@freedomofpress/sigstore-browser 0.1.0 → 0.1.1

package/dist/crypto.js

@@ -1,260 +0,0 @@
-import { ASN1Obj } from "./asn1/index.js";
-import { base64ToUint8Array, base64UrlToUint8Array, hexToUint8Array, toArrayBuffer, } from "./encoding.js";
-import { EcdsaTypes, HashAlgorithms, KeyTypes } from "./interfaces.js";
-import { toDER } from "./pem.js";
-import { p256, p384, p521 } from "@noble/curves/nist.js";
-function pkcs1ToSpki(pkcs1Bytes) {
-    const algorithmIdentifier = new Uint8Array([
-        0x30, 0x0d,
-        0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01,
-        0x05, 0x00
-    ]);
-    const bitStringLength = pkcs1Bytes.length + 1;
-    const totalContentLength = algorithmIdentifier.length + 1 + lengthBytes(bitStringLength).length + bitStringLength;
-    const result = new Uint8Array(1 + lengthBytes(totalContentLength).length + totalContentLength);
-    let offset = 0;
-    result[offset++] = 0x30;
-    const totalLengthBytes = lengthBytes(totalContentLength);
-    result.set(totalLengthBytes, offset);
-    offset += totalLengthBytes.length;
-    result.set(algorithmIdentifier, offset);
-    offset += algorithmIdentifier.length;
-    result[offset++] = 0x03;
-    const bitStringLengthBytes = lengthBytes(bitStringLength);
-    result.set(bitStringLengthBytes, offset);
-    offset += bitStringLengthBytes.length;
-    result[offset++] = 0x00;
-    result.set(pkcs1Bytes, offset);
-    return result;
-}
-// Encodes a length value in DER (Distinguished Encoding Rules) format.
-// DER length encoding rules:
-// - Lengths 0-127: single byte containing the length
-// - Lengths 128-255: 0x81 followed by one byte containing the length
-// - Lengths 256-65535: 0x82 followed by two bytes containing the length (big-endian)
-// Used by pkcs1ToSpki() to construct valid ASN.1/DER structures.
-function lengthBytes(length) {
-    if (length < 128) {
-        return new Uint8Array([length]);
-    }
-    else if (length < 256) {
-        return new Uint8Array([0x81, length]);
-    }
-    else {
-        return new Uint8Array([0x82, (length >> 8) & 0xff, length & 0xff]);
-    }
-}
-// Imports cryptographic public keys into the Web Crypto API format (CryptoKey).
-// This function is specific to the browser implementation and doesn't exist in sigstore-js.
-//
-// Why needed for browser:
-// - sigstore-js uses Node.js crypto.createPublicKey() which handles many key formats automatically
-// - Browsers only have Web Crypto API (crypto.subtle.importKey) which requires explicit format/algorithm
-// - This function bridges the gap by:
-//   1. Detecting key format (PEM, hex, base64, PKCS#1, SPKI)
-//   2. Converting PKCS#1 RSA keys to SPKI (Web Crypto only supports SPKI for RSA)
-//   3. Mapping Sigstore key types/schemes to Web Crypto algorithm parameters
-//
-// Supports:
-// - ECDSA (P-256, P-384, P-521) - Used by Fulcio, CT logs
-// - Ed25519 - Used by Rekor checkpoints, some CT logs
-// - RSA (PKCS#1, PSS) - Used by older CT logs and some Rekor instances
-//
-// Key format detection:
-// - PEM format (contains "BEGIN"): Parse with toDER()
-// - Hex string (all hex chars): Import as raw
-// - Base64 PKCS#1 (starts with 0x30 0x82...): Convert to SPKI
-// - Base64 SPKI: Import directly
-export async function importKey(keytype, scheme, key) {
-    class importParams {
-        format = "spki";
-        keyData = new ArrayBuffer(0);
-        algorithm = { name: "ECDSA" };
-        extractable = true;
-        usage = ["verify"];
-    }
-    const params = new importParams();
-    if (key.includes("BEGIN")) {
-        params.format = "spki";
-        params.keyData = toArrayBuffer(toDER(key));
-    }
-    else if (/^[0-9A-Fa-f]+$/.test(key)) {
-        params.format = "raw";
-        params.keyData = toArrayBuffer(hexToUint8Array(key));
-    }
-    else {
-        params.format = "spki";
-        const keyBytes = base64ToUint8Array(key);
-        if (keytype.toLowerCase().includes("pkcs1") &&
-            keyBytes[0] === 0x30 && keyBytes[1] === 0x82 &&
-            keyBytes[4] === 0x02 && keyBytes[5] === 0x82) {
-            params.keyData = toArrayBuffer(pkcs1ToSpki(keyBytes));
-        }
-        else {
-            params.keyData = toArrayBuffer(keyBytes);
-        }
-    }
-    if (keytype.toLowerCase().includes("ecdsa")) {
-        if (scheme.includes("256")) {
-            params.algorithm = { name: "ECDSA", namedCurve: EcdsaTypes.P256 };
-        }
-        else if (scheme.includes("384")) {
-            params.algorithm = { name: "ECDSA", namedCurve: EcdsaTypes.P384 };
-        }
-        else if (scheme.includes("521")) {
-            params.algorithm = { name: "ECDSA", namedCurve: EcdsaTypes.P521 };
-        }
-        else {
-            throw new Error("Cannot determine ECDSA key size.");
-        }
-    }
-    else if (keytype.toLowerCase().includes("ed25519")) {
-        params.algorithm = { name: "Ed25519" };
-    }
-    else if (keytype.toLowerCase().includes("rsa") || keytype.toLowerCase().includes("pkcs1")) {
-        let hashName = HashAlgorithms.SHA256;
-        // Normalize scheme to handle various formats: SHA256, SHA_256, SHA-256, etc.
-        const normalizedScheme = scheme.toUpperCase().replace(/[-_]/g, "");
-        if (normalizedScheme.includes("SHA256") || normalizedScheme.includes("256")) {
-            hashName = HashAlgorithms.SHA256;
-        }
-        else if (normalizedScheme.includes("SHA384") || normalizedScheme.includes("384")) {
-            hashName = HashAlgorithms.SHA384;
-        }
-        else if (normalizedScheme.includes("SHA512") || normalizedScheme.includes("512")) {
-            hashName = HashAlgorithms.SHA512;
-        }
-        if (scheme.includes("PKCS1") || scheme.includes("RSA_PKCS1")) {
-            params.algorithm = {
-                name: "RSASSA-PKCS1-v1_5",
-                hash: { name: hashName },
-            };
-        }
-        else {
-            params.algorithm = {
-                name: "RSA-PSS",
-                hash: { name: hashName },
-            };
-        }
-    }
-    else {
-        throw new Error(`Unsupported ${keytype}`);
-    }
-    return await crypto.subtle.importKey(params.format, params.keyData, params.algorithm, params.extractable, params.usage);
-}
-export async function verifySignature(key, signed, sig, hash = "sha256") {
-    const options = {
-        name: key.algorithm.name,
-    };
-    if (key.algorithm.name === KeyTypes.Ecdsa) {
-        const namedCurve = key.algorithm.namedCurve;
-        let sig_size = 32;
-        if (namedCurve === EcdsaTypes.P256) {
-            sig_size = 32;
-        }
-        else if (namedCurve === EcdsaTypes.P384) {
-            sig_size = 48;
-        }
-        else if (namedCurve === EcdsaTypes.P521) {
-            sig_size = 66;
-        }
-        options.hash = { name: "" };
-        if (hash.includes("256")) {
-            options.hash.name = HashAlgorithms.SHA256;
-        }
-        else if (hash.includes("384")) {
-            options.hash.name = HashAlgorithms.SHA384;
-        }
-        else if (hash.includes("512")) {
-            options.hash.name = HashAlgorithms.SHA512;
-        }
-        else {
-            throw new Error("Cannot determine hashing algorithm;");
-        }
-        let raw_signature;
-        try {
-            const asn1_sig = ASN1Obj.parseBuffer(sig);
-            const r = asn1_sig.subs[0].toInteger();
-            const s = asn1_sig.subs[1].toInteger();
-            const binr = hexToUint8Array(r.toString(16).padStart(sig_size * 2, "0"));
-            const bins = hexToUint8Array(s.toString(16).padStart(sig_size * 2, "0"));
-            raw_signature = new Uint8Array(binr.length + bins.length);
-            raw_signature.set(binr, 0);
-            raw_signature.set(bins, binr.length);
-        }
-        catch {
-            return false;
-        }
-        return await crypto.subtle.verify(options, key, toArrayBuffer(raw_signature), toArrayBuffer(signed));
-    }
-    else if (key.algorithm.name === KeyTypes.Ed25519) {
-        // Ed25519 uses raw signatures (not DER-encoded like ECDSA)
-        // Fulcio supports Ed25519, ECDSA, and RSA_PSS for signing certificates
-        // Ed25519 is also used for checkpoint signatures in TLog configurations
-        return await crypto.subtle.verify(key.algorithm.name, key, toArrayBuffer(sig), toArrayBuffer(signed));
-    }
-    else if (key.algorithm.name === "RSA-PSS") {
-        // Salt length must match the hash output size
-        const hashAlg = key.algorithm.hash.name;
-        const saltLength = hashAlg === HashAlgorithms.SHA256 ? 32 :
-            hashAlg === HashAlgorithms.SHA384 ? 48 :
-                hashAlg === HashAlgorithms.SHA512 ? 64 : 32;
-        return await crypto.subtle.verify({
-            name: "RSA-PSS",
-            saltLength: saltLength,
-        }, key, toArrayBuffer(sig), toArrayBuffer(signed));
-    }
-    else if (key.algorithm.name === "RSASSA-PKCS1-v1_5") {
-        return await crypto.subtle.verify(key.algorithm.name, key, toArrayBuffer(sig), toArrayBuffer(signed));
-    }
-    else {
-        throw new Error("Unsupported key type!");
-    }
-}
-// Verifies an ECDSA signature over a pre-computed digest.
-// WebCrypto's verify() always hashes the input first, so passing a digest would
-// result in double-hashing. We use @noble/curves for low-level ECDSA verification,
-// adapted from the same workaround used in sigstore-js's conformance CLI.
-// See: https://github.com/sigstore/sigstore-js/blob/main/packages/conformance/src/commands/verify-bundle.ts#L111
-export async function verifySignatureOverDigest(key, digest, sig) {
-    if (key.algorithm.name !== KeyTypes.Ecdsa) {
-        throw new Error("verifySignatureOverDigest only supports ECDSA keys");
-    }
-    const namedCurve = key.algorithm.namedCurve;
-    let curve;
-    if (namedCurve === EcdsaTypes.P256) {
-        curve = p256;
-    }
-    else if (namedCurve === EcdsaTypes.P384) {
-        curve = p384;
-    }
-    else if (namedCurve === EcdsaTypes.P521) {
-        curve = p521;
-    }
-    else {
-        throw new Error(`Unsupported curve: ${namedCurve}`);
-    }
-    // Export the public key to get x and y coordinates
-    const jwk = await crypto.subtle.exportKey("jwk", key);
-    if (!jwk.x || !jwk.y) {
-        throw new Error("Invalid ECDSA public key: missing x or y coordinates");
-    }
-    // Convert base64url JWK coordinates to bytes
-    const x = base64UrlToUint8Array(jwk.x);
-    const y = base64UrlToUint8Array(jwk.y);
-    // Combine x and y into uncompressed public key format (0x04 || x || y)
-    const publicKey = new Uint8Array(1 + x.length + y.length);
-    publicKey[0] = 0x04;
-    publicKey.set(x, 1);
-    publicKey.set(y, 1 + x.length);
-    // Verify the DER-encoded signature over the digest
-    // @noble/curves can parse DER signatures directly with format: 'der'
-    // Options:
-    // - format: 'der' to parse DER-encoded signatures
-    // - prehash: false because we're passing a pre-computed digest, not the original message
-    // - lowS: false to accept both high-S and low-S signatures (matches elliptic.js behavior)
-    //   elliptic.js accepts malleable signatures by default, while @noble/curves rejects them by default
-    return curve.verify(sig, digest, publicKey, { format: 'der', prehash: false, lowS: false });
-}
-export { uint8ArrayEqual as bufferEqual } from "./encoding.js";
-//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,aAAa,GAEd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAEzD,SAAS,WAAW,CAAC,UAAsB;IACzC,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC;QACzC,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAChE,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,eAAe,CAAC;IAElH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,WAAW,CAAC,kBAAkB,CAAC,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC;IAC/F,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACxB,MAAM,gBAAgB,GAAG,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC;IAElC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC;IAErC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACxB,MAAM,oBAAoB,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC;IACtC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,6BAA6B;AAC7B,qDAAqD;AACrD,qEAAqE;AACrE,qFAAqF;AACrF,iEAAiE;AACjE,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,IAAI,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACxB,OAAO,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,4FAA4F;AAC5F,EAAE;AACF,0BAA0B;AAC1B,mGAAmG;AACnG,yGAAyG;AACzG,sCAAsC;AACtC,6DAA6D;AAC7D,kFAAkF;AAClF,6EAA6E;AAC7E,EAAE;AACF,YAAY;AACZ,0DAA0D;AAC1D,sDAAsD;AACtD,uEAAuE;AACvE,EAAE;AACF,wBAAwB;AACxB,sDAAsD;AACtD,8CAA8C;AAC9C,8DAA8D;AAC9D,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,MAAc,EACd,GAAW;IAEX,MAAM,YAAY;QAChB,MAAM,GAAmB,MAAM,CAAC;QAChC,OAAO,GAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1C,SAAS,GAA0D,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrF,WAAW,GAAY,IAAI,CAAC;QAC5B,KAAK,GAAoB,CAAC,QAAQ,CAAC,CAAC;KACrC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;YAC5C,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,IAAI,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,6EAA6E;QAC7E,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACnC,CAAC;aAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACnC,CAAC;aAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACnC,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,SAAS,GAAG;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,GAAG;gBACjB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAClC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,KAAK,CACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,MAAkB,EAClB,GAAe,EACf,OAAe,QAAQ;IAEvB,MAAM,OAAO,GAKT;QACF,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;KACzB,CAAC;IAEF,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAI,GAAG,CAAC,SAA4B,CAAC,UAAU,CAAC;QAChE,IAAI,QAAQ,GAAG,EAAE,CAAC;QAElB,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YACnC,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YAC1C,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YAC1C,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;QAC5C,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;QAC5C,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,aAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACzE,aAAa,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3B,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,OAAO,EACP,GAAG,EACH,aAAa,CAAC,aAAa,CAAC,EAC5B,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnD,2DAA2D;QAC3D,uEAAuE;QACvE,wEAAwE;QACxE,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,EAClB,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,EAClB,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,8CAA8C;QAC9C,MAAM,OAAO,GAAI,GAAG,CAAC,SAAmC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,MAAM,UAAU,GAAG,OAAO,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxC,OAAO,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B;YACE,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,UAAU;SACvB,EACD,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,EAClB,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtD,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,EAClB,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,EAClB,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,gFAAgF;AAChF,mFAAmF;AACnF,0EAA0E;AAC1E,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAc,EACd,MAAkB,EAClB,GAAe;IAEf,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAAI,GAAG,CAAC,SAA4B,CAAC,UAAU,CAAC;IAChE,IAAI,KAA8C,CAAC;IAEnD,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,mDAAmD;IACnD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,6CAA6C;IAC7C,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAEvC,uEAAuE;IACvE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1D,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpB,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAE/B,mDAAmD;IACnD,qEAAqE;IACrE,WAAW;IACX,kDAAkD;IAClD,yFAAyF;IACzF,0FAA0F;IAC1F,qGAAqG;IACrG,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,OAAO,EAAE,eAAe,IAAI,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/dist/encoding.d.ts

@@ -1,17 +0,0 @@
-export declare function toArrayBuffer(view: ArrayBufferView): ArrayBuffer;
-export declare function base64ToUint8Array(base64: string): Uint8Array;
-export declare function base64UrlToUint8Array(base64url: string): Uint8Array;
-export declare function Uint8ArrayToBase64(uint8Array: Uint8Array): string;
-export declare function hexToUint8Array(hex: string): Uint8Array;
-export declare function Uint8ArrayToHex(uint8Array: Uint8Array): string;
-export declare function stringToUint8Array(str: string): Uint8Array;
-export declare function Uint8ArrayToString(uint8Array: Uint8Array): string;
-export declare function readBigInt64BE(uint8Array: Uint8Array, offset?: number): bigint;
-export declare function base64Encode(str: string): string;
-export declare function base64Decode(str: string): string;
-/**
- * Constant-time equality comparison for Uint8Arrays
- * Prevents timing attacks by always comparing all bytes
- */
-export declare function uint8ArrayEqual(a: Uint8Array, b: Uint8Array): boolean;
-//# sourceMappingURL=encoding.d.ts.map

package/dist/encoding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAeA,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAoBhE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAU7D;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAMnE;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAQjE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAavD;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAY9D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAI1D;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAGjE;AAED,wBAAgB,cAAc,CAC5B,UAAU,EAAE,UAAU,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAMR;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAUrE"}

package/dist/encoding.js

@@ -1,112 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-export function toArrayBuffer(view) {
-    const { byteLength } = view;
-    if (byteLength === 0) {
-        return new ArrayBuffer(0);
-    }
-    const { buffer, byteOffset } = view;
-    if (buffer instanceof ArrayBuffer &&
-        byteOffset === 0 &&
-        byteLength === buffer.byteLength) {
-        return buffer;
-    }
-    const clone = new Uint8Array(byteLength);
-    clone.set(new Uint8Array(buffer, byteOffset, byteLength));
-    return clone.buffer;
-}
-export function base64ToUint8Array(base64) {
-    const binaryString = atob(base64);
-    const length = binaryString.length;
-    const bytes = new Uint8Array(length);
-    for (let i = 0; i < length; i++) {
-        bytes[i] = binaryString.charCodeAt(i);
-    }
-    return bytes;
-}
-export function base64UrlToUint8Array(base64url) {
-    let base64 = base64url.replace(/-/g, '+').replace(/_/g, '/');
-    while (base64.length % 4 !== 0) {
-        base64 += '=';
-    }
-    return base64ToUint8Array(base64);
-}
-export function Uint8ArrayToBase64(uint8Array) {
-    let binaryString = "";
-    for (let i = 0; i < uint8Array.length; i++) {
-        binaryString += String.fromCharCode(uint8Array[i]);
-    }
-    return btoa(binaryString);
-}
-export function hexToUint8Array(hex) {
-    if (hex.length % 2 !== 0) {
-        throw new Error("Hex string must have an even length");
-    }
-    const length = hex.length / 2;
-    const uint8Array = new Uint8Array(length);
-    for (let i = 0; i < length; i++) {
-        uint8Array[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-    }
-    return uint8Array;
-}
-export function Uint8ArrayToHex(uint8Array) {
-    let hexString = "";
-    for (let i = 0; i < uint8Array.length; i++) {
-        let hex = uint8Array[i].toString(16);
-        if (hex.length === 1) {
-            hex = "0" + hex;
-        }
-        hexString += hex;
-    }
-    return hexString;
-}
-export function stringToUint8Array(str) {
-    // Defaults to utf-8, but utf-8 is ascii compatible
-    const encoder = new TextEncoder();
-    return encoder.encode(str);
-}
-export function Uint8ArrayToString(uint8Array) {
-    const decoder = new TextDecoder("utf-8");
-    return decoder.decode(uint8Array);
-}
-export function readBigInt64BE(uint8Array, offset) {
-    if (offset === undefined) {
-        offset = 0;
-    }
-    const hex = Uint8ArrayToHex(uint8Array.slice(offset, offset + 8));
-    return BigInt(`0x${hex}`);
-}
-export function base64Encode(str) {
-    return Uint8ArrayToBase64(stringToUint8Array(str));
-}
-export function base64Decode(str) {
-    return Uint8ArrayToString(base64ToUint8Array(str));
-}
-/**
- * Constant-time equality comparison for Uint8Arrays
- * Prevents timing attacks by always comparing all bytes
- */
-export function uint8ArrayEqual(a, b) {
-    if (a.byteLength !== b.byteLength) {
-        return false;
-    }
-    let result = 0;
-    for (let i = 0; i < a.byteLength; i++) {
-        result |= a[i] ^ b[i];
-    }
-    return result === 0;
-}
-//# sourceMappingURL=encoding.js.map

package/dist/encoding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AACF,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAEpC,IACE,MAAM,YAAY,WAAW;QAC7B,UAAU,KAAK,CAAC;QAChB,UAAU,KAAK,MAAM,CAAC,UAAU,EAChC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,KAAK,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAsB;IACpD,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAClB,CAAC;QACD,SAAS,IAAI,GAAG,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,mDAAmD;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,UAAsB,EACtB,MAAe;IAEf,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAa,EAAE,CAAa;IAC1D,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/dist/pem.d.ts

@@ -1,3 +0,0 @@
-export declare function toDER(certificate: string): Uint8Array;
-export declare function fromDER(certificate: Uint8Array, type?: string): string;
-//# sourceMappingURL=pem.d.ts.map

package/dist/pem.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pem.d.ts","sourceRoot":"","sources":["../src/pem.ts"],"names":[],"mappings":"AAqBA,wBAAgB,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAYrD;AAKD,wBAAgB,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,SAAgB,GAAG,MAAM,CAS7E"}

package/dist/pem.js

@@ -1,41 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-import { base64ToUint8Array, Uint8ArrayToBase64 } from "./encoding.js";
-const PEM_HEADER = /-----BEGIN (.*)-----/;
-const PEM_FOOTER = /-----END (.*)-----/;
-export function toDER(certificate) {
-    let der = "";
-    certificate.split("\n").forEach((line) => {
-        if (line.match(PEM_HEADER) || line.match(PEM_FOOTER)) {
-            return;
-        }
-        der += line;
-    });
-    return base64ToUint8Array(der);
-}
-// Translates a DER-encoded buffer into a PEM-encoded string. Standard PEM
-// encoding dictates that each certificate should have a trailing newline after
-// the footer.
-export function fromDER(certificate, type = "CERTIFICATE") {
-    // Base64-encode the certificate.
-    const der = Uint8ArrayToBase64(certificate);
-    // Split the certificate into lines of 64 characters.
-    const lines = der.match(/.{1,64}/g) || "";
-    return [`-----BEGIN ${type}-----`, ...lines, `-----END ${type}-----`]
-        .join("\n")
-        .concat("\n");
-}
-//# sourceMappingURL=pem.js.map

package/dist/pem.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pem.js","sourceRoot":"","sources":["../src/pem.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AAEF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEvE,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAC1C,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC,MAAM,UAAU,KAAK,CAAC,WAAmB;IACvC,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,GAAG,IAAI,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,0EAA0E;AAC1E,+EAA+E;AAC/E,cAAc;AACd,MAAM,UAAU,OAAO,CAAC,WAAuB,EAAE,IAAI,GAAG,aAAa;IACnE,iCAAiC;IACjC,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC5C,qDAAqD;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAE1C,OAAO,CAAC,cAAc,IAAI,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,IAAI,OAAO,CAAC;SAClE,IAAI,CAAC,IAAI,CAAC;SACV,MAAM,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC"}

package/dist/stream.d.ts

@@ -1,22 +0,0 @@
-export declare class ByteStream {
-    private static BLOCK_SIZE;
-    private buf;
-    private view;
-    private start;
-    constructor(buffer?: ArrayBuffer);
-    get buffer(): Uint8Array;
-    get length(): number;
-    get position(): number;
-    seek(position: number): void;
-    slice(start: number, len: number): Uint8Array;
-    appendChar(char: number): void;
-    appendUint16(num: number): void;
-    appendUint24(num: number): void;
-    appendView(view: Uint8Array): void;
-    getBlock(size: number): Uint8Array;
-    getUint8(): number;
-    getUint16(): number;
-    private ensureCapacity;
-    private realloc;
-}
-//# sourceMappingURL=stream.d.ts.map

package/dist/stream.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../src/stream.ts"],"names":[],"mappings":"AAiBA,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAC,UAAU,CAAQ;IAEjC,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,KAAK,CAAK;gBAEN,MAAM,CAAC,EAAE,WAAW;IAUhC,IAAI,MAAM,IAAI,UAAU,CAEvB;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,QAAQ,IAAI,MAAM,CAErB;IAEM,IAAI,CAAC,QAAQ,EAAE,MAAM;IAMrB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU;IAU7C,UAAU,CAAC,IAAI,EAAE,MAAM;IAMvB,YAAY,CAAC,GAAG,EAAE,MAAM;IAWxB,YAAY,CAAC,GAAG,EAAE,MAAM;IAYxB,UAAU,CAAC,IAAI,EAAE,UAAU;IAM3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAelC,QAAQ,IAAI,MAAM;IAIlB,SAAS,IAAI,MAAM;IAM1B,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,OAAO;CAUhB"}

package/dist/stream.js

@@ -1,114 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-class StreamError extends Error {
-}
-export class ByteStream {
-    static BLOCK_SIZE = 1024;
-    buf;
-    view;
-    start = 0;
-    constructor(buffer) {
-        if (buffer) {
-            this.buf = buffer;
-            this.view = new Uint8Array(buffer);
-        }
-        else {
-            this.buf = new ArrayBuffer(0);
-            this.view = new Uint8Array(this.buf);
-        }
-    }
-    get buffer() {
-        return this.view.subarray(0, this.start);
-    }
-    get length() {
-        return this.view.byteLength;
-    }
-    get position() {
-        return this.start;
-    }
-    seek(position) {
-        this.start = position;
-    }
-    // Returns a Buffer containing the specified number of bytes starting at the
-    // given start position.
-    slice(start, len) {
-        const end = start + len;
-        if (end > this.length) {
-            throw new StreamError("request past end of buffer");
-        }
-        return this.view.subarray(start, end);
-    }
-    appendChar(char) {
-        this.ensureCapacity(1);
-        this.view[this.start] = char;
-        this.start += 1;
-    }
-    appendUint16(num) {
-        this.ensureCapacity(2);
-        const value = new Uint16Array([num]);
-        const view = new Uint8Array(value.buffer);
-        this.view[this.start] = view[1];
-        this.view[this.start + 1] = view[0];
-        this.start += 2;
-    }
-    appendUint24(num) {
-        this.ensureCapacity(3);
-        const value = new Uint32Array([num]);
-        const view = new Uint8Array(value.buffer);
-        this.view[this.start] = view[2];
-        this.view[this.start + 1] = view[1];
-        this.view[this.start + 2] = view[0];
-        this.start += 3;
-    }
-    appendView(view) {
-        this.ensureCapacity(view.length);
-        this.view.set(view, this.start);
-        this.start += view.length;
-    }
-    getBlock(size) {
-        if (size <= 0) {
-            return new Uint8Array(0);
-        }
-        if (this.start + size > this.view.length) {
-            throw new Error("request past end of buffer");
-        }
-        const result = this.view.subarray(this.start, this.start + size);
-        this.start += size;
-        return result;
-    }
-    getUint8() {
-        return this.getBlock(1)[0];
-    }
-    getUint16() {
-        const block = this.getBlock(2);
-        return (block[0] << 8) | block[1];
-    }
-    ensureCapacity(size) {
-        if (this.start + size > this.view.byteLength) {
-            const blockSize = ByteStream.BLOCK_SIZE + (size > ByteStream.BLOCK_SIZE ? size : 0);
-            this.realloc(this.view.byteLength + blockSize);
-        }
-    }
-    realloc(size) {
-        const newArray = new ArrayBuffer(size);
-        const newView = new Uint8Array(newArray);
-        // Copy the old buffer into the new one
-        newView.set(this.view);
-        this.buf = newArray;
-        this.view = newView;
-    }
-}
-//# sourceMappingURL=stream.js.map

package/dist/stream.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stream.js","sourceRoot":"","sources":["../src/stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AACF,MAAM,WAAY,SAAQ,KAAK;CAAG;AAElC,MAAM,OAAO,UAAU;IACb,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IAEzB,GAAG,CAAc;IACjB,IAAI,CAAa;IACjB,KAAK,GAAG,CAAC,CAAC;IAElB,YAAY,MAAoB;QAC9B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC;YAClB,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,IAAI,CAAC,QAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;IACxB,CAAC;IAED,4EAA4E;IAC5E,wBAAwB;IACjB,KAAK,CAAC,KAAa,EAAE,GAAW;QACrC,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC;QAExB,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAEM,UAAU,CAAC,IAAY;QAC5B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,CAAC;IAEM,YAAY,CAAC,GAAW;QAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAEvB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,CAAC;IAEM,YAAY,CAAC,GAAW;QAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAEvB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,CAAC;IAEM,UAAU,CAAC,IAAgB;QAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAEM,QAAQ,CAAC,IAAY;QAC1B,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QAEnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,QAAQ;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAEM,SAAS;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE/B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,SAAS,GACb,UAAU,CAAC,UAAU,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEzC,uCAAuC;QACvC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvB,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACtB,CAAC"}

package/src/asn1/error.ts

@@ -1,18 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-export class ASN1ParseError extends Error {}
-
-export class ASN1TypeError extends Error {}