@kindgi/crypto 0.1.4 → 0.1.5-rc.0

package/README.md

@@ -105,6 +105,30 @@ if (priv === null) throw new Error('key not provisioned');
 
 `createInMemorySigningKeyBinding` is for tests and local development. Production deployments implement the interface against their own key store (a cloud KMS, a secrets vault, an HSM). This package never persists key material.
 
+## ExportSigningBinding
+
+The key a deployment signs its exports with (audit bundles, provenance, compliance evidence). It's async, so a KMS that never hands out its private key can implement it, as well as a key file can:
+
+```ts
+import { createExportSignerFromPem } from '@kindgi/crypto';
+
+// An Ed25519 key signs `ed25519`; an EC P-256 key signs `ecdsa-p256-sha256`.
+const made = createExportSignerFromPem(await readFile(keyPath, 'utf8'));
+if (made.kind === 'err') throw new Error(made.error.message);
+const signer = made.value;
+
+signer.activeKey(); // { keyId: 'ex_…', algorithm: 'ed25519', publicKeyPem, fingerprint: 'sha256:…' }
+const signed = await signer.sign(bytes); // the active key, or { keyId }
+```
+
+- **Key ids are derived from the public key** (`exportSigningKey`), so the same key keeps its id.
+- **`listKeys()`** is every key a verifier should trust, active first.
+- **`exportSignerFromSigningKeyBinding`** adapts a `SigningKeyBinding`'s Ed25519 keys.
+- **Two algorithms, chosen per key:** `ed25519` (the default) and `ecdsa-p256-sha256`, for a KMS without Ed25519. An ECDSA signature is IEEE P1363 `r‖s`, 64 bytes. A KMS binding that gets DER back (Cloud KMS, AWS KMS) converts with `ecdsaDerToP1363`.
+- **Test vectors** for both are in `@kindgi/specs` (`test-vectors/signed-export/`).
+
+`@kindgi/api` takes one as `createApp({ exportSigning })`. To verify an export, use `verifySignedExport` from `@kindgi/client` (Web Crypto, so it runs in a browser too).
+
 ## Security notes
 
 - **Never log private keys or shared secrets.** Journals, provenance blobs, structured logs, and wire payloads must not contain key material except by explicit caller intent.

package/dist/export-signing.d.ts

@@ -0,0 +1,91 @@
+import type { Result } from '@kindgi/types';
+import type { SigningKeyBinding } from './binding.js';
+import type { CryptoError } from './errors.js';
+/** The algorithms an export can be signed with. */
+export declare const EXPORT_SIGNING_ALGORITHMS: readonly ["ed25519", "ecdsa-p256-sha256"];
+export type ExportSigningAlgorithm = (typeof EXPORT_SIGNING_ALGORITHMS)[number];
+/** A key exports are signed with, as a verifier sees it. No private material. */
+export interface ExportSigningKey {
+    /**
+     * `ex_` and 16 base64url characters of the SHA-256 of the raw public
+     * key: Ed25519's 32 bytes, P-256's 65-byte uncompressed point.
+     */
+    readonly keyId: string;
+    readonly algorithm: ExportSigningAlgorithm;
+    /** The public key, PEM SPKI. */
+    readonly publicKeyPem: string;
+    /** `sha256:` and the hex SHA-256 of the raw public key: to pin it, or compare by eye. */
+    readonly fingerprint: string;
+}
+export type ExportSigningError = {
+    /** `keyId` was asked for and isn't a key this binding signs with. */
+    readonly code: 'signing-key-not-found';
+    readonly message: string;
+    readonly keyId: string;
+} | {
+    /** The signer failed: a KMS that refused or didn't answer, a malformed key. */
+    readonly code: 'export-signing-failed';
+    readonly message: string;
+    readonly cause?: unknown;
+};
+export interface ExportSignature {
+    readonly key: ExportSigningKey;
+    readonly signature: Uint8Array;
+}
+export interface ExportSigningBinding {
+    /** The key `sign` uses when no `keyId` is asked for. */
+    activeKey(): ExportSigningKey;
+    /** Every key a verifier should trust, the active one first. */
+    listKeys(): readonly ExportSigningKey[];
+    /**
+     * Sign `bytes` with the active key, or with `keyId` when given. A
+     * `keyId` this binding can't sign with is `signing-key-not-found`.
+     */
+    sign(bytes: Uint8Array, options?: {
+        readonly keyId?: string;
+    }): Promise<Result<ExportSignature, ExportSigningError>>;
+}
+/**
+ * The `ExportSigningKey` for a raw public key, under its derived id: a
+ * 32-byte Ed25519 key (the default), or a 65-byte uncompressed P-256 point
+ * for `ecdsa-p256-sha256`.
+ */
+export declare function exportSigningKey(publicKey: Uint8Array, algorithm?: ExportSigningAlgorithm): ExportSigningKey;
+/**
+ * An export signer over an EC P-256 private key held in memory (PKCS#8 or
+ * SEC1 PEM): `ecdsa-p256-sha256`, its signatures as P1363 `r‖s`. `err`
+ * when the key isn't a P-256 private key.
+ */
+export declare function createEcdsaP256ExportSigner(input: {
+    readonly privateKeyPem: string;
+}): Result<ExportSigningBinding, CryptoError>;
+/**
+ * The export signer for a PEM private key, its algorithm read from the
+ * key: Ed25519 → `ed25519`, EC P-256 → `ecdsa-p256-sha256`. Any other key
+ * is `err`, naming what it is.
+ */
+export declare function createExportSignerFromPem(privateKeyPem: string): Result<ExportSigningBinding, CryptoError>;
+/**
+ * An ECDSA signature from DER (`SEQUENCE { INTEGER r, INTEGER s }`, what
+ * Cloud KMS and AWS KMS answer) to IEEE P1363 `r‖s`, each half `size`
+ * bytes (32 for P-256): the form exports carry and Web Crypto verifies.
+ */
+export declare function ecdsaDerToP1363(der: Uint8Array, size?: number): Result<Uint8Array, CryptoError>;
+/**
+ * An export signer over an Ed25519 private key held in memory: a PEM
+ * file's contents, a base64 env value decoded, a test's or a
+ * development server's generated key. `err` when the key isn't an
+ * Ed25519 PKCS#8 key.
+ */
+export declare function createEd25519ExportSigner(input: {
+    readonly privateKeyPem: string;
+} | {
+    readonly privateKey: Uint8Array;
+}): Result<ExportSigningBinding, CryptoError>;
+/**
+ * The `ExportSigningBinding` over a `SigningKeyBinding`'s Ed25519 keys,
+ * under the ids that binding gives them; the first is the active one.
+ * `undefined` when it holds no Ed25519 key (nothing to sign with).
+ */
+export declare function exportSignerFromSigningKeyBinding(binding: SigningKeyBinding): ExportSigningBinding | undefined;
+//# sourceMappingURL=export-signing.d.ts.map

package/dist/export-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-signing.d.ts","sourceRoot":"","sources":["../src/export-signing.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,2CAA4C,CAAC;AACnF,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,gCAAgC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAC1B;IACE,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,wDAAwD;IACxD,SAAS,IAAI,gBAAgB,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,IAAI,SAAS,gBAAgB,EAAE,CAAC;IACxC;;;OAGG;IACH,IAAI,CACF,KAAK,EAAE,UAAU,EACjB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACpC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;CACzD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,UAAU,EACrB,SAAS,GAAE,sBAAkC,GAC5C,gBAAgB,CAUlB;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,GAAG,MAAM,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAsC5C;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,GACpB,MAAM,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAa3C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,SAAK,GAAG,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAqC3F;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC9E,MAAM,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAkB3C;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,iBAAiB,GACzB,oBAAoB,GAAG,SAAS,CAuBlC"}

package/dist/export-signing.js

@@ -0,0 +1,283 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * `ExportSigningBinding` — the key a deployment signs its exports with:
+ * audit bundles, provenance exports and compliance evidence. Async, so
+ * a KMS that never hands out its private key (Cloud KMS
+ * `asymmetricSign`) can implement it as well as a key file can.
+ *
+ * One key signs at a time (`activeKey`); `listKeys` is every key a
+ * verifier should trust, active first. A key's id is derived from its
+ * public key (`exportSigningKey`), so the same key has the same id
+ * across restarts and deployments, with nothing to configure.
+ *
+ * Two algorithms, chosen per key (`ExportSigningKey.algorithm`):
+ * `ed25519`, the default for a key in memory or a file, and
+ * `ecdsa-p256-sha256`, for a KMS that has no Ed25519. An ECDSA signature
+ * travels as IEEE P1363 `r‖s` (64 bytes), the form Web Crypto verifies;
+ * a KMS that answers DER converts with `ecdsaDerToP1363`.
+ *
+ * Not the same seam as `SigningKeyBinding` (raw key bytes, read
+ * synchronously, for public run tokens on the request path).
+ * `exportSignerFromSigningKeyBinding` adapts one to the other.
+ */
+import { createHash, createPrivateKey, createPublicKey, sign as nodeSign, } from 'node:crypto';
+import { parsePrivateKeyPem, serializePublicKeyPem, signEd25519 } from './ed25519.js';
+import { ED25519_RAW_KEY_BYTES, unwrapPublicKeySpki, wrapPrivateKeyPkcs8 } from './encoding.js';
+import { malformedKey } from './errors.js';
+/** The algorithms an export can be signed with. */
+export const EXPORT_SIGNING_ALGORITHMS = ['ed25519', 'ecdsa-p256-sha256'];
+/**
+ * The `ExportSigningKey` for a raw public key, under its derived id: a
+ * 32-byte Ed25519 key (the default), or a 65-byte uncompressed P-256 point
+ * for `ecdsa-p256-sha256`.
+ */
+export function exportSigningKey(publicKey, algorithm = 'ed25519') {
+    const keyId = `ex_${sha256(publicKey).toString('base64url').slice(0, 16)}`;
+    return algorithm === 'ed25519'
+        ? describeKey(keyId, publicKey)
+        : {
+            keyId,
+            algorithm,
+            publicKeyPem: p256PublicKeyPem(publicKey),
+            fingerprint: `sha256:${sha256(publicKey).toString('hex')}`,
+        };
+}
+/**
+ * An export signer over an EC P-256 private key held in memory (PKCS#8 or
+ * SEC1 PEM): `ecdsa-p256-sha256`, its signatures as P1363 `r‖s`. `err`
+ * when the key isn't a P-256 private key.
+ */
+export function createEcdsaP256ExportSigner(input) {
+    let privateKey;
+    try {
+        privateKey = createPrivateKey({ key: input.privateKeyPem, format: 'pem' });
+    }
+    catch (cause) {
+        return malformedKey('the export signing key is not a readable PEM private key', cause);
+    }
+    const curve = privateKey.asymmetricKeyDetails?.namedCurve;
+    if (privateKey.asymmetricKeyType !== 'ec' || curve !== 'prime256v1') {
+        return malformedKey(`the export signing key is ${describeKeyType(privateKey)}, not an EC P-256 key`);
+    }
+    const jwk = createPublicKey(privateKey).export({ format: 'jwk' });
+    const point = Buffer.concat([
+        Buffer.from([0x04]),
+        Buffer.from(jwk.x, 'base64url'),
+        Buffer.from(jwk.y, 'base64url'),
+    ]);
+    const key = exportSigningKey(new Uint8Array(point), 'ecdsa-p256-sha256');
+    return ok({
+        activeKey: () => key,
+        listKeys: () => [key],
+        async sign(bytes, options) {
+            if (options?.keyId !== undefined && options.keyId !== key.keyId) {
+                return { kind: 'err', error: keyNotFound(options.keyId, [key]) };
+            }
+            try {
+                const signature = nodeSign('sha256', bytes, { key: privateKey, dsaEncoding: 'ieee-p1363' });
+                return ok({ key, signature: new Uint8Array(signature) });
+            }
+            catch (cause) {
+                return {
+                    kind: 'err',
+                    error: { code: 'export-signing-failed', message: 'ECDSA P-256 signing failed', cause },
+                };
+            }
+        },
+    });
+}
+/**
+ * The export signer for a PEM private key, its algorithm read from the
+ * key: Ed25519 → `ed25519`, EC P-256 → `ecdsa-p256-sha256`. Any other key
+ * is `err`, naming what it is.
+ */
+export function createExportSignerFromPem(privateKeyPem) {
+    let privateKey;
+    try {
+        privateKey = createPrivateKey({ key: privateKeyPem, format: 'pem' });
+    }
+    catch (cause) {
+        return malformedKey('the export signing key is not a readable PEM private key', cause);
+    }
+    if (privateKey.asymmetricKeyType === 'ed25519')
+        return createEd25519ExportSigner({ privateKeyPem });
+    if (privateKey.asymmetricKeyType === 'ec')
+        return createEcdsaP256ExportSigner({ privateKeyPem });
+    return malformedKey(`the export signing key is ${describeKeyType(privateKey)}: exports are signed with an Ed25519 or an EC P-256 key`);
+}
+/**
+ * An ECDSA signature from DER (`SEQUENCE { INTEGER r, INTEGER s }`, what
+ * Cloud KMS and AWS KMS answer) to IEEE P1363 `r‖s`, each half `size`
+ * bytes (32 for P-256): the form exports carry and Web Crypto verifies.
+ */
+export function ecdsaDerToP1363(der, size = 32) {
+    const bad = () => malformedKey('the ECDSA signature is not a DER SEQUENCE of two INTEGERs');
+    let at = 0;
+    const readLength = () => {
+        const first = der[at++];
+        if (first === undefined)
+            return undefined;
+        if (first < 0x80)
+            return first;
+        const bytes = first & 0x7f;
+        if (bytes === 0 || bytes > 2)
+            return undefined;
+        let length = 0;
+        for (let i = 0; i < bytes; i += 1) {
+            const b = der[at++];
+            if (b === undefined)
+                return undefined;
+            length = length * 256 + b;
+        }
+        return length;
+    };
+    const readInteger = () => {
+        if (der[at++] !== 0x02)
+            return undefined;
+        const length = readLength();
+        if (length === undefined || at + length > der.length)
+            return undefined;
+        let value = der.subarray(at, at + length);
+        at += length;
+        while (value.length > size && value[0] === 0)
+            value = value.subarray(1);
+        if (value.length > size)
+            return undefined;
+        const out = new Uint8Array(size);
+        out.set(value, size - value.length);
+        return out;
+    };
+    if (der[at++] !== 0x30 || readLength() === undefined)
+        return bad();
+    const r = readInteger();
+    const s = readInteger();
+    if (r === undefined || s === undefined || at !== der.length)
+        return bad();
+    const out = new Uint8Array(size * 2);
+    out.set(r, 0);
+    out.set(s, size);
+    return ok(out);
+}
+/**
+ * An export signer over an Ed25519 private key held in memory: a PEM
+ * file's contents, a base64 env value decoded, a test's or a
+ * development server's generated key. `err` when the key isn't an
+ * Ed25519 PKCS#8 key.
+ */
+export function createEd25519ExportSigner(input) {
+    const seed = 'privateKeyPem' in input ? parsePrivateKeyPem(input.privateKeyPem) : ok(input.privateKey);
+    if (seed.kind === 'err')
+        return seed;
+    const publicKey = publicKeyFromSeed(seed.value);
+    if (publicKey.kind === 'err')
+        return publicKey;
+    const key = exportSigningKey(publicKey.value);
+    const privateKey = seed.value;
+    return ok({
+        activeKey: () => key,
+        listKeys: () => [key],
+        async sign(bytes, options) {
+            if (options?.keyId !== undefined && options.keyId !== key.keyId) {
+                return { kind: 'err', error: keyNotFound(options.keyId, [key]) };
+            }
+            return signedWith(key, privateKey, bytes);
+        },
+    });
+}
+/**
+ * The `ExportSigningBinding` over a `SigningKeyBinding`'s Ed25519 keys,
+ * under the ids that binding gives them; the first is the active one.
+ * `undefined` when it holds no Ed25519 key (nothing to sign with).
+ */
+export function exportSignerFromSigningKeyBinding(binding) {
+    const keys = binding
+        .listKeys()
+        .filter((d) => d.algorithm === 'ed25519')
+        .flatMap((d) => {
+        const pub = binding.getPublicKey(d.keyId);
+        return pub === null ? [] : [describeKey(d.keyId, pub)];
+    });
+    const [active] = keys;
+    if (active === undefined)
+        return undefined;
+    return {
+        activeKey: () => active,
+        listKeys: () => keys,
+        async sign(bytes, options) {
+            const key = options?.keyId === undefined ? active : keys.find((k) => k.keyId === options.keyId);
+            const privateKey = key === undefined ? null : binding.getPrivateKey(key.keyId);
+            if (key === undefined || privateKey === null) {
+                return { kind: 'err', error: keyNotFound(options?.keyId ?? active.keyId, keys) };
+            }
+            return signedWith(key, privateKey, bytes);
+        },
+    };
+}
+function signedWith(key, privateKey, bytes) {
+    const signed = signEd25519(privateKey, bytes);
+    if (signed.kind === 'err') {
+        return {
+            kind: 'err',
+            error: { code: 'export-signing-failed', message: signed.error.message, cause: signed.error },
+        };
+    }
+    return ok({ key, signature: signed.value });
+}
+function keyNotFound(keyId, keys) {
+    return {
+        code: 'signing-key-not-found',
+        message: `This deployment doesn't sign exports with key "${keyId}". It signs with ${keys.map((k) => `"${k.keyId}"`).join(', ')}; leave signingKeyId out to use the active one.`,
+        keyId,
+    };
+}
+function describeKey(keyId, publicKey) {
+    return {
+        keyId,
+        algorithm: 'ed25519',
+        publicKeyPem: serializePublicKeyPem(publicKey),
+        fingerprint: `sha256:${sha256(publicKey).toString('hex')}`,
+    };
+}
+function publicKeyFromSeed(seed) {
+    if (seed.length !== ED25519_RAW_KEY_BYTES) {
+        return malformedKey(`Ed25519 private key must be ${ED25519_RAW_KEY_BYTES} raw bytes, got ${seed.length}`);
+    }
+    try {
+        const priv = createPrivateKey({
+            key: Buffer.from(wrapPrivateKeyPkcs8(seed)),
+            format: 'der',
+            type: 'pkcs8',
+        });
+        const spki = createPublicKey(priv).export({ format: 'der', type: 'spki' });
+        return unwrapPublicKeySpki(new Uint8Array(spki));
+    }
+    catch (cause) {
+        return malformedKey('Ed25519 private key rejected by underlying primitive', cause);
+    }
+}
+/** A 65-byte uncompressed P-256 point as a PEM SPKI public key. */
+function p256PublicKeyPem(point) {
+    const key = createPublicKey({
+        key: {
+            kty: 'EC',
+            crv: 'P-256',
+            x: Buffer.from(point.subarray(1, 33)).toString('base64url'),
+            y: Buffer.from(point.subarray(33, 65)).toString('base64url'),
+        },
+        format: 'jwk',
+    });
+    return key.export({ format: 'pem', type: 'spki' }).toString();
+}
+function describeKeyType(key) {
+    const type = key.asymmetricKeyType ?? 'an unknown kind of key';
+    const curve = key.asymmetricKeyDetails?.namedCurve;
+    return curve !== undefined ? `an ${type} key on ${curve}` : `an ${type} key`;
+}
+function sha256(bytes) {
+    return createHash('sha256').update(bytes).digest();
+}
+function ok(value) {
+    return { kind: 'ok', value };
+}
+//# sourceMappingURL=export-signing.js.map

package/dist/export-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-signing.js","sourceRoot":"","sources":["../src/export-signing.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,IAAI,IAAI,QAAQ,GACjB,MAAM,aAAa,CAAC;AAKrB,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEhG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,mDAAmD;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAAS,EAAE,mBAAmB,CAAU,CAAC;AAmDnF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAqB,EACrB,YAAoC,SAAS;IAE7C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC3E,OAAO,SAAS,KAAK,SAAS;QAC5B,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;QAC/B,CAAC,CAAC;YACE,KAAK;YACL,SAAS;YACT,YAAY,EAAE,gBAAgB,CAAC,SAAS,CAAC;YACzC,WAAW,EAAE,UAAU,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;SAC3D,CAAC;AACR,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAE3C;IACC,IAAI,UAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,YAAY,CAAC,0DAA0D,EAAE,KAAK,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,oBAAoB,EAAE,UAAU,CAAC;IAC1D,IAAI,UAAU,CAAC,iBAAiB,KAAK,IAAI,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACpE,OAAO,YAAY,CACjB,6BAA6B,eAAe,CAAC,UAAU,CAAC,uBAAuB,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;KAC1C,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC;QACR,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG;QACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;YACvB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;gBAChE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC5F,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,4BAA4B,EAAE,KAAK,EAAE;iBACvF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,aAAqB;IAErB,IAAI,UAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,YAAY,CAAC,0DAA0D,EAAE,KAAK,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,UAAU,CAAC,iBAAiB,KAAK,SAAS;QAC5C,OAAO,yBAAyB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,iBAAiB,KAAK,IAAI;QAAE,OAAO,2BAA2B,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACjG,OAAO,YAAY,CACjB,6BAA6B,eAAe,CAAC,UAAU,CAAC,yDAAyD,CAClH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAe,EAAE,IAAI,GAAG,EAAE;IACxD,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,2DAA2D,CAAC,CAAC;IAC5F,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,UAAU,GAAG,GAAuB,EAAE;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;QAC3B,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACtC,MAAM,GAAG,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,GAA2B,EAAE;QAC/C,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS,IAAI,EAAE,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACvE,IAAI,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC;QAC1C,EAAE,IAAI,MAAM,CAAC;QACb,OAAO,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,KAAK,SAAS;QAAE,OAAO,GAAG,EAAE,CAAC;IACnE,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;IACxB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,EAAE,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,GAAG,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjB,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA+E;IAE/E,MAAM,IAAI,GACR,eAAe,IAAI,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;IAC9B,OAAO,EAAE,CAAC;QACR,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG;QACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;YACvB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;gBAChE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnE,CAAC;YACD,OAAO,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAA0B;IAE1B,MAAM,IAAI,GAAG,OAAO;SACjB,QAAQ,EAAE;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;SACxC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAA0B,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IACL,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACtB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM;QACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;QACpB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;YACvB,MAAM,GAAG,GACP,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;YACtF,MAAM,UAAU,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,KAAc,CAAC,CAAC;YACxF,IAAI,GAAG,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACnF,CAAC;YACD,OAAO,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,GAAqB,EACrB,UAAsB,EACtB,KAAiB;IAEjB,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;SAC7F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,IAAiC;IACnE,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,kDAAkD,KAAK,oBAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD;QAC/K,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,SAAqB;IACvD,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS;QACpB,YAAY,EAAE,qBAAqB,CAAC,SAAS,CAAC;QAC9C,WAAW,EAAE,UAAU,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAgB;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAC1C,OAAO,YAAY,CACjB,+BAA+B,qBAAqB,mBAAmB,IAAI,CAAC,MAAM,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,OAAO,mBAAmB,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,YAAY,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,GAAG,GAAG,eAAe,CAAC;QAC1B,GAAG,EAAE;YACH,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,OAAO;YACZ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC3D,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC7D;QACD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CAAC,GAAc;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC;IACnD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;AAC/E,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,EAAE,CAAI,KAAQ;IACrB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC"}

package/dist/index.d.ts

@@ -4,6 +4,8 @@ export { hmacSha256Sign, hmacSha256Verify } from './hmac.js';
 export { DEFAULT_WEBHOOK_TOLERANCE_SECONDS, generateWebhookSecret, isStrongWebhookSecret, signWebhook, verifyWebhook, WEBHOOK_HEADERS, WEBHOOK_SECRET_MIN_BYTES, WEBHOOK_SECRET_PREFIX, webhookHeaders, } from './webhook.js';
 export type { SignWebhookInput, VerifyWebhookFailure, VerifyWebhookInput, VerifyWebhookResult, WebhookRequestHeaders, } from './webhook.js';
 export { createInMemorySigningKeyBinding } from './binding.js';
+export { EXPORT_SIGNING_ALGORITHMS, createEcdsaP256ExportSigner, createEd25519ExportSigner, createExportSignerFromPem, ecdsaDerToP1363, exportSignerFromSigningKeyBinding, exportSigningKey, } from './export-signing.js';
+export type { ExportSignature, ExportSigningAlgorithm, ExportSigningBinding, ExportSigningError, ExportSigningKey, } from './export-signing.js';
 export type { SigningAlgorithm, SigningKeyBinding, SigningKeyDescriptor } from './binding.js';
 export type { CryptoError, MalformedKeyError, MalformedSignatureError, UnsupportedFormatError, } from './errors.js';
 export { ED25519_RAW_KEY_BYTES } from './encoding.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,WAAW,EACX,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EACL,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAE9F,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,WAAW,EACX,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EACL,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,iCAAiC,EACjC,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAE9F,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -4,5 +4,6 @@ export { ED25519_SIGNATURE_BYTES, generateEd25519KeyPair, parsePrivateKeyBase64,
 export { hmacSha256Sign, hmacSha256Verify } from './hmac.js';
 export { DEFAULT_WEBHOOK_TOLERANCE_SECONDS, generateWebhookSecret, isStrongWebhookSecret, signWebhook, verifyWebhook, WEBHOOK_HEADERS, WEBHOOK_SECRET_MIN_BYTES, WEBHOOK_SECRET_PREFIX, webhookHeaders, } from './webhook.js';
 export { createInMemorySigningKeyBinding } from './binding.js';
+export { EXPORT_SIGNING_ALGORITHMS, createEcdsaP256ExportSigner, createEd25519ExportSigner, createExportSignerFromPem, ecdsaDerToP1363, exportSignerFromSigningKeyBinding, exportSigningKey, } from './export-signing.js';
 export { ED25519_RAW_KEY_BYTES } from './encoding.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,WAAW,EACX,aAAa,GACd,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EACL,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,GACf,MAAM,cAAc,CAAC;AAStB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAU/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,WAAW,EACX,aAAa,GACd,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EACL,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,GACf,MAAM,cAAc,CAAC;AAStB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,iCAAiC,EACjC,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAiB7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kindgi/crypto",
-  "version": "0.1.4",
+  "version": "0.1.5-rc.0",
   "description": "Kindgi™ cryptographic primitives. Ed25519 signatures for asymmetric use (signed audit bundles, provenance exports, deployment attestations) and HMAC-SHA256 for symmetric use (webhook payloads). Includes SigningKeyBinding interface + in-memory reference impl, PEM/base64 key format converters, and typed error interfaces. Pure Node built-ins, zero runtime deps. Deployments plug their own key store (KMS, Vault, env-var) via SigningKeyBinding.",
   "license": "Apache-2.0",
   "repository": {
@@ -28,7 +28,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@kindgi/types": "0.1.4"
+    "@kindgi/types": "0.1.5-rc.0"
   },
   "engines": {
     "node": ">=22.12.0"

package/src/export-signing.ts

@@ -0,0 +1,364 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+
+/**
+ * `ExportSigningBinding` — the key a deployment signs its exports with:
+ * audit bundles, provenance exports and compliance evidence. Async, so
+ * a KMS that never hands out its private key (Cloud KMS
+ * `asymmetricSign`) can implement it as well as a key file can.
+ *
+ * One key signs at a time (`activeKey`); `listKeys` is every key a
+ * verifier should trust, active first. A key's id is derived from its
+ * public key (`exportSigningKey`), so the same key has the same id
+ * across restarts and deployments, with nothing to configure.
+ *
+ * Two algorithms, chosen per key (`ExportSigningKey.algorithm`):
+ * `ed25519`, the default for a key in memory or a file, and
+ * `ecdsa-p256-sha256`, for a KMS that has no Ed25519. An ECDSA signature
+ * travels as IEEE P1363 `r‖s` (64 bytes), the form Web Crypto verifies;
+ * a KMS that answers DER converts with `ecdsaDerToP1363`.
+ *
+ * Not the same seam as `SigningKeyBinding` (raw key bytes, read
+ * synchronously, for public run tokens on the request path).
+ * `exportSignerFromSigningKeyBinding` adapts one to the other.
+ */
+
+import {
+  type KeyObject,
+  createHash,
+  createPrivateKey,
+  createPublicKey,
+  sign as nodeSign,
+} from 'node:crypto';
+
+import type { Result } from '@kindgi/types';
+
+import type { SigningKeyBinding } from './binding.js';
+import { parsePrivateKeyPem, serializePublicKeyPem, signEd25519 } from './ed25519.js';
+import { ED25519_RAW_KEY_BYTES, unwrapPublicKeySpki, wrapPrivateKeyPkcs8 } from './encoding.js';
+import type { CryptoError } from './errors.js';
+import { malformedKey } from './errors.js';
+
+/** The algorithms an export can be signed with. */
+export const EXPORT_SIGNING_ALGORITHMS = ['ed25519', 'ecdsa-p256-sha256'] as const;
+export type ExportSigningAlgorithm = (typeof EXPORT_SIGNING_ALGORITHMS)[number];
+
+/** A key exports are signed with, as a verifier sees it. No private material. */
+export interface ExportSigningKey {
+  /**
+   * `ex_` and 16 base64url characters of the SHA-256 of the raw public
+   * key: Ed25519's 32 bytes, P-256's 65-byte uncompressed point.
+   */
+  readonly keyId: string;
+  readonly algorithm: ExportSigningAlgorithm;
+  /** The public key, PEM SPKI. */
+  readonly publicKeyPem: string;
+  /** `sha256:` and the hex SHA-256 of the raw public key: to pin it, or compare by eye. */
+  readonly fingerprint: string;
+}
+
+export type ExportSigningError =
+  | {
+      /** `keyId` was asked for and isn't a key this binding signs with. */
+      readonly code: 'signing-key-not-found';
+      readonly message: string;
+      readonly keyId: string;
+    }
+  | {
+      /** The signer failed: a KMS that refused or didn't answer, a malformed key. */
+      readonly code: 'export-signing-failed';
+      readonly message: string;
+      readonly cause?: unknown;
+    };
+
+export interface ExportSignature {
+  readonly key: ExportSigningKey;
+  readonly signature: Uint8Array;
+}
+
+export interface ExportSigningBinding {
+  /** The key `sign` uses when no `keyId` is asked for. */
+  activeKey(): ExportSigningKey;
+  /** Every key a verifier should trust, the active one first. */
+  listKeys(): readonly ExportSigningKey[];
+  /**
+   * Sign `bytes` with the active key, or with `keyId` when given. A
+   * `keyId` this binding can't sign with is `signing-key-not-found`.
+   */
+  sign(
+    bytes: Uint8Array,
+    options?: { readonly keyId?: string },
+  ): Promise<Result<ExportSignature, ExportSigningError>>;
+}
+
+/**
+ * The `ExportSigningKey` for a raw public key, under its derived id: a
+ * 32-byte Ed25519 key (the default), or a 65-byte uncompressed P-256 point
+ * for `ecdsa-p256-sha256`.
+ */
+export function exportSigningKey(
+  publicKey: Uint8Array,
+  algorithm: ExportSigningAlgorithm = 'ed25519',
+): ExportSigningKey {
+  const keyId = `ex_${sha256(publicKey).toString('base64url').slice(0, 16)}`;
+  return algorithm === 'ed25519'
+    ? describeKey(keyId, publicKey)
+    : {
+        keyId,
+        algorithm,
+        publicKeyPem: p256PublicKeyPem(publicKey),
+        fingerprint: `sha256:${sha256(publicKey).toString('hex')}`,
+      };
+}
+
+/**
+ * An export signer over an EC P-256 private key held in memory (PKCS#8 or
+ * SEC1 PEM): `ecdsa-p256-sha256`, its signatures as P1363 `r‖s`. `err`
+ * when the key isn't a P-256 private key.
+ */
+export function createEcdsaP256ExportSigner(input: {
+  readonly privateKeyPem: string;
+}): Result<ExportSigningBinding, CryptoError> {
+  let privateKey: KeyObject;
+  try {
+    privateKey = createPrivateKey({ key: input.privateKeyPem, format: 'pem' });
+  } catch (cause) {
+    return malformedKey('the export signing key is not a readable PEM private key', cause);
+  }
+  const curve = privateKey.asymmetricKeyDetails?.namedCurve;
+  if (privateKey.asymmetricKeyType !== 'ec' || curve !== 'prime256v1') {
+    return malformedKey(
+      `the export signing key is ${describeKeyType(privateKey)}, not an EC P-256 key`,
+    );
+  }
+  const jwk = createPublicKey(privateKey).export({ format: 'jwk' });
+  const point = Buffer.concat([
+    Buffer.from([0x04]),
+    Buffer.from(jwk.x as string, 'base64url'),
+    Buffer.from(jwk.y as string, 'base64url'),
+  ]);
+  const key = exportSigningKey(new Uint8Array(point), 'ecdsa-p256-sha256');
+  return ok({
+    activeKey: () => key,
+    listKeys: () => [key],
+    async sign(bytes, options) {
+      if (options?.keyId !== undefined && options.keyId !== key.keyId) {
+        return { kind: 'err', error: keyNotFound(options.keyId, [key]) };
+      }
+      try {
+        const signature = nodeSign('sha256', bytes, { key: privateKey, dsaEncoding: 'ieee-p1363' });
+        return ok({ key, signature: new Uint8Array(signature) });
+      } catch (cause) {
+        return {
+          kind: 'err',
+          error: { code: 'export-signing-failed', message: 'ECDSA P-256 signing failed', cause },
+        };
+      }
+    },
+  });
+}
+
+/**
+ * The export signer for a PEM private key, its algorithm read from the
+ * key: Ed25519 → `ed25519`, EC P-256 → `ecdsa-p256-sha256`. Any other key
+ * is `err`, naming what it is.
+ */
+export function createExportSignerFromPem(
+  privateKeyPem: string,
+): Result<ExportSigningBinding, CryptoError> {
+  let privateKey: KeyObject;
+  try {
+    privateKey = createPrivateKey({ key: privateKeyPem, format: 'pem' });
+  } catch (cause) {
+    return malformedKey('the export signing key is not a readable PEM private key', cause);
+  }
+  if (privateKey.asymmetricKeyType === 'ed25519')
+    return createEd25519ExportSigner({ privateKeyPem });
+  if (privateKey.asymmetricKeyType === 'ec') return createEcdsaP256ExportSigner({ privateKeyPem });
+  return malformedKey(
+    `the export signing key is ${describeKeyType(privateKey)}: exports are signed with an Ed25519 or an EC P-256 key`,
+  );
+}
+
+/**
+ * An ECDSA signature from DER (`SEQUENCE { INTEGER r, INTEGER s }`, what
+ * Cloud KMS and AWS KMS answer) to IEEE P1363 `r‖s`, each half `size`
+ * bytes (32 for P-256): the form exports carry and Web Crypto verifies.
+ */
+export function ecdsaDerToP1363(der: Uint8Array, size = 32): Result<Uint8Array, CryptoError> {
+  const bad = () => malformedKey('the ECDSA signature is not a DER SEQUENCE of two INTEGERs');
+  let at = 0;
+  const readLength = (): number | undefined => {
+    const first = der[at++];
+    if (first === undefined) return undefined;
+    if (first < 0x80) return first;
+    const bytes = first & 0x7f;
+    if (bytes === 0 || bytes > 2) return undefined;
+    let length = 0;
+    for (let i = 0; i < bytes; i += 1) {
+      const b = der[at++];
+      if (b === undefined) return undefined;
+      length = length * 256 + b;
+    }
+    return length;
+  };
+  const readInteger = (): Uint8Array | undefined => {
+    if (der[at++] !== 0x02) return undefined;
+    const length = readLength();
+    if (length === undefined || at + length > der.length) return undefined;
+    let value = der.subarray(at, at + length);
+    at += length;
+    while (value.length > size && value[0] === 0) value = value.subarray(1);
+    if (value.length > size) return undefined;
+    const out = new Uint8Array(size);
+    out.set(value, size - value.length);
+    return out;
+  };
+  if (der[at++] !== 0x30 || readLength() === undefined) return bad();
+  const r = readInteger();
+  const s = readInteger();
+  if (r === undefined || s === undefined || at !== der.length) return bad();
+  const out = new Uint8Array(size * 2);
+  out.set(r, 0);
+  out.set(s, size);
+  return ok(out);
+}
+
+/**
+ * An export signer over an Ed25519 private key held in memory: a PEM
+ * file's contents, a base64 env value decoded, a test's or a
+ * development server's generated key. `err` when the key isn't an
+ * Ed25519 PKCS#8 key.
+ */
+export function createEd25519ExportSigner(
+  input: { readonly privateKeyPem: string } | { readonly privateKey: Uint8Array },
+): Result<ExportSigningBinding, CryptoError> {
+  const seed =
+    'privateKeyPem' in input ? parsePrivateKeyPem(input.privateKeyPem) : ok(input.privateKey);
+  if (seed.kind === 'err') return seed;
+  const publicKey = publicKeyFromSeed(seed.value);
+  if (publicKey.kind === 'err') return publicKey;
+  const key = exportSigningKey(publicKey.value);
+  const privateKey = seed.value;
+  return ok({
+    activeKey: () => key,
+    listKeys: () => [key],
+    async sign(bytes, options) {
+      if (options?.keyId !== undefined && options.keyId !== key.keyId) {
+        return { kind: 'err', error: keyNotFound(options.keyId, [key]) };
+      }
+      return signedWith(key, privateKey, bytes);
+    },
+  });
+}
+
+/**
+ * The `ExportSigningBinding` over a `SigningKeyBinding`'s Ed25519 keys,
+ * under the ids that binding gives them; the first is the active one.
+ * `undefined` when it holds no Ed25519 key (nothing to sign with).
+ */
+export function exportSignerFromSigningKeyBinding(
+  binding: SigningKeyBinding,
+): ExportSigningBinding | undefined {
+  const keys = binding
+    .listKeys()
+    .filter((d) => d.algorithm === 'ed25519')
+    .flatMap((d) => {
+      const pub = binding.getPublicKey(d.keyId);
+      return pub === null ? [] : [describeKey(d.keyId as unknown as string, pub)];
+    });
+  const [active] = keys;
+  if (active === undefined) return undefined;
+  return {
+    activeKey: () => active,
+    listKeys: () => keys,
+    async sign(bytes, options) {
+      const key =
+        options?.keyId === undefined ? active : keys.find((k) => k.keyId === options.keyId);
+      const privateKey = key === undefined ? null : binding.getPrivateKey(key.keyId as never);
+      if (key === undefined || privateKey === null) {
+        return { kind: 'err', error: keyNotFound(options?.keyId ?? active.keyId, keys) };
+      }
+      return signedWith(key, privateKey, bytes);
+    },
+  };
+}
+
+function signedWith(
+  key: ExportSigningKey,
+  privateKey: Uint8Array,
+  bytes: Uint8Array,
+): Result<ExportSignature, ExportSigningError> {
+  const signed = signEd25519(privateKey, bytes);
+  if (signed.kind === 'err') {
+    return {
+      kind: 'err',
+      error: { code: 'export-signing-failed', message: signed.error.message, cause: signed.error },
+    };
+  }
+  return ok({ key, signature: signed.value });
+}
+
+function keyNotFound(keyId: string, keys: readonly ExportSigningKey[]): ExportSigningError {
+  return {
+    code: 'signing-key-not-found',
+    message: `This deployment doesn't sign exports with key "${keyId}". It signs with ${keys.map((k) => `"${k.keyId}"`).join(', ')}; leave signingKeyId out to use the active one.`,
+    keyId,
+  };
+}
+
+function describeKey(keyId: string, publicKey: Uint8Array): ExportSigningKey {
+  return {
+    keyId,
+    algorithm: 'ed25519',
+    publicKeyPem: serializePublicKeyPem(publicKey),
+    fingerprint: `sha256:${sha256(publicKey).toString('hex')}`,
+  };
+}
+
+function publicKeyFromSeed(seed: Uint8Array): Result<Uint8Array, CryptoError> {
+  if (seed.length !== ED25519_RAW_KEY_BYTES) {
+    return malformedKey(
+      `Ed25519 private key must be ${ED25519_RAW_KEY_BYTES} raw bytes, got ${seed.length}`,
+    );
+  }
+  try {
+    const priv = createPrivateKey({
+      key: Buffer.from(wrapPrivateKeyPkcs8(seed)),
+      format: 'der',
+      type: 'pkcs8',
+    });
+    const spki = createPublicKey(priv).export({ format: 'der', type: 'spki' });
+    return unwrapPublicKeySpki(new Uint8Array(spki));
+  } catch (cause) {
+    return malformedKey('Ed25519 private key rejected by underlying primitive', cause);
+  }
+}
+
+/** A 65-byte uncompressed P-256 point as a PEM SPKI public key. */
+function p256PublicKeyPem(point: Uint8Array): string {
+  const key = createPublicKey({
+    key: {
+      kty: 'EC',
+      crv: 'P-256',
+      x: Buffer.from(point.subarray(1, 33)).toString('base64url'),
+      y: Buffer.from(point.subarray(33, 65)).toString('base64url'),
+    },
+    format: 'jwk',
+  });
+  return key.export({ format: 'pem', type: 'spki' }).toString();
+}
+
+function describeKeyType(key: KeyObject): string {
+  const type = key.asymmetricKeyType ?? 'an unknown kind of key';
+  const curve = key.asymmetricKeyDetails?.namedCurve;
+  return curve !== undefined ? `an ${type} key on ${curve}` : `an ${type} key`;
+}
+
+function sha256(bytes: Uint8Array): Buffer {
+  return createHash('sha256').update(bytes).digest();
+}
+
+function ok<T>(value: T): { readonly kind: 'ok'; readonly value: T } {
+  return { kind: 'ok', value };
+}

package/src/index.ts

@@ -39,6 +39,23 @@ export type {
 } from './webhook.js';
 
 export { createInMemorySigningKeyBinding } from './binding.js';
+
+export {
+  EXPORT_SIGNING_ALGORITHMS,
+  createEcdsaP256ExportSigner,
+  createEd25519ExportSigner,
+  createExportSignerFromPem,
+  ecdsaDerToP1363,
+  exportSignerFromSigningKeyBinding,
+  exportSigningKey,
+} from './export-signing.js';
+export type {
+  ExportSignature,
+  ExportSigningAlgorithm,
+  ExportSigningBinding,
+  ExportSigningError,
+  ExportSigningKey,
+} from './export-signing.js';
 export type { SigningAlgorithm, SigningKeyBinding, SigningKeyDescriptor } from './binding.js';
 
 export type {