@distrohelena/canton-typescript-sdk 0.1.2 → 0.1.3

package/dist/client/canton-hashing-client.d.ts

@@ -1,8 +1,9 @@
+import { ExternalPartyCryptoKeyFormat } from "../core/types/external-party/external-party-crypto-key-format.js";
 export declare class CantonHashingClient {
     /** Computes a Canton multihash for the provided content and hash purpose. */
     computeHash(content: Uint8Array, purpose: number): Uint8Array;
     /** Computes a Canton multihash as lowercase hexadecimal for the provided content and hash purpose. */
     computeHashHex(content: Uint8Array, purpose: number): string;
     /** Computes the canonical Canton public-key fingerprint from serialized public key bytes. */
-    computePublicKeyFingerprint(publicKey: Uint8Array): string;
+    computePublicKeyFingerprint(publicKey: Uint8Array, format?: ExternalPartyCryptoKeyFormat): string;
 }

package/dist/client/canton-hashing-client.js

@@ -1,5 +1,4 @@
-import { computeCantonHash, computeCantonHashHex, } from "../core/hashing/canton-hash.js";
-import { CantonHashPurpose } from "../core/types/canton-hash-purpose.js";
+import { computeCantonHash, computeCantonHashHex, computeCantonPublicKeyFingerprint, } from "../core/hashing/canton-hash.js";
 export class CantonHashingClient {
     /** Computes a Canton multihash for the provided content and hash purpose. */
     computeHash(content, purpose) {
@@ -10,7 +9,7 @@ export class CantonHashingClient {
         return computeCantonHashHex(content, purpose);
     }
     /** Computes the canonical Canton public-key fingerprint from serialized public key bytes. */
-    computePublicKeyFingerprint(publicKey) {
-        return computeCantonHashHex(publicKey, CantonHashPurpose.publicKeyFingerprint);
+    computePublicKeyFingerprint(publicKey, format) {
+        return computeCantonPublicKeyFingerprint(publicKey, format) ?? "";
     }
 }

package/dist/core/hashing/canton-hash.d.ts

@@ -1,3 +1,3 @@
 export declare function computeCantonHash(content: Uint8Array, purpose: number): Uint8Array;
 export declare function computeCantonHashHex(content: Uint8Array, purpose: number): string;
-export declare function computeCantonPublicKeyFingerprint(publicKey: Uint8Array | undefined): string | undefined;
+export declare function computeCantonPublicKeyFingerprint(publicKey: Uint8Array | undefined, format?: string): string | undefined;

package/dist/core/hashing/canton-hash.js

@@ -1,6 +1,11 @@
 import { createHash } from "node:crypto";
 import { CantonHashPurpose } from "../types/canton-hash-purpose.js";
 const sha256MultihashPrefix = new Uint8Array([0x12, 0x20]);
+const asn1SequenceTag = 0x30;
+const asn1ObjectIdentifierTag = 0x06;
+const asn1BitStringTag = 0x03;
+const ed25519ObjectIdentifier = new Uint8Array([0x2b, 0x65, 0x70]);
+const derX509SubjectPublicKeyInfoFormat = "derX509SubjectPublicKeyInfo";
 export function computeCantonHash(content, purpose) {
     const purposePrefix = Buffer.alloc(4);
     purposePrefix.writeUInt32BE(purpose, 0);
@@ -16,9 +21,99 @@ export function computeCantonHash(content, purpose) {
 export function computeCantonHashHex(content, purpose) {
     return Buffer.from(computeCantonHash(content, purpose)).toString("hex");
 }
-export function computeCantonPublicKeyFingerprint(publicKey) {
+export function computeCantonPublicKeyFingerprint(publicKey, format) {
     if (publicKey === undefined || publicKey.length === 0) {
         return undefined;
     }
-    return computeCantonHashHex(publicKey, CantonHashPurpose.publicKeyFingerprint);
+    return computeCantonHashHex(normalizePublicKeyForFingerprint(publicKey, format), CantonHashPurpose.publicKeyFingerprint);
+}
+function normalizePublicKeyForFingerprint(publicKey, format) {
+    if (format !== derX509SubjectPublicKeyInfoFormat) {
+        return publicKey;
+    }
+    return tryExtractEd25519PublicKeyFromSpki(publicKey) ?? publicKey;
+}
+function tryExtractEd25519PublicKeyFromSpki(spki) {
+    try {
+        const outer = readAsn1Element(spki, 0);
+        if (outer.tag !== asn1SequenceTag) {
+            return undefined;
+        }
+        const algorithm = readAsn1Element(spki, outer.contentOffset);
+        if (algorithm.tag !== asn1SequenceTag) {
+            return undefined;
+        }
+        const algorithmIdentifier = readAsn1Element(spki, algorithm.contentOffset);
+        if (algorithmIdentifier.tag !== asn1ObjectIdentifierTag
+            || !bytesEqual(spki.subarray(algorithmIdentifier.contentOffset, algorithmIdentifier.endOffset), ed25519ObjectIdentifier)) {
+            return undefined;
+        }
+        const subjectPublicKey = readAsn1Element(spki, algorithm.endOffset);
+        if (subjectPublicKey.tag !== asn1BitStringTag) {
+            return undefined;
+        }
+        const bitString = spki.subarray(subjectPublicKey.contentOffset, subjectPublicKey.endOffset);
+        if (bitString.length !== 33 || bitString[0] !== 0) {
+            return undefined;
+        }
+        return bitString.subarray(1);
+    }
+    catch {
+        return undefined;
+    }
+}
+function readAsn1Element(bytes, offset) {
+    if (offset + 2 > bytes.length) {
+        throw new Error("ASN.1 element header is truncated.");
+    }
+    const tag = bytes[offset];
+    const lengthResult = readAsn1Length(bytes, offset + 1);
+    const contentOffset = lengthResult.nextOffset;
+    const endOffset = contentOffset + lengthResult.length;
+    if (endOffset > bytes.length) {
+        throw new Error("ASN.1 element content is truncated.");
+    }
+    return {
+        tag,
+        contentOffset,
+        endOffset,
+    };
+}
+function readAsn1Length(bytes, offset) {
+    if (offset >= bytes.length) {
+        throw new Error("ASN.1 length is truncated.");
+    }
+    const firstByte = bytes[offset];
+    if ((firstByte & 0x80) === 0) {
+        return {
+            length: firstByte,
+            nextOffset: offset + 1,
+        };
+    }
+    const lengthByteCount = firstByte & 0x7f;
+    if (lengthByteCount === 0 || lengthByteCount > 4) {
+        throw new Error("ASN.1 length encoding is unsupported.");
+    }
+    if (offset + 1 + lengthByteCount > bytes.length) {
+        throw new Error("ASN.1 long-form length is truncated.");
+    }
+    let length = 0;
+    for (let index = 0; index < lengthByteCount; index += 1) {
+        length = (length << 8) | bytes[offset + 1 + index];
+    }
+    return {
+        length,
+        nextOffset: offset + 1 + lengthByteCount,
+    };
+}
+function bytesEqual(left, right) {
+    if (left.length !== right.length) {
+        return false;
+    }
+    for (let index = 0; index < left.length; index += 1) {
+        if (left[index] !== right[index]) {
+            return false;
+        }
+    }
+    return true;
 }

package/dist/transports/grpc/mappers/topology-common-mapper.js

@@ -342,9 +342,10 @@ export function mapSdkDuration(value) {
     });
 }
 export function mapSdkSigningPublicKey(value) {
+    const format = mapSdkCryptoKeyFormat(value?.format);
     return new TopologySigningPublicKey({
-        fingerprint: computeCantonPublicKeyFingerprint(value?.publicKey),
-        format: mapSdkCryptoKeyFormat(value?.format),
+        fingerprint: computeCantonPublicKeyFingerprint(value?.publicKey, format),
+        format,
         publicKey: value?.publicKey,
         scheme: undefined,
         usage: (value?.usage ?? []).map(mapSdkSigningKeyUsage),
@@ -352,9 +353,10 @@ export function mapSdkSigningPublicKey(value) {
     });
 }
 export function mapSdkEncryptionPublicKey(value) {
+    const format = mapSdkCryptoKeyFormat(value?.format);
     return new TopologyEncryptionPublicKey({
-        fingerprint: computeCantonPublicKeyFingerprint(value?.publicKey),
-        format: mapSdkCryptoKeyFormat(value?.format),
+        fingerprint: computeCantonPublicKeyFingerprint(value?.publicKey, format),
+        format,
         publicKey: value?.publicKey,
         scheme: undefined,
         keySpec: mapSdkEncryptionKeySpec(value?.keySpec),

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@distrohelena/canton-typescript-sdk",
-    "version": "0.1.2",
+    "version": "0.1.3",
     "license": "Apache-2.0",
     "type": "module",
     "main": "./dist/index.js",