@interop/ecdsa-multikey 2.0.0

package/CHANGELOG.md

@@ -0,0 +1,146 @@
+# @interop/ecdsa-multikey ChangeLog
+
+## 2.0.0 - 2026-06-07
+
+### Changed
+
+- **BREAKING**: Forked from
+  [`@digitalbazaar/ecdsa-multikey@1.8.0`](https://github.com/digitalbazaar/ecdsa-multikey)
+  and published as `@interop/ecdsa-multikey`. No library behavior or public API
+  changes.
+
+### Added
+
+- Test-only: added known-answer JWK vectors for the existing mock keys
+  (asserting exact `toJwk()` encodings and `fromJwk()` round-trips), imported
+  the Project Wycheproof IEEE P1363 ECDSA verification vectors for
+  P-256/P-384/P-521 to exercise the verifier against externally-produced and
+  malformed signatures, and added negative-path tests covering the library's
+  error branches (invalid curve/multibase/JWK inputs, curve mismatches,
+  unsupported key types and contexts) plus positive-path branch tests for
+  optional inputs (`controller`-derived `id`, `fromJwk` `id`/`controller`,
+  `includeContext`/secret-only export, array `@context`). No library behavior or
+  public API changes.
+
+### Changed
+
+- Replaced the `base58-universal` and `base64url-universal` dependencies with
+  `@scure/base` (via a small `src/baseX.ts` wrapper). No library behavior or
+  public API changes.
+- **Infrastructure only; no library behavior, public API, or return-shape
+  changes.** Migrated the build/test toolchain to the `isomorphic-lib-template`:
+  pnpm (replacing npm), Vite/Vitest for Node tests (replacing Mocha/Chai/c8),
+  Playwright for the browser smoke test (replacing Karma/webpack), ESLint flat
+  config + Prettier 3 (replacing `eslint-config-digitalbazaar`), and a
+  single-entry `tsc` build to `dist/`.
+- Converted the source from JavaScript (`lib/*.js`) to TypeScript (`src/*.ts`).
+  The package now ships compiled output and type declarations from `dist/`, with
+  conditional `exports`. The `node:crypto` vs `globalThis.crypto` browser swap
+  is preserved via the `browser` field.
+- Raised the minimum Node.js version to `>= 24`.
+- The TypeScript build runs under full `strict` mode, including
+  `verbatimModuleSyntax` and `noUncheckedIndexedAccess`.
+
+## 1.8.0 - 2024-10-02
+
+### Added
+
+- Include `id` and `controller` properties when importing key types of
+  `JsonWebKey` or `JsonWebKey2020`.
+
+## 1.7.0 - 2024-03-17
+
+### Added
+
+- Add conversion from `publicKeyJwk` feature via `from()`.
+
+### Changed
+
+- Expect >= node 18 via `package.json`.
+
+### Fixed
+
+- Allow `@context` array values in multikeys.
+
+## 1.6.0 - 2023-11-07
+
+### Added
+
+- Add `fromRaw()` to import a key pair from a named `curve`, `secretKey`, and
+  `publicKey`.
+- Reformat `keyAgreement` param in `from()` to `options` to enable named usage
+  (`{keyAgreement: true|false}`) for better API.
+
+## 1.5.0 - 2023-11-05
+
+### Added
+
+- Rename `remotePublicKey` param to `publicKey` for `deriveSecret()` to get
+  better compatibility with WebKMS Client KeyAgreementKey interface. The param
+  can still be passed as `remotePublicKey` but this is considered deprecated.
+
+## 1.4.0 - 2023-11-05
+
+### Added
+
+- Add `raw` option to key pair `export()`. Based on the requested public/secret
+  key, the output will include the raw bytes for the public/secret key using the
+  properties `publicKey` and/or `secretKey`, respectively. The public key will
+  be output using the compressed format.
+
+## 1.3.0 - 2023-10-31
+
+### Added
+
+- Add `keyAgreement` option to `generate()` to generate ECDH keys instead of
+  ECDSA keys. This module needs a better name than `ecdsa-multikey` as it also
+  supports key agreement keys, but only for keys based on curves that are also
+  compatible with ECDSA. Note that a key should only be used for ECDSA or ECDH
+  (key agreement), not both, so calling this module `ecdsa-multikey` is a bit
+  misleading as you can also generate a key that is to only be used for key
+  agreement.
+- Add `deriveSecret()` API for `keyAgreement` enabled keys.
+
+## 1.2.1 - 2023-10-30
+
+### Fixed
+
+- Do not include `ext` or `key_ops` in output JWK.
+
+## 1.2.0 - 2023-10-30
+
+### Added
+
+- Add `fromJwk()` and `toJwk()` for importing / exporting key pairs using JWK.
+
+## 1.1.3 - 2023-05-19
+
+### Fixed
+
+- Support Node.js 20.x.
+
+## 1.1.2 - 2023-04-14
+
+### Fixed
+
+- Update `.from()` method to not modify key input.
+
+## 1.1.1 - 2023-03-11
+
+### Fixed
+
+- Fix data format alignment issues with ecdsa-2019-cryptosuite.
+- Use constant strings in tests.
+
+## 1.1.0 - 2023-03-06
+
+### Changed
+
+- Ensure public and secret multikey headers match.
+- Change exported algorithm from "ECDSA" to curve name.
+
+## 1.0.0 - 2023-02-27
+
+### Added
+
+- Initial version.

package/LICENSE

@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2023, Digital Bazaar, Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/README.md

@@ -0,0 +1,163 @@
+# EcdsaMultikey Key Pair Library for Linked Data _(@interop/ecdsa-multikey)_
+
+[![CI](https://github.com/interop-alliance/ecdsa-multikey/actions/workflows/ci.yml/badge.svg)](https://github.com/interop-alliance/ecdsa-multikey/actions/workflows/ci.yml)
+[![NPM Version](https://img.shields.io/npm/v/@interop/ecdsa-multikey.svg)](https://npm.im/@interop/ecdsa-multikey)
+
+> TypeScript/JavaScript library for generating and working with EcdsaMultikey
+> key pairs.
+
+## Table of Contents
+
+- [Background](#background)
+- [Security](#security)
+- [Install](#install)
+- [Usage](#usage)
+- [Contribute](#contribute)
+- [Commercial Support](#commercial-support)
+- [License](#license)
+
+## Background
+
+(Forked from
+[`digitalbazaar/ecdsa-multikey`](https://github.com/digitalbazaar/ecdsa-multikey)
+to provide TypeScript compatibility.)
+
+For use with:
+
+- [`@digitalbazaar/ecdsa-2019-cryptosuite`](https://github.com/digitalbazaar/ecdsa-2019-cryptosuite)
+  `^1.0.0` crypto suite (with
+  [`jsonld-signatures`](https://github.com/digitalbazaar/jsonld-signatures)
+  `^11.0.0`)
+- [`@digitalbazaar/data-integrity`](https://github.com/digitalbazaar/data-integrity)
+  `^1.0.0`
+
+See also (related specs):
+
+- [Verifiable Credential Data Integrity](https://w3c.github.io/vc-data-integrity/)
+
+## Security
+
+As with most security- and cryptography-related tools, the overall security of
+your system will largely depend on your design decisions.
+
+## Install
+
+- Node.js 24+ is required.
+- This package is built with [pnpm](https://pnpm.io/).
+
+To install as a dependency:
+
+```
+npm install @interop/ecdsa-multikey
+```
+
+To install locally (for development):
+
+```
+git clone https://github.com/interop-alliance/ecdsa-multikey.git
+cd ecdsa-multikey
+pnpm install
+```
+
+## Usage
+
+### Generating a new public/secret key pair
+
+To generate a new public/secret key pair:
+
+- `{string} [curve]` \[Required\] ECDSA curve used to generate the key:
+  \['P-256', 'P-384', 'P-521'\].
+- `{string} [id]` \[Optional\] ID for the generated key.
+- `{string} [controller]` \[Optional\] Controller URI or DID to initialize the
+  generated key. (This will be used to generate `id` if it is not explicitly
+  defined.)
+
+```js
+import * as EcdsaMultikey from '@interop/ecdsa-multikey'
+
+const keyPair = await EcdsaMultikey.generate({ curve: 'P-384' })
+```
+
+### Importing a key pair from storage
+
+To create an instance of a public/secret key pair from data imported from
+storage, use `.from()`:
+
+```js
+const serializedKeyPair = { ... };
+
+const keyPair = await EcdsaMultikey.from(serializedKeyPair);
+```
+
+### Exporting the public key only
+
+To export just the public key of a pair:
+
+```js
+await keyPair.export({publicKey: true});
+// ->
+{
+  type: 'Multikey',
+  id: 'did:example:1234#zDnaeSMnptAKpH4AD41vTkwzjznW7yNetdRh9FJn8bJsbsdbw',
+  controller: 'did:example:1234',
+  publicKeyMultibase: 'zDnaeSMnptAKpH4AD41vTkwzjznW7yNetdRh9FJn8bJsbsdbw'
+}
+```
+
+### Exporting the full public-secret key pair
+
+To export the full key pair, including secret key (warning: this should be a
+carefully considered operation, best left to dedicated Key Management Systems):
+
+```js
+await keyPair.export({publicKey: true, secretKey: true});
+// ->
+{
+  type: 'Multikey',
+  id: 'did:example:1234#zDnaeSMnptAKpH4AD41vTkwzjznW7yNetdRh9FJn8bJsbsdbw',
+  controller: 'did:example:1234',
+  publicKeyMultibase: 'zDnaeSMnptAKpH4AD41vTkwzjznW7yNetdRh9FJn8bJsbsdbw',
+  secretKeyMultibase: 'z42twirSb1PULt5Sg6gjgNMsdiLycu6fbA83aX1vVb8e3ncP'
+}
+```
+
+### Creating a signer function
+
+In order to perform a cryptographic signature, you need to create a `sign`
+function, and then invoke it.
+
+```js
+const keyPair = EcdsaMultikey.generate({ curve: 'P-256' })
+
+const { sign } = keyPair.signer()
+
+// data is a Uint8Array of bytes
+const data = new TextEncoder().encode('test data goes here')
+// Signing also outputs a Uint8Array, which you can serialize to text etc.
+const signature = await sign({ data })
+```
+
+### Creating a verifier function
+
+In order to verify a cryptographic signature, you need to create a `verify`
+function, and then invoke it (passing it the data to verify, and the signature).
+
+```js
+const keyPair = EcdsaMultikey.generate({ curve: 'P-521' })
+
+const { verify } = keyPair.verifier()
+
+const valid = await verify({ data, signature })
+// true
+```
+
+## Contribute
+
+PRs accepted.
+
+If editing the Readme, please conform to the
+[standard-readme](https://github.com/RichardLitt/standard-readme) specification.
+
+## License
+
+[New BSD License (3-clause)](LICENSE) © 2023 Digital Bazaar

package/dist/baseX.d.ts

@@ -0,0 +1,7 @@
+export declare const base58btc: import("@scure/base").BytesCoder;
+/**
+ * base64url must be RFC 4648 compliant for JWK interop, and JWK uses the
+ * unpadded form, hence `base64urlnopad`.
+ */
+export declare const base64url: import("@scure/base").BytesCoder;
+//# sourceMappingURL=baseX.d.ts.map

package/dist/baseX.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseX.d.ts","sourceRoot":"","sources":["../src/baseX.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS,kCAAS,CAAA;AAE/B;;;GAGG;AACH,eAAO,MAAM,SAAS,kCAAiB,CAAA"}

package/dist/baseX.js

@@ -0,0 +1,11 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+import { base58, base64urlnopad } from '@scure/base';
+export const base58btc = base58;
+/**
+ * base64url must be RFC 4648 compliant for JWK interop, and JWK uses the
+ * unpadded form, hence `base64urlnopad`.
+ */
+export const base64url = base64urlnopad;
+//# sourceMappingURL=baseX.js.map

package/dist/baseX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseX.js","sourceRoot":"","sources":["../src/baseX.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEpD,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAA;AAE/B;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAA"}

package/dist/constants.d.ts

@@ -0,0 +1,29 @@
+/*!
+ * Copyright (c) 2023 Digital Bazaar, Inc. All rights reserved.
+ */
+export declare const ALGORITHM = "ECDSA";
+export declare const EXTRACTABLE = true;
+export declare const ECDSA_2019_SECP_256_KEY_TYPE = "EcdsaSecp256r1VerificationKey2019";
+export declare const ECDSA_2019_SECP_384_KEY_TYPE = "EcdsaSecp384r1VerificationKey2019";
+export declare const ECDSA_2019_SECP_521_KEY_TYPE = "EcdsaSecp521r1VerificationKey2019";
+export declare const ECDSA_2019_SUITE_CONTEXT_V1_URL = "https://w3id.org/security/suites/ecdsa-2019/v1";
+export declare const MULTIKEY_CONTEXT_V1_URL = "https://w3id.org/security/multikey/v1";
+export declare const MULTIBASE_BASE58_HEADER = "z";
+export declare const MULTICODEC_P256_PUBLIC_KEY_HEADER: Uint8Array<ArrayBuffer>;
+export declare const MULTICODEC_P384_PUBLIC_KEY_HEADER: Uint8Array<ArrayBuffer>;
+export declare const MULTICODEC_P521_PUBLIC_KEY_HEADER: Uint8Array<ArrayBuffer>;
+export declare const MULTICODEC_P256_SECRET_KEY_HEADER: Uint8Array<ArrayBuffer>;
+export declare const MULTICODEC_P384_SECRET_KEY_HEADER: Uint8Array<ArrayBuffer>;
+export declare const MULTICODEC_P521_SECRET_KEY_HEADER: Uint8Array<ArrayBuffer>;
+export declare const ECDSA_CURVE: {
+    readonly P256: "P-256";
+    readonly P384: "P-384";
+    readonly P521: "P-521";
+};
+export declare const ECDSA_HASH: {
+    readonly SHA256: "SHA-256";
+    readonly SHA384: "SHA-384";
+    readonly SHA512: "SHA-512";
+};
+export type EcdsaCurve = (typeof ECDSA_CURVE)[keyof typeof ECDSA_CURVE];
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,SAAS,UAAU,CAAA;AAEhC,eAAO,MAAM,WAAW,OAAO,CAAA;AAE/B,eAAO,MAAM,4BAA4B,sCAAsC,CAAA;AAE/E,eAAO,MAAM,4BAA4B,sCAAsC,CAAA;AAE/E,eAAO,MAAM,4BAA4B,sCAAsC,CAAA;AAE/E,eAAO,MAAM,+BAA+B,mDACM,CAAA;AAElD,eAAO,MAAM,uBAAuB,0CAA0C,CAAA;AAC9E,eAAO,MAAM,uBAAuB,MAAM,CAAA;AAG1C,eAAO,MAAM,iCAAiC,yBAA+B,CAAA;AAE7E,eAAO,MAAM,iCAAiC,yBAA+B,CAAA;AAE7E,eAAO,MAAM,iCAAiC,yBAA+B,CAAA;AAG7E,eAAO,MAAM,iCAAiC,yBAA+B,CAAA;AAE7E,eAAO,MAAM,iCAAiC,yBAA+B,CAAA;AAE7E,eAAO,MAAM,iCAAiC,yBAA+B,CAAA;AAG7E,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAGV,eAAO,MAAM,UAAU;;;;CAIb,CAAA;AAGV,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA"}

package/dist/constants.js

@@ -0,0 +1,43 @@
+/*!
+ * Copyright (c) 2023 Digital Bazaar, Inc. All rights reserved.
+ */
+// Name of algorithm
+export const ALGORITHM = 'ECDSA';
+// Determines whether key pair is extractable
+export const EXTRACTABLE = true;
+// ECDSA curve P-256 type
+export const ECDSA_2019_SECP_256_KEY_TYPE = 'EcdsaSecp256r1VerificationKey2019';
+// ECDSA curve P-384 type
+export const ECDSA_2019_SECP_384_KEY_TYPE = 'EcdsaSecp384r1VerificationKey2019';
+// ECDSA curve P-521 type
+export const ECDSA_2019_SECP_521_KEY_TYPE = 'EcdsaSecp521r1VerificationKey2019';
+// ECDSA 2019 suite context v1 URL
+export const ECDSA_2019_SUITE_CONTEXT_V1_URL = 'https://w3id.org/security/suites/ecdsa-2019/v1';
+// Multikey context v1 URL
+export const MULTIKEY_CONTEXT_V1_URL = 'https://w3id.org/security/multikey/v1';
+export const MULTIBASE_BASE58_HEADER = 'z';
+// Multicodec p256-pub header (0x1200 varint -> 0x8024 hex)
+export const MULTICODEC_P256_PUBLIC_KEY_HEADER = new Uint8Array([0x80, 0x24]);
+// Multicodec p384-pub header (0x1201 varint -> 0x8124 hex)
+export const MULTICODEC_P384_PUBLIC_KEY_HEADER = new Uint8Array([0x81, 0x24]);
+// Multicodec p521-pub header (0x1202 varint -> 0x8224 hex)
+export const MULTICODEC_P521_PUBLIC_KEY_HEADER = new Uint8Array([0x82, 0x24]);
+// Multicodec p256-priv header (0x1306 varint -> 0x8626 hex)
+export const MULTICODEC_P256_SECRET_KEY_HEADER = new Uint8Array([0x86, 0x26]);
+// Multicodec p384-priv header (0x1307 varint -> 0x8726 hex)
+export const MULTICODEC_P384_SECRET_KEY_HEADER = new Uint8Array([0x87, 0x26]);
+// Multicodec p521-priv header (0x1308 varint -> 0x8826 hex)
+export const MULTICODEC_P521_SECRET_KEY_HEADER = new Uint8Array([0x88, 0x26]);
+// ECDSA curves
+export const ECDSA_CURVE = {
+    P256: 'P-256',
+    P384: 'P-384',
+    P521: 'P-521'
+};
+// ECDSA hash functions
+export const ECDSA_HASH = {
+    SHA256: 'SHA-256',
+    SHA384: 'SHA-384',
+    SHA512: 'SHA-512'
+};
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,oBAAoB;AACpB,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAA;AAChC,6CAA6C;AAC7C,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAA;AAC/B,yBAAyB;AACzB,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAA;AAC/E,yBAAyB;AACzB,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAA;AAC/E,yBAAyB;AACzB,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAA;AAC/E,kCAAkC;AAClC,MAAM,CAAC,MAAM,+BAA+B,GAC1C,gDAAgD,CAAA;AAClD,0BAA0B;AAC1B,MAAM,CAAC,MAAM,uBAAuB,GAAG,uCAAuC,CAAA;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAA;AAE1C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAE7E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAE7E,eAAe;AACf,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;CACL,CAAA;AAEV,uBAAuB;AACvB,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;CACT,CAAA"}

package/dist/crypto-browser.d.ts

@@ -0,0 +1,9 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+export declare const webcrypto: Crypto;
+export declare const CryptoKey: {
+    new (): CryptoKey;
+    prototype: CryptoKey;
+};
+//# sourceMappingURL=crypto-browser.d.ts.map

package/dist/crypto-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-browser.d.ts","sourceRoot":"","sources":["../src/crypto-browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,SAAS,QAAoB,CAAA;AAC1C,eAAO,MAAM,SAAS;;;CAE0D,CAAA"}

package/dist/crypto-browser.js

@@ -0,0 +1,7 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+export const webcrypto = globalThis.crypto;
+export const CryptoKey = globalThis.CryptoKey ??
+    webcrypto.CryptoKey;
+//# sourceMappingURL=crypto-browser.js.map

package/dist/crypto-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-browser.js","sourceRoot":"","sources":["../src/crypto-browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAA;AAC1C,MAAM,CAAC,MAAM,SAAS,GACpB,UAAU,CAAC,SAAS;IACnB,SAAmE,CAAC,SAAS,CAAA"}

package/dist/crypto.d.ts

@@ -0,0 +1,7 @@
+declare const webcrypto: Crypto;
+declare const CryptoKey: {
+    new (): CryptoKey;
+    prototype: CryptoKey;
+};
+export { CryptoKey, webcrypto };
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,SAAS,EAA+B,MAAM,CAAA;AACpD,QAAA,MAAM,SAAS;;;CAGD,CAAA;AAEd,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA"}

package/dist/crypto.js

@@ -0,0 +1,12 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import { webcrypto as nodeWebcrypto } from 'node:crypto';
+// Use the standard (DOM) WebCrypto types so the API surface is identical in
+// Node.js and the browser; the runtime implementation comes from `node:crypto`.
+const webcrypto = nodeWebcrypto;
+const CryptoKey = globalThis.CryptoKey ??
+    nodeWebcrypto
+        .CryptoKey;
+export { CryptoKey, webcrypto };
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,aAAa,CAAA;AAExD,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,SAAS,GAAG,aAAkC,CAAA;AACpD,MAAM,SAAS,GACb,UAAU,CAAC,SAAS;IACnB,aAAuE;SACrE,SAAS,CAAA;AAEd,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA"}

package/dist/factory.d.ts

@@ -0,0 +1,10 @@
+import type { Signer, Verifier, WebCryptoKey } from './types.js';
+export declare function createSigner({ id, secretKey }: {
+    id?: string;
+    secretKey?: WebCryptoKey;
+}): Signer;
+export declare function createVerifier({ id, publicKey }: {
+    id?: string;
+    publicKey?: WebCryptoKey;
+}): Verifier;
+//# sourceMappingURL=factory.d.ts.map

package/dist/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAGhE,wBAAgB,YAAY,CAAC,EAC3B,EAAE,EACF,SAAS,EACV,EAAE;IACD,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,YAAY,CAAA;CACzB,GAAG,MAAM,CAkBT;AAGD,wBAAgB,cAAc,CAAC,EAC7B,EAAE,EACF,SAAS,EACV,EAAE;IACD,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,YAAY,CAAA;CACzB,GAAG,QAAQ,CA2BX"}

package/dist/factory.js

@@ -0,0 +1,55 @@
+/*!
+ * Copyright (c) 2022-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import { ALGORITHM, ECDSA_CURVE, ECDSA_HASH } from './constants.js';
+import { webcrypto } from './crypto.js';
+// exposes sign method
+export function createSigner({ id, secretKey }) {
+    if (!secretKey) {
+        throw new Error('"secretKey" is required for signing.');
+    }
+    const { namedCurve: curve } = secretKey.algorithm;
+    const algorithm = {
+        name: ALGORITHM,
+        hash: { name: _getEcdsaHash({ curve }) }
+    };
+    return {
+        algorithm: curve,
+        id,
+        async sign({ data }) {
+            return new Uint8Array(await webcrypto.subtle.sign(algorithm, secretKey, data));
+        }
+    };
+}
+// exposes verify method
+export function createVerifier({ id, publicKey }) {
+    if (!publicKey) {
+        throw new Error('"publicKey" is required for verifying.');
+    }
+    const { namedCurve: curve } = publicKey.algorithm;
+    const algorithm = {
+        name: ALGORITHM,
+        hash: { name: _getEcdsaHash({ curve }) }
+    };
+    return {
+        algorithm: curve,
+        id,
+        async verify({ data, signature }) {
+            return webcrypto.subtle.verify(algorithm, publicKey, signature, data);
+        }
+    };
+}
+// retrieves name of appropriate ECDSA hash function
+function _getEcdsaHash({ curve }) {
+    if (curve === ECDSA_CURVE.P256) {
+        return ECDSA_HASH.SHA256;
+    }
+    if (curve === ECDSA_CURVE.P384) {
+        return ECDSA_HASH.SHA384;
+    }
+    if (curve === ECDSA_CURVE.P521) {
+        return ECDSA_HASH.SHA512;
+    }
+    throw new TypeError(`Unsupported curve "${curve}".`);
+}
+//# sourceMappingURL=factory.js.map

package/dist/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAGvC,sBAAsB;AACtB,MAAM,UAAU,YAAY,CAAC,EAC3B,EAAE,EACF,SAAS,EAIV;IACC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,SAA2B,CAAA;IACnE,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;KACzC,CAAA;IACD,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,EAAE;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAwB;YACvC,OAAO,IAAI,UAAU,CACnB,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAoB,CAAC,CACxE,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,cAAc,CAAC,EAC7B,EAAE,EACF,SAAS,EAIV;IACC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,SAA2B,CAAA;IACnE,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;KACzC,CAAA;IACD,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,EAAE;QACF,KAAK,CAAC,MAAM,CAAC,EACX,IAAI,EACJ,SAAS,EAIV;YACC,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,CAC5B,SAAS,EACT,SAAS,EACT,SAAyB,EACzB,IAAoB,CACrB,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,oDAAoD;AACpD,SAAS,aAAa,CAAC,EAAE,KAAK,EAAqB;IACjD,IAAI,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC,MAAM,CAAA;IAC1B,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC,MAAM,CAAA;IAC1B,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC,MAAM,CAAA;IAC1B,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAA;AACtD,CAAC"}

package/dist/helpers.d.ts

@@ -0,0 +1,18 @@
+export declare function getNamedCurveFromPublicMultikey({ publicMultikey }: {
+    publicMultikey: Uint8Array;
+}): string;
+export declare function getNamedCurveFromSecretMultikey({ secretMultikey }: {
+    secretMultikey: Uint8Array;
+}): string;
+export declare function getSecretKeySize({ curve }: {
+    curve: string;
+}): number;
+export declare function setSecretKeyHeader({ curve, buffer }: {
+    curve: string;
+    buffer: Uint8Array;
+}): void;
+export declare function setPublicKeyHeader({ curve, buffer }: {
+    curve: string;
+    buffer: Uint8Array;
+}): void;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":"AAcA,wBAAgB,+BAA+B,CAAC,EAC9C,cAAc,EACf,EAAE;IACD,cAAc,EAAE,UAAU,CAAA;CAC3B,GAAG,MAAM,CAqBT;AAGD,wBAAgB,+BAA+B,CAAC,EAC9C,cAAc,EACf,EAAE;IACD,cAAc,EAAE,UAAU,CAAA;CAC3B,GAAG,MAAM,CAqBT;AAGD,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAWrE;AAGD,wBAAgB,kBAAkB,CAAC,EACjC,KAAK,EACL,MAAM,EACP,EAAE;IACD,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,UAAU,CAAA;CACnB,GAAG,IAAI,CAUP;AAGD,wBAAgB,kBAAkB,CAAC,EACjC,KAAK,EACL,MAAM,EACP,EAAE;IACD,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,UAAU,CAAA;CACnB,GAAG,IAAI,CAUP"}