@freedomofpress/sigstore-browser 0.1.0 → 0.1.2

package/src/interfaces.ts

@@ -99,20 +99,5 @@ export interface RawCA {
 
 export type RawCAs = RawCA[];
 
-export enum KeyTypes {
-  Ecdsa = "ECDSA",
-  Ed25519 = "Ed25519",
-  RSA = "RSA",
-}
-
-export enum EcdsaTypes {
-  P256 = "P-256",
-  P384 = "P-384",
-  P521 = "P-521",
-}
-
-export enum HashAlgorithms {
-  SHA256 = "SHA-256",
-  SHA384 = "SHA-384",
-  SHA512 = "SHA-512",
-}
+// Re-export crypto enums from crypto-browser (shared with tuf-browser)
+export { KeyTypes, EcdsaTypes, HashAlgorithms } from "@freedomofpress/crypto-browser";

package/src/rfc3161/timestamp.ts

@@ -13,9 +13,7 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 */
-import { ASN1Obj } from "../asn1/index.js";
-import { bufferEqual, verifySignature } from "../crypto.js";
-import { toArrayBuffer } from "../encoding.js";
+import { ASN1Obj, uint8ArrayEqual, verifySignature } from "@freedomofpress/crypto-browser";
 import { HashAlgorithms } from "../interfaces.js";
 import { ECDSA_SIGNATURE_ALGOS, RSA_SIGNATURE_ALGOS, SHA2_HASH_ALGOS } from "../oid.js";
 import { RFC3161TimestampVerificationError } from "./error.js";
@@ -123,11 +121,11 @@ export class RFC3161Timestamp {
 
     const tstInfoDigest = await crypto.subtle.digest(
       hashAlgName,
-      toArrayBuffer(this.tstInfo.raw),
+      this.tstInfo.raw as Uint8Array<ArrayBuffer>,
     );
     const expectedDigest = this.messageDigestAttributeObj.subs[1].subs[0].value;
 
-    if (!bufferEqual(new Uint8Array(tstInfoDigest), expectedDigest)) {
+    if (!uint8ArrayEqual(new Uint8Array(tstInfoDigest), expectedDigest)) {
       throw new RFC3161TimestampVerificationError(
         "signed data does not match tstInfo",
       );

package/src/rfc3161/tstinfo.ts

@@ -13,9 +13,7 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 */
-import { ASN1Obj } from "../asn1/index.js";
-import { bufferEqual } from "../crypto.js";
-import { toArrayBuffer } from "../encoding.js";
+import { ASN1Obj, uint8ArrayEqual } from "@freedomofpress/crypto-browser";
 import { HashAlgorithms } from "../interfaces.js";
 import { SHA2_HASH_ALGOS } from "../oid.js";
 import { RFC3161TimestampVerificationError } from "./error.js";
@@ -62,10 +60,10 @@ export class TSTInfo {
 
     const digest = await crypto.subtle.digest(
       hashAlgName,
-      toArrayBuffer(data),
+      data as Uint8Array<ArrayBuffer>,
     );
     if (
-      !bufferEqual(new Uint8Array(digest), this.messageImprintHashedMessage)
+      !uint8ArrayEqual(new Uint8Array(digest), this.messageImprintHashedMessage)
     ) {
       throw new RFC3161TimestampVerificationError(
         "message imprint does not match artifact",

package/src/sigstore.ts

@@ -1,19 +1,27 @@
-import { SigstoreBundle } from "./bundle.js";
-import { canonicalize } from "./canonicalize.js";
-import { importKey, verifySignature, verifySignatureOverDigest } from "./crypto.js";
-import { preAuthEncoding } from "./dsse.js";
 import {
   base64ToUint8Array,
+  ByteStream,
+  canonicalize,
+  importKey,
   stringToUint8Array,
-  toArrayBuffer,
   uint8ArrayEqual,
   Uint8ArrayToHex,
   Uint8ArrayToString,
-} from "./encoding.js";
+  verifySignature,
+  verifySignatureOverDigest,
+} from "@freedomofpress/crypto-browser";
+import { HashAlgorithms } from "./interfaces.js";
+import {
+  CertificateChainVerifier,
+  EXTENSION_OID_SCT,
+  X509Certificate,
+  X509SCTExtension,
+} from "./x509/index.js";
+import { SigstoreBundle } from "./bundle.js";
+import { preAuthEncoding } from "./dsse.js";
 import {
   CertAuthority,
   CTLog,
-  HashAlgorithms,
   RawCAs,
   RawLogs,
   RawTimestampAuthorities,
@@ -22,13 +30,6 @@ import {
   SigstoreRoots,
   TrustedRoot,
 } from "./interfaces.js";
-import { ByteStream } from "./stream.js";
-import {
-  CertificateChainVerifier,
-  EXTENSION_OID_SCT,
-  X509Certificate,
-  X509SCTExtension,
-} from "./x509/index.js";
 import { verifyMerkleInclusion } from "./tlog/merkle.js";
 import { verifyCheckpoint } from "./tlog/checkpoint.js";
 import { verifyTLogBody } from "./tlog/body.js";
@@ -302,7 +303,7 @@ export class SigstoreVerifier {
 
     // Calculate hash of the issuer's public key
     const issuerId = new Uint8Array(
-      await crypto.subtle.digest(HashAlgorithms.SHA256, toArrayBuffer(issuer.publicKey)),
+      await crypto.subtle.digest(HashAlgorithms.SHA256, issuer.publicKey as Uint8Array<ArrayBuffer>),
     );
     preCert.appendView(issuerId);
 
@@ -675,7 +676,7 @@ export class SigstoreVerifier {
       } else {
         // data is the file content, compute the digest
         artifactDigest = Uint8ArrayToHex(
-          new Uint8Array(await crypto.subtle.digest(HashAlgorithms.SHA256, toArrayBuffer(data)))
+          new Uint8Array(await crypto.subtle.digest(HashAlgorithms.SHA256, data as Uint8Array<ArrayBuffer>))
         );
       }
 

package/src/timestamp/tsa.ts

@@ -13,11 +13,10 @@
  * - Adds verifyBundleTimestamp for Sigstore bundle integration (new functionality)
  */
 
+import { base64ToUint8Array, uint8ArrayEqual } from "@freedomofpress/crypto-browser";
+import { CertificateChainVerifier, X509Certificate } from "../x509/index.js";
+import { RawTimestampAuthority } from "../interfaces.js";
 import { RFC3161Timestamp } from "../rfc3161/index.js";
-import { X509Certificate, CertificateChainVerifier } from "../x509/index.js";
-import { bufferEqual } from "../crypto.js";
-import { base64ToUint8Array, Uint8ArrayToHex } from "../encoding.js";
-import type { RawTimestampAuthority } from "../interfaces.js";
 
 /**
  * Verifies an RFC3161 timestamp against a set of timestamp authorities
@@ -110,8 +109,8 @@ function filterCAsBySerialAndIssuer(
       base64ToUint8Array(ca.certChain.certificates[0].rawBytes)
     );
 
-    return bufferEqual(leafCert.serialNumber, criteria.serialNumber) &&
-           bufferEqual(leafCert.issuer, criteria.issuer);
+    return uint8ArrayEqual(leafCert.serialNumber, criteria.serialNumber) &&
+           uint8ArrayEqual(leafCert.issuer, criteria.issuer);
   });
 }
 

package/src/tlog/body.ts

@@ -9,7 +9,7 @@
  * - Direct bundle comparison instead of SignatureContent abstraction
  */
 
-import { base64Decode } from "../encoding.js";
+import { base64Decode } from "@freedomofpress/crypto-browser";
 import type { SigstoreBundle, TLogEntry } from "../bundle.js";
 import { verifyHashedRekordBody } from "./hashedrekord.js";
 import { verifyDSSEBody } from "./dsse.js";

package/src/tlog/checkpoint.ts

@@ -19,8 +19,14 @@ Follows the signed note format specification:
 https://github.com/transparency-dev/formats/blob/main/log/README.md
 */
 
-import { base64ToUint8Array, stringToUint8Array, toArrayBuffer, uint8ArrayEqual, Uint8ArrayToHex } from "../encoding.js";
-import { importKey, verifySignature } from "../crypto.js";
+import {
+  base64ToUint8Array,
+  importKey,
+  KeyTypes,
+  stringToUint8Array,
+  uint8ArrayEqual,
+  verifySignature,
+} from "@freedomofpress/crypto-browser";
 import type { TLogEntry } from "../bundle.js";
 import type { RawLogs } from "../interfaces.js";
 
@@ -223,17 +229,17 @@ async function importTLogKey(tlog: RawLogs[0]): Promise<CryptoKey> {
 
   if (keyDetails === "ecdsa-sha2-nistp256") {
     // SSH-style ECDSA P-256 format used in tests
-    keyType = "ecdsa";
+    keyType = KeyTypes.Ecdsa;
     scheme = "P256-SHA256";
   } else if (keyDetails.includes("ECDSA")) {
-    keyType = "ecdsa";
+    keyType = KeyTypes.Ecdsa;
     // Extract the curve and hash, e.g., "P256_SHA_256" from "PKIX_ECDSA_P256_SHA_256"
     scheme = keyDetails.replace("PKIX_ECDSA_", "").replaceAll("_", "-");
   } else if (keyDetails.includes("ED25519")) {
-    keyType = "ed25519";
-    scheme = "ed25519";
+    keyType = KeyTypes.Ed25519;
+    scheme = KeyTypes.Ed25519;
   } else if (keyDetails.includes("RSA")) {
-    keyType = "rsa";
+    keyType = KeyTypes.RSA;
     // Extract RSA details, e.g., "PSS_SHA_256" from "PKIX_RSA_PSS_SHA_256"
     scheme = keyDetails.replace("PKIX_RSA_", "").replaceAll("_", "-");
   } else {

package/src/tlog/dsse.ts

@@ -11,7 +11,7 @@
  * - Adds verifyDSSE002Body() - new functionality (reference only supports v0.0.1)
  */
 
-import { base64ToUint8Array, hexToUint8Array, toArrayBuffer, uint8ArrayEqual } from "../encoding.js";
+import { base64ToUint8Array, hexToUint8Array, uint8ArrayEqual } from "@freedomofpress/crypto-browser";
 import { HashAlgorithms } from "../interfaces.js";
 import type { SigstoreBundle } from "../bundle.js";
 import type { RekorEntry } from "./body.js";
@@ -90,7 +90,7 @@ async function verifyDSSE001Body(
 
   const payloadBytes = base64ToUint8Array(bundle.dsseEnvelope.payload);
   const bundleHashBytes = new Uint8Array(
-    await crypto.subtle.digest(HashAlgorithms.SHA256, toArrayBuffer(payloadBytes))
+    await crypto.subtle.digest(HashAlgorithms.SHA256, payloadBytes as Uint8Array<ArrayBuffer>)
   );
 
   if (!uint8ArrayEqual(tlogHashBytes, bundleHashBytes)) {
@@ -138,7 +138,7 @@ async function verifyDSSE002Body(
 
   const payloadBytes = base64ToUint8Array(bundle.dsseEnvelope.payload);
   const bundleHashBytes = new Uint8Array(
-    await crypto.subtle.digest(HashAlgorithms.SHA256, toArrayBuffer(payloadBytes))
+    await crypto.subtle.digest(HashAlgorithms.SHA256, payloadBytes as Uint8Array<ArrayBuffer>)
   );
 
   if (!uint8ArrayEqual(tlogHashBytes, bundleHashBytes)) {

package/src/tlog/hashedrekord.ts

@@ -10,7 +10,7 @@
  * - Adds verifyHashedRekordV002Body() - new functionality (reference only supports v0.0.1)
  */
 
-import { base64ToUint8Array, hexToUint8Array, uint8ArrayEqual } from "../encoding.js";
+import { base64ToUint8Array, hexToUint8Array, uint8ArrayEqual } from "@freedomofpress/crypto-browser";
 import type { SigstoreBundle } from "../bundle.js";
 import type { RekorEntry } from "./body.js";
 

package/src/tlog/intoto.ts

@@ -10,7 +10,7 @@
  * - Uses crypto.subtle.digest for hash computation instead of Node.js crypto
  */
 
-import { base64Decode, base64ToUint8Array, hexToUint8Array, toArrayBuffer, uint8ArrayEqual } from "../encoding.js";
+import { base64Decode, base64ToUint8Array, hexToUint8Array, uint8ArrayEqual } from "@freedomofpress/crypto-browser";
 import { HashAlgorithms } from "../interfaces.js";
 import type { SigstoreBundle } from "../bundle.js";
 import type { RekorEntry } from "./body.js";
@@ -92,7 +92,7 @@ export async function verifyIntotoBody(
 
     const payloadBytes = base64ToUint8Array(bundle.dsseEnvelope.payload);
     const bundleHashBytes = new Uint8Array(
-      await crypto.subtle.digest(HashAlgorithms.SHA256, toArrayBuffer(payloadBytes))
+      await crypto.subtle.digest(HashAlgorithms.SHA256, payloadBytes as Uint8Array<ArrayBuffer>)
     );
 
     if (!uint8ArrayEqual(tlogHashBytes, bundleHashBytes)) {

package/src/tlog/merkle.ts

@@ -6,9 +6,9 @@ Key differences:
 - Uses Uint8Array instead of Buffer
 - Uses async Web Crypto API (crypto.subtle.digest) instead of sync Node.js crypto
 - Base64 decoding via custom base64ToUint8Array instead of Buffer.from
-- Custom uint8ArrayEqual instead of crypto.bufferEqual
+- uint8ArrayEqual from crypto-browser instead of Node.js crypto.timingSafeEqual
 */
-import { base64ToUint8Array, toArrayBuffer, uint8ArrayEqual } from "../encoding.js";
+import { base64ToUint8Array, uint8ArrayEqual } from "@freedomofpress/crypto-browser";
 import { HashAlgorithms } from "../interfaces.js";
 import type { TLogEntry } from "../bundle.js";
 
@@ -138,7 +138,7 @@ async function hashChildren(
   data.set(left, RFC6962_NODE_HASH_PREFIX.length);
   data.set(right, RFC6962_NODE_HASH_PREFIX.length + left.length);
 
-  const hash = await crypto.subtle.digest(HashAlgorithms.SHA256, toArrayBuffer(data));
+  const hash = await crypto.subtle.digest(HashAlgorithms.SHA256, data as Uint8Array<ArrayBuffer>);
   return new Uint8Array(hash);
 }
 
@@ -147,6 +147,6 @@ async function hashLeaf(leaf: Uint8Array): Promise<Uint8Array> {
   data.set(RFC6962_LEAF_HASH_PREFIX, 0);
   data.set(leaf, RFC6962_LEAF_HASH_PREFIX.length);
 
-  const hash = await crypto.subtle.digest(HashAlgorithms.SHA256, toArrayBuffer(data));
+  const hash = await crypto.subtle.digest(HashAlgorithms.SHA256, data as Uint8Array<ArrayBuffer>);
   return new Uint8Array(hash);
 }

package/src/trust/tuf.ts

@@ -7,9 +7,9 @@
  * Reference: https://github.com/freedomofpress/tuf-browser
  */
 
-import type { TrustedRoot } from "../interfaces.js";
-import { Uint8ArrayToString } from "../encoding.js";
-import type { TUFClient } from "tuf-browser/dist/tuf.js";
+import { Uint8ArrayToString } from "@freedomofpress/crypto-browser";
+import type { TUFClient } from "@freedomofpress/tuf-browser";
+import { TrustedRoot } from "../interfaces.js";
 
 /**
  * Options for TrustedRootProvider configuration
@@ -106,7 +106,7 @@ export class TrustedRootProvider {
     }
 
     try {
-      const { TUFClient } = await import('tuf-browser/dist/tuf.js');
+      const { TUFClient } = await import('@freedomofpress/tuf-browser');
 
       // Get initial root metadata
       const rootMetadata = this.initialRoot || await this.getDefaultRoot();
@@ -179,10 +179,10 @@ export class TrustedRootProvider {
 
       // Fetch the trusted root target via TUF
       // TUF will handle all verification (signatures, rollback protection, etc.)
-      const trustedRootBytes = await this.tufClient.getTarget(this.trustedRootTarget);
+      const trustedRootBuffer = await this.tufClient.getTarget(this.trustedRootTarget);
 
       // Parse the trusted root JSON
-      const trustedRootJson = Uint8ArrayToString(trustedRootBytes);
+      const trustedRootJson = Uint8ArrayToString(new Uint8Array(trustedRootBuffer));
       const trustedRoot = JSON.parse(trustedRootJson) as TrustedRoot;
 
       // Cache the result

package/src/x509/cert.ts

@@ -13,12 +13,16 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 */
-import { ASN1Obj } from "../asn1/index.js";
-import { bufferEqual, importKey, verifySignature } from "../crypto.js";
-import { Uint8ArrayToBase64 } from "../encoding.js";
+import {
+  ASN1Obj,
+  importKey,
+  toDER,
+  Uint8ArrayToBase64,
+  uint8ArrayEqual,
+  verifySignature,
+} from "@freedomofpress/crypto-browser";
 import { KeyTypes } from "../interfaces.js";
 import { ECDSA_CURVE_NAMES, ECDSA_SIGNATURE_ALGOS, RSA_SIGNATURE_ALGOS } from "../oid.js";
-import * as pem from "../pem.js";
 import {
   X509AuthorityKeyIDExtension,
   X509BasicConstraintsExtension,
@@ -50,7 +54,7 @@ export class X509Certificate {
   }
 
   public static parse(cert: Uint8Array | string): X509Certificate {
-    const der = typeof cert === "string" ? pem.toDER(cert) : cert;
+    const der = typeof cert === "string" ? toDER(cert) : cert;
     const asn1 = ASN1Obj.parseBuffer(der);
     return new X509Certificate(asn1);
   }
@@ -112,7 +116,7 @@ export class X509Certificate {
       } else {
         scheme = "SHA256";
       }
-      return importKey("RSA", `RSA_PKCS1V5_${scheme}`, Uint8ArrayToBase64(publicKey));
+      return importKey(KeyTypes.RSA, `RSA_PKCS1V5_${scheme}`, Uint8ArrayToBase64(publicKey));
     } else {
       // ECDSA key - the curve OID is in the second element
       const curveOID = spki.subs[0].subs[1]?.toOID();
@@ -233,7 +237,7 @@ export class X509Certificate {
   }
 
   public equals(other: X509Certificate): boolean {
-    return bufferEqual(this.root.toDER(), other.root.toDER());
+    return uint8ArrayEqual(this.root.toDER(), other.root.toDER());
   }
 
   // Creates a copy of the certificate with a new buffer

package/src/x509/chain.ts

@@ -23,11 +23,11 @@ limitations under the License.
  * Key differences from sigstore-js:
  * - Browser-compatible: async verify() method for Web Crypto API
  * - Uses Uint8Array instead of Buffer for binary data
- * - Uses bufferEqual for Uint8Array comparisons
+ * - Uses uint8ArrayEqual for Uint8Array comparisons
  */
 
+import { uint8ArrayEqual } from "@freedomofpress/crypto-browser";
 import { X509Certificate } from "./cert.js";
-import { bufferEqual } from "../crypto.js";
 
 interface CertificateChainVerifierOptions {
   trustedCerts: X509Certificate[];
@@ -123,7 +123,7 @@ export class CertificateChainVerifier {
     let issuers: X509Certificate[] = [];
     let keyIdentifier: Uint8Array | undefined;
 
-    if (bufferEqual(certificate.subject, certificate.issuer)) {
+    if (uint8ArrayEqual(certificate.subject, certificate.issuer)) {
       if (await certificate.verify()) {
         return [certificate];
       }
@@ -137,7 +137,7 @@ export class CertificateChainVerifier {
       if (keyIdentifier) {
         if (possibleIssuer.extSubjectKeyID) {
           if (
-            bufferEqual(
+            uint8ArrayEqual(
               possibleIssuer.extSubjectKeyID.keyIdentifier,
               keyIdentifier
             )
@@ -148,7 +148,7 @@ export class CertificateChainVerifier {
         }
       }
 
-      if (bufferEqual(possibleIssuer.subject, certificate.issuer)) {
+      if (uint8ArrayEqual(possibleIssuer.subject, certificate.issuer)) {
         issuers.push(possibleIssuer);
       }
     });
@@ -180,7 +180,7 @@ export class CertificateChainVerifier {
     }
 
     for (let i = path.length - 2; i >= 0; i--) {
-      if (!bufferEqual(path[i].issuer, path[i + 1].subject)) {
+      if (!uint8ArrayEqual(path[i].issuer, path[i + 1].subject)) {
         throw new Error("incorrect certificate name chaining");
       }
     }

package/src/x509/ext.ts

@@ -13,9 +13,7 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 */
-import { ASN1Obj } from "../asn1/index.js";
-import { toArrayBuffer, Uint8ArrayToString } from "../encoding.js";
-import { ByteStream } from "../stream.js";
+import { ASN1Obj, ByteStream, Uint8ArrayToString } from "@freedomofpress/crypto-browser";
 import { SignedCertificateTimestamp } from "./sct.js";
 
 // https://www.rfc-editor.org/rfc/rfc5280#section-4.1
@@ -187,7 +185,7 @@ export class X509SCTExtension extends X509Extension {
 
   get signedCertificateTimestamps(): SignedCertificateTimestamp[] {
     const buf = this.extnValueObj.subs[0].value;
-    const stream = new ByteStream(toArrayBuffer(buf));
+    const stream = new ByteStream(buf);
 
     // The overall list length is encoded in the first two bytes -- note this
     // is the length of the list in bytes, NOT the number of SCTs in the list

package/src/x509/sct.ts

@@ -13,9 +13,7 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 */
-import { verifySignature } from "../crypto.js";
-import { readBigInt64BE, toArrayBuffer } from "../encoding.js";
-import { ByteStream } from "../stream.js";
+import { ByteStream, readBigInt64BE, verifySignature } from "@freedomofpress/crypto-browser";
 
 interface SCTOptions {
   version: number;
@@ -111,7 +109,7 @@ export class SignedCertificateTimestamp {
   // https://www.rfc-editor.org/rfc/rfc6962#section-3.2
   // https://www.rfc-editor.org/rfc/rfc5246#section-7.4.1.4.1
   public static parse(buf: Uint8Array): SignedCertificateTimestamp {
-    const stream = new ByteStream(toArrayBuffer(buf));
+    const stream = new ByteStream(buf);
 
     // Version - enum { v1(0), (255) }
     const version = stream.getUint8();

package/vite.config.playwright.ts

@@ -2,25 +2,13 @@
 import { defineConfig } from "vite";
 
 export default defineConfig({
-  build: {
-    minify: false,
-    outDir: "dist",
-    target: "esnext",
-    lib: {
-      entry: "src/index.ts",
-      formats: ["es"],
-      fileName: "index",
-    },
-  },
   test: {
-    globals: true,
+    include: ["**/*.browser.test.ts"],
     browser: {
-      provider: "playwright",
       enabled: true,
-      headless: false,
-      instances: [
-        { browser: "chromium" },
-      ],
+      provider: "playwright",
+      headless: true,
+      instances: [{ browser: "chromium" }],
     },
   },
 });

package/dist/asn1/error.d.ts

@@ -1,5 +0,0 @@
-export declare class ASN1ParseError extends Error {
-}
-export declare class ASN1TypeError extends Error {
-}
-//# sourceMappingURL=error.d.ts.map

package/dist/asn1/error.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/asn1/error.ts"],"names":[],"mappings":"AAeA,qBAAa,cAAe,SAAQ,KAAK;CAAG;AAE5C,qBAAa,aAAc,SAAQ,KAAK;CAAG"}

package/dist/asn1/error.js

@@ -1,20 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-export class ASN1ParseError extends Error {
-}
-export class ASN1TypeError extends Error {
-}
-//# sourceMappingURL=error.js.map

package/dist/asn1/error.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/asn1/error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AACF,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG"}

package/dist/asn1/index.d.ts

@@ -1,2 +0,0 @@
-export { ASN1Obj } from "./obj.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/asn1/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/asn1/index.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC"}

package/dist/asn1/index.js

@@ -1,17 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-export { ASN1Obj } from "./obj.js";
-//# sourceMappingURL=index.js.map

package/dist/asn1/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/asn1/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AACF,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC"}

package/dist/asn1/length.d.ts

@@ -1,4 +0,0 @@
-import { ByteStream } from "../stream.js";
-export declare function decodeLength(stream: ByteStream): number;
-export declare function encodeLength(len: number): Uint8Array;
-//# sourceMappingURL=length.d.ts.map

package/dist/asn1/length.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"length.d.ts","sourceRoot":"","sources":["../../src/asn1/length.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAK1C,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CA8BvD;AAGD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAgBpD"}

package/dist/asn1/length.js

@@ -1,59 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-import { ASN1ParseError } from "./error.js";
-// Decodes the length of a DER-encoded ANS.1 element from the supplied stream.
-// https://learn.microsoft.com/en-us/windows/win32/seccertenroll/about-encoded-length-and-value-bytes
-export function decodeLength(stream) {
-    const buf = stream.getUint8();
-    // If the most significant bit is UNSET the length is just the value of the
-    // byte.
-    if ((buf & 0x80) === 0x00) {
-        return buf;
-    }
-    // Otherwise, the lower 7 bits of the first byte indicate the number of bytes
-    // that follow to encode the length.
-    const byteCount = buf & 0x7f;
-    // Ensure the encoded length can safely fit in a JS number.
-    if (byteCount > 6) {
-        throw new ASN1ParseError("length exceeds 6 byte limit");
-    }
-    // Iterate over the bytes that encode the length.
-    let len = 0;
-    for (let i = 0; i < byteCount; i++) {
-        len = len * 256 + stream.getUint8();
-    }
-    // This is a valid ASN.1 length encoding, but we don't support it.
-    if (len === 0) {
-        throw new ASN1ParseError("indefinite length encoding not supported");
-    }
-    return len;
-}
-// Translates the supplied value to a DER-encoded length.
-export function encodeLength(len) {
-    if (len < 128) {
-        return new Uint8Array([len]);
-    }
-    // Bitwise operations on large numbers are not supported in JS, so we need to
-    // use BigInts.
-    let val = BigInt(len);
-    const bytes = [];
-    while (val > 0n) {
-        bytes.unshift(Number(val & 255n));
-        val = val >> 8n;
-    }
-    return new Uint8Array([0x80 | bytes.length, ...bytes]);
-}
-//# sourceMappingURL=length.js.map

package/dist/asn1/length.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"length.js","sourceRoot":"","sources":["../../src/asn1/length.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AAGF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,8EAA8E;AAC9E,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAE9B,2EAA2E;IAC3E,QAAQ;IACR,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC;IAE7B,2DAA2D;IAC3D,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,cAAc,CAAC,6BAA6B,CAAC,CAAC;IAC1D,CAAC;IAED,iDAAiD;IACjD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC;IAED,kEAAkE;IAClE,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,cAAc,CAAC,0CAA0C,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,eAAe;IACf,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,EAAE,CAAC;IAEjB,OAAO,GAAG,GAAG,EAAE,EAAE,CAAC;QAChB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QAClC,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC"}