@credo-ts/core 0.5.11 → 0.5.12-alpha-20240927180637

package/build/modules/vc/W3cCredentialsModule.js

@@ -37,6 +37,12 @@ class W3cCredentialsModule {
             ],
             keyTypes: [crypto_1.KeyType.Ed25519],
         });
+        dependencyManager.registerInstance(SignatureSuiteRegistry_1.SignatureSuiteToken, {
+            suiteClass: signature_suites_1.Ed25519Signature2020,
+            proofType: 'Ed25519Signature2020',
+            verificationMethodTypes: [dids_1.VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2020],
+            keyTypes: [crypto_1.KeyType.Ed25519],
+        });
     }
 }
 exports.W3cCredentialsModule = W3cCredentialsModule;

package/build/modules/vc/W3cCredentialsModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"W3cCredentialsModule.js","sourceRoot":"","sources":["../../../src/modules/vc/W3cCredentialsModule.ts"],"names":[],"mappings":";;;AAGA,yCAAsC;AACtC,kCAGgB;AAEhB,iEAA6D;AAC7D,2DAAuD;AACvD,6EAAyE;AACzE,oFAAqG;AACrG,4FAAwF;AACxF,wEAAwE;AACxE,qCAAkD;AAClD,kFAA8E;AAE9E;;GAEG;AACH,MAAa,oBAAoB;IAI/B,YAAmB,MAA0C;QAF7C,QAAG,GAAG,qCAAiB,CAAA;QAGrC,IAAI,CAAC,MAAM,GAAG,IAAI,uDAA0B,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC;IAEM,QAAQ,CAAC,iBAAoC;QAClD,iBAAiB,CAAC,iBAAiB,CAAC,2CAAoB,CAAC,CAAA;QACzD,iBAAiB,CAAC,iBAAiB,CAAC,gCAAuB,CAAC,CAAA;QAC5D,iBAAiB,CAAC,iBAAiB,CAAC,uDAA0B,CAAC,CAAA;QAC/D,iBAAiB,CAAC,iBAAiB,CAAC,iDAAuB,CAAC,CAAA;QAE5D,iBAAiB,CAAC,iBAAiB,CAAC,+CAAsB,CAAC,CAAA;QAE3D,sBAAsB;QACtB,iBAAiB,CAAC,gBAAgB,CAAC,uDAA0B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAE3E,0CAA0C;QAC1C,iBAAiB,CAAC,gBAAgB,CAAC,4CAAmB,EAAE;YACtD,UAAU,EAAE,uCAAoB;YAChC,SAAS,EAAE,sBAAsB;YACjC,uBAAuB,EAAE;gBACvB,6DAAsD;gBACtD,6DAAsD;aACvD;YACD,QAAQ,EAAE,CAAC,gBAAO,CAAC,OAAO,CAAC;SAC5B,CAAC,CAAA;IACJ,CAAC;CACF;AA9BD,oDA8BC"}
+{"version":3,"file":"W3cCredentialsModule.js","sourceRoot":"","sources":["../../../src/modules/vc/W3cCredentialsModule.ts"],"names":[],"mappings":";;;AAGA,yCAAsC;AACtC,kCAGgB;AAEhB,iEAA6D;AAC7D,2DAAuD;AACvD,6EAAyE;AACzE,oFAAqG;AACrG,4FAAwF;AACxF,wEAA8F;AAC9F,qCAAkD;AAClD,kFAA8E;AAE9E;;GAEG;AACH,MAAa,oBAAoB;IAI/B,YAAmB,MAA0C;QAF7C,QAAG,GAAG,qCAAiB,CAAA;QAGrC,IAAI,CAAC,MAAM,GAAG,IAAI,uDAA0B,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC;IAEM,QAAQ,CAAC,iBAAoC;QAClD,iBAAiB,CAAC,iBAAiB,CAAC,2CAAoB,CAAC,CAAA;QACzD,iBAAiB,CAAC,iBAAiB,CAAC,gCAAuB,CAAC,CAAA;QAC5D,iBAAiB,CAAC,iBAAiB,CAAC,uDAA0B,CAAC,CAAA;QAC/D,iBAAiB,CAAC,iBAAiB,CAAC,iDAAuB,CAAC,CAAA;QAE5D,iBAAiB,CAAC,iBAAiB,CAAC,+CAAsB,CAAC,CAAA;QAE3D,sBAAsB;QACtB,iBAAiB,CAAC,gBAAgB,CAAC,uDAA0B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAE3E,0CAA0C;QAC1C,iBAAiB,CAAC,gBAAgB,CAAC,4CAAmB,EAAE;YACtD,UAAU,EAAE,uCAAoB;YAChC,SAAS,EAAE,sBAAsB;YACjC,uBAAuB,EAAE;gBACvB,6DAAsD;gBACtD,6DAAsD;aACvD;YACD,QAAQ,EAAE,CAAC,gBAAO,CAAC,OAAO,CAAC;SAC5B,CAAC,CAAA;QACF,iBAAiB,CAAC,gBAAgB,CAAC,4CAAmB,EAAE;YACtD,UAAU,EAAE,uCAAoB;YAChC,SAAS,EAAE,sBAAsB;YACjC,uBAAuB,EAAE,CAAC,6DAAsD,CAAC;YACjF,QAAQ,EAAE,CAAC,gBAAO,CAAC,OAAO,CAAC;SAC5B,CAAC,CAAA;IACJ,CAAC;CACF;AApCD,oDAoCC"}

package/build/modules/vc/data-integrity/signature-suites/ed25519/Ed25519Signature2020.d.ts

@@ -0,0 +1,106 @@
+import type { DocumentLoader, JsonLdDoc, Proof, VerificationMethod } from '../../jsonldUtil';
+import type { JwsLinkedDataSignatureOptions } from '../JwsLinkedDataSignature';
+import { JwsLinkedDataSignature } from '../JwsLinkedDataSignature';
+type Ed25519Signature2020Options = Pick<JwsLinkedDataSignatureOptions, 'key' | 'proof' | 'date' | 'useNativeCanonize' | 'LDKeyClass'>;
+export declare class Ed25519Signature2020 extends JwsLinkedDataSignature {
+    static CONTEXT_URL: string;
+    static CONTEXT: any;
+    /**
+     * @param {object} options - Options hashmap.
+     *
+     * Either a `key` OR at least one of `signer`/`verifier` is required.
+     *
+     * @param {object} [options.key] - An optional key object (containing an
+     *   `id` property, and either `signer` or `verifier`, depending on the
+     *   intended operation. Useful for when the application is managing keys
+     *   itself (when using a KMS, you never have access to the private key,
+     *   and so should use the `signer` param instead).
+     * @param {Function} [options.signer] - Signer function that returns an
+     *   object with an async sign() method. This is useful when interfacing
+     *   with a KMS (since you don't get access to the private key and its
+     *   `signer()`, the KMS client gives you only the signer function to use).
+     * @param {Function} [options.verifier] - Verifier function that returns
+     *   an object with an async `verify()` method. Useful when working with a
+     *   KMS-provided verifier function.
+     *
+     * Advanced optional parameters and overrides.
+     *
+     * @param {object} [options.proof] - A JSON-LD document with options to use
+     *   for the `proof` node. Any other custom fields can be provided here
+     *   using a context different from security-v2).
+     * @param {string|Date} [options.date] - Signing date to use if not passed.
+     * @param {boolean} [options.useNativeCanonize] - Whether to use a native
+     *   canonize algorithm.
+     */
+    constructor(options: Ed25519Signature2020Options);
+    assertVerificationMethod(document: JsonLdDoc): Promise<void>;
+    getVerificationMethod(options: {
+        proof: Proof;
+        documentLoader?: DocumentLoader;
+    }): Promise<any>;
+    /**
+     * Ensures the document to be signed contains the required signature suite
+     * specific `@context`, by either adding it (if `addSuiteContext` is true),
+     * or throwing an error if it's missing.
+     *
+     * @override
+     *
+     * @param {object} options - Options hashmap.
+     * @param {object} options.document - JSON-LD document to be signed.
+     * @param {boolean} options.addSuiteContext - Add suite context?
+     */
+    ensureSuiteContext(options: {
+        document: JsonLdDoc;
+        addSuiteContext: boolean;
+    }): void;
+    /**
+     * Checks whether a given proof exists in the document.
+     *
+     * @override
+     *
+     * @param {object} options - Options hashmap.
+     * @param {object} options.proof - A proof.
+     * @param {object} options.document - A JSON-LD document.
+     * @param {object} options.purpose - A jsonld-signatures ProofPurpose
+     *  instance (e.g. AssertionProofPurpose, AuthenticationProofPurpose, etc).
+     * @param {Function} options.documentLoader  - A secure document loader (it is
+     *   recommended to use one that provides static known documents, instead of
+     *   fetching from the web) for returning contexts, controller documents,
+     *   keys, and other relevant URLs needed for the proof.
+     *
+     * @returns {Promise<boolean>} Whether a match for the proof was found.
+     */
+    matchProof(options: {
+        proof: Proof;
+        document: VerificationMethod;
+        purpose: any;
+        documentLoader?: DocumentLoader;
+    }): Promise<boolean>;
+    /**
+     * @param options - Options hashmap.
+     * @param options.verifyData - The data to sign.
+     * @param options.proof - A JSON-LD document with options to use
+     *   for the `proof` node. Any other custom fields can be provided here
+     *   using a context different from `security-v2`.
+     *
+     * @returns The proof containing the signature value.
+     */
+    sign(options: {
+        verifyData: Uint8Array;
+        proof: Proof;
+    }): Promise<Proof>;
+    /**
+     * @param options - Options hashmap.
+     * @param options.verifyData - The data to verify.
+     * @param options.verificationMethod - A verification method.
+     * @param options.proof - The proof to be verified.
+     *
+     * @returns Resolves with the verification result.
+     */
+    verifySignature(options: {
+        verifyData: Uint8Array;
+        verificationMethod: VerificationMethod;
+        proof: Proof;
+    }): Promise<any>;
+}
+export {};

package/build/modules/vc/data-integrity/signature-suites/ed25519/Ed25519Signature2020.js

@@ -0,0 +1,196 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Ed25519Signature2020 = void 0;
+const crypto_1 = require("../../../../../crypto");
+const utils_1 = require("../../../../../utils");
+const constants_1 = require("../../../constants");
+const jsonldUtil_1 = require("../../jsonldUtil");
+const jsonld_1 = __importDefault(require("../../libraries/jsonld"));
+const JwsLinkedDataSignature_1 = require("../JwsLinkedDataSignature");
+const constants_2 = require("./constants");
+const context2020_1 = require("./context2020");
+class Ed25519Signature2020 extends JwsLinkedDataSignature_1.JwsLinkedDataSignature {
+    /**
+     * @param {object} options - Options hashmap.
+     *
+     * Either a `key` OR at least one of `signer`/`verifier` is required.
+     *
+     * @param {object} [options.key] - An optional key object (containing an
+     *   `id` property, and either `signer` or `verifier`, depending on the
+     *   intended operation. Useful for when the application is managing keys
+     *   itself (when using a KMS, you never have access to the private key,
+     *   and so should use the `signer` param instead).
+     * @param {Function} [options.signer] - Signer function that returns an
+     *   object with an async sign() method. This is useful when interfacing
+     *   with a KMS (since you don't get access to the private key and its
+     *   `signer()`, the KMS client gives you only the signer function to use).
+     * @param {Function} [options.verifier] - Verifier function that returns
+     *   an object with an async `verify()` method. Useful when working with a
+     *   KMS-provided verifier function.
+     *
+     * Advanced optional parameters and overrides.
+     *
+     * @param {object} [options.proof] - A JSON-LD document with options to use
+     *   for the `proof` node. Any other custom fields can be provided here
+     *   using a context different from security-v2).
+     * @param {string|Date} [options.date] - Signing date to use if not passed.
+     * @param {boolean} [options.useNativeCanonize] - Whether to use a native
+     *   canonize algorithm.
+     */
+    constructor(options) {
+        super({
+            type: 'Ed25519Signature2020',
+            algorithm: 'EdDSA',
+            LDKeyClass: options.LDKeyClass,
+            contextUrl: constants_2.ED25519_SUITE_CONTEXT_URL_2020,
+            key: options.key,
+            proof: options.proof,
+            date: options.date,
+            useNativeCanonize: options.useNativeCanonize,
+        });
+        this.requiredKeyType = 'Ed25519VerificationKey2020';
+    }
+    async assertVerificationMethod(document) {
+        if (!_includesCompatibleContext({ document: document })) {
+            // For DID Documents, since keys do not have their own contexts,
+            // the suite context is usually provided by the documentLoader logic
+            throw new TypeError(`The '@context' of the verification method (key) MUST contain the context url "${this.contextUrl}".`);
+        }
+        if (!_isEd2020Key(document)) {
+            const verificationMethodType = jsonld_1.default.getValues(document, 'type')[0];
+            throw new Error(`Unsupported verification method type '${verificationMethodType}'. Verification method type MUST be 'Ed25519VerificationKey2020'.`);
+        }
+        else if (_isEd2020Key(document) && !_includesEd2020Context(document)) {
+            throw new Error(`For verification method type 'Ed25519VerificationKey2020' the '@context' MUST contain the context url "${constants_2.ED25519_SUITE_CONTEXT_URL_2020}".`);
+        }
+        // ensure verification method has not been revoked
+        if (document.revoked !== undefined) {
+            throw new Error('The verification method has been revoked.');
+        }
+    }
+    async getVerificationMethod(options) {
+        let verificationMethod = await super.getVerificationMethod({
+            proof: options.proof,
+            documentLoader: options.documentLoader,
+        });
+        // convert Ed25519VerificationKey2020 to Ed25519VerificationKey2018
+        if (_isEd2020Key(verificationMethod) && _includesEd2020Context(verificationMethod)) {
+            // -- convert multibase to base58 --
+            const publicKeyBase58 = crypto_1.Key.fromFingerprint(verificationMethod.publicKeyMultibase).publicKeyBase58;
+            // -- update type
+            verificationMethod.type = 'Ed25519VerificationKey2018';
+            verificationMethod = Object.assign(Object.assign({}, verificationMethod), { publicKeyMultibase: undefined, publicKeyBase58 });
+        }
+        return verificationMethod;
+    }
+    /**
+     * Ensures the document to be signed contains the required signature suite
+     * specific `@context`, by either adding it (if `addSuiteContext` is true),
+     * or throwing an error if it's missing.
+     *
+     * @override
+     *
+     * @param {object} options - Options hashmap.
+     * @param {object} options.document - JSON-LD document to be signed.
+     * @param {boolean} options.addSuiteContext - Add suite context?
+     */
+    ensureSuiteContext(options) {
+        if (_includesCompatibleContext({ document: options.document })) {
+            return;
+        }
+        super.ensureSuiteContext({ document: options.document, addSuiteContext: options.addSuiteContext });
+    }
+    /**
+     * Checks whether a given proof exists in the document.
+     *
+     * @override
+     *
+     * @param {object} options - Options hashmap.
+     * @param {object} options.proof - A proof.
+     * @param {object} options.document - A JSON-LD document.
+     * @param {object} options.purpose - A jsonld-signatures ProofPurpose
+     *  instance (e.g. AssertionProofPurpose, AuthenticationProofPurpose, etc).
+     * @param {Function} options.documentLoader  - A secure document loader (it is
+     *   recommended to use one that provides static known documents, instead of
+     *   fetching from the web) for returning contexts, controller documents,
+     *   keys, and other relevant URLs needed for the proof.
+     *
+     * @returns {Promise<boolean>} Whether a match for the proof was found.
+     */
+    async matchProof(options) {
+        if (!_includesCompatibleContext({ document: options.document })) {
+            return false;
+        }
+        return super.matchProof({
+            proof: options.proof,
+            document: options.document,
+            purpose: options.purpose,
+            documentLoader: options.documentLoader,
+        });
+    }
+    /**
+     * @param options - Options hashmap.
+     * @param options.verifyData - The data to sign.
+     * @param options.proof - A JSON-LD document with options to use
+     *   for the `proof` node. Any other custom fields can be provided here
+     *   using a context different from `security-v2`.
+     *
+     * @returns The proof containing the signature value.
+     */
+    async sign(options) {
+        if (!(this.signer && typeof this.signer.sign === 'function')) {
+            throw new Error('A signer API has not been specified.');
+        }
+        const signature = await this.signer.sign({ data: options.verifyData });
+        const encodedSignature = utils_1.MultiBaseEncoder.encode(signature, 'base58btc');
+        // create detached content signature
+        options.proof.proofValue = encodedSignature;
+        return options.proof;
+    }
+    /**
+     * @param options - Options hashmap.
+     * @param options.verifyData - The data to verify.
+     * @param options.verificationMethod - A verification method.
+     * @param options.proof - The proof to be verified.
+     *
+     * @returns Resolves with the verification result.
+     */
+    async verifySignature(options) {
+        if (!(options.proof.proofValue && typeof options.proof.proofValue === 'string')) {
+            throw new TypeError('The proof does not include a valid "proofValue" property.');
+        }
+        const signature = utils_1.MultiBaseEncoder.decode(options.proof.proofValue).data;
+        let { verifier } = this;
+        if (!verifier) {
+            const key = await this.LDKeyClass.from(options.verificationMethod);
+            verifier = key.verifier();
+        }
+        return verifier.verify({ data: options.verifyData, signature });
+    }
+}
+exports.Ed25519Signature2020 = Ed25519Signature2020;
+Ed25519Signature2020.CONTEXT_URL = constants_2.ED25519_SUITE_CONTEXT_URL_2020;
+Ed25519Signature2020.CONTEXT = context2020_1.ed25519Signature2020Context.get(constants_2.ED25519_SUITE_CONTEXT_URL_2020);
+function _includesCompatibleContext(options) {
+    // Handle the unfortunate Ed25519Signature2018 / credentials/v1 collision
+    const hasEd2020 = (0, jsonldUtil_1._includesContext)({
+        document: options.document,
+        contextUrl: constants_2.ED25519_SUITE_CONTEXT_URL_2020,
+    });
+    const hasCred = (0, jsonldUtil_1._includesContext)({ document: options.document, contextUrl: constants_1.CREDENTIALS_CONTEXT_V1_URL });
+    const hasSecV2 = (0, jsonldUtil_1._includesContext)({ document: options.document, contextUrl: constants_1.SECURITY_CONTEXT_URL });
+    // Either one by itself is fine, for this suite
+    return hasEd2020 || hasCred || hasSecV2;
+}
+function _isEd2020Key(verificationMethod) {
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore - .hasValue is not part of the public API
+    return jsonld_1.default.hasValue(verificationMethod, 'type', 'Ed25519VerificationKey2020');
+}
+function _includesEd2020Context(document) {
+    return (0, jsonldUtil_1._includesContext)({ document, contextUrl: constants_2.ED25519_SUITE_CONTEXT_URL_2020 });
+}
+//# sourceMappingURL=Ed25519Signature2020.js.map

package/build/modules/vc/data-integrity/signature-suites/ed25519/Ed25519Signature2020.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Ed25519Signature2020.js","sourceRoot":"","sources":["../../../../../../src/modules/vc/data-integrity/signature-suites/ed25519/Ed25519Signature2020.ts"],"names":[],"mappings":";;;;;;AAGA,kDAA2C;AAC3C,gDAAuD;AACvD,kDAAqF;AACrF,iDAAmD;AACnD,oEAA2C;AAC3C,sEAAkE;AAElE,2CAA4D;AAC5D,+CAA2D;AAO3D,MAAa,oBAAqB,SAAQ,+CAAsB;IAI9D;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,YAAmB,OAAoC;QACrD,KAAK,CAAC;YACJ,IAAI,EAAE,sBAAsB;YAC5B,SAAS,EAAE,OAAO;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,0CAA8B;YAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C,CAAC,CAAA;QACF,IAAI,CAAC,eAAe,GAAG,4BAA4B,CAAA;IACrD,CAAC;IAEM,KAAK,CAAC,wBAAwB,CAAC,QAAmB;QACvD,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACxD,gEAAgE;YAChE,oEAAoE;YACpE,MAAM,IAAI,SAAS,CACjB,iFAAiF,IAAI,CAAC,UAAU,IAAI,CACrG,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,sBAAsB,GAAG,gBAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;YACpE,MAAM,IAAI,KAAK,CACb,yCAAyC,sBAAsB,mEAAmE,CACnI,CAAA;QACH,CAAC;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,0GAA0G,0CAA8B,IAAI,CAC7I,CAAA;QACH,CAAC;QAED,kDAAkD;QAClD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAAC,OAA0D;QAC3F,IAAI,kBAAkB,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC;YACzD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAA;QAEF,mEAAmE;QACnE,IAAI,YAAY,CAAC,kBAAkB,CAAC,IAAI,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnF,oCAAoC;YACpC,MAAM,eAAe,GAAG,YAAG,CAAC,eAAe,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,eAAe,CAAA;YAElG,iBAAiB;YACjB,kBAAkB,CAAC,IAAI,GAAG,4BAA4B,CAAA;YAEtD,kBAAkB,mCACb,kBAAkB,KACrB,kBAAkB,EAAE,SAAS,EAC7B,eAAe,GAChB,CAAA;QACH,CAAC;QAED,OAAO,kBAAkB,CAAA;IAC3B,CAAC;IAED;;;;;;;;;;OAUG;IACI,kBAAkB,CAAC,OAA0D;QAClF,IAAI,0BAA0B,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC/D,OAAM;QACR,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IACpG,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,KAAK,CAAC,UAAU,CAAC,OAMvB;QACC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,CAAC;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,IAAI,CAAC,OAAiD;QACjE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;QACtE,MAAM,gBAAgB,GAAG,wBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QAExE,oCAAoC;QACpC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,gBAAgB,CAAA;QAC3C,OAAO,OAAO,CAAC,KAAK,CAAA;IACtB,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,eAAe,CAAC,OAI5B;QACC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;QAClF,CAAC;QACD,MAAM,SAAS,GAAG,wBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAA;QAExE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAClE,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;IACjE,CAAC;;AAlMH,oDAmMC;AAlMe,gCAAW,GAAG,0CAA8B,CAAA;AAC5C,4BAAO,GAAG,yCAA2B,CAAC,GAAG,CAAC,0CAA8B,CAAC,CAAA;AAmMzF,SAAS,0BAA0B,CAAC,OAAgC;IAClE,yEAAyE;IACzE,MAAM,SAAS,GAAG,IAAA,6BAAgB,EAAC;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,0CAA8B;KAC3C,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,IAAA,6BAAgB,EAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,sCAA0B,EAAE,CAAC,CAAA;IACxG,MAAM,QAAQ,GAAG,IAAA,6BAAgB,EAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,gCAAoB,EAAE,CAAC,CAAA;IAEnG,+CAA+C;IAC/C,OAAO,SAAS,IAAI,OAAO,IAAI,QAAQ,CAAA;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,kBAA6B;IACjD,6DAA6D;IAC7D,uDAAuD;IACvD,OAAO,gBAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAmB;IACjD,OAAO,IAAA,6BAAgB,EAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,0CAA8B,EAAE,CAAC,CAAA;AACnF,CAAC"}

package/build/modules/vc/data-integrity/signature-suites/ed25519/context2020.d.ts

@@ -0,0 +1,95 @@
+export declare const context: {
+    '@context': {
+        id: string;
+        type: string;
+        '@protected': boolean;
+        proof: {
+            '@id': string;
+            '@type': string;
+            '@container': string;
+        };
+        Ed25519VerificationKey2020: {
+            '@id': string;
+            '@context': {
+                '@protected': boolean;
+                id: string;
+                type: string;
+                controller: {
+                    '@id': string;
+                    '@type': string;
+                };
+                revoked: {
+                    '@id': string;
+                    '@type': string;
+                };
+                publicKeyMultibase: {
+                    '@id': string;
+                    '@type': string;
+                };
+            };
+        };
+        Ed25519Signature2020: {
+            '@id': string;
+            '@context': {
+                '@protected': boolean;
+                id: string;
+                type: string;
+                challenge: string;
+                created: {
+                    '@id': string;
+                    '@type': string;
+                };
+                domain: string;
+                expires: {
+                    '@id': string;
+                    '@type': string;
+                };
+                nonce: string;
+                proofPurpose: {
+                    '@id': string;
+                    '@type': string;
+                    '@context': {
+                        '@protected': boolean;
+                        id: string;
+                        type: string;
+                        assertionMethod: {
+                            '@id': string;
+                            '@type': string;
+                            '@container': string;
+                        };
+                        authentication: {
+                            '@id': string;
+                            '@type': string;
+                            '@container': string;
+                        };
+                        capabilityInvocation: {
+                            '@id': string;
+                            '@type': string;
+                            '@container': string;
+                        };
+                        capabilityDelegation: {
+                            '@id': string;
+                            '@type': string;
+                            '@container': string;
+                        };
+                        keyAgreement: {
+                            '@id': string;
+                            '@type': string;
+                            '@container': string;
+                        };
+                    };
+                };
+                proofValue: {
+                    '@id': string;
+                    '@type': string;
+                };
+                verificationMethod: {
+                    '@id': string;
+                    '@type': string;
+                };
+            };
+        };
+    };
+};
+declare const ed25519Signature2020Context: Map<any, any>;
+export { ed25519Signature2020Context };

package/build/modules/vc/data-integrity/signature-suites/ed25519/context2020.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ed25519Signature2020Context = exports.context = void 0;
+const constants_1 = require("./constants");
+exports.context = {
+    '@context': {
+        id: '@id',
+        type: '@type',
+        '@protected': true,
+        proof: {
+            '@id': 'https://w3id.org/security#proof',
+            '@type': '@id',
+            '@container': '@graph',
+        },
+        Ed25519VerificationKey2020: {
+            '@id': 'https://w3id.org/security#Ed25519VerificationKey2020',
+            '@context': {
+                '@protected': true,
+                id: '@id',
+                type: '@type',
+                controller: {
+                    '@id': 'https://w3id.org/security#controller',
+                    '@type': '@id',
+                },
+                revoked: {
+                    '@id': 'https://w3id.org/security#revoked',
+                    '@type': 'http://www.w3.org/2001/XMLSchema#dateTime',
+                },
+                publicKeyMultibase: {
+                    '@id': 'https://w3id.org/security#publicKeyMultibase',
+                    '@type': 'https://w3id.org/security#multibase',
+                },
+            },
+        },
+        Ed25519Signature2020: {
+            '@id': 'https://w3id.org/security#Ed25519Signature2020',
+            '@context': {
+                '@protected': true,
+                id: '@id',
+                type: '@type',
+                challenge: 'https://w3id.org/security#challenge',
+                created: {
+                    '@id': 'http://purl.org/dc/terms/created',
+                    '@type': 'http://www.w3.org/2001/XMLSchema#dateTime',
+                },
+                domain: 'https://w3id.org/security#domain',
+                expires: {
+                    '@id': 'https://w3id.org/security#expiration',
+                    '@type': 'http://www.w3.org/2001/XMLSchema#dateTime',
+                },
+                nonce: 'https://w3id.org/security#nonce',
+                proofPurpose: {
+                    '@id': 'https://w3id.org/security#proofPurpose',
+                    '@type': '@vocab',
+                    '@context': {
+                        '@protected': true,
+                        id: '@id',
+                        type: '@type',
+                        assertionMethod: {
+                            '@id': 'https://w3id.org/security#assertionMethod',
+                            '@type': '@id',
+                            '@container': '@set',
+                        },
+                        authentication: {
+                            '@id': 'https://w3id.org/security#authenticationMethod',
+                            '@type': '@id',
+                            '@container': '@set',
+                        },
+                        capabilityInvocation: {
+                            '@id': 'https://w3id.org/security#capabilityInvocationMethod',
+                            '@type': '@id',
+                            '@container': '@set',
+                        },
+                        capabilityDelegation: {
+                            '@id': 'https://w3id.org/security#capabilityDelegationMethod',
+                            '@type': '@id',
+                            '@container': '@set',
+                        },
+                        keyAgreement: {
+                            '@id': 'https://w3id.org/security#keyAgreementMethod',
+                            '@type': '@id',
+                            '@container': '@set',
+                        },
+                    },
+                },
+                proofValue: {
+                    '@id': 'https://w3id.org/security#proofValue',
+                    '@type': 'https://w3id.org/security#multibase',
+                },
+                verificationMethod: {
+                    '@id': 'https://w3id.org/security#verificationMethod',
+                    '@type': '@id',
+                },
+            },
+        },
+    },
+};
+const ed25519Signature2020Context = new Map();
+exports.ed25519Signature2020Context = ed25519Signature2020Context;
+ed25519Signature2020Context.set(constants_1.ED25519_SUITE_CONTEXT_URL_2020, exports.context);
+//# sourceMappingURL=context2020.js.map

package/build/modules/vc/data-integrity/signature-suites/ed25519/context2020.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context2020.js","sourceRoot":"","sources":["../../../../../../src/modules/vc/data-integrity/signature-suites/ed25519/context2020.ts"],"names":[],"mappings":";;;AAAA,2CAA4D;AAE/C,QAAA,OAAO,GAAG;IACrB,UAAU,EAAE;QACV,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,OAAO;QACb,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE;YACL,KAAK,EAAE,iCAAiC;YACxC,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,QAAQ;SACvB;QACD,0BAA0B,EAAE;YAC1B,KAAK,EAAE,sDAAsD;YAC7D,UAAU,EAAE;gBACV,YAAY,EAAE,IAAI;gBAClB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE;oBACV,KAAK,EAAE,sCAAsC;oBAC7C,OAAO,EAAE,KAAK;iBACf;gBACD,OAAO,EAAE;oBACP,KAAK,EAAE,mCAAmC;oBAC1C,OAAO,EAAE,2CAA2C;iBACrD;gBACD,kBAAkB,EAAE;oBAClB,KAAK,EAAE,8CAA8C;oBACrD,OAAO,EAAE,qCAAqC;iBAC/C;aACF;SACF;QACD,oBAAoB,EAAE;YACpB,KAAK,EAAE,gDAAgD;YACvD,UAAU,EAAE;gBACV,YAAY,EAAE,IAAI;gBAClB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,qCAAqC;gBAChD,OAAO,EAAE;oBACP,KAAK,EAAE,kCAAkC;oBACzC,OAAO,EAAE,2CAA2C;iBACrD;gBACD,MAAM,EAAE,kCAAkC;gBAC1C,OAAO,EAAE;oBACP,KAAK,EAAE,sCAAsC;oBAC7C,OAAO,EAAE,2CAA2C;iBACrD;gBACD,KAAK,EAAE,iCAAiC;gBACxC,YAAY,EAAE;oBACZ,KAAK,EAAE,wCAAwC;oBAC/C,OAAO,EAAE,QAAQ;oBACjB,UAAU,EAAE;wBACV,YAAY,EAAE,IAAI;wBAClB,EAAE,EAAE,KAAK;wBACT,IAAI,EAAE,OAAO;wBACb,eAAe,EAAE;4BACf,KAAK,EAAE,2CAA2C;4BAClD,OAAO,EAAE,KAAK;4BACd,YAAY,EAAE,MAAM;yBACrB;wBACD,cAAc,EAAE;4BACd,KAAK,EAAE,gDAAgD;4BACvD,OAAO,EAAE,KAAK;4BACd,YAAY,EAAE,MAAM;yBACrB;wBACD,oBAAoB,EAAE;4BACpB,KAAK,EAAE,sDAAsD;4BAC7D,OAAO,EAAE,KAAK;4BACd,YAAY,EAAE,MAAM;yBACrB;wBACD,oBAAoB,EAAE;4BACpB,KAAK,EAAE,sDAAsD;4BAC7D,OAAO,EAAE,KAAK;4BACd,YAAY,EAAE,MAAM;yBACrB;wBACD,YAAY,EAAE;4BACZ,KAAK,EAAE,8CAA8C;4BACrD,OAAO,EAAE,KAAK;4BACd,YAAY,EAAE,MAAM;yBACrB;qBACF;iBACF;gBACD,UAAU,EAAE;oBACV,KAAK,EAAE,sCAAsC;oBAC7C,OAAO,EAAE,qCAAqC;iBAC/C;gBACD,kBAAkB,EAAE;oBAClB,KAAK,EAAE,8CAA8C;oBACrD,OAAO,EAAE,KAAK;iBACf;aACF;SACF;KACF;CACF,CAAA;AAED,MAAM,2BAA2B,GAAG,IAAI,GAAG,EAAE,CAAA;AAGpC,kEAA2B;AAFpC,2BAA2B,CAAC,GAAG,CAAC,0CAA8B,EAAE,eAAO,CAAC,CAAA"}

package/build/modules/vc/data-integrity/signature-suites/index.d.ts

@@ -1,2 +1,3 @@
 export * from './ed25519/Ed25519Signature2018';
+export * from './ed25519/Ed25519Signature2020';
 export * from './JwsLinkedDataSignature';

package/build/modules/vc/data-integrity/signature-suites/index.js

@@ -15,5 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./ed25519/Ed25519Signature2018"), exports);
+__exportStar(require("./ed25519/Ed25519Signature2020"), exports);
 __exportStar(require("./JwsLinkedDataSignature"), exports);
 //# sourceMappingURL=index.js.map

package/build/modules/vc/data-integrity/signature-suites/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/modules/vc/data-integrity/signature-suites/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iEAA8C;AAC9C,2DAAwC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/modules/vc/data-integrity/signature-suites/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iEAA8C;AAC9C,iEAA8C;AAC9C,2DAAwC"}

package/build/wallet/Wallet.d.ts

@@ -39,6 +39,25 @@ export interface Wallet extends Disposable {
     generateNonce(): Promise<string>;
     getRandomValues(length: number): Uint8Array;
     generateWalletKey(): Promise<string>;
+    /**
+     * Method that enables JWT encryption using ECDH-ES and AesA256Gcm and returns it as a compact JWE.
+     * This method is specifically added to support OpenID4VP response encryption using JARM and should later be
+     * refactored into a more generic method that supports encryption/decryption.
+     *
+     * @returns compact JWE
+     */
+    directEncryptCompactJweEcdhEs?(options: WalletDirectEncryptCompactJwtEcdhEsOptions): Promise<string>;
+    /**
+     * Method that enabled JWT encryption using ECDH-ES and AesA256Gcm and returns it as a compact JWE.
+     * This method is specifically added to support OpenID4VP response encryption using JARM and should later be
+     * refactored into a more generic method that supports encryption/decryption.
+     *
+     * @returns compact JWE
+     */
+    directDecryptCompactJweEcdhEs?({ compactJwe, recipientKey, }: {
+        compactJwe: string;
+        recipientKey: Key;
+    }): Promise<WalletDirectDecryptCompactJwtEcdhEsReturn>;
     /**
      * Get the key types supported by the wallet implementation.
      */
@@ -65,3 +84,15 @@ export interface UnpackedMessageContext {
     senderKey?: string;
     recipientKey?: string;
 }
+export interface WalletDirectEncryptCompactJwtEcdhEsOptions {
+    recipientKey: Key;
+    encryptionAlgorithm: 'A256GCM';
+    apu?: string;
+    apv?: string;
+    data: Buffer;
+    header: Record<string, unknown>;
+}
+export interface WalletDirectDecryptCompactJwtEcdhEsReturn {
+    data: Buffer;
+    header: Record<string, unknown>;
+}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@credo-ts/core",
   "main": "build/index",
   "types": "build/index",
-  "version": "0.5.11",
+  "version": "0.5.12-alpha-20240927180637",
   "files": [
     "build"
   ],