@kokuin/browser 0.1.0 → 0.1.2

package/lib/identity.js

@@ -1,7 +1,9 @@
+import { createTracer, KokuinAttributeKeys, KokuinSpanNames } from '@kokuin/otel';
 import { CODECS, getDID } from '@kokuin/token';
+import { p256 } from '@noble/curves/nist.js';
 import { b64uFromJSON, fromUTF, toB64U } from '@sozai/codec';
 import { getLogger } from '@sozai/log';
-import { AttributeKeys, createTracer, SpanNames, withSpan } from '@sozai/otel';
+import { withSpan } from '@sozai/otel';
 import { BrowserKeyStore } from './store.js';
 import { getPublicKey } from './utils.js';
 const tracer = createTracer('keystore.browser');
@@ -9,6 +11,18 @@ const logger = getLogger([
     'kokuin',
     'browser'
 ]);
+// P-256 curve order, used to reflect a high-S signature to its low-S form.
+const P256_N = p256.Point.Fn.ORDER;
+// Web Crypto's subtle.sign does not enforce low-S, so ~half of ECDSA signatures
+// have s > n/2 (high-S). The @kokuin/token verifier runs with `lowS: true` and
+// rejects those for malleability safety, so we normalize here for cross-stack
+// compatibility. `hasHighS()` is the same predicate noble's verifier applies.
+function normalizeSignatureToLowS(sig) {
+    // sig is IEEE P1363 compact format: r (32 bytes) || s (32 bytes).
+    const parsed = p256.Signature.fromBytes(sig, 'compact');
+    if (!parsed.hasHighS()) return sig;
+    return new p256.Signature(parsed.r, P256_N - parsed.s).toBytes('compact');
+}
 async function createBrowserSigningIdentity(keyPair) {
     const publicKey = await getPublicKey(keyPair);
     const id = getDID(CODECS.ES256, publicKey);
@@ -31,10 +45,12 @@ async function createBrowserSigningIdentity(keyPair) {
             name: 'ECDSA',
             hash: 'SHA-256'
         }, keyPair.privateKey, messageBytes.buffer);
+        // Normalize to low-S: @kokuin/token verifier rejects high-S signatures
+        const normalizedSig = normalizeSignatureToLowS(new Uint8Array(signatureBuffer));
         return {
             header: fullHeader,
             payload: fullPayload,
-            signature: toB64U(new Uint8Array(signatureBuffer)),
+            signature: toB64U(normalizedSig),
             data
         };
     }
@@ -45,9 +61,9 @@ async function createBrowserSigningIdentity(keyPair) {
     };
 }
 export async function provideSigningIdentity(keyID, useStore) {
-    return withSpan(tracer, SpanNames.KEYSTORE_GET_OR_CREATE, {
+    return withSpan(tracer, KokuinSpanNames.KEYSTORE_GET_OR_CREATE, {
         attributes: {
-            [AttributeKeys.KEYSTORE_STORE_TYPE]: 'browser'
+            [KokuinAttributeKeys.KEYSTORE_STORE_TYPE]: 'browser'
         }
     }, async (span)=>{
         const storePromise = useStore == null || typeof useStore === 'string' ? BrowserKeyStore.open(useStore) : Promise.resolve(useStore);
@@ -56,14 +72,14 @@ export async function provideSigningIdentity(keyID, useStore) {
         const existing = await entry.getAsync();
         if (existing != null) {
             const identity = await createBrowserSigningIdentity(existing);
-            span.setAttribute(AttributeKeys.AUTH_DID, identity.id);
-            span.setAttribute(AttributeKeys.KEYSTORE_KEY_CREATED, false);
+            span.setAttribute(KokuinAttributeKeys.AUTH_DID, identity.id);
+            span.setAttribute(KokuinAttributeKeys.KEYSTORE_KEY_CREATED, false);
             return identity;
         }
         const keyPair = await entry.provideAsync();
         const identity = await createBrowserSigningIdentity(keyPair);
-        span.setAttribute(AttributeKeys.AUTH_DID, identity.id);
-        span.setAttribute(AttributeKeys.KEYSTORE_KEY_CREATED, true);
+        span.setAttribute(KokuinAttributeKeys.AUTH_DID, identity.id);
+        span.setAttribute(KokuinAttributeKeys.KEYSTORE_KEY_CREATED, true);
         logger.info('New identity generated: {did}', {
             did: identity.id
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kokuin/browser",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "license": "MIT",
   "description": "Key store for browser",
   "keywords": [
@@ -25,11 +25,13 @@
   ],
   "sideEffects": false,
   "dependencies": {
+    "@noble/curves": "^2.0.1",
     "@sozai/async": "^0.1.0",
     "@sozai/codec": "^0.1.0",
     "@sozai/log": "^0.1.0",
-    "@sozai/otel": "^0.1.0",
-    "@kokuin/token": "^0.1.0"
+    "@sozai/otel": "^0.2.0",
+    "@kokuin/token": "^0.1.1",
+    "@kokuin/otel": "^0.1.0"
   },
   "scripts": {
     "build:clean": "del lib",