@blamejs/pki 0.6.39 → 0.6.41

package/lib/cmp-session.js

@@ -30,13 +30,13 @@ var OID_IMPLICIT_CONFIRM = oid.byName("implicitConfirm");
 var _engine = null;
 function setEngine(engine) { _engine = engine; }
 
-var HASHLESS_SIG_OIDS = {};
+var HASHLESS_SIG_OIDS = Object.create(null);
 (function () {
   var names = ["Ed25519", "Ed448", "id-ml-dsa-44", "id-ml-dsa-65", "id-ml-dsa-87"];
   ["sha2", "shake"].forEach(function (h) { ["128s", "128f", "192s", "192f", "256s", "256f"].forEach(function (s) { names.push("id-slh-dsa-" + h + "-" + s); }); });
   names.forEach(function (n) { var o = oid.byName(n); if (o) HASHLESS_SIG_OIDS[o] = 1; });
 })();
-var SIG_OID_TO_HASH = {};
+var SIG_OID_TO_HASH = Object.create(null);
 [["sha256WithRSAEncryption", "SHA-256"], ["sha384WithRSAEncryption", "SHA-384"], ["sha512WithRSAEncryption", "SHA-512"],
   ["ecdsaWithSHA256", "SHA-256"], ["ecdsaWithSHA384", "SHA-384"], ["ecdsaWithSHA512", "SHA-512"]].forEach(function (row) {
   var o = oid.byName(row[0]); if (o) SIG_OID_TO_HASH[o] = row[1];
@@ -46,24 +46,24 @@ var OID_RSA_ENCRYPTION = oid.byName("rsaEncryption");
 var OID_IDP = oid.byName("issuingDistributionPoint");
 var OID_BASIC_CONSTRAINTS = oid.byName("basicConstraints");
 var OID_KEY_USAGE = oid.byName("keyUsage");
-var HASH_OID_TO_DIGEST = {};
+var HASH_OID_TO_DIGEST = Object.create(null);
 [["sha256", "SHA-256"], ["sha384", "SHA-384"], ["sha512", "SHA-512"]].forEach(function (row) { var o = oid.byName(row[0]); if (o) HASH_OID_TO_DIGEST[o] = row[1]; });
-var COMPOSITE_PH_HASHALG = { "SHA-256": "sha256", "SHA-384": "sha384", "SHA-512": "sha512" };
+var COMPOSITE_PH_HASHALG = Object.assign(Object.create(null), { "SHA-256": "sha256", "SHA-384": "sha384", "SHA-512": "sha512" });
 
-var KNOWN_SESSION_OPTS = {
+var KNOWN_SESSION_OPTS = Object.assign(Object.create(null), {
   url: 1, key: 1, cert: 1, mac: 1, trustAnchors: 1, intermediates: 1, recipient: 1, sender: 1,
   extraCerts: 1, implicitConfirm: 1, maxPolls: 1, maxTotalWait: 1, sleep: 1, time: 1,
   transport: 1, tls: 1, headers: 1, timeout: 1, maxResponseBytes: 1, proxy: 1, pss: 1, digestAlgorithm: 1,
   acceptCert: 1, senderKID: 1, recipKID: 1, expectedSender: 1,
-};
+});
 
 var TRANSCRIPT_RETAIN_RESPONSES = 2;
 var DEFAULT_MAX_POLLS = 20;
 var DEFAULT_MAX_TOTAL_WAIT = retryAfter.MAX_RETRY_AFTER_SECONDS;
 var DEFAULT_CERT_REQ_ID = 0;
 var P10CR_CERT_REQ_ID = -1;
-var ENROLL_ARMS = { ir: 1, cr: 1, kur: 1, p10cr: 1 };
-var RESPONSE_ARM = { ir: "ip", cr: "cp", kur: "kup", p10cr: "cp", rr: "rp", genm: "genp" };
+var ENROLL_ARMS = Object.assign(Object.create(null), { ir: 1, cr: 1, kur: 1, p10cr: 1 });
+var RESPONSE_ARM = Object.assign(Object.create(null), { ir: "ip", cr: "cp", kur: "kup", p10cr: "cp", rr: "rp", genm: "genp" });
 var WHOLE_MESSAGE_CERT_REQ_ID = -1;
 
 var INFO_OPS = Object.assign(Object.create(null), {
@@ -72,7 +72,7 @@ var INFO_OPS = Object.assign(Object.create(null), {
   certReqTemplate: { name: "certReqTemplate", requestOid: "certReqTemplate", responseOid: "certReqTemplate", value: false, read: "readCertReqTemplate" },
   crlUpdate: { name: "crlUpdate", requestOid: "crlStatusList", responseOid: "crls", value: "crlStatus", read: "readCrls" },
 });
-var KNOWN_REVOKE_KEYS = { certificate: 1, certDetails: 1, reason: 1 };
+var KNOWN_REVOKE_KEYS = Object.assign(Object.create(null), { certificate: 1, certDetails: 1, reason: 1 });
 var RSA_ARCS = ["rsaEncryption", "rsaSignatureWithripemd160", "id-TA-RSA-v1-5-SHA-256",
   "sigS-ISO9796-1-DFUE", "sigS-ISO9796-2Withrsa", "sigS-ISO9796-2rndWithrsa"].map(function (n) {
   return oid.toArcs(oid.byName(n)).slice(0, -1);
@@ -97,7 +97,7 @@ var CRL_REASON_NAMES = Object.create(null);
 Object.keys(constants.NAMES.CRL_REASON).forEach(function (v) { CRL_REASON_NAMES[constants.NAMES.CRL_REASON[v]] = 1; });
 
 function _isGranted(code) { return code === 0 || code === 1; }
-var PKI_STATUS_NAMES = { 0: "accepted", 1: "grantedWithMods", 2: "rejection", 3: "waiting" };
+var PKI_STATUS_NAMES = Object.assign(Object.create(null), { 0: "accepted", 1: "grantedWithMods", 2: "rejection", 3: "waiting" });
 
 function _certReqIdEq(a, b) { return a != null && b != null && BigInt(a) === BigInt(b); }
 
@@ -308,6 +308,11 @@ function session(opts) {
   guard.identifier.assertPlainRecord(opts, _err, "cmp/bad-input", "opts");
   guard.identifier.optionsObject(opts, _err, "cmp/bad-input", "opts");
   guard.identifier.assertKnownKeys(opts, KNOWN_SESSION_OPTS, _err, "cmp/bad-input", "unknown session opts field ");
+  /** @internal Taken from the caller's object, before the copy below keeps own properties only. A
+   * defaults bag carries its options on a prototype, so checking the copy would find no transport,
+   * drop the one the caller supplied, and send the session to the default client instead. */
+  var _transport = guard.identifier.assertCallableOption(opts, "transport", _err, "cmp/bad-input",
+    "opts.transport", "(url, reqDer, opts) => Promise<{ responseBytes, status }>");
   opts = Object.assign({}, opts);
   if (typeof opts.url !== "string" || !opts.url) throw _err("cmp/bad-input", "opts.url (the CMP endpoint) is required");
 
@@ -349,7 +354,6 @@ function session(opts) {
   if (opts.acceptCert != null && typeof opts.acceptCert !== "function") throw _err("cmp/bad-input", "opts.acceptCert must be a function (certDer, info) => boolean");
   if (opts.implicitConfirm != null && typeof opts.implicitConfirm !== "boolean") throw _err("cmp/bad-input", "opts.implicitConfirm must be a boolean");
   if (opts.sleep != null && typeof opts.sleep !== "function") throw _err("cmp/bad-input", "opts.sleep must be a function (delayMs) => Promise");
-  if (opts.transport != null && typeof opts.transport !== "function") throw _err("cmp/bad-input", "opts.transport must be a function (url, reqDer, opts) => Promise<{ responseBytes, status }>");
   if (opts.acceptCert != null && opts.implicitConfirm) throw _err("cmp/bad-input", "opts.acceptCert cannot be combined with opts.implicitConfirm -- implicit confirmation leaves no certConf leg to reject on (drop implicitConfirm to vet a grant)");
 
   if (opts.time != null) guard.time.assertValid(opts.time, _err, "cmp/bad-input", "opts.time (the verify/validation clock)");
@@ -413,7 +417,7 @@ function session(opts) {
     return o;
   }
   function _verifyOpts(fresh, signerCertOverride, extraIntermediates, responseExtra) {
-    var o = { transactionID: transactionID, expectRecipNonce: fresh };
+    var o = Object.assign(Object.create(null), { transactionID: transactionID, expectRecipNonce: fresh });
     if (isMac) o.sharedSecret = opts.mac.secret;
     else if (opts.trustAnchors != null) o.trustAnchors = opts.trustAnchors;
     var issuers = Array.isArray(responseExtra) ? responseExtra : [];
@@ -430,8 +434,9 @@ function session(opts) {
     return o;
   }
   function _transferOpts() {
-    var o = {};
-    ["transport", "tls", "headers", "timeout", "maxResponseBytes"].forEach(function (k) { if (opts[k] != null) o[k] = opts[k]; });
+    var o = Object.create(null);
+    ["tls", "headers", "timeout", "maxResponseBytes"].forEach(function (k) { if (opts[k] != null) o[k] = opts[k]; });
+    if (_transport !== undefined) o.transport = _transport;
     if (_proxySnap != null) o.proxy = _proxySnap;
     return o;
   }
@@ -443,12 +448,12 @@ function session(opts) {
     _recordTranscript({ direction: "out", arm: arm, bytes: reqDer });
     var engaged = false;
     var topts = _transferOpts();
-    if (opts.transport != null) topts.transport = function (a) { engaged = true; return opts.transport(a); };
+    if (_transport !== undefined) topts.transport = function (a) { engaged = true; return _transport(a); };
     var res;
     try {
       res = await cmp.transfer(opts.url, reqDer, topts);
     } catch (e) {
-      var reached = opts.transport != null
+      var reached = _transport !== undefined
         ? engaged
         : !(e && (e.code === "cmp/bad-url" || e.code === "cmp/no-trust-anchors" || e.code === "cmp/bad-input"));
       if (reached) started = true;
@@ -507,7 +512,7 @@ function session(opts) {
         if (!Buffer.isBuffer(c)) return;
         var k = c.toString("base64");
         if (caPubsSeen[k]) {
-          if (isGrantLeg) { for (var pi = 0; pi < caPubsAccum.length; pi++) { if (caPubsAccum[pi].toString("base64") === k) { caPubsAccum.push(caPubsAccum.splice(pi, 1)[0]); if (pi < caPubsWaitingCount) caPubsWaitingCount--; break; } } }
+          if (isGrantLeg) { for (var pi = 0; pi < caPubsAccum.length; pi++) { if (caPubsAccum[pi].toString("base64") === k) { guard.list.append(caPubsAccum, caPubsAccum.splice(pi, 1)[0]); if (pi < caPubsWaitingCount) caPubsWaitingCount--; break; } } }
           return;
         }
         try { x509.parse(c); } catch (e) { throw _err("cmp/bad-cert-response", "an authenticated caPubs entry is not a valid X.509 certificate", e); }
@@ -522,7 +527,7 @@ function session(opts) {
         if (caPubsAccum.length >= CAPUBS_MAX || caPubsBytes + c.length > caPubsByteBudget) return;
         caPubsSeen[k] = 1;
         caPubsBytes += c.length;
-        caPubsAccum.push(Buffer.from(c));
+        guard.list.append(caPubsAccum, Buffer.from(c));
         if (!isGrantLeg) caPubsWaitingCount++;
       });
       if (isGrantLeg) return { state: "granted", resp: resp, code: code };
@@ -592,7 +597,7 @@ function session(opts) {
     var len = Buffer.isBuffer(entry.bytes) ? entry.bytes.length : 0;
     var over = transcriptBytes + len > transcriptCap;
     if (!over) transcriptBytes += len;
-    transcript.push(over
+    guard.list.append(transcript, over
       ? guard.verdict.of(entry, { byteLength: len, bytes: null, truncated: true })
       : guard.verdict.of(entry));
   }
@@ -703,7 +708,7 @@ function session(opts) {
       var k = _certIdentity(c);
       if (k != null && seenChain[k]) return;
       if (k != null) seenChain[k] = 1;
-      chain.push(c);
+      guard.list.append(chain, c);
     });
     await _validateLeaf(leaf, caPubsAccum);
     var info = { status: PKI_STATUS_NAMES[granted.code] || granted.code, grantedWithMods: granted.code === 1 };

package/lib/cmp-verify.js

@@ -6,7 +6,7 @@
 
 var intrinsic = require("./guard-intrinsic");
 var _sizeOf = intrinsic.sizeOf;
-var util = { types: intrinsic.types };
+var util = intrinsic.assign(intrinsic.create(null), { types: intrinsic.types });
 var _isBuffer = intrinsic.isBuffer;
 var _bufferFrom = intrinsic.bufferFrom;
 var _fromCharCode = intrinsic.fromCharCode;
@@ -49,10 +49,10 @@ var NS = pkix.makeNS("cmp", CmpError, oid);
 var PBMAC1_PARAMS = pkix.pbmac1Params(NS);
 var _certExtDecoders = pkix.certExtensionDecoders(NS).byOid;
 
-var KNOWN_VERIFY_OPTS = {
+var KNOWN_VERIFY_OPTS = intrinsic.assign(intrinsic.create(null), {
   sharedSecret: 1, signerCert: 1, trustAnchors: 1, intermediates: 1, time: 1,
   transactionID: 1, expectRecipNonce: 1, revocationChecker: 1, maxIterations: 1,
-};
+});
 
 var PRF_HASH = _create(null);
 PRF_HASH[oid.byName("hmacWithSHA256")] = "SHA-256";
@@ -65,7 +65,7 @@ var PBMAC1_MIN_SALT = 8;
 var PBMAC1_MAX_SALT = constants.LIMITS.PBKDF2_MAX_SALT;
 var PBMAC1_KEYLEN_MIN = 20;
 var PBMAC1_KEYLEN_MAX = 1024;
-var PRF_HLEN = { "SHA-256": 32, "SHA-384": 48, "SHA-512": 64 };
+var PRF_HLEN = intrinsic.assign(intrinsic.create(null), { "SHA-256": 32, "SHA-384": 48, "SHA-512": 64 });
 
 var UNSUPPORTED_MAC_OIDS = _create(null);
 ["passwordBasedMac", "dhBasedMac", "kemBasedMac"].forEach(function (n) {
@@ -77,7 +77,7 @@ var _engine = null;
 function setEngine(engine) { _engine = engine; }
 
 function _verdict(m, type, protectionAlg, valid, trusted, code, reason, signer) {
-  var v = {
+  return guard.verdict.of({
     valid: valid,
     trusted: trusted,
     protectionType: type,
@@ -88,9 +88,7 @@ function _verdict(m, type, protectionAlg, valid, trusted, code, reason, signer)
     recipNonce: m.header.recipNonce || null,
     header: m.header,
     body: m.body,
-  };
-  if (code) { v.code = code; v.reason = reason; }
-  return v;
+  }, code ? { code: code, reason: reason } : null);
 }
 function _ok(m, type, alg, trusted, signer) { return _verdict(m, type, alg, true, trusted, null, null, signer); }
 function _fail(m, type, alg, code, reason, signer) { return _verdict(m, type, alg, false, false, code, reason, signer || null); }
@@ -438,7 +436,7 @@ async function _verifySignature(m, protectedPart, protectionAlg, protection, opt
 
   if (opts.trustAnchors == null) return _ok(m, "signature", protectionAlg, false, signer);
   var trust = await _chainSigner(signer, m, opts, extra);
-  if (trust.chain) signer.chain = trust.chain;
+  if (trust.chain) guard.verdict.set(signer, "chain", trust.chain);
   return _verdict(m, "signature", protectionAlg, true, trust.trusted, trust.trusted ? null : "cmp/untrusted-signer", trust.reason, signer);
 }
 
@@ -521,9 +519,7 @@ function _boundExtraCerts(extra) {
 
 var _defineOwn = Object.defineProperty;
 var _Date = Date;
-function _append(arr, v) {
-  _defineOwn(arr, arr.length, { value: v, writable: true, enumerable: true, configurable: true });
-}
+var _append = guard.list.append;
 
 function _certList(v) {
   if (v == null) return [];

package/lib/cms-decrypt.js

@@ -160,7 +160,7 @@ function _kekIdMatches(ri, kekId) {
   return Buffer.compare(id, guard.bytes.view(kekId, CmsError, "cms/bad-input", "kekId")) === 0;
 }
 
-var _passThrough = { "cms/unsupported-algorithm": 1, "cms/unsupported-recipient-type": 1, "cms/bad-input": 1, "cms/iteration-limit": 1, "cms/missing-key-derivation": 1, "cms/no-encrypted-content": 1 };
+var _passThrough = intrinsic.assign(intrinsic.create(null), { "cms/unsupported-algorithm": 1, "cms/unsupported-recipient-type": 1, "cms/bad-input": 1, "cms/iteration-limit": 1, "cms/missing-key-derivation": 1, "cms/no-encrypted-content": 1 });
 
 async function _acquireCek(ri, km, opts) {
   try {
@@ -478,10 +478,10 @@ function _oaepHashFromParams(paramsBytes) {
   if (label != null && label.length > 0) throw _err("cms/unsupported-algorithm", "a non-empty OAEP label is not supported");
   return hashName;
 }
-var HASH_W3C = {}; HASH_W3C[O("sha1")] = "SHA-1"; HASH_W3C[O("sha256")] = "SHA-256"; HASH_W3C[O("sha384")] = "SHA-384"; HASH_W3C[O("sha512")] = "SHA-512";
+var HASH_W3C = intrinsic.create(null); HASH_W3C[O("sha1")] = "SHA-1"; HASH_W3C[O("sha256")] = "SHA-256"; HASH_W3C[O("sha384")] = "SHA-384"; HASH_W3C[O("sha512")] = "SHA-512";
 function _hashW3c(o) { if (!HASH_W3C[o]) throw _err("cms/unsupported-algorithm", "unsupported OAEP hash " + o); return HASH_W3C[o]; }
 
-var X963_HASH = {};
+var X963_HASH = intrinsic.create(null);
 [["dhSinglePass-stdDH-sha1kdf-scheme", "SHA-1"], ["dhSinglePass-stdDH-sha224kdf-scheme", "SHA-224"], ["dhSinglePass-stdDH-sha256kdf-scheme", "SHA-256"], ["dhSinglePass-stdDH-sha384kdf-scheme", "SHA-384"], ["dhSinglePass-stdDH-sha512kdf-scheme", "SHA-512"],
  ["dhSinglePass-cofactorDH-sha1kdf-scheme", "SHA-1"], ["dhSinglePass-cofactorDH-sha224kdf-scheme", "SHA-224"], ["dhSinglePass-cofactorDH-sha256kdf-scheme", "SHA-256"], ["dhSinglePass-cofactorDH-sha384kdf-scheme", "SHA-384"], ["dhSinglePass-cofactorDH-sha512kdf-scheme", "SHA-512"]
 ].forEach(function (r) { X963_HASH[O(r[0])] = r[1]; });
@@ -498,10 +498,10 @@ function _originatorSpki(originator) {
   if (v.algorithm.parameters != null) algKids.push(b.raw(v.algorithm.parameters));
   return b.sequence([b.sequence(algKids), b.bitString(v.publicKey.bytes, v.publicKey.unusedBits)]);
 }
-var MONT = {}; MONT[O("X25519")] = { name: "X25519", hkdf: "SHA-256" }; MONT[O("X448")] = { name: "X448", hkdf: "SHA-512" };
+var MONT = intrinsic.create(null); MONT[O("X25519")] = { name: "X25519", hkdf: "SHA-256" }; MONT[O("X448")] = { name: "X448", hkdf: "SHA-512" };
 function _isMont(spki) { var o = asn1.read.oid(asn1.decode(spki).children[0].children[0]); return !!MONT[o]; }
 function _montName(spki) { return MONT[asn1.read.oid(asn1.decode(spki).children[0].children[0])]; }
-var CURVE = {}; CURVE[O("prime256v1")] = { curve: "P-256" }; CURVE[O("secp384r1")] = { curve: "P-384" }; CURVE[O("secp521r1")] = { curve: "P-521" };
+var CURVE = intrinsic.create(null); CURVE[O("prime256v1")] = { curve: "P-256" }; CURVE[O("secp384r1")] = { curve: "P-384" }; CURVE[O("secp521r1")] = { curve: "P-521" };
 function _ecCurveFromCert(cert) {
   var spki = x509.parse(_normCertDer(cert)).subjectPublicKeyInfo;
   if (spki.algorithm.oid !== O("ecPublicKey") || spki.algorithm.parameters == null) return null;
@@ -512,7 +512,7 @@ function _withEcCurveParams(spki, curveOid) {
   var alg = node.children[0];
   return b.sequence([b.sequence([b.raw(alg.children[0].bytes), b.oid(curveOid)]), b.raw(node.children[1].bytes)]);
 }
-var MLKEM = {}; MLKEM[O("id-ml-kem-512")] = "ML-KEM-512"; MLKEM[O("id-ml-kem-768")] = "ML-KEM-768"; MLKEM[O("id-ml-kem-1024")] = "ML-KEM-1024";
+var MLKEM = intrinsic.create(null); MLKEM[O("id-ml-kem-512")] = "ML-KEM-512"; MLKEM[O("id-ml-kem-768")] = "ML-KEM-768"; MLKEM[O("id-ml-kem-1024")] = "ML-KEM-1024";
 function _mlkemName(o) { return MLKEM[o]; }
 
 function _explicitSetOf(implicitBytes) {
@@ -521,8 +521,8 @@ function _explicitSetOf(implicitBytes) {
   return out;
 }
 
-var MAC_HASH = { hmacWithSHA256: "SHA-256", hmacWithSHA384: "SHA-384", hmacWithSHA512: "SHA-512" };
-var DIGEST_WC = { sha256: "SHA-256", sha384: "SHA-384", sha512: "SHA-512" };
+var MAC_HASH = intrinsic.assign(intrinsic.create(null), { hmacWithSHA256: "SHA-256", hmacWithSHA384: "SHA-384", hmacWithSHA512: "SHA-512" });
+var DIGEST_WC = intrinsic.assign(intrinsic.create(null), { sha256: "SHA-256", sha384: "SHA-384", sha512: "SHA-512" });
 var MAC_KEY_MIN_OCTETS = 16;
 function _isDerNull(p) { return Buffer.isBuffer(p) && p.length === 2 && p[0] === 0x05 && p[1] === 0x00; }
 

package/lib/cms-encrypt.js

@@ -100,11 +100,11 @@ async function _buildKtri(cek, cert, opts) {
   return { tag: null, _riVersion: rid.riVersion, node: b.sequence([b.integer(BigInt(rid.riVersion)), rid.node, keyEncAlg, b.octetString(encryptedKey)]) };
 }
 
-var EC_KA = {};
+var EC_KA = intrinsic.create(null);
 EC_KA[O("prime256v1")] = { curve: "P-256", hash: "SHA-256", scheme: "dhSinglePass-stdDH-sha256kdf-scheme" };
 EC_KA[O("secp384r1")] = { curve: "P-384", hash: "SHA-384", scheme: "dhSinglePass-stdDH-sha384kdf-scheme" };
 EC_KA[O("secp521r1")] = { curve: "P-521", hash: "SHA-512", scheme: "dhSinglePass-stdDH-sha512kdf-scheme" };
-var MONT_KA = {};
+var MONT_KA = intrinsic.create(null);
 MONT_KA[O("X25519")] = { name: "X25519", hkdf: "SHA-256", scheme: "dhSinglePass-stdDH-hkdf-sha256-scheme" };
 MONT_KA[O("X448")] = { name: "X448", hkdf: "SHA-512", scheme: "dhSinglePass-stdDH-hkdf-sha512-scheme" };
 
@@ -202,11 +202,11 @@ async function _buildPwri(cek, desc) {
   }
 }
 
-var KEM_WRAP = {};
+var KEM_WRAP = intrinsic.create(null);
 KEM_WRAP[O("id-ml-kem-512")] = "aes128-wrap";
 KEM_WRAP[O("id-ml-kem-768")] = "aes256-wrap";
 KEM_WRAP[O("id-ml-kem-1024")] = "aes256-wrap";
-var KEM_WC = {}; KEM_WC[O("id-ml-kem-512")] = "ML-KEM-512"; KEM_WC[O("id-ml-kem-768")] = "ML-KEM-768"; KEM_WC[O("id-ml-kem-1024")] = "ML-KEM-1024";
+var KEM_WC = intrinsic.create(null); KEM_WC[O("id-ml-kem-512")] = "ML-KEM-512"; KEM_WC[O("id-ml-kem-768")] = "ML-KEM-768"; KEM_WC[O("id-ml-kem-1024")] = "ML-KEM-1024";
 
 function _kemOtherInfo(wrapName, kekBytes, ukm) {
   var kids = [_algId(wrapName, "absent"), b.integer(BigInt(kekBytes))];
@@ -285,10 +285,10 @@ function _pwriWrapIv(kek, cek, iv) {
 var PRF_HASH = intrinsic.assign(intrinsic.create(null), { hmacWithSHA1: "SHA-1", hmacWithSHA256: "SHA-256", hmacWithSHA384: "SHA-384", hmacWithSHA512: "SHA-512" });
 function _prfHash(prf) { if (!PRF_HASH[guard.text.keyOf(prf)]) throw _err("cms/bad-input", "unsupported pwri prf " + guard.text.showValue(prf)); return PRF_HASH[guard.text.keyOf(prf)]; }
 
-var _PWRI_KEYS = { password: 1, iterations: 1, prf: 1, salt: 1 };
-var _KEKRI_KEYS = { kek: 1, kekId: 1 };
-var _KTRI_RECIPIENT_KEYS = { cert: 1, oaepHash: 1, keyIdentifier: 1 };
-var _AGREE_RECIPIENT_KEYS = { cert: 1, keyIdentifier: 1, ukm: 1 };
+var _PWRI_KEYS = intrinsic.assign(intrinsic.create(null), { password: 1, iterations: 1, prf: 1, salt: 1 });
+var _KEKRI_KEYS = intrinsic.assign(intrinsic.create(null), { kek: 1, kekId: 1 });
+var _KTRI_RECIPIENT_KEYS = intrinsic.assign(intrinsic.create(null), { cert: 1, oaepHash: 1, keyIdentifier: 1 });
+var _AGREE_RECIPIENT_KEYS = intrinsic.assign(intrinsic.create(null), { cert: 1, keyIdentifier: 1, ukm: 1 });
 
 var _RECIPIENT_DEFAULTS = ["oaepHash", "keyIdentifier", "ukm"];
 
@@ -358,21 +358,21 @@ function _envelopedVersion(recips, hasUnprotected) {
   return forcesTwo ? 2 : 0;
 }
 
-var _ENCRYPT_OPTS_AEAD = {
+var _ENCRYPT_OPTS_AEAD = intrinsic.assign(intrinsic.create(null), {
   contentEncryptionAlgorithm: 1, contentType: 1, authAttrs: 1, oaepHash: 1, keyIdentifier: 1,
   ukm: 1, pem: 1,
-};
-var _ENCRYPT_OPTS_CBC = {
+});
+var _ENCRYPT_OPTS_CBC = intrinsic.assign(intrinsic.create(null), {
   contentEncryptionAlgorithm: 1, contentType: 1, oaepHash: 1, keyIdentifier: 1, ukm: 1, pem: 1,
-};
-var _AUTHENTICATE_OPTS_ATTRS = {
+});
+var _AUTHENTICATE_OPTS_ATTRS = intrinsic.assign(intrinsic.create(null), {
   macAlgorithm: 1, digestAlgorithm: 1, authenticatedAttributes: 1, authAttrs: 1, contentType: 1,
   keyIdentifier: 1, oaepHash: 1, ukm: 1, pem: 1,
-};
-var _AUTHENTICATE_OPTS_BARE = {
+});
+var _AUTHENTICATE_OPTS_BARE = intrinsic.assign(intrinsic.create(null), {
   macAlgorithm: 1, authenticatedAttributes: 1, contentType: 1,
   keyIdentifier: 1, oaepHash: 1, ukm: 1, pem: 1,
-};
+});
 
 function encrypt(content, recipients, opts) {
   return guard.bytes.fixedCall(CmsError, "cms/bad-input", [
@@ -404,7 +404,7 @@ async function _encryptImpl(content, recipients, opts) {
 
     if (!recipients.length) throw _err("cms/bad-input", "at least one recipient is required (RFC 5652 sec. 6.1)");
     var recips = [];
-    var consumed = {};
+    var consumed = intrinsic.create(null);
     for (var i = 0; i < recipients.length; i++) recips.push(await _buildRecipient(cek, recipients[i], opts, consumed));
     _assertDefaultsConsumed(opts, consumed);
     var riNodes = recips.map(_taggedRecipient);
@@ -440,7 +440,7 @@ async function _envelopedData(contentBytes, contentStream, cek, ca, contentType,
 
 function _assertAuthAttrs(pairs, forbidden) {
   var dense = pkiBuild.reqDenseArray(pairs, "authAttrs", _err, "cms/bad-input");
-  var seenTypes = {};
+  var seenTypes = intrinsic.create(null);
   dense.forEach(function (p) {
     var node;
     try { node = asn1.decode(p); } catch (e) { throw _err("cms/bad-input", "an authenticated attribute is not well-formed DER", e); }
@@ -458,10 +458,10 @@ function _assertAuthAttrs(pairs, forbidden) {
   return dense;
 }
 
-var AUTH_ENVELOPED_FORBIDDEN = {
+var AUTH_ENVELOPED_FORBIDDEN = intrinsic.assign(intrinsic.create(null), {
   oid: O("messageDigest"),
   why: "authAttrs must not carry the message-digest attribute in an AuthEnvelopedData: its value is the unencrypted hash of the plaintext, which enables content tracking and confirmation of a guessed plaintext (RFC 5083 sec. 2.1, sec. 5)",
-};
+});
 
 async function _authEnvelopedData(contentBytes, contentStream, cek, ca, contentType, opts, riNodes, recips) {
   var nonce = nodeCrypto.randomBytes(12);
@@ -489,8 +489,8 @@ async function _authEnvelopedData(contentBytes, contentStream, cek, ca, contentT
   return b.sequence(kids);
 }
 
-var _ENCRYPTED_DATA_CEK_KEYS = { cek: 1 };
-var _ENCRYPTED_DATA_PW_KEYS = { password: 1, iterations: 1, salt: 1, prf: 1 };
+var _ENCRYPTED_DATA_CEK_KEYS = intrinsic.assign(intrinsic.create(null), { cek: 1 });
+var _ENCRYPTED_DATA_PW_KEYS = intrinsic.assign(intrinsic.create(null), { password: 1, iterations: 1, salt: 1, prf: 1 });
 
 async function _encryptedData(contentBytes, contentStream, desc, ca, contentType, opts, cek) {
   if (ca.aead) throw _err("cms/bad-input", "EncryptedData supports only CBC content encryption");

package/lib/cms-sign.js

@@ -25,26 +25,26 @@ function _err(code, message, cause) { return new CmsError(code, message, cause);
 function _signE(kind, message, cause) { return new CmsError("cms/" + kind, message, cause); }
 function O(name) { return oid.byName(name); }
 
-var KNOWN_SIGN_OPTS = {
+var KNOWN_SIGN_OPTS = intrinsic.assign(intrinsic.create(null), {
   signedAttributes: 1, signingTime: 1, additionalSignedAttributes: 1, unsignedAttributes: 1,
   sid: 1, eContentType: 1, detached: 1, certificates: 1, pem: 1,
-};
-var KNOWN_SIGNER_CERT_KEYS = { cert: 1, key: 1, pss: 1, digestAlgorithm: 1, combinedRsaSig: 1 };
-var KNOWN_SIGNER_KEY_ONLY_KEYS = { spki: 1, keyIdentifier: 1, key: 1, pss: 1, digestAlgorithm: 1, combinedRsaSig: 1 };
-var KNOWN_COUNTERSIGN_OPTS = {
+});
+var KNOWN_SIGNER_CERT_KEYS = intrinsic.assign(intrinsic.create(null), { cert: 1, key: 1, pss: 1, digestAlgorithm: 1, combinedRsaSig: 1 });
+var KNOWN_SIGNER_KEY_ONLY_KEYS = intrinsic.assign(intrinsic.create(null), { spki: 1, keyIdentifier: 1, key: 1, pss: 1, digestAlgorithm: 1, combinedRsaSig: 1 });
+var KNOWN_COUNTERSIGN_OPTS = intrinsic.assign(intrinsic.create(null), {
   signerIndex: 1, countersignatureOf: 1, signingTime: 1, certificates: 1, pem: 1,
   signedAttributes: 1, additionalSignedAttributes: 1, sid: 1,
-};
+});
 var NS = pkix.makeNS("cms", CmsError, oid);
 var _b = pkiBuild.makeBuilder({
   ErrorClass: CmsError, prefix: "cms", O: O, NS: NS,
   NAME_SCHEMA: pkix.name(NS), SPKI_SCHEMA: pkix.spki(NS), EXT_DECODERS: {},
 });
 
-var DIGEST_HASH = {
+var DIGEST_HASH = intrinsic.assign(intrinsic.create(null), {
   sha256: "SHA-256", sha384: "SHA-384", sha512: "SHA-512",
   shake128: "SHAKE128", shake256: "SHAKE256",
-};
+});
 
 var OID_DATA = O("data");
 var OID_PKI_DATA = O("id-cct-PKIData");
@@ -73,7 +73,7 @@ function _buildSid(cert, useSki) {
 }
 
 function _buildSignedAttrs(pairs) {
-  var seenTypes = {};
+  var seenTypes = intrinsic.create(null);
   var attrs = intrinsic.map(pairs, function (p) {
     if (intrinsic.hasOwn(seenTypes, p.type)) throw _err("cms/bad-input", "signedAttrs must not repeat an attribute type (RFC 5652 sec. 5.3): " + p.type);
     seenTypes[p.type] = 1;
@@ -92,7 +92,7 @@ function _resolveAttrPairs(list, what) {
   });
 }
 
-var UNSIGNED_FORBIDDEN = {};
+var UNSIGNED_FORBIDDEN = intrinsic.create(null);
 UNSIGNED_FORBIDDEN[O("contentType")] = "content-type";
 UNSIGNED_FORBIDDEN[O("messageDigest")] = "message-digest";
 UNSIGNED_FORBIDDEN[O("signingTime")] = "signing-time";
@@ -102,7 +102,7 @@ function _buildUnsignedAttrs(list) {
   if (!intrinsic.isArray(list)) throw _err("cms/bad-input", "opts.unsignedAttributes must be an array of { type, values }");
   if (!list.length) return null;
   var pairs = _resolveAttrPairs(list, "an unsigned attribute value");
-  var seen = {};
+  var seen = intrinsic.create(null);
   intrinsic.forEach(pairs, function (p) {
     if (intrinsic.hasOwn(UNSIGNED_FORBIDDEN, p.type)) throw _err("cms/bad-input", "the " + UNSIGNED_FORBIDDEN[p.type] + " attribute must not appear as an unsigned attribute (RFC 5652 sec. 11)");
     if (intrinsic.hasOwn(seen, p.type)) throw _err("cms/bad-input", "unsignedAttrs must not repeat an attribute type (RFC 5652 sec. 5.3): " + p.type);
@@ -277,7 +277,7 @@ async function _signStream(stream, signers, opts) {
   }
   if (opts.signingTime != null && opts.signingTime !== false) guard.time.assertValid(opts.signingTime, _err, "cms/bad-input", "signingTime");
   var rcs = intrinsic.map(list, function (s) { return _resolveSignerContext(s, opts); });
-  var digestNames = [], seenDigest = {};
+  var digestNames = [], seenDigest = intrinsic.create(null);
   intrinsic.forEach(rcs, function (r) { if (!seenDigest[r.scheme.digest]) { seenDigest[r.scheme.digest] = 1; intrinsic.push(digestNames, r.scheme.digest); } });
   var wcNames = intrinsic.map(digestNames, function (n) { return DIGEST_HASH[n]; });
   var digests;
@@ -286,7 +286,7 @@ async function _signStream(stream, signers, opts) {
   } catch (e) {
     guard.bytes.translateStreamError(e, _err, "cms/bad-input");
   }
-  var byName = {};
+  var byName = intrinsic.create(null);
   intrinsic.forEach(digestNames, function (n, i) { byName[n] = intrinsic.bufferFrom(digests[i]); });
   var built = [];
   for (var _ip = 0; _ip < rcs.length; _ip++) {
@@ -322,7 +322,7 @@ function _sign(content, signers, opts) {
 }
 
 function _assembleSignedData(built, eContentType, opts, contentBuf) {
-  var seen = {}, digestAlgs = [];
+  var seen = intrinsic.create(null), digestAlgs = [];
   intrinsic.forEach(built, function (x) { var k = intrinsic.bufToString(x.digestAlgId, "hex"); if (!seen[k]) { seen[k] = 1; intrinsic.push(digestAlgs, x.digestAlgId); } });
   var v3 = intrinsic.some(built, function (x) { return x.version === 3; }) || eContentType !== OID_DATA;
   var version = v3 ? 3 : 1;
@@ -342,14 +342,14 @@ function _assembleSignedData(built, eContentType, opts, contentBuf) {
 }
 
 function _dedupe(ders) {
-  var seen = {}, out = [];
+  var seen = intrinsic.create(null), out = [];
   intrinsic.forEach(ders, function (d) { var k = intrinsic.bufToString(d, "hex"); if (!seen[k]) { seen[k] = 1; intrinsic.push(out, d); } });
   return out;
 }
 
 // certificates and/or CRLs and signs nothing. Documented by the @primitive block in cms-verify.js
 // (the @module pki.cms home).
-var KNOWN_CERTS_ONLY_OPTS = { crls: 1, pem: 1 };
+var KNOWN_CERTS_ONLY_OPTS = intrinsic.assign(intrinsic.create(null), { crls: 1, pem: 1 });
 
 function _certsOnlyList(v, what) {
   if (v == null) return [];
@@ -529,7 +529,7 @@ function _countersign(cmsInput, signers, opts) {
     list.forEach(function (cs) { jobs.push({ t: t, p: _buildCountersignature(preimage, cs, opts) }); });
   });
   return Promise.all(jobs.map(function (j) { return j.p; })).then(function (built) {
-    var byTarget = {}, certDers = [];
+    var byTarget = intrinsic.create(null), certDers = [];
     built.forEach(function (res, i) { (byTarget[jobs[i].t] = byTarget[jobs[i].t] || []).push(res.value); certDers.push(res.certDer); });
 
     var newSiSet = b.set(siSet.children.map(function (siNode, idx) {

package/lib/cms-verify.js

@@ -111,9 +111,9 @@ function _findSignerCerts(sid, parsedCerts) {
   for (var i = 0; i < parsedCerts.length; i++) {
     var c = parsedCerts[i];
     if (sid.subjectKeyIdentifier != null) {
-      if (c.ski && intrinsic.bufferEquals(c.ski, _toBuf(sid.subjectKeyIdentifier, "sid.subjectKeyIdentifier"))) intrinsic.push(out, c);
+      if (c.ski && intrinsic.bufferEquals(c.ski, _toBuf(sid.subjectKeyIdentifier, "sid.subjectKeyIdentifier"))) guard.list.append(out, c);
     } else if (sid.issuer && sid.serialNumberHex != null) {
-      if (c.cert.serialNumberHex === sid.serialNumberHex && guard.name.dnEqual(c.cert.issuer.rdns, sid.issuer.rdns, _err, "cms/bad-name", "the signer certificate issuer")) intrinsic.push(out, c);
+      if (c.cert.serialNumberHex === sid.serialNumberHex && guard.name.dnEqual(c.cert.issuer.rdns, sid.issuer.rdns, _err, "cms/bad-name", "the signer certificate issuer")) guard.list.append(out, c);
     }
   }
   return out;
@@ -147,7 +147,7 @@ function _certSki(cert) {
 }
 
 var OID_MGF1 = oid.byName("mgf1");
-var PSS_HASH = {};
+var PSS_HASH = intrinsic.create(null);
 PSS_HASH[oid.byName("sha256")] = "SHA-256";
 PSS_HASH[oid.byName("sha384")] = "SHA-384";
 PSS_HASH[oid.byName("sha512")] = "SHA-512";
@@ -391,10 +391,10 @@ async function _verifyCountersignatures(si, parsedCerts) {
   var values = [];
   intrinsic.forEach(si.unsignedAttrs || [], function (a) {
     if (a.type !== OID_COUNTERSIGNATURE) return;
-    intrinsic.forEach(a.values, function (v) { intrinsic.push(values, v && v.bytes ? v.bytes : v); });
+    intrinsic.forEach(a.values, function (v) { guard.list.append(values, v && v.bytes ? v.bytes : v); });
   });
   var out = [];
-  for (var _cp = 0; _cp < values.length; _cp++) intrinsic.push(out, await _verifyOneCountersig(values[_cp], targetSig, parsedCerts));
+  for (var _cp = 0; _cp < values.length; _cp++) guard.list.append(out, await _verifyOneCountersig(values[_cp], targetSig, parsedCerts));
   return out;
 }
 
@@ -492,10 +492,10 @@ function _snapshotIfBytes(input, label) {
 
 async function _resolveContentDigests(parsed, streamSource) {
   if (streamSource == null) return null;
-  var names = [], seen = {};
+  var names = [], seen = intrinsic.create(null);
   intrinsic.forEach(parsed.signerInfos, function (si) {
     var dn = si.digestAlgorithm.name;
-    if (si.signedAttrsBytes && _supportedDigest(dn) && !seen[dn]) { seen[dn] = 1; intrinsic.push(names, dn); }
+    if (si.signedAttrsBytes && _supportedDigest(dn) && !seen[dn]) { seen[dn] = 1; guard.list.append(names, dn); }
   });
   if (!names.length) return {};
   var ds;
@@ -504,12 +504,12 @@ async function _resolveContentDigests(parsed, streamSource) {
   } catch (e) {
     guard.bytes.translateStreamError(e, _err, "cms/bad-input");
   }
-  var byName = {};
+  var byName = intrinsic.create(null);
   intrinsic.forEach(names, function (n, i) { byName[n] = intrinsic.bufferFrom(ds[i]); });
   return byName;
 }
 
-var _VERIFY_OPTS = { certs: 1, content: 1, trustAnchors: 1, time: 1, requiredEku: 1, checkPurpose: 1 };
+var _VERIFY_OPTS = intrinsic.assign(intrinsic.create(null), { certs: 1, content: 1, trustAnchors: 1, time: 1, requiredEku: 1, checkPurpose: 1 });
 
 function verify(input, opts) {
   return guard.async.deferred(function () { return _verify(input, opts); });
@@ -546,7 +546,7 @@ async function _verify(input, opts) {
     var siOne = parsed.signerInfos[_sp];
     var verdict = await _verifyOne(siOne, content, eContentType, parsedCerts, null, digestByName);
     var counters = await _verifyCountersignatures(siOne, parsedCerts);
-    intrinsic.push(signers, guard.verdict.of(verdict, {
+    guard.list.append(signers, guard.verdict.of(verdict, {
       countersignatures: counters,
       unsignedAttrs: _surfaceUnsignedAttrs(siOne),
       signedAttributesPresent: !!siOne.signedAttrsBytes,
@@ -581,7 +581,7 @@ function _cloneAnchorValue(v, depth) {
       " levels, so it cannot be copied before the chain is walked; pass the anchor as certificate DER or a { name, publicKey, algorithm } tuple");
   }
   if (Array.isArray(v)) return v.map(function (e) { return _cloneAnchorValue(e, depth + 1); });
-  var out = {}, k;
+  var out = intrinsic.create(null), k;
   for (k in v) {
     if (!intrinsic.hasOwn(v, k)) continue;
     out[k] = _cloneAnchorValue(v[k], depth + 1);
@@ -677,7 +677,7 @@ function _addCert(out, der) {
   try {
     cert = x509.parse(buf);
   } catch (_e2) { return; }
-  out.push({ cert: cert, der: buf, ski: _certSki(cert) });
+  guard.list.append(out, { cert: cert, der: buf, ski: _certSki(cert) });
 }
 
 /**
@@ -983,7 +983,7 @@ var compress = cmsCompress.compress;
  */
 var decompress = cmsCompress.decompress;
 
-var KNOWN_PARSE_CERTS_ONLY_OPTS = { maxCerts: 1 };
+var KNOWN_PARSE_CERTS_ONLY_OPTS = intrinsic.assign(intrinsic.create(null), { maxCerts: 1 });
 function _certsOnlyInputDer(input, verb) {
   if (guard.bytes.isByteSource(input)) {
     var buf = guard.bytes.snapshotSource(input, CmsError, "cms/bad-input", verb + " input");

package/lib/composite-kem.js

@@ -45,7 +45,7 @@ function _pemToDer(text, label) {
   catch (e) { throw _err("kem/bad-key", "the PEM input is not a valid " + label + " block", e); }
 }
 
-var COMPOSITE_KEM = {};
+var COMPOSITE_KEM = Object.create(null);
 function _comp(name, mlkemBits, label, trad) {
   var mlOidName = "id-ml-kem-" + mlkemBits;
   var kp = oid.kemParams(mlOidName);

package/lib/composite-sig.js

@@ -17,13 +17,13 @@ function _codeOf(e, fallback) {
 }
 
 var COMPOSITE_PREFIX = Buffer.from("CompositeAlgorithmSignatures2025", "ascii");
-var MLDSA_COMPONENT = {
+var MLDSA_COMPONENT = Object.assign(Object.create(null), {
   "ML-DSA-44": { pk: 1312, sig: 2420, oid: "id-ml-dsa-44" },
   "ML-DSA-65": { pk: 1952, sig: 3309, oid: "id-ml-dsa-65" },
   "ML-DSA-87": { pk: 2592, sig: 4627, oid: "id-ml-dsa-87" },
-};
-var EC_CURVE_OID = { "P-256": "prime256v1", "P-384": "secp384r1", "P-521": "secp521r1" };
-var PH_CMS = { "SHA-256": "sha256", "SHA-512": "sha512", "SHAKE256": "shake256" };
+});
+var EC_CURVE_OID = Object.assign(Object.create(null), { "P-256": "prime256v1", "P-384": "secp384r1", "P-521": "secp521r1" });
+var PH_CMS = Object.assign(Object.create(null), { "SHA-256": "sha256", "SHA-512": "sha512", "SHAKE256": "shake256" });
 var COMPOSITE_ALGS = Object.create(null);
 function _comp(name, mldsa, ph, label, trad) {
   var sz = MLDSA_COMPONENT[mldsa];