@forestrie/receipt-verify 0.10.1 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -6,9 +6,12 @@
|
|
|
6
6
|
* trust root and returns the delegated public key as an additional verify
|
|
7
7
|
* candidate — the offline port of canopy-api's `resolveReceiptVerifyKey`.
|
|
8
8
|
*
|
|
9
|
-
*
|
|
10
|
-
*
|
|
11
|
-
*
|
|
9
|
+
* P-256 roots only: the genesis alg is ES256 and sealer delegate keys are
|
|
10
|
+
* always secp256r1; KS256-rooted delegation is a server-only concern. A
|
|
11
|
+
* passkey (WebAuthn) root signs the certificate with alg -65800 and the
|
|
12
|
+
* ADR-0063 unprotected-header envelope — `verifyCoseSign1WithParsedKey`
|
|
13
|
+
* verifies that envelope against the same P-256 root keys, so the chain walk
|
|
14
|
+
* here is alg-agnostic (plan-2608-13 1.4).
|
|
12
15
|
*
|
|
13
16
|
* Trust anchors (FOR-297 trust ladder): `rootKeys` need not be genesis-derived
|
|
14
17
|
* — a caller-known log OWNER key works identically (see
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resolve-delegated-verify-key.d.ts","sourceRoot":"","sources":["../src/resolve-delegated-verify-key.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"resolve-delegated-verify-key.d.ts","sourceRoot":"","sources":["../src/resolve-delegated-verify-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAqCH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,SAAS,CAAC;IACxB,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC3C,GACD;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAsGvB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,qBAAqB,EAClC,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GACtB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAS9C;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,SAAS,EAAE,GACpB,OAAO,CAAC,mBAAmB,CAAC,CAgC9B"}
|
|
@@ -6,9 +6,12 @@
|
|
|
6
6
|
* trust root and returns the delegated public key as an additional verify
|
|
7
7
|
* candidate — the offline port of canopy-api's `resolveReceiptVerifyKey`.
|
|
8
8
|
*
|
|
9
|
-
*
|
|
10
|
-
*
|
|
11
|
-
*
|
|
9
|
+
* P-256 roots only: the genesis alg is ES256 and sealer delegate keys are
|
|
10
|
+
* always secp256r1; KS256-rooted delegation is a server-only concern. A
|
|
11
|
+
* passkey (WebAuthn) root signs the certificate with alg -65800 and the
|
|
12
|
+
* ADR-0063 unprotected-header envelope — `verifyCoseSign1WithParsedKey`
|
|
13
|
+
* verifies that envelope against the same P-256 root keys, so the chain walk
|
|
14
|
+
* here is alg-agnostic (plan-2608-13 1.4).
|
|
12
15
|
*
|
|
13
16
|
* Trust anchors (FOR-297 trust ladder): `rootKeys` need not be genesis-derived
|
|
14
17
|
* — a caller-known log OWNER key works identically (see
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@forestrie/receipt-verify",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.11.0",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"description": "Offline SCITT grant receipt verification (ADR-0045)",
|
|
@@ -28,9 +28,9 @@
|
|
|
28
28
|
],
|
|
29
29
|
"dependencies": {
|
|
30
30
|
"@noble/hashes": "^1.7.1",
|
|
31
|
-
"@forestrie/
|
|
32
|
-
"@forestrie/
|
|
33
|
-
"@forestrie/
|
|
31
|
+
"@forestrie/encoding": "0.6.0",
|
|
32
|
+
"@forestrie/chain-rpc": "0.2.0",
|
|
33
|
+
"@forestrie/merklelog": "0.3.0"
|
|
34
34
|
},
|
|
35
35
|
"devDependencies": {
|
|
36
36
|
"esbuild": "^0.24.0",
|
|
@@ -6,9 +6,12 @@
|
|
|
6
6
|
* trust root and returns the delegated public key as an additional verify
|
|
7
7
|
* candidate — the offline port of canopy-api's `resolveReceiptVerifyKey`.
|
|
8
8
|
*
|
|
9
|
-
*
|
|
10
|
-
*
|
|
11
|
-
*
|
|
9
|
+
* P-256 roots only: the genesis alg is ES256 and sealer delegate keys are
|
|
10
|
+
* always secp256r1; KS256-rooted delegation is a server-only concern. A
|
|
11
|
+
* passkey (WebAuthn) root signs the certificate with alg -65800 and the
|
|
12
|
+
* ADR-0063 unprotected-header envelope — `verifyCoseSign1WithParsedKey`
|
|
13
|
+
* verifies that envelope against the same P-256 root keys, so the chain walk
|
|
14
|
+
* here is alg-agnostic (plan-2608-13 1.4).
|
|
12
15
|
*
|
|
13
16
|
* Trust anchors (FOR-297 trust ladder): `rootKeys` need not be genesis-derived
|
|
14
17
|
* — a caller-known log OWNER key works identically (see
|