters to the DER NULL. */
+    if (!spkAlg.parameters || !spkAlg.parameters.equals(b.nullValue())) {
+      throw _err("c509/bad-spki", "rsaEncryption parameters must be the DER NULL (RFC 3279 sec. 2.3.1); the bare ~oid form carries none");
+    }
     var rsaPk = b.sequence([b.integer(rsaKey.modulus), b.integer(rsaKey.exponent)]);
     return b.sequence([b.sequence([b.oid(oid.byName("rsaEncryption")), b.nullValue()]), b.bitString(rsaPk, 0)]);
   }
@@ -1507,7 +1580,7 @@ function parse(input) {
   var serial = _biguint(serialBytes, "c509/bad-serial", "certificateSerialNumber");
   var sHex = serialBytes.content.toString("hex");
 
-  var sigAlg = _algorithm(f[2], SIG_ALG_BY_INT, "c509/unknown-algorithm", "issuerSignatureAlgorithm");
+  var sigAlg = _algorithm(f[2], SIG_ALG_BY_INT, "c509/unknown-algorithm", "issuerSignatureAlgorithm", type === 2);
   var issuer = _name509(f[3], false, type === 2);
   var notBefore = _time(f[4], false, "validityNotBefore");
   var notAfter = _time(f[5], true, "validityNotAfter");
@@ -1515,12 +1588,13 @@ function parse(input) {
   if (issuer === null && (!subject || !subject.rdns || subject.rdns.length === 0)) {
     throw _err("c509/bad-name", "a self-signed C509 (issuer == subject) requires a non-empty subject, since it is also the issuer (RFC 5280 sec. 4.1.2.4)");
   }
-  var spkAlg = _algorithm(f[7], PK_ALG_BY_INT, "c509/unknown-algorithm", "subjectPublicKeyAlgorithm");
+  var spkAlg = _algorithm(f[7], PK_ALG_BY_INT, "c509/unknown-algorithm", "subjectPublicKeyAlgorithm", type === 2);
   var subjectPublicKey = null, rsaKey = null;
   if (spkAlg.name === "rsaEncryption") {
     if (f[8].majorType === 2) rsaKey = { modulus: _biguint(f[8], "c509/bad-spki", "RSA modulus"), exponent: 65537n };
     else if (f[8].majorType === 4 && f[8].children && f[8].children.length === 2) {
       rsaKey = { modulus: _biguint(f[8].children[0], "c509/bad-spki", "RSA modulus"), exponent: _biguint(f[8].children[1], "c509/bad-spki", "RSA exponent") };
+      if (rsaKey.exponent === 65537n) throw _err("c509/bad-spki", "an RSA subjectPublicKey with exponent 65537 omits the array and the exponent (sec. 3.1.9)");
     } else throw _err("c509/bad-spki", "an RSA subjectPublicKey must be a ~biguint modulus or [modulus, exponent]");
     if (rsaKey.modulus < 1n || rsaKey.exponent < 1n) throw _err("c509/bad-spki", "an RSA modulus and public exponent must be positive");
   } else {
@@ -1561,29 +1635,35 @@ function matches(node) {
 }
 
 
-var SIG_ALG_TO_INT = Object.assign(Object.create(null), { ecdsaWithSHA256: 0, ecdsaWithSHA384: 1, ecdsaWithSHA512: 2 });
-var PK_ALG_TO_INT = Object.assign(Object.create(null), { rsaEncryption: 0, "ecPublicKey|prime256v1": 1, "ecPublicKey|secp384r1": 2, "ecPublicKey|secp521r1": 3 });
 var ATTR_TO_INT = Object.create(null);
 Object.keys(ATTR_BY_INT).forEach(function (k) { ATTR_TO_INT[ATTR_BY_INT[k]] = Number(k); });
 var EXT_TO_INT = Object.create(null);
 Object.keys(EXT_BY_INT).forEach(function (k) { if (EXT_COMPACT[EXT_BY_INT[k]]) EXT_TO_INT[EXT_BY_INT[k]] = Number(k); });
 
 function _minBytes(n) {
+  if (typeof n !== "bigint") throw _err("c509/bad-serial", "a ~biguint value must be a BigInt, got " + _describe(n));
   if (n < 0n) throw _err("c509/bad-serial", "a ~biguint value must be non-negative");
   if (n === 0n) return Buffer.alloc(0);
   var hex = n.toString(16); if (hex.length % 2) hex = "0" + hex;
   return Buffer.from(hex, "hex");
 }
-function _encAlgorithm(alg, toInt, key) {
-  var i = toInt[key];
-  if (i !== undefined && !(alg.parameters && alg.parameters.length)) return cbor.build.int(BigInt(i));
-  var oidBytes = cbor.build.byteString(asn1.encodeOidContent(alg.oid));
-  if (alg.parameters && alg.parameters.length) return cbor.build.array([oidBytes, cbor.build.byteString(alg.parameters)]);
+function _encAlgorithm(alg, byInt) {
+  var dotted = alg.oid || oid.byName(alg.name);
+  if (!dotted) throw _err("c509/bad-input", "algorithm " + alg.name + " carries no OID and its name is not in the OID registry");
+  var supplied = alg.parameters && alg.parameters.length ? alg.parameters : null;
+  var i = _specificInt(byInt, dotted, supplied, alg.curve);
+  if (i !== undefined) return cbor.build.int(BigInt(i));
+  var oidBytes = cbor.build.byteString(asn1.encodeOidContent(dotted));
+  if (supplied !== null) return cbor.build.array([oidBytes, cbor.build.byteString(supplied)]);
   return oidBytes;
 }
 function _encSpecialText(rdn) {
-  if (rdn.eui64) return cbor.build.tag(48, cbor.build.byteString(rdn.eui64));
-  var v = String(rdn.value);
+  if (rdn.eui64 != null) {
+    if (!Buffer.isBuffer(rdn.eui64)) throw _err("c509/bad-name", "an RDN eui64 must be a Buffer, got " + _describe(rdn.eui64));
+    return cbor.build.tag(48, cbor.build.byteString(rdn.eui64));
+  }
+  if (typeof rdn.value !== "string") throw _err("c509/bad-name", "an RDN value must be a string, got " + _describe(rdn.value));
+  var v = rdn.value;
   if (v.length >= 2 && _isEvenHexLower(v)) return cbor.build.byteString(Buffer.from(v, "hex"));
   return cbor.build.textString(v);
 }
@@ -1593,11 +1673,15 @@ function _encName(name, isSubject) {
     throw _err("c509/bad-name", "the subject Name is required");
   }
   var rdns = name.rdns || [];
+  _assertDense(rdns, "c509/bad-name", "the rdns array");
+  rdns.forEach(function (rdn) {
+    if (!rdn || typeof rdn !== "object") throw _err("c509/bad-name", "each RDN must be an object, got " + _describe(rdn));
+  });
   if (rdns.length === 1 && rdns[0].type === "commonName" && !rdns[0].printable) return _encSpecialText(rdns[0]);
   var items = [];
   rdns.forEach(function (rdn) {
     var ai = ATTR_TO_INT[rdn.type];
-    if (ai === undefined) throw _err("c509/bad-name", "attribute type " + rdn.type + " has no C509 registry int");
+    if (ai === undefined) throw _err("c509/bad-name", "attribute type " + _describe(rdn.type) + " has no C509 registry int");
     items.push(cbor.build.int(BigInt(rdn.printable ? -ai : ai)));
     items.push(_encSpecialText(rdn));
   });
@@ -1613,6 +1697,18 @@ function _encSpk(r) {
   return cbor.build.byteString(r.subjectPublicKey);
 }
 function _encExtensions(exts) {
+  _assertDense(exts, "c509/bad-input", "the extensions array");
+  exts.forEach(function (ext) {
+    if (!ext || typeof ext !== "object") throw _err("c509/bad-input", "each extension must be an object, got " + _describe(ext));
+    if (ext.oid != null) {
+      if (typeof ext.oid !== "string") throw _err("c509/bad-input", "an extension oid must be a dotted-decimal string, got " + _describe(ext.oid));
+      try { asn1.encodeOidContent(ext.oid); }
+      catch (_oe) { throw _err("c509/bad-input", "an extension oid must be a dotted-decimal string, got " + _describe(ext.oid), _oe); }
+    }
+    if (ext.keyUsageBits != null && (typeof ext.keyUsageBits !== "number" || !Number.isSafeInteger(ext.keyUsageBits))) {
+      throw _err("c509/bad-extensions", "keyUsageBits must be a safe integer, got " + _describe(ext.keyUsageBits));
+    }
+  });
   if (exts.length === 1 && exts[0].name === "keyUsage" && typeof exts[0].keyUsageBits === "number") {
     return cbor.build.int(BigInt(exts[0].critical ? -exts[0].keyUsageBits : exts[0].keyUsageBits));
   }
@@ -1624,7 +1720,9 @@ function _encExtensions(exts) {
       items.push(cbor.build.int(BigInt(ext.critical ? -ei : ei)));
       items.push(compact);
     } else {
-      items.push(cbor.build.byteString(asn1.encodeOidContent(ext.oid || oid.byName(ext.name))));
+      var extDotted = ext.oid || (typeof ext.name === "string" ? oid.byName(ext.name) : null);
+      if (!extDotted) throw _err("c509/bad-input", "an extension must carry an OID or a name in the OID registry, got " + _describe(ext.name));
+      items.push(cbor.build.byteString(asn1.encodeOidContent(extDotted)));
       if (!Buffer.isBuffer(ext.value)) throw _err("c509/non-invertible", "extension " + (ext.oid || ext.name) + " has no byte-string value to encode");
       var bs = cbor.build.byteString(ext.value);
       items.push(ext.critical ? cbor.build.array([bs]) : bs);
@@ -1650,21 +1748,21 @@ function _validityUint(date, label) {
 function _encodeC509Array(r) {
   if (Buffer.isBuffer(r._fieldBytes)) {
     if (!Buffer.isBuffer(r.signatureValue)) throw _err("c509/bad-input", "a re-emitted certificate must carry a Buffer signatureValue");
+    if (r.serialNumberHex != null) _hexBytes(r.serialNumberHex, "c509/bad-serial", "serialNumberHex");
     var out = Buffer.concat([Buffer.from([0x8b]), r._fieldBytes, cbor.build.byteString(r.signatureValue)]);
     parse(out);
     return out;
   }
   _requireResultShape(r);
-  var pkKey = r.subjectPublicKeyAlgorithm.curve ? r.subjectPublicKeyAlgorithm.name + "|" + r.subjectPublicKeyAlgorithm.curve : r.subjectPublicKeyAlgorithm.name;
   var arr = cbor.build.array([
     cbor.build.int(BigInt(r.certificateType)),
-    cbor.build.byteString(r.serialNumberHex != null ? Buffer.from(r.serialNumberHex, "hex") : _minBytes(r.serialNumber)),
-    _encAlgorithm(r.signatureAlgorithm, SIG_ALG_TO_INT, r.signatureAlgorithm.name),
+    cbor.build.byteString(r.serialNumberHex != null ? _hexBytes(r.serialNumberHex, "c509/bad-serial", "serialNumberHex") : _minBytes(r.serialNumber)),
+    _encAlgorithm(r.signatureAlgorithm, SIG_ALG_BY_INT),
     _encName(r.issuer, false),
     _validityUint(r.validity.notBefore, "validityNotBefore"),
     r.validity.notAfter === null ? cbor.build.nullValue() : _validityUint(r.validity.notAfter, "validityNotAfter"),
     _encName(r.subject, true),
-    _encAlgorithm(r.subjectPublicKeyAlgorithm, PK_ALG_TO_INT, pkKey),
+    _encAlgorithm(r.subjectPublicKeyAlgorithm, PK_ALG_BY_INT),
     _encSpk(r),
     _encExtensions(r.extensions),
     cbor.build.byteString(r.signatureValue),
@@ -1753,7 +1851,7 @@ function _keyUsageBitsFromDer(extnValue) {
   }
   return _namedBitsFromContent(bs.bytes, bs.unusedBits);
 }
-var _NO_EXPIRY = Date.UTC(9999, 11, 31, 23, 59, 59);
+var _NO_EXPIRY = C.TIME.seconds(Number(NO_EXPIRY_SECONDS));
 var NODE_TO_WEBCRYPTO = Object.assign(Object.create(null), { "prime256v1": "P-256", "secp384r1": "P-384", "secp521r1": "P-521" });
 var WEBCRYPTO_FIELD_BYTES = Object.assign(Object.create(null), { "P-256": 32, "P-384": 48, "P-521": 66 });
 var SIG_ALG_TO_CURVE = Object.assign(Object.create(null), { "ecdsaWithSHA256": "P-256", "ecdsaWithSHA384": "P-384", "ecdsaWithSHA512": "P-521" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.6.34",
+  "version": "0.6.36",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:c595f123-cf34-46db-924e-ffa5c0c5018e",
+  "serialNumber": "urn:uuid:8d50e6dd-1ddf-46f8-b8db-ed97195096c3",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-09-04T22:46:35.510Z",
+    "timestamp": "2026-09-05T01:58:33.232Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.6.34",
+      "bom-ref": "@blamejs/pki@0.6.36",
       "type": "application",
       "name": "pki",
-      "version": "0.6.34",
+      "version": "0.6.36",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.6.34",
+      "purl": "pkg:npm/%40blamejs/pki@0.6.36",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.6.34",
+      "ref": "@blamejs/pki@0.6.36",
       "dependsOn": []
     }
   ]