iso-signatures 0.0.1

package/src/verifiers/resolver.js

@@ -0,0 +1,63 @@
+/**
+ * @typedef {import('../types').IResolver} IResolver
+ */
+
+/**
+ * No cache
+ *
+ * @type {import('../types').Cache}
+ */
+function noCache(input, verify) {
+  return verify(input)
+}
+
+/**
+ * Memory cache factory
+ *
+ * @returns {import('../types').Cache}
+ */
+function memoryCache() {
+  const cache = new Map()
+
+  /** @type {import('../types').Cache} */
+  async function fn(input, verify) {
+    const key = JSON.stringify(input)
+    if (cache.has(key)) {
+      return cache.get(key)
+    }
+
+    const result = await verify(input)
+    cache.set(key, result)
+    return result
+  }
+
+  return fn
+}
+
+/**
+ * Verifier resolver
+ *
+ * @implements {IResolver}
+ */
+export class Resolver {
+  /**
+   *
+   * @param {import('../types').VerifierRegistry<import('iso-did/types').SignatureAlgorithm>} registry
+   * @param {import('../types').ResolverOptions} options
+   */
+  constructor(registry = {}, options = {}) {
+    this.registry = registry
+    this.cache =
+      options.cache === true ? memoryCache() : options.cache || noCache
+  }
+
+  /** @type {IResolver['verify']} */
+  async verify(input) {
+    const verify = this.registry[input.alg]
+    if (!verify) {
+      throw new TypeError(`Unsupported signature type "${input.alg}"`)
+    }
+
+    return this.cache(input, verify)
+  }
+}

package/src/verifiers/rsa-old.js

@@ -0,0 +1,25 @@
+/* eslint-disable unicorn/numeric-separators-style */
+import { webcrypto } from 'iso-base/crypto'
+
+/** @type {import('../types.js').Verify} */
+export async function verify({ signature, message, publicKey }) {
+  const key = await webcrypto.subtle.importKey(
+    'spki',
+    publicKey,
+    { name: 'RSASSA-PKCS1-v1_5', hash: { name: 'SHA-256' } },
+    true,
+    ['verify']
+  )
+
+  return await webcrypto.subtle.verify(
+    { name: 'RSASSA-PKCS1-v1_5', saltLength: 128 },
+    key,
+    signature,
+    message
+  )
+}
+
+/** @type {import('../types.js').Verifier<'RS256_OLD'>} */
+export const verifier = {
+  RS256_OLD: verify,
+}

package/src/verifiers/rsa.js

@@ -0,0 +1,26 @@
+/* eslint-disable unicorn/numeric-separators-style */
+import { webcrypto } from 'iso-base/crypto'
+import { spki } from '../spki.js'
+
+/** @type {import('../types.js').Verify} */
+export async function verify({ signature, message, publicKey }) {
+  const key = await webcrypto.subtle.importKey(
+    'spki',
+    spki.encode(publicKey),
+    { name: 'RSASSA-PKCS1-v1_5', hash: { name: 'SHA-256' } },
+    true,
+    ['verify']
+  )
+
+  return await webcrypto.subtle.verify(
+    { name: 'RSASSA-PKCS1-v1_5', saltLength: 128 },
+    key,
+    signature,
+    message
+  )
+}
+
+/** @type {import('../types.js').Verifier<'RS256'>} */
+export const verifier = {
+  RS256: verify,
+}