@freedomofpress/sigstore-browser 0.1.0

package/dist/crypto.js

@@ -0,0 +1,260 @@
+import { ASN1Obj } from "./asn1/index.js";
+import { base64ToUint8Array, base64UrlToUint8Array, hexToUint8Array, toArrayBuffer, } from "./encoding.js";
+import { EcdsaTypes, HashAlgorithms, KeyTypes } from "./interfaces.js";
+import { toDER } from "./pem.js";
+import { p256, p384, p521 } from "@noble/curves/nist.js";
+function pkcs1ToSpki(pkcs1Bytes) {
+    const algorithmIdentifier = new Uint8Array([
+        0x30, 0x0d,
+        0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01,
+        0x05, 0x00
+    ]);
+    const bitStringLength = pkcs1Bytes.length + 1;
+    const totalContentLength = algorithmIdentifier.length + 1 + lengthBytes(bitStringLength).length + bitStringLength;
+    const result = new Uint8Array(1 + lengthBytes(totalContentLength).length + totalContentLength);
+    let offset = 0;
+    result[offset++] = 0x30;
+    const totalLengthBytes = lengthBytes(totalContentLength);
+    result.set(totalLengthBytes, offset);
+    offset += totalLengthBytes.length;
+    result.set(algorithmIdentifier, offset);
+    offset += algorithmIdentifier.length;
+    result[offset++] = 0x03;
+    const bitStringLengthBytes = lengthBytes(bitStringLength);
+    result.set(bitStringLengthBytes, offset);
+    offset += bitStringLengthBytes.length;
+    result[offset++] = 0x00;
+    result.set(pkcs1Bytes, offset);
+    return result;
+}
+// Encodes a length value in DER (Distinguished Encoding Rules) format.
+// DER length encoding rules:
+// - Lengths 0-127: single byte containing the length
+// - Lengths 128-255: 0x81 followed by one byte containing the length
+// - Lengths 256-65535: 0x82 followed by two bytes containing the length (big-endian)
+// Used by pkcs1ToSpki() to construct valid ASN.1/DER structures.
+function lengthBytes(length) {
+    if (length < 128) {
+        return new Uint8Array([length]);
+    }
+    else if (length < 256) {
+        return new Uint8Array([0x81, length]);
+    }
+    else {
+        return new Uint8Array([0x82, (length >> 8) & 0xff, length & 0xff]);
+    }
+}
+// Imports cryptographic public keys into the Web Crypto API format (CryptoKey).
+// This function is specific to the browser implementation and doesn't exist in sigstore-js.
+//
+// Why needed for browser:
+// - sigstore-js uses Node.js crypto.createPublicKey() which handles many key formats automatically
+// - Browsers only have Web Crypto API (crypto.subtle.importKey) which requires explicit format/algorithm
+// - This function bridges the gap by:
+//   1. Detecting key format (PEM, hex, base64, PKCS#1, SPKI)
+//   2. Converting PKCS#1 RSA keys to SPKI (Web Crypto only supports SPKI for RSA)
+//   3. Mapping Sigstore key types/schemes to Web Crypto algorithm parameters
+//
+// Supports:
+// - ECDSA (P-256, P-384, P-521) - Used by Fulcio, CT logs
+// - Ed25519 - Used by Rekor checkpoints, some CT logs
+// - RSA (PKCS#1, PSS) - Used by older CT logs and some Rekor instances
+//
+// Key format detection:
+// - PEM format (contains "BEGIN"): Parse with toDER()
+// - Hex string (all hex chars): Import as raw
+// - Base64 PKCS#1 (starts with 0x30 0x82...): Convert to SPKI
+// - Base64 SPKI: Import directly
+export async function importKey(keytype, scheme, key) {
+    class importParams {
+        format = "spki";
+        keyData = new ArrayBuffer(0);
+        algorithm = { name: "ECDSA" };
+        extractable = true;
+        usage = ["verify"];
+    }
+    const params = new importParams();
+    if (key.includes("BEGIN")) {
+        params.format = "spki";
+        params.keyData = toArrayBuffer(toDER(key));
+    }
+    else if (/^[0-9A-Fa-f]+$/.test(key)) {
+        params.format = "raw";
+        params.keyData = toArrayBuffer(hexToUint8Array(key));
+    }
+    else {
+        params.format = "spki";
+        const keyBytes = base64ToUint8Array(key);
+        if (keytype.toLowerCase().includes("pkcs1") &&
+            keyBytes[0] === 0x30 && keyBytes[1] === 0x82 &&
+            keyBytes[4] === 0x02 && keyBytes[5] === 0x82) {
+            params.keyData = toArrayBuffer(pkcs1ToSpki(keyBytes));
+        }
+        else {
+            params.keyData = toArrayBuffer(keyBytes);
+        }
+    }
+    if (keytype.toLowerCase().includes("ecdsa")) {
+        if (scheme.includes("256")) {
+            params.algorithm = { name: "ECDSA", namedCurve: EcdsaTypes.P256 };
+        }
+        else if (scheme.includes("384")) {
+            params.algorithm = { name: "ECDSA", namedCurve: EcdsaTypes.P384 };
+        }
+        else if (scheme.includes("521")) {
+            params.algorithm = { name: "ECDSA", namedCurve: EcdsaTypes.P521 };
+        }
+        else {
+            throw new Error("Cannot determine ECDSA key size.");
+        }
+    }
+    else if (keytype.toLowerCase().includes("ed25519")) {
+        params.algorithm = { name: "Ed25519" };
+    }
+    else if (keytype.toLowerCase().includes("rsa") || keytype.toLowerCase().includes("pkcs1")) {
+        let hashName = HashAlgorithms.SHA256;
+        // Normalize scheme to handle various formats: SHA256, SHA_256, SHA-256, etc.
+        const normalizedScheme = scheme.toUpperCase().replace(/[-_]/g, "");
+        if (normalizedScheme.includes("SHA256") || normalizedScheme.includes("256")) {
+            hashName = HashAlgorithms.SHA256;
+        }
+        else if (normalizedScheme.includes("SHA384") || normalizedScheme.includes("384")) {
+            hashName = HashAlgorithms.SHA384;
+        }
+        else if (normalizedScheme.includes("SHA512") || normalizedScheme.includes("512")) {
+            hashName = HashAlgorithms.SHA512;
+        }
+        if (scheme.includes("PKCS1") || scheme.includes("RSA_PKCS1")) {
+            params.algorithm = {
+                name: "RSASSA-PKCS1-v1_5",
+                hash: { name: hashName },
+            };
+        }
+        else {
+            params.algorithm = {
+                name: "RSA-PSS",
+                hash: { name: hashName },
+            };
+        }
+    }
+    else {
+        throw new Error(`Unsupported ${keytype}`);
+    }
+    return await crypto.subtle.importKey(params.format, params.keyData, params.algorithm, params.extractable, params.usage);
+}
+export async function verifySignature(key, signed, sig, hash = "sha256") {
+    const options = {
+        name: key.algorithm.name,
+    };
+    if (key.algorithm.name === KeyTypes.Ecdsa) {
+        const namedCurve = key.algorithm.namedCurve;
+        let sig_size = 32;
+        if (namedCurve === EcdsaTypes.P256) {
+            sig_size = 32;
+        }
+        else if (namedCurve === EcdsaTypes.P384) {
+            sig_size = 48;
+        }
+        else if (namedCurve === EcdsaTypes.P521) {
+            sig_size = 66;
+        }
+        options.hash = { name: "" };
+        if (hash.includes("256")) {
+            options.hash.name = HashAlgorithms.SHA256;
+        }
+        else if (hash.includes("384")) {
+            options.hash.name = HashAlgorithms.SHA384;
+        }
+        else if (hash.includes("512")) {
+            options.hash.name = HashAlgorithms.SHA512;
+        }
+        else {
+            throw new Error("Cannot determine hashing algorithm;");
+        }
+        let raw_signature;
+        try {
+            const asn1_sig = ASN1Obj.parseBuffer(sig);
+            const r = asn1_sig.subs[0].toInteger();
+            const s = asn1_sig.subs[1].toInteger();
+            const binr = hexToUint8Array(r.toString(16).padStart(sig_size * 2, "0"));
+            const bins = hexToUint8Array(s.toString(16).padStart(sig_size * 2, "0"));
+            raw_signature = new Uint8Array(binr.length + bins.length);
+            raw_signature.set(binr, 0);
+            raw_signature.set(bins, binr.length);
+        }
+        catch {
+            return false;
+        }
+        return await crypto.subtle.verify(options, key, toArrayBuffer(raw_signature), toArrayBuffer(signed));
+    }
+    else if (key.algorithm.name === KeyTypes.Ed25519) {
+        // Ed25519 uses raw signatures (not DER-encoded like ECDSA)
+        // Fulcio supports Ed25519, ECDSA, and RSA_PSS for signing certificates
+        // Ed25519 is also used for checkpoint signatures in TLog configurations
+        return await crypto.subtle.verify(key.algorithm.name, key, toArrayBuffer(sig), toArrayBuffer(signed));
+    }
+    else if (key.algorithm.name === "RSA-PSS") {
+        // Salt length must match the hash output size
+        const hashAlg = key.algorithm.hash.name;
+        const saltLength = hashAlg === HashAlgorithms.SHA256 ? 32 :
+            hashAlg === HashAlgorithms.SHA384 ? 48 :
+                hashAlg === HashAlgorithms.SHA512 ? 64 : 32;
+        return await crypto.subtle.verify({
+            name: "RSA-PSS",
+            saltLength: saltLength,
+        }, key, toArrayBuffer(sig), toArrayBuffer(signed));
+    }
+    else if (key.algorithm.name === "RSASSA-PKCS1-v1_5") {
+        return await crypto.subtle.verify(key.algorithm.name, key, toArrayBuffer(sig), toArrayBuffer(signed));
+    }
+    else {
+        throw new Error("Unsupported key type!");
+    }
+}
+// Verifies an ECDSA signature over a pre-computed digest.
+// WebCrypto's verify() always hashes the input first, so passing a digest would
+// result in double-hashing. We use @noble/curves for low-level ECDSA verification,
+// adapted from the same workaround used in sigstore-js's conformance CLI.
+// See: https://github.com/sigstore/sigstore-js/blob/main/packages/conformance/src/commands/verify-bundle.ts#L111
+export async function verifySignatureOverDigest(key, digest, sig) {
+    if (key.algorithm.name !== KeyTypes.Ecdsa) {
+        throw new Error("verifySignatureOverDigest only supports ECDSA keys");
+    }
+    const namedCurve = key.algorithm.namedCurve;
+    let curve;
+    if (namedCurve === EcdsaTypes.P256) {
+        curve = p256;
+    }
+    else if (namedCurve === EcdsaTypes.P384) {
+        curve = p384;
+    }
+    else if (namedCurve === EcdsaTypes.P521) {
+        curve = p521;
+    }
+    else {
+        throw new Error(`Unsupported curve: ${namedCurve}`);
+    }
+    // Export the public key to get x and y coordinates
+    const jwk = await crypto.subtle.exportKey("jwk", key);
+    if (!jwk.x || !jwk.y) {
+        throw new Error("Invalid ECDSA public key: missing x or y coordinates");
+    }
+    // Convert base64url JWK coordinates to bytes
+    const x = base64UrlToUint8Array(jwk.x);
+    const y = base64UrlToUint8Array(jwk.y);
+    // Combine x and y into uncompressed public key format (0x04 || x || y)
+    const publicKey = new Uint8Array(1 + x.length + y.length);
+    publicKey[0] = 0x04;
+    publicKey.set(x, 1);
+    publicKey.set(y, 1 + x.length);
+    // Verify the DER-encoded signature over the digest
+    // @noble/curves can parse DER signatures directly with format: 'der'
+    // Options:
+    // - format: 'der' to parse DER-encoded signatures
+    // - prehash: false because we're passing a pre-computed digest, not the original message
+    // - lowS: false to accept both high-S and low-S signatures (matches elliptic.js behavior)
+    //   elliptic.js accepts malleable signatures by default, while @noble/curves rejects them by default
+    return curve.verify(sig, digest, publicKey, { format: 'der', prehash: false, lowS: false });
+}
+export { uint8ArrayEqual as bufferEqual } from "./encoding.js";
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,aAAa,GAEd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAEzD,SAAS,WAAW,CAAC,UAAsB;IACzC,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC;QACzC,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAChE,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,eAAe,CAAC;IAElH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,WAAW,CAAC,kBAAkB,CAAC,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC;IAC/F,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACxB,MAAM,gBAAgB,GAAG,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC;IAElC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC;IAErC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACxB,MAAM,oBAAoB,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC;IACtC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,6BAA6B;AAC7B,qDAAqD;AACrD,qEAAqE;AACrE,qFAAqF;AACrF,iEAAiE;AACjE,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,IAAI,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACxB,OAAO,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,4FAA4F;AAC5F,EAAE;AACF,0BAA0B;AAC1B,mGAAmG;AACnG,yGAAyG;AACzG,sCAAsC;AACtC,6DAA6D;AAC7D,kFAAkF;AAClF,6EAA6E;AAC7E,EAAE;AACF,YAAY;AACZ,0DAA0D;AAC1D,sDAAsD;AACtD,uEAAuE;AACvE,EAAE;AACF,wBAAwB;AACxB,sDAAsD;AACtD,8CAA8C;AAC9C,8DAA8D;AAC9D,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,MAAc,EACd,GAAW;IAEX,MAAM,YAAY;QAChB,MAAM,GAAmB,MAAM,CAAC;QAChC,OAAO,GAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1C,SAAS,GAA0D,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrF,WAAW,GAAY,IAAI,CAAC;QAC5B,KAAK,GAAoB,CAAC,QAAQ,CAAC,CAAC;KACrC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;YAC5C,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,IAAI,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,6EAA6E;QAC7E,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACnC,CAAC;aAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACnC,CAAC;aAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACnC,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,SAAS,GAAG;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,GAAG;gBACjB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAClC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,KAAK,CACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,MAAkB,EAClB,GAAe,EACf,OAAe,QAAQ;IAEvB,MAAM,OAAO,GAKT;QACF,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;KACzB,CAAC;IAEF,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAI,GAAG,CAAC,SAA4B,CAAC,UAAU,CAAC;QAChE,IAAI,QAAQ,GAAG,EAAE,CAAC;QAElB,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YACnC,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YAC1C,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YAC1C,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;QAC5C,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;QAC5C,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,aAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACzE,aAAa,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3B,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,OAAO,EACP,GAAG,EACH,aAAa,CAAC,aAAa,CAAC,EAC5B,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnD,2DAA2D;QAC3D,uEAAuE;QACvE,wEAAwE;QACxE,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,EAClB,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,EAClB,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,8CAA8C;QAC9C,MAAM,OAAO,GAAI,GAAG,CAAC,SAAmC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,MAAM,UAAU,GAAG,OAAO,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxC,OAAO,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B;YACE,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,UAAU;SACvB,EACD,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,EAClB,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtD,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,EAClB,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,EAClB,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,gFAAgF;AAChF,mFAAmF;AACnF,0EAA0E;AAC1E,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAc,EACd,MAAkB,EAClB,GAAe;IAEf,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAAI,GAAG,CAAC,SAA4B,CAAC,UAAU,CAAC;IAChE,IAAI,KAA8C,CAAC;IAEnD,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,mDAAmD;IACnD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,6CAA6C;IAC7C,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAEvC,uEAAuE;IACvE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1D,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpB,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAE/B,mDAAmD;IACnD,qEAAqE;IACrE,WAAW;IACX,kDAAkD;IAClD,yFAAyF;IACzF,0FAA0F;IAC1F,qGAAqG;IACrG,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,OAAO,EAAE,eAAe,IAAI,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/dist/dsse.d.ts

@@ -0,0 +1,2 @@
+export declare function preAuthEncoding(payloadType: string, payload: Uint8Array): Uint8Array;
+//# sourceMappingURL=dsse.d.ts.map

package/dist/dsse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsse.d.ts","sourceRoot":"","sources":["../src/dsse.ts"],"names":[],"mappings":"AAkBA,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,UAAU,GAClB,UAAU,CA2BZ"}

package/dist/dsse.js

@@ -0,0 +1,42 @@
+/*
+Copyright 2023 The Sigstore Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+const PAE_PREFIX = "DSSEv1";
+// DSSE Pre-Authentication Encoding
+export function preAuthEncoding(payloadType, payload) {
+    const prefix = [
+        PAE_PREFIX,
+        payloadType.length,
+        payloadType,
+        payload.length,
+        "",
+    ].join(" ");
+    // DSSE spec requires ASCII encoding for the prefix
+    // TextEncoder will throw if the string contains non-ASCII characters
+    const encoder = new TextEncoder();
+    const prefixBuffer = encoder.encode(prefix);
+    // Verify all characters are ASCII (< 128)
+    for (let i = 0; i < prefixBuffer.length; i++) {
+        if (prefixBuffer[i] > 127) {
+            throw new Error(`Invalid non-ASCII character in PAE prefix at position ${i}`);
+        }
+    }
+    // Concatenate prefix and payload
+    const combinedArray = new Uint8Array(prefixBuffer.length + payload.length);
+    combinedArray.set(prefixBuffer, 0);
+    combinedArray.set(payload, prefixBuffer.length);
+    return combinedArray;
+}
+//# sourceMappingURL=dsse.js.map

package/dist/dsse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsse.js","sourceRoot":"","sources":["../src/dsse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AACF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B,mCAAmC;AACnC,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,OAAmB;IAEnB,MAAM,MAAM,GAAG;QACb,UAAU;QACV,WAAW,CAAC,MAAM;QAClB,WAAW;QACX,OAAO,CAAC,MAAM;QACd,EAAE;KACH,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEZ,mDAAmD;IACnD,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE5C,0CAA0C;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3E,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACnC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/encoding.d.ts

@@ -0,0 +1,17 @@
+export declare function toArrayBuffer(view: ArrayBufferView): ArrayBuffer;
+export declare function base64ToUint8Array(base64: string): Uint8Array;
+export declare function base64UrlToUint8Array(base64url: string): Uint8Array;
+export declare function Uint8ArrayToBase64(uint8Array: Uint8Array): string;
+export declare function hexToUint8Array(hex: string): Uint8Array;
+export declare function Uint8ArrayToHex(uint8Array: Uint8Array): string;
+export declare function stringToUint8Array(str: string): Uint8Array;
+export declare function Uint8ArrayToString(uint8Array: Uint8Array): string;
+export declare function readBigInt64BE(uint8Array: Uint8Array, offset?: number): bigint;
+export declare function base64Encode(str: string): string;
+export declare function base64Decode(str: string): string;
+/**
+ * Constant-time equality comparison for Uint8Arrays
+ * Prevents timing attacks by always comparing all bytes
+ */
+export declare function uint8ArrayEqual(a: Uint8Array, b: Uint8Array): boolean;
+//# sourceMappingURL=encoding.d.ts.map

package/dist/encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAeA,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAoBhE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAU7D;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAMnE;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAQjE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAavD;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAY9D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAI1D;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAGjE;AAED,wBAAgB,cAAc,CAC5B,UAAU,EAAE,UAAU,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAMR;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAUrE"}

package/dist/encoding.js

@@ -0,0 +1,112 @@
+/*
+Copyright 2023 The Sigstore Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+export function toArrayBuffer(view) {
+    const { byteLength } = view;
+    if (byteLength === 0) {
+        return new ArrayBuffer(0);
+    }
+    const { buffer, byteOffset } = view;
+    if (buffer instanceof ArrayBuffer &&
+        byteOffset === 0 &&
+        byteLength === buffer.byteLength) {
+        return buffer;
+    }
+    const clone = new Uint8Array(byteLength);
+    clone.set(new Uint8Array(buffer, byteOffset, byteLength));
+    return clone.buffer;
+}
+export function base64ToUint8Array(base64) {
+    const binaryString = atob(base64);
+    const length = binaryString.length;
+    const bytes = new Uint8Array(length);
+    for (let i = 0; i < length; i++) {
+        bytes[i] = binaryString.charCodeAt(i);
+    }
+    return bytes;
+}
+export function base64UrlToUint8Array(base64url) {
+    let base64 = base64url.replace(/-/g, '+').replace(/_/g, '/');
+    while (base64.length % 4 !== 0) {
+        base64 += '=';
+    }
+    return base64ToUint8Array(base64);
+}
+export function Uint8ArrayToBase64(uint8Array) {
+    let binaryString = "";
+    for (let i = 0; i < uint8Array.length; i++) {
+        binaryString += String.fromCharCode(uint8Array[i]);
+    }
+    return btoa(binaryString);
+}
+export function hexToUint8Array(hex) {
+    if (hex.length % 2 !== 0) {
+        throw new Error("Hex string must have an even length");
+    }
+    const length = hex.length / 2;
+    const uint8Array = new Uint8Array(length);
+    for (let i = 0; i < length; i++) {
+        uint8Array[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return uint8Array;
+}
+export function Uint8ArrayToHex(uint8Array) {
+    let hexString = "";
+    for (let i = 0; i < uint8Array.length; i++) {
+        let hex = uint8Array[i].toString(16);
+        if (hex.length === 1) {
+            hex = "0" + hex;
+        }
+        hexString += hex;
+    }
+    return hexString;
+}
+export function stringToUint8Array(str) {
+    // Defaults to utf-8, but utf-8 is ascii compatible
+    const encoder = new TextEncoder();
+    return encoder.encode(str);
+}
+export function Uint8ArrayToString(uint8Array) {
+    const decoder = new TextDecoder("utf-8");
+    return decoder.decode(uint8Array);
+}
+export function readBigInt64BE(uint8Array, offset) {
+    if (offset === undefined) {
+        offset = 0;
+    }
+    const hex = Uint8ArrayToHex(uint8Array.slice(offset, offset + 8));
+    return BigInt(`0x${hex}`);
+}
+export function base64Encode(str) {
+    return Uint8ArrayToBase64(stringToUint8Array(str));
+}
+export function base64Decode(str) {
+    return Uint8ArrayToString(base64ToUint8Array(str));
+}
+/**
+ * Constant-time equality comparison for Uint8Arrays
+ * Prevents timing attacks by always comparing all bytes
+ */
+export function uint8ArrayEqual(a, b) {
+    if (a.byteLength !== b.byteLength) {
+        return false;
+    }
+    let result = 0;
+    for (let i = 0; i < a.byteLength; i++) {
+        result |= a[i] ^ b[i];
+    }
+    return result === 0;
+}
+//# sourceMappingURL=encoding.js.map

package/dist/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AACF,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAEpC,IACE,MAAM,YAAY,WAAW;QAC7B,UAAU,KAAK,CAAC;QAChB,UAAU,KAAK,MAAM,CAAC,UAAU,EAChC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,KAAK,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAsB;IACpD,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAClB,CAAC;QACD,SAAS,IAAI,GAAG,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,mDAAmD;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,UAAsB,EACtB,MAAe;IAEf,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAa,EAAE,CAAa;IAC1D,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Base class for all verification errors
+ * Provides structured error handling with error codes
+ */
+export declare class VerificationError extends Error {
+    code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Error thrown when timestamp verification fails
+ */
+export declare class TimestampError extends VerificationError {
+    constructor(message: string);
+}
+/**
+ * Error thrown when certificate verification fails
+ */
+export declare class CertificateError extends VerificationError {
+    constructor(message: string);
+}
+/**
+ * Error thrown when transparency log verification fails
+ */
+export declare class TLogError extends VerificationError {
+    constructor(message: string);
+}
+/**
+ * Error thrown when signature verification fails
+ */
+export declare class SignatureError extends VerificationError {
+    constructor(message: string);
+}
+/**
+ * Error thrown when policy verification fails
+ */
+export declare class PolicyError extends VerificationError {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAgBA;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IACvB,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKjD;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,iBAAiB;gBACvC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB;gBACzC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,iBAAiB;gBAClC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,iBAAiB;gBACvC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,iBAAiB;gBACpC,OAAO,EAAE,MAAM;CAK5B"}

package/dist/errors.js

@@ -0,0 +1,79 @@
+/*
+Copyright 2023 The Sigstore Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+/**
+ * Base class for all verification errors
+ * Provides structured error handling with error codes
+ */
+export class VerificationError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'VerificationError';
+        Object.setPrototypeOf(this, VerificationError.prototype);
+    }
+}
+/**
+ * Error thrown when timestamp verification fails
+ */
+export class TimestampError extends VerificationError {
+    constructor(message) {
+        super('TIMESTAMP_ERROR', message);
+        this.name = 'TimestampError';
+        Object.setPrototypeOf(this, TimestampError.prototype);
+    }
+}
+/**
+ * Error thrown when certificate verification fails
+ */
+export class CertificateError extends VerificationError {
+    constructor(message) {
+        super('CERTIFICATE_ERROR', message);
+        this.name = 'CertificateError';
+        Object.setPrototypeOf(this, CertificateError.prototype);
+    }
+}
+/**
+ * Error thrown when transparency log verification fails
+ */
+export class TLogError extends VerificationError {
+    constructor(message) {
+        super('TLOG_ERROR', message);
+        this.name = 'TLogError';
+        Object.setPrototypeOf(this, TLogError.prototype);
+    }
+}
+/**
+ * Error thrown when signature verification fails
+ */
+export class SignatureError extends VerificationError {
+    constructor(message) {
+        super('SIGNATURE_ERROR', message);
+        this.name = 'SignatureError';
+        Object.setPrototypeOf(this, SignatureError.prototype);
+    }
+}
+/**
+ * Error thrown when policy verification fails
+ */
+export class PolicyError extends VerificationError {
+    constructor(message) {
+        super('POLICY_ERROR', message);
+        this.name = 'PolicyError';
+        Object.setPrototypeOf(this, PolicyError.prototype);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AAEF;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACvB;IAAnB,YAAmB,IAAY,EAAE,OAAe;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QADE,SAAI,GAAJ,IAAI,CAAQ;QAE7B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,iBAAiB;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,iBAAiB;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,iBAAiB;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,iBAAiB;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,iBAAiB;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { SigstoreVerifier } from "./sigstore.js";
+export type { SigstoreVerifierOptions } from "./sigstore.js";
+export type { SigstoreBundle, TLogEntry, VerificationMaterial, MessageSignature, TimestampVerificationData, RFC3161Timestamp } from "./bundle.js";
+export type { TrustedRoot, Sigstore, RawTimestampAuthority } from "./interfaces.js";
+export { VerificationError, TimestampError, CertificateError, TLogError, SignatureError, PolicyError, } from "./errors.js";
+export { verifyRFC3161Timestamp, verifyBundleTimestamp } from "./timestamp/tsa.js";
+export { TrustedRootProvider, type TrustedRootProviderOptions } from "./trust/tuf.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,YAAY,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAClJ,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,KAAK,0BAA0B,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { SigstoreVerifier } from "./sigstore.js";
+export { VerificationError, TimestampError, CertificateError, TLogError, SignatureError, PolicyError, } from "./errors.js";
+export { verifyRFC3161Timestamp, verifyBundleTimestamp } from "./timestamp/tsa.js";
+export { TrustedRootProvider } from "./trust/tuf.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAIjD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAmC,MAAM,gBAAgB,CAAC"}