@darkbio/crypto 0.1.6 → 0.2.0

package/README.md

@@ -9,15 +9,13 @@ The library is opinionated. Parameters and primitives were selected to provide m
 
 ![](docs/overview.png)
 
-- Certificates
-    - **x509 ([RFC-5280](https://datatracker.ietf.org/doc/html/rfc5280))**: `xDSA`, `xHPKE`
 - Digital signatures
     - **xDSA ([RFC-DRAFT](https://datatracker.ietf.org/doc/html/draft-ietf-lamps-pq-composite-sigs))**: `MLDSA`, `EdDSA`, `SHA512`
         - **EdDSA ([RFC-8032](https://datatracker.ietf.org/doc/html/rfc8032))**: `Ed25519`
-        - **MLDSA ([RFC-DRAFT](https://datatracker.ietf.org/doc/html/draft-ietf-lamps-dilithium-certificates))**: Security level 3 (`ML-DSA-65`)
+        - **MLDSA ([RFC-9881](https://datatracker.ietf.org/doc/html/rfc9881))**: Security level 3 (`ML-DSA-65`)
     - **RSA¹ ([RFC-8017](https://datatracker.ietf.org/doc/html/rfc8017))**: 2048-bit, `SHA256`
 - Encryption
-    - **xHPKE ([RFC-9180](https://datatracker.ietf.org/doc/html/rfc9180))**: `X-WING`, `HKDF`, `SHA256`, `ChaCha20`, `Poly1305`
+    - **xHPKE ([RFC-9180](https://datatracker.ietf.org/doc/html/rfc9180))**: `X-WING`, `HKDF`, `SHA256`, `ChaCha20`, `Poly1305`, `dark-bio-v1:` domain prefix
         - **X-WING ([RFC-DRAFT](https://datatracker.ietf.org/doc/html/draft-connolly-cfrg-xwing-kem))**: `MLKEM`, `ECC`
             - **ECC ([RFC-7748](https://datatracker.ietf.org/doc/html/rfc7748))**: `X25519`
             - **MLKEM([RFC-DRAFT](https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-ikev2-mlkem))**: Security level 3 (`ML-KEM-768`)
@@ -28,6 +26,9 @@ The library is opinionated. Parameters and primitives were selected to provide m
 - Serialization
     - **CBOR² ([RFC-8949](https://datatracker.ietf.org/doc/html/rfc8949))**: restricted to `bool`,`null`, `integer`, `text`, `bytes`, `array`, `map[int]`, `option`
     - **COSE ([RFC-8152](https://datatracker.ietf.org/doc/html/rfc8152))**: `COSE_Sign1`, `COSE_Encrypt0`, `dark-bio-v1:` domain prefix
+- Credential / Attestation
+    - **CWT ([RFC-8392](https://datatracker.ietf.org/doc/html/rfc8392))**: `xDSA`, `xHPKE`
+        - **EAT ([RFC-9711](https://datatracker.ietf.org/doc/html/rfc9711))**
 
 *¹ Whilst RSA is used in the Dark Bio project for secure boot signatures on pre-quantum hardware, there was no reason to expose that in the TypeScript wrappers. It's available in Rust so anyone needing it can expose it easily themselves.*
 
@@ -48,4 +49,4 @@ Sibling wrapper exists in one other repo:
 
 Shoutout to Filippo Valsorda ([@filosottile](https://github.com/filosottile)) for lots of tips and nudges on what kind of cryptographic primitives to use and how to combine them properly; and also for his work in general on cryptography standards.
 
-Naturally, many thanks to the authors of all the libraries this project depends on.
+Naturally, many thanks to the authors of all the libraries this project depends on.

package/dist/cose.d.ts

@@ -2,49 +2,22 @@ import { SecretKey as XdsaSecretKey, PublicKey as XdsaPublicKey, Fingerprint as
 import { SecretKey as XhpkeSecretKey, PublicKey as XhpkePublicKey, Fingerprint as XhpkeFingerprint } from './xhpke.js';
 /**
  * Create a COSE_Sign1 signature with an embedded payload.
- *
- * @param msgToEmbed - The payload to embed and sign (will be CBOR encoded)
- * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
- * @param signer - The xDSA secret key
- * @param domain - Application-specific domain separator
- * @returns The serialized COSE_Sign1 structure
  */
 export declare function sign<E, A>(msgToEmbed: E, msgToAuth: A, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Create a COSE_Sign1 signature without an embedded payload (detached mode).
- *
- * @param msgToAuth - The message to authenticate (will be CBOR encoded)
- * @param signer - The xDSA secret key
- * @param domain - Application-specific domain separator
- * @returns The serialized COSE_Sign1 structure (with null payload)
  */
 export declare function signDetached<A>(msgToAuth: A, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Verify a COSE_Sign1 signature and return the embedded payload.
- *
- * @param msgToCheck - The COSE_Sign1 structure to verify
- * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
- * @param verifier - The xDSA public key
- * @param domain - Application-specific domain separator
- * @param maxDriftSecs - Maximum allowed clock drift (undefined for no time check)
- * @returns The decoded embedded payload
  */
 export declare function verify<T, A>(msgToCheck: Uint8Array, msgToAuth: A, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
 /**
  * Verify a COSE_Sign1 signature with a detached payload.
- *
- * @param msgToCheck - The COSE_Sign1 structure to verify
- * @param msgToAuth - The detached message to authenticate (will be CBOR encoded)
- * @param verifier - The xDSA public key
- * @param domain - Application-specific domain separator
- * @param maxDriftSecs - Maximum allowed clock drift (undefined for no time check)
  */
 export declare function verifyDetached<A>(msgToCheck: Uint8Array, msgToAuth: A, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<void>;
 /**
  * Extract the signer's fingerprint from a COSE_Sign1 without verifying.
- *
- * @param signature - The COSE_Sign1 structure
- * @returns The signer fingerprint
  */
 export declare function signer(signature: Uint8Array): Promise<XdsaFingerprint>;
 /**
@@ -52,66 +25,26 @@ export declare function signer(signature: Uint8Array): Promise<XdsaFingerprint>;
  *
  * Warning: The returned payload is unauthenticated and should not be
  * trusted until verified with `verify`.
- *
- * @param signature - The COSE_Sign1 structure
- * @returns The decoded (but unverified) payload
  */
 export declare function peek<T>(signature: Uint8Array): Promise<T>;
 /**
  * Extract the recipient's fingerprint from a COSE_Encrypt0 without decrypting.
- *
- * @param ciphertext - The COSE_Encrypt0 structure
- * @returns The recipient fingerprint
  */
 export declare function recipient(ciphertext: Uint8Array): Promise<XhpkeFingerprint>;
 /**
  * Sign a message then encrypt it to a recipient (sign-then-encrypt).
- *
- * @param msgToSeal - The payload to sign and encrypt (will be CBOR encoded)
- * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
- * @param signerKey - The xDSA secret key to sign with
- * @param recipientKey - The xHPKE public key to encrypt to
- * @param domain - Application-specific domain separator
- * @returns The sealed COSE structure
  */
 export declare function seal<S, A>(msgToSeal: S, msgToAuth: A, signerKey: XdsaSecretKey, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Decrypt and verify a sealed message.
- *
- * @param msgToOpen - The sealed COSE structure
- * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
- * @param recipientKey - The xHPKE secret key to decrypt with
- * @param senderKey - The xDSA public key to verify against
- * @param domain - Application-specific domain separator
- * @param maxDriftSecs - Maximum allowed clock drift (undefined for no time check)
- * @returns The decoded payload
  */
 export declare function open<T, A>(msgToOpen: Uint8Array, msgToAuth: A, recipientKey: XhpkeSecretKey, senderKey: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
 /**
  * Encrypt an already-signed COSE_Sign1 to a recipient.
- *
- * For most use cases, prefer `seal` which signs and encrypts in one step.
- * Use this only when re-encrypting a message to a different recipient
- * without access to the original signer's key.
- *
- * @param sign1 - The COSE_Sign1 structure to encrypt
- * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
- * @param recipientKey - The xHPKE public key to encrypt to
- * @param domain - Application-specific domain separator
- * @returns The COSE_Encrypt0 structure
  */
 export declare function encrypt<A>(sign1: Uint8Array, msgToAuth: A, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Decrypt a sealed message without verifying the signature.
- *
- * This allows inspecting the signer before verification. Use `signer` to
- * extract the signer's fingerprint, then verify with `verify`.
- *
- * @param msgToOpen - The COSE_Encrypt0 structure
- * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
- * @param recipientKey - The xHPKE secret key to decrypt with
- * @param domain - Application-specific domain separator
- * @returns The decrypted COSE_Sign1 structure (not yet verified)
  */
 export declare function decrypt<A>(msgToOpen: Uint8Array, msgToAuth: A, recipientKey: XhpkeSecretKey, domain: Uint8Array): Promise<Uint8Array>;
 //# sourceMappingURL=cose.d.ts.map

package/dist/cose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cose.d.ts","sourceRoot":"","sources":["../src/cose.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC1B,WAAW,IAAI,eAAe,EAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,IAAI,cAAc,EAC3B,SAAS,IAAI,cAAc,EAC3B,WAAW,IAAI,gBAAgB,EAChC,MAAM,YAAY,CAAC;AA6BpB;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,UAAU,EAAE,CAAC,EACb,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,CAAC,EAC/B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;GAKG;AACH,wBAAsB,MAAM,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAI5E;AAED;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAI/D;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,aAAa,EACxB,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAarB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB"}
+{"version":3,"file":"cose.d.ts","sourceRoot":"","sources":["../src/cose.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC1B,WAAW,IAAI,eAAe,EAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,IAAI,cAAc,EAC3B,SAAS,IAAI,cAAc,EAC3B,WAAW,IAAI,gBAAgB,EAChC,MAAM,YAAY,CAAC;AA6BpB;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,UAAU,EAAE,CAAC,EACb,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAIrB;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,CAAC,EAC/B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAG5E;AAED;;;;;GAKG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAI/D;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAG3B;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,aAAa,EACxB,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAarB;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB"}

package/dist/cwt.d.ts

@@ -0,0 +1,205 @@
+import { SecretKey as XdsaSecretKey, PublicKey as XdsaPublicKey, Fingerprint as XdsaFingerprint } from './xdsa.js';
+import { PublicKey as XhpkePublicKey } from './xhpke.js';
+/**
+ * Debug port state per RFC 9711 Section 4.2.9.
+ */
+export declare enum DebugState {
+    /** Debug is currently enabled. */
+    Enabled = 0,
+    /** Debug is currently disabled. */
+    Disabled = 1,
+    /** Debug was disabled at boot and has not been enabled since. */
+    DisabledSinceBoot = 2,
+    /** Debug is disabled and cannot be re-enabled. */
+    DisabledPermanently = 3,
+    /** All debug, including DMA-based, is permanently disabled. */
+    DisabledFullyPermanently = 4
+}
+/**
+ * Token intended purpose per RFC 9711 Section 4.3.3.
+ */
+export declare enum IntendedUse {
+    /** General-purpose attestation. */
+    Generic = 1,
+    /** Attestation for service registration. */
+    Registration = 2,
+    /** Attestation prior to key/config provisioning. */
+    Provisioning = 3,
+    /** Attestation for certificate signing requests. */
+    CertIssuance = 4,
+    /** Attestation accompanying a proof-of-possession. */
+    ProofOfPossession = 5
+}
+/**
+ * A CWT claims set with typed accessors for standard CWT (RFC 8392) and
+ * EAT (RFC 9711) claims.
+ *
+ * Standard claims are exposed as typed properties. Custom or application-
+ * specific claims can be accessed via `get()` / `set()` using their integer key.
+ */
+export declare class Claims {
+    private readonly map;
+    /** Creates an empty claims set. */
+    constructor();
+    private static fromMap;
+    /** Issuer: identifies the principal that issued the token (key 1). */
+    get issuer(): string | undefined;
+    set issuer(value: string | undefined);
+    /** Subject: identifies the principal that is the subject of the token (key 2). */
+    get subject(): string | undefined;
+    set subject(value: string | undefined);
+    /** Audience: identifies the recipients the token is intended for (key 3). */
+    get audience(): string | undefined;
+    set audience(value: string | undefined);
+    /**
+     * Expiration: the time on or after which the token must not be accepted
+     * (key 4, Unix timestamp in seconds).
+     */
+    get expiration(): number | undefined;
+    set expiration(value: number | undefined);
+    /**
+     * NotBefore: the time before which the token must not be accepted
+     * (key 5, Unix timestamp in seconds).
+     */
+    get notBefore(): number | undefined;
+    set notBefore(value: number | undefined);
+    /**
+     * IssuedAt: the time at which the token was issued
+     * (key 6, Unix timestamp in seconds).
+     */
+    get issuedAt(): number | undefined;
+    set issuedAt(value: number | undefined);
+    /** TokenID: a unique identifier for the token (key 7). */
+    get tokenId(): Uint8Array | undefined;
+    set tokenId(value: Uint8Array | undefined);
+    /**
+     * Sets the Confirm claim to bind an xDSA public key to this token.
+     * Encoded as: `{8: {1: {1: -70000, -2: <key_bytes>}}}`
+     */
+    setConfirmXdsa(key: XdsaPublicKey): void;
+    /**
+     * Sets the Confirm claim to bind an xHPKE public key to this token.
+     * Encoded as: `{8: {1: {1: -70001, -2: <key_bytes>}}}`
+     */
+    setConfirmXhpke(key: XhpkePublicKey): void;
+    /**
+     * Extracts the bound xDSA public key from the Confirm claim, or undefined
+     * if absent or a different key type.
+     */
+    getConfirmXdsa(): Promise<XdsaPublicKey | undefined>;
+    /**
+     * Extracts the bound xHPKE public key from the Confirm claim, or undefined
+     * if absent or a different key type.
+     */
+    getConfirmXhpke(): Promise<XhpkePublicKey | undefined>;
+    private readConfirm;
+    /** UEID: a globally unique device identifier (key 256). */
+    get ueid(): Uint8Array | undefined;
+    set ueid(value: Uint8Array | undefined);
+    /**
+     * OEMID: hardware manufacturer identifier (key 258).
+     *
+     * Use {@link setOemidRandom}, {@link setOemidIeee}, or {@link setOemidPen} to set.
+     * The getter returns the raw CBOR value (Uint8Array or number).
+     */
+    get oemid(): Uint8Array | number | undefined;
+    /** Sets OEMID to a 16-byte random manufacturer identifier. */
+    setOemidRandom(id: Uint8Array): void;
+    /** Sets OEMID to a 3-byte IEEE OUI/MA-L. */
+    setOemidIeee(id: Uint8Array): void;
+    /** Sets OEMID to an IANA Private Enterprise Number. */
+    setOemidPen(pen: number): void;
+    /** HwModel: product or board model identifier (key 259). */
+    get hwModel(): Uint8Array | undefined;
+    set hwModel(value: Uint8Array | undefined);
+    /**
+     * HwVersion: hardware revision identifier (key 260).
+     * Stored as a 1-element CBOR array per RFC 9711 Section 4.2.5.
+     */
+    get hwVersion(): string | undefined;
+    set hwVersion(value: string | undefined);
+    /** Uptime: seconds since last boot (key 261). */
+    get uptime(): number | undefined;
+    set uptime(value: number | undefined);
+    /** OemBoot: whether the boot chain is OEM-authorized (key 262). */
+    get oemBoot(): boolean | undefined;
+    set oemBoot(value: boolean | undefined);
+    /** DebugStatus: debug port state (key 263). */
+    get debugStatus(): DebugState | undefined;
+    set debugStatus(value: DebugState | undefined);
+    /** BootCount: number of times the device has booted (key 267). */
+    get bootCount(): number | undefined;
+    set bootCount(value: number | undefined);
+    /** BootSeed: random value unique to the current boot cycle (key 268). */
+    get bootSeed(): Uint8Array | undefined;
+    set bootSeed(value: Uint8Array | undefined);
+    /** SwName: name of the firmware or software (key 270). */
+    get swName(): string | undefined;
+    set swName(value: string | undefined);
+    /**
+     * SwVersion: software version identifier (key 271).
+     * Stored as a 1-element CBOR array per RFC 9711 Section 4.2.7.
+     */
+    get swVersion(): string | undefined;
+    set swVersion(value: string | undefined);
+    /** IntendedUse: the token's purpose (key 275). */
+    get intendedUse(): IntendedUse | undefined;
+    set intendedUse(value: IntendedUse | undefined);
+    /** Gets a custom claim by its integer key. */
+    get(key: number): unknown;
+    /** Sets a custom claim by its integer key. */
+    set(key: number, value: unknown): void;
+    private setOrDelete;
+    /** Encodes the claims to CBOR bytes. @internal */
+    encode(): Uint8Array;
+    /** Decodes claims from CBOR bytes. @internal */
+    static decode(bytes: Uint8Array): Claims;
+}
+/**
+ * Issues a CWT by signing the claims with COSE Sign1.
+ *
+ * Uses the current system time as the COSE signature timestamp.
+ *
+ * @param claims - The claims to include in the token
+ * @param signer - The xDSA secret key to sign with
+ * @param domain - Application-specific domain separator
+ * @returns The serialized CWT
+ */
+export declare function issue(claims: Claims, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+/**
+ * Verifies a CWT's COSE signature and temporal validity, then returns the
+ * decoded claims.
+ *
+ * When `now` is provided (Unix timestamp in seconds), temporal claims are
+ * validated: nbf must be present and `nbf <= now`, and if exp is present
+ * then `now < exp`. When `now` is undefined, temporal validation is skipped.
+ *
+ * @param token - The serialized CWT
+ * @param verifier - The xDSA public key to verify against
+ * @param domain - Application-specific domain separator
+ * @param now - Current Unix timestamp for temporal validation (undefined to skip)
+ * @returns The decoded claims
+ */
+export declare function verify(token: Uint8Array, verifier: XdsaPublicKey, domain: Uint8Array, now?: number): Promise<Claims>;
+/**
+ * Extracts the signer's fingerprint from a CWT without verifying.
+ *
+ * The returned data is unauthenticated. Use this to look up the appropriate
+ * verification key before calling {@link verify}.
+ *
+ * @param token - The serialized CWT
+ * @returns The signer fingerprint
+ */
+export declare function signer(token: Uint8Array): Promise<XdsaFingerprint>;
+/**
+ * Extracts claims from a CWT without verifying the signature.
+ *
+ * **Warning**: The returned payload is unauthenticated and should not be
+ * trusted until verified with {@link verify}. Use {@link signer} to extract
+ * the signer's fingerprint for key lookup.
+ *
+ * @param token - The serialized CWT
+ * @returns The decoded (but unverified) claims
+ */
+export declare function peek(token: Uint8Array): Promise<Claims>;
+//# sourceMappingURL=cwt.d.ts.map

package/dist/cwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwt.d.ts","sourceRoot":"","sources":["../src/cwt.ts"],"names":[],"mappings":"AA+CA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC1B,WAAW,IAAI,eAAe,EAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,SAAS,IAAI,cAAc,EAAE,MAAM,YAAY,CAAC;AAezD;;GAEG;AACH,oBAAY,UAAU;IACpB,kCAAkC;IAClC,OAAO,IAAI;IACX,mCAAmC;IACnC,QAAQ,IAAI;IACZ,iEAAiE;IACjE,iBAAiB,IAAI;IACrB,kDAAkD;IAClD,mBAAmB,IAAI;IACvB,+DAA+D;IAC/D,wBAAwB,IAAI;CAC7B;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,mCAAmC;IACnC,OAAO,IAAI;IACX,4CAA4C;IAC5C,YAAY,IAAI;IAChB,oDAAoD;IACpD,YAAY,IAAI;IAChB,oDAAoD;IACpD,YAAY,IAAI;IAChB,sDAAsD;IACtD,iBAAiB,IAAI;CACtB;AAED;;;;;;GAMG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAuB;IAE3C,mCAAmC;;IAKnC,OAAO,CAAC,MAAM,CAAC,OAAO;IAQtB,sEAAsE;IACtE,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEnC;IAED,kFAAkF;IAClF,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEpC;IAED,6EAA6E;IAC7E,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAErC;IAED;;;OAGG;IACH,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IACD,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEvC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED;;;OAGG;IACH,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAErC;IAED,0DAA0D;IAC1D,IAAI,OAAO,IAAI,UAAU,GAAG,SAAS,CAEpC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAExC;IAED;;;OAGG;IACH,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAexC;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI;IAe1C;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAM1D;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAM5D,OAAO,CAAC,WAAW;IAiBnB,2DAA2D;IAC3D,IAAI,IAAI,IAAI,UAAU,GAAG,SAAS,CAEjC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAErC;IAED;;;;;OAKG;IACH,IAAI,KAAK,IAAI,UAAU,GAAG,MAAM,GAAG,SAAS,CAE3C;IAED,8DAA8D;IAC9D,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAOpC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAOlC,uDAAuD;IACvD,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI9B,4DAA4D;IAC5D,IAAI,OAAO,IAAI,UAAU,GAAG,SAAS,CAEpC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAExC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAIlC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED,iDAAiD;IACjD,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEnC;IAED,mEAAmE;IACnE,IAAI,OAAO,IAAI,OAAO,GAAG,SAAS,CAEjC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,EAErC;IAED,+CAA+C;IAC/C,IAAI,WAAW,IAAI,UAAU,GAAG,SAAS,CAIxC;IACD,IAAI,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAE5C;IAED,kEAAkE;IAClE,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED,yEAAyE;IACzE,IAAI,QAAQ,IAAI,UAAU,GAAG,SAAS,CAErC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAEzC;IAED,0DAA0D;IAC1D,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEnC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAIlC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED,kDAAkD;IAClD,IAAI,WAAW,IAAI,WAAW,GAAG,SAAS,CAIzC;IACD,IAAI,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,EAE7C;IAED,8CAA8C;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,8CAA8C;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAItC,OAAO,CAAC,WAAW;IAQnB,kDAAkD;IAClD,MAAM,IAAI,UAAU;IAIpB,gDAAgD;IAChD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM;CAczC;AAED;;;;;;;;;GASG;AACH,wBAAsB,KAAK,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAIrB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,MAAM,CAC1B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAGxE;AAED;;;;;;;;;GASG;AACH,wBAAsB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAI7D"}

package/dist/index.d.ts

@@ -5,4 +5,5 @@ export * as x509 from './x509.js';
 export * as xdsa from './xdsa.js';
 export * as xhpke from './xhpke.js';
 export * as cose from './cose.js';
+export * as cwt from './cwt.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC"}