@sphereon/ssi-sdk-ext.key-utils 0.36.1-feature.SSISDK.70.integrate.digidentity.56 → 0.36.1-feature.SSISDK.78.41

package/dist/index.cjs

@@ -52,12 +52,8 @@ __export(index_exports, {
   hexStringFromUint8Array: () => hexStringFromUint8Array,
   importProvidedOrGeneratedKey: () => importProvidedOrGeneratedKey,
   isAsn1Der: () => isAsn1Der,
-  isHash: () => isHash,
-  isHashString: () => isHashString,
   isRawCompressedPublicKey: () => isRawCompressedPublicKey,
-  isSameHash: () => isSameHash,
   jcsCanonicalize: () => jcsCanonicalize,
-  joseAlgorithmToDigest: () => joseAlgorithmToDigest,
   joseToCoseCurve: () => joseToCoseCurve,
   joseToCoseKeyOperation: () => joseToCoseKeyOperation,
   joseToCoseKty: () => joseToCoseKty,
@@ -70,7 +66,6 @@ __export(index_exports, {
   keyTypeFromCryptographicSuite: () => keyTypeFromCryptographicSuite,
   logger: () => logger,
   minimalJwk: () => minimalJwk,
-  normalizeHashAlgorithm: () => normalizeHashAlgorithm,
   padLeft: () => padLeft,
   removeNulls: () => removeNulls,
   rsaJwkToRawHexKey: () => rsaJwkToRawHexKey,
@@ -78,7 +73,6 @@ __export(index_exports, {
   shaHasher: () => shaHasher,
   signatureAlgorithmFromKey: () => signatureAlgorithmFromKey,
   signatureAlgorithmFromKeyType: () => signatureAlgorithmFromKeyType,
-  signatureAlgorithmToJoseAlgorithm: () => signatureAlgorithmToJoseAlgorithm,
   toBase64url: () => toBase64url,
   toJwk: () => toJwk,
   toJwkFromKey: () => toJwkFromKey,
@@ -114,25 +108,24 @@ var import_sha512 = require("@noble/hashes/sha512");
 var u8a = __toESM(require("uint8arrays"), 1);
 var { fromString, toString, SupportedEncodings } = u8a;
 var digestMethodParams = /* @__PURE__ */ __name((hashAlgorithm) => {
-  switch (normalizeHashAlgorithm(hashAlgorithm)) {
-    case "SHA-256":
-      return {
-        hashAlgorithm: "SHA-256",
-        digestMethod: sha256DigestMethod,
-        hash: import_sha256.sha256
-      };
-    case "SHA-384":
-      return {
-        hashAlgorithm: "SHA-384",
-        digestMethod: sha384DigestMethod,
-        hash: import_sha512.sha384
-      };
-    case "SHA-512":
-      return {
-        hashAlgorithm: "SHA-512",
-        digestMethod: sha512DigestMethod,
-        hash: import_sha512.sha512
-      };
+  if (hashAlgorithm === "SHA-256") {
+    return {
+      hashAlgorithm: "SHA-256",
+      digestMethod: sha256DigestMethod,
+      hash: import_sha256.sha256
+    };
+  } else if (hashAlgorithm === "SHA-384") {
+    return {
+      hashAlgorithm: "SHA-384",
+      digestMethod: sha384DigestMethod,
+      hash: import_sha512.sha384
+    };
+  } else {
+    return {
+      hashAlgorithm: "SHA-512",
+      digestMethod: sha512DigestMethod,
+      hash: import_sha512.sha512
+    };
   }
 }, "digestMethodParams");
 var shaHasher = /* @__PURE__ */ __name((input, alg) => {
@@ -456,7 +449,7 @@ var assertJwkClaimPresent = /* @__PURE__ */ __name((value, description) => {
 }, "assertJwkClaimPresent");
 var toBase64url = /* @__PURE__ */ __name((input) => toString2(fromString2(input), "base64url"), "toBase64url");
 var calculateJwkThumbprint = /* @__PURE__ */ __name((args) => {
-  const digestAlgorithm = normalizeHashAlgorithm(args.digestAlgorithm ?? "SHA-256");
+  const { digestAlgorithm = "sha256" } = args;
   const jwk = sanitizedJwk(args.jwk);
   let components;
   switch (jwk.kty) {
@@ -500,7 +493,7 @@ var calculateJwkThumbprint = /* @__PURE__ */ __name((args) => {
       throw new Error('"kty" (Key Type) Parameter missing or unsupported');
   }
   const data = JSON.stringify(components);
-  return digestMethodParams(digestAlgorithm).digestMethod(data, "base64url");
+  return digestAlgorithm === "sha512" ? digestMethodParams("SHA-512").digestMethod(data, "base64url") : digestMethodParams("SHA-256").digestMethod(data, "base64url");
 }, "calculateJwkThumbprint");
 var toJwkFromKey = /* @__PURE__ */ __name((key, opts) => {
   const isPrivateKey = "privateKeyHex" in key;
@@ -958,45 +951,11 @@ var hexStringFromUint8Array = /* @__PURE__ */ __name((value) => toString2(value,
 var signatureAlgorithmFromKey = /* @__PURE__ */ __name(async (args) => {
   const { key } = args;
   return signatureAlgorithmFromKeyType({
-    type: key.type,
-    algorithms: key.meta?.algorithms
+    type: key.type
   });
 }, "signatureAlgorithmFromKey");
-function signatureAlgorithmToJoseAlgorithm(alg) {
-  switch (alg) {
-    case "RSA_SHA256":
-      return import_ssi_types.JoseSignatureAlgorithm.RS256;
-    case "RSA_SHA384":
-      return import_ssi_types.JoseSignatureAlgorithm.RS384;
-    case "RSA_SHA512":
-      return import_ssi_types.JoseSignatureAlgorithm.RS512;
-    case "RSA_SSA_PSS_SHA256_MGF1":
-      return import_ssi_types.JoseSignatureAlgorithm.PS256;
-    case "RSA_SSA_PSS_SHA384_MGF1":
-      return import_ssi_types.JoseSignatureAlgorithm.PS384;
-    case "RSA_SSA_PSS_SHA512_MGF1":
-      return import_ssi_types.JoseSignatureAlgorithm.PS512;
-    case "ECDSA_SHA256":
-      return import_ssi_types.JoseSignatureAlgorithm.ES256;
-    case "ECDSA_SHA384":
-      return import_ssi_types.JoseSignatureAlgorithm.ES384;
-    case "ECDSA_SHA512":
-      return import_ssi_types.JoseSignatureAlgorithm.ES512;
-    case "ES256K":
-      return import_ssi_types.JoseSignatureAlgorithm.ES256K;
-    case "ED25519":
-    case "EdDSA":
-      return import_ssi_types.JoseSignatureAlgorithm.EdDSA;
-    default:
-      return alg;
-  }
-}
-__name(signatureAlgorithmToJoseAlgorithm, "signatureAlgorithmToJoseAlgorithm");
 var signatureAlgorithmFromKeyType = /* @__PURE__ */ __name((args) => {
-  const { type, algorithms } = args;
-  if (algorithms && algorithms.length > 0) {
-    return signatureAlgorithmToJoseAlgorithm(algorithms[0]);
-  }
+  const { type } = args;
   switch (type) {
     case "Ed25519":
     case "X25519":
@@ -1010,7 +969,7 @@ var signatureAlgorithmFromKeyType = /* @__PURE__ */ __name((args) => {
     case "Secp256k1":
       return import_ssi_types.JoseSignatureAlgorithm.ES256K;
     case "RSA":
-      return import_ssi_types.JoseSignatureAlgorithm.RS256;
+      return import_ssi_types.JoseSignatureAlgorithm.PS256;
     default:
       throw new Error(`Key type '${type}' not supported`);
   }
@@ -1261,75 +1220,6 @@ function toPkcs1FromHex(publicKeyHex) {
   return toString2(pkcs1, "hex");
 }
 __name(toPkcs1FromHex, "toPkcs1FromHex");
-function joseAlgorithmToDigest(alg) {
-  const normalized = alg.toUpperCase().replace(/-/g, "");
-  switch (normalized) {
-    case "RS256":
-    case "ES256":
-    case "ES256K":
-    case "PS256":
-    case "HS256":
-      return "SHA-256";
-    case "RS384":
-    case "ES384":
-    case "PS384":
-    case "HS384":
-      return "SHA-384";
-    case "RS512":
-    case "ES512":
-    case "PS512":
-    case "HS512":
-      return "SHA-512";
-    case "EDDSA":
-    case "ED25519":
-      return "SHA-512";
-    default:
-      throw new Error(`Unsupported JOSE algorithm: ${alg}. Cannot determine digest algorithm.`);
-  }
-}
-__name(joseAlgorithmToDigest, "joseAlgorithmToDigest");
-function isHash(input) {
-  const length = input.length;
-  if (length !== 64 && length !== 96 && length !== 128) {
-    return false;
-  }
-  return input.match(/^([0-9A-Fa-f])+$/g) !== null;
-}
-__name(isHash, "isHash");
-function isHashString(input) {
-  const length = input.length;
-  if (length !== 32 && length !== 48 && length !== 64) {
-    return false;
-  }
-  let printableCount = 0;
-  for (let i = 0; i < length; i++) {
-    const byte = input[i];
-    if (byte === void 0) {
-      return false;
-    }
-    if (byte >= 32 && byte <= 126) {
-      printableCount++;
-    }
-  }
-  const printableRatio = printableCount / length;
-  return printableRatio < 0.9;
-}
-__name(isHashString, "isHashString");
-function normalizeHashAlgorithm(alg) {
-  if (!alg) {
-    return "SHA-256";
-  }
-  const upper = alg.toUpperCase();
-  if (upper.includes("256")) return "SHA-256";
-  if (upper.includes("384")) return "SHA-384";
-  if (upper.includes("512")) return "SHA-512";
-  throw new Error(`Invalid hash algorithm: ${alg}`);
-}
-__name(normalizeHashAlgorithm, "normalizeHashAlgorithm");
-function isSameHash(left, right) {
-  return normalizeHashAlgorithm(left) === normalizeHashAlgorithm(right);
-}
-__name(isSameHash, "isSameHash");
 
 // src/conversion.ts
 var import_ssi_types2 = require("@sphereon/ssi-types");