@mysten/signers 0.1.12 → 0.1.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mysten/signers",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "A collection of KMS signers for various cloud providers",
   "license": "Apache-2.0",
   "author": "Mysten Labs <build@mystenlabs.com>",
@@ -13,6 +13,10 @@
     "./gcp": {
       "import": "./dist/esm/gcp/index.js",
       "require": "./dist/cjs/gcp/index.js"
+    },
+    "./webcrypto": {
+      "import": "./dist/esm/webcrypto/index.js",
+      "require": "./dist/cjs/webcrypto/index.js"
     }
   },
   "sideEffects": false,
@@ -23,7 +27,8 @@
     "aws",
     "dist",
     "gcp",
-    "src"
+    "src",
+    "webcrypto"
   ],
   "repository": {
     "type": "git",

package/src/webcrypto/index.ts

@@ -0,0 +1,93 @@
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+
+import type { SignatureScheme } from '@mysten/sui/cryptography';
+import { Signer } from '@mysten/sui/cryptography';
+import { Secp256r1PublicKey } from '@mysten/sui/keypairs/secp256r1';
+import { secp256r1 } from '@noble/curves/p256';
+
+// Convert from uncompressed (65 bytes) to compressed (33 bytes) format
+function getCompressedPublicKey(publicKey: Uint8Array) {
+	const rawBytes = new Uint8Array(publicKey);
+	const x = rawBytes.slice(1, 33);
+	const y = rawBytes.slice(33, 65);
+
+	const prefix = (y[31] & 1) === 0 ? 0x02 : 0x03;
+
+	const compressed = new Uint8Array(Secp256r1PublicKey.SIZE);
+	compressed[0] = prefix;
+	compressed.set(x, 1);
+
+	return compressed;
+}
+
+export interface ExportedWebCryptoKeypair {
+	privateKey: CryptoKey;
+	publicKey: Uint8Array;
+}
+
+export class WebCryptoSigner extends Signer {
+	privateKey: CryptoKey;
+
+	#publicKey: Secp256r1PublicKey;
+
+	static async generate({ extractable = false }: { extractable?: boolean } = {}) {
+		const keypair = await globalThis.crypto.subtle.generateKey(
+			{
+				name: 'ECDSA',
+				namedCurve: 'P-256',
+			},
+			extractable,
+			['sign', 'verify'],
+		);
+
+		const publicKey = await globalThis.crypto.subtle.exportKey('raw', keypair.publicKey);
+
+		return new WebCryptoSigner(
+			keypair.privateKey,
+			getCompressedPublicKey(new Uint8Array(publicKey)),
+		);
+	}
+
+	static import(data: ExportedWebCryptoKeypair) {
+		return new WebCryptoSigner(data.privateKey, data.publicKey);
+	}
+
+	getKeyScheme(): SignatureScheme {
+		return 'Secp256r1';
+	}
+
+	constructor(privateKey: CryptoKey, publicKey: Uint8Array) {
+		super();
+		this.privateKey = privateKey;
+		this.#publicKey = new Secp256r1PublicKey(publicKey);
+	}
+
+	// Exports the keypair to store in IndexedDB.
+	export(): ExportedWebCryptoKeypair {
+		// TODO: Should we add something like `toJSON` on this so that if you attempt to serialize it throws?
+		return {
+			privateKey: this.privateKey,
+			publicKey: this.#publicKey.toRawBytes(),
+		};
+	}
+
+	getPublicKey() {
+		return this.#publicKey;
+	}
+
+	async sign(bytes: Uint8Array): Promise<Uint8Array> {
+		const rawSignature = await globalThis.crypto.subtle.sign(
+			{
+				name: 'ECDSA',
+				hash: 'SHA-256',
+			},
+			this.privateKey,
+			bytes,
+		);
+
+		const signature = secp256r1.Signature.fromCompact(new Uint8Array(rawSignature));
+
+		return signature.normalizeS().toCompactRawBytes();
+	}
+}

package/webcrypto/package.json

@@ -0,0 +1,6 @@
+{
+	"private": true,
+	"import": "../dist/esm/webcrypto/index.js",
+	"main": "../dist/cjs/webcrypto/index.js",
+	"sideEffects": false
+}