@noz-ele/edgca 0.2.0 → 0.4.0

package/dist/bytes.d.ts

@@ -6,4 +6,5 @@ export declare function bytesToBinary(bytes: Uint8Array): string;
 export declare function binaryToBytes(binary: string): Uint8Array;
 export declare function cloneBytes(bytes: Uint8Array): Uint8Array;
 export declare function arrayBufferFromBytes(bytes: Uint8Array): ArrayBuffer;
+export declare function randomBytes(length: number): Uint8Array;
 //# sourceMappingURL=bytes.d.ts.map

package/dist/bytes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../src/bytes.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,CAWpE;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAWhE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEnD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAYpD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAUvD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAQxD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAExD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAInE"}
+{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../src/bytes.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,CAWpE;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAWhE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEnD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAYpD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAUvD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAQxD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAExD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAInE;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAItD"}

package/dist/bytes.js

@@ -56,3 +56,8 @@ export function arrayBufferFromBytes(bytes) {
     copy.set(bytes);
     return copy.buffer;
 }
+export function randomBytes(length) {
+    const bytes = new Uint8Array(length);
+    crypto.getRandomValues(bytes);
+    return bytes;
+}

package/dist/ca.d.ts

@@ -1,7 +1,8 @@
-import type { CertificateAuthority, CreateRootCAOptions, ImportCertificateAuthorityOptions, IssueClientCertForPublicKeyOptions, IssueClientCertOptions, IssueIntermediateCAOptions, IssuedClientCertificate, IssuedClientCertificateForPublicKey } from "./types.js";
+import type { CertificateAuthority, CreateRootCAOptions, ImportCertificateAuthorityOptions, IssueClientCertForPublicKeyOptions, IssueClientCertOptions, IssueDocumentSigningCertOptions, IssueIntermediateCAOptions, IssuedClientCertificate, IssuedClientCertificateForPublicKey, IssuedDocumentSigningCertificate } from "./types.js";
 export declare function createRootCA(options: CreateRootCAOptions): Promise<CertificateAuthority>;
 export declare function issueIntermediateCA(options: IssueIntermediateCAOptions): Promise<CertificateAuthority>;
 export declare function issueClientCert(options: IssueClientCertOptions): Promise<IssuedClientCertificate>;
 export declare function issueClientCertForPublicKey(options: IssueClientCertForPublicKeyOptions): Promise<IssuedClientCertificateForPublicKey>;
+export declare function issueDocumentSigningCert(options: IssueDocumentSigningCertOptions): Promise<IssuedDocumentSigningCertificate>;
 export declare function importCertificateAuthority(options: ImportCertificateAuthorityOptions): Promise<CertificateAuthority>;
 //# sourceMappingURL=ca.d.ts.map

package/dist/ca.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ca.d.ts","sourceRoot":"","sources":["../src/ca.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iCAAiC,EACjC,kCAAkC,EAClC,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,mCAAmC,EAEpC,MAAM,YAAY,CAAC;AAapB,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0B9F;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAgC5G;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAqBvG;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,mCAAmC,CAAC,CAkB9C;AAuDD,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAe1H"}
+{"version":3,"file":"ca.d.ts","sourceRoot":"","sources":["../src/ca.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iCAAiC,EACjC,kCAAkC,EAClC,sBAAsB,EACtB,+BAA+B,EAC/B,0BAA0B,EAC1B,uBAAuB,EACvB,mCAAmC,EACnC,gCAAgC,EAEjC,MAAM,YAAY,CAAC;AAcpB,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0B9F;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAgC5G;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAoBvG;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,mCAAmC,CAAC,CAiB9C;AAuED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,gCAAgC,CAAC,CAoB3C;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAe1H"}

package/dist/ca.js

@@ -3,7 +3,7 @@ import { assertKeyPairMatches, curveOf, exportSpki, generateKeyPair, keyIdentifi
 import { encodeName } from "./name.js";
 import { certificateToPem, pemToDer, pemToDerWithLabel, splitPemBlocks } from "./pem.js";
 import { parseCertificateDer } from "./parser.js";
-import { authorityKeyIdentifierExtension, basicConstraintsCaExtension, basicConstraintsLeafExtension, buildCertificate, buildTbsCertificate, extendedKeyUsageClientAuthExtension, keyUsageExtension, subjectAltNameExtension, subjectKeyIdentifierExtension } from "./x509.js";
+import { authorityKeyIdentifierExtension, basicConstraintsCaExtension, basicConstraintsLeafExtension, buildCertificate, buildTbsCertificate, extendedKeyUsageClientAuthExtension, extendedKeyUsageDocumentSigningExtension, keyUsageExtension, subjectAltNameExtension, subjectKeyIdentifierExtension } from "./x509.js";
 export async function createRootCA(options) {
     const keyPair = await resolveKeyPair(options.keyPair);
     const issuerCurve = curveOf(keyPair.privateKey);
@@ -65,14 +65,12 @@ export async function issueIntermediateCA(options) {
 }
 export async function issueClientCert(options) {
     const keyPair = await generateKeyPair();
-    const built = await buildClientCertificate(options.ca, keyPair.publicKey, {
+    const built = await buildLeafCertificate(options.ca, keyPair.publicKey, {
         subject: options.subject,
         days: options.days,
         notBefore: options.notBefore,
-        serialNumber: options.serialNumber,
-        dnsNames: options.dnsNames,
-        ipAddresses: options.ipAddresses
-    });
+        serialNumber: options.serialNumber
+    }, clientCertProfileExtensions(options.dnsNames, options.ipAddresses));
     return {
         certPem: built.certPem,
         certDer: built.certDer,
@@ -82,42 +80,36 @@ export async function issueClientCert(options) {
     };
 }
 export async function issueClientCertForPublicKey(options) {
-    const built = await buildClientCertificate(options.ca, options.publicKey, {
+    const built = await buildLeafCertificate(options.ca, options.publicKey, {
         subject: options.subject,
         days: options.days,
         notBefore: options.notBefore,
-        serialNumber: options.serialNumber,
-        dnsNames: options.dnsNames,
-        ipAddresses: options.ipAddresses
-    });
+        serialNumber: options.serialNumber
+    }, clientCertProfileExtensions(options.dnsNames, options.ipAddresses));
     return {
         certPem: built.certPem,
         certDer: built.certDer,
         certChainPem: built.certChainPem
     };
 }
-async function buildClientCertificate(ca, subjectPublicKey, content) {
+async function buildLeafCertificate(ca, subjectPublicKey, identity, profileExtensions) {
     const issuer = await parseIssuer(ca);
     const issuerChainPem = ca.issuerChainPem;
     assertCanIssueCertificate(issuer);
     const issuerCurve = curveOf(ca.privateKey);
-    const subjectNameDer = encodeName(content.subject);
+    const subjectNameDer = encodeName(identity.subject);
     const spki = await exportSpki(subjectPublicKey);
     const subjectKeyIdentifier = await keyIdentifierFromSpki(spki);
     const authorityKeyIdentifier = issuer.subjectKeyIdentifier ?? await keyIdentifierFromSpki(issuer.subjectPublicKeyInfoDer);
-    const san = subjectAltNameExtension(content.dnsNames, content.ipAddresses);
     const extensions = [
-        basicConstraintsLeafExtension(),
-        keyUsageExtension(["digitalSignature"]),
-        extendedKeyUsageClientAuthExtension(),
+        ...profileExtensions,
         subjectKeyIdentifierExtension(subjectKeyIdentifier),
-        authorityKeyIdentifierExtension(authorityKeyIdentifier),
-        ...(san ? [san] : [])
+        authorityKeyIdentifierExtension(authorityKeyIdentifier)
     ];
     const { tbsCertificateDer } = buildTbsCertificate({
-        serialNumber: content.serialNumber,
-        notBefore: content.notBefore,
-        days: content.days,
+        serialNumber: identity.serialNumber,
+        notBefore: identity.notBefore,
+        days: identity.days,
         issuerNameDer: issuer.subjectNameDer,
         subjectNameDer,
         subjectPublicKeyInfoDer: spki,
@@ -133,6 +125,38 @@ async function buildClientCertificate(ca, subjectPublicKey, content) {
         certChainPem: joinPemChain([certPem, ca.certPem, issuerChainPem])
     };
 }
+function clientCertProfileExtensions(dnsNames, ipAddresses) {
+    const san = subjectAltNameExtension(dnsNames, ipAddresses);
+    return [
+        basicConstraintsLeafExtension(),
+        keyUsageExtension(["digitalSignature"]),
+        extendedKeyUsageClientAuthExtension(),
+        ...(san ? [san] : [])
+    ];
+}
+function documentSigningProfileExtensions() {
+    return [
+        basicConstraintsLeafExtension(),
+        keyUsageExtension(["digitalSignature", "contentCommitment"]),
+        extendedKeyUsageDocumentSigningExtension()
+    ];
+}
+export async function issueDocumentSigningCert(options) {
+    const keyPair = await generateKeyPair();
+    const built = await buildLeafCertificate(options.ca, keyPair.publicKey, {
+        subject: options.subject,
+        days: options.days,
+        notBefore: options.notBefore,
+        serialNumber: options.serialNumber
+    }, documentSigningProfileExtensions());
+    return {
+        certPem: built.certPem,
+        certDer: built.certDer,
+        privateKey: keyPair.privateKey,
+        publicKey: keyPair.publicKey,
+        certChainPem: built.certChainPem
+    };
+}
 export async function importCertificateAuthority(options) {
     const issuerChainPem = options.issuerChainPem ?? "";
     assertIssuerChainPem(issuerChainPem);

package/dist/der.d.ts

@@ -31,6 +31,7 @@ export declare function boolean(value: boolean): Uint8Array;
 export declare function integer(value: bigint | number | Uint8Array): Uint8Array;
 export declare function bitString(bytes: Uint8Array, unusedBits?: number): Uint8Array;
 export declare function octetString(bytes: Uint8Array): Uint8Array;
+export declare function nullValue(): Uint8Array;
 export declare function utf8String(value: string): Uint8Array;
 export declare function printableString(value: string): Uint8Array;
 export declare function ia5String(value: string): Uint8Array;

package/dist/der.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"der.d.ts","sourceRoot":"","sources":["../src/der.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,GAAG;;;;;;;;;;;;;;CAcN,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAE9D;AAED,wBAAgB,QAAQ,CAAC,GAAG,QAAQ,EAAE,UAAU,EAAE,GAAG,UAAU,CAE9D;AAED,wBAAgB,GAAG,CAAC,GAAG,QAAQ,EAAE,UAAU,EAAE,GAAG,UAAU,CAEzD;AAED,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAEzE;AAED,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAmB7C;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAElD;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CA4BvE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,SAAI,GAAG,UAAU,CAMvE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAEzD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEpD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAMzD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAEjF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAO9C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAMtD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,SAAI,GAAG,UAAU,CAuBrE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,EAAE,CAMtE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE,CAW5D;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CA4CnD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAevD"}
+{"version":3,"file":"der.d.ts","sourceRoot":"","sources":["../src/der.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,GAAG;;;;;;;;;;;;;;CAcN,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAE9D;AAED,wBAAgB,QAAQ,CAAC,GAAG,QAAQ,EAAE,UAAU,EAAE,GAAG,UAAU,CAE9D;AAED,wBAAgB,GAAG,CAAC,GAAG,QAAQ,EAAE,UAAU,EAAE,GAAG,UAAU,CAEzD;AAED,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAEzE;AAED,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAmB7C;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAElD;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CA4BvE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,SAAI,GAAG,UAAU,CAMvE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAEzD;AAED,wBAAgB,SAAS,IAAI,UAAU,CAEtC;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEpD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAMzD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAEjF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAO9C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAMtD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,SAAI,GAAG,UAAU,CAuBrE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,EAAE,CAMtE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE,CAW5D;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CA4CnD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAevD"}

package/dist/der.js

@@ -79,6 +79,9 @@ export function bitString(bytes, unusedBits = 0) {
 export function octetString(bytes) {
     return der(TAG.OCTET_STRING, bytes);
 }
+export function nullValue() {
+    return new Uint8Array([TAG.NULL, 0x00]);
+}
 export function utf8String(value) {
     return der(TAG.UTF8_STRING, utf8Bytes(value));
 }

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-export { createRootCA, importCertificateAuthority, issueClientCert, issueClientCertForPublicKey, issueIntermediateCA } from "./ca.js";
+export { createRootCA, importCertificateAuthority, issueClientCert, issueClientCertForPublicKey, issueDocumentSigningCert, issueIntermediateCA } from "./ca.js";
 export { parseCertificateSigningRequest, verifyCertificateSigningRequestSignature, type ParsedCertificateSigningRequest, type CertificateSigningRequestExtension, type CertificateSigningRequestAttribute } from "./csr.js";
 export { pemToDer, certificateToPem } from "./pem.js";
+export { exportPkcs12, type ExportPkcs12Input } from "./pkcs12.js";
 export { verifyClientCertificateIssuedBy, type VerifyClientCertificateIssuedByOptions, type VerifyClientCertificateValidity } from "./verify.js";
-export type { CertificateAuthority, CreateRootCAOptions, ImportCertificateAuthorityOptions, IssueClientCertForPublicKeyOptions, IssueClientCertOptions, IssueIntermediateCAOptions, IssuedClientCertificate, IssuedClientCertificateForPublicKey, SerialNumber, ShortSubjectAttributeType, Subject, SubjectAttribute, SubjectAttributeType } from "./types.js";
+export type { CertificateAuthority, CreateRootCAOptions, ImportCertificateAuthorityOptions, IssueClientCertForPublicKeyOptions, IssueClientCertOptions, IssueDocumentSigningCertOptions, IssueIntermediateCAOptions, IssuedClientCertificate, IssuedClientCertificateForPublicKey, IssuedDocumentSigningCertificate, SerialNumber, ShortSubjectAttributeType, Subject, SubjectAttribute, SubjectAttributeType } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,0BAA0B,EAC1B,eAAe,EACf,2BAA2B,EAC3B,mBAAmB,EACpB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,EACxC,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,kCAAkC,EACxC,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EACL,+BAA+B,EAC/B,KAAK,sCAAsC,EAC3C,KAAK,+BAA+B,EACrC,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iCAAiC,EACjC,kCAAkC,EAClC,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,mCAAmC,EACnC,YAAY,EACZ,yBAAyB,EACzB,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,0BAA0B,EAC1B,eAAe,EACf,2BAA2B,EAC3B,wBAAwB,EACxB,mBAAmB,EACpB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,EACxC,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,kCAAkC,EACxC,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,+BAA+B,EAC/B,KAAK,sCAAsC,EAC3C,KAAK,+BAA+B,EACrC,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iCAAiC,EACjC,kCAAkC,EAClC,sBAAsB,EACtB,+BAA+B,EAC/B,0BAA0B,EAC1B,uBAAuB,EACvB,mCAAmC,EACnC,gCAAgC,EAChC,YAAY,EACZ,yBAAyB,EACzB,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
-export { createRootCA, importCertificateAuthority, issueClientCert, issueClientCertForPublicKey, issueIntermediateCA } from "./ca.js";
+export { createRootCA, importCertificateAuthority, issueClientCert, issueClientCertForPublicKey, issueDocumentSigningCert, issueIntermediateCA } from "./ca.js";
 export { parseCertificateSigningRequest, verifyCertificateSigningRequestSignature } from "./csr.js";
 export { pemToDer, certificateToPem } from "./pem.js";
+export { exportPkcs12 } from "./pkcs12.js";
 export { verifyClientCertificateIssuedBy } from "./verify.js";

package/dist/oids.d.ts

@@ -14,7 +14,20 @@ export declare const OID: {
     readonly subjectKeyIdentifier: "2.5.29.14";
     readonly authorityKeyIdentifier: "2.5.29.35";
     readonly clientAuth: "1.3.6.1.5.5.7.3.2";
+    readonly documentSigning: "1.3.6.1.5.5.7.3.36";
     readonly extensionRequest: "1.2.840.113549.1.9.14";
+    readonly data: "1.2.840.113549.1.7.1";
+    readonly encryptedData: "1.2.840.113549.1.7.6";
+    readonly friendlyName: "1.2.840.113549.1.9.20";
+    readonly localKeyId: "1.2.840.113549.1.9.21";
+    readonly x509Certificate: "1.2.840.113549.1.9.22.1";
+    readonly certBag: "1.2.840.113549.1.12.10.1.3";
+    readonly pkcs8ShroudedKeyBag: "1.2.840.113549.1.12.10.1.2";
+    readonly pbes2: "1.2.840.113549.1.5.13";
+    readonly pbkdf2: "1.2.840.113549.1.5.12";
+    readonly hmacWithSha256: "1.2.840.113549.2.9";
+    readonly aes256Cbc: "2.16.840.1.101.3.4.1.42";
+    readonly sha256: "2.16.840.1.101.3.4.2.1";
 };
 export declare const SUBJECT_ATTRIBUTE_OIDS: Record<ShortSubjectAttributeType, string>;
 export declare const SUBJECT_VALUE_LENGTH_LIMITS: Record<ShortSubjectAttributeType, number>;

package/dist/oids.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oids.d.ts","sourceRoot":"","sources":["../src/oids.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;CAgBN,CAAC;AAEX,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAgB5E,CAAC;AAGF,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAgBjF,CAAC;AAIF,eAAO,MAAM,wBAAwB,MAAM,CAAC"}
+{"version":3,"file":"oids.d.ts","sourceRoot":"","sources":["../src/oids.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BN,CAAC;AAEX,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAgB5E,CAAC;AAGF,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAgBjF,CAAC;AAIF,eAAO,MAAM,wBAAwB,MAAM,CAAC"}

package/dist/oids.js

@@ -13,7 +13,20 @@ export const OID = {
     subjectKeyIdentifier: "2.5.29.14",
     authorityKeyIdentifier: "2.5.29.35",
     clientAuth: "1.3.6.1.5.5.7.3.2",
-    extensionRequest: "1.2.840.113549.1.9.14"
+    documentSigning: "1.3.6.1.5.5.7.3.36",
+    extensionRequest: "1.2.840.113549.1.9.14",
+    data: "1.2.840.113549.1.7.1",
+    encryptedData: "1.2.840.113549.1.7.6",
+    friendlyName: "1.2.840.113549.1.9.20",
+    localKeyId: "1.2.840.113549.1.9.21",
+    x509Certificate: "1.2.840.113549.1.9.22.1",
+    certBag: "1.2.840.113549.1.12.10.1.3",
+    pkcs8ShroudedKeyBag: "1.2.840.113549.1.12.10.1.2",
+    pbes2: "1.2.840.113549.1.5.13",
+    pbkdf2: "1.2.840.113549.1.5.12",
+    hmacWithSha256: "1.2.840.113549.2.9",
+    aes256Cbc: "2.16.840.1.101.3.4.1.42",
+    sha256: "2.16.840.1.101.3.4.2.1"
 };
 export const SUBJECT_ATTRIBUTE_OIDS = {
     CN: "2.5.4.3",

package/dist/pkcs12.d.ts

@@ -0,0 +1,11 @@
+export interface ExportPkcs12Input {
+    certDer: Uint8Array;
+    chainDer?: Uint8Array[];
+    privateKey: CryptoKey;
+    password: Uint8Array;
+    friendlyName?: Uint8Array;
+    iterations?: number;
+    macIterations?: number;
+}
+export declare function exportPkcs12(input: ExportPkcs12Input): Promise<Uint8Array>;
+//# sourceMappingURL=pkcs12.d.ts.map

package/dist/pkcs12.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkcs12.d.ts","sourceRoot":"","sources":["../src/pkcs12.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB,UAAU,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,UAAU,CAAC;IACrB,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAUD,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CA8FhF"}

package/dist/pkcs12.js

@@ -0,0 +1,248 @@
+import { arrayBufferFromBytes, concatBytes, randomBytes } from "./bytes.js";
+import { digestSha256, keyIdentifierFromSpki } from "./crypto.js";
+import { contextPrimitive, der, explicit, integer, nullValue, octetString, oid, sequence, set } from "./der.js";
+import { OID } from "./oids.js";
+import { parseCertificateDer } from "./parser.js";
+const DEFAULT_PBKDF2_ITERATIONS = 600_000;
+const DEFAULT_MAC_ITERATIONS = 100_000;
+const SALT_LENGTH = 16;
+const IV_LENGTH = 16;
+const MAC_KEY_LENGTH = 32;
+const SHA256_BLOCK_SIZE = 64;
+const PKCS12_KDF_ID_MAC = 3;
+export async function exportPkcs12(input) {
+    const iterations = input.iterations ?? DEFAULT_PBKDF2_ITERATIONS;
+    const macIterations = input.macIterations ?? DEFAULT_MAC_ITERATIONS;
+    validateInput(input, iterations, macIterations);
+    const parsedLeaf = await parseCertificateDer(input.certDer);
+    const localKeyId = await keyIdentifierFromSpki(parsedLeaf.subjectPublicKeyInfoDer);
+    const friendlyNameAttr = input.friendlyName !== undefined && input.friendlyName.length > 0
+        ? buildFriendlyNameAttr(input.friendlyName)
+        : undefined;
+    const localKeyIdAttr = buildLocalKeyIdAttr(localKeyId);
+    const leafAttrs = friendlyNameAttr ? [localKeyIdAttr, friendlyNameAttr] : [localKeyIdAttr];
+    const certBags = [buildCertSafeBag(input.certDer, leafAttrs)];
+    if (input.chainDer) {
+        for (const c of input.chainDer) {
+            certBags.push(buildCertSafeBag(c, []));
+        }
+    }
+    const certSafeContents = sequence(...certBags);
+    // Import the password into a non-extractable PBKDF2 baseKey once and reuse
+    // it across both cert-bag and key-bag encryption. This halves the number of
+    // password-byte ArrayBuffer copies handed to WebCrypto (which we cannot
+    // wipe) from two to one.
+    const pbkdf2BaseKey = await crypto.subtle.importKey("raw", arrayBufferFromBytes(input.password), "PBKDF2", false, ["deriveKey"]);
+    const certEncrypted = await pbes2EncryptAesCbc(certSafeContents, pbkdf2BaseKey, iterations);
+    const certContentInfo = sequence(oid(OID.encryptedData), explicit(0, sequence(integer(0n), sequence(oid(OID.data), certEncrypted.algorithm, contextPrimitive(0, certEncrypted.ciphertext)))));
+    const pkcs8 = new Uint8Array(await crypto.subtle.exportKey("pkcs8", input.privateKey));
+    const keyEncrypted = await pbes2EncryptAesCbc(pkcs8, pbkdf2BaseKey, iterations);
+    wipe(pkcs8);
+    const epki = sequence(keyEncrypted.algorithm, octetString(keyEncrypted.ciphertext));
+    const keyBag = buildKeySafeBag(epki, leafAttrs);
+    const keySafeContents = sequence(keyBag);
+    const keyContentInfo = sequence(oid(OID.data), explicit(0, octetString(keySafeContents)));
+    const authenticatedSafe = sequence(certContentInfo, keyContentInfo);
+    const macSalt = randomBytes(SALT_LENGTH);
+    const passwordUtf16 = utf8ToUtf16BeWithTerminator(input.password);
+    const macKey = await pkcs12V1KdfMacKey(passwordUtf16, macSalt, macIterations);
+    wipe(passwordUtf16);
+    const macKeyHandle = await crypto.subtle.importKey("raw", arrayBufferFromBytes(macKey), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    wipe(macKey);
+    const mac = new Uint8Array(await crypto.subtle.sign("HMAC", macKeyHandle, arrayBufferFromBytes(authenticatedSafe)));
+    const macData = sequence(sequence(sequence(oid(OID.sha256), nullValue()), octetString(mac)), octetString(macSalt), integer(BigInt(macIterations)));
+    const pfxAuthSafeContentInfo = sequence(oid(OID.data), explicit(0, octetString(authenticatedSafe)));
+    return sequence(integer(3n), pfxAuthSafeContentInfo, macData);
+}
+function validateInput(input, iterations, macIterations) {
+    if (!(input.password instanceof Uint8Array) || input.password.length === 0) {
+        throw new Error("password must be a non-empty Uint8Array of UTF-8 bytes");
+    }
+    if (!input.privateKey.extractable) {
+        throw new Error("privateKey must be extractable");
+    }
+    if (input.privateKey.algorithm.name !== "ECDSA") {
+        throw new Error("privateKey must be an ECDSA key");
+    }
+    if (!Number.isInteger(iterations) || iterations < 1) {
+        throw new Error("iterations must be a positive integer");
+    }
+    if (!Number.isInteger(macIterations) || macIterations < 1) {
+        throw new Error("macIterations must be a positive integer");
+    }
+    if (input.friendlyName !== undefined && !(input.friendlyName instanceof Uint8Array)) {
+        throw new Error("friendlyName must be a Uint8Array of UTF-8 bytes");
+    }
+}
+function buildCertSafeBag(certDer, attrs) {
+    const certBagInner = sequence(oid(OID.x509Certificate), explicit(0, octetString(certDer)));
+    return safeBag(OID.certBag, certBagInner, attrs);
+}
+function buildKeySafeBag(encryptedPrivateKeyInfo, attrs) {
+    return safeBag(OID.pkcs8ShroudedKeyBag, encryptedPrivateKeyInfo, attrs);
+}
+function safeBag(bagOid, bagValue, attrs) {
+    const parts = [oid(bagOid), explicit(0, bagValue)];
+    if (attrs.length > 0) {
+        parts.push(canonicalSetOf(attrs));
+    }
+    return sequence(...parts);
+}
+// X.690 §11.6: SET OF components are encoded in ascending order of their
+// encoded octet strings, with the shorter component padded with trailing
+// 0-octets for the comparison. Used for bagAttributes.
+function canonicalSetOf(children) {
+    const sorted = [...children].sort(derSetCompare);
+    return set(...sorted);
+}
+function derSetCompare(a, b) {
+    const len = Math.max(a.length, b.length);
+    for (let i = 0; i < len; i += 1) {
+        const av = i < a.length ? a[i] : 0;
+        const bv = i < b.length ? b[i] : 0;
+        if (av !== bv)
+            return av - bv;
+    }
+    return 0;
+}
+function buildLocalKeyIdAttr(localKeyId) {
+    return sequence(oid(OID.localKeyId), set(octetString(localKeyId)));
+}
+function buildFriendlyNameAttr(friendlyNameUtf8) {
+    return sequence(oid(OID.friendlyName), set(bmpString(friendlyNameUtf8)));
+}
+function bmpString(utf8) {
+    const utf16 = utf8ToUtf16Be(utf8);
+    return der(0x1e, utf16);
+}
+async function pbes2EncryptAesCbc(plaintext, pbkdf2BaseKey, iterations) {
+    const salt = randomBytes(SALT_LENGTH);
+    const iv = randomBytes(IV_LENGTH);
+    const aesKey = await crypto.subtle.deriveKey({ name: "PBKDF2", salt: arrayBufferFromBytes(salt), iterations, hash: "SHA-256" }, pbkdf2BaseKey, { name: "AES-CBC", length: 256 }, false, ["encrypt"]);
+    const ciphertext = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-CBC", iv: arrayBufferFromBytes(iv) }, aesKey, arrayBufferFromBytes(plaintext)));
+    return {
+        algorithm: algorithmIdentifierPbes2(salt, iterations, iv),
+        ciphertext
+    };
+}
+function algorithmIdentifierPbes2(salt, iterations, iv) {
+    const pbkdf2Params = sequence(octetString(salt), integer(BigInt(iterations)), sequence(oid(OID.hmacWithSha256), nullValue()));
+    const keyDerivationFunc = sequence(oid(OID.pbkdf2), pbkdf2Params);
+    const encryptionScheme = sequence(oid(OID.aes256Cbc), octetString(iv));
+    return sequence(oid(OID.pbes2), sequence(keyDerivationFunc, encryptionScheme));
+}
+// PKCS#12 v1 KDF (RFC 7292 App.B) producing an HMAC-SHA-256 key (32 bytes).
+// Specialized for ID=3, n=u=32, v=64. Single-block output: no I update needed.
+async function pkcs12V1KdfMacKey(passwordUtf16, salt, iterations) {
+    const v = SHA256_BLOCK_SIZE;
+    const D = new Uint8Array(v).fill(PKCS12_KDF_ID_MAC);
+    const sLen = Math.ceil(salt.length / v) * v;
+    const S2 = new Uint8Array(sLen);
+    for (let i = 0; i < sLen; i += 1) {
+        S2[i] = salt[i % salt.length];
+    }
+    const pLen = Math.ceil(passwordUtf16.length / v) * v;
+    const P2 = new Uint8Array(pLen);
+    for (let i = 0; i < pLen; i += 1) {
+        P2[i] = passwordUtf16[i % passwordUtf16.length];
+    }
+    const I = concatBytes([S2, P2]);
+    // T_0 holds D || S2 || P2 (raw password bytes embedded in P2).
+    // Each digestSha256 returns a fresh 32-byte buffer; the previous T's buffer
+    // becomes unreachable but, without an explicit wipe, would sit on the JS
+    // heap until GC. Zero it before reassigning. Successive Ts are H^j(D||I)
+    // values, which let an attacker reach H^c(D||I) = MAC key by continuing the
+    // chain — they're as sensitive as the MAC key itself.
+    let T = concatBytes([D, I]);
+    for (let j = 0; j < iterations; j += 1) {
+        const next = await digestSha256(T);
+        T.fill(0);
+        T = next;
+    }
+    wipe(D, S2, P2, I);
+    return T.subarray(0, MAC_KEY_LENGTH);
+}
+// Convert UTF-8 bytes to UTF-16BE bytes plus a 0x00 0x00 terminator,
+// without going through any JavaScript string. Walks code points by hand.
+function utf8ToUtf16BeWithTerminator(utf8) {
+    const utf16 = utf8ToUtf16Be(utf8);
+    const out = new Uint8Array(utf16.length + 2);
+    out.set(utf16, 0);
+    wipe(utf16);
+    return out;
+}
+// Two-pass to avoid an intermediate `number[]` that would retain
+// password-derived bytes on the JS heap until GC. Pass 1 sizes the output;
+// pass 2 writes directly into a tight Uint8Array. Both passes share the same
+// boundary checks so an invalid leader byte fails fast in pass 1.
+function utf8ToUtf16Be(utf8) {
+    let outLen = 0;
+    let i = 0;
+    while (i < utf8.length) {
+        const b1 = utf8[i];
+        if (b1 < 0x80) {
+            outLen += 2;
+            i += 1;
+        }
+        else if ((b1 & 0xe0) === 0xc0 && i + 1 < utf8.length) {
+            outLen += 2;
+            i += 2;
+        }
+        else if ((b1 & 0xf0) === 0xe0 && i + 2 < utf8.length) {
+            outLen += 2;
+            i += 3;
+        }
+        else if ((b1 & 0xf8) === 0xf0 && i + 3 < utf8.length) {
+            outLen += 4;
+            i += 4;
+        }
+        else {
+            throw new Error("Invalid UTF-8 sequence");
+        }
+    }
+    const out = new Uint8Array(outLen);
+    let oi = 0;
+    i = 0;
+    while (i < utf8.length) {
+        const b1 = utf8[i];
+        let cp;
+        if (b1 < 0x80) {
+            cp = b1;
+            i += 1;
+        }
+        else if ((b1 & 0xe0) === 0xc0) {
+            cp = ((b1 & 0x1f) << 6) | (utf8[i + 1] & 0x3f);
+            i += 2;
+        }
+        else if ((b1 & 0xf0) === 0xe0) {
+            cp = ((b1 & 0x0f) << 12) | ((utf8[i + 1] & 0x3f) << 6) | (utf8[i + 2] & 0x3f);
+            i += 3;
+        }
+        else {
+            cp = ((b1 & 0x07) << 18)
+                | ((utf8[i + 1] & 0x3f) << 12)
+                | ((utf8[i + 2] & 0x3f) << 6)
+                | (utf8[i + 3] & 0x3f);
+            i += 4;
+        }
+        if (cp < 0x10000) {
+            out[oi++] = (cp >> 8) & 0xff;
+            out[oi++] = cp & 0xff;
+        }
+        else {
+            const adj = cp - 0x10000;
+            const high = 0xd800 + ((adj >> 10) & 0x3ff);
+            const low = 0xdc00 + (adj & 0x3ff);
+            out[oi++] = (high >> 8) & 0xff;
+            out[oi++] = high & 0xff;
+            out[oi++] = (low >> 8) & 0xff;
+            out[oi++] = low & 0xff;
+        }
+    }
+    return out;
+}
+function wipe(...bufs) {
+    for (const b of bufs) {
+        b.fill(0);
+    }
+}

package/dist/types.d.ts

@@ -62,6 +62,20 @@ export interface IssuedClientCertificateForPublicKey {
     certDer: Uint8Array;
     certChainPem: string;
 }
+export interface IssueDocumentSigningCertOptions {
+    ca: CertificateAuthority;
+    subject: Subject;
+    days: number;
+    notBefore?: Date;
+    serialNumber?: SerialNumber;
+}
+export interface IssuedDocumentSigningCertificate {
+    certPem: string;
+    certDer: Uint8Array;
+    privateKey: CryptoKey;
+    publicKey: CryptoKey;
+    certChainPem: string;
+}
 export interface ImportCertificateAuthorityOptions {
     certPem: string;
     privateKey: CryptoKey;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GACjC,IAAI,GACJ,GAAG,GACH,IAAI,GACJ,GAAG,GACH,IAAI,GACJ,GAAG,GACH,GAAG,GACH,IAAI,GACJ,cAAc,GACd,QAAQ,GACR,YAAY,GACZ,OAAO,GACP,WAAW,GACX,SAAS,GACT,KAAK,CAAC;AAEV,MAAM,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;AAEzC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAEjE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,oBAAoB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,oBAAoB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,oBAAoB,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,SAAS,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GACjC,IAAI,GACJ,GAAG,GACH,IAAI,GACJ,GAAG,GACH,IAAI,GACJ,GAAG,GACH,GAAG,GACH,IAAI,GACJ,cAAc,GACd,QAAQ,GACR,YAAY,GACZ,OAAO,GACP,WAAW,GACX,SAAS,GACT,KAAK,CAAC;AAEV,MAAM,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;AAEzC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAEjE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,oBAAoB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,oBAAoB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,oBAAoB,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,oBAAoB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,SAAS,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/dist/x509.d.ts

@@ -23,11 +23,13 @@ export declare function basicConstraintsCaExtension(pathLenConstraint: number):
 export declare function basicConstraintsLeafExtension(): Uint8Array;
 export declare function keyUsageExtension(usages: readonly KeyUsageBit[]): Uint8Array;
 export declare function extendedKeyUsageClientAuthExtension(): Uint8Array;
+export declare function extendedKeyUsageDocumentSigningExtension(): Uint8Array;
 export declare function subjectKeyIdentifierExtension(keyIdentifier: Uint8Array): Uint8Array;
 export declare function authorityKeyIdentifierExtension(keyIdentifier: Uint8Array): Uint8Array;
 export declare function subjectAltNameExtension(dnsNames?: readonly string[], ipAddresses?: readonly string[]): Uint8Array | undefined;
 declare const KEY_USAGE_BITS: {
     readonly digitalSignature: 0;
+    readonly contentCommitment: 1;
     readonly keyCertSign: 5;
     readonly cRLSign: 6;
 };

package/dist/x509.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"x509.d.ts","sourceRoot":"","sources":["../src/x509.ts"],"names":[],"mappings":"AACA,OAAO,EAAiC,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAkBjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,qBAAqB;IACpC,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,UAAU,CAAC;IAC1B,cAAc,EAAE,UAAU,CAAC;IAC3B,uBAAuB,EAAE,UAAU,CAAC;IACpC,UAAU,EAAE,UAAU,EAAE,CAAC;IACzB,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,UAAU,CAAC;IAC9B,eAAe,EAAE,UAAU,CAAC;IAC5B,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,GAAG,oBAAoB,CAoBtF;AAED,wBAAgB,gBAAgB,CAC9B,iBAAiB,EAAE,UAAU,EAC7B,YAAY,EAAE,UAAU,EACxB,WAAW,EAAE,cAAc,GAC1B,UAAU,CAEZ;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAEnF;AAED,wBAAgB,2BAA2B,CAAC,iBAAiB,EAAE,MAAM,GAAG,UAAU,CAMjF;AAED,wBAAgB,6BAA6B,IAAI,UAAU,CAE1D;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,UAAU,CAgB5E;AAED,wBAAgB,mCAAmC,IAAI,UAAU,CAEhE;AAED,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,CAEnF;AAED,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,CAErF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,SAAS,CAmC7H;AAwID,QAAA,MAAM,cAAc;;;;CAIV,CAAC;AAEX,KAAK,WAAW,GAAG,MAAM,OAAO,cAAc,CAAC"}
+{"version":3,"file":"x509.d.ts","sourceRoot":"","sources":["../src/x509.ts"],"names":[],"mappings":"AACA,OAAO,EAAiC,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAkBjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,qBAAqB;IACpC,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,UAAU,CAAC;IAC1B,cAAc,EAAE,UAAU,CAAC;IAC3B,uBAAuB,EAAE,UAAU,CAAC;IACpC,UAAU,EAAE,UAAU,EAAE,CAAC;IACzB,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,UAAU,CAAC;IAC9B,eAAe,EAAE,UAAU,CAAC;IAC5B,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,GAAG,oBAAoB,CAoBtF;AAED,wBAAgB,gBAAgB,CAC9B,iBAAiB,EAAE,UAAU,EAC7B,YAAY,EAAE,UAAU,EACxB,WAAW,EAAE,cAAc,GAC1B,UAAU,CAEZ;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAEnF;AAED,wBAAgB,2BAA2B,CAAC,iBAAiB,EAAE,MAAM,GAAG,UAAU,CAMjF;AAED,wBAAgB,6BAA6B,IAAI,UAAU,CAE1D;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,UAAU,CAgB5E;AAED,wBAAgB,mCAAmC,IAAI,UAAU,CAEhE;AAED,wBAAgB,wCAAwC,IAAI,UAAU,CAErE;AAED,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,CAEnF;AAED,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,CAErF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,SAAS,CAmC7H;AAuID,QAAA,MAAM,cAAc;;;;;CAKV,CAAC;AAEX,KAAK,WAAW,GAAG,MAAM,OAAO,cAAc,CAAC"}

package/dist/x509.js

@@ -1,4 +1,4 @@
-import { asciiBytes, concatBytes } from "./bytes.js";
+import { asciiBytes, concatBytes, randomBytes } from "./bytes.js";
 import { signatureAlgorithmOidForCurve } from "./crypto.js";
 import { bitString, boolean, contextPrimitive, der, explicit, generalizedTime, integer, octetString, oid, readElement, sequence, TAG, utcTime } from "./der.js";
 import { encodeIpAddress } from "./ip.js";
@@ -43,6 +43,9 @@ export function keyUsageExtension(usages) {
 export function extendedKeyUsageClientAuthExtension() {
     return extension(OID.extendedKeyUsage, false, sequence(oid(OID.clientAuth)));
 }
+export function extendedKeyUsageDocumentSigningExtension() {
+    return extension(OID.extendedKeyUsage, false, sequence(oid(OID.documentSigning)));
+}
 export function subjectKeyIdentifierExtension(keyIdentifier) {
     return extension(OID.subjectKeyIdentifier, false, octetString(keyIdentifier));
 }
@@ -106,8 +109,7 @@ function encodeSerialNumber(serialNumber) {
 }
 function encodeSerialNumberDer(serialNumber) {
     if (serialNumber === undefined) {
-        const bytes = new Uint8Array(16);
-        crypto.getRandomValues(bytes);
+        const bytes = randomBytes(16);
         bytes[0] = bytes[0] & 0x7f;
         if (bytes.every((byte) => byte === 0)) {
             bytes[15] = 1;
@@ -193,6 +195,7 @@ function assertYearInRange(year, fieldName) {
 }
 const KEY_USAGE_BITS = {
     digitalSignature: 0,
+    contentCommitment: 1,
     keyCertSign: 5,
     cRLSign: 6
 };