@ohos-ports/react-native-quick-crypto 0.0.0-stage → 1.1.8-beta.0

package/cpp/dh/HybridDiffieHellman.hpp

@@ -0,0 +1,42 @@
+#pragma once
+
+#include <memory>
+#include <openssl/dh.h>
+#include <openssl/evp.h>
+#include <string>
+#include <vector>
+
+#include "HybridDiffieHellmanSpec.hpp"
+
+namespace margelo::nitro::crypto {
+
+using namespace facebook;
+using margelo::nitro::ArrayBuffer;
+
+using EVP_PKEY_ptr = std::unique_ptr<EVP_PKEY, decltype(&EVP_PKEY_free)>;
+
+class HybridDiffieHellman : public HybridDiffieHellmanSpec {
+ public:
+  HybridDiffieHellman() : HybridObject("DiffieHellman"), _pkey(nullptr, EVP_PKEY_free) {}
+  virtual ~HybridDiffieHellman() = default;
+
+  void init(const std::shared_ptr<ArrayBuffer>& prime, const std::shared_ptr<ArrayBuffer>& generator) override;
+  void initWithSize(double primeLength, double generator) override;
+  std::shared_ptr<ArrayBuffer> generateKeys() override;
+  std::shared_ptr<ArrayBuffer> computeSecret(const std::shared_ptr<ArrayBuffer>& otherPublicKey) override;
+  std::shared_ptr<ArrayBuffer> getPrime() override;
+  std::shared_ptr<ArrayBuffer> getGenerator() override;
+  std::shared_ptr<ArrayBuffer> getPublicKey() override;
+  std::shared_ptr<ArrayBuffer> getPrivateKey() override;
+  void setPublicKey(const std::shared_ptr<ArrayBuffer>& publicKey) override;
+  void setPrivateKey(const std::shared_ptr<ArrayBuffer>& privateKey) override;
+  double getVerifyError() override;
+
+ private:
+  EVP_PKEY_ptr _pkey;
+
+  void ensureInitialized() const;
+  const DH* getDH() const;
+};
+
+} // namespace margelo::nitro::crypto

package/cpp/dsa/HybridDsaKeyPair.cpp

@@ -0,0 +1,128 @@
+#include "HybridDsaKeyPair.hpp"
+
+#include <NitroModules/ArrayBuffer.hpp>
+#include <NitroModules/Promise.hpp>
+#include <memory>
+#include <openssl/bio.h>
+#include <openssl/buffer.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/pem.h>
+#include <stdexcept>
+#include <string>
+
+namespace margelo::nitro::crypto {
+
+void HybridDsaKeyPair::setModulusLength(double modulusLength) {
+  modulusLength_ = static_cast<int>(modulusLength);
+}
+
+void HybridDsaKeyPair::setDivisorLength(double divisorLength) {
+  divisorLength_ = static_cast<int>(divisorLength);
+}
+
+std::shared_ptr<Promise<void>> HybridDsaKeyPair::generateKeyPair() {
+  return Promise<void>::async([this]() { this->generateKeyPairSync(); });
+}
+
+void HybridDsaKeyPair::generateKeyPairSync() {
+  if (modulusLength_ <= 0) {
+    throw std::runtime_error("DSA modulusLength must be set before generating key pair");
+  }
+
+  pkey_.reset();
+
+  // Step 1: Generate DSA parameters
+  std::unique_ptr<EVP_PKEY_CTX, decltype(&EVP_PKEY_CTX_free)> param_ctx(EVP_PKEY_CTX_new_id(EVP_PKEY_DSA, nullptr), EVP_PKEY_CTX_free);
+
+  if (!param_ctx) {
+    throw std::runtime_error("DSA: failed to create parameter context");
+  }
+
+  if (EVP_PKEY_paramgen_init(param_ctx.get()) <= 0) {
+    throw std::runtime_error("DSA: failed to initialize parameter generation");
+  }
+
+  if (EVP_PKEY_CTX_set_dsa_paramgen_bits(param_ctx.get(), modulusLength_) <= 0) {
+    throw std::runtime_error("DSA: failed to set modulus length");
+  }
+
+  if (divisorLength_ >= 0) {
+    if (EVP_PKEY_CTX_set_dsa_paramgen_q_bits(param_ctx.get(), divisorLength_) <= 0) {
+      throw std::runtime_error("DSA: failed to set divisor length");
+    }
+  }
+
+  EVP_PKEY* raw_params = nullptr;
+  if (EVP_PKEY_paramgen(param_ctx.get(), &raw_params) <= 0) {
+    throw std::runtime_error("DSA: failed to generate parameters");
+  }
+
+  std::unique_ptr<EVP_PKEY, decltype(&EVP_PKEY_free)> params(raw_params, EVP_PKEY_free);
+
+  // Step 2: Generate key pair from parameters
+  std::unique_ptr<EVP_PKEY_CTX, decltype(&EVP_PKEY_CTX_free)> key_ctx(EVP_PKEY_CTX_new(params.get(), nullptr), EVP_PKEY_CTX_free);
+
+  if (!key_ctx) {
+    throw std::runtime_error("DSA: failed to create key generation context");
+  }
+
+  if (EVP_PKEY_keygen_init(key_ctx.get()) <= 0) {
+    throw std::runtime_error("DSA: failed to initialize key generation");
+  }
+
+  EVP_PKEY* raw_pkey = nullptr;
+  if (EVP_PKEY_keygen(key_ctx.get(), &raw_pkey) <= 0) {
+    throw std::runtime_error("DSA: failed to generate key pair");
+  }
+
+  pkey_.reset(raw_pkey);
+}
+
+std::shared_ptr<ArrayBuffer> HybridDsaKeyPair::getPublicKey() {
+  if (!pkey_) {
+    throw std::runtime_error("DSA: no key pair generated");
+  }
+
+  BIO* bio = BIO_new(BIO_s_mem());
+  if (!bio) {
+    throw std::runtime_error("DSA: failed to create BIO for public key export");
+  }
+
+  if (i2d_PUBKEY_bio(bio, pkey_.get()) != 1) {
+    BIO_free(bio);
+    throw std::runtime_error("DSA: failed to export public key");
+  }
+
+  BUF_MEM* mem;
+  BIO_get_mem_ptr(bio, &mem);
+  std::string derData(mem->data, mem->length);
+  BIO_free(bio);
+
+  return ToNativeArrayBuffer(derData);
+}
+
+std::shared_ptr<ArrayBuffer> HybridDsaKeyPair::getPrivateKey() {
+  if (!pkey_) {
+    throw std::runtime_error("DSA: no key pair generated");
+  }
+
+  BIO* bio = BIO_new(BIO_s_mem());
+  if (!bio) {
+    throw std::runtime_error("DSA: failed to create BIO for private key export");
+  }
+
+  if (i2d_PKCS8PrivateKey_bio(bio, pkey_.get(), nullptr, nullptr, 0, nullptr, nullptr) != 1) {
+    BIO_free(bio);
+    throw std::runtime_error("DSA: failed to export private key");
+  }
+
+  BUF_MEM* mem;
+  BIO_get_mem_ptr(bio, &mem);
+  std::string derData(mem->data, mem->length);
+  BIO_free(bio);
+
+  return ToNativeArrayBuffer(derData);
+}
+
+} // namespace margelo::nitro::crypto

package/cpp/dsa/HybridDsaKeyPair.hpp

@@ -0,0 +1,32 @@
+#pragma once
+
+#include <memory>
+#include <openssl/evp.h>
+
+#include "HybridDsaKeyPairSpec.hpp"
+#include "QuickCryptoUtils.hpp"
+
+namespace margelo::nitro::crypto {
+
+class HybridDsaKeyPair : public HybridDsaKeyPairSpec {
+ public:
+  HybridDsaKeyPair() : HybridObject(TAG) {}
+  ~HybridDsaKeyPair() override = default;
+
+ public:
+  std::shared_ptr<Promise<void>> generateKeyPair() override;
+  void generateKeyPairSync() override;
+  void setModulusLength(double modulusLength) override;
+  void setDivisorLength(double divisorLength) override;
+  std::shared_ptr<ArrayBuffer> getPublicKey() override;
+  std::shared_ptr<ArrayBuffer> getPrivateKey() override;
+
+ private:
+  int modulusLength_ = 0;
+  int divisorLength_ = -1;
+
+  using EVP_PKEY_ptr = std::unique_ptr<EVP_PKEY, decltype(&EVP_PKEY_free)>;
+  EVP_PKEY_ptr pkey_{nullptr, EVP_PKEY_free};
+};
+
+} // namespace margelo::nitro::crypto

package/cpp/ec/HybridEcKeyPair.cpp

@@ -0,0 +1,481 @@
+#include <NitroModules/ArrayBuffer.hpp>
+#include <NitroModules/Promise.hpp>
+#include <algorithm>
+#include <memory>
+#include <openssl/bio.h>
+#include <openssl/buffer.h>
+#include <openssl/ec.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/obj_mac.h>
+#include <openssl/pem.h>
+#include <openssl/sha.h>
+#include <stdexcept>
+#include <string>
+
+#include "../sign/SignUtils.hpp"
+
+// OpenSSL EC parameter encoding constants
+#ifndef OPENSSL_EC_EXPLICIT_CURVE
+#define OPENSSL_EC_EXPLICIT_CURVE 0x000
+#endif
+#ifndef OPENSSL_EC_NAMED_CURVE
+#define OPENSSL_EC_NAMED_CURVE 0x001
+#endif
+
+#include "HybridEcKeyPair.hpp"
+#include "QuickCryptoUtils.hpp"
+
+using margelo::nitro::NativeArrayBuffer;
+
+namespace margelo::nitro::crypto {
+
+std::shared_ptr<Promise<void>> HybridEcKeyPair::generateKeyPair() {
+  return Promise<void>::async([this]() { this->generateKeyPairSync(); });
+}
+
+void HybridEcKeyPair::generateKeyPairSync() {
+  if (this->curve.empty()) {
+    throw std::runtime_error("EC curve not set. Call setCurve() first.");
+  }
+
+  // Clean up existing key if any
+  this->pkey_.reset();
+
+  // Get curve NID from curve name
+  int curve_nid = GetCurveFromName(this->curve.c_str());
+  if (curve_nid == NID_undef) {
+    throw std::runtime_error("Invalid or unsupported curve: " + this->curve);
+  }
+
+  std::unique_ptr<EVP_PKEY_CTX, decltype(&EVP_PKEY_CTX_free)> key_ctx(nullptr, EVP_PKEY_CTX_free);
+
+  // Handle special curves (Ed25519, X25519, etc.)
+  switch (curve_nid) {
+    case EVP_PKEY_ED25519:
+    case EVP_PKEY_ED448:
+    case EVP_PKEY_X25519:
+    case EVP_PKEY_X448:
+      key_ctx.reset(EVP_PKEY_CTX_new_id(curve_nid, nullptr));
+      break;
+    default: {
+      // Standard EC curves
+      std::unique_ptr<EVP_PKEY_CTX, decltype(&EVP_PKEY_CTX_free)> param_ctx(EVP_PKEY_CTX_new_id(EVP_PKEY_EC, nullptr), EVP_PKEY_CTX_free);
+
+      if (!param_ctx) {
+        throw std::runtime_error("Failed to create parameter context");
+      }
+
+      if (EVP_PKEY_paramgen_init(param_ctx.get()) <= 0) {
+        throw std::runtime_error("Failed to initialize parameter generation");
+      }
+
+      if (EVP_PKEY_CTX_set_ec_paramgen_curve_nid(param_ctx.get(), curve_nid) <= 0) {
+        throw std::runtime_error("Failed to set curve NID");
+      }
+
+      if (EVP_PKEY_CTX_set_ec_param_enc(param_ctx.get(), OPENSSL_EC_NAMED_CURVE) <= 0) {
+        throw std::runtime_error("Failed to set parameter encoding");
+      }
+
+      EVP_PKEY* raw_params = nullptr;
+      if (EVP_PKEY_paramgen(param_ctx.get(), &raw_params) <= 0) {
+        throw std::runtime_error("Failed to generate parameters");
+      }
+
+      std::unique_ptr<EVP_PKEY, decltype(&EVP_PKEY_free)> key_params(raw_params, EVP_PKEY_free);
+      key_ctx.reset(EVP_PKEY_CTX_new(key_params.get(), nullptr));
+      break;
+    }
+  }
+
+  if (!key_ctx) {
+    throw std::runtime_error("Failed to create key generation context");
+  }
+
+  if (EVP_PKEY_keygen_init(key_ctx.get()) <= 0) {
+    throw std::runtime_error("Failed to initialize key generation");
+  }
+
+  EVP_PKEY* raw_pkey = nullptr;
+  if (EVP_PKEY_keygen(key_ctx.get(), &raw_pkey) <= 0) {
+    throw std::runtime_error("Failed to generate EC key pair");
+  }
+
+  this->pkey_.reset(raw_pkey);
+}
+
+KeyObject HybridEcKeyPair::importKey(const std::string& format, const std::shared_ptr<ArrayBuffer>& keyData,
+                                     const std::string& /* algorithm */, bool /* extractable */,
+                                     const std::vector<std::string>& /* keyUsages */) {
+  // Clean up any existing key
+  this->pkey_.reset();
+  // Reset curve state to avoid interference between different uses
+  this->curve.clear();
+
+  // Import key from DER format
+  if (format != "der") {
+    throw std::runtime_error("Only DER format is supported for key import");
+  }
+
+  const unsigned char* keyPtr = static_cast<const unsigned char*>(keyData->data());
+  size_t keyLen = keyData->size();
+
+  // Try to import as public key first (SPKI format)
+  EVP_PKEY* pkey = d2i_PUBKEY(nullptr, &keyPtr, keyLen);
+
+  if (!pkey) {
+    // Reset pointer and try as private key (PKCS8 format)
+    keyPtr = static_cast<const unsigned char*>(keyData->data());
+
+    // Try PKCS8 format for private keys
+    BIO* pkcs8_bio = BIO_new_mem_buf(keyData->data(), static_cast<int>(keyData->size()));
+    if (pkcs8_bio) {
+      PKCS8_PRIV_KEY_INFO* p8inf = d2i_PKCS8_PRIV_KEY_INFO_bio(pkcs8_bio, nullptr);
+      if (p8inf != nullptr) {
+        EVP_PKEY* pkcs8_pkey = EVP_PKCS82PKEY(p8inf);
+        PKCS8_PRIV_KEY_INFO_free(p8inf);
+        BIO_free(pkcs8_bio);
+        if (pkcs8_pkey != nullptr) {
+          this->pkey_.reset(pkcs8_pkey);
+          KeyObject keyObj;
+          return keyObj;
+        }
+      }
+      BIO_free(pkcs8_bio);
+    }
+
+    // Try to parse as SPKI (public key) with BIO
+    BIO* spki_bio = BIO_new_mem_buf(keyData->data(), static_cast<int>(keyData->size()));
+    if (spki_bio) {
+      EVP_PKEY* spki_pkey = d2i_PUBKEY_bio(spki_bio, nullptr);
+      BIO_free(spki_bio);
+      if (spki_pkey != nullptr) {
+        this->pkey_.reset(spki_pkey);
+        KeyObject keyObj;
+        return keyObj;
+      }
+    }
+
+    throw std::runtime_error("Failed to import EC key from DER data");
+  }
+
+  this->pkey_.reset(pkey);
+
+  // Return a placeholder KeyObject - this would need proper implementation
+  // For now, we just need the key imported into this->pkey for sign/verify
+  KeyObject keyObj;
+  return keyObj;
+}
+
+std::shared_ptr<ArrayBuffer> HybridEcKeyPair::exportKey(const KeyObject& key, const std::string& format) {
+  // Suppress unused parameter warning
+  (void)key;
+
+  if (!this->pkey_) {
+    throw std::runtime_error("No key pair generated");
+  }
+
+  if (format == "der-spki") {
+    // Export public key in DER SPKI format
+    int len = i2d_PUBKEY(this->pkey_.get(), nullptr);
+    if (len <= 0) {
+      throw std::runtime_error("Failed to get public key DER length");
+    }
+
+    std::vector<unsigned char> derData(len);
+    unsigned char* ptr = derData.data();
+    i2d_PUBKEY(this->pkey_.get(), &ptr);
+    return ToNativeArrayBuffer(std::string(derData.begin(), derData.end()));
+  } else if (format == "der-pkcs8") {
+    // Export private key in DER PKCS8 format
+    BIO* bio = BIO_new(BIO_s_mem());
+    if (!bio) {
+      throw std::runtime_error("Failed to create BIO for private key export");
+    }
+
+    if (i2d_PKCS8PrivateKey_bio(bio, this->pkey_.get(), nullptr, nullptr, 0, nullptr, nullptr) != 1) {
+      BIO_free(bio);
+      throw std::runtime_error("Failed to export private key to DER PKCS8 format");
+    }
+
+    BUF_MEM* mem;
+    BIO_get_mem_ptr(bio, &mem);
+    std::string derData(mem->data, mem->length);
+    BIO_free(bio);
+
+    return ToNativeArrayBuffer(derData);
+  } else if (format == "pem-spki") {
+    // Export public key in PEM SPKI format
+    BIO* bio = BIO_new(BIO_s_mem());
+    if (!bio) {
+      throw std::runtime_error("Failed to create BIO for public key export");
+    }
+
+    if (PEM_write_bio_PUBKEY(bio, this->pkey_.get()) != 1) {
+      BIO_free(bio);
+      throw std::runtime_error("Failed to export public key to PEM SPKI format");
+    }
+
+    BUF_MEM* mem;
+    BIO_get_mem_ptr(bio, &mem);
+    std::string pemData(mem->data, mem->length);
+    BIO_free(bio);
+
+    return ToNativeArrayBuffer(pemData);
+  } else if (format == "pem-pkcs8") {
+    // Export private key in PEM PKCS8 format
+    BIO* bio = BIO_new(BIO_s_mem());
+    if (!bio) {
+      throw std::runtime_error("Failed to create BIO for private key export");
+    }
+
+    if (PEM_write_bio_PKCS8PrivateKey(bio, this->pkey_.get(), nullptr, nullptr, 0, nullptr, nullptr) != 1) {
+      BIO_free(bio);
+      throw std::runtime_error("Failed to export private key to PEM PKCS8 format");
+    }
+
+    BUF_MEM* mem;
+    BIO_get_mem_ptr(bio, &mem);
+    std::string pemData(mem->data, mem->length);
+    BIO_free(bio);
+
+    return ToNativeArrayBuffer(pemData);
+  }
+
+  throw std::runtime_error("Unsupported export format: " + format);
+}
+
+std::shared_ptr<ArrayBuffer> HybridEcKeyPair::getPublicKey() {
+  this->checkKeyPair();
+
+  // Export as DER format using direct OpenSSL calls
+  BIO* bio = BIO_new(BIO_s_mem());
+  if (!bio) {
+    throw std::runtime_error("Failed to create BIO for public key export");
+  }
+
+  if (i2d_PUBKEY_bio(bio, this->pkey_.get()) != 1) {
+    BIO_free(bio);
+    throw std::runtime_error("Failed to export public key to DER format");
+  }
+
+  BUF_MEM* mem;
+  BIO_get_mem_ptr(bio, &mem);
+
+  // Create a string from the DER data and use ToNativeArrayBuffer utility
+  std::string derData(mem->data, mem->length);
+  BIO_free(bio);
+
+  return ToNativeArrayBuffer(derData);
+}
+
+std::shared_ptr<ArrayBuffer> HybridEcKeyPair::getPrivateKey() {
+  if (!this->pkey_) {
+    throw std::runtime_error("No private key available");
+  }
+
+  // Export private key in PKCS8 DER format
+  BIO* bio = BIO_new(BIO_s_mem());
+  if (i2d_PKCS8PrivateKey_bio(bio, this->pkey_.get(), nullptr, nullptr, 0, nullptr, nullptr) != 1) {
+    BIO_free(bio);
+    throw std::runtime_error("Failed to export private key");
+  }
+
+  BUF_MEM* mem;
+  BIO_get_mem_ptr(bio, &mem);
+  std::string derData(mem->data, mem->length);
+  BIO_free(bio);
+
+  return ToNativeArrayBuffer(derData);
+}
+
+void HybridEcKeyPair::setCurve(const std::string& curve) {
+  this->curve = curve;
+}
+
+int HybridEcKeyPair::GetCurveFromName(const char* name) {
+  // Handle NIST curve name mappings first
+  std::string curve_name(name);
+  if (curve_name == "P-256") {
+    return NID_X9_62_prime256v1;
+  } else if (curve_name == "P-384") {
+    return NID_secp384r1;
+  } else if (curve_name == "P-521") {
+    return NID_secp521r1;
+  } else if (curve_name == "secp256k1") {
+    return NID_secp256k1;
+  }
+
+  // Try standard OpenSSL name resolution
+  int nid = OBJ_txt2nid(name);
+  if (nid == NID_undef) {
+    // Try short names
+    nid = OBJ_sn2nid(name);
+  }
+  if (nid == NID_undef) {
+    // Try long names
+    nid = OBJ_ln2nid(name);
+  }
+  return nid;
+}
+
+std::shared_ptr<ArrayBuffer> HybridEcKeyPair::sign(const std::shared_ptr<ArrayBuffer>& data, const std::string& hashAlgorithm) {
+  this->checkKeyPair();
+
+  // Get the hash algorithm EVP_MD
+  const EVP_MD* md = nullptr;
+  if (hashAlgorithm == "SHA-256") {
+    md = EVP_sha256();
+  } else if (hashAlgorithm == "SHA-384") {
+    md = EVP_sha384();
+  } else if (hashAlgorithm == "SHA-512") {
+    md = EVP_sha512();
+  } else if (hashAlgorithm == "SHA-1") {
+    md = EVP_sha1();
+  } else {
+    throw std::runtime_error("Unsupported hash algorithm: " + hashAlgorithm);
+  }
+
+  // Create signing context
+  std::unique_ptr<EVP_MD_CTX, decltype(&EVP_MD_CTX_free)> md_ctx(EVP_MD_CTX_new(), EVP_MD_CTX_free);
+  if (!md_ctx) {
+    throw std::runtime_error("Failed to create message digest context");
+  }
+
+  // Initialize signing
+  if (EVP_DigestSignInit(md_ctx.get(), nullptr, md, nullptr, this->pkey_.get()) <= 0) {
+    throw std::runtime_error("Failed to initialize ECDSA signing");
+  }
+
+  // Update with data
+  if (EVP_DigestSignUpdate(md_ctx.get(), data->data(), data->size()) <= 0) {
+    throw std::runtime_error("Failed to update ECDSA signing with data");
+  }
+
+  // Get signature length
+  size_t sig_len = 0;
+  if (EVP_DigestSignFinal(md_ctx.get(), nullptr, &sig_len) <= 0) {
+    throw std::runtime_error("Failed to get ECDSA signature length");
+  }
+
+  // Allocate signature buffer
+  std::vector<uint8_t> signature(sig_len);
+
+  // Get the actual signature
+  if (EVP_DigestSignFinal(md_ctx.get(), signature.data(), &sig_len) <= 0) {
+    throw std::runtime_error("Failed to generate ECDSA signature");
+  }
+
+  // Resize to actual signature length
+  signature.resize(sig_len);
+
+  // Web Crypto API requires IEEE P1363 format for ECDSA signatures
+  unsigned int n = getBytesOfRS(this->pkey_.get());
+  if (n == 0) {
+    throw std::runtime_error("Failed to determine EC key order size for P1363 conversion");
+  }
+  auto p1363_buf = std::make_unique<uint8_t[]>(2 * n);
+  std::memset(p1363_buf.get(), 0, 2 * n);
+  if (!convertSignatureToP1363(signature.data(), sig_len, p1363_buf.get(), n)) {
+    throw std::runtime_error("Failed to convert ECDSA signature from DER to P1363 format");
+  }
+  uint8_t* raw_ptr = p1363_buf.get();
+  return std::make_shared<NativeArrayBuffer>(p1363_buf.release(), 2 * n, [raw_ptr]() { delete[] raw_ptr; });
+}
+
+bool HybridEcKeyPair::verify(const std::shared_ptr<ArrayBuffer>& data, const std::shared_ptr<ArrayBuffer>& signature,
+                             const std::string& hashAlgorithm) {
+  this->checkKeyPair();
+
+  // Get the hash algorithm EVP_MD
+  const EVP_MD* md = nullptr;
+  if (hashAlgorithm == "SHA-256") {
+    md = EVP_sha256();
+  } else if (hashAlgorithm == "SHA-384") {
+    md = EVP_sha384();
+  } else if (hashAlgorithm == "SHA-512") {
+    md = EVP_sha512();
+  } else if (hashAlgorithm == "SHA-1") {
+    md = EVP_sha1();
+  } else {
+    throw std::runtime_error("Unsupported hash algorithm: " + hashAlgorithm);
+  }
+
+  // Create verification context
+  std::unique_ptr<EVP_MD_CTX, decltype(&EVP_MD_CTX_free)> md_ctx(EVP_MD_CTX_new(), EVP_MD_CTX_free);
+  if (!md_ctx) {
+    throw std::runtime_error("Failed to create message digest context");
+  }
+
+  // Initialize verification
+  if (EVP_DigestVerifyInit(md_ctx.get(), nullptr, md, nullptr, this->pkey_.get()) <= 0) {
+    throw std::runtime_error("Failed to initialize ECDSA verification");
+  }
+
+  // Update with data
+  if (EVP_DigestVerifyUpdate(md_ctx.get(), data->data(), data->size()) <= 0) {
+    throw std::runtime_error("Failed to update ECDSA verification with data");
+  }
+
+  // Web Crypto API typically passes IEEE P1363 (raw r||s, exactly 2*n bytes);
+  // the Node-API path with `dsaEncoding: 'der'` passes ASN.1 DER instead.
+  // Discriminate by length — anything other than 2*n is treated as DER and
+  // passed through unchanged. This matches what every other ECDSA verify
+  // wrapper (Node's, ncrypto's) does and is robust because well-formed DER
+  // ECDSA signatures are never exactly 2*n bytes for the curves we support.
+  const unsigned char* sig_data = static_cast<const unsigned char*>(signature->data());
+  size_t sig_len = signature->size();
+  std::unique_ptr<uint8_t[]> der_sig_buf;
+
+  unsigned int n = getBytesOfRS(this->pkey_.get());
+  if (n == 0) {
+    throw std::runtime_error("Failed to determine EC key order size for DER conversion");
+  }
+
+  if (sig_len == 2 * n) {
+    size_t der_len = 0;
+    der_sig_buf = convertSignatureToDER(sig_data, sig_len, n, &der_len);
+    if (!der_sig_buf) {
+      throw std::runtime_error("Failed to convert ECDSA signature from P1363 to DER format");
+    }
+    sig_data = der_sig_buf.get();
+    sig_len = der_len;
+  }
+
+  int result = EVP_DigestVerifyFinal(md_ctx.get(), sig_data, sig_len);
+
+  if (result < 0) {
+    throw std::runtime_error("ECDSA verification failed with error");
+  }
+
+  return result == 1;
+}
+
+void HybridEcKeyPair::checkKeyPair() {
+  if (!this->pkey_) {
+    throw std::runtime_error("EC KeyPair not initialized");
+  }
+}
+
+std::vector<std::string> HybridEcKeyPair::getSupportedCurves() {
+  const size_t count = EC_get_builtin_curves(nullptr, 0);
+  std::vector<EC_builtin_curve> curves(count);
+  if (EC_get_builtin_curves(curves.data(), count) != count) {
+    throw std::runtime_error("Failed to enumerate EC curves");
+  }
+
+  std::vector<std::string> names;
+  names.reserve(count);
+  for (const auto& curve : curves) {
+    const char* sn = OBJ_nid2sn(curve.nid);
+    if (sn != nullptr) {
+      names.emplace_back(sn);
+    }
+  }
+
+  std::sort(names.begin(), names.end());
+  return names;
+}
+
+} // namespace margelo::nitro::crypto