@blamejs/pki 0.8.58 → 0.8.60

package/lib/attrcert-sign.js

@@ -24,6 +24,9 @@ var x509 = require("./schema-x509");
 var signScheme = require("./sign-scheme");
 var guard = require("./guard-all");
 var intrinsic = require("./guard-intrinsic");
+/** @internal The append every list here is built with: `push` stores at the index and a store
+ *  consults a setter inherited there, and these lists become the bytes that get signed. */
+var _push = intrinsic.append;
 /** @internal The promise a signature verdict is awaited through, built from the constructor captured at
  *  load. `Promise.resolve` builds from its RECEIVER, so reading the global binding at the call hands the
  *  construction to whatever that binding holds: one settling without awaiting its argument drops the
@@ -195,7 +198,7 @@ function _issuerSerialContent(is) {
   var parts = [_b.encodeGeneralNames(_gnList(is.issuer)), _b.serialInteger(is.serial)];
   if (is.issuerUID != null) {
     if (!Buffer.isBuffer(is.issuerUID)) throw _err("attrcert/bad-input", "baseCertificateID.issuerUID must be a Buffer");
-    parts.push(b.bitString(is.issuerUID, 0));
+    _push(parts,b.bitString(is.issuerUID, 0));
   }
   return Buffer.concat(parts);
 }
@@ -251,8 +254,8 @@ function _encodeRole(role) {
   _assertFields(role, KNOWN_ROLE_KEYS, "role");
   if (role.roleName == null) throw _err("attrcert/bad-input", "role must be an object with a roleName GeneralName");
   var parts = [];
-  if (role.roleAuthority != null) parts.push(_b.encodeGeneralNames(_gnList(role.roleAuthority), 0));
-  parts.push(b.explicit(1, _b.encodeGeneralName(role.roleName)));
+  if (role.roleAuthority != null) _push(parts,_b.encodeGeneralNames(_gnList(role.roleAuthority), 0));
+  _push(parts,b.explicit(1, _b.encodeGeneralName(role.roleName)));
   return b.sequence(parts);
 }
 function _encodeClearance(cl) {
@@ -269,11 +272,11 @@ function _encodeClearance(cl) {
       return pos;
     });
     var isDefault = positions.length === 1 && positions[0] === CLASSLIST_BIT.unclassified;
-    if (!isDefault) parts.push(b.namedBitString(positions));
+    if (!isDefault) _push(parts,b.namedBitString(positions));
   }
   if (cl.securityCategories != null) {
     if (!Array.isArray(cl.securityCategories) || !cl.securityCategories.length) throw _err("attrcert/bad-input", "clearance.securityCategories must be a non-empty array");
-    parts.push(b.set(guard.list.copyMap(cl.securityCategories, _encodeSecurityCategory)));
+    _push(parts,b.set(guard.list.copyMap(cl.securityCategories, _encodeSecurityCategory)));
   }
   return b.sequence(parts);
 }
@@ -291,8 +294,8 @@ function _encodeIetfAttrSyntax(ia) {
   _assertFields(ia, KNOWN_IETF_ATTR_KEYS, "IetfAttrSyntax");
   if (!Array.isArray(ia.values) || !ia.values.length) throw _err("attrcert/bad-input", "an IetfAttrSyntax attribute must be an object with a non-empty values array");
   var parts = [];
-  if (ia.policyAuthority != null) parts.push(_b.encodeGeneralNames(_gnList(ia.policyAuthority), 0));
-  parts.push(b.sequence(guard.list.copyMap(ia.values, function (v) {
+  if (ia.policyAuthority != null) _push(parts,_b.encodeGeneralNames(_gnList(ia.policyAuthority), 0));
+  _push(parts,b.sequence(guard.list.copyMap(ia.values, function (v) {
     if (v == null || typeof v !== "object") throw _err("attrcert/bad-input", "each IetfAttrSyntax value must be { octets }, { oid }, or { string }");
     _assertFields(v, KNOWN_IETF_ATTR_VALUE_KEYS, "IetfAttrSyntax value");
     if (v.octets != null) { if (!Buffer.isBuffer(v.octets)) throw _err("attrcert/bad-input", "IetfAttrSyntax octets must be a Buffer"); return b.octetString(v.octets); }
@@ -310,7 +313,7 @@ function _encodeSvceAuthInfo(sai, authInfoAllowed, label) {
   if (sai.authInfo != null) {
     if (!authInfoAllowed) throw _err("attrcert/bad-input", "accessIdentity must not carry authInfo (RFC 5755 sec. 4.4.2)");
     if (!Buffer.isBuffer(sai.authInfo)) throw _err("attrcert/bad-input", label + " authInfo must be a Buffer");
-    parts.push(b.octetString(sai.authInfo));
+    _push(parts,b.octetString(sai.authInfo));
   }
   return b.sequence(parts);
 }
@@ -349,11 +352,11 @@ function _encodeAAControls(aac) {
   var parts = [];
   if (aac.pathLenConstraint != null) {
     if (typeof aac.pathLenConstraint !== "number" || !Number.isInteger(aac.pathLenConstraint) || aac.pathLenConstraint < 0 || aac.pathLenConstraint > 0x7fffffff) throw _err("attrcert/bad-input", "aaControls.pathLenConstraint must be an integer in 0..2147483647 (RFC 5755 sec. 7.4)");
-    parts.push(b.integer(BigInt(aac.pathLenConstraint)));
+    _push(parts,b.integer(BigInt(aac.pathLenConstraint)));
   }
-  if (aac.permittedAttrs != null) parts.push(_attrSpec(aac.permittedAttrs, 0, "permittedAttrs"));
-  if (aac.excludedAttrs != null) parts.push(_attrSpec(aac.excludedAttrs, 1, "excludedAttrs"));
-  if (aac.permitUnSpecified === false) parts.push(b.boolean(false));
+  if (aac.permittedAttrs != null) _push(parts,_attrSpec(aac.permittedAttrs, 0, "permittedAttrs"));
+  if (aac.excludedAttrs != null) _push(parts,_attrSpec(aac.excludedAttrs, 1, "excludedAttrs"));
+  if (aac.permitUnSpecified === false) _push(parts,b.boolean(false));
   else if (aac.permitUnSpecified != null && aac.permitUnSpecified !== true) throw _err("attrcert/bad-input", "aaControls.permitUnSpecified must be a boolean");
   return b.sequence(parts);
 }
@@ -388,7 +391,7 @@ function _buildAttributes(attrSpec) {
     if (seen[type]) throw _err("attrcert/duplicate-attribute", "duplicate " + (oid.name(type) || type) + " attribute (RFC 5755 sec. 4.2.7)");
     seen[type] = true;
     _assertAttributeProfile(type, attrcert.validateAttributeValue(type, valueTlv));
-    attrs.push(b.sequence([b.oid(type), b.set([valueTlv])]));
+    _push(attrs,b.sequence([b.oid(type), b.set([valueTlv])]));
   }
   if (Array.isArray(attrSpec)) {
     /** @internal Through the captured walk, never the caller's own `forEach`: these attributes are the
@@ -409,7 +412,7 @@ function _buildAttributes(attrSpec) {
         catch (err) { if (err instanceof AttrCertError) throw err; throw _err("attrcert/bad-input", "pre-encoded " + (oid.name(at) || at) + " attribute value is malformed", err); }
         _assertAttributeProfile(at, decoded);
       });
-      attrs.push(b.raw(der));
+      _push(attrs,b.raw(der));
     });
     if (!attrs.length) throw _err("attrcert/bad-attributes", "attributes must carry at least one Attribute (RFC 5755 sec. 4.2.7)");
     return b.sequence(attrs);
@@ -442,7 +445,7 @@ function _emitNamedExtension(out, seen, k, val, ctx) {
   seen[eOid] = true;
   var valueDer = _extensionValue(k, val, ctx);
   _assertExtensionProfile(eOid, _decodeExtensionValue(eOid, valueDer), ctx);
-  out.push(_b.ext(eOid, meta.critical, valueDer));
+  _push(out,_b.ext(eOid, meta.critical, valueDer));
 }
 function _buildExtensions(extSpec, ctx) {
   if (extSpec == null) extSpec = {};
@@ -593,7 +596,7 @@ function _sign(spec, issuer, opts) {
     b.integer(1n), holderDer, issuerDer, scheme.sigAlgId,
     _b.serialInteger(spec.serialNumber), validityDer, attributesDer,
   ];
-  if (extsDer) acinfoChildren.push(extsDer);
+  if (extsDer) _push(acinfoChildren,extsDer);
   var acinfoDer = b.sequence(acinfoChildren);
 
   return signScheme.signOverTbs(scheme, issuer.key, acinfoDer, _signE).then(function (sig) {

package/lib/byte-writer.js

@@ -18,20 +18,58 @@
  * in a format module.
  */
 
+var intrinsic = require("./guard-intrinsic");
+/** @internal Every operation this writer decides a field's width, range or bytes with is bound at
+ *  load. Each one participates in what gets emitted: the integer tests decide whether a value fits
+ *  the field, the allocation decides how wide the field is, and the concatenation decides the byte
+ *  string a caller signs or sends. */
+var _isInteger = intrinsic.isInteger;
+var _isSafeInteger = intrinsic.isSafeInteger;
+var _bufferAlloc = intrinsic.bufferAlloc;
+var _isBuffer = intrinsic.isBuffer;
+var _bufferConcat = intrinsic.bufferConcat;
+var _BigInt = intrinsic.BigInt;
+var _taSet = intrinsic.typedArraySet;
+/** @internal The two writes that place an integer into its field, bound at load. A bound's own
+ *  `valueOf` runs inside the comparison the length is checked by, which is a window to replace a
+ *  method the write that follows would otherwise read off the prototype: measured, a vector declared
+ *  a length of 0 over a payload of two bytes that way. */
+var _writeUIntBE = intrinsic.uncurry(Buffer.prototype.writeUIntBE);
+var _writeBigUInt64BE = intrinsic.uncurry(Buffer.prototype.writeBigUInt64BE);
+
+/** @internal A real copy of the bytes, in this writer's own allocation. A slice of a view shares the
+ *  backing buffer, so a buffer that can be resized takes the slice out of bounds with it, and the
+ *  copy has to be taken before anything else in the call can run code. */
+function _copyOf(view) {
+  var n = intrinsic.sizeOf(view);
+  var out = _bufferAlloc(n);
+  if (n !== 0) _taSet(out, view, 0);
+  return out;
+}
+
 function ByteWriter(E, defaultCode) {
   this.parts = [];
   this.len = 0;
   this.E = E;
   this.defaultCode = defaultCode || "byte-writer/bad-value";
 }
-ByteWriter.prototype._push = function (buf) { this.parts.push(buf); this.len += buf.length; };
+/** @internal The piece is APPENDED by defining its index, not stored by `push`. A store walks the
+ *  prototype chain for a setter, so an accessor installed at an array index receives each piece as it
+ *  is added and can define something else in its place, and these pieces are the bytes this writer
+ *  emits. The length is accumulated from the buffer's own byte length rather than a `length`
+ *  property, so a view that overstates itself cannot make the declared length disagree with the
+ *  bytes. */
+ByteWriter.prototype._push = function (buf) {
+  intrinsic.append(this.parts, buf);
+  this.len += intrinsic.sizeOf(buf);
+};
 ByteWriter.prototype._uint = function (v, width, code) {
-  if (!Number.isInteger(width) || width < 1 || width > 4) throw new this.E(code || this.defaultCode, "an integer width must be 1..4, got " + width);
+  if (!_isInteger(width) || width < 1 || width > 4) throw new this.E(code || this.defaultCode, "an integer width must be 1..4, got " + width);
   var max = width === 4 ? 0xffffffff : (1 << (8 * width)) - 1;
-  if (typeof v !== "number" || !Number.isSafeInteger(v) || v < 0 || v > max) {
+  if (typeof v !== "number" || !_isSafeInteger(v) || v < 0 || v > max) {
     throw new this.E(code || this.defaultCode, "a uint" + (8 * width) + " must be an integer in 0.." + max + ", got " + v);
   }
-  var b = Buffer.alloc(width); b.writeUIntBE(v, 0, width); this._push(b);
+  var b = _bufferAlloc(width); _writeUIntBE(b, v, 0, width); this._push(b);
 };
 ByteWriter.prototype.u8 = function (v, code) { this._uint(v, 1, code); return this; };
 ByteWriter.prototype.u16 = function (v, code) { this._uint(v, 2, code); return this; };
@@ -40,25 +78,37 @@ ByteWriter.prototype.u32 = function (v, code) { this._uint(v, 4, code); return t
 ByteWriter.prototype.u64 = function (v, code) {
   var big;
   if (typeof v === "bigint") big = v;
-  else if (typeof v === "number" && Number.isSafeInteger(v) && v >= 0) big = BigInt(v);
+  else if (typeof v === "number" && _isSafeInteger(v) && v >= 0) big = _BigInt(v);
   else throw new this.E(code || this.defaultCode, "a uint64 must be a non-negative integer or BigInt, got " + v);
   if (big < 0n || big > 0xffffffffffffffffn) throw new this.E(code || this.defaultCode, "a uint64 must be in 0..2^64-1");
-  var b = Buffer.alloc(8); b.writeBigUInt64BE(big); this._push(b);
+  var b = _bufferAlloc(8); _writeBigUInt64BE(b, big); this._push(b);
   return this;
 };
 ByteWriter.prototype.bytes = function (buf, code) {
-  if (!Buffer.isBuffer(buf)) throw new this.E(code || this.defaultCode, "bytes() requires a Buffer");
+  if (!_isBuffer(buf)) throw new this.E(code || this.defaultCode, "bytes() requires a Buffer");
   this._push(buf); return this;
 };
 ByteWriter.prototype.vector = function (lenWidth, min, max, body, code) {
-  if (!Buffer.isBuffer(body)) throw new this.E(code || this.defaultCode, "vector() body must be a Buffer");
-  if (body.length < min) throw new this.E(code || this.defaultCode, "vector body " + body.length + " below minimum " + min);
-  if (max != null && body.length > max) throw new this.E(code || this.defaultCode, "vector body " + body.length + " above maximum " + max);
-  this._uint(body.length, lenWidth, code);
-  this._push(body);
+  if (!_isBuffer(body)) throw new this.E(code || this.defaultCode, "vector() body must be a Buffer");
+  /** @internal The body is COPIED before it is measured, and the copy is what gets written. The
+   *  bounds, the length prefix and the bytes then all describe one byte string that nothing else
+   *  holds. Measuring the caller's view instead left a window: a resizable backing buffer shrunk
+   *  between the measurement and the write (a `min` whose `valueOf` resizes it is enough) and the
+   *  vector declared two bytes over a payload of one. The bounds are converted to numbers up front
+   *  for the same reason, so a bound cannot run code in the middle of the comparison it is part of. */
+  var bytes = _copyOf(body);
+  var bodyLen = intrinsic.sizeOf(bytes);
+  var lo = intrinsic.Number(min);
+  if (!_isSafeInteger(lo) || lo < 0) throw new this.E(code || this.defaultCode, "a vector minimum must be a non-negative integer, got " + lo);
+  var hi = max == null ? null : intrinsic.Number(max);
+  if (hi !== null && (!_isSafeInteger(hi) || hi < lo)) throw new this.E(code || this.defaultCode, "a vector maximum must be an integer not below the minimum, got " + hi);
+  if (bodyLen < lo) throw new this.E(code || this.defaultCode, "vector body " + bodyLen + " below minimum " + lo);
+  if (hi !== null && bodyLen > hi) throw new this.E(code || this.defaultCode, "vector body " + bodyLen + " above maximum " + hi);
+  this._uint(bodyLen, lenWidth, code);
+  this._push(bytes);
   return this;
 };
 ByteWriter.prototype.length = function () { return this.len; };
-ByteWriter.prototype.build = function () { return Buffer.concat(this.parts, this.len); };
+ByteWriter.prototype.build = function () { return _bufferConcat(this.parts, this.len); };
 
 module.exports = ByteWriter;

package/lib/cbor-det.js

@@ -40,6 +40,12 @@ var constants = require("./constants");
 var frameworkError = require("./framework-error");
 var asn1 = require("./asn1-der");
 var guard = require("./guard-all");
+/** @internal The append every list in this module is built with. `push` STORES at the index, and a
+ *  store walks the prototype chain for a setter, so an accessor inherited at an array index receives
+ *  each element as it is appended and the index then reads back whatever its getter answers. The
+ *  decoded children below are what every C509 field is read out of, so a replaced element there is a
+ *  field this codec never decoded. */
+var _push = guard.list.append;
 
 var CborError = frameworkError.CborError;
 
@@ -141,7 +147,7 @@ function _decodeItem(buf, start, limit, depth, maxD, rules, state) {
     var cp = contentStart;
     for (var i = 0n; i < argument; i++) {
       var el = _decodeItem(buf, cp, limit, depth + 1, maxD, rules, state);
-      children.push(el.node);
+      _push(children, el.node);
       cp = el.end;
     }
     end = cp;
@@ -158,7 +164,7 @@ function _decodeItem(buf, start, limit, depth, maxD, rules, state) {
         if (cmp > 0) throw new CborError("cbor/unsorted-map-keys", "map keys are not in bytewise-ascending order");
         if (cmp === 0) throw new CborError("cbor/duplicate-map-key", "duplicate map key");
       }
-      children.push([k.node, v.node]);
+      _push(children, [k.node, v.node]);
     }
     end = mp;
   } else if (mt === 6) {
@@ -682,7 +688,7 @@ var build = Object.assign(Object.create(null), {
     enc = guard.list.sortedCopy(enc, function (a, b) { return guard.bytes.compare(a[0], b[0]); });
     for (var i = 1; i < enc.length; i++) { if (guard.bytes.compare(enc[i - 1][0], enc[i][0]) === 0) throw new CborError("cbor/duplicate-map-key", "build.map: duplicate map key"); }
     var flat = [_head(5, pairs.length, "build.map")];
-    enc.forEach(function (p) { flat.push(p[0], p[1]); });
+    enc.forEach(function (p) { _push(flat, p[0]); _push(flat, p[1]); });
     return _assertDecodes(Buffer.concat(flat), "build.map");
   },
   tag: function (tagNum, inner) { return _assertDecodes(Buffer.concat([_head(6, tagNum, "build.tag"), _cbItem(inner, "build.tag content")]), "build.tag"); },

package/lib/cmc-build.js

@@ -22,6 +22,9 @@ var key = require("./key");
 var _createPublicKey = nodeCrypto.createPublicKey;
 var guard = require("./guard-all");
 var intrinsic = require("./guard-intrinsic");
+/** @internal The append every list here is built with: `push` stores at the index and a store
+ *  consults a setter inherited there, and these lists become the controls a request carries. */
+var _push = intrinsic.append;
 var _hasOwn = intrinsic.hasOwn;
 var _isArray = intrinsic.isArray;
 var _isBuffer = intrinsic.isBuffer;
@@ -173,7 +176,10 @@ function fixedRequestId(req, index) {
     return "unknown field " + JSON.stringify(k) + " on request " + index +
       " -- a request names one of tcr / crm / orm, and optionally bodyPartID";
   });
-  var arms = ["tcr", "crm", "orm"].filter(function (k) { return req[k] != null; });
+  /** @internal `selectList`, not the live `filter`: the selection decides which request arm this
+   *  message carries, and `Array.prototype.filter` is both read off the prototype and specified to
+   *  build its result through the species constructor. */
+  var arms = intrinsic.selectList(["tcr", "crm", "orm"], function (k) { return req[k] != null; });
   if (arms.length !== 1) {
     throw E("cmc/bad-input",
       "each request names exactly one of tcr / crm / orm, got " + (arms.length ? arms.join(" + ") : "none") +
@@ -446,7 +452,7 @@ function _assertSecret(secret, what) {
 }
 
 function _ownSecret(buf, owned) {
-  owned.push(buf);
+  _push(owned,buf);
   return buf;
 }
 
@@ -801,15 +807,15 @@ async function _build(spec, signer, opts) {
 
   _assertNoDuplicateBinding(callerControls, spec);
   if (spec.transactionId != null) {
-    controls.push(encodeControl(OID_TRANSACTION_ID,
+    _push(controls,encodeControl(OID_TRANSACTION_ID,
       [b.integer(_asBigInt(spec.transactionId, "spec.transactionId"))], ids));
   }
   if (spec.senderNonce != null) {
-    controls.push(encodeControl(OID_SENDER_NONCE,
+    _push(controls,encodeControl(OID_SENDER_NONCE,
       [b.octetString(_der(spec.senderNonce, "spec.senderNonce"))], ids));
   }
   if (spec.dataReturn != null) {
-    controls.push(encodeControl(OID_DATA_RETURN,
+    _push(controls,encodeControl(OID_DATA_RETURN,
       [b.octetString(_der(spec.dataReturn, "spec.dataReturn"))], ids));
   }
 
@@ -836,8 +842,8 @@ async function _build(spec, signer, opts) {
     if (identity != null && typeof identity !== "string") {
       throw E("cmc/bad-input", "identityProof.identity is the UTF8String the Identification control carries");
     }
-    if (identity != null) controls.push(encodeControl(OID_IDENTIFICATION, [b.utf8(identity)], ids));
-    controls.push(encodeControl(OID_IDENTITY_PROOF_V2,
+    if (identity != null) _push(controls,encodeControl(OID_IDENTIFICATION, [b.utf8(identity)], ids));
+    _push(controls,encodeControl(OID_IDENTITY_PROOF_V2,
       [identityProofV2(spec.identityProof.secret, reqSequenceBytes, carriedIdentity)], ids));
   }
 
@@ -930,8 +936,8 @@ async function _build(spec, signer, opts) {
       throw E("cmc/bad-input", "popLinkRandomBytes must be a positive integer");
     }
     var R = nodeCrypto.randomBytes(rBytes);
-    controls.push(encodeControl(OID_POP_LINK_RANDOM, [b.octetString(R)], ids));
-    controls.push(encodeControl(O("id-cmc-popLinkWitnessV2"),
+    _push(controls,encodeControl(OID_POP_LINK_RANDOM, [b.octetString(R)], ids));
+    _push(controls,encodeControl(O("id-cmc-popLinkWitnessV2"),
       [popLinkWitnessV2(spec.popLink.secret, R)], ids));
   }
 
@@ -1013,7 +1019,7 @@ function _copySigners(signer, owned) {
     return c;
   }
   function _own(buf, isSecret) {
-    if (isSecret && owned) owned.push(buf);
+    if (isSecret && owned) _push(owned,buf);
     return buf;
   }
   return Array.isArray(signer) ? guard.list.copyMap(signer, one) : one(signer);

package/lib/cmp-build.js

@@ -29,6 +29,7 @@ var cmp = require("./schema-cmp");
 var crmf = require("./crmf-sign");
 var schemaCrmf = require("./schema-crmf");
 var intrinsic = require("./guard-intrinsic");
+var _strTrim = intrinsic.uncurry(String.prototype.trim);
 /** @internal The promise a signature self-check is awaited through, built from the constructor captured
  *  at load. `Promise.resolve` builds from its RECEIVER, so reading the global binding at the call hands
  *  the construction to whatever that binding holds, and one settling without awaiting its argument runs
@@ -55,7 +56,9 @@ var _bufferConcat = intrinsic.bufferConcat;
 var _map = intrinsic.map;
 var _keys = intrinsic.keys;
 var _forEach = intrinsic.forEach;
-var _push = intrinsic.push;
+/** @internal `append`, not a captured `push`: a store at an index walks the prototype chain for a
+ *  setter, so an accessor there takes the element being appended. `append` defines it. */
+var _push = intrinsic.append;
 var _stringify = intrinsic.stringify;
 var _bigInt = intrinsic.BigInt;
 var _Date = intrinsic.Date;
@@ -166,7 +169,7 @@ function _encodeInfoTypeAndValue(itav) {
   if (typeof itav.infoType !== "string" || O(itav.infoType) == null) throw _err("cmp/bad-name", "unknown infoType " + guard.text.showValue(itav.infoType));
   var children = [b.oid(O(itav.infoType))];
   var val = _encodeInfoValue(itav);
-  if (val != null) children.push(val);
+  if (val != null) _push(children,val);
   return b.sequence(children);
 }
 
@@ -237,16 +240,16 @@ function _encodeHeader(headerSpec, protectionAlgDer, pvno) {
   ];
   if (headerSpec.messageTime != null) {
     guard.time.assertEncodable(headerSpec.messageTime, _err, "cmp/bad-input", "header.messageTime");
-    children.push(b.explicit(0, b.generalizedTime(headerSpec.messageTime)));
+    _push(children,b.explicit(0, b.generalizedTime(headerSpec.messageTime)));
   }
-  if (protectionAlgDer != null) children.push(b.explicit(1, b.raw(protectionAlgDer)));
-  if (headerSpec.senderKID != null) children.push(b.explicit(2, _reqOctets(headerSpec.senderKID, "header.senderKID")));
-  if (headerSpec.recipKID != null) children.push(b.explicit(3, _reqOctets(headerSpec.recipKID, "header.recipKID")));
-  if (headerSpec.transactionID != null) children.push(b.explicit(4, _reqOctets(headerSpec.transactionID, "header.transactionID")));
-  if (headerSpec.senderNonce != null) children.push(b.explicit(5, _reqOctets(headerSpec.senderNonce, "header.senderNonce")));
-  if (headerSpec.recipNonce != null) children.push(b.explicit(6, _reqOctets(headerSpec.recipNonce, "header.recipNonce")));
-  if (headerSpec.freeText != null) children.push(b.explicit(7, _encodePkiFreeText(headerSpec.freeText, "cmp/bad-freetext", "header.freeText")));
-  if (headerSpec.generalInfo != null) children.push(b.explicit(8, _encodeGeneralInfo(headerSpec.generalInfo, "cmp/bad-general-info", "header.generalInfo")));
+  if (protectionAlgDer != null) _push(children,b.explicit(1, b.raw(protectionAlgDer)));
+  if (headerSpec.senderKID != null) _push(children,b.explicit(2, _reqOctets(headerSpec.senderKID, "header.senderKID")));
+  if (headerSpec.recipKID != null) _push(children,b.explicit(3, _reqOctets(headerSpec.recipKID, "header.recipKID")));
+  if (headerSpec.transactionID != null) _push(children,b.explicit(4, _reqOctets(headerSpec.transactionID, "header.transactionID")));
+  if (headerSpec.senderNonce != null) _push(children,b.explicit(5, _reqOctets(headerSpec.senderNonce, "header.senderNonce")));
+  if (headerSpec.recipNonce != null) _push(children,b.explicit(6, _reqOctets(headerSpec.recipNonce, "header.recipNonce")));
+  if (headerSpec.freeText != null) _push(children,b.explicit(7, _encodePkiFreeText(headerSpec.freeText, "cmp/bad-freetext", "header.freeText")));
+  if (headerSpec.generalInfo != null) _push(children,b.explicit(8, _encodeGeneralInfo(headerSpec.generalInfo, "cmp/bad-general-info", "header.generalInfo")));
   return b.sequence(children);
 }
 
@@ -266,8 +269,8 @@ function _encodePkiStatusInfo(si, code) {
   if (!si || typeof si !== "object" || Buffer.isBuffer(si)) throw _err(code, "a PKIStatusInfo must be an object { status, statusString?, failInfo? }");
   if (typeof si.status !== "number" || !Number.isInteger(si.status) || si.status < 0 || si.status > 6) throw _err(code, "statusInfo.status must be a PKIStatus 0..6 (RFC 9810 sec. 5.2.3)");
   var children = [b.integer(BigInt(si.status))];
-  if (si.statusString != null) children.push(_encodePkiFreeText(si.statusString, code, "statusInfo.statusString"));
-  if (si.failInfo != null) children.push(_encodeFailInfo(si.failInfo, code));
+  if (si.statusString != null) _push(children,_encodePkiFreeText(si.statusString, code, "statusInfo.statusString"));
+  if (si.failInfo != null) _push(children,_encodeFailInfo(si.failInfo, code));
   return b.sequence(children);
 }
 
@@ -277,10 +280,10 @@ function _encodeCertStatus(cs, state) {
     _reqOctets(cs.certHash, "certConf certHash"),
     b.integer(_reqIdInt(cs.certReqId, "cmp/bad-cert-status", "CertStatus certReqId")),
   ];
-  if (cs.statusInfo != null) children.push(_encodePkiStatusInfo(cs.statusInfo, "cmp/bad-cert-status"));
+  if (cs.statusInfo != null) _push(children,_encodePkiStatusInfo(cs.statusInfo, "cmp/bad-cert-status"));
   if (cs.hashAlg != null) {
     if (typeof cs.hashAlg !== "string" || !CERT_CONF_HASH_ALGS[cs.hashAlg]) throw _err("cmp/bad-name", "certConf hashAlg must be a hash algorithm (sha256 / sha384 / sha512 / sha3-256 / sha3-512 / sha1); got " + guard.text.showValue(cs.hashAlg));
-    children.push(b.explicit(0, _algIdNoParams(cs.hashAlg)));
+    _push(children,b.explicit(0, _algIdNoParams(cs.hashAlg)));
     state.usesCmp2021 = true;
   }
   return b.sequence(children);
@@ -316,7 +319,7 @@ function _encodeRevDetails(rd) {
     certDetails = b.raw(crmf.buildCertTemplate(rd.certDetails));
   }
   var children = [certDetails];
-  if (rd.crlEntryDetails != null) children.push(b.raw(_encodeCrlEntryDetails(rd.crlEntryDetails)));
+  if (rd.crlEntryDetails != null) _push(children,b.raw(_encodeCrlEntryDetails(rd.crlEntryDetails)));
   return b.sequence(children);
 }
 
@@ -418,12 +421,12 @@ function _encodeCertifiedKeyPair(ckp, state) {
   var children = [_encodeCertOrEncCert(ckp, state)];
   if (ckp.privateKey != null) {
     var pk = _b.reqDer(ckp.privateKey, "certifiedKeyPair.privateKey (a pre-encoded EncryptedKey DER)");
-    children.push(b.explicit(0, b.raw(pk)));
+    _push(children,b.explicit(0, b.raw(pk)));
     var pkNode;
     try { pkNode = asn1.decode(pk); } catch (e) { throw _err("cmp/bad-cert-response", "certifiedKeyPair.privateKey is not valid DER", e); }
     if (pkNode.tagClass === "context" && pkNode.tagNumber === 0) state.usesCmp2021 = true;
   }
-  if (ckp.publicationInfo != null) children.push(b.explicit(1, b.raw(_b.reqDer(ckp.publicationInfo, "certifiedKeyPair.publicationInfo (a pre-encoded DER)"))));
+  if (ckp.publicationInfo != null) _push(children,b.explicit(1, b.raw(_b.reqDer(ckp.publicationInfo, "certifiedKeyPair.publicationInfo (a pre-encoded DER)"))));
   return b.sequence(children);
 }
 
@@ -434,8 +437,8 @@ function _encodeCertResponse(cr, state) {
   if (hasCkp && cr.status.failInfo != null) throw _err("cmp/bad-cert-response", "a CertResponse must not carry both failInfo and certifiedKeyPair");
   if (hasCkp && cr.status.status !== 0 && cr.status.status !== 1) throw _err("cmp/bad-cert-response", "a CertResponse certifiedKeyPair is allowed only under a granting status (accepted / grantedWithMods)");
   var children = [b.integer(_reqIdInt(cr.certReqId, "cmp/bad-cert-response", "CertResponse certReqId")), _encodePkiStatusInfo(cr.status, "cmp/bad-cert-response")];
-  if (hasCkp) children.push(_encodeCertifiedKeyPair(cr.certifiedKeyPair, state));
-  if (cr.rspInfo != null) children.push(_reqOctets(cr.rspInfo, "CertResponse.rspInfo"));
+  if (hasCkp) _push(children,_encodeCertifiedKeyPair(cr.certifiedKeyPair, state));
+  if (cr.rspInfo != null) _push(children,_reqOctets(cr.rspInfo, "CertResponse.rspInfo"));
   return b.sequence(children);
 }
 
@@ -445,9 +448,9 @@ function _encodeCertRepMessage(spec, state, arm) {
   var children = [];
   if (spec.caPubs != null) {
     if (!Array.isArray(spec.caPubs) || !spec.caPubs.length) throw _err("cmp/bad-cert-rep", arm + ".caPubs must be a non-empty array of certificate DERs");
-    children.push(b.explicit(1, b.sequence(spec.caPubs.map(function (c) { return _certRaw(c, "cmp/bad-cert-rep", "a caPubs entry"); }))));
+    _push(children,b.explicit(1, b.sequence(spec.caPubs.map(function (c) { return _certRaw(c, "cmp/bad-cert-rep", "a caPubs entry"); }))));
   }
-  children.push(b.sequence(spec.response.map(function (cr) { return _encodeCertResponse(cr, state); })));
+  _push(children,b.sequence(spec.response.map(function (cr) { return _encodeCertResponse(cr, state); })));
   return b.sequence(children);
 }
 
@@ -467,11 +470,11 @@ function _encodeRevRepContent(spec) {
   var children = [b.sequence(spec.status.map(function (si) { return _encodePkiStatusInfo(si, "cmp/bad-rev-rep"); }))];
   if (spec.revCerts != null) {
     if (!Array.isArray(spec.revCerts) || !spec.revCerts.length) throw _err("cmp/bad-rev-rep", "rp.revCerts must be a non-empty array of CertId");
-    children.push(b.explicit(0, b.sequence(spec.revCerts.map(_encodeCertIdRr))));
+    _push(children,b.explicit(0, b.sequence(spec.revCerts.map(_encodeCertIdRr))));
   }
   if (spec.crls != null) {
     if (!Array.isArray(spec.crls) || !spec.crls.length) throw _err("cmp/bad-rev-rep", "rp.crls must be a non-empty array of CertificateList DERs");
-    children.push(b.explicit(1, b.sequence(spec.crls.map(function (c) {
+    _push(children,b.explicit(1, b.sequence(spec.crls.map(function (c) {
       var der = _b.reqDerSequence(c, "crls entry (a CertificateList DER)");
       try { crl.parse(der); }
       catch (e) { if (e instanceof CmpError) throw e; throw _err("cmp/bad-rev-rep", "a crls entry is not a valid CRL (CertificateList)", e); }
@@ -485,8 +488,8 @@ function _encodeErrorMsgContent(spec) {
   if (!spec || typeof spec !== "object" || Buffer.isBuffer(spec)) throw _err("cmp/bad-error", "error must be an object { pKIStatusInfo, errorCode?, errorDetails? }");
   if (spec.pKIStatusInfo == null) throw _err("cmp/bad-error", "error.pKIStatusInfo is required");
   var children = [_encodePkiStatusInfo(spec.pKIStatusInfo, "cmp/bad-error")];
-  if (spec.errorCode != null) children.push(b.integer(_reqIdInt(spec.errorCode, "cmp/bad-error", "error.errorCode")));
-  if (spec.errorDetails != null) children.push(_encodePkiFreeText(spec.errorDetails, "cmp/bad-error", "error.errorDetails"));
+  if (spec.errorCode != null) _push(children,b.integer(_reqIdInt(spec.errorCode, "cmp/bad-error", "error.errorCode")));
+  if (spec.errorDetails != null) _push(children,_encodePkiFreeText(spec.errorDetails, "cmp/bad-error", "error.errorDetails"));
   return b.sequence(children);
 }
 
@@ -496,7 +499,7 @@ function _encodePollRepContent(list) {
     if (!pr || typeof pr !== "object" || Buffer.isBuffer(pr)) throw _err("cmp/bad-poll-rep", "each pollRep entry must be an object");
     if (typeof pr.checkAfter !== "number" || !Number.isInteger(pr.checkAfter) || pr.checkAfter < 0 || pr.checkAfter > 0x7fffffff) throw _err("cmp/bad-poll-rep", "pollRep checkAfter must be a non-negative uint31 delay in seconds (RFC 9810 sec. 5.3.22)");
     var kids = [b.integer(_reqIdInt(pr.certReqId, "cmp/bad-poll-rep", "pollRep certReqId")), b.integer(BigInt(pr.checkAfter))];
-    if (pr.reason != null) kids.push(_encodePkiFreeText(pr.reason, "cmp/bad-poll-rep", "pollRep reason"));
+    if (pr.reason != null) _push(kids,_encodePkiFreeText(pr.reason, "cmp/bad-poll-rep", "pollRep reason"));
     return b.sequence(kids);
   }));
 }
@@ -505,14 +508,14 @@ function _encodeKeyRecRepContent(spec, state) {
   if (!spec || typeof spec !== "object" || Buffer.isBuffer(spec)) throw _err("cmp/bad-key-rec-rep", "krp must be an object { status, newSigCert?, caCerts?, keyPairHist? }");
   if (spec.status == null) throw _err("cmp/bad-key-rec-rep", "krp.status is required");
   var children = [_encodePkiStatusInfo(spec.status, "cmp/bad-key-rec-rep")];
-  if (spec.newSigCert != null) children.push(b.explicit(0, _certRaw(spec.newSigCert, "cmp/bad-key-rec-rep", "krp.newSigCert")));
+  if (spec.newSigCert != null) _push(children,b.explicit(0, _certRaw(spec.newSigCert, "cmp/bad-key-rec-rep", "krp.newSigCert")));
   if (spec.caCerts != null) {
     if (!Array.isArray(spec.caCerts) || !spec.caCerts.length) throw _err("cmp/bad-key-rec-rep", "krp.caCerts must be a non-empty array of certificate DERs");
-    children.push(b.explicit(1, b.sequence(spec.caCerts.map(function (c) { return _certRaw(c, "cmp/bad-key-rec-rep", "a krp.caCerts entry"); }))));
+    _push(children,b.explicit(1, b.sequence(spec.caCerts.map(function (c) { return _certRaw(c, "cmp/bad-key-rec-rep", "a krp.caCerts entry"); }))));
   }
   if (spec.keyPairHist != null) {
     if (!Array.isArray(spec.keyPairHist) || !spec.keyPairHist.length) throw _err("cmp/bad-key-rec-rep", "krp.keyPairHist must be a non-empty array of CertifiedKeyPair");
-    children.push(b.explicit(2, b.sequence(spec.keyPairHist.map(function (ckp) { return _encodeCertifiedKeyPair(ckp, state); }))));
+    _push(children,b.explicit(2, b.sequence(spec.keyPairHist.map(function (ckp) { return _encodeCertifiedKeyPair(ckp, state); }))));
   }
   return b.sequence(children);
 }
@@ -890,7 +893,7 @@ async function _build(message, opts) {
   var protectionBits = await prot.computeBits(protectedPartDer);
   var msgChildren = [headerTLV, bodyTLV, b.explicit(0, protectionBits)];
   var extraCertsDers = _collectExtraCerts(opts, prot.certDer);
-  if (extraCertsDers.length) msgChildren.push(b.explicit(1, b.sequence(extraCertsDers)));
+  if (extraCertsDers.length) _push(msgChildren,b.explicit(1, b.sequence(extraCertsDers)));
   var der = b.sequence(msgChildren);
 
   cmp.parse(der);
@@ -904,14 +907,14 @@ async function _build(message, opts) {
 
 function _collectExtraCerts(opts, protCertDer) {
   var out = [];
-  if (protCertDer != null) out.push(b.raw(protCertDer));
+  if (protCertDer != null) _push(out,b.raw(protCertDer));
   if (opts.extraCerts != null) {
     if (!Array.isArray(opts.extraCerts)) throw _err("cmp/bad-extra-certs", "opts.extraCerts must be an array of certificate DERs");
     opts.extraCerts.forEach(function (c) {
       var der = _b.reqDerSequence(c, "extraCerts entry (a Certificate DER)");
       try { x509.parse(der); }
       catch (e) { if (e instanceof CmpError) throw e; throw _err("cmp/bad-extra-certs", "an extraCerts entry is not a valid X.509 certificate", e); }
-      out.push(b.raw(der));
+      _push(out,b.raw(der));
     });
   }
   return out;
@@ -1012,7 +1015,15 @@ function _tlsForTransfer(opts) {
   return guard.identifier.pickSettings(opts.tls, TLS_SETTINGS);
 }
 
-function _ctypeToken(headers) { return String((headers || {})["content-type"] || "").split(";")[0].trim().toLowerCase(); }
+/** @internal The media type is read through the captured operations, and on the delimiter CHARACTER
+ *  rather than through `split`, which hard rule 11 bans in lib/ because the separator's own
+ *  `Symbol.split` is part of that operation. The token decides which parser a response body is
+ *  handed to. */
+function _ctypeToken(headers) {
+  var raw = intrinsic.String((headers || {})["content-type"] || "");
+  var parts = intrinsic.splitChar(raw, 59);
+  return intrinsic.toLowerCase(_strTrim(parts.length ? parts[0] : ""));
+}
 function _isPkixcmp(headers) { var t = _ctypeToken(headers); return t === PKIXCMP || t === PKIXCMP_POLL; }
 
 /** @internal The sentinel is added at the one exit rather than at each `return`, so a branch added