@sphereon/ssi-sdk-ext.key-utils 0.34.1-next.91 → 0.36.1-feat.SSISDK.83.11

package/dist/index.d.ts

@@ -28,6 +28,7 @@ interface X509Opts {
     certificateChainPEM?: string;
 }
 interface IImportProvidedOrGeneratedKeyArgs {
+    providerName: string;
     kms?: string;
     alias?: string;
     options?: IKeyOpts;
@@ -117,6 +118,7 @@ declare const jwkToRawHexKey: (jwk: JWK) => Promise<string>;
  * @returns A string representing the RSA key in raw hexadecimal format.
  */
 declare function rsaJwkToRawHexKey(jwk: JsonWebKey): string;
+declare function x25519PublicHexFromPrivateHex(privateKeyHex: string): string;
 /**
  * Determines the use param based upon the key/signature type or supplied use value.
  *
@@ -228,4 +230,4 @@ declare const digestMethodParams: (hashAlgorithm: HashAlgorithm) => {
 };
 declare const shaHasher: HasherSync;
 
-export { ENC_KEY_ALGS, type HashAlgorithm, type IImportProvidedOrGeneratedKeyArgs, type IKeyOpts, JWK_JCS_PUB_NAME, JWK_JCS_PUB_PREFIX, JwkKeyUse, Key, type KeyTypeFromCryptographicSuiteArgs, type KeyVisibility, SIG_KEY_ALGS, type SignatureAlgorithmFromKeyArgs, type SignatureAlgorithmFromKeyTypeArgs, type TDigestMethod, type TKeyType, type X509Opts, asn1DerToRawPublicKey, calculateJwkThumbprint, calculateJwkThumbprintForKey, coseKeyToJwk, coseToJoseCurve, coseToJoseKeyOperation, coseToJoseKty, coseToJoseSignatureAlg, digestMethodParams, generatePrivateKeyHex, getKms, globalCrypto, hexStringFromUint8Array, importProvidedOrGeneratedKey, isAsn1Der, isRawCompressedPublicKey, jcsCanonicalize, joseToCoseCurve, joseToCoseKeyOperation, joseToCoseKty, joseToCoseSignatureAlg, jwkDetermineUse, jwkJcsDecode, jwkJcsEncode, jwkToCoseKey, jwkToRawHexKey, keyTypeFromCryptographicSuite, logger, minimalJwk, padLeft, removeNulls, rsaJwkToRawHexKey, sanitizedJwk, shaHasher, signatureAlgorithmFromKey, signatureAlgorithmFromKeyType, toBase64url, toJwk, toJwkFromKey, toPkcs1, toPkcs1FromHex, toRawCompressedHexPublicKey, validateJwk, verifyRawSignature };
+export { ENC_KEY_ALGS, type HashAlgorithm, type IImportProvidedOrGeneratedKeyArgs, type IKeyOpts, JWK_JCS_PUB_NAME, JWK_JCS_PUB_PREFIX, JwkKeyUse, Key, type KeyTypeFromCryptographicSuiteArgs, type KeyVisibility, SIG_KEY_ALGS, type SignatureAlgorithmFromKeyArgs, type SignatureAlgorithmFromKeyTypeArgs, type TDigestMethod, type TKeyType, type X509Opts, asn1DerToRawPublicKey, calculateJwkThumbprint, calculateJwkThumbprintForKey, coseKeyToJwk, coseToJoseCurve, coseToJoseKeyOperation, coseToJoseKty, coseToJoseSignatureAlg, digestMethodParams, generatePrivateKeyHex, getKms, globalCrypto, hexStringFromUint8Array, importProvidedOrGeneratedKey, isAsn1Der, isRawCompressedPublicKey, jcsCanonicalize, joseToCoseCurve, joseToCoseKeyOperation, joseToCoseKty, joseToCoseSignatureAlg, jwkDetermineUse, jwkJcsDecode, jwkJcsEncode, jwkToCoseKey, jwkToRawHexKey, keyTypeFromCryptographicSuite, logger, minimalJwk, padLeft, removeNulls, rsaJwkToRawHexKey, sanitizedJwk, shaHasher, signatureAlgorithmFromKey, signatureAlgorithmFromKeyType, toBase64url, toJwk, toJwkFromKey, toPkcs1, toPkcs1FromHex, toRawCompressedHexPublicKey, validateJwk, verifyRawSignature, x25519PublicHexFromPrivateHex };

package/dist/index.js

@@ -4,7 +4,7 @@ var __name = (target, value) => __defProp(target, "name", { value, configurable:
 // src/functions.ts
 import { randomBytes } from "@ethersproject/random";
 import { bls12_381 } from "@noble/curves/bls12-381";
-import { ed25519 } from "@noble/curves/ed25519";
+import { ed25519, x25519 } from "@noble/curves/ed25519";
 import { p256 } from "@noble/curves/p256";
 import { p384 } from "@noble/curves/p384";
 import { p521 } from "@noble/curves/p521";
@@ -296,14 +296,20 @@ var keyMetaAlgorithmsFromKeyType = /* @__PURE__ */ __name((type) => {
 async function importProvidedOrGeneratedKey(args, context) {
   const type = args.options?.type ?? args.options?.key?.type ?? args.options?.keyType ?? "Secp256r1";
   const key = args?.options?.key;
-  if (args.options?.x509 && key) {
+  if (key) {
     key.meta = {
       ...key.meta,
-      x509: {
-        ...args.options.x509,
-        ...key.meta?.x509
-      }
+      providerName: args.providerName
     };
+    if (args.options?.x509) {
+      key.meta = {
+        ...key.meta,
+        x509: {
+          ...args.options.x509,
+          ...key.meta?.x509
+        }
+      };
+    }
   }
   if (args.options && args.options?.use === JwkKeyUse.Encryption && !ENC_KEY_ALGS.includes(type)) {
     throw new Error(`${type} keys are not valid for encryption`);
@@ -329,7 +335,9 @@ async function importProvidedOrGeneratedKey(args, context) {
     meta: {
       ...key?.meta,
       algorithms: keyMetaAlgorithmsFromKeyType(type),
-      keyAlias: args.alias
+      ...key?.meta?.keyAlias ? {} : {
+        keyAlias: args.alias
+      }
     }
   });
 }
@@ -550,6 +558,15 @@ function octJwkToRawHexKey(jwk) {
   return toString2(key, "hex");
 }
 __name(octJwkToRawHexKey, "octJwkToRawHexKey");
+function x25519PublicHexFromPrivateHex(privateKeyHex) {
+  if (!/^[0-9a-fA-F]{64}$/.test(privateKeyHex)) {
+    throw new Error("Private key must be 32-byte hex (64 chars)");
+  }
+  const priv = Uint8Array.from(Buffer.from(privateKeyHex, "hex"));
+  const pub = x25519.getPublicKey(priv);
+  return Buffer.from(pub).toString("hex");
+}
+__name(x25519PublicHexFromPrivateHex, "x25519PublicHexFromPrivateHex");
 var jwkDetermineUse = /* @__PURE__ */ __name((type, suppliedUse) => {
   return suppliedUse ? suppliedUse : SIG_KEY_ALGS.includes(type) ? JwkKeyUse.Signature : ENC_KEY_ALGS.includes(type) ? JwkKeyUse.Encryption : void 0;
 }, "jwkDetermineUse");
@@ -586,8 +603,8 @@ var toSecp256k1Jwk = /* @__PURE__ */ __name((keyHex, opts) => {
     },
     kty: JwkKeyType.EC,
     crv: JoseCurve.secp256k1,
-    x: hexToBase64(pubPoint.getX().toString("hex"), "base64url"),
-    y: hexToBase64(pubPoint.getY().toString("hex"), "base64url"),
+    x: hexToBase64(pubPoint.getX().toString("hex").padStart(64, "0"), "base64url"),
+    y: hexToBase64(pubPoint.getY().toString("hex").padStart(64, "0"), "base64url"),
     ...opts?.isPrivateKey && {
       d: hexToBase64(keyPair.getPrivate("hex"), "base64url")
     }
@@ -618,8 +635,8 @@ var toSecp256r1Jwk = /* @__PURE__ */ __name((keyHex, opts) => {
     },
     kty: JwkKeyType.EC,
     crv: JoseCurve.P_256,
-    x: hexToBase64(pubPoint.getX().toString("hex"), "base64url"),
-    y: hexToBase64(pubPoint.getY().toString("hex"), "base64url"),
+    x: hexToBase64(pubPoint.getX().toString("hex").padStart(64, "0"), "base64url"),
+    y: hexToBase64(pubPoint.getY().toString("hex").padStart(64, "0"), "base64url"),
     ...opts?.isPrivateKey && {
       d: hexToBase64(keyPair.getPrivate("hex"), "base64url")
     }
@@ -1417,6 +1434,7 @@ export {
   toPkcs1FromHex,
   toRawCompressedHexPublicKey,
   validateJwk,
-  verifyRawSignature
+  verifyRawSignature,
+  x25519PublicHexFromPrivateHex
 };
 //# sourceMappingURL=index.js.map