@freedomofpress/sigstore-browser 0.1.14 → 0.1.16

package/src/x509/sct.ts

@@ -1,156 +0,0 @@
-/*
-Copyright 2023 The Sigstore Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-import { ByteStream, readBigInt64BE, verifySignature } from "@freedomofpress/crypto-browser";
-
-interface SCTOptions {
-  version: number;
-  logID: Uint8Array;
-  timestamp: Uint8Array;
-  extensions: Uint8Array;
-  hashAlgorithm: number;
-  signatureAlgorithm: number;
-  signature: Uint8Array;
-}
-
-export class SignedCertificateTimestamp {
-  readonly version: number;
-  readonly logID: Uint8Array;
-  readonly timestamp: Uint8Array;
-  readonly extensions: Uint8Array;
-  readonly hashAlgorithm: number;
-  readonly signatureAlgorithm: number;
-  readonly signature: Uint8Array;
-
-  constructor(options: SCTOptions) {
-    this.version = options.version;
-    this.logID = options.logID;
-    this.timestamp = options.timestamp;
-    this.extensions = options.extensions;
-    this.hashAlgorithm = options.hashAlgorithm;
-    this.signatureAlgorithm = options.signatureAlgorithm;
-    this.signature = options.signature;
-  }
-
-  get datetime(): Date {
-    return new Date(Number(readBigInt64BE(this.timestamp)));
-  }
-
-  // Returns the hash algorithm used to generate the SCT's signature.
-  // https://www.rfc-editor.org/rfc/rfc5246#section-7.4.1.4.1
-  get algorithm(): string {
-    switch (this.hashAlgorithm) {
-      /* istanbul ignore next */
-      case 0:
-        return "none";
-      /* istanbul ignore next */
-      case 1:
-        return "md5";
-      /* istanbul ignore next */
-      case 2:
-        return "sha1";
-      /* istanbul ignore next */
-      case 3:
-        return "sha224";
-      case 4:
-        return "sha256";
-      /* istanbul ignore next */
-      case 5:
-        return "sha384";
-      /* istanbul ignore next */
-      case 6:
-        return "sha512";
-      /* istanbul ignore next */
-      default:
-        return "unknown";
-    }
-  }
-
-  public async verify(preCert: Uint8Array, key: CryptoKey): Promise<boolean> {
-    // Assemble the digitally-signed struct (the data over which the signature
-    // was generated).
-    // https://www.rfc-editor.org/rfc/rfc6962#section-3.2
-    const stream = new ByteStream();
-    stream.appendChar(this.version);
-    stream.appendChar(0x00); // SignatureType = certificate_timestamp(0)
-    stream.appendView(this.timestamp);
-    stream.appendUint16(0x01); // LogEntryType = precert_entry(1)
-    stream.appendView(preCert);
-    stream.appendUint16(this.extensions.byteLength);
-
-    /* istanbul ignore next - extensions are very uncommon */
-    if (this.extensions.byteLength > 0) {
-      stream.appendView(this.extensions);
-    }
-
-    return await verifySignature(
-      key,
-      stream.buffer,
-      this.signature,
-      this.algorithm,
-    );
-  }
-
-  // Parses a SignedCertificateTimestamp from a buffer. SCTs are encoded using
-  // TLS encoding which means the fields and lengths of most fields are
-  // specified as part of the SCT and TLS specs.
-  // https://www.rfc-editor.org/rfc/rfc6962#section-3.2
-  // https://www.rfc-editor.org/rfc/rfc5246#section-7.4.1.4.1
-  public static parse(buf: Uint8Array): SignedCertificateTimestamp {
-    const stream = new ByteStream(buf);
-
-    // Version - enum { v1(0), (255) }
-    // RFC 6962 specifies only v1(0) is valid (for now)
-    const version = stream.getUint8();
-    if (version !== 0) {
-      throw new Error(`Unsupported SCT version: ${version} (expected 0 for v1)`);
-    }
-
-    // Log ID  - struct { opaque key_id[32]; }
-    const logID = stream.getBlock(32);
-
-    // Timestamp - uint64
-    const timestamp = stream.getBlock(8);
-
-    // Extensions - opaque extensions<0..2^16-1>;
-    const extenstionLength = stream.getUint16();
-    const extensions = stream.getBlock(extenstionLength);
-
-    // Hash algo - enum { sha256(4), . . . (255) }
-    const hashAlgorithm = stream.getUint8();
-
-    // Signature algo - enum { anonymous(0), rsa(1), dsa(2), ecdsa(3), (255) }
-    const signatureAlgorithm = stream.getUint8();
-
-    // Signature  - opaque signature<0..2^16-1>;
-    const sigLength = stream.getUint16();
-    const signature = stream.getBlock(sigLength);
-
-    // Check that we read the entire buffer
-    if (stream.position !== buf.length) {
-      throw new Error("SCT buffer length mismatch");
-    }
-
-    return new SignedCertificateTimestamp({
-      version,
-      logID,
-      timestamp,
-      extensions,
-      hashAlgorithm,
-      signatureAlgorithm,
-      signature,
-    });
-  }
-}

package/tsconfig.json

@@ -1,18 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2020",
-    "lib": ["DOM", "ES2020"],
-    "module": "ESNext",
-    "sourceMap": true,
-    "moduleResolution": "node",
-    "resolveJsonModule": true,
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "outDir": "./dist",
-    "declaration": true,
-    "declarationMap": true
-  },
-  "include": ["./src/**/*.ts"],
-  "exclude": ["node_modules", "**/*.test.ts"]
-}

package/vite.config.playwright.ts

@@ -1,14 +0,0 @@
-/// <reference types="vitest" />
-import { defineConfig } from "vite";
-
-export default defineConfig({
-  test: {
-    include: ["**/*.browser.test.ts"],
-    browser: {
-      enabled: true,
-      provider: "playwright",
-      headless: true,
-      instances: [{ browser: "chromium" }],
-    },
-  },
-});

package/vite.config.ts

@@ -1,18 +0,0 @@
-/// <reference types="vitest" />
-import { defineConfig } from "vite";
-
-export default defineConfig({
-  build: {
-    outDir: "dist",
-    target: "es2020",
-    lib: {
-      entry: "src/index.ts",
-      formats: ["es"],
-      fileName: "index",
-    },
-  },
-  test: {
-    globals: true,
-    environment: "node",
-  },
-});