@blamejs/pki 0.6.39 → 0.6.41

package/lib/constants.js

@@ -75,14 +75,14 @@ var DAYS_PER_WEEK = 7;
  *   var oneYear = pki.C.TIME.days(365);
  *   // -> 31536000000
  */
-var TIME = {
+var TIME = Object.assign(Object.create(null), {
   milliseconds: function (n) { return _scale(n, "C.TIME.milliseconds", 1); },
   seconds: function (n) { return _scale(n, "C.TIME.seconds", MS_PER_SECOND); },
   minutes: function (n) { return _scale(n, "C.TIME.minutes", SECONDS_PER_MINUTE * MS_PER_SECOND); },
   hours:   function (n) { return _scale(n, "C.TIME.hours", MINUTES_PER_HOUR * SECONDS_PER_MINUTE * MS_PER_SECOND); },
   days:    function (n) { return _scale(n, "C.TIME.days", HOURS_PER_DAY * MINUTES_PER_HOUR * SECONDS_PER_MINUTE * MS_PER_SECOND); },
   weeks:   function (n) { return _scale(n, "C.TIME.weeks", DAYS_PER_WEEK * HOURS_PER_DAY * MINUTES_PER_HOUR * SECONDS_PER_MINUTE * MS_PER_SECOND); },
-};
+});
 
 var BYTES_PER_KIB = 1024;
 
@@ -101,14 +101,14 @@ var BYTES_PER_KIB = 1024;
  *   var cap = pki.C.BYTES.mib(16);
  *   // -> 16777216
  */
-var BYTES = {
+var BYTES = Object.assign(Object.create(null), {
   b:   function (n) { return _scale(n, "C.BYTES.b", 1); },
   kib: function (n) { return _scale(n, "C.BYTES.kib", BYTES_PER_KIB); },
   mib: function (n) { return _scale(n, "C.BYTES.mib", BYTES_PER_KIB * BYTES_PER_KIB); },
   gib: function (n) { return _scale(n, "C.BYTES.gib", BYTES_PER_KIB * BYTES_PER_KIB * BYTES_PER_KIB); },
-};
+});
 
-var LIMITS = {
+var LIMITS = Object.assign(Object.create(null), {
   DER_MAX_BYTES: BYTES.mib(16),
   DER_MAX_DEPTH: 64,
   DER_MAX_ITEMS: 4000000,
@@ -169,9 +169,9 @@ var LIMITS = {
   TRUST_MAX_OBJECTS: 10000,
   TRUST_MAX_CSV_ROWS: 10000,
   TRUST_MAX_CSV_FIELD_BYTES: BYTES.kib(64),
-};
+});
 
-var NAMES = {
+var NAMES = Object.assign(Object.create(null), {
   DN_SHORT: {
     commonName: "CN", surname: "SN", serialNumber: "SERIALNUMBER", countryName: "C",
     localityName: "L", stateOrProvinceName: "ST", streetAddress: "STREET",
@@ -227,9 +227,13 @@ var NAMES = {
     "SLH-DSA-SHA2-128s": "SLH-DSA-SHA2-128s", "SLH-DSA-SHA2-128f": "SLH-DSA-SHA2-128f",
     "SLH-DSA-SHA2-192s": "SLH-DSA-SHA2-192s", "SLH-DSA-SHA2-256s": "SLH-DSA-SHA2-256s",
   },
-};
+});
 
-Object.keys(NAMES).forEach(function (k) { Object.freeze(NAMES[k]); });
+/** @internal Each inner table is looked up by a name a certificate supplies, so it answers from
+ * its own entries alone rather than from whatever Object.prototype carries under that name. */
+Object.keys(NAMES).forEach(function (k) {
+  NAMES[k] = Object.freeze(Object.assign(Object.create(null), NAMES[k]));
+});
 Object.freeze(NAMES);
 
 var VERSION = require("../package.json").version;

package/lib/crl-sign.js

@@ -58,28 +58,28 @@ var CRL_REASON = constants.NAMES.CRL_REASON;
 var REASON_BY_NAME = intrinsic.create(null);
 Object.keys(CRL_REASON).forEach(function (v) { REASON_BY_NAME[CRL_REASON[v]] = Number(v); });
 
-var KNOWN_CRL_EXT_KEYS = { authorityKeyIdentifier: 1, issuingDistributionPoint: 1, deltaCRLIndicator: 1, freshestCRL: 1, authorityInfoAccess: 1 };
-var KNOWN_SPEC_KEYS = {
+var KNOWN_CRL_EXT_KEYS = intrinsic.assign(intrinsic.create(null), { authorityKeyIdentifier: 1, issuingDistributionPoint: 1, deltaCRLIndicator: 1, freshestCRL: 1, authorityInfoAccess: 1 });
+var KNOWN_SPEC_KEYS = intrinsic.assign(intrinsic.create(null), {
   issuer: 1, thisUpdate: 1, nextUpdate: 1, revoked: 1, crlNumber: 1, extensions: 1,
-};
-var KNOWN_SPEC_KEYS_ISSUER_NAMED = {
+});
+var KNOWN_SPEC_KEYS_ISSUER_NAMED = intrinsic.assign(intrinsic.create(null), {
   thisUpdate: 1, nextUpdate: 1, revoked: 1, crlNumber: 1, extensions: 1,
-};
-var KNOWN_ISSUER_CERT_KEYS = { key: 1, cert: 1 };
-var KNOWN_ISSUER_EXPLICIT_KEYS = { key: 1, name: 1, publicKey: 1 };
-var KNOWN_SIGN_OPTS = { digestAlgorithm: 1, pem: 1, pss: 1 };
+});
+var KNOWN_ISSUER_CERT_KEYS = intrinsic.assign(intrinsic.create(null), { key: 1, cert: 1 });
+var KNOWN_ISSUER_EXPLICIT_KEYS = intrinsic.assign(intrinsic.create(null), { key: 1, name: 1, publicKey: 1 });
+var KNOWN_SIGN_OPTS = intrinsic.assign(intrinsic.create(null), { digestAlgorithm: 1, pem: 1, pss: 1 });
 
-var KNOWN_IDP_KEYS = { fullName: 1, onlyContainsUserCerts: 1, onlyContainsCACerts: 1, onlyContainsAttributeCerts: 1, indirectCRL: 1 };
+var KNOWN_IDP_KEYS = intrinsic.assign(intrinsic.create(null), { fullName: 1, onlyContainsUserCerts: 1, onlyContainsCACerts: 1, onlyContainsAttributeCerts: 1, indirectCRL: 1 });
 
-var KNOWN_REVOKED_KEYS = {
+var KNOWN_REVOKED_KEYS = intrinsic.assign(intrinsic.create(null), {
   serialNumber: 1, revocationDate: 1, reason: 1, invalidityDate: 1, certificateIssuer: 1, extensions: 1,
-};
+});
 
-var REQUIRED_CRITICALITY = {};
+var REQUIRED_CRITICALITY = intrinsic.create(null);
 [["cRLNumber", false], ["authorityKeyIdentifier", false], ["freshestCRL", false], ["authorityInfoAccess", false],
   ["issuingDistributionPoint", true], ["deltaCRLIndicator", true]].forEach(function (r) { REQUIRED_CRITICALITY[O(r[0])] = r[1]; });
 
-var REQUIRED_ENTRY_CRITICALITY = {};
+var REQUIRED_ENTRY_CRITICALITY = intrinsic.create(null);
 [["reasonCode", false], ["invalidityDate", false]].forEach(function (r) { REQUIRED_ENTRY_CRITICALITY[O(r[0])] = r[1]; });
 
 var _CERT_ISSUER_DEFERRED = "certificateIssuer (indirect CRLs) is not yet supported -- pki.path.crlChecker skips a CRL carrying any critical entry extension other than reasonCode, so an indirect CRL would never be authoritative for revocation. Re-enabled once the checker processes certificateIssuer / indirect CRLs.";
@@ -189,7 +189,7 @@ function _aiaValue(spec) {
 }
 
 function _buildCrlExtensions(spec, ctx) {
-  var out = [], seen = {}, isDelta = false;
+  var out = [], seen = intrinsic.create(null), isDelta = false;
   function push(oidName, critical, valueDer) {
     var id = O(oidName);
     if (seen[id]) throw _err("crl/bad-input", "duplicate CRL extension " + oidName + " (RFC 5280 sec. 5.2 -- at most one instance)");
@@ -255,7 +255,7 @@ function _buildCrlExtensions(spec, ctx) {
 
 function _buildRevoked(entryList, isDelta) {
   if (!Array.isArray(entryList)) throw _err("crl/bad-input", "revoked must be an array of revoked-certificate entries");
-  var anyExt = false, seenSerials = {};
+  var anyExt = false, seenSerials = intrinsic.create(null);
   var entries = _b.reqDenseArray(entryList, "revoked").map(function (e, idx) {
     if (!e || typeof e !== "object" || Buffer.isBuffer(e)) throw _err("crl/bad-input", "each revoked entry must be an object");
     guard.identifier.assertKnownKeys(e, KNOWN_REVOKED_KEYS, _err, "crl/bad-input", function (k) {
@@ -268,7 +268,7 @@ function _buildRevoked(entryList, isDelta) {
     if (seenSerials[serialKey]) throw _err("crl/bad-input", "revoked entry [" + idx + "] duplicates a serial number already listed in this CRL (RFC 5280 sec. 5.1.2.6)");
     seenSerials[serialKey] = true;
     var children = [serialTlv, _timeDer(e.revocationDate, "revocationDate")];
-    var entryExts = [], seen = {};
+    var entryExts = [], seen = intrinsic.create(null);
     function pushE(oidName, critical, valueDer) {
       var id = O(oidName);
       if (seen[id]) throw _err("crl/bad-input", "duplicate entry extension " + oidName + " in revoked entry [" + idx + "]");
@@ -525,14 +525,14 @@ function _verify(crl, issuer) {
   return crlVerify.verifyCrlSignature(parsed, resolved.spki).then(function (sigOk) {
     var signatureValid = sigOk === true;
     var valid = issuerMaySign && signatureValid;
-    var out = { valid: valid, issuerMaySign: issuerMaySign, signatureValid: signatureValid, issuer: parsed.issuer };
-    if (!valid) {
-      out.code = !issuerMaySign ? "crl/issuer-may-not-sign" : "crl/bad-signature";
-      out.reason = !issuerMaySign
-        ? "the issuer certificate is not this CRL's issuer, or its keyUsage does not assert cRLSign (RFC 5280 sec. 4.2.1.3)"
-        : "the CRL signature did not verify under the issuer key";
-    }
-    return out;
+    return guard.verdict.of(
+      { valid: valid, issuerMaySign: issuerMaySign, signatureValid: signatureValid, issuer: parsed.issuer },
+      valid ? null : {
+        code: !issuerMaySign ? "crl/issuer-may-not-sign" : "crl/bad-signature",
+        reason: !issuerMaySign
+          ? "the issuer certificate is not this CRL's issuer, or its keyUsage does not assert cRLSign (RFC 5280 sec. 4.2.1.3)"
+          : "the CRL signature did not verify under the issuer key",
+      });
   });
 }
 
@@ -602,7 +602,7 @@ function _serialHexOf(serial) {
  *     { cert: signerCertDer, key: signerKeyPkcs8 });
  *   pki.crl.isRevoked(crlDer, 0x1234n) ? "revoked" : "not listed";
  */
-var KNOWN_IS_REVOKED_KEYS = { time: 1, historicalMode: 1 };
+var KNOWN_IS_REVOKED_KEYS = intrinsic.assign(intrinsic.create(null), { time: 1, historicalMode: 1 });
 function isRevoked(crl, serialNumber, opts) {
   var o = guard.identifier.optionsObject(opts, _err, "crl/bad-input", "pki.crl.isRevoked options");
   guard.identifier.assertKnownKeys(o, KNOWN_IS_REVOKED_KEYS, _err, "crl/bad-input", function (k) {

package/lib/crmf-sign.js

@@ -47,8 +47,8 @@ var _b = pkiBuild.makeBuilder({
   NAME_SCHEMA: pkix.name(NS), SPKI_SCHEMA: pkix.spki(NS), EXT_DECODERS: EXT_DECODERS,
 });
 
-var KNOWN_SPEC_KEYS = { certReqId: 1, certTemplate: 1, controls: 1, regInfo: 1, pop: 1 };
-var POP_KEYS_BY_ARM = {
+var KNOWN_SPEC_KEYS = intrinsic.assign(intrinsic.create(null), { certReqId: 1, certTemplate: 1, controls: 1, regInfo: 1, pop: 1 });
+var POP_KEYS_BY_ARM = intrinsic.assign(intrinsic.create(null), {
   raVerified: { type: 1, raVerified: 1 },
   signature: { type: 1, sender: 1 },
   subsequentMessage: { type: 1, method: 1, subsequentMessage: 1 },
@@ -59,14 +59,14 @@ var POP_KEYS_BY_ARM = {
   agreeMAC: { type: 1, method: 1 },
   thisMessage: { type: 1, method: 1 },
   dhMAC: { type: 1, method: 1 },
-};
-var KNOWN_BATCH_KEYS = { messages: 1 };
-var KNOWN_TEMPLATE_KEYS = { version: 1, subject: 1, publicKey: 1, validity: 1, extensions: 1, issuer: 1 };
-var REVOCATION_TEMPLATE_KEYS = { version: 1, subject: 1, publicKey: 1, validity: 1, extensions: 1, issuer: 1, serialNumber: 1 };
+});
+var KNOWN_BATCH_KEYS = intrinsic.assign(intrinsic.create(null), { messages: 1 });
+var KNOWN_TEMPLATE_KEYS = intrinsic.assign(intrinsic.create(null), { version: 1, subject: 1, publicKey: 1, validity: 1, extensions: 1, issuer: 1 });
+var REVOCATION_TEMPLATE_KEYS = intrinsic.assign(intrinsic.create(null), { version: 1, subject: 1, publicKey: 1, validity: 1, extensions: 1, issuer: 1, serialNumber: 1 });
 function _ctlUtf8(v) { return b.utf8(String(v)); }
 function _ctlSpki(v) { var k = _b.reqDer(v, "protocolEncrKey (an SPKI DER)"); _b.assertValidSpki(k, "protocolEncrKey"); return b.raw(k); }
-var CONTROL_VALUE = { regToken: _ctlUtf8, authenticator: _ctlUtf8, oldCertID: function (v) { return _encodeCertId(v); }, protocolEncrKey: _ctlSpki };
-var REGINFO_VALUE = { utf8Pairs: _ctlUtf8 };
+var CONTROL_VALUE = intrinsic.assign(intrinsic.create(null), { regToken: _ctlUtf8, authenticator: _ctlUtf8, oldCertID: function (v) { return _encodeCertId(v); }, protocolEncrKey: _ctlSpki });
+var REGINFO_VALUE = intrinsic.assign(intrinsic.create(null), { utf8Pairs: _ctlUtf8 });
 
 
 function _encodeOptionalValidity(validity) {
@@ -106,7 +106,7 @@ function _encodeCertTemplate(tpl, opts) {
 function _buildAttrTypeAndValues(spec, code, label, valueMap) {
   if (Array.isArray(spec)) {
     if (!spec.length) throw _err(code, label + " must carry at least one entry");
-    var seenA = {};
+    var seenA = intrinsic.create(null);
     return b.sequence(pkiBuild.reqDenseArray(spec, label, _err, code).map(function (e, i) {
       var der = _b.reqDer(e, label + " [" + i + "]");
       var n;
@@ -120,7 +120,7 @@ function _buildAttrTypeAndValues(spec, code, label, valueMap) {
     }));
   }
   if (!spec || typeof spec !== "object") throw _err("crmf/bad-input", label + " must be an object or an array of pre-encoded AttributeTypeAndValue DER");
-  var out = [], seen = {};
+  var out = [], seen = intrinsic.create(null);
   guard.identifier.assertKnownKeys(spec, valueMap, _err, "crmf/bad-input", function (k) {
     return "unknown " + label + " " + JSON.stringify(k) + "; pass a pre-encoded AttributeTypeAndValue DER via the array form for a " + label + " entry outside " + Object.keys(valueMap).join("/");
   });
@@ -147,7 +147,7 @@ function _encodeCertId(id) {
 }
 
 var POPO_PRIVKEY_TAGS = intrinsic.assign(intrinsic.create(null), { keyEncipherment: 2, keyAgreement: 3 });
-var SUBSEQUENT_MESSAGE = { encrCert: 0n, challengeResp: 1n };
+var SUBSEQUENT_MESSAGE = intrinsic.assign(intrinsic.create(null), { encrCert: 0n, challengeResp: 1n });
 var DEPRECATED_POPO_METHOD = intrinsic.assign(intrinsic.create(null), { thisMessage: "encryptedKey", dhMAC: "agreeMAC" });
 
 function _encKeyWithID(privateKeyDer, identifier) {

package/lib/csr-sign.js

@@ -29,7 +29,7 @@ require("./path-validate");
 var csrVerify = require("./csr-verify");
 
 var CsrError = frameworkError.CsrError;
-var KNOWN_SPEC_KEYS = { subject: 1, subjectPublicKey: 1, extensionRequest: 1, challengePassword: 1, attributes: 1 };
+var KNOWN_SPEC_KEYS = Object.assign(Object.create(null), { subject: 1, subjectPublicKey: 1, extensionRequest: 1, challengePassword: 1, attributes: 1 });
 var b = asn1.build;
 function _err(code, message, cause) { return new CsrError(code, message, cause); }
 function _signE(kind, message, cause) { return new CsrError("csr/" + kind, message, cause); }
@@ -106,7 +106,7 @@ function _sign(spec, key, opts) {
   _b.assertValidSpki(subjectSpki, "spec.subjectPublicKey");
   var subjectDer = _b.encodeName(spec.subject == null ? [] : spec.subject);
 
-  var attrs = [], seenAttr = {};
+  var attrs = [], seenAttr = Object.create(null);
   function addAttr(attrType, valueTlv) {
     if (seenAttr[attrType]) throw _err("csr/bad-input", "duplicate " + (oid.name(attrType) || attrType) + " attribute");
     seenAttr[attrType] = true;
@@ -205,14 +205,14 @@ function verify(request) { return guard.async.deferred(function () { return _ver
 function _verify(request) {
   var parsed = _coerceCsr(request);
   return Promise.resolve(csrVerify.verifyCsrSignature(parsed)).then(function (ok) {
-    return {
+    return guard.verdict.of({
       valid: ok === true,
       verified: ok === true,
       subject: parsed.subject,
       subjectPublicKeyInfo: parsed.subjectPublicKeyInfo,
       attributes: parsed.attributes,
       certificationRequestInfoBytes: parsed.certificationRequestInfoBytes,
-    };
+    });
   });
 }
 

package/lib/ct.js

@@ -64,10 +64,10 @@ var C = constants;
 
 function _ctErr(c, m, cause) { return new CtError(c, m, cause); }
 
-var HASH_ALGORITHMS = {
+var HASH_ALGORITHMS = intrinsic.assign(intrinsic.create(null), {
   0: "none", 1: "md5", 2: "sha1", 3: "sha224", 4: "sha256", 5: "sha384", 6: "sha512",
-};
-var SIGNATURE_ALGORITHMS = { 0: "anonymous", 1: "rsa", 2: "dsa", 3: "ecdsa" };
+});
+var SIGNATURE_ALGORITHMS = intrinsic.assign(intrinsic.create(null), { 0: "anonymous", 1: "rsa", 2: "dsa", 3: "ecdsa" });
 
 var SCT_MIN_BODY = 47;
 var LOGID_BYTES = 32;
@@ -290,8 +290,8 @@ function reconstructSignedData(entry, sct) {
   return Buffer.concat(parts);
 }
 
-var CT_HASH = { sha256: "SHA-256" };
-var CT_EC_CURVE = {};
+var CT_HASH = intrinsic.assign(intrinsic.create(null), { sha256: "SHA-256" });
+var CT_EC_CURVE = intrinsic.create(null);
 CT_EC_CURVE[oid.byName("prime256v1")] = { curve: "P-256", coordLen: 32 };
 
 function _spkiAlg(spki) {
@@ -551,7 +551,7 @@ async function signSct(entry, logKey, opts) {
   var priv = await subtle.importKey("pkcs8", mat.pkcs8, imp, false, ["sign"]);
   var sigRaw = Buffer.from(await subtle.sign(sign, priv, preimage));
   var signature = ecdsaDer ? validator.sig.rawToEcdsaDer(sigRaw, coordLen) : sigRaw;
-  return {
+  return guard.verdict.of({
     version: 0,
     logId: logId, logIdHex: logId.toString("hex"),
     timestamp: timestamp,
@@ -559,11 +559,11 @@ async function signSct(entry, logKey, opts) {
     hashAlg: hashAlg, sigAlg: sigAlg,
     signatureAlgorithm: { hash: hashAlg, hashName: HASH_ALGORITHMS[hashAlg] || null, signature: sigAlg, signatureName: SIGNATURE_ALGORITHMS[sigAlg] || null },
     signature: signature,
-  };
+  });
 }
 
 
-var LOG_STATE_TRUST = { pending: "no", qualified: "yes", usable: "yes", readonly: "yes", retired: "conditional", rejected: "no" };
+var LOG_STATE_TRUST = intrinsic.assign(intrinsic.create(null), { pending: "no", qualified: "yes", usable: "yes", readonly: "yes", retired: "conditional", rejected: "no" });
 
 function _parseLogState(state) {
   if (state == null || typeof state !== "object") throw _ctErr("ct/bad-state", "a CT log entry is missing its state");
@@ -766,17 +766,17 @@ async function verifySctWithLogList(entry, sct, logList, opts) {
   var c = _classifyLog(sct, logList, entry, opts);
   if (c.status !== "ok") throw _ctErr(c.code, c.message);
   var valid = await verifySct(entry, sct, c.log.key);
-  return {
+  return guard.verdict.of({
     valid: valid,
     logId: c.log.logId,
     logIdHex: c.log.logIdHex,
     operator: c.log.operator,
     logState: c.log.state.name,
     timestamp: sct.timestamp,
-  };
+  });
 }
 
-var _VERIFY_SCT_LIST_OPTS = { minScts: 1, minOperators: 1, certNotAfter: 1, at: 1 };
+var _VERIFY_SCT_LIST_OPTS = intrinsic.assign(intrinsic.create(null), { minScts: 1, minOperators: 1, certNotAfter: 1, at: 1 });
 
 function _policyCount(v, name) {
   if (v == null) return null;
@@ -860,37 +860,37 @@ async function verifySctList(entry, list, logList, opts) {
     try { c = _classifyLog(sct, logList, entry, opts); }
     catch (e) {
       if (!(e && e.isPkiError)) throw e;
-      row.code = e.code; row.reason = e.message; intrinsic.push(results, row); continue;
+      row.code = e.code; row.reason = e.message; guard.list.append(results, row); continue;
     }
     if (c.log) { row.operator = c.log.operator; row.logState = c.log.state.name; }
-    if (c.status !== "ok") { row.code = c.code; row.reason = c.message; intrinsic.push(results, row); continue; }
+    if (c.status !== "ok") { row.code = c.code; row.reason = c.message; guard.list.append(results, row); continue; }
     var ok;
     try { ok = await verifySct(entry, sct, c.log.key); }
     catch (e) {
       if (!(e && e.isPkiError)) throw e;
-      row.code = e.code; row.reason = e.message; intrinsic.push(results, row); continue;
+      row.code = e.code; row.reason = e.message; guard.list.append(results, row); continue;
     }
     if (ok === true && atMs != null && sct.timestamp > atMs) {
       row.code = "ct/future-timestamp"; row.reason = "the SCT timestamp is later than the validation time (RFC 6962 sec. 5.2)";
-      intrinsic.push(results, row); continue;
+      guard.list.append(results, row); continue;
     }
     row.valid = ok === true;
     if (row.valid && !seenLogs[sct.logIdHex]) {
       seenLogs[sct.logIdHex] = true;
       validScts++;
-      if (c.log.operator != null && !seenOps[c.log.operator]) { seenOps[c.log.operator] = true; intrinsic.push(operators, c.log.operator); }
+      if (c.log.operator != null && !seenOps[c.log.operator]) { seenOps[c.log.operator] = true; guard.list.append(operators, c.log.operator); }
     }
-    intrinsic.push(results, row);
+    guard.list.append(results, row);
   }
   var operatorCount = operators.length;
   var policyOk = validScts >= minScts && operatorCount >= minOperators;
-  return {
+  return guard.verdict.of({
     valid: policyOk,
     policyOk: policyOk, totalScts: scts.length + unknownScts, validScts: validScts, unknownScts: unknownScts,
     operatorCount: operatorCount, operators: operators, required: { minScts: minScts, minOperators: minOperators },
     results: results,
     reason: policyOk ? null : ("CT policy not met: " + validScts + " valid SCT(s) from " + operatorCount + " distinct operator(s); require at least " + minScts + " SCT(s) from at least " + minOperators + " operator(s)"),
-  };
+  });
 }
 
 function _asParsedCert(v, field) {
@@ -1029,7 +1029,7 @@ async function verifyLogListSignature(json, signature, publicKey) {
 
 var DEFAULT_FETCH_TIMEOUT = C.TIME.seconds(30);
 var MAX_FETCH_TIMEOUT = C.TIME.seconds(600);
-var KNOWN_FETCH_OPTS = { url: 1, signerKey: 1, sigUrl: 1, transport: 1, tls: 1, headers: 1, timeout: 1, maxResponseBytes: 1, requireJsonContentType: 1 };
+var KNOWN_FETCH_OPTS = intrinsic.assign(intrinsic.create(null), { url: 1, signerKey: 1, sigUrl: 1, transport: 1, tls: 1, headers: 1, timeout: 1, maxResponseBytes: 1, requireJsonContentType: 1 });
 
 function _tlsForFetch(opts) {
   var t = opts.tls || {};
@@ -1038,6 +1038,12 @@ function _tlsForFetch(opts) {
 
 function _sameOrigin(a, b) { return new URL(a).origin === new URL(b).origin; }
 
+/** @internal Refused at the door and again where the value is used. */
+function _assertTransport(opts) {
+  return guard.identifier.assertCallableOption(opts, "transport", _ctErr, "ct/bad-input", "opts.transport",
+    "(request) => Promise<{ status, headers, body }>");
+}
+
 function _fetchCtypeToken(headers) { return String((headers || {})["content-type"] || "").split(";")[0].trim().toLowerCase(); }
 
 function _parseHttpsUrl(u, label) {
@@ -1060,7 +1066,7 @@ function _fetchBody(transport, url, req, label) {
     return transport({ method: "GET", url: url, headers: req.headers, tls: req.tls, timeout: req.timeout, maxResponseBytes: req.maxResponseBytes });
   }).then(function (res) {
     res = res || {};
-    var h = {};
+    var h = intrinsic.create(null);
     Object.keys(res.headers || {}).forEach(function (k) { h[k.toLowerCase()] = res.headers[k]; });
     var body = guard.bytes.isByteSource(res.body)
       ? guard.bytes.source(res.body, CtError, "ct/bad-input", label)
@@ -1116,13 +1122,15 @@ function _fetchBody(transport, url, req, label) {
 async function fetchLogList(opts) {
   opts = opts || {};
   guard.identifier.assertKnownKeys(opts, KNOWN_FETCH_OPTS, _ctErr, "ct/bad-input", "unknown opts field ");
+  /** @internal Read once, at the door, and carried from here. Asking again would let an option that
+   * answers differently on each read hand back something other than the value that was checked. */
+  var transport = _assertTransport(opts);
   if (opts.signerKey == null) throw _ctErr("ct/bad-input", "opts.signerKey is required -- the caller-pinned CT log-list distributor SPKI (there is no baked-in key)");
   if (opts.url == null) throw _ctErr("ct/bad-input", "opts.url is required -- the log_list.json URL (there is no baked-in vendor URL)");
   var jsonParsed = _parseHttpsUrl(opts.url, "URL");
   var jsonUrl = jsonParsed.href;
   var sigUrl = opts.sigUrl != null ? _parseHttpsUrl(opts.sigUrl, "signature URL").href : _sigUrlFor(jsonParsed);
   if (!_sameOrigin(jsonUrl, sigUrl)) throw _ctErr("ct/bad-input", "opts.sigUrl must share the log-list URL's origin (" + jsonParsed.origin + "); a cross-origin detached-signature host is not supported");
-  var transport = opts.transport;
   if (!transport) {
     var t = opts.tls || {};
     var hasAnchors = t.anchors !== undefined && t.anchors !== null && !(Array.isArray(t.anchors) && t.anchors.length === 0);
@@ -1131,7 +1139,7 @@ async function fetchLogList(opts) {
   }
   var timeout = guard.limits.cap(opts.timeout, "timeout", DEFAULT_FETCH_TIMEOUT, { E: _ctErr, code: "ct/bad-input", min: 1, max: MAX_FETCH_TIMEOUT });
   var maxResponseBytes = guard.limits.cap(opts.maxResponseBytes, "maxResponseBytes", C.LIMITS.CT_LOG_LIST_MAX_BYTES, { E: _ctErr, code: "ct/bad-input", min: 1, max: C.LIMITS.CT_LOG_LIST_MAX_BYTES });
-  var headers = {};
+  var headers = intrinsic.create(null);
   Object.keys(opts.headers || {}).forEach(function (k) {
     var lk = k.toLowerCase();
     if (lk !== "content-length" && lk !== "transfer-encoding") headers[k] = opts.headers[k];
@@ -1143,10 +1151,10 @@ async function fetchLogList(opts) {
   var ok = await verifyLogListSignature(jsonRes.body, sigRes.body, opts.signerKey);
   if (ok !== true) throw _ctErr("ct/log-list-untrusted", "the CT log-list detached signature did not verify against the pinned distributor key -- the fetched list is untrusted and was not parsed");
   var parsed = parseLogList(jsonRes.body);
-  return {
+  return guard.verdict.of({
     logs: parsed.logs, byLogId: parsed.byLogId, version: parsed.version, timestamp: parsed.timestamp,
     raw: { json: jsonRes.body, sig: sigRes.body }, status: jsonRes.status, contentType: jsonRes.contentType, tls: jsonRes.tls,
-  };
+  });
 }
 
 module.exports = {

package/lib/edwards-point.js

@@ -11,10 +11,10 @@ var SQRTM1 = _pow(2n, (P25519 - 1n) / 4n, P25519);
 var P448 = (1n << 448n) - (1n << 224n) - 1n;
 var D448 = P448 - 39081n;
 
-var CURVE = {
+var CURVE = Object.assign(Object.create(null), {
   6: { p: P25519, d: D25519, a: P25519 - 1n, len: 32, signBit: 255n },
   7: { p: P448, d: D448, a: 1n, len: 57, signBit: 455n },
-};
+});
 
 function _mul(x, y, p) { return (x % p) * (y % p) % p; }
 function _pow(b, e, p) { var r = 1n; b %= p; while (e > 0n) { if (e & 1n) r = r * b % p; b = b * b % p; e >>= 1n; } return r; }