@blamejs/pki 0.6.53 → 0.6.55

package/lib/oid.js

@@ -192,6 +192,13 @@ var FAMILIES = Object.assign(Object.create(null), {
   entrustAlg: { base: [1, 2, 840, 113533, 7, 66], of: {
     passwordBasedMac: 13, kemBasedMac: 16, dhBasedMac: 30 } },
 
+  /** @internal ANSI X9.42 (RFC 3279 sec. 2.3.3): the SubjectPublicKeyInfo algorithm an X.509
+   * Diffie-Hellman certificate names, whose parameters are DomainParameters rather than the PKCS#3
+   * DHParameter that pkcs3 below names. */
+  ansiX942: { base: [1, 2, 840, 10046, 2], of: { dhpublicnumber: 1 } },
+
+  pkcs3: { base: [1, 2, 840, 113549, 1, 3], of: { dhKeyAgreement: 1 } },
+
   pkcs12BagTypes: { base: [1, 2, 840, 113549, 1, 12, 10, 1], of: {
     keyBag: 1, pkcs8ShroudedKeyBag: 2, certBag: 3, crlBag: 4, secretBag: 5, safeContentsBag: 6 } },
 
@@ -226,6 +233,7 @@ var FAMILIES = Object.assign(Object.create(null), {
 
   pkixAlg: { base: [1, 3, 6, 1, 5, 5, 7, 6], of: {
     "id-alg-noSignature": 2,
+    "id-dhPop-static-HMAC-SHA1": 3, "id-alg-dhPOP": 4,
     "id-RSASSA-PSS-SHAKE128": 30, "id-RSASSA-PSS-SHAKE256": 31,
     "id-alg-xmss-hashsig": 34, "id-alg-xmssmt-hashsig": 35,
     "id-MLDSA44-RSA2048-PSS-SHA256": 37, "id-MLDSA44-RSA2048-PKCS15-SHA256": 38,

package/lib/schema-pkix.js

@@ -182,7 +182,22 @@ function pemDecodeLenient(text, label) {
   return _bufferFrom(_keepBase64(_strSlice(text, bodyStart, ei)), "base64");
 }
 
+/** @internal Every refusal below is built from opts, so opts is checked before the first one can be
+ * reached. A caller that misspells a key otherwise gets a working accept path and a set of refusal
+ * paths that throw `undefined is not a constructor`: the input is still rejected, but as an untyped
+ * runtime error carrying no reason, and the label check silently passes everything. */
+function _requireCoerceOpts(opts) {
+  if (!opts || typeof opts !== "object") throw new TypeError("coerceToDer requires an options object");
+  if (typeof opts.PemError !== "function") throw new TypeError("coerceToDer requires opts.PemError, an error constructor");
+  if (typeof opts.ErrorClass !== "function") throw new TypeError("coerceToDer requires opts.ErrorClass, an error constructor");
+  if (typeof opts.prefix !== "string" || opts.prefix === "") throw new TypeError("coerceToDer requires opts.prefix, a non-empty error-code prefix");
+  if (!(opts.pemLabel === null || typeof opts.pemLabel === "string")) {
+    throw new TypeError("coerceToDer requires opts.pemLabel, a PEM label to enforce or null to accept any");
+  }
+}
+
 function coerceToDer(input, opts) {
+  _requireCoerceOpts(opts);
   if (typeof input === "string") return pemDecode(input, opts.pemLabel, opts.PemError);
   if (guard.bytes.isByteSource(input)) {
     var buf = guard.bytes.source(input, opts.ErrorClass, opts.prefix + "/bad-input", "parse");

package/lib/sigstore.js

@@ -42,6 +42,15 @@ var C = constants;
 var SigstoreError = frameworkError.SigstoreError;
 function _err(code, message, cause) { return new SigstoreError(code, message, cause); }
 
+/** @internal Whether a oneof arm is PRESENT, which is not the same as whether it is truthy. A bundle
+ * setting an arm to false or to an empty string has set it: reading presence as truthiness lets a
+ * second arm sit beside the one being read, which is the state the oneof rule exists to refuse. Own
+ * properties only, so a polluted prototype cannot conjure an arm the bundle does not carry. */
+function _armPresent(obj, name) {
+  return !!obj && typeof obj === "object" &&
+    Object.prototype.hasOwnProperty.call(obj, name) && obj[name] !== undefined && obj[name] !== null;
+}
+
 var JSON_MAX = C.LIMITS.JSON_MAX_BYTES;
 var SP = Buffer.from(" ", "ascii");
 var DSSEV1 = Buffer.from("DSSEv1", "ascii");
@@ -170,7 +179,24 @@ function parseBundle(input) {
   if (!obj.verificationMaterial || typeof obj.verificationMaterial !== "object") {
     throw _err("sigstore/bad-bundle", "bundle is missing verificationMaterial");
   }
-  if (obj.messageSignature && !obj.dsseEnvelope) {
+  /** @internal The verification material's certificate is a oneof of the same kind. Both arms set
+   * draws the leaf from one and the chain from the other, so the certificate whose key is checked and
+   * the certificates it is checked through come from different statements about the same signer. */
+  var vmArms = 0;
+  if (_armPresent(obj.verificationMaterial, "certificate")) vmArms++;
+  if (_armPresent(obj.verificationMaterial, "x509CertificateChain")) vmArms++;
+  if (_armPresent(obj.verificationMaterial, "publicKey")) vmArms++;
+  if (vmArms > 1) {
+    throw _err("sigstore/bad-bundle", "verificationMaterial carries more than one of certificate, x509CertificateChain and publicKey; it is a oneof and exactly one arm may be present");
+  }
+  /** @internal The bundle's content is a protobuf oneof, so a bundle setting both arms is malformed
+   * and is refused rather than read as whichever arm this build happens to support: verifying the
+   * envelope and passing over the other arm reports a verdict that says nothing about content the
+   * bundle carries. The two refusals are separate because a caller can act on one and not the other. */
+  if (_armPresent(obj, "messageSignature") && _armPresent(obj, "dsseEnvelope")) {
+    throw _err("sigstore/bad-bundle", "bundle carries both dsse_envelope and message_signature; the bundle content is a oneof and exactly one arm may be present");
+  }
+  if (_armPresent(obj, "messageSignature")) {
     throw _err("sigstore/unsupported-content", "a message_signature bundle is not supported (only dsse_envelope)");
   }
   if (!obj.dsseEnvelope || typeof obj.dsseEnvelope !== "object") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.6.53",
+  "version": "0.6.55",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:258eb315-4dba-4e0f-8600-313c47a1a144",
+  "serialNumber": "urn:uuid:03ece622-aaca-4a54-b858-4ae7bbb58893",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-09-07T16:58:48.291Z",
+    "timestamp": "2026-09-08T07:28:55.626Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.6.53",
+      "bom-ref": "@blamejs/pki@0.6.55",
       "type": "application",
       "name": "pki",
-      "version": "0.6.53",
+      "version": "0.6.55",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.6.53",
+      "purl": "pkg:npm/%40blamejs/pki@0.6.55",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.6.53",
+      "ref": "@blamejs/pki@0.6.55",
       "dependsOn": []
     }
   ]