@super-protocol/pki-common 1.0.0

package/dist/helpers.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="node" />
+import { ChallengeType, KeyPairPem } from './types';
+export declare const generateDomain: (baseDomain: string, challengeType: ChallengeType, id: string) => string;
+export declare const getPublicKeyFromPrivate: (privateKeyPem: string) => string;
+export declare const getPublicKeyHash: (publicKeyPem: string) => Buffer;
+export declare const generateKeyPair: () => KeyPairPem;

package/dist/helpers.js

@@ -0,0 +1,46 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateKeyPair = exports.getPublicKeyHash = exports.getPublicKeyFromPrivate = exports.generateDomain = void 0;
+const node_forge_1 = __importDefault(require("node-forge"));
+const node_crypto_1 = require("node:crypto");
+const crypto_1 = require("crypto");
+const generateDomain = (baseDomain, challengeType, id) => `*.${id}.${challengeType}.${baseDomain}`;
+exports.generateDomain = generateDomain;
+const getPublicKeyFromPrivate = (privateKeyPem) => {
+    const privateKey = node_forge_1.default.pki.privateKeyFromPem(privateKeyPem);
+    const publicKey = node_forge_1.default.pki.rsa.setPublicKey(privateKey.n, privateKey.e);
+    return node_forge_1.default.pki.publicKeyToPem(publicKey);
+};
+exports.getPublicKeyFromPrivate = getPublicKeyFromPrivate;
+const getPublicKeyHash = (publicKeyPem) => {
+    const publicKey = node_forge_1.default.pki.publicKeyFromPem(publicKeyPem);
+    const asn1 = node_forge_1.default.pki.publicKeyToAsn1(publicKey);
+    const der = node_forge_1.default.asn1.toDer(asn1).getBytes();
+    const keyBuffer = Buffer.from(der, 'binary');
+    const hash = (0, node_crypto_1.createHash)('md5');
+    hash.update(keyBuffer);
+    return hash.digest();
+};
+exports.getPublicKeyHash = getPublicKeyHash;
+const generateKeyPair = () => {
+    const keys = (0, crypto_1.generateKeyPairSync)('rsa', {
+        modulusLength: 2048,
+        publicKeyEncoding: {
+            type: 'spki',
+            format: 'pem',
+        },
+        privateKeyEncoding: {
+            type: 'pkcs8',
+            format: 'pem',
+        },
+    });
+    return {
+        publicKeyPem: keys.publicKey,
+        privateKeyPem: keys.privateKey,
+    };
+};
+exports.generateKeyPair = generateKeyPair;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types';
+export * from './helpers';

package/dist/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./helpers"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDBDQUF3QjtBQUN4Qiw0Q0FBMEIifQ==

package/dist/types.d.ts

@@ -0,0 +1,58 @@
+export declare enum ChallengeType {
+    Untrusted = "untrusted",
+    SGXDCAP = "sgx-dcap",
+    SGXIAS = "sgx-ias",
+    TDX = "tdx",
+    AMDSEV = "amd-sev",
+    TDXSuperLoader = "tdx-super-loader"
+}
+export interface UntrustedChallenge {
+    type: ChallengeType.Untrusted;
+    userData: string;
+    id: string;
+}
+export interface SGXDCAPChallenge {
+    type: ChallengeType.SGXDCAP;
+    quoteBase64: string;
+}
+export type Challenge = UntrustedChallenge | SGXDCAPChallenge;
+export interface PkiCertParams {
+    serialNumber: string;
+    notBefore: string;
+    notAfter: string;
+    commonName: string;
+    countryName: string;
+    stateName: string;
+    localityName: string;
+    organizationName: string;
+    organizationUnitName: string;
+}
+export interface PkiUntrustedStaticKeyStorage {
+    type: 'untrusted-static';
+    publicKeyPem: string;
+    privateKeyPem: string;
+}
+export interface PkiInMemoryKeyStorage {
+    type: 'in-memory';
+}
+export interface PkiSuperDecentralizedSecretKeyStorage {
+    type: 'super';
+}
+export interface PkiTrustedKeyStorage {
+    type: 'trusted';
+    storage: PkiInMemoryKeyStorage | PkiSuperDecentralizedSecretKeyStorage;
+}
+export declare enum PkiRole {
+    root = "root",
+    subroot = "subroot"
+}
+export interface KeyPairPem {
+    publicKeyPem: string;
+    privateKeyPem: string;
+}
+export interface TeeSslCertificate {
+    certPem: string;
+    caBundle: string;
+    baseDomain: string;
+    keyPair: KeyPairPem;
+}

package/dist/types.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PkiRole = exports.ChallengeType = void 0;
+var ChallengeType;
+(function (ChallengeType) {
+    ChallengeType["Untrusted"] = "untrusted";
+    ChallengeType["SGXDCAP"] = "sgx-dcap";
+    ChallengeType["SGXIAS"] = "sgx-ias";
+    ChallengeType["TDX"] = "tdx";
+    ChallengeType["AMDSEV"] = "amd-sev";
+    ChallengeType["TDXSuperLoader"] = "tdx-super-loader";
+})(ChallengeType || (exports.ChallengeType = ChallengeType = {}));
+var PkiRole;
+(function (PkiRole) {
+    PkiRole["root"] = "root";
+    PkiRole["subroot"] = "subroot";
+})(PkiRole || (exports.PkiRole = PkiRole = {}));
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@super-protocol/pki-common",
+  "version": "1.0.0",
+  "description": "",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "directories": {
+    "lib": "dist"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "lint": "eslint --max-warnings=0 src",
+    "lint:fix": "eslint --fix src"
+  },
+  "author": "Super Protocol",
+  "license": "ISC",
+  "dependencies": {
+    "node-forge": "^1.3.1"
+  }
+}