@enbox/crypto 0.0.4 → 0.0.5

package/dist/esm/cose/cbor.js

@@ -0,0 +1,35 @@
+import { decode as cborDecode, encode as cborEncode } from 'cborg';
+/**
+ * CBOR (Concise Binary Object Representation) encoding and decoding utilities.
+ *
+ * Provides a thin wrapper around the `cborg` library, exposing `encode` and `decode`
+ * operations for use by COSE and EAT implementations.
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc8949 | RFC 8949 — CBOR}
+ */
+export class Cbor {
+    /**
+     * Encodes a JavaScript value to a CBOR byte string.
+     *
+     * @param value - The value to encode. Supports objects, arrays, strings, numbers,
+     *   booleans, null, undefined, Uint8Array (encoded as CBOR byte string), and Map.
+     * @returns The CBOR-encoded bytes.
+     */
+    static encode(value) {
+        return cborEncode(value);
+    }
+    /**
+     * Decodes a CBOR byte string to a JavaScript value.
+     *
+     * CBOR maps are decoded as JavaScript `Map` instances to support integer keys,
+     * which is required by COSE (RFC 9052) and EAT (RFC 9711).
+     *
+     * @param data - The CBOR-encoded bytes to decode.
+     * @returns The decoded JavaScript value.
+     * @throws If the input is not valid CBOR.
+     */
+    static decode(data) {
+        return cborDecode(data, { useMaps: true });
+    }
+}
+//# sourceMappingURL=cbor.js.map

package/dist/esm/cose/cbor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbor.js","sourceRoot":"","sources":["../../../src/cose/cbor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,OAAO,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,OAAO,IAAI;IACf;;;;;;OAMG;IACI,MAAM,CAAC,MAAM,CAAC,KAAc;QACjC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACI,MAAM,CAAC,MAAM,CAAc,IAAgB;QAChD,OAAO,UAAU,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAM,CAAC;IAClD,CAAC;CACF"}

package/dist/esm/cose/cose-key.js

@@ -0,0 +1,312 @@
+import { Convert } from '@enbox/common';
+import { CryptoError, CryptoErrorCode } from '../crypto-error.js';
+/**
+ * COSE Key Type values (RFC 9052, Section 7).
+ *
+ * @see {@link https://www.iana.org/assignments/cose/cose.xhtml#key-type | IANA COSE Key Types}
+ */
+export var CoseKeyType;
+(function (CoseKeyType) {
+    /** Octet Key Pair (e.g., Ed25519, X25519) */
+    CoseKeyType[CoseKeyType["OKP"] = 1] = "OKP";
+    /** Elliptic Curve (e.g., P-256, P-384, P-521) */
+    CoseKeyType[CoseKeyType["EC2"] = 2] = "EC2";
+    /** Symmetric key */
+    CoseKeyType[CoseKeyType["Symmetric"] = 4] = "Symmetric";
+})(CoseKeyType || (CoseKeyType = {}));
+/**
+ * COSE Elliptic Curve identifiers (RFC 9053, Section 7.1).
+ *
+ * @see {@link https://www.iana.org/assignments/cose/cose.xhtml#elliptic-curves | IANA COSE Elliptic Curves}
+ */
+export var CoseEllipticCurve;
+(function (CoseEllipticCurve) {
+    /** NIST P-256 (secp256r1) */
+    CoseEllipticCurve[CoseEllipticCurve["P256"] = 1] = "P256";
+    /** NIST P-384 (secp384r1) */
+    CoseEllipticCurve[CoseEllipticCurve["P384"] = 2] = "P384";
+    /** NIST P-521 (secp521r1) */
+    CoseEllipticCurve[CoseEllipticCurve["P521"] = 3] = "P521";
+    /** X25519 for ECDH */
+    CoseEllipticCurve[CoseEllipticCurve["X25519"] = 4] = "X25519";
+    /** X448 for ECDH */
+    CoseEllipticCurve[CoseEllipticCurve["X448"] = 5] = "X448";
+    /** Ed25519 for EdDSA */
+    CoseEllipticCurve[CoseEllipticCurve["Ed25519"] = 6] = "Ed25519";
+    /** Ed448 for EdDSA */
+    CoseEllipticCurve[CoseEllipticCurve["Ed448"] = 7] = "Ed448";
+    /** secp256k1 */
+    CoseEllipticCurve[CoseEllipticCurve["Secp256k1"] = 8] = "Secp256k1";
+})(CoseEllipticCurve || (CoseEllipticCurve = {}));
+/**
+ * COSE Algorithm identifiers (RFC 9053).
+ *
+ * Only includes algorithms relevant to Enbox confidential compute.
+ *
+ * @see {@link https://www.iana.org/assignments/cose/cose.xhtml#algorithms | IANA COSE Algorithms}
+ */
+export var CoseAlgorithm;
+(function (CoseAlgorithm) {
+    /** EdDSA (Ed25519 or Ed448) */
+    CoseAlgorithm[CoseAlgorithm["EdDSA"] = -8] = "EdDSA";
+    /** ECDSA with SHA-256 (P-256) */
+    CoseAlgorithm[CoseAlgorithm["ES256"] = -7] = "ES256";
+    /** ECDSA with SHA-384 (P-384) */
+    CoseAlgorithm[CoseAlgorithm["ES384"] = -35] = "ES384";
+    /** ECDSA with SHA-512 (P-521) */
+    CoseAlgorithm[CoseAlgorithm["ES512"] = -36] = "ES512";
+    /** ECDSA with SHA-256 (secp256k1) */
+    CoseAlgorithm[CoseAlgorithm["ES256K"] = -47] = "ES256K";
+})(CoseAlgorithm || (CoseAlgorithm = {}));
+/**
+ * COSE Key common parameter labels (RFC 9052, Section 7.1).
+ */
+var CoseKeyLabel;
+(function (CoseKeyLabel) {
+    /** Key Type (kty) */
+    CoseKeyLabel[CoseKeyLabel["Kty"] = 1] = "Kty";
+    /** Key ID (kid) */
+    CoseKeyLabel[CoseKeyLabel["Kid"] = 2] = "Kid";
+    /** Algorithm */
+    CoseKeyLabel[CoseKeyLabel["Alg"] = 3] = "Alg";
+    /** Key Operations */
+    CoseKeyLabel[CoseKeyLabel["KeyOps"] = 4] = "KeyOps";
+    /** Base IV */
+    CoseKeyLabel[CoseKeyLabel["BaseIv"] = 5] = "BaseIv";
+})(CoseKeyLabel || (CoseKeyLabel = {}));
+/**
+ * COSE Key type-specific parameter labels.
+ *
+ * For OKP and EC2 keys, the curve and coordinate labels share the same
+ * negative-integer label space (RFC 9053, Section 7.1-7.2).
+ */
+var CoseKeyParamLabel;
+(function (CoseKeyParamLabel) {
+    /** Curve identifier (OKP and EC2) */
+    CoseKeyParamLabel[CoseKeyParamLabel["Crv"] = -1] = "Crv";
+    /** X coordinate (OKP public key or EC2 x-coordinate) */
+    CoseKeyParamLabel[CoseKeyParamLabel["X"] = -2] = "X";
+    /** Y coordinate (EC2 only) */
+    CoseKeyParamLabel[CoseKeyParamLabel["Y"] = -3] = "Y";
+    /** Private key (OKP d value or EC2 d value) */
+    CoseKeyParamLabel[CoseKeyParamLabel["D"] = -4] = "D";
+})(CoseKeyParamLabel || (CoseKeyParamLabel = {}));
+/**
+ * Maps JWK curve names to COSE elliptic curve identifiers.
+ */
+const jwkCrvToCose = {
+    'P-256': CoseEllipticCurve.P256,
+    'P-384': CoseEllipticCurve.P384,
+    'P-521': CoseEllipticCurve.P521,
+    'X25519': CoseEllipticCurve.X25519,
+    'Ed25519': CoseEllipticCurve.Ed25519,
+    'Ed448': CoseEllipticCurve.Ed448,
+    'secp256k1': CoseEllipticCurve.Secp256k1,
+};
+/**
+ * Maps COSE elliptic curve identifiers to JWK curve names.
+ */
+const coseCrvToJwk = {
+    [CoseEllipticCurve.P256]: 'P-256',
+    [CoseEllipticCurve.P384]: 'P-384',
+    [CoseEllipticCurve.P521]: 'P-521',
+    [CoseEllipticCurve.X25519]: 'X25519',
+    [CoseEllipticCurve.Ed25519]: 'Ed25519',
+    [CoseEllipticCurve.Ed448]: 'Ed448',
+    [CoseEllipticCurve.Secp256k1]: 'secp256k1',
+};
+/**
+ * Maps JWK algorithm names to COSE algorithm identifiers.
+ */
+const jwkAlgToCose = {
+    'EdDSA': CoseAlgorithm.EdDSA,
+    'ES256': CoseAlgorithm.ES256,
+    'ES384': CoseAlgorithm.ES384,
+    'ES512': CoseAlgorithm.ES512,
+    'ES256K': CoseAlgorithm.ES256K,
+};
+/**
+ * Maps COSE algorithm identifiers to JWK algorithm names.
+ */
+const coseAlgToJwk = {
+    [CoseAlgorithm.EdDSA]: 'EdDSA',
+    [CoseAlgorithm.ES256]: 'ES256',
+    [CoseAlgorithm.ES384]: 'ES384',
+    [CoseAlgorithm.ES512]: 'ES512',
+    [CoseAlgorithm.ES256K]: 'ES256K',
+};
+/**
+ * Utilities for converting between JWK and COSE key representations.
+ *
+ * COSE keys use integer labels and CBOR encoding, while JWK uses string
+ * property names and JSON. This class provides bidirectional conversion.
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc9052#section-7 | RFC 9052, Section 7}
+ */
+export class CoseKey {
+    /**
+     * Converts a JWK to a COSE key represented as a Map.
+     *
+     * @param jwk - The JWK to convert.
+     * @returns A Map with integer labels as keys, suitable for CBOR encoding.
+     * @throws {CryptoError} If the JWK key type or curve is not supported.
+     */
+    static fromJwk(jwk) {
+        const coseKey = new Map();
+        if (jwk.kty === 'OKP') {
+            coseKey.set(CoseKeyLabel.Kty, CoseKeyType.OKP);
+            const crv = jwk.crv;
+            if (crv === undefined || !(crv in jwkCrvToCose)) {
+                throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: unsupported OKP curve '${crv}'`);
+            }
+            coseKey.set(CoseKeyParamLabel.Crv, jwkCrvToCose[crv]);
+            if (jwk.x !== undefined) {
+                coseKey.set(CoseKeyParamLabel.X, Convert.base64Url(jwk.x).toUint8Array());
+            }
+            if (jwk.d !== undefined) {
+                coseKey.set(CoseKeyParamLabel.D, Convert.base64Url(jwk.d).toUint8Array());
+            }
+        }
+        else if (jwk.kty === 'EC') {
+            coseKey.set(CoseKeyLabel.Kty, CoseKeyType.EC2);
+            const crv = jwk.crv;
+            if (crv === undefined || !(crv in jwkCrvToCose)) {
+                throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: unsupported EC curve '${crv}'`);
+            }
+            coseKey.set(CoseKeyParamLabel.Crv, jwkCrvToCose[crv]);
+            if (jwk.x !== undefined) {
+                coseKey.set(CoseKeyParamLabel.X, Convert.base64Url(jwk.x).toUint8Array());
+            }
+            if (jwk.y !== undefined) {
+                coseKey.set(CoseKeyParamLabel.Y, Convert.base64Url(jwk.y).toUint8Array());
+            }
+            if (jwk.d !== undefined) {
+                coseKey.set(CoseKeyParamLabel.D, Convert.base64Url(jwk.d).toUint8Array());
+            }
+        }
+        else {
+            throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: unsupported key type '${jwk.kty}'`);
+        }
+        if (jwk.kid !== undefined) {
+            coseKey.set(CoseKeyLabel.Kid, Convert.string(jwk.kid).toUint8Array());
+        }
+        if (jwk.alg !== undefined && jwk.alg in jwkAlgToCose) {
+            coseKey.set(CoseKeyLabel.Alg, jwkAlgToCose[jwk.alg]);
+        }
+        return coseKey;
+    }
+    /**
+     * Converts a COSE key Map to a JWK.
+     *
+     * @param coseKey - A Map with integer labels as keys (from CBOR decoding).
+     * @returns The equivalent JWK.
+     * @throws {CryptoError} If the COSE key type or curve is not supported.
+     */
+    static toJwk(coseKey) {
+        const kty = coseKey.get(CoseKeyLabel.Kty);
+        if (kty === CoseKeyType.OKP) {
+            const crv = coseKey.get(CoseKeyParamLabel.Crv);
+            if (!(crv in coseCrvToJwk)) {
+                throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: unsupported COSE OKP curve ${crv}`);
+            }
+            const jwk = {
+                kty: 'OKP',
+                crv: coseCrvToJwk[crv],
+            };
+            const x = coseKey.get(CoseKeyParamLabel.X);
+            if (x !== undefined) {
+                jwk.x = Convert.uint8Array(x).toBase64Url();
+            }
+            const d = coseKey.get(CoseKeyParamLabel.D);
+            if (d !== undefined) {
+                jwk.d = Convert.uint8Array(d).toBase64Url();
+            }
+            CoseKey.applyCommonFields(coseKey, jwk);
+            return jwk;
+        }
+        else if (kty === CoseKeyType.EC2) {
+            const crv = coseKey.get(CoseKeyParamLabel.Crv);
+            if (!(crv in coseCrvToJwk)) {
+                throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: unsupported COSE EC2 curve ${crv}`);
+            }
+            const jwk = {
+                kty: 'EC',
+                crv: coseCrvToJwk[crv],
+            };
+            const x = coseKey.get(CoseKeyParamLabel.X);
+            if (x !== undefined) {
+                jwk.x = Convert.uint8Array(x).toBase64Url();
+            }
+            const y = coseKey.get(CoseKeyParamLabel.Y);
+            if (y !== undefined) {
+                jwk.y = Convert.uint8Array(y).toBase64Url();
+            }
+            const d = coseKey.get(CoseKeyParamLabel.D);
+            if (d !== undefined) {
+                jwk.d = Convert.uint8Array(d).toBase64Url();
+            }
+            CoseKey.applyCommonFields(coseKey, jwk);
+            return jwk;
+        }
+        else {
+            throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: unsupported COSE key type ${kty}`);
+        }
+    }
+    /**
+     * Infers the COSE algorithm identifier from a JWK.
+     *
+     * If the JWK has an `alg` field, it is used directly. Otherwise, the algorithm
+     * is inferred from the key type and curve.
+     *
+     * @param jwk - The JWK to infer the algorithm from.
+     * @returns The COSE algorithm identifier.
+     * @throws {CryptoError} If the algorithm cannot be determined.
+     */
+    static algorithmFromJwk(jwk) {
+        if (jwk.alg !== undefined && jwk.alg in jwkAlgToCose) {
+            return jwkAlgToCose[jwk.alg];
+        }
+        // Infer from key type and curve.
+        if (jwk.kty === 'OKP') {
+            if (jwk.crv === 'Ed25519' || jwk.crv === 'Ed448') {
+                return CoseAlgorithm.EdDSA;
+            }
+        }
+        else if (jwk.kty === 'EC') {
+            switch (jwk.crv) {
+                case 'P-256': return CoseAlgorithm.ES256;
+                case 'P-384': return CoseAlgorithm.ES384;
+                case 'P-521': return CoseAlgorithm.ES512;
+                case 'secp256k1': return CoseAlgorithm.ES256K;
+            }
+        }
+        throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: cannot determine COSE algorithm for key type '${jwk.kty}' curve '${jwk.crv}'`);
+    }
+    /**
+     * Maps a COSE algorithm identifier to a JWK algorithm name.
+     *
+     * @param alg - The COSE algorithm identifier.
+     * @returns The JWK algorithm name.
+     * @throws {CryptoError} If the algorithm is not supported.
+     */
+    static algorithmToJwk(alg) {
+        if (alg in coseAlgToJwk) {
+            return coseAlgToJwk[alg];
+        }
+        throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseKey: unsupported COSE algorithm ${alg}`);
+    }
+    /**
+     * Applies common COSE key fields (kid, alg) to a JWK.
+     */
+    static applyCommonFields(coseKey, jwk) {
+        const kid = coseKey.get(CoseKeyLabel.Kid);
+        if (kid !== undefined) {
+            jwk.kid = Convert.uint8Array(kid).toString();
+        }
+        const alg = coseKey.get(CoseKeyLabel.Alg);
+        if (alg !== undefined && alg in coseAlgToJwk) {
+            jwk.alg = coseAlgToJwk[alg];
+        }
+    }
+}
+//# sourceMappingURL=cose-key.js.map

package/dist/esm/cose/cose-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cose-key.js","sourceRoot":"","sources":["../../../src/cose/cose-key.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;GAIG;AACH,MAAM,CAAN,IAAY,WAOX;AAPD,WAAY,WAAW;IACrB,6CAA6C;IAC7C,2CAAO,CAAA;IACP,iDAAiD;IACjD,2CAAO,CAAA;IACP,oBAAoB;IACpB,uDAAa,CAAA;AACf,CAAC,EAPW,WAAW,KAAX,WAAW,QAOtB;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,iBAiBX;AAjBD,WAAY,iBAAiB;IAC3B,6BAA6B;IAC7B,yDAAQ,CAAA;IACR,6BAA6B;IAC7B,yDAAQ,CAAA;IACR,6BAA6B;IAC7B,yDAAQ,CAAA;IACR,sBAAsB;IACtB,6DAAU,CAAA;IACV,oBAAoB;IACpB,yDAAQ,CAAA;IACR,wBAAwB;IACxB,+DAAW,CAAA;IACX,sBAAsB;IACtB,2DAAS,CAAA;IACT,gBAAgB;IAChB,mEAAa,CAAA;AACf,CAAC,EAjBW,iBAAiB,KAAjB,iBAAiB,QAiB5B;AAED;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,aAWX;AAXD,WAAY,aAAa;IACvB,+BAA+B;IAC/B,oDAAU,CAAA;IACV,iCAAiC;IACjC,oDAAU,CAAA;IACV,iCAAiC;IACjC,qDAAW,CAAA;IACX,iCAAiC;IACjC,qDAAW,CAAA;IACX,qCAAqC;IACrC,uDAAY,CAAA;AACd,CAAC,EAXW,aAAa,KAAb,aAAa,QAWxB;AAED;;GAEG;AACH,IAAK,YAWJ;AAXD,WAAK,YAAY;IACf,qBAAqB;IACrB,6CAAO,CAAA;IACP,mBAAmB;IACnB,6CAAO,CAAA;IACP,gBAAgB;IAChB,6CAAO,CAAA;IACP,qBAAqB;IACrB,mDAAU,CAAA;IACV,cAAc;IACd,mDAAU,CAAA;AACZ,CAAC,EAXI,YAAY,KAAZ,YAAY,QAWhB;AAED;;;;;GAKG;AACH,IAAK,iBASJ;AATD,WAAK,iBAAiB;IACpB,qCAAqC;IACrC,wDAAQ,CAAA;IACR,wDAAwD;IACxD,oDAAM,CAAA;IACN,8BAA8B;IAC9B,oDAAM,CAAA;IACN,+CAA+C;IAC/C,oDAAM,CAAA;AACR,CAAC,EATI,iBAAiB,KAAjB,iBAAiB,QASrB;AAED;;GAEG;AACH,MAAM,YAAY,GAAsC;IACtD,OAAO,EAAO,iBAAiB,CAAC,IAAI;IACpC,OAAO,EAAO,iBAAiB,CAAC,IAAI;IACpC,OAAO,EAAO,iBAAiB,CAAC,IAAI;IACpC,QAAQ,EAAM,iBAAiB,CAAC,MAAM;IACtC,SAAS,EAAK,iBAAiB,CAAC,OAAO;IACvC,OAAO,EAAO,iBAAiB,CAAC,KAAK;IACrC,WAAW,EAAG,iBAAiB,CAAC,SAAS;CAC1C,CAAC;AAEF;;GAEG;AACH,MAAM,YAAY,GAA2B;IAC3C,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAQ,OAAO;IACvC,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAQ,OAAO;IACvC,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAQ,OAAO;IACvC,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAM,QAAQ;IACxC,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAK,SAAS;IACzC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAO,OAAO;IACvC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAG,WAAW;CAC5C,CAAC;AAEF;;GAEG;AACH,MAAM,YAAY,GAAkC;IAClD,OAAO,EAAI,aAAa,CAAC,KAAK;IAC9B,OAAO,EAAI,aAAa,CAAC,KAAK;IAC9B,OAAO,EAAI,aAAa,CAAC,KAAK;IAC9B,OAAO,EAAI,aAAa,CAAC,KAAK;IAC9B,QAAQ,EAAG,aAAa,CAAC,MAAM;CAChC,CAAC;AAEF;;GAEG;AACH,MAAM,YAAY,GAA2B;IAC3C,CAAC,aAAa,CAAC,KAAK,CAAC,EAAI,OAAO;IAChC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAI,OAAO;IAChC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAI,OAAO;IAChC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAI,OAAO;IAChC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAG,QAAQ;CAClC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,OAAO,OAAO;IAClB;;;;;;OAMG;IACI,MAAM,CAAC,OAAO,CAAC,GAAQ;QAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;QAE3C,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YAE/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;YACpB,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,qBAAqB,EAAE,mCAAmC,GAAG,GAAG,CAAC,CAAC;YAC1G,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAEtD,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YAE/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;YACpB,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,qBAAqB,EAAE,kCAAkC,GAAG,GAAG,CAAC,CAAC;YACzG,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAEtD,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,qBAAqB,EAAE,kCAAkC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAC7G,CAAC;QAED,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,KAAK,CAAC,OAA6B;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAW,CAAC;QAEpD,IAAI,GAAG,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAW,CAAC;YACzD,IAAI,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,qBAAqB,EAAE,uCAAuC,GAAG,EAAE,CAAC,CAAC;YAC7G,CAAC;YAED,MAAM,GAAG,GAAQ;gBACf,GAAG,EAAG,KAAK;gBACX,GAAG,EAAG,YAAY,CAAC,GAAG,CAAC;aACxB,CAAC;YAEF,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAA2B,CAAC;YACrE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAA2B,CAAC;YACrE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,CAAC;YAED,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACxC,OAAO,GAAG,CAAC;QAEb,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAW,CAAC;YACzD,IAAI,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,qBAAqB,EAAE,uCAAuC,GAAG,EAAE,CAAC,CAAC;YAC7G,CAAC;YAED,MAAM,GAAG,GAAQ;gBACf,GAAG,EAAG,IAAI;gBACV,GAAG,EAAG,YAAY,CAAC,GAAG,CAAC;aACxB,CAAC;YAEF,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAA2B,CAAC;YACrE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAA2B,CAAC;YACrE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAA2B,CAAC;YACrE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,CAAC;YAED,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACxC,OAAO,GAAG,CAAC;QAEb,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,qBAAqB,EAAE,sCAAsC,GAAG,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACI,MAAM,CAAC,gBAAgB,CAAC,GAAQ;QACrC,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC;YACrD,OAAO,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,iCAAiC;QACjC,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBACjD,OAAO,aAAa,CAAC,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5B,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChB,KAAK,OAAO,CAAC,CAAC,OAAO,aAAa,CAAC,KAAK,CAAC;gBACzC,KAAK,OAAO,CAAC,CAAC,OAAO,aAAa,CAAC,KAAK,CAAC;gBACzC,KAAK,OAAO,CAAC,CAAC,OAAO,aAAa,CAAC,KAAK,CAAC;gBACzC,KAAK,WAAW,CAAC,CAAC,OAAO,aAAa,CAAC,MAAM,CAAC;YAChD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,qBAAqB,EACrC,0DAA0D,GAAG,CAAC,GAAG,YAAY,GAAG,CAAC,GAAG,GAAG,CACxF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,cAAc,CAAC,GAAkB;QAC7C,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,qBAAqB,EAAE,uCAAuC,GAAG,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,iBAAiB,CAAC,OAA6B,EAAE,GAAQ;QACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAA2B,CAAC;QACpE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAuB,CAAC;QAChE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;YAC7C,GAAG,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF"}

package/dist/esm/cose/cose-sign1.js

@@ -0,0 +1,283 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Cbor } from './cbor.js';
+import { Ed25519 } from '../primitives/ed25519.js';
+import { Secp256r1 } from '../primitives/secp256r1.js';
+import { CoseAlgorithm, CoseKey } from './cose-key.js';
+import { CryptoError, CryptoErrorCode } from '../crypto-error.js';
+/**
+ * COSE header label constants (RFC 9052, Section 3.1).
+ */
+var CoseHeaderLabel;
+(function (CoseHeaderLabel) {
+    /** Algorithm identifier */
+    CoseHeaderLabel[CoseHeaderLabel["Alg"] = 1] = "Alg";
+    /** Critical headers */
+    CoseHeaderLabel[CoseHeaderLabel["Crit"] = 2] = "Crit";
+    /** Content type */
+    CoseHeaderLabel[CoseHeaderLabel["ContentType"] = 3] = "ContentType";
+    /** Key ID */
+    CoseHeaderLabel[CoseHeaderLabel["Kid"] = 4] = "Kid";
+})(CoseHeaderLabel || (CoseHeaderLabel = {}));
+/**
+ * CBOR tag for COSE_Sign1 (RFC 9052, Section 4.2).
+ */
+// const COSE_SIGN1_TAG = 18;
+/**
+ * COSE_Sign1 implementation per RFC 9052.
+ *
+ * Provides creation, verification, and decoding of COSE_Sign1 (single-signer)
+ * signed messages. This is the CBOR-based counterpart to JOSE/JWS and is used
+ * in TEE attestation (EAT tokens), CWT, and other COSE-based protocols.
+ *
+ * Supported algorithms:
+ * - EdDSA (Ed25519) — CoseAlgorithm.EdDSA (-8)
+ * - ES256 (P-256 / secp256r1 with SHA-256) — CoseAlgorithm.ES256 (-7)
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc9052#section-4.3 | RFC 9052, Section 4.3}
+ */
+export class CoseSign1 {
+    /**
+     * Creates a COSE_Sign1 message.
+     *
+     * Constructs the `Sig_structure1` to-be-signed bytes per RFC 9052 Section 4.4,
+     * signs them with the provided key, and returns the CBOR-encoded COSE_Sign1 array:
+     *
+     * ```
+     * COSE_Sign1 = [
+     *   protected : bstr,       ; CBOR-encoded protected header
+     *   unprotected : map,      ; unprotected header parameters
+     *   payload : bstr / nil,   ; payload (nil if detached)
+     *   signature : bstr        ; signature
+     * ]
+     * ```
+     *
+     * @param params - The parameters for creating the COSE_Sign1 message.
+     * @returns The CBOR-encoded COSE_Sign1 message.
+     * @throws {CryptoError} If the algorithm is not supported or signing fails.
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc9052#section-4.3 | RFC 9052, Section 4.3}
+     * @see {@link https://www.rfc-editor.org/rfc/rfc9052#section-4.4 | RFC 9052, Section 4.4}
+     */
+    static create(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c;
+            const { key, payload, externalAad = new Uint8Array(0), detachedPayload = false, } = params;
+            // Build the protected header.
+            const alg = (_b = (_a = params.protectedHeader) === null || _a === void 0 ? void 0 : _a.alg) !== null && _b !== void 0 ? _b : CoseKey.algorithmFromJwk(key);
+            const protectedHeaderMap = CoseSign1.buildProtectedHeaderMap((_c = params.protectedHeader) !== null && _c !== void 0 ? _c : { alg });
+            const protectedHeaderBytes = Cbor.encode(protectedHeaderMap);
+            // Build the unprotected header.
+            const unprotectedHeaderMap = params.unprotectedHeader !== undefined
+                ? CoseSign1.buildUnprotectedHeaderMap(params.unprotectedHeader)
+                : new Map();
+            // Construct the Sig_structure1 (to-be-signed bytes).
+            const sigStructure = CoseSign1.buildSigStructure1(protectedHeaderBytes, externalAad, payload);
+            const toBeSigned = Cbor.encode(sigStructure);
+            // Sign the Sig_structure1 bytes.
+            const signature = yield CoseSign1.signBytes(alg, key, toBeSigned);
+            // Assemble the COSE_Sign1 array.
+            const coseSign1Array = [
+                protectedHeaderBytes,
+                unprotectedHeaderMap,
+                detachedPayload ? null : payload,
+                signature,
+            ];
+            return Cbor.encode(coseSign1Array);
+        });
+    }
+    /**
+     * Verifies a COSE_Sign1 message.
+     *
+     * Decodes the CBOR-encoded message, reconstructs the `Sig_structure1`, and verifies
+     * the signature using the provided public key.
+     *
+     * @param params - The parameters for verifying the COSE_Sign1 message.
+     * @returns `true` if the signature is valid, `false` otherwise.
+     * @throws {CryptoError} If the message is malformed or the algorithm is not supported.
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc9052#section-4.4 | RFC 9052, Section 4.4}
+     */
+    static verify(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const { coseSign1, key, externalAad = new Uint8Array(0), } = params;
+            // Decode the COSE_Sign1 message.
+            const decoded = CoseSign1.decode(coseSign1);
+            // Resolve the payload (from message or detached parameter).
+            const payload = (_b = (_a = decoded.payload) !== null && _a !== void 0 ? _a : params.payload) !== null && _b !== void 0 ? _b : null;
+            if (payload === null) {
+                throw new CryptoError(CryptoErrorCode.InvalidCoseSign1, 'CoseSign1: payload is detached but no payload was provided for verification');
+            }
+            // Reconstruct the Sig_structure1.
+            const sigStructure = CoseSign1.buildSigStructure1(decoded.protectedHeaderBytes, externalAad, payload);
+            const toBeSigned = Cbor.encode(sigStructure);
+            // Extract the algorithm from the protected header.
+            const alg = decoded.protectedHeader.alg;
+            // Verify the signature.
+            return CoseSign1.verifyBytes(alg, key, toBeSigned, decoded.signature);
+        });
+    }
+    /**
+     * Decodes a CBOR-encoded COSE_Sign1 message into its constituent parts.
+     *
+     * The COSE_Sign1 structure is a CBOR array of four elements:
+     * ```
+     * [protected, unprotected, payload, signature]
+     * ```
+     *
+     * The message may optionally be wrapped in CBOR tag 18.
+     *
+     * @param coseSign1 - The CBOR-encoded COSE_Sign1 message.
+     * @returns The decoded COSE_Sign1 components.
+     * @throws {CryptoError} If the message does not conform to COSE_Sign1 structure.
+     */
+    static decode(coseSign1) {
+        let decoded;
+        try {
+            decoded = Cbor.decode(coseSign1);
+        }
+        catch (_a) {
+            throw new CryptoError(CryptoErrorCode.InvalidCoseSign1, 'CoseSign1: failed to decode CBOR');
+        }
+        // Handle CBOR Tagged value (tag 18 for COSE_Sign1).
+        // The `cborg` library decodes tagged values as `Tagged` objects with `tag` and `value` properties.
+        if (decoded !== null && typeof decoded === 'object' && 'tag' in decoded) {
+            const tagged = decoded;
+            if (tagged.tag === 18) {
+                decoded = tagged.value;
+            }
+        }
+        // Validate the COSE_Sign1 array structure.
+        if (!Array.isArray(decoded) || decoded.length !== 4) {
+            throw new CryptoError(CryptoErrorCode.InvalidCoseSign1, 'CoseSign1: expected a CBOR array of 4 elements [protected, unprotected, payload, signature]');
+        }
+        const [protectedHeaderBytes, unprotectedHeaderMap, payload, signature] = decoded;
+        // Validate element types.
+        if (!(protectedHeaderBytes instanceof Uint8Array)) {
+            throw new CryptoError(CryptoErrorCode.InvalidCoseSign1, 'CoseSign1: protected header must be a byte string');
+        }
+        if (!(signature instanceof Uint8Array)) {
+            throw new CryptoError(CryptoErrorCode.InvalidCoseSign1, 'CoseSign1: signature must be a byte string');
+        }
+        // Decode the protected header.
+        let protectedHeaderMap;
+        if (protectedHeaderBytes.length === 0) {
+            protectedHeaderMap = new Map();
+        }
+        else {
+            try {
+                protectedHeaderMap = Cbor.decode(protectedHeaderBytes);
+            }
+            catch (_b) {
+                throw new CryptoError(CryptoErrorCode.InvalidCoseSign1, 'CoseSign1: failed to decode protected header CBOR');
+            }
+        }
+        // Extract the algorithm from the protected header.
+        const alg = protectedHeaderMap.get(CoseHeaderLabel.Alg);
+        if (alg === undefined || typeof alg !== 'number') {
+            throw new CryptoError(CryptoErrorCode.InvalidCoseSign1, 'CoseSign1: protected header must contain an algorithm identifier (label 1)');
+        }
+        // Build the typed protected header.
+        const protectedHeader = { alg: alg };
+        const contentType = protectedHeaderMap.get(CoseHeaderLabel.ContentType);
+        if (contentType !== undefined) {
+            protectedHeader.contentType = contentType;
+        }
+        const kid = protectedHeaderMap.get(CoseHeaderLabel.Kid);
+        if (kid !== undefined) {
+            protectedHeader.kid = kid;
+        }
+        return {
+            protectedHeader,
+            protectedHeaderBytes,
+            unprotectedHeader: unprotectedHeaderMap instanceof Map ? unprotectedHeaderMap : new Map(),
+            payload: payload instanceof Uint8Array ? payload : null,
+            signature,
+        };
+    }
+    /**
+     * Builds the Sig_structure1 array for COSE_Sign1 signing and verification.
+     *
+     * ```
+     * Sig_structure1 = [
+     *   context : "Signature1",
+     *   body_protected : bstr,
+     *   external_aad : bstr,
+     *   payload : bstr
+     * ]
+     * ```
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc9052#section-4.4 | RFC 9052, Section 4.4}
+     */
+    static buildSigStructure1(protectedHeaderBytes, externalAad, payload) {
+        return [
+            'Signature1', // context string
+            protectedHeaderBytes, // body_protected
+            externalAad, // external_aad
+            payload, // payload
+        ];
+    }
+    /**
+     * Converts a {@link CoseSign1ProtectedHeader} to a CBOR Map with integer labels.
+     */
+    static buildProtectedHeaderMap(header) {
+        const map = new Map();
+        map.set(CoseHeaderLabel.Alg, header.alg);
+        if (header.contentType !== undefined) {
+            map.set(CoseHeaderLabel.ContentType, header.contentType);
+        }
+        if (header.kid !== undefined) {
+            map.set(CoseHeaderLabel.Kid, header.kid);
+        }
+        return map;
+    }
+    /**
+     * Converts a {@link CoseSign1UnprotectedHeader} to a CBOR Map with integer labels.
+     */
+    static buildUnprotectedHeaderMap(header) {
+        const map = new Map();
+        if (header.kid !== undefined) {
+            map.set(CoseHeaderLabel.Kid, header.kid);
+        }
+        return map;
+    }
+    /**
+     * Signs the to-be-signed bytes with the appropriate algorithm.
+     */
+    static signBytes(alg, key, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            switch (alg) {
+                case CoseAlgorithm.EdDSA:
+                    return Ed25519.sign({ key, data });
+                case CoseAlgorithm.ES256:
+                    return Secp256r1.sign({ key, data });
+                default:
+                    throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseSign1: signing algorithm ${alg} is not supported`);
+            }
+        });
+    }
+    /**
+     * Verifies a signature over the to-be-signed bytes with the appropriate algorithm.
+     */
+    static verifyBytes(alg, key, data, signature) {
+        return __awaiter(this, void 0, void 0, function* () {
+            switch (alg) {
+                case CoseAlgorithm.EdDSA:
+                    return Ed25519.verify({ key, signature, data });
+                case CoseAlgorithm.ES256:
+                    return Secp256r1.verify({ key, signature, data });
+                default:
+                    throw new CryptoError(CryptoErrorCode.AlgorithmNotSupported, `CoseSign1: verification algorithm ${alg} is not supported`);
+            }
+        });
+    }
+}
+//# sourceMappingURL=cose-sign1.js.map

package/dist/esm/cose/cose-sign1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cose-sign1.js","sourceRoot":"","sources":["../../../src/cose/cose-sign1.ts"],"names":[],"mappings":";;;;;;;;;AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAmHlE;;GAEG;AACH,IAAK,eASJ;AATD,WAAK,eAAe;IAClB,2BAA2B;IAC3B,mDAAO,CAAA;IACP,uBAAuB;IACvB,qDAAQ,CAAA;IACR,mBAAmB;IACnB,mEAAe,CAAA;IACf,aAAa;IACb,mDAAO,CAAA;AACT,CAAC,EATI,eAAe,KAAf,eAAe,QASnB;AAED;;GAEG;AACH,6BAA6B;AAE7B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,SAAS;IACpB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,MAAM,CAAO,MAAM,CAAC,MAA6B;;;YACtD,MAAM,EACJ,GAAG,EACH,OAAO,EACP,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAC/B,eAAe,GAAG,KAAK,GACxB,GAAG,MAAM,CAAC;YAEX,8BAA8B;YAC9B,MAAM,GAAG,GAAG,MAAA,MAAA,MAAM,CAAC,eAAe,0CAAE,GAAG,mCAAI,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACzE,MAAM,kBAAkB,GAAG,SAAS,CAAC,uBAAuB,CAC1D,MAAA,MAAM,CAAC,eAAe,mCAAI,EAAE,GAAG,EAAE,CAClC,CAAC;YACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAE7D,gCAAgC;YAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,iBAAiB,KAAK,SAAS;gBACjE,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBAC/D,CAAC,CAAC,IAAI,GAAG,EAAmB,CAAC;YAE/B,qDAAqD;YACrD,MAAM,YAAY,GAAG,SAAS,CAAC,kBAAkB,CAC/C,oBAAoB,EAAE,WAAW,EAAE,OAAO,CAC3C,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAE7C,iCAAiC;YACjC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YAElE,iCAAiC;YACjC,MAAM,cAAc,GAAG;gBACrB,oBAAoB;gBACpB,oBAAoB;gBACpB,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;gBAChC,SAAS;aACV,CAAC;YAEF,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;KAAA;IAED;;;;;;;;;;;OAWG;IACI,MAAM,CAAO,MAAM,CAAC,MAA6B;;;YACtD,MAAM,EACJ,SAAS,EACT,GAAG,EACH,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,GAChC,GAAG,MAAM,CAAC;YAEX,iCAAiC;YACjC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE5C,4DAA4D;YAC5D,MAAM,OAAO,GAAG,MAAA,MAAA,OAAO,CAAC,OAAO,mCAAI,MAAM,CAAC,OAAO,mCAAI,IAAI,CAAC;YAC1D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,gBAAgB,EAChC,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,MAAM,YAAY,GAAG,SAAS,CAAC,kBAAkB,CAC/C,OAAO,CAAC,oBAAoB,EAAE,WAAW,EAAE,OAAO,CACnD,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAE7C,mDAAmD;YACnD,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;YAExC,wBAAwB;YACxB,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACI,MAAM,CAAC,MAAM,CAAC,SAAqB;QACxC,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,gBAAgB,EAChC,kCAAkC,CACnC,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,mGAAmG;QACnG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,IAAK,OAAmC,EAAE,CAAC;YACrG,MAAM,MAAM,GAAG,OAA0C,CAAC;YAC1D,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;gBACtB,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,gBAAgB,EAChC,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,OAExE,CAAC;QAEF,0BAA0B;QAC1B,IAAI,CAAC,CAAC,oBAAoB,YAAY,UAAU,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,gBAAgB,EAChC,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,gBAAgB,EAChC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,IAAI,kBAAwC,CAAC;QAC7C,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,kBAAkB,GAAG,IAAI,GAAG,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAuB,oBAAoB,CAAC,CAAC;YAC/E,CAAC;YAAC,WAAM,CAAC;gBACP,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,gBAAgB,EAChC,mDAAmD,CACpD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,gBAAgB,EAChC,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,MAAM,eAAe,GAA6B,EAAE,GAAG,EAAE,GAAoB,EAAE,CAAC;QAEhF,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,eAAe,CAAC,WAAW,GAAG,WAA8B,CAAC;QAC/D,CAAC;QAED,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,eAAe,CAAC,GAAG,GAAG,GAAiB,CAAC;QAC1C,CAAC;QAED,OAAO;YACL,eAAe;YACf,oBAAoB;YACpB,iBAAiB,EAAG,oBAAoB,YAAY,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE;YAC1F,OAAO,EAAa,OAAO,YAAY,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAClE,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,MAAM,CAAC,kBAAkB,CAC/B,oBAAgC,EAChC,WAAuB,EACvB,OAAmB;QAEnB,OAAO;YACL,YAAY,EAAE,iBAAiB;YAC/B,oBAAoB,EAAE,iBAAiB;YACvC,WAAW,EAAE,eAAe;YAC5B,OAAO,EAAE,UAAU;SACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,uBAAuB,CAAC,MAAgC;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;QAEvC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,yBAAyB,CAAC,MAAkC;QACzE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;QAEvC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACK,MAAM,CAAO,SAAS,CAC5B,GAAkB,EAClB,GAAQ,EACR,IAAgB;;YAEhB,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,aAAa,CAAC,KAAK;oBACtB,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBAErC,KAAK,aAAa,CAAC,KAAK;oBACtB,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBAEvC;oBACE,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,qBAAqB,EACrC,gCAAgC,GAAG,mBAAmB,CACvD,CAAC;YACN,CAAC;QACH,CAAC;KAAA;IAED;;OAEG;IACK,MAAM,CAAO,WAAW,CAC9B,GAAkB,EAClB,GAAQ,EACR,IAAgB,EAChB,SAAqB;;YAErB,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,aAAa,CAAC,KAAK;oBACtB,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAElD,KAAK,aAAa,CAAC,KAAK;oBACtB,OAAO,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAEpD;oBACE,MAAM,IAAI,WAAW,CACnB,eAAe,CAAC,qBAAqB,EACrC,qCAAqC,GAAG,mBAAmB,CAC5D,CAAC;YACN,CAAC;QACH,CAAC;KAAA;CACF"}