@blamejs/pki 0.6.51 → 0.6.52

package/lib/schema-cmp.js

@@ -359,7 +359,7 @@ var ENCRYPTED_KEY = schema.choice([
       if (ct === null || ct.length === 0) {
         throw ctx.E("cmp/bad-cert-response", "an EncryptedKey envelopedData must carry non-empty attached ciphertext -- its encryptedContent is the certificate/key payload (RFC 9810 sec. 5.2.2)");
       }
-      return { envelopedData: env };
+      return { envelopedData: env, bytes: asn1.sequenceTlv(n) };
     }) },
 ], { code: "cmp/bad-cert-response", what: "EncryptedKey" });
 

package/lib/schema-pkix.js

@@ -539,6 +539,44 @@ function keyUsageOf(ns, cert, E, code, label) {
   return null;
 }
 
+/** @internal The extendedKeyUsage purposes a certificate asserts, or null when it carries no such
+ * extension. A malformed extension throws through the caller's ErrorClass; it never reads as an
+ * empty set. */
+var _EKU_DECODER = new _WeakMapI();
+function extKeyUsageOf(ns, cert, E, code, label) {
+  var exts = (cert && cert.extensions) || [];
+  var want = ns.oid.byName("extKeyUsage");
+  for (var i = 0; i < exts.length; i++) {
+    if (exts[i].oid !== want || exts[i].value == null) continue;
+    var dec = _weakGet(_EKU_DECODER, ns);
+    if (!dec) { dec = certExtensionDecoders(ns).byOid[want]; _weakSet(_EKU_DECODER, ns, dec); }
+    try { return dec(exts[i].value); }
+    catch (e) { throw E(code, "the " + label + " extendedKeyUsage extension is malformed", e); }
+  }
+  return null;
+}
+
+/**
+ * @internal Whether a certificate ASSERTS a key purpose, for a rule that requires the assertion to be
+ * present. RFC 5280 sec. 4.2.1.12 constrains a certificate only when the extension is there, so an
+ * absent extendedKeyUsage permits every purpose and satisfies `pki.path.validate`'s `requiredEku`. A
+ * profile that reads the purpose as an authorization statement (RFC 6960's id-kp-OCSPSigning
+ * responder, RFC 9483 sec. 4.1.6's id-kp-cmKGA key generation authority) needs the opposite reading:
+ * the certificate must say so. This returns false for an absent, empty, malformed, or
+ * differently-purposed extension, and true only when the named purpose is listed.
+ *
+ * @enforced-by behavioral -- an absent extension answering an authorization question has no
+ * rename-proof code shape; each consumer's RED conformance vector drives the shipped verb on a
+ * certificate with no extendedKeyUsage and asserts the refusal.
+ */
+function assertsPurpose(ns, cert, purposeOid) {
+  var purposes;
+  try { purposes = extKeyUsageOf(ns, cert, ns.E, ns.prefix + "/bad-extension-value", "certificate"); }
+  catch (_e) { return false; }
+  if (!purposes) return false;
+  return guard.list.contains(purposes, purposeOid);
+}
+
 function issuingDistributionPoint(code) {
   return schema.seq([
     schema.trailing([
@@ -676,7 +714,7 @@ function certExtensionDecoders(ns) {
     for (var z = 0; z < bs.bytes.length; z++) { if (bs.bytes[z] !== 0) { anyBit = true; break; } }
     if (!anyBit) throw ns.E(C, "KeyUsage must assert at least one bit (RFC 5280 sec. 4.2.1.3)");
     schema.assertMinimalNamedBits(bs.unusedBits, bs.bytes, function (m) { throw ns.E(C, m); });
-    // allow:registry-table-inherits-object-prototype -- the decoded KeyUsage record, whose keys are the fixed KU_BITS names the schema declares rather than anything the certificate supplies
+    // allow:registry-table-inherits-object-prototype -- the decoded KeyUsage record, whose keys are the fixed KU_BITS names the schema declares; the certificate supplies none of them
     var out = {};
     _forEach(KU_BITS, function (nm, bit) {
       var byte = bit >> 3, mask = 0x80 >> (bit & 7);
@@ -822,7 +860,7 @@ function certExtensionDecoders(ns) {
   function authorityKeyIdentifier(buf) {
     var C = ns.prefix + "/bad-extension-value";
     var kids = seqChildren(buf, C, "AuthorityKeyIdentifier");
-    // allow:registry-table-inherits-object-prototype -- the decoded AuthorityKeyIdentifier record, read by the three field names the schema declares rather than by anything the certificate supplies
+    // allow:registry-table-inherits-object-prototype -- the decoded AuthorityKeyIdentifier record, read by the three field names the schema declares; the certificate supplies none of them
     var out = { keyIdentifier: null, authorityCertIssuer: null, authorityCertSerialNumber: null };
     var lastTag = -1;
     _forEach(kids, function (k) {
@@ -869,7 +907,7 @@ function certExtensionDecoders(ns) {
       if (dp.tagClass !== "universal" || dp.tagNumber !== _T.SEQUENCE || !dp.children) {
         throw ns.E(C, "DistributionPoint must be a SEQUENCE { distributionPoint?, reasons?, cRLIssuer? }");
       }
-      // allow:registry-table-inherits-object-prototype -- the decoded DistributionPoint record, read by the three field names the schema declares rather than by anything the certificate supplies
+      // allow:registry-table-inherits-object-prototype -- the decoded DistributionPoint record, read by the three field names the schema declares; the certificate supplies none of them
       var out = { distributionPoint: null, reasons: null, cRLIssuer: null };
       var lastTag = -1;
       _forEach(dp.children, function (f) {
@@ -1247,6 +1285,8 @@ module.exports = {
   distributionPointName: distributionPointName,
   issuingDistributionPoint: issuingDistributionPoint,
   keyUsageOf: keyUsageOf,
+  extKeyUsageOf: extKeyUsageOf,
+  assertsPurpose: assertsPurpose,
   generalizedTime: generalizedTime,
   utf8Text: utf8Text,
   rawNonEmptySequence: rawNonEmptySequence,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.6.51",
+  "version": "0.6.52",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:d9015ac6-f8a1-409f-9e1f-5ae1fc7491a1",
+  "serialNumber": "urn:uuid:5de9cc32-97b6-4f34-a868-7ad628091d11",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-09-07T06:27:34.397Z",
+    "timestamp": "2026-09-07T15:01:14.383Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.6.51",
+      "bom-ref": "@blamejs/pki@0.6.52",
       "type": "application",
       "name": "pki",
-      "version": "0.6.51",
+      "version": "0.6.52",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.6.51",
+      "purl": "pkg:npm/%40blamejs/pki@0.6.52",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.6.51",
+      "ref": "@blamejs/pki@0.6.52",
       "dependsOn": []
     }
   ]