@microsoft/ccf-app 3.0.0-rc2 → 4.0.0-dev0

package/crypto.d.ts

@@ -1,25 +1,25 @@
 /**
- * @inheritDoc global!CCF.generateAesKey
+ * @inheritDoc global!CCFCrypto.generateAesKey
  */
 export declare const generateAesKey: (size: number) => ArrayBuffer;
 /**
- * @inheritDoc global!CCF.generateRsaKeyPair
+ * @inheritDoc global!CCFCrypto.generateRsaKeyPair
  */
 export declare const generateRsaKeyPair: (size: number, exponent?: number | undefined) => import("./global.js").CryptoKeyPair;
 /**
- * @inheritDoc global!CCF.generateEcdsaKeyPair
+ * @inheritDoc global!CCFCrypto.generateEcdsaKeyPair
  */
 export declare const generateEcdsaKeyPair: (curve: string) => import("./global.js").CryptoKeyPair;
 /**
- * @inheritDoc global!CCF.generateEcdsaKeyPair
+ * @inheritDoc global!CCFCrypto.generateEcdsaKeyPair
  */
 export declare const generateEddsaKeyPair: (curve: string) => import("./global.js").CryptoKeyPair;
 /**
- * @inheritDoc global!CCF.wrapKey
+ * @inheritDoc global!CCFCrypto.wrapKey
  */
 export declare const wrapKey: (key: ArrayBuffer, wrappingKey: ArrayBuffer, wrapAlgo: import("./global.js").WrapAlgoParams) => ArrayBuffer;
 /**
- * @inheritDoc global!CCFCrypto.verifySignature
+ * @inheritDoc global!CCFCrypto.sign
  */
 export declare const sign: (algorithm: import("./global.js").SigningAlgorithm, key: string, plaintext: ArrayBuffer) => ArrayBuffer;
 /**
@@ -54,4 +54,12 @@ export declare const pubRsaPemToJwk: (pem: string, kid?: string | undefined) =>
  * @inheritDoc global!CCFCrypto.rsaPemToJwk
  */
 export declare const rsaPemToJwk: (pem: string, kid?: string | undefined) => import("./global.js").JsonWebKeyRSAPrivate;
+/**
+ * @inheritDoc global!CCFCrypto.pubEddsaPemToJwk
+ */
+export declare const pubEddsaPemToJwk: (pem: string, kid?: string | undefined) => import("./global.js").JsonWebKeyEdDSAPrivate;
+/**
+ * @inheritDoc global!CCFCrypto.eddsaPemToJwk
+ */
+export declare const eddsaPemToJwk: (pem: string, kid?: string | undefined) => import("./global.js").JsonWebKeyEdDSAPrivate;
 export { WrapAlgoParams, AesKwpParams, RsaOaepParams, RsaOaepAesKwpParams, CryptoKeyPair, DigestAlgorithm, SigningAlgorithm, } from "./global";

package/crypto.js

@@ -15,27 +15,27 @@
  */
 import { ccf } from "./global.js";
 /**
- * @inheritDoc global!CCF.generateAesKey
+ * @inheritDoc global!CCFCrypto.generateAesKey
  */
 export const generateAesKey = ccf.crypto.generateAesKey;
 /**
- * @inheritDoc global!CCF.generateRsaKeyPair
+ * @inheritDoc global!CCFCrypto.generateRsaKeyPair
  */
 export const generateRsaKeyPair = ccf.crypto.generateRsaKeyPair;
 /**
- * @inheritDoc global!CCF.generateEcdsaKeyPair
+ * @inheritDoc global!CCFCrypto.generateEcdsaKeyPair
  */
 export const generateEcdsaKeyPair = ccf.crypto.generateEcdsaKeyPair;
 /**
- * @inheritDoc global!CCF.generateEcdsaKeyPair
+ * @inheritDoc global!CCFCrypto.generateEcdsaKeyPair
  */
 export const generateEddsaKeyPair = ccf.crypto.generateEddsaKeyPair;
 /**
- * @inheritDoc global!CCF.wrapKey
+ * @inheritDoc global!CCFCrypto.wrapKey
  */
 export const wrapKey = ccf.crypto.wrapKey;
 /**
- * @inheritDoc global!CCFCrypto.verifySignature
+ * @inheritDoc global!CCFCrypto.sign
  */
 export const sign = ccf.crypto.sign;
 /**
@@ -70,3 +70,11 @@ export const pubRsaPemToJwk = ccf.crypto.pubRsaPemToJwk;
  * @inheritDoc global!CCFCrypto.rsaPemToJwk
  */
 export const rsaPemToJwk = ccf.crypto.rsaPemToJwk;
+/**
+ * @inheritDoc global!CCFCrypto.pubEddsaPemToJwk
+ */
+export const pubEddsaPemToJwk = ccf.crypto.pubEddsaPemToJwk;
+/**
+ * @inheritDoc global!CCFCrypto.eddsaPemToJwk
+ */
+export const eddsaPemToJwk = ccf.crypto.eddsaPemToJwk;

package/global.d.ts

@@ -182,7 +182,7 @@ export interface SigningAlgorithm {
     hash?: DigestAlgorithm;
 }
 /**
- * Interfaces for JSON Web Key objects, as per [RFC7517](https://www.rfc-editor.org/rfc/rfc751).
+ * Interfaces for JSON Web Key objects, as per [RFC7517](https://www.rfc-editor.org/rfc/rfc7517).
  */
 export interface JsonWebKey {
     /**
@@ -238,6 +238,22 @@ export interface JsonWebKeyRSAPrivate extends JsonWebKeyRSAPublic {
     dq: string;
     qi: string;
 }
+export interface JsonWebKeyEdDSAPublic extends JsonWebKey {
+    /**
+     * Elliptic curve identifier.
+     */
+    crv: string;
+    /**
+     * Base64url-encoded public key.
+     */
+    x: string;
+}
+export interface JsonWebKeyEdDSAPrivate extends JsonWebKeyEdDSAPublic {
+    /**
+     * Base64url-encoded private key.
+     */
+    d: string;
+}
 export interface CCFCrypto {
     /**
      * Generate a signature.
@@ -337,6 +353,22 @@ export interface CCFCrypto {
      * @param kid Key identifier (optional)
      */
     rsaPemToJwk(pem: string, kid?: string): JsonWebKeyRSAPrivate;
+    /**
+     * Converts an EdDSA public key as PEM to JSON Web Key (JWK) object.
+     * Currently only Curve25519 is supported.
+     *
+     * @param pem EdDSA public key as PEM
+     * @param kid Key identifier (optional)
+     */
+    pubEddsaPemToJwk(pem: string, kid?: string): JsonWebKeyEdDSAPrivate;
+    /**
+     * Converts an EdDSA private key as PEM to JSON Web Key (JWK) object.
+     * Currently only Curve25519 is supported.
+     *
+     * @param pem EdDSA private key as PEM
+     * @param kid Key identifier (optional)
+     */
+    eddsaPemToJwk(pem: string, kid?: string): JsonWebKeyEdDSAPrivate;
 }
 export interface CCFRpc {
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/ccf-app",
-  "version": "3.0.0-rc2",
+  "version": "4.0.0-dev0",
   "description": "CCF app support package",
   "main": "index.js",
   "files": [
@@ -19,14 +19,12 @@
   "license": "Apache-2.0",
   "devDependencies": {
     "@types/chai": "^4.2.15",
-    "@types/jsrsasign": "^10.5.4",
     "@types/mocha": "^10.0.0",
     "@types/node": "^18.0.0",
     "@types/node-forge": "^1.0.0",
     "chai": "^4.3.4",
     "colors": "1.4.0",
     "cross-env": "^7.0.3",
-    "jsrsasign": "^10.5.27",
     "mocha": "^10.0.0",
     "node-forge": "^1.2.0",
     "ts-node": "^10.4.0",

package/polyfill.js

@@ -16,7 +16,6 @@
  */
 import * as jscrypto from "crypto";
 import { TextEncoder, TextDecoder } from "util";
-import * as rs from "jsrsasign";
 // JavaScript's Map uses reference equality for non-primitive types,
 // whereas CCF compares the content of the ArrayBuffer.
 // To achieve CCF's semantics, all keys are base64-encoded.
@@ -320,32 +319,98 @@ class CCFPolyfill {
                 }
             },
             pubPemToJwk(pem, kid) {
-                let jwk = rs.KEYUTIL.getJWK(rs.KEYUTIL.getKey(pem));
-                if (kid !== undefined) {
-                    jwk.kid = kid;
-                }
-                return jwk;
+                const key = jscrypto.createPublicKey({
+                    key: pem,
+                });
+                const jwk = key.export({
+                    format: "jwk",
+                });
+                return {
+                    crv: jwk.crv,
+                    x: jwk.x,
+                    y: jwk.y,
+                    kty: jwk.kty,
+                    kid: kid,
+                };
             },
             pemToJwk(pem, kid) {
-                let jwk = rs.KEYUTIL.getJWK(rs.KEYUTIL.getKey(pem));
-                if (kid !== undefined) {
-                    jwk.kid = kid;
-                }
-                return jwk;
+                const key = jscrypto.createPrivateKey({
+                    key: pem,
+                });
+                const jwk = key.export({
+                    format: "jwk",
+                });
+                return {
+                    d: jwk.d,
+                    crv: jwk.crv,
+                    x: jwk.x,
+                    y: jwk.y,
+                    kty: jwk.kty,
+                    kid: kid,
+                };
             },
             pubRsaPemToJwk(pem, kid) {
-                let jwk = rs.KEYUTIL.getJWK(rs.KEYUTIL.getKey(pem));
-                if (kid !== undefined) {
-                    jwk.kid = kid;
-                }
-                return jwk;
+                const key = jscrypto.createPublicKey({
+                    key: pem,
+                });
+                const jwk = key.export({
+                    format: "jwk",
+                });
+                return {
+                    n: jwk.n,
+                    e: jwk.e,
+                    kty: jwk.kty,
+                    kid: kid,
+                };
             },
             rsaPemToJwk(pem, kid) {
-                let jwk = rs.KEYUTIL.getJWK(rs.KEYUTIL.getKey(pem));
-                if (kid !== undefined) {
-                    jwk.kid = kid;
-                }
-                return jwk;
+                const key = jscrypto.createPrivateKey({
+                    key: pem,
+                });
+                const jwk = key.export({
+                    format: "jwk",
+                });
+                return {
+                    d: jwk.d,
+                    p: jwk.p,
+                    q: jwk.d,
+                    dp: jwk.dp,
+                    dq: jwk.dq,
+                    qi: jwk.qi,
+                    n: jwk.n,
+                    e: jwk.e,
+                    kty: jwk.kty,
+                    kid: kid,
+                };
+            },
+            pubEddsaPemToJwk(pem, kid) {
+                const key = jscrypto.createPublicKey({
+                    key: pem,
+                });
+                const jwk = key.export({
+                    format: "jwk",
+                });
+                return {
+                    crv: jwk.crv,
+                    x: jwk.x,
+                    kty: jwk.kty,
+                    kid: kid,
+                };
+            },
+            eddsaPemToJwk(pem, kid) {
+                const key = jscrypto.createPrivateKey({
+                    key: pem,
+                });
+                const jwk = key.export({
+                    format: "jwk",
+                });
+                return {
+                    crv: jwk.crv,
+                    x: jwk.x,
+                    d: jwk.d,
+                    kty: jwk.kty,
+                    kid: kid,
+                };
             },
         };
     }