@blamejs/pki 0.7.38 → 0.7.39

package/CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to `@blamejs/pki` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## v0.7.39 — 2026-09-12
+
+An OCSP CertID's issuer hashes are held to the length of the digest they name.
+
+### Changed
+
+- pki.schema.ocsp.parseRequest and parseResponse refuse a CertID whose issuerNameHash or issuerKeyHash is not the length of the digest its hashAlgorithm names (ocsp/bad-cert-id, RFC 6960 sec. 4.1.1), for SHA-1, SHA-256, SHA-384, SHA-512, SHA3-256 and SHA3-512; a CertID under a digest this build does not know is read as given. pki.ocsp.verify and pki.ocsp.verifyRequest, which parse first, report such a request or response as malformed instead of comparing a hash that could never match.
+- The digest output lengths live in pki.constants.NAMES.DIGEST_OCTETS, read by the OCSP parser and by pki.tsp.sign and pki.tsp.verify for the messageImprint length check they already made.
+
 ## v0.7.38 — 2026-09-12
 
 pki.lint.certificate grades six RFC 5280 rules its parser read past, and the parser surfaces the unique identifiers.

package/lib/constants.js

@@ -238,6 +238,11 @@ var NAMES = Object.assign(Object.create(null), {
     "SLH-DSA-SHA2-128s": "SLH-DSA-SHA2-128s", "SLH-DSA-SHA2-128f": "SLH-DSA-SHA2-128f",
     "SLH-DSA-SHA2-192s": "SLH-DSA-SHA2-192s", "SLH-DSA-SHA2-256s": "SLH-DSA-SHA2-256s",
   },
+  /** @internal The output length in octets of each fixed-length digest, by the OID registry's name
+   * (FIPS 180-4, FIPS 202). A structure that carries "the hash of X under algorithm A" is held to
+   * this length: an OCSP CertID's issuer hashes, a timestamp's messageImprint. The XOFs (SHAKE) have
+   * no single length and are absent. */
+  DIGEST_OCTETS: { sha1: 20, sha256: 32, sha384: 48, sha512: 64, "sha3-256": 32, "sha3-512": 64 },
 });
 
 /** @internal Each inner table is looked up by a name a certificate supplies, so it answers from

package/lib/schema-ocsp.js

@@ -183,9 +183,19 @@ var CERT_ID = schema.seq([
   schema.field("serialNumber", schema.integerLeaf()),
 ], {
   assert: "sequence", arity: { exact: 4 }, code: "ocsp/bad-cert-id", what: "CertID",
+  /** @internal RFC 6960 sec. 4.1.1: issuerNameHash and issuerKeyHash are the hashes of the issuer's
+   *  name and key "using the hash algorithm specified in hashAlgorithm", so each is that digest's
+   *  length; a hash of any other length names no certificate. A digest this build does not know is
+   *  read as given, since its length is not known here. */
   build: function (m) {
+    var hashAlgorithm = m.fields.hashAlgorithm.value.result;
+    var want = constants.NAMES.DIGEST_OCTETS[hashAlgorithm.name];
+    if (want !== undefined) {
+      if (m.fields.issuerNameHash.value.length !== want) throw NS.E("ocsp/bad-cert-id", "CertID issuerNameHash is " + m.fields.issuerNameHash.value.length + " octets, not the " + want + " a " + hashAlgorithm.name + " digest is (RFC 6960 sec. 4.1.1)");
+      if (m.fields.issuerKeyHash.value.length !== want) throw NS.E("ocsp/bad-cert-id", "CertID issuerKeyHash is " + m.fields.issuerKeyHash.value.length + " octets, not the " + want + " a " + hashAlgorithm.name + " digest is (RFC 6960 sec. 4.1.1)");
+    }
     return {
-      hashAlgorithm: m.fields.hashAlgorithm.value.result,
+      hashAlgorithm: hashAlgorithm,
       issuerNameHash: m.fields.issuerNameHash.value,
       issuerKeyHash: m.fields.issuerKeyHash.value,
       serialNumber: m.fields.serialNumber.value,

package/lib/tsp-sign.js

@@ -31,6 +31,7 @@ var frameworkError = require("./framework-error");
 
 var pkix = require("./schema-pkix");
 var pkiBuild = require("./pki-build");
+var constants = require("./constants");
 var TspError = frameworkError.TspError;
 var _NS = pkix.makeNS("tsp", TspError, oid);
 var b = asn1.build;
@@ -48,7 +49,7 @@ var _b = pkiBuild.makeBuilder({
 });
 
 var NODE_DIGEST = intrinsic.assign(intrinsic.create(null), { sha256: "sha256", sha384: "sha384", sha512: "sha512" });
-var HASH_LEN = intrinsic.assign(intrinsic.create(null), { sha256: 32, sha384: 48, sha512: 64 });
+var HASH_LEN = constants.NAMES.DIGEST_OCTETS;
 
 var _REVOCATION_RANK = intrinsic.assign(intrinsic.create(null), { "false": 0, "undetermined": 1, "waived": 2, "determined": 3 });
 function _rankRevocation(v) {
@@ -422,7 +423,7 @@ function parseResponse(input) { return schemaTsp.parse(input); }
 
 
 var _VERIFY_DIGEST = intrinsic.assign(intrinsic.create(null), { sha256: "sha256", sha384: "sha384", sha512: "sha512", sha1: "sha1" });
-var _VERIFY_DIGEST_LEN = intrinsic.assign(intrinsic.create(null), { sha1: 20, sha256: 32, sha384: 48, sha512: 64 });
+var _VERIFY_DIGEST_LEN = constants.NAMES.DIGEST_OCTETS;
 var _BIND_DIGEST = intrinsic.assign(intrinsic.create(null), { sha256: "sha256", sha384: "sha384", sha512: "sha512" });
 
 function _imprintMatches(mi, data) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.7.38",
+  "version": "0.7.39",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:c822cb0e-bdf1-4b76-ba2a-51824bba609d",
+  "serialNumber": "urn:uuid:5b3f8b70-36de-4855-8e1e-c6d22b99d982",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-09-12T14:08:23.734Z",
+    "timestamp": "2026-09-12T14:40:25.102Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.7.38",
+      "bom-ref": "@blamejs/pki@0.7.39",
       "type": "application",
       "name": "pki",
-      "version": "0.7.38",
+      "version": "0.7.39",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.7.38",
+      "purl": "pkg:npm/%40blamejs/pki@0.7.39",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.7.38",
+      "ref": "@blamejs/pki@0.7.39",
       "dependsOn": []
     }
   ]