@credo-ts/core 0.6.0-pr-2392-20251010173905 → 0.6.0-pr-2457-20251016083534

package/build/crypto/webcrypto/types.d.ts

@@ -1,3 +1,4 @@
+import { AnyUint8Array } from "../../types.js";
 import { Jwk } from "../../modules/kms/jwk/jwk.js";
 
 //#region src/crypto/webcrypto/types.d.ts
@@ -29,7 +30,7 @@ type EcKeyGenParams = {
 type RsaHashedKeyGenParams = {
   name: 'RSASSA-PKCS1-v1_5' | 'RSA-PSS';
   modulusLength: number;
-  publicExponent: Uint8Array;
+  publicExponent: AnyUint8Array;
   hash: {
     name: HashAlgorithmIdentifier;
   };

package/build/crypto/webcrypto/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/crypto/webcrypto/types.ts"],"sourcesContent":[],"mappings":";;;;KAuBK,uBAAA,GAUW,SAAA,GAAA,SAAA,GAAA,SAAA;AAA4B,KAFhC,WAAA,GAEgC;EAAuB,IAAA,EAAA,OAAA;EAGvD,IAAA,EAAA;IAEA,IAAA,EALI,uBAKQ;EAAA,CAAA,GALoB,uBAKpB;;AAEoB,KAJhC,aAAA,GAIgC;EAAuB,IAAA,EAAA,SAAA;AAUnE,CAAA;AAEY,KAdA,YAAA,GAcc;EAKd,IAAA,EAAA,mBAAqB,GAAA,SAAA;EAAA,IAAA,EAAA;IAGf,IAAA,EApBF,uBAoBE;MApB0B,uBAqB5B;EAAuB,UAAA,CAAA,EAAA,MAAA;AASvC,CAAA;AAEY,KAtBA,mBAAA,GAsBiB;EAKjB,IAAA,EAAA,SAAA;AAKZ,CAAA;AACY,KA/BA,cAAA,GA+BS;EACT,IAAA,EAAA,OAAO;EAEP,UAAA,EAAA,OAAU,GAAA,OAAM,GAAA,OAAA,GAAA,OAAA;AAI5B,CAAA;AAA2B,KAjCf,qBAAA,GAiCe;MAAG,EAAA,mBAAA,GAAA,SAAA;eAAoB,EAAA,MAAA;gBAAyB,EA9BzD,UA8ByD;EAAqB,IAAA,EAAA;IACpF,IAAA,EA9BI,uBA8BW;EAAA,CAAA;;AAAoB,KArBnC,sBAAA,GAqBmC;MAAsB,EAAA,SAAA;CAAqB;AAC9E,KApBA,iBAAA,GAoBa;EAAA,IAAA,EAAA,OAAA;YAAG,EAAA,OAAA,GAAA,OAAA,GAAA,OAAA,GAAA,OAAA;;AAA8B,KAf9C,qBAAA,GAe8C;EAAY,IAAA,EAAA,mBAAA,GAAA,SAAA;EAC1D,IAAA,EAAA;IAAe,IAAA,EAdX,uBAcW;;;AAAiC,KAXhD,QAAA,GAWgD,MAAA,GAAA,QAAA,GAAA,SAAA,GAAA,SAAA,GAAA,SAAA,GAAA,WAAA,GAAA,WAAA,GAAA,YAAA;AAAY,KAV5D,SAAA,GAU4D,KAAA,GAAA,OAAA,GAAA,MAAA,GAAA,KAAA;KAT5D,OAAA;KAEA,UAAA,GAAa;KAIb,eAAA,GAAkB,oBAAoB,yBAAyB;KAC/D,eAAA,GAAkB,iBAAiB,sBAAsB;KACzD,aAAA,GAAgB,cAAc,gBAAgB;KAC9C,eAAA,GAAkB,cAAc,gBAAgB"}
+{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/crypto/webcrypto/types.ts"],"sourcesContent":[],"mappings":";;;;;KAwBK,uBAAA,GAUW,SAAA,GAAA,SAAA,GAAA,SAAA;AAA4B,KAFhC,WAAA,GAEgC;EAAuB,IAAA,EAAA,OAAA;EAGvD,IAAA,EAAA;IAEA,IAAA,EALI,uBAKQ;EAAA,CAAA,GALoB,uBAKpB;;AAEoB,KAJhC,aAAA,GAIgC;EAAuB,IAAA,EAAA,SAAA;AAUnE,CAAA;AAEY,KAdA,YAAA,GAcc;EAKd,IAAA,EAAA,mBAAqB,GAAA,SAAA;EAAA,IAAA,EAAA;IAGf,IAAA,EApBF,uBAoBE;MApB0B,uBAqB5B;EAAuB,UAAA,CAAA,EAAA,MAAA;AASvC,CAAA;AAEY,KAtBA,mBAAA,GAsBiB;EAKjB,IAAA,EAAA,SAAA;AAKZ,CAAA;AACY,KA/BA,cAAA,GA+BS;EACT,IAAA,EAAA,OAAO;EAEP,UAAA,EAAA,OAAU,GAAA,OAAM,GAAA,OAAA,GAAA,OAAA;AAI5B,CAAA;AAA2B,KAjCf,qBAAA,GAiCe;MAAG,EAAA,mBAAA,GAAA,SAAA;eAAoB,EAAA,MAAA;gBAAyB,EA9BzD,aA8ByD;EAAqB,IAAA,EAAA;IACpF,IAAA,EA9BI,uBA8BW;EAAA,CAAA;;AAAoB,KArBnC,sBAAA,GAqBmC;MAAsB,EAAA,SAAA;CAAqB;AAC9E,KApBA,iBAAA,GAoBa;EAAA,IAAA,EAAA,OAAA;YAAG,EAAA,OAAA,GAAA,OAAA,GAAA,OAAA,GAAA,OAAA;;AAA8B,KAf9C,qBAAA,GAe8C;EAAY,IAAA,EAAA,mBAAA,GAAA,SAAA;EAC1D,IAAA,EAAA;IAAe,IAAA,EAdX,uBAcW;;;AAAiC,KAXhD,QAAA,GAWgD,MAAA,GAAA,QAAA,GAAA,SAAA,GAAA,SAAA,GAAA,SAAA,GAAA,WAAA,GAAA,WAAA,GAAA,YAAA;AAAY,KAV5D,SAAA,GAU4D,KAAA,GAAA,OAAA,GAAA,MAAA,GAAA,KAAA;KAT5D,OAAA;KAEA,UAAA,GAAa;KAIb,eAAA,GAAkB,oBAAoB,yBAAyB;KAC/D,eAAA,GAAkB,iBAAiB,sBAAsB;KACzD,aAAA,GAAgB,cAAc,gBAAgB;KAC9C,eAAA,GAAkB,cAAc,gBAAgB"}

package/build/crypto/webcrypto/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","names":[],"sources":["../../../src/crypto/webcrypto/types.ts"],"sourcesContent":["/*\n *\n * Based on: https://www.w3.org/TR/WebCryptoAPI/\n */\n\nimport {\n  Ed25519PublicJwk,\n  type Jwk,\n  type KnownJwaSignatureAlgorithm,\n  P256PublicJwk,\n  P384PublicJwk,\n  P521PublicJwk,\n  RsaPublicJwk,\n  Secp256k1PublicJwk,\n} from '../../modules/kms'\nimport { CredoWebCryptoError } from './CredoWebCryptoError'\nimport type { CredoWebCryptoKey } from './CredoWebCryptoKey'\n\nexport type CredoWebCryptoKeyPair = {\n  publicKey: CredoWebCryptoKey\n  privateKey: CredoWebCryptoKey\n}\n\ntype HashAlgorithmIdentifier = 'SHA-256' | 'SHA-384' | 'SHA-512'\n\n/*\n *\n * Sign and Verify Parameters\n *\n */\n\nexport type EcdsaParams = {\n  name: 'ECDSA'\n  hash: { name: HashAlgorithmIdentifier } | HashAlgorithmIdentifier\n}\n\nexport type Ed25519Params = { name: 'Ed25519' }\n\nexport type RsaSsaParams = {\n  name: 'RSASSA-PKCS1-v1_5' | 'RSA-PSS'\n  hash: { name: HashAlgorithmIdentifier } | HashAlgorithmIdentifier\n  saltLength?: number // Only for RSA-PSS\n}\n\n/*\n *\n * Key Generation Parameters\n *\n */\n\nexport type Ed25519KeyGenParams = { name: 'Ed25519' }\n\nexport type EcKeyGenParams = {\n  name: 'ECDSA'\n  namedCurve: 'P-256' | 'P-384' | 'P-521' | 'K-256'\n}\n\nexport type RsaHashedKeyGenParams = {\n  name: 'RSASSA-PKCS1-v1_5' | 'RSA-PSS'\n  modulusLength: number\n  publicExponent: Uint8Array\n  hash: { name: HashAlgorithmIdentifier }\n}\n\n/*\n *\n * Key Import Parameters\n *\n */\n\nexport type Ed25519KeyImportParams = { name: 'Ed25519' }\n\nexport type EcKeyImportParams = {\n  name: 'ECDSA'\n  namedCurve: 'P-256' | 'P-384' | 'K-256' | 'P-521'\n}\n\nexport type RsaHashedImportParams = {\n  name: 'RSASSA-PKCS1-v1_5' | 'RSA-PSS'\n  hash: { name: HashAlgorithmIdentifier }\n}\n\nexport type KeyUsage = 'sign' | 'verify' | 'encrypt' | 'decrypt' | 'wrapKey' | 'unwrapKey' | 'deriveKey' | 'deriveBits'\nexport type KeyFormat = 'jwk' | 'pkcs8' | 'spki' | 'raw'\nexport type KeyType = 'private' | 'public' | 'secret'\n\nexport type JsonWebKey = Jwk\n\nexport type HashAlgorithm = { name: HashAlgorithmIdentifier }\n\nexport type KeyImportParams = EcKeyImportParams | Ed25519KeyImportParams | RsaHashedImportParams\nexport type KeyGenAlgorithm = EcKeyGenParams | Ed25519KeyGenParams | RsaHashedKeyGenParams\nexport type KeySignParams = EcdsaParams | Ed25519Params | RsaSsaParams\nexport type KeyVerifyParams = EcdsaParams | Ed25519Params | RsaSsaParams\n\n/**\n * Derives the JWA algorithm name from KeySignParams or KeyVerifyParams\n * @param params - The signing or verification parameters\n * @returns The corresponding JWA algorithm string\n */\nexport function keyParamsToJwaAlgorithm(\n  params: KeySignParams | KeyVerifyParams,\n  key: CredoWebCryptoKey\n): KnownJwaSignatureAlgorithm {\n  if (params.name === 'Ed25519') {\n    if (!key.publicJwk.is(Ed25519PublicJwk)) {\n      throw new CredoWebCryptoError(\n        `Unsupported key for algorithm for Ed25519: ${key.publicJwk.jwkTypehumanDescription}`\n      )\n    }\n\n    return 'EdDSA'\n  }\n\n  if (params.name === 'ECDSA') {\n    // Normalize hash parameter\n    const hashName = typeof params.hash === 'string' ? params.hash : params.hash.name\n\n    if (key.publicJwk.is(Secp256k1PublicJwk)) {\n      // Map ECDSA with different hash algorithms to JWA names\n      switch (hashName) {\n        case 'SHA-256':\n          return 'ES256K'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with Secp255K1: ${hashName}`)\n      }\n    }\n\n    // Map ECDSA with different hash algorithms to JWA names\n    if (key.publicJwk.is(P256PublicJwk)) {\n      switch (hashName) {\n        case 'SHA-256':\n          return 'ES256'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with P256: ${hashName}`)\n      }\n    }\n\n    // Map ECDSA with different hash algorithms to JWA names\n    if (key.publicJwk.is(P384PublicJwk)) {\n      switch (hashName) {\n        case 'SHA-384':\n          return 'ES384'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with P384: ${hashName}`)\n      }\n    }\n\n    // Map ECDSA with different hash algorithms to JWA names\n    if (key.publicJwk.is(P521PublicJwk)) {\n      switch (hashName) {\n        case 'SHA-512':\n          return 'ES512'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with P521: ${hashName}`)\n      }\n    }\n\n    throw new CredoWebCryptoError(\n      `Unsupported key ${key.publicJwk.jwkTypehumanDescription} or hash algorithm '${hashName}' for ECDSA`\n    )\n  }\n\n  if (params.name === 'RSASSA-PKCS1-v1_5') {\n    // Normalize hash parameter\n    const hashName = typeof params.hash === 'string' ? params.hash : params.hash.name\n\n    if (!key.publicJwk.is(RsaPublicJwk)) {\n      throw new CredoWebCryptoError(\n        `Unsupported key for algorithm for RSASSA-PKCS1-v1_5: ${key.publicJwk.jwkTypehumanDescription}`\n      )\n    }\n\n    // Map RSA-PKCS1 with different hash algorithms to JWA names\n    switch (hashName) {\n      case 'SHA-256':\n        return 'RS256'\n      case 'SHA-384':\n        return 'RS384'\n      case 'SHA-512':\n        return 'RS512'\n      default:\n        throw new CredoWebCryptoError(`Unsupported hash algorithm for RSASSA-PKCS1-v1_5: ${hashName}`)\n    }\n  }\n\n  if (params.name === 'RSA-PSS') {\n    // Normalize hash parameter\n    const hashName = typeof params.hash === 'string' ? params.hash : params.hash.name\n\n    if (!key.publicJwk.is(RsaPublicJwk)) {\n      throw new CredoWebCryptoError(\n        `Unsupported key for algorithm for RSA-PSS: ${key.publicJwk.jwkTypehumanDescription}`\n      )\n    }\n\n    // Map RSA-PSS with different hash algorithms to JWA names\n    switch (hashName) {\n      case 'SHA-256':\n        return 'PS256'\n      case 'SHA-384':\n        return 'PS384'\n      case 'SHA-512':\n        return 'PS512'\n      default:\n        throw new CredoWebCryptoError(`Unsupported hash algorithm for RSA-PSS: ${hashName}`)\n    }\n  }\n\n  throw new CredoWebCryptoError(`Unsupported algorithm: ${params.name}`)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAoGA,SAAgB,wBACd,QACA,KAC4B;AAC5B,KAAI,OAAO,SAAS,WAAW;AAC7B,MAAI,CAAC,IAAI,UAAU,GAAG,iBAAiB,CACrC,OAAM,IAAI,oBACR,8CAA8C,IAAI,UAAU,0BAC7D;AAGH,SAAO;;AAGT,KAAI,OAAO,SAAS,SAAS;EAE3B,MAAM,WAAW,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO,KAAK;AAE7E,MAAI,IAAI,UAAU,GAAG,mBAAmB,CAEtC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,wDAAwD,WAAW;;AAKvG,MAAI,IAAI,UAAU,GAAG,cAAc,CACjC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,mDAAmD,WAAW;;AAKlG,MAAI,IAAI,UAAU,GAAG,cAAc,CACjC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,mDAAmD,WAAW;;AAKlG,MAAI,IAAI,UAAU,GAAG,cAAc,CACjC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,mDAAmD,WAAW;;AAIlG,QAAM,IAAI,oBACR,mBAAmB,IAAI,UAAU,wBAAwB,sBAAsB,SAAS,aACzF;;AAGH,KAAI,OAAO,SAAS,qBAAqB;EAEvC,MAAM,WAAW,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO,KAAK;AAE7E,MAAI,CAAC,IAAI,UAAU,GAAG,aAAa,CACjC,OAAM,IAAI,oBACR,wDAAwD,IAAI,UAAU,0BACvE;AAIH,UAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,qDAAqD,WAAW;;;AAIpG,KAAI,OAAO,SAAS,WAAW;EAE7B,MAAM,WAAW,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO,KAAK;AAE7E,MAAI,CAAC,IAAI,UAAU,GAAG,aAAa,CACjC,OAAM,IAAI,oBACR,8CAA8C,IAAI,UAAU,0BAC7D;AAIH,UAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,2CAA2C,WAAW;;;AAI1F,OAAM,IAAI,oBAAoB,0BAA0B,OAAO,OAAO"}
+{"version":3,"file":"types.mjs","names":[],"sources":["../../../src/crypto/webcrypto/types.ts"],"sourcesContent":["/*\n *\n * Based on: https://www.w3.org/TR/WebCryptoAPI/\n */\n\nimport {\n  Ed25519PublicJwk,\n  type Jwk,\n  type KnownJwaSignatureAlgorithm,\n  P256PublicJwk,\n  P384PublicJwk,\n  P521PublicJwk,\n  RsaPublicJwk,\n  Secp256k1PublicJwk,\n} from '../../modules/kms'\nimport type { AnyUint8Array } from '../../types'\nimport { CredoWebCryptoError } from './CredoWebCryptoError'\nimport type { CredoWebCryptoKey } from './CredoWebCryptoKey'\n\nexport type CredoWebCryptoKeyPair = {\n  publicKey: CredoWebCryptoKey\n  privateKey: CredoWebCryptoKey\n}\n\ntype HashAlgorithmIdentifier = 'SHA-256' | 'SHA-384' | 'SHA-512'\n\n/*\n *\n * Sign and Verify Parameters\n *\n */\n\nexport type EcdsaParams = {\n  name: 'ECDSA'\n  hash: { name: HashAlgorithmIdentifier } | HashAlgorithmIdentifier\n}\n\nexport type Ed25519Params = { name: 'Ed25519' }\n\nexport type RsaSsaParams = {\n  name: 'RSASSA-PKCS1-v1_5' | 'RSA-PSS'\n  hash: { name: HashAlgorithmIdentifier } | HashAlgorithmIdentifier\n  saltLength?: number // Only for RSA-PSS\n}\n\n/*\n *\n * Key Generation Parameters\n *\n */\n\nexport type Ed25519KeyGenParams = { name: 'Ed25519' }\n\nexport type EcKeyGenParams = {\n  name: 'ECDSA'\n  namedCurve: 'P-256' | 'P-384' | 'P-521' | 'K-256'\n}\n\nexport type RsaHashedKeyGenParams = {\n  name: 'RSASSA-PKCS1-v1_5' | 'RSA-PSS'\n  modulusLength: number\n  publicExponent: AnyUint8Array\n  hash: { name: HashAlgorithmIdentifier }\n}\n\n/*\n *\n * Key Import Parameters\n *\n */\n\nexport type Ed25519KeyImportParams = { name: 'Ed25519' }\n\nexport type EcKeyImportParams = {\n  name: 'ECDSA'\n  namedCurve: 'P-256' | 'P-384' | 'K-256' | 'P-521'\n}\n\nexport type RsaHashedImportParams = {\n  name: 'RSASSA-PKCS1-v1_5' | 'RSA-PSS'\n  hash: { name: HashAlgorithmIdentifier }\n}\n\nexport type KeyUsage = 'sign' | 'verify' | 'encrypt' | 'decrypt' | 'wrapKey' | 'unwrapKey' | 'deriveKey' | 'deriveBits'\nexport type KeyFormat = 'jwk' | 'pkcs8' | 'spki' | 'raw'\nexport type KeyType = 'private' | 'public' | 'secret'\n\nexport type JsonWebKey = Jwk\n\nexport type HashAlgorithm = { name: HashAlgorithmIdentifier }\n\nexport type KeyImportParams = EcKeyImportParams | Ed25519KeyImportParams | RsaHashedImportParams\nexport type KeyGenAlgorithm = EcKeyGenParams | Ed25519KeyGenParams | RsaHashedKeyGenParams\nexport type KeySignParams = EcdsaParams | Ed25519Params | RsaSsaParams\nexport type KeyVerifyParams = EcdsaParams | Ed25519Params | RsaSsaParams\n\n/**\n * Derives the JWA algorithm name from KeySignParams or KeyVerifyParams\n * @param params - The signing or verification parameters\n * @returns The corresponding JWA algorithm string\n */\nexport function keyParamsToJwaAlgorithm(\n  params: KeySignParams | KeyVerifyParams,\n  key: CredoWebCryptoKey\n): KnownJwaSignatureAlgorithm {\n  if (params.name === 'Ed25519') {\n    if (!key.publicJwk.is(Ed25519PublicJwk)) {\n      throw new CredoWebCryptoError(\n        `Unsupported key for algorithm for Ed25519: ${key.publicJwk.jwkTypehumanDescription}`\n      )\n    }\n\n    return 'EdDSA'\n  }\n\n  if (params.name === 'ECDSA') {\n    // Normalize hash parameter\n    const hashName = typeof params.hash === 'string' ? params.hash : params.hash.name\n\n    if (key.publicJwk.is(Secp256k1PublicJwk)) {\n      // Map ECDSA with different hash algorithms to JWA names\n      switch (hashName) {\n        case 'SHA-256':\n          return 'ES256K'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with Secp255K1: ${hashName}`)\n      }\n    }\n\n    // Map ECDSA with different hash algorithms to JWA names\n    if (key.publicJwk.is(P256PublicJwk)) {\n      switch (hashName) {\n        case 'SHA-256':\n          return 'ES256'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with P256: ${hashName}`)\n      }\n    }\n\n    // Map ECDSA with different hash algorithms to JWA names\n    if (key.publicJwk.is(P384PublicJwk)) {\n      switch (hashName) {\n        case 'SHA-384':\n          return 'ES384'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with P384: ${hashName}`)\n      }\n    }\n\n    // Map ECDSA with different hash algorithms to JWA names\n    if (key.publicJwk.is(P521PublicJwk)) {\n      switch (hashName) {\n        case 'SHA-512':\n          return 'ES512'\n        default:\n          throw new CredoWebCryptoError(`Unsupported hash algorithm for ECDSA with P521: ${hashName}`)\n      }\n    }\n\n    throw new CredoWebCryptoError(\n      `Unsupported key ${key.publicJwk.jwkTypehumanDescription} or hash algorithm '${hashName}' for ECDSA`\n    )\n  }\n\n  if (params.name === 'RSASSA-PKCS1-v1_5') {\n    // Normalize hash parameter\n    const hashName = typeof params.hash === 'string' ? params.hash : params.hash.name\n\n    if (!key.publicJwk.is(RsaPublicJwk)) {\n      throw new CredoWebCryptoError(\n        `Unsupported key for algorithm for RSASSA-PKCS1-v1_5: ${key.publicJwk.jwkTypehumanDescription}`\n      )\n    }\n\n    // Map RSA-PKCS1 with different hash algorithms to JWA names\n    switch (hashName) {\n      case 'SHA-256':\n        return 'RS256'\n      case 'SHA-384':\n        return 'RS384'\n      case 'SHA-512':\n        return 'RS512'\n      default:\n        throw new CredoWebCryptoError(`Unsupported hash algorithm for RSASSA-PKCS1-v1_5: ${hashName}`)\n    }\n  }\n\n  if (params.name === 'RSA-PSS') {\n    // Normalize hash parameter\n    const hashName = typeof params.hash === 'string' ? params.hash : params.hash.name\n\n    if (!key.publicJwk.is(RsaPublicJwk)) {\n      throw new CredoWebCryptoError(\n        `Unsupported key for algorithm for RSA-PSS: ${key.publicJwk.jwkTypehumanDescription}`\n      )\n    }\n\n    // Map RSA-PSS with different hash algorithms to JWA names\n    switch (hashName) {\n      case 'SHA-256':\n        return 'PS256'\n      case 'SHA-384':\n        return 'PS384'\n      case 'SHA-512':\n        return 'PS512'\n      default:\n        throw new CredoWebCryptoError(`Unsupported hash algorithm for RSA-PSS: ${hashName}`)\n    }\n  }\n\n  throw new CredoWebCryptoError(`Unsupported algorithm: ${params.name}`)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAqGA,SAAgB,wBACd,QACA,KAC4B;AAC5B,KAAI,OAAO,SAAS,WAAW;AAC7B,MAAI,CAAC,IAAI,UAAU,GAAG,iBAAiB,CACrC,OAAM,IAAI,oBACR,8CAA8C,IAAI,UAAU,0BAC7D;AAGH,SAAO;;AAGT,KAAI,OAAO,SAAS,SAAS;EAE3B,MAAM,WAAW,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO,KAAK;AAE7E,MAAI,IAAI,UAAU,GAAG,mBAAmB,CAEtC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,wDAAwD,WAAW;;AAKvG,MAAI,IAAI,UAAU,GAAG,cAAc,CACjC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,mDAAmD,WAAW;;AAKlG,MAAI,IAAI,UAAU,GAAG,cAAc,CACjC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,mDAAmD,WAAW;;AAKlG,MAAI,IAAI,UAAU,GAAG,cAAc,CACjC,SAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,mDAAmD,WAAW;;AAIlG,QAAM,IAAI,oBACR,mBAAmB,IAAI,UAAU,wBAAwB,sBAAsB,SAAS,aACzF;;AAGH,KAAI,OAAO,SAAS,qBAAqB;EAEvC,MAAM,WAAW,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO,KAAK;AAE7E,MAAI,CAAC,IAAI,UAAU,GAAG,aAAa,CACjC,OAAM,IAAI,oBACR,wDAAwD,IAAI,UAAU,0BACvE;AAIH,UAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,qDAAqD,WAAW;;;AAIpG,KAAI,OAAO,SAAS,WAAW;EAE7B,MAAM,WAAW,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO,KAAK;AAE7E,MAAI,CAAC,IAAI,UAAU,GAAG,aAAa,CACjC,OAAM,IAAI,oBACR,8CAA8C,IAAI,UAAU,0BAC7D;AAIH,UAAQ,UAAR;GACE,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,QACE,OAAM,IAAI,oBAAoB,2CAA2C,WAAW;;;AAI1F,OAAM,IAAI,oBAAoB,0BAA0B,OAAO,OAAO"}

package/build/crypto/webcrypto/utils/keyAlgorithmConversion.js

@@ -116,13 +116,13 @@ const publicJwkToSpki = (publicJwk) => {
 	const publicKey = publicJwk.publicKey;
 	if (publicKey.kty === "RSA") {
 		const rsaPublicKey = new __peculiar_asn1_rsa.RSAPublicKey({
-			modulus: publicKey.modulus,
-			publicExponent: publicKey.exponent
+			modulus: new Uint8Array(publicKey.modulus).buffer,
+			publicExponent: new Uint8Array(publicKey.exponent).buffer
 		});
 		const rsaPublicKeyDer = __peculiar_asn1_schema.AsnSerializer.serialize(rsaPublicKey);
 		return new __peculiar_asn1_x509.SubjectPublicKeyInfo({
 			algorithm: require_algorithmIdentifiers.rsaKeyAlgorithmIdentifier,
-			subjectPublicKey: new Uint8Array([0, ...new Uint8Array(rsaPublicKeyDer)])
+			subjectPublicKey: new Uint8Array([0, ...new Uint8Array(rsaPublicKeyDer)]).buffer
 		});
 	}
 	return new __peculiar_asn1_x509.SubjectPublicKeyInfo({
@@ -134,7 +134,7 @@ const publicJwkToSpki = (publicJwk) => {
 			Ed25519: require_algorithmIdentifiers.ed25519AlgorithmIdentifier,
 			X25519: require_algorithmIdentifiers.x25519AlgorithmIdentifier
 		}[publicKey.crv],
-		subjectPublicKey: publicKey.publicKey
+		subjectPublicKey: new Uint8Array(publicKey.publicKey).buffer
 	});
 };
 

package/build/crypto/webcrypto/utils/keyAlgorithmConversion.mjs

@@ -112,13 +112,13 @@ const publicJwkToSpki = (publicJwk) => {
 	const publicKey = publicJwk.publicKey;
 	if (publicKey.kty === "RSA") {
 		const rsaPublicKey = new RSAPublicKey({
-			modulus: publicKey.modulus,
-			publicExponent: publicKey.exponent
+			modulus: new Uint8Array(publicKey.modulus).buffer,
+			publicExponent: new Uint8Array(publicKey.exponent).buffer
 		});
 		const rsaPublicKeyDer = AsnSerializer.serialize(rsaPublicKey);
 		return new SubjectPublicKeyInfo({
 			algorithm: rsaKeyAlgorithmIdentifier,
-			subjectPublicKey: new Uint8Array([0, ...new Uint8Array(rsaPublicKeyDer)])
+			subjectPublicKey: new Uint8Array([0, ...new Uint8Array(rsaPublicKeyDer)]).buffer
 		});
 	}
 	return new SubjectPublicKeyInfo({
@@ -130,7 +130,7 @@ const publicJwkToSpki = (publicJwk) => {
 			Ed25519: ed25519AlgorithmIdentifier,
 			X25519: x25519AlgorithmIdentifier
 		}[publicKey.crv],
-		subjectPublicKey: publicKey.publicKey
+		subjectPublicKey: new Uint8Array(publicKey.publicKey).buffer
 	});
 };
 

package/build/crypto/webcrypto/utils/keyAlgorithmConversion.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keyAlgorithmConversion.mjs","names":[],"sources":["../../../../src/crypto/webcrypto/utils/keyAlgorithmConversion.ts"],"sourcesContent":["import { RSAPublicKey } from '@peculiar/asn1-rsa'\nimport { AlgorithmIdentifier, SubjectPublicKeyInfo } from '@peculiar/asn1-x509'\nimport type { EcKeyGenParams, KeyGenAlgorithm, RsaHashedKeyGenParams } from '../types'\n\nimport { AsnParser, AsnSerializer } from '@peculiar/asn1-schema'\nimport { type KmsCreateKeyType, PublicJwk, getJwkHumanDescription } from '../../../modules/kms'\nimport { CredoWebCryptoError } from '../CredoWebCryptoError'\nimport {\n  ecPublicKeyWithK256AlgorithmIdentifier,\n  ecPublicKeyWithP256AlgorithmIdentifier,\n  ecPublicKeyWithP384AlgorithmIdentifier,\n  ecPublicKeyWithP521AlgorithmIdentifier,\n  ed25519AlgorithmIdentifier,\n  rsaKeyAlgorithmIdentifier,\n  x25519AlgorithmIdentifier,\n} from '../algorithmIdentifiers'\n\nexport const publicJwkToCryptoKeyAlgorithm = (key: PublicJwk): KeyGenAlgorithm => {\n  const publicJwk = key.toJson()\n\n  if (publicJwk.kty === 'EC') {\n    if (publicJwk.crv === 'P-256' || publicJwk.crv === 'P-384' || publicJwk.crv === 'P-521') {\n      return { name: 'ECDSA', namedCurve: publicJwk.crv }\n    }\n\n    if (publicJwk.crv === 'secp256k1') {\n      return {\n        name: 'ECDSA',\n        namedCurve: 'K-256',\n      }\n    }\n  } else if (publicJwk.kty === 'OKP') {\n    if (publicJwk.crv === 'Ed25519') {\n      return { name: 'Ed25519' }\n    }\n  }\n\n  // TODO: support RSA, but i think we need some extra params for this\n  throw new CredoWebCryptoError(`Unsupported ${getJwkHumanDescription(key.toJson())}`)\n}\n\n// TODO: support RSA\nexport const cryptoKeyAlgorithmToCreateKeyOptions = (algorithm: KeyGenAlgorithm) => {\n  const algorithmName = algorithm.name.toUpperCase()\n  switch (algorithmName) {\n    case 'ED25519':\n      return {\n        kty: 'OKP',\n        crv: 'Ed25519',\n      } satisfies KmsCreateKeyType\n    case 'X25519':\n      return {\n        kty: 'OKP',\n        crv: 'X25519',\n      } satisfies KmsCreateKeyType\n    case 'ECDSA': {\n      const crv = (algorithm as EcKeyGenParams).namedCurve.toUpperCase()\n      switch (crv) {\n        case 'P-256':\n        case 'P-384':\n        case 'P-521':\n          return {\n            kty: 'EC',\n            crv,\n          } satisfies KmsCreateKeyType\n        case 'K-256':\n          return {\n            kty: 'EC',\n            crv: 'secp256k1',\n          } satisfies KmsCreateKeyType\n        default:\n          throw new CredoWebCryptoError(`Unsupported curve for ECDSA: ${(algorithm as EcKeyGenParams).namedCurve}`)\n      }\n    }\n    case 'RSASSA-PKCS1-V1_5':\n    case 'RSA-PSS': {\n      const rsaParams = algorithm as RsaHashedKeyGenParams\n\n      if (rsaParams.publicExponent) {\n        throw new CredoWebCryptoError('Custom exponent not suported for RSA')\n      }\n\n      if (rsaParams.modulusLength !== 2048 && rsaParams.modulusLength !== 3072 && rsaParams.modulusLength !== 4096) {\n        throw new CredoWebCryptoError(\n          `Unsupported modulusLength '${rsaParams.modulusLength}' for RSA key. Expected one of 2048, 3072, 4096.`\n        )\n      }\n\n      return {\n        kty: 'RSA',\n        modulusLength: rsaParams.modulusLength,\n      } satisfies KmsCreateKeyType\n    }\n  }\n\n  throw new CredoWebCryptoError(`Unsupported algorithm: ${algorithmName}`)\n}\n\nexport const spkiToPublicJwk = (spki: SubjectPublicKeyInfo): PublicJwk => {\n  if (spki.algorithm.isEqual(ecPublicKeyWithP256AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'P-256',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ecPublicKeyWithP384AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'P-384',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ecPublicKeyWithP521AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'P-521',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ecPublicKeyWithK256AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'secp256k1',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ed25519AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'OKP',\n      crv: 'Ed25519',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(x25519AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'OKP',\n      crv: 'X25519',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(rsaKeyAlgorithmIdentifier)) {\n    // The RSA key is another ASN.1 structure inside the subjectPublicKey bit string\n    // The first byte in the bit string is the number of unused bits (typically 0)\n    const keyWithoutUnusedBits = new Uint8Array(spki.subjectPublicKey).slice(1)\n\n    // Parse the RSA public key structure\n    const rsaPublicKey = AsnParser.parse(keyWithoutUnusedBits, RSAPublicKey)\n\n    return PublicJwk.fromPublicKey({\n      kty: 'RSA',\n      modulus: new Uint8Array(rsaPublicKey.modulus),\n      exponent: new Uint8Array(rsaPublicKey.publicExponent),\n    })\n  }\n\n  throw new CredoWebCryptoError(\n    `Unsupported algorithm: ${spki.algorithm.algorithm}, with params: ${spki.algorithm.parameters ? 'yes' : 'no'}`\n  )\n}\n\nexport const publicJwkToSpki = (publicJwk: PublicJwk): SubjectPublicKeyInfo => {\n  const publicKey = publicJwk.publicKey\n\n  if (publicKey.kty === 'RSA') {\n    const rsaPublicKey = new RSAPublicKey({\n      modulus: publicKey.modulus,\n      publicExponent: publicKey.exponent,\n    })\n\n    // 2. Encode the RSA public key to DER\n    const rsaPublicKeyDer = AsnSerializer.serialize(rsaPublicKey)\n\n    return new SubjectPublicKeyInfo({\n      algorithm: rsaKeyAlgorithmIdentifier,\n      subjectPublicKey: new Uint8Array([0, ...new Uint8Array(rsaPublicKeyDer)]),\n    })\n  }\n\n  const crvToAlgorithm: Record<(typeof publicKey)['crv'], AlgorithmIdentifier> = {\n    'P-256': ecPublicKeyWithP256AlgorithmIdentifier,\n    'P-384': ecPublicKeyWithP384AlgorithmIdentifier,\n    'P-521': ecPublicKeyWithP521AlgorithmIdentifier,\n    secp256k1: ecPublicKeyWithK256AlgorithmIdentifier,\n    Ed25519: ed25519AlgorithmIdentifier,\n    X25519: x25519AlgorithmIdentifier,\n  }\n\n  return new SubjectPublicKeyInfo({\n    algorithm: crvToAlgorithm[publicKey.crv],\n    subjectPublicKey: publicKey.publicKey,\n  })\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,iCAAiC,QAAoC;CAChF,MAAM,YAAY,IAAI,QAAQ;AAE9B,KAAI,UAAU,QAAQ,MAAM;AAC1B,MAAI,UAAU,QAAQ,WAAW,UAAU,QAAQ,WAAW,UAAU,QAAQ,QAC9E,QAAO;GAAE,MAAM;GAAS,YAAY,UAAU;GAAK;AAGrD,MAAI,UAAU,QAAQ,YACpB,QAAO;GACL,MAAM;GACN,YAAY;GACb;YAEM,UAAU,QAAQ,OAC3B;MAAI,UAAU,QAAQ,UACpB,QAAO,EAAE,MAAM,WAAW;;AAK9B,OAAM,IAAI,oBAAoB,eAAe,uBAAuB,IAAI,QAAQ,CAAC,GAAG;;AAItF,MAAa,wCAAwC,cAA+B;CAClF,MAAM,gBAAgB,UAAU,KAAK,aAAa;AAClD,SAAQ,eAAR;EACE,KAAK,UACH,QAAO;GACL,KAAK;GACL,KAAK;GACN;EACH,KAAK,SACH,QAAO;GACL,KAAK;GACL,KAAK;GACN;EACH,KAAK,SAAS;GACZ,MAAM,MAAO,UAA6B,WAAW,aAAa;AAClE,WAAQ,KAAR;IACE,KAAK;IACL,KAAK;IACL,KAAK,QACH,QAAO;KACL,KAAK;KACL;KACD;IACH,KAAK,QACH,QAAO;KACL,KAAK;KACL,KAAK;KACN;IACH,QACE,OAAM,IAAI,oBAAoB,gCAAiC,UAA6B,aAAa;;;EAG/G,KAAK;EACL,KAAK,WAAW;GACd,MAAM,YAAY;AAElB,OAAI,UAAU,eACZ,OAAM,IAAI,oBAAoB,uCAAuC;AAGvE,OAAI,UAAU,kBAAkB,QAAQ,UAAU,kBAAkB,QAAQ,UAAU,kBAAkB,KACtG,OAAM,IAAI,oBACR,8BAA8B,UAAU,cAAc,kDACvD;AAGH,UAAO;IACL,KAAK;IACL,eAAe,UAAU;IAC1B;;;AAIL,OAAM,IAAI,oBAAoB,0BAA0B,gBAAgB;;AAG1E,MAAa,mBAAmB,SAA0C;AACxE,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,2BAA2B,CACpD,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,0BAA0B,CACnD,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,0BAA0B,EAAE;EAGrD,MAAM,uBAAuB,IAAI,WAAW,KAAK,iBAAiB,CAAC,MAAM,EAAE;EAG3E,MAAM,eAAe,UAAU,MAAM,sBAAsB,aAAa;AAExE,SAAO,UAAU,cAAc;GAC7B,KAAK;GACL,SAAS,IAAI,WAAW,aAAa,QAAQ;GAC7C,UAAU,IAAI,WAAW,aAAa,eAAe;GACtD,CAAC;;AAGJ,OAAM,IAAI,oBACR,0BAA0B,KAAK,UAAU,UAAU,iBAAiB,KAAK,UAAU,aAAa,QAAQ,OACzG;;AAGH,MAAa,mBAAmB,cAA+C;CAC7E,MAAM,YAAY,UAAU;AAE5B,KAAI,UAAU,QAAQ,OAAO;EAC3B,MAAM,eAAe,IAAI,aAAa;GACpC,SAAS,UAAU;GACnB,gBAAgB,UAAU;GAC3B,CAAC;EAGF,MAAM,kBAAkB,cAAc,UAAU,aAAa;AAE7D,SAAO,IAAI,qBAAqB;GAC9B,WAAW;GACX,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,IAAI,WAAW,gBAAgB,CAAC,CAAC;GAC1E,CAAC;;AAYJ,QAAO,IAAI,qBAAqB;EAC9B,WAV6E;GAC7E,SAAS;GACT,SAAS;GACT,SAAS;GACT,WAAW;GACX,SAAS;GACT,QAAQ;GACT,CAG2B,UAAU;EACpC,kBAAkB,UAAU;EAC7B,CAAC"}
+{"version":3,"file":"keyAlgorithmConversion.mjs","names":[],"sources":["../../../../src/crypto/webcrypto/utils/keyAlgorithmConversion.ts"],"sourcesContent":["import { RSAPublicKey } from '@peculiar/asn1-rsa'\nimport { AsnParser, AsnSerializer } from '@peculiar/asn1-schema'\nimport { AlgorithmIdentifier, SubjectPublicKeyInfo } from '@peculiar/asn1-x509'\nimport { getJwkHumanDescription, type KmsCreateKeyType, PublicJwk } from '../../../modules/kms'\nimport {\n  ecPublicKeyWithK256AlgorithmIdentifier,\n  ecPublicKeyWithP256AlgorithmIdentifier,\n  ecPublicKeyWithP384AlgorithmIdentifier,\n  ecPublicKeyWithP521AlgorithmIdentifier,\n  ed25519AlgorithmIdentifier,\n  rsaKeyAlgorithmIdentifier,\n  x25519AlgorithmIdentifier,\n} from '../algorithmIdentifiers'\nimport { CredoWebCryptoError } from '../CredoWebCryptoError'\nimport type { EcKeyGenParams, KeyGenAlgorithm, RsaHashedKeyGenParams } from '../types'\n\nexport const publicJwkToCryptoKeyAlgorithm = (key: PublicJwk): KeyGenAlgorithm => {\n  const publicJwk = key.toJson()\n\n  if (publicJwk.kty === 'EC') {\n    if (publicJwk.crv === 'P-256' || publicJwk.crv === 'P-384' || publicJwk.crv === 'P-521') {\n      return { name: 'ECDSA', namedCurve: publicJwk.crv }\n    }\n\n    if (publicJwk.crv === 'secp256k1') {\n      return {\n        name: 'ECDSA',\n        namedCurve: 'K-256',\n      }\n    }\n  } else if (publicJwk.kty === 'OKP') {\n    if (publicJwk.crv === 'Ed25519') {\n      return { name: 'Ed25519' }\n    }\n  }\n\n  // TODO: support RSA, but i think we need some extra params for this\n  throw new CredoWebCryptoError(`Unsupported ${getJwkHumanDescription(key.toJson())}`)\n}\n\n// TODO: support RSA\nexport const cryptoKeyAlgorithmToCreateKeyOptions = (algorithm: KeyGenAlgorithm) => {\n  const algorithmName = algorithm.name.toUpperCase()\n  switch (algorithmName) {\n    case 'ED25519':\n      return {\n        kty: 'OKP',\n        crv: 'Ed25519',\n      } satisfies KmsCreateKeyType\n    case 'X25519':\n      return {\n        kty: 'OKP',\n        crv: 'X25519',\n      } satisfies KmsCreateKeyType\n    case 'ECDSA': {\n      const crv = (algorithm as EcKeyGenParams).namedCurve.toUpperCase()\n      switch (crv) {\n        case 'P-256':\n        case 'P-384':\n        case 'P-521':\n          return {\n            kty: 'EC',\n            crv,\n          } satisfies KmsCreateKeyType\n        case 'K-256':\n          return {\n            kty: 'EC',\n            crv: 'secp256k1',\n          } satisfies KmsCreateKeyType\n        default:\n          throw new CredoWebCryptoError(`Unsupported curve for ECDSA: ${(algorithm as EcKeyGenParams).namedCurve}`)\n      }\n    }\n    case 'RSASSA-PKCS1-V1_5':\n    case 'RSA-PSS': {\n      const rsaParams = algorithm as RsaHashedKeyGenParams\n\n      if (rsaParams.publicExponent) {\n        throw new CredoWebCryptoError('Custom exponent not suported for RSA')\n      }\n\n      if (rsaParams.modulusLength !== 2048 && rsaParams.modulusLength !== 3072 && rsaParams.modulusLength !== 4096) {\n        throw new CredoWebCryptoError(\n          `Unsupported modulusLength '${rsaParams.modulusLength}' for RSA key. Expected one of 2048, 3072, 4096.`\n        )\n      }\n\n      return {\n        kty: 'RSA',\n        modulusLength: rsaParams.modulusLength,\n      } satisfies KmsCreateKeyType\n    }\n  }\n\n  throw new CredoWebCryptoError(`Unsupported algorithm: ${algorithmName}`)\n}\n\nexport const spkiToPublicJwk = (spki: SubjectPublicKeyInfo): PublicJwk => {\n  if (spki.algorithm.isEqual(ecPublicKeyWithP256AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'P-256',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ecPublicKeyWithP384AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'P-384',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ecPublicKeyWithP521AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'P-521',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ecPublicKeyWithK256AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'EC',\n      crv: 'secp256k1',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(ed25519AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'OKP',\n      crv: 'Ed25519',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(x25519AlgorithmIdentifier)) {\n    return PublicJwk.fromPublicKey({\n      kty: 'OKP',\n      crv: 'X25519',\n      publicKey: new Uint8Array(spki.subjectPublicKey),\n    })\n  }\n  if (spki.algorithm.isEqual(rsaKeyAlgorithmIdentifier)) {\n    // The RSA key is another ASN.1 structure inside the subjectPublicKey bit string\n    // The first byte in the bit string is the number of unused bits (typically 0)\n    const keyWithoutUnusedBits = new Uint8Array(spki.subjectPublicKey).slice(1)\n\n    // Parse the RSA public key structure\n    const rsaPublicKey = AsnParser.parse(keyWithoutUnusedBits, RSAPublicKey)\n\n    return PublicJwk.fromPublicKey({\n      kty: 'RSA',\n      modulus: new Uint8Array(rsaPublicKey.modulus),\n      exponent: new Uint8Array(rsaPublicKey.publicExponent),\n    })\n  }\n\n  throw new CredoWebCryptoError(\n    `Unsupported algorithm: ${spki.algorithm.algorithm}, with params: ${spki.algorithm.parameters ? 'yes' : 'no'}`\n  )\n}\n\nexport const publicJwkToSpki = (publicJwk: PublicJwk): SubjectPublicKeyInfo => {\n  const publicKey = publicJwk.publicKey\n\n  if (publicKey.kty === 'RSA') {\n    const rsaPublicKey = new RSAPublicKey({\n      modulus: new Uint8Array(publicKey.modulus).buffer,\n      publicExponent: new Uint8Array(publicKey.exponent).buffer,\n    })\n\n    // 2. Encode the RSA public key to DER\n    const rsaPublicKeyDer = AsnSerializer.serialize(rsaPublicKey)\n\n    return new SubjectPublicKeyInfo({\n      algorithm: rsaKeyAlgorithmIdentifier,\n      subjectPublicKey: new Uint8Array([0, ...new Uint8Array(rsaPublicKeyDer)]).buffer,\n    })\n  }\n\n  const crvToAlgorithm: Record<(typeof publicKey)['crv'], AlgorithmIdentifier> = {\n    'P-256': ecPublicKeyWithP256AlgorithmIdentifier,\n    'P-384': ecPublicKeyWithP384AlgorithmIdentifier,\n    'P-521': ecPublicKeyWithP521AlgorithmIdentifier,\n    secp256k1: ecPublicKeyWithK256AlgorithmIdentifier,\n    Ed25519: ed25519AlgorithmIdentifier,\n    X25519: x25519AlgorithmIdentifier,\n  }\n\n  return new SubjectPublicKeyInfo({\n    algorithm: crvToAlgorithm[publicKey.crv],\n    subjectPublicKey: new Uint8Array(publicKey.publicKey).buffer,\n  })\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,MAAa,iCAAiC,QAAoC;CAChF,MAAM,YAAY,IAAI,QAAQ;AAE9B,KAAI,UAAU,QAAQ,MAAM;AAC1B,MAAI,UAAU,QAAQ,WAAW,UAAU,QAAQ,WAAW,UAAU,QAAQ,QAC9E,QAAO;GAAE,MAAM;GAAS,YAAY,UAAU;GAAK;AAGrD,MAAI,UAAU,QAAQ,YACpB,QAAO;GACL,MAAM;GACN,YAAY;GACb;YAEM,UAAU,QAAQ,OAC3B;MAAI,UAAU,QAAQ,UACpB,QAAO,EAAE,MAAM,WAAW;;AAK9B,OAAM,IAAI,oBAAoB,eAAe,uBAAuB,IAAI,QAAQ,CAAC,GAAG;;AAItF,MAAa,wCAAwC,cAA+B;CAClF,MAAM,gBAAgB,UAAU,KAAK,aAAa;AAClD,SAAQ,eAAR;EACE,KAAK,UACH,QAAO;GACL,KAAK;GACL,KAAK;GACN;EACH,KAAK,SACH,QAAO;GACL,KAAK;GACL,KAAK;GACN;EACH,KAAK,SAAS;GACZ,MAAM,MAAO,UAA6B,WAAW,aAAa;AAClE,WAAQ,KAAR;IACE,KAAK;IACL,KAAK;IACL,KAAK,QACH,QAAO;KACL,KAAK;KACL;KACD;IACH,KAAK,QACH,QAAO;KACL,KAAK;KACL,KAAK;KACN;IACH,QACE,OAAM,IAAI,oBAAoB,gCAAiC,UAA6B,aAAa;;;EAG/G,KAAK;EACL,KAAK,WAAW;GACd,MAAM,YAAY;AAElB,OAAI,UAAU,eACZ,OAAM,IAAI,oBAAoB,uCAAuC;AAGvE,OAAI,UAAU,kBAAkB,QAAQ,UAAU,kBAAkB,QAAQ,UAAU,kBAAkB,KACtG,OAAM,IAAI,oBACR,8BAA8B,UAAU,cAAc,kDACvD;AAGH,UAAO;IACL,KAAK;IACL,eAAe,UAAU;IAC1B;;;AAIL,OAAM,IAAI,oBAAoB,0BAA0B,gBAAgB;;AAG1E,MAAa,mBAAmB,SAA0C;AACxE,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,uCAAuC,CAChE,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,2BAA2B,CACpD,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,0BAA0B,CACnD,QAAO,UAAU,cAAc;EAC7B,KAAK;EACL,KAAK;EACL,WAAW,IAAI,WAAW,KAAK,iBAAiB;EACjD,CAAC;AAEJ,KAAI,KAAK,UAAU,QAAQ,0BAA0B,EAAE;EAGrD,MAAM,uBAAuB,IAAI,WAAW,KAAK,iBAAiB,CAAC,MAAM,EAAE;EAG3E,MAAM,eAAe,UAAU,MAAM,sBAAsB,aAAa;AAExE,SAAO,UAAU,cAAc;GAC7B,KAAK;GACL,SAAS,IAAI,WAAW,aAAa,QAAQ;GAC7C,UAAU,IAAI,WAAW,aAAa,eAAe;GACtD,CAAC;;AAGJ,OAAM,IAAI,oBACR,0BAA0B,KAAK,UAAU,UAAU,iBAAiB,KAAK,UAAU,aAAa,QAAQ,OACzG;;AAGH,MAAa,mBAAmB,cAA+C;CAC7E,MAAM,YAAY,UAAU;AAE5B,KAAI,UAAU,QAAQ,OAAO;EAC3B,MAAM,eAAe,IAAI,aAAa;GACpC,SAAS,IAAI,WAAW,UAAU,QAAQ,CAAC;GAC3C,gBAAgB,IAAI,WAAW,UAAU,SAAS,CAAC;GACpD,CAAC;EAGF,MAAM,kBAAkB,cAAc,UAAU,aAAa;AAE7D,SAAO,IAAI,qBAAqB;GAC9B,WAAW;GACX,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,IAAI,WAAW,gBAAgB,CAAC,CAAC,CAAC;GAC3E,CAAC;;AAYJ,QAAO,IAAI,qBAAqB;EAC9B,WAV6E;GAC7E,SAAS;GACT,SAAS;GACT,SAAS;GACT,WAAW;GACX,SAAS;GACT,QAAQ;GACT,CAG2B,UAAU;EACpC,kBAAkB,IAAI,WAAW,UAAU,UAAU,CAAC;EACvD,CAAC"}

package/build/error/index.js

@@ -1,7 +1,7 @@
 
 
 const require_CredoError = require('./CredoError.js');
-const require_RecordNotFoundError = require('./RecordNotFoundError.js');
-const require_RecordDuplicateError = require('./RecordDuplicateError.js');
 const require_ClassValidationError = require('./ClassValidationError.js');
+const require_RecordDuplicateError = require('./RecordDuplicateError.js');
+const require_RecordNotFoundError = require('./RecordNotFoundError.js');
 const require_ZodValidationError = require('./ZodValidationError.js');

package/build/error/index.mjs

@@ -1,7 +1,7 @@
 
 
 import { CredoError } from "./CredoError.mjs";
-import { RecordNotFoundError } from "./RecordNotFoundError.mjs";
-import { RecordDuplicateError } from "./RecordDuplicateError.mjs";
 import { ClassValidationError } from "./ClassValidationError.mjs";
+import { RecordDuplicateError } from "./RecordDuplicateError.mjs";
+import { RecordNotFoundError } from "./RecordNotFoundError.mjs";
 import { ZodValidationError } from "./ZodValidationError.mjs";