@kokuin/browser 0.1.0 → 0.1.1

package/lib/identity.js

@@ -1,4 +1,5 @@
 import { CODECS, getDID } from '@kokuin/token';
+import { p256 } from '@noble/curves/nist.js';
 import { b64uFromJSON, fromUTF, toB64U } from '@sozai/codec';
 import { getLogger } from '@sozai/log';
 import { AttributeKeys, createTracer, SpanNames, withSpan } from '@sozai/otel';
@@ -9,6 +10,18 @@ const logger = getLogger([
     'kokuin',
     'browser'
 ]);
+// P-256 curve order, used to reflect a high-S signature to its low-S form.
+const P256_N = p256.Point.Fn.ORDER;
+// Web Crypto's subtle.sign does not enforce low-S, so ~half of ECDSA signatures
+// have s > n/2 (high-S). The @kokuin/token verifier runs with `lowS: true` and
+// rejects those for malleability safety, so we normalize here for cross-stack
+// compatibility. `hasHighS()` is the same predicate noble's verifier applies.
+function normalizeSignatureToLowS(sig) {
+    // sig is IEEE P1363 compact format: r (32 bytes) || s (32 bytes).
+    const parsed = p256.Signature.fromBytes(sig, 'compact');
+    if (!parsed.hasHighS()) return sig;
+    return new p256.Signature(parsed.r, P256_N - parsed.s).toBytes('compact');
+}
 async function createBrowserSigningIdentity(keyPair) {
     const publicKey = await getPublicKey(keyPair);
     const id = getDID(CODECS.ES256, publicKey);
@@ -31,10 +44,12 @@ async function createBrowserSigningIdentity(keyPair) {
             name: 'ECDSA',
             hash: 'SHA-256'
         }, keyPair.privateKey, messageBytes.buffer);
+        // Normalize to low-S: @kokuin/token verifier rejects high-S signatures
+        const normalizedSig = normalizeSignatureToLowS(new Uint8Array(signatureBuffer));
         return {
             header: fullHeader,
             payload: fullPayload,
-            signature: toB64U(new Uint8Array(signatureBuffer)),
+            signature: toB64U(normalizedSig),
             data
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kokuin/browser",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "license": "MIT",
   "description": "Key store for browser",
   "keywords": [
@@ -25,6 +25,7 @@
   ],
   "sideEffects": false,
   "dependencies": {
+    "@noble/curves": "^2.0.1",
     "@sozai/async": "^0.1.0",
     "@sozai/codec": "^0.1.0",
     "@sozai/log": "^0.1.0",