iso-ucan 2.0.0 → 3.0.0

package/dist/src/delegation.d.ts

@@ -82,7 +82,7 @@ export class Delegation {
                 meta: Record<string, unknown> | undefined;
             };
             signature: string;
-            alg: import("iso-signatures/types").SignatureType;
+            alg: import("./types.js").VarsigAlgorithm;
             enc: import("./types.js").VarsigEncoding;
             spec: "dlg";
             version: string;

package/dist/src/envelope.d.ts

@@ -29,7 +29,7 @@ export function getSignaturePayload(options: {
  * @param {Uint8Array} bytes
  */
 export function decodeSignaturePayload(bytes: Uint8Array): {
-    alg: import("iso-signatures/types").SignatureType;
+    alg: import("./types.js").VarsigAlgorithm;
     enc: "DAG-CBOR";
     spec: PayloadSpec;
     version: string;
@@ -54,6 +54,7 @@ export function isDelegationPayload(payload: Payload): payload is DelegationPayl
  * @param {EnvelopeSignOptions} options
  */
 export function sign(options: EnvelopeSignOptions): Promise<{
+    alg: import("./types.js").VarsigAlgorithm;
     signature: Uint8Array<ArrayBufferLike>;
     signaturePayload: SignaturePayload;
 }>;

package/dist/src/envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/envelope.js"],"names":[],"mappings":"AAmCA;;;;GAIG;AACH,qCAFW,MAAM;SAsBU,UAAU;;;EACpC;AAED;;;;;;;;GAQG;AACH,6CALG;IAA6B,IAAI,EAAzB,WAAW;IACM,OAAO,EAAxB,OAAO;IACU,OAAO;IAC8B,aAAa,EAAnE,OAAO,sBAAsB,EAAE,aAAa;CACtD,oBAgBA;AA0DD;;;;GAIG;AACH,8CAFW,UAAU;;;;;aAPG,OAAO;EAW9B;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;GAGG;AACH,8BAFW,mBAAmB;;;GAgB7B;AAED;;;;;;GAMG;AACH,gCAHW,qBAAqB,iHAS/B;AAED;;;;;;;GAOG;AACH,uBAL2B,IAAI,SAAlB,WAAa,WAEf,qBAAqB,GACnB,gBAAgB,IAAI,CAAC,CAgCjC;AAnPD;;GAEG;AAEH;;;;;GAKG;AACH,sBAAuB,OAAO,CAAA;AAE9B;;;;;;;GAOG;AACH,iCAFU,SAAS,MAAM,EAAE,CAE6C;AAExE;;;;GAIG;AACH,oBAFU,SAAS,WAAW,EAAE,CAEyC;gCA1BuH,YAAY;iCAAZ,YAAY;6BAAZ,YAAY;sCAAZ,YAAY;uCAAZ,YAAY;uCAAZ,YAAY;yCAAZ,YAAY;2CAAZ,YAAY;2CAAZ,YAAY;qCAAZ,YAAY"}
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/envelope.js"],"names":[],"mappings":"AAmCA;;;;GAIG;AACH,qCAFW,MAAM;SAsBU,UAAU;;;EACpC;AAED;;;;;;;;GAQG;AACH,6CALG;IAA6B,IAAI,EAAzB,WAAW;IACM,OAAO,EAAxB,OAAO;IACU,OAAO;IAC8B,aAAa,EAAnE,OAAO,sBAAsB,EAAE,aAAa;CACtD,oBAgBA;AA0DD;;;;GAIG;AACH,8CAFW,UAAU;;;;;aAPG,OAAO;EAW9B;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;;;GAKG;AACH,6CAHW,OAAO,GACL,OAAO,IAAI,iBAAiB,CAIxC;AAED;;;GAGG;AACH,8BAFW,mBAAmB;SAcV,OAAO,YAAY,EAAE,eAAe;;;GAMvD;AAED;;;;;;GAMG;AACH,gCAHW,qBAAqB,iHAS/B;AAED;;;;;;;GAOG;AACH,uBAL2B,IAAI,SAAlB,WAAa,WAEf,qBAAqB,GACnB,gBAAgB,IAAI,CAAC,CAgCjC;AAvPD;;GAEG;AAEH;;;;;GAKG;AACH,sBAAuB,OAAO,CAAA;AAE9B;;;;;;;GAOG;AACH,iCAFU,SAAS,MAAM,EAAE,CAE6C;AAExE;;;;GAIG;AACH,oBAFU,SAAS,WAAW,EAAE,CAEyC;gCA1BuH,YAAY;iCAAZ,YAAY;6BAAZ,YAAY;sCAAZ,YAAY;uCAAZ,YAAY;uCAAZ,YAAY;yCAAZ,YAAY;2CAAZ,YAAY;2CAAZ,YAAY;qCAAZ,YAAY"}

package/dist/src/invocation.d.ts

@@ -26,9 +26,8 @@ export class Invocation {
      * @param {Uint8Array} bytes
      * @param {CID} cid
      * @param {Delegation[]} delegations
-     * @param {string} replayKey
      */
-    constructor(envelope: import("./types.js").DecodedEnvelope<"inv">, bytes: Uint8Array, cid: CID, delegations: Delegation[], replayKey: string);
+    constructor(envelope: import("./types.js").DecodedEnvelope<"inv">, bytes: Uint8Array, cid: CID, delegations: Delegation[]);
     /**
      * @type {Delegation[]}
      */
@@ -37,16 +36,6 @@ export class Invocation {
      * @type {CID}
      */
     cid: CID;
-    /**
-     * Key to deduplicate this invocation on: the CID of its signature payload.
-     *
-     * Use this instead of {@link Invocation.cid} to detect replays. The CID
-     * covers the signature bytes, and some signature algorithms (e.g. ECDSA)
-     * accept more than one valid signature for the same payload.
-     *
-     * @type {string}
-     */
-    replayKey: string;
     envelope: import("./types.js").DecodedEnvelope<"inv">;
     payload: import("./types.js").InvocationPayload;
     bytes: Uint8Array<ArrayBufferLike>;

package/dist/src/invocation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../src/invocation.js"],"names":[],"mappings":"AAgRA;;;;GAIG;AACH,sCAHW,OAAO,YAAY,EAAE,iBAAiB,UACtC,UAAU,EAAE,WA6DtB;AA3TD;;GAEG;AAEH;;GAEG;AACH;IAuCE;;;OAGG;IACH,qBAFW,OAAO,YAAY,EAAE,qBAAqB,uBAoEpD;IAED;;OAEG;IACH,uBAFW,OAAO,YAAY,EAAE,iBAAiB,uBAiEhD;IA3JD;;;;;;;OAOG;IACH,sBANW,OAAO,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,SAC3C,UAAU,OACV,GAAG,eACH,UAAU,EAAE,aACZ,MAAM,EAShB;IApCD;;OAEG;IACH,aAFU,UAAU,EAAE,CAEX;IAEX;;OAEG;IACH,KAFU,GAAG,CAEV;IAEH;;;;;;;;OAQG;IACH,WAFU,MAAM,CAEP;IAWP,sDAAwB;IACxB,gDAA+B;IAC/B,mCAAkB;CAiJrB;gCAxL4B,iBAAiB;oBApB1B,kBAAkB"}
+{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../src/invocation.js"],"names":[],"mappings":"AA4PA;;;;GAIG;AACH,sCAHW,OAAO,YAAY,EAAE,iBAAiB,UACtC,UAAU,EAAE,WA6DtB;AAxSD;;GAEG;AAEH;;GAEG;AACH;IA0BE;;;OAGG;IACH,qBAFW,OAAO,YAAY,EAAE,qBAAqB,uBAoEpD;IAED;;OAEG;IACH,uBAFW,OAAO,YAAY,EAAE,iBAAiB,uBA2DhD;IAnJD;;;;;;OAMG;IACH,sBALW,OAAO,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,SAC3C,UAAU,OACV,GAAG,eACH,UAAU,EAAE,EAQtB;IAvBD;;OAEG;IACH,aAFU,UAAU,EAAE,CAEX;IAEX;;OAEG;IACH,KAFU,GAAG,CAEV;IAUD,sDAAwB;IACxB,gDAA+B;IAC/B,mCAAkB;CA0IrB;gCArK4B,iBAAiB;oBAnB1B,kBAAkB"}

package/dist/src/types/varsig.d.ts

@@ -8,11 +8,21 @@ import type { SignatureType } from 'iso-signatures/types';
 export type VarsigEncoding = 'RAW' | 'DAG-CBOR';
 /**
  * Supported signature types
+ *
+ * RSA (`RS256`) is not supported.
  */
-export type VarsigAlgorithm = SignatureType;
+export type VarsigAlgorithm = Exclude<SignatureType, 'RS256'>;
 export interface VarsigOptions {
     enc: VarsigEncoding;
     alg: VarsigAlgorithm;
 }
+/**
+ * Options for varsig `encode`. Accepts any signer type so unsupported
+ * algorithms (e.g. `RS256`) fail at runtime with a clear error.
+ */
+export interface VarsigEncodeOptions {
+    enc: VarsigEncoding;
+    alg: SignatureType;
+}
 export type DecodeOutput = VarsigOptions;
 //# sourceMappingURL=varsig.d.ts.map

package/dist/src/types/varsig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"varsig.d.ts","sourceRoot":"","sources":["../../../src/types/varsig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD;;GAEG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,UAAU,CAAA;AAE/C;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,aAAa,CAAA;AAE3C,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,cAAc,CAAA;IACnB,GAAG,EAAE,eAAe,CAAA;CACrB;AAED,MAAM,MAAM,YAAY,GAAG,aAAa,CAAA"}
+{"version":3,"file":"varsig.d.ts","sourceRoot":"","sources":["../../../src/types/varsig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD;;GAEG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,UAAU,CAAA;AAE/C;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;AAE7D,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,cAAc,CAAA;IACnB,GAAG,EAAE,eAAe,CAAA;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,cAAc,CAAA;IACnB,GAAG,EAAE,aAAa,CAAA;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,aAAa,CAAA"}

package/dist/src/types.d.ts

@@ -17,13 +17,6 @@ export * from './types/envelope';
 export * from './types/policy';
 export * from './types/varsig';
 export type ResolveProof = (proof: CID) => Promise<Delegation>;
-/**
- * Check whether a delegation CID is revoked.
- *
- * Called once for each CID the delegation could have been issued under
- * (up to 2 for ECDSA and 4 for EIP-191 signatures), since those signatures
- * can be re-encoded into another valid signature with a different CID.
- */
 export type IsRevoked = (cid: CID) => Promise<boolean>;
 export type VerifierResolver = Resolver;
 export type DidResolver = _DidResolver;
@@ -147,7 +140,7 @@ export interface ReplayStore {
      * Atomically record `key` and resolve `true`, or resolve `false` if `key`
      * was already recorded and has not expired.
      *
-     * @param key - Replay key of the invocation, see {@link Invocation.replayKey}
+     * @param key - CID of the invocation, see {@link Invocation.cid}
      * @param expiration - Unix time in seconds after which the key can be forgotten, or `null` to keep it forever
      */
     checkAndSet(key: string, expiration: number | null): Promise<boolean>;

package/dist/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAA;AACpE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC9D,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAE9B,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;AAC9D;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AACtD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAA;AACvC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAA;AAEtC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,MAAM,GACN,UAAU,GACV,WAAW,CAAA;AACf,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,GAAG,SAAS,SAAS,EAAE,CAAA;AAC1D,MAAM,MAAM,UAAU,GAClB;KAAG,GAAG,IAAI,MAAM,GAAG,SAAS;CAAE,GAC9B;KAAG,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS;CAAE,CAAA;AAE/C,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;AAE9D;;GAEG;AAEH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,gBAAgB;IAChE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;CAClB;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,yBAAyB;IAClE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;IAChB;;OAEG;IACH,GAAG,EAAE,UAAU,EAAE,CAAA;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;IACjB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtE;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAChC,MAAM,SAAS,gBAAgB,EAC/B,GAAG,SAAS,MAAM,GAAG,MAAM;IAE3B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,gBAAgB,CACxE,SAAQ,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC9C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,gBAAgB,CACtE,SAAQ,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACvD,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;AAE9C,MAAM,WAAW,cAAc,CAAC,MAAM,SAAS,gBAAgB;IAC7D,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,MAAM,OAAO,CAAC,MAAM,SAAS,gBAAgB,EAAE,MAAM,IAAI,CAC7D,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,KAC5B,UAAU,CAAC,MAAM,CAAC,CAAA;AAEvB,MAAM,WAAW,YAAY,CAC3B,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EACxC,MAAM;IAEN,UAAU,EAAE,GAAG,CAAA;IACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,WAAW,CAAC,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI;IAC1E,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,UAAU,CAAC,MAAM,CAAC,CAAA;CACzD,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,CACvB,MAAM,SAAS,MAAM,CACnB,MAAM,EACN,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CACnD,IACC;KACD,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,GAAG,EAAE,MAAM,MAAM,CAAC,GACvE;QACE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;QAC9C,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/C,GAAG,EAAE,MAAM,CAAA;KACZ,GACD,KAAK;CACV,CAAC,MAAM,MAAM,CAAC,CAAA;AAEf,MAAM,MAAM,QAAQ,CAClB,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,IACrE;IACF,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,OAAO,CAAA;CACb,EAAE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,MAAM,CAAC,IAAI,SAAS,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,IAAI;KACxE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,SAAS,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,GAC3D,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GACtC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAClB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,GACzB,KAAK,GACP,KAAK,GACP,KAAK;CACV,CAAA;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,aAAa,CAC1B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CACnE,IACC;IACF,OAAO,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,EAC/B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,IAAI,CAAC,GACxC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAA;IACpD,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAA;AACpE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC9D,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAE9B,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;AAC9D,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AACtD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAA;AACvC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAA;AAEtC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,MAAM,GACN,UAAU,GACV,WAAW,CAAA;AACf,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,GAAG,SAAS,SAAS,EAAE,CAAA;AAC1D,MAAM,MAAM,UAAU,GAClB;KAAG,GAAG,IAAI,MAAM,GAAG,SAAS;CAAE,GAC9B;KAAG,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS;CAAE,CAAA;AAE/C,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;AAE9D;;GAEG;AAEH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,gBAAgB;IAChE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;CAClB;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,yBAAyB;IAClE,GAAG,EAAE,OAAO,CAAA;IACZ,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;IAChB;;OAEG;IACH,GAAG,EAAE,UAAU,EAAE,CAAA;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,KAAK,EAAE,UAAU,CAAA;IACjB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtE;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAChC,MAAM,SAAS,gBAAgB,EAC/B,GAAG,SAAS,MAAM,GAAG,MAAM;IAE3B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,gBAAgB,CACxE,SAAQ,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC9C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,gBAAgB,CACtE,SAAQ,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACvD,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C;;OAEG;IACH,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,EAAE,GAAG,GAAG,IAAI,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;AAE9C,MAAM,WAAW,cAAc,CAAC,MAAM,SAAS,gBAAgB;IAC7D,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,MAAM,OAAO,CAAC,MAAM,SAAS,gBAAgB,EAAE,MAAM,IAAI,CAC7D,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,KAC5B,UAAU,CAAC,MAAM,CAAC,CAAA;AAEvB,MAAM,WAAW,YAAY,CAC3B,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EACxC,MAAM;IAEN,UAAU,EAAE,GAAG,CAAA;IACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,WAAW,CAAC,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,MAAM,IAAI;IAC1E,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,UAAU,CAAC,MAAM,CAAC,CAAA;CACzD,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,CACvB,MAAM,SAAS,MAAM,CACnB,MAAM,EACN,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CACnD,IACC;KACD,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,GAAG,EAAE,MAAM,MAAM,CAAC,GACvE;QACE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;QAC9C,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/C,GAAG,EAAE,MAAM,CAAA;KACZ,GACD,KAAK;CACV,CAAC,MAAM,MAAM,CAAC,CAAA;AAEf,MAAM,MAAM,QAAQ,CAClB,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,IACrE;IACF,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,EAAE,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,OAAO,CAAA;CACb,EAAE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,MAAM,CAAC,IAAI,SAAS,SAAS,UAAU,CAAC,gBAAgB,CAAC,EAAE,IAAI;KACxE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,SAAS,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,GAC3D,GAAG,SAAS,UAAU,CAAC,gBAAgB,CAAC,GACtC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAClB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,GACzB,KAAK,GACP,KAAK,GACP,KAAK;CACV,CAAA;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,aAAa,CAC1B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CACnE,IACC;IACF,OAAO,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,EAC/B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,IAAI,CAAC,GACxC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAA;IACpD,gBAAgB,EAAE,gBAAgB,CAAA;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA"}

package/dist/src/utils.d.ts

@@ -28,17 +28,6 @@ export function cid(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>)
  * @param {Uint8Array} bytes
  */
 export function assertCanonical(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>, bytes: Uint8Array): void;
-/**
- * Replay key of a UCAN: the CID of its signature payload, the exact bytes the
- * signature covers.
- *
- * Unlike {@link cid}, it does not depend on the signature bytes, so a second
- * valid signature over the same payload (for example a malleated ECDSA
- * signature) gets the same key.
- *
- * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
- */
-export function replayKey(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<string>;
 /**
  * Check if a DID and signature type are compatible
  *
@@ -142,41 +131,13 @@ export function assertArgs(args: unknown): void;
  * @returns {void}
  */
 export function assertMeta(meta: unknown): void;
-/**
- * Signatures a signer could have issued that verify the same as `signature`.
- *
- * ECDSA signatures are malleable: `(r, s)` and `(r, n - s)` are both valid.
- * EIP-191 signatures additionally carry a recovery byte `v` that wallets
- * return as 27/28 or 0/1. Verifiers also accept EIP-155 style `v >= 35`,
- * but no signer issues those for `personal_sign`, so they are not listed.
- *
- * The result always includes `signature` itself. Other algorithms (Ed25519,
- * RSA) have a single valid signature.
- *
- * @param {import('iso-signatures/types').SignatureType} alg
- * @param {Uint8Array} signature
- * @returns {Uint8Array[]}
- */
-export function equivalentSignatures(alg: import("iso-signatures/types").SignatureType, signature: Uint8Array): Uint8Array[];
-/**
- * CIDs of every envelope that verifies the same as `envelope`: one per
- * signature in {@link equivalentSignatures}, starting with the CID of
- * `envelope` itself.
- *
- * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
- */
-export function equivalentCids(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>): Promise<CID<any, 113, 18, 1>[]>;
 /**
  * Assert that the input is not revoked.
  *
- * Checks every equivalent CID of the envelope (see {@link equivalentCids}),
- * so re-encoding a revoked UCAN with another valid signature does not get it
- * past a CID-based revocation list.
- *
- * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ * @param {CID} cid
  * @param {(cid: CID) => Promise<boolean>} [isRevokedFn]
  */
-export function assertNotRevoked(envelope: import("./types.js").DecodedEnvelope<PayloadSpec>, isRevokedFn?: (cid: CID) => Promise<boolean>): Promise<void>;
+export function assertNotRevoked(cid: CID, isRevokedFn?: (cid: CID) => Promise<boolean>): Promise<void>;
 /**
  * Expiration or TTL (default 300 seconds)
  *

package/dist/src/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.js"],"names":[],"mappings":"AAWA;;GAEG;AAEH;;;;;GAKG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC;;;EAe3D;AAED,uCAEC;AAED;;;GAGG;AACH,8BAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,iCAW3D;AAED;;;;;;;;;GASG;AACH,0CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,SACjD,UAAU,QAapB;AAED;;;;;;;;;GASG;AACH,oCAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,mBAM3D;AAED;;;;;GAKG;AACH,2CAHW,OAAO,eAAe,EAAE,aAAa,WACrC,OAAO,sBAAsB,EAAE,aAAa,WA+BtD;AAED;;;;;GAKG;AACH,sCAHW,MAAM,GAAG,IAAI,QACb,MAAM,QAchB;AAED;;;;;;GAMG;AACH,uCAHW,OAAO,QACP,MAAM,QAQhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,QACN,MAAM,QAMhB;AAED;;;;;GAKG;AACH,qDAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,OAAO,SAAS,EAAE,QAAQ,gBAYpC;AAED;;;;;;GAMG;AACH,0CAJW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,6BACjD,OAAO,sCAAsC,EAAE,QAAQ,gBACvD,OAAO,SAAS,EAAE,QAAQ,oBAwBpC;AAED;;;;;;;;;;;;;GAaG;AACH,sCAJW,MAAM,SACN,MAAM,GACJ,OAAO,CAKnB;AAED;;;;;;;;;;;;;GAaG;AACH,8CAJW,MAAM,GAEJ,IAAI,CAuChB;AAED;;;;;;;;;;;;;GAaG;AACH,mCAXW,OAAO,GAEL,IAAI,CAehB;AACD;;;;GAIG;AACH,iCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,iCAJW,OAAO,GAEL,IAAI,CAWhB;AAqDD;;;;;;;;;;;;;;GAcG;AACH,0CAJW,OAAO,sBAAsB,EAAE,aAAa,aAC5C,UAAU,GACR,UAAU,EAAE,CAyCxB;AAED;;;;;;GAMG;AACH,yCAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,mCAQ3D;AAED;;;;;;;;;GASG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,iBAWxC;AAED;;;;;;GAMG;AACH,uCAHG;IAAgC,GAAG;IACV,GAAG;CAAC,iBAU/B;AA+ED;;GAEG;AACH,qCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,gCAJW,OAAO,GACL,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAKjD;AAlGD,iJAeI;AACJ,4KAAyD;AAEzD;;;;GAIG;AACH,mCASE;AAEF;;GAEG;AAEH;;;;;;GAMG;AACH,mKA4BI;AAEJ,kLAA8C;uBAxCjC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC;iCAthBP,YAAY;oBATtB,kBAAkB;oBADlB,SAAS;kBAGX,QAAQ"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.js"],"names":[],"mappings":"AAWA;;GAEG;AAEH;;;;;GAKG;AACH,2CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC;;;EAe3D;AAED,uCAEC;AAED;;;GAGG;AACH,8BAFW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,iCAW3D;AAED;;;;;;;;;GASG;AACH,0CAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,SACjD,UAAU,QAapB;AAED;;;;;GAKG;AACH,2CAHW,OAAO,eAAe,EAAE,aAAa,WACrC,OAAO,sBAAsB,EAAE,aAAa,WA4BtD;AAED;;;;;GAKG;AACH,sCAHW,MAAM,GAAG,IAAI,QACb,MAAM,QAchB;AAED;;;;;;GAMG;AACH,uCAHW,OAAO,QACP,MAAM,QAQhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,QACN,MAAM,QAMhB;AAED;;;;;GAKG;AACH,qDAHW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,gBACjD,OAAO,SAAS,EAAE,QAAQ,gBAYpC;AAED;;;;;;GAMG;AACH,0CAJW,OAAO,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,6BACjD,OAAO,sCAAsC,EAAE,QAAQ,gBACvD,OAAO,SAAS,EAAE,QAAQ,oBA2BpC;AAED;;;;;;;;;;;;;GAaG;AACH,sCAJW,MAAM,SACN,MAAM,GACJ,OAAO,CAKnB;AAED;;;;;;;;;;;;;GAaG;AACH,8CAJW,MAAM,GAEJ,IAAI,CAuChB;AAED;;;;;;;;;;;;;GAaG;AACH,mCAXW,OAAO,GAEL,IAAI,CAehB;AACD;;;;GAIG;AACH,iCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,iCAJW,OAAO,GAEL,IAAI,CAWhB;AAED;;;;;GAKG;AACH,sCAHW,GAAG,gBACH,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,iBAMxC;AAED;;;;;;GAMG;AACH,uCAHG;IAAgC,GAAG;IACV,GAAG;CAAC,iBAU/B;AA+ED;;GAEG;AACH,qCAFW,OAAO,QASjB;AAED;;;;;;GAMG;AACH,gCAJW,OAAO,GACL,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAKjD;AAlGD,iJAeI;AACJ,4KAAyD;AAEzD;;;;GAIG;AACH,mCASE;AAEF;;GAEG;AAEH;;;;;;GAMG;AACH,mKA4BI;AAEJ,kLAA8C;uBAxCjC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC;iCAnYP,YAAY;oBATtB,kBAAkB;oBADlB,SAAS;kBAGX,QAAQ"}

package/dist/src/varsig.d.ts

@@ -1,7 +1,7 @@
 /**
- * @param {import('./types.js').VarsigOptions} options
+ * @param {import('./types.js').VarsigEncodeOptions} options
  */
-export function encode(options: import("./types.js").VarsigOptions): Uint8Array<ArrayBuffer>;
+export function encode(options: import("./types.js").VarsigEncodeOptions): Uint8Array<ArrayBuffer>;
 /**
  * Decode varsig header
  *

package/dist/src/varsig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"varsig.d.ts","sourceRoot":"","sources":["../../src/varsig.js"],"names":[],"mappings":"AAuDA;;GAEG;AACH,gCAFW,OAAO,YAAY,EAAE,aAAa,2BAc5C;AA2BD;;;;;GAKG;AACH,4BAHW,UAAU,GACR,OAAO,YAAY,EAAE,YAAY,CAkE7C;AAlKD,qBAAsB,EAAI,CAAA;AAC1B,sBAAuB,CAAI,CAAA;AAC3B,8BAA+B,KAAM,CAAA;AAErC;;GAEG;AACH,4BAFU,MAAM,CAAC,MAAM,EAAE,OAAO,YAAY,EAAE,cAAc,CAAC,CAK5D;AAED;;GAEG;AACH,yBAFU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM9B"}
+{"version":3,"file":"varsig.d.ts","sourceRoot":"","sources":["../../src/varsig.js"],"names":[],"mappings":"AAoDA;;GAEG;AACH,gCAFW,OAAO,YAAY,EAAE,mBAAmB,2BAgBlD;AA2BD;;;;;GAKG;AACH,4BAHW,UAAU,GACR,OAAO,YAAY,EAAE,YAAY,CA2D7C;AA1JD,qBAAsB,EAAI,CAAA;AAC1B,sBAAuB,CAAI,CAAA;AAC3B,8BAA+B,KAAM,CAAA;AAErC;;GAEG;AACH,4BAFU,MAAM,CAAC,MAAM,EAAE,OAAO,YAAY,EAAE,cAAc,CAAC,CAK5D;AAED;;GAEG;AACH,yBAFU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK9B"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iso-ucan",
   "type": "module",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "description": "Isomorphic UCAN",
   "author": "Hugo Dias <hugomrdias@gmail.com> (hugodias.me)",
   "license": "MIT",
@@ -108,8 +108,8 @@
     "iobuffer": "^6.0.1",
     "iso-base": "^4.4.0",
     "iso-did": "^3.0.0",
-    "iso-kv": "^3.2.0",
-    "iso-signatures": "^0.6.0",
+    "iso-kv": "^4.0.0",
+    "iso-signatures": "^0.7.0",
     "iso-web": "^4.0.0",
     "it-merge": "^3.0.15",
     "multiformats": "^14.0.5",

package/readme.md

@@ -115,10 +115,11 @@ const invocation = await Invocation.from({
 })
 ```
 
-The store is keyed on `invocation.replayKey`, the CID of the signed payload.
-Do not deduplicate on `invocation.cid`: it also covers the signature, and
-some signature algorithms (such as ECDSA) accept more than one valid signature
-for the same payload.
+The store is keyed on `invocation.cid`. `iso-ucan` verifies signatures in
+strict mode, which accepts only the
+[canonical Varsig encoding](https://github.com/ChainAgnostic/varsig#canonical-signatures),
+for example low-S for ECDSA. An attacker can't re-encode an intercepted
+invocation under a different CID.
 
 `KVReplayStore` is atomic within one process only. When several processes or
 instances execute invocations, implement the `ReplayStore` interface on a
@@ -128,11 +129,58 @@ shared store with an atomic set-if-absent, such as Redis `SET NX` or SQL
 ## Revocation
 
 Pass `isRevoked` to `Delegation.from`, `Delegation#validate` or
-`Invocation.from` to reject revoked delegations by CID. Because ECDSA and
-EIP-191 signatures can be re-encoded into another valid signature, a revoked
-delegation can reappear under a different CID. `iso-ucan` therefore calls
-`isRevoked` with every CID the delegation could have been issued under (up to
-2 for ECDSA and 4 for EIP-191), and rejects it if any is revoked.
+`Invocation.from` to reject revoked delegations by CID. Strict verification
+rejects non-canonical signatures, so a revoked delegation can't come back under
+a different CID.
+
+### Migrate revocation lists from earlier versions
+
+Earlier versions accepted ECDSA (ES256, ES384, ES512) signatures with high S,
+and EIP-191 signatures with `v` of 0 or 1. If your revocation list holds the
+CID of such a delegation, anyone holding the delegation can convert it to the
+canonical encoding. The canonical CID is not in your list, so the revoked
+delegation passes `isRevoked`.
+
+To keep those revocations, add the canonical CID of each revoked delegation to
+your list. Compute it from the stored delegation bytes:
+
+```js
+import { Delegation } from 'iso-ucan/delegation'
+import * as Envelope from 'iso-ucan/envelope'
+import { normalizeS } from 'iso-signatures/signers/ecdsa.js'
+import { normalizeSignature } from 'iso-signatures/signers/eip191.js'
+
+const CURVES = { ES256: 'P-256', ES384: 'P-384', ES512: 'P-521' }
+
+/**
+ * @param {Uint8Array} bytes - Revoked delegation, as stored
+ * @param {import('iso-ucan/types').VerifierResolver} verifierResolver
+ */
+async function canonicalCid(bytes, verifierResolver) {
+  const envelope = Envelope.decode({ envelope: bytes })
+  let signature = envelope.signature
+  if (envelope.alg === 'EIP191') {
+    signature = normalizeSignature(signature)
+  } else if (envelope.alg in CURVES) {
+    signature = normalizeS(CURVES[envelope.alg], signature)
+  }
+
+  const canonical = Envelope.encode({
+    signature,
+    signaturePayload: Envelope.getSignaturePayload({
+      spec: envelope.spec,
+      version: envelope.version,
+      signatureType: envelope.alg,
+      payload: envelope.payload,
+    }),
+  })
+  const delegation = await Delegation.from({ bytes: canonical, verifierResolver })
+  return delegation.cid
+}
+```
+
+Ed25519 and ES256K signatures were already canonical, so their CIDs don't
+change.
 
 ## EIP-191 wallet signing
 

package/src/delegation.js

@@ -93,7 +93,7 @@ export class Delegation {
     await verifySignature(envelope, verifierResolver, didResolveOptions)
 
     const _cid = await cid(envelope)
-    await assertNotRevoked(envelope, options.isRevoked)
+    await assertNotRevoked(_cid, options.isRevoked)
 
     return new Delegation(envelope, bytes, _cid)
   }
@@ -151,7 +151,7 @@ export class Delegation {
 
     assertStructure(payload, options.now)
 
-    const { signature, signaturePayload } = await Envelope.sign({
+    const { alg, signature, signaturePayload } = await Envelope.sign({
       spec: 'dlg',
       signer: options.iss,
       payload,
@@ -161,7 +161,7 @@ export class Delegation {
 
     /** @type {import("./types.js").DecodedEnvelope<'dlg'>} */
     const envelope = {
-      alg: options.iss.signatureType,
+      alg,
       enc: 'DAG-CBOR',
       signature,
       payload,
@@ -187,7 +187,7 @@ export class Delegation {
       options.verifierResolver,
       options.didResolver
     )
-    await assertNotRevoked(this.envelope, options.isRevoked)
+    await assertNotRevoked(this.cid, options.isRevoked)
 
     return true
   }

package/src/envelope.js

@@ -187,6 +187,10 @@ export async function sign(options) {
   })
   const signature = await signer.sign(cbor.encode(signaturePayload))
   return {
+    // getSignaturePayload throws for algorithms varsig does not support
+    alg: /** @type {import('./types.js').VarsigAlgorithm} */ (
+      signer.signatureType
+    ),
     signature,
     signaturePayload,
   }

package/src/invocation.js

@@ -15,7 +15,6 @@ import {
   expOrTtl,
   isObject,
   nowInSeconds,
-  replayKey,
   verifySignature,
 } from './utils.js'
 
@@ -37,32 +36,19 @@ export class Invocation {
    */
   cid
 
-  /**
-   * Key to deduplicate this invocation on: the CID of its signature payload.
-   *
-   * Use this instead of {@link Invocation.cid} to detect replays. The CID
-   * covers the signature bytes, and some signature algorithms (e.g. ECDSA)
-   * accept more than one valid signature for the same payload.
-   *
-   * @type {string}
-   */
-  replayKey
-
   /**
    *
    * @param {import("./types.js").DecodedEnvelope<'inv'>} envelope
    * @param {Uint8Array} bytes
    * @param {CID} cid
    * @param {Delegation[]} delegations
-   * @param {string} replayKey
    */
-  constructor(envelope, bytes, cid, delegations, replayKey) {
+  constructor(envelope, bytes, cid, delegations) {
     this.envelope = envelope
     this.payload = envelope.payload
     this.bytes = bytes
     this.cid = cid
     this.delegations = delegations
-    this.replayKey = replayKey
   }
 
   /**
@@ -104,7 +90,7 @@ export class Invocation {
       for (const proof of envelope.payload.prf) {
         const delegation = await options.resolveProof(proof)
         // The signature covers the proof CIDs, so the resolved delegation
-        // must be exactly that one (not an ECDSA-equivalent re-encoding)
+        // must be exactly that one
         if (!delegation.cid.equals(proof)) {
           throw new Error(
             `UCAN Invocation proof CID mismatch, expected ${proof} but resolver returned ${delegation.cid}`
@@ -121,20 +107,20 @@ export class Invocation {
       assertMaxTtl(envelope.payload.exp, options.maxTtl, options.now)
     }
 
-    const _replayKey = await replayKey(envelope)
+    const _cid = await cid(envelope)
 
     // Must run last, so only fully validated invocations are recorded
     if (
       options.replayStore &&
-      !(await options.replayStore.checkAndSet(_replayKey, envelope.payload.exp))
+      !(await options.replayStore.checkAndSet(
+        _cid.toString(),
+        envelope.payload.exp
+      ))
     ) {
-      throw new Error(
-        `UCAN Invocation replay detected, already seen ${_replayKey}`
-      )
+      throw new Error(`UCAN Invocation replay detected, already seen ${_cid}`)
     }
 
-    const _cid = await cid(envelope)
-    return new Invocation(envelope, bytes, _cid, proofs, _replayKey)
+    return new Invocation(envelope, bytes, _cid, proofs)
   }
 
   /**
@@ -178,7 +164,7 @@ export class Invocation {
       assertProofs(payload, options.prf)
     }
 
-    const { signature, signaturePayload } = await Envelope.sign({
+    const { alg, signature, signaturePayload } = await Envelope.sign({
       spec: 'inv',
       signer: options.iss,
       payload,
@@ -188,7 +174,7 @@ export class Invocation {
 
     /** @type {import("./types.js").DecodedEnvelope<'inv'>} */
     const envelope = {
-      alg: options.iss.signatureType,
+      alg,
       enc: 'DAG-CBOR',
       signature,
       payload,
@@ -196,13 +182,7 @@ export class Invocation {
       version: Envelope.VERSION,
     }
 
-    return new Invocation(
-      envelope,
-      bytes,
-      await cid(envelope),
-      options.prf,
-      await replayKey(envelope)
-    )
+    return new Invocation(envelope, bytes, await cid(envelope), options.prf)
   }
 }
 

package/src/types/varsig.ts

@@ -11,12 +11,23 @@ export type VarsigEncoding = 'RAW' | 'DAG-CBOR'
 
 /**
  * Supported signature types
+ *
+ * RSA (`RS256`) is not supported.
  */
-export type VarsigAlgorithm = SignatureType
+export type VarsigAlgorithm = Exclude<SignatureType, 'RS256'>
 
 export interface VarsigOptions {
   enc: VarsigEncoding
   alg: VarsigAlgorithm
 }
 
+/**
+ * Options for varsig `encode`. Accepts any signer type so unsupported
+ * algorithms (e.g. `RS256`) fail at runtime with a clear error.
+ */
+export interface VarsigEncodeOptions {
+  enc: VarsigEncoding
+  alg: SignatureType
+}
+
 export type DecodeOutput = VarsigOptions

package/src/types.ts

@@ -19,13 +19,6 @@ export * from './types/policy'
 export * from './types/varsig'
 
 export type ResolveProof = (proof: CID) => Promise<Delegation>
-/**
- * Check whether a delegation CID is revoked.
- *
- * Called once for each CID the delegation could have been issued under
- * (up to 2 for ECDSA and 4 for EIP-191 signatures), since those signatures
- * can be re-encoded into another valid signature with a different CID.
- */
 export type IsRevoked = (cid: CID) => Promise<boolean>
 export type VerifierResolver = Resolver
 export type DidResolver = _DidResolver
@@ -164,7 +157,7 @@ export interface ReplayStore {
    * Atomically record `key` and resolve `true`, or resolve `false` if `key`
    * was already recorded and has not expired.
    *
-   * @param key - Replay key of the invocation, see {@link Invocation.replayKey}
+   * @param key - CID of the invocation, see {@link Invocation.cid}
    * @param expiration - Unix time in seconds after which the key can be forgotten, or `null` to keep it forever
    */
   checkAndSet(key: string, expiration: number | null): Promise<boolean>

package/src/utils.js

@@ -75,22 +75,6 @@ export function assertCanonical(envelope, bytes) {
   }
 }
 
-/**
- * Replay key of a UCAN: the CID of its signature payload, the exact bytes the
- * signature covers.
- *
- * Unlike {@link cid}, it does not depend on the signature bytes, so a second
- * valid signature over the same payload (for example a malleated ECDSA
- * signature) gets the same key.
- *
- * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
- */
-export async function replayKey(envelope) {
-  const hash = await sha256.digest(dagCbor.encode(signaturePayload(envelope)))
-
-  return CID.create(1, dagCbor.code, hash).toString()
-}
-
 /**
  * Check if a DID and signature type are compatible
  *
@@ -118,9 +102,6 @@ export function isSigAndDidCompatible(did, sigType) {
     return true
   }
 
-  if (did.verifiableDid.type === 'RSA' && sigType === 'RS256') {
-    return true
-  }
   if (did.verifiableDid.type === 'secp256k1' && sigType === 'EIP191') {
     return true
   }
@@ -212,6 +193,9 @@ export async function verifySignature(
       message: dagCbor.encode(signaturePayload(envelope)),
       did: issuer,
       type: envelope.alg,
+      // Accept only canonical signatures, such as low-S ECDSA, so each UCAN
+      // has one CID for replay and revocation checks
+      strict: true,
     })
 
     if (!isVerified) {
@@ -349,146 +333,15 @@ export function assertMeta(meta) {
   }
 }
 
-/**
- * ECDSA curve orders by signature algorithm, with the byte length of each
- * signature component.
- *
- * @type {Record<string, {n: bigint, size: number}>}
- */
-const ECDSA_CURVES = {
-  ES256: {
-    n: 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n,
-    size: 32,
-  },
-  ES384: {
-    n: 0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973n,
-    size: 48,
-  },
-  ES512: {
-    n: 0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409n,
-    size: 66,
-  },
-  ES256K: {
-    n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
-    size: 32,
-  },
-  EIP191: {
-    n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
-    size: 32,
-  },
-}
-
-/**
- * @param {Uint8Array} bytes
- */
-function bytesToBigInt(bytes) {
-  let n = 0n
-  for (const b of bytes) n = (n << 8n) | BigInt(b)
-  return n
-}
-
-/**
- * @param {bigint} n
- * @param {number} size
- */
-function bigIntToBytes(n, size) {
-  const out = new Uint8Array(size)
-  for (let i = size - 1; i >= 0; i--) {
-    out[i] = Number(n & 0xffn)
-    n >>= 8n
-  }
-  return out
-}
-
-/**
- * Signatures a signer could have issued that verify the same as `signature`.
- *
- * ECDSA signatures are malleable: `(r, s)` and `(r, n - s)` are both valid.
- * EIP-191 signatures additionally carry a recovery byte `v` that wallets
- * return as 27/28 or 0/1. Verifiers also accept EIP-155 style `v >= 35`,
- * but no signer issues those for `personal_sign`, so they are not listed.
- *
- * The result always includes `signature` itself. Other algorithms (Ed25519,
- * RSA) have a single valid signature.
- *
- * @param {import('iso-signatures/types').SignatureType} alg
- * @param {Uint8Array} signature
- * @returns {Uint8Array[]}
- */
-export function equivalentSignatures(alg, signature) {
-  const curve = ECDSA_CURVES[alg]
-  if (!curve) {
-    return [signature]
-  }
-
-  const { n, size } = curve
-  const isEip191 = alg === 'EIP191'
-  if (signature.length !== size * 2 + (isEip191 ? 1 : 0)) {
-    return [signature]
-  }
-
-  const r = signature.subarray(0, size)
-  const s = bytesToBigInt(signature.subarray(size, size * 2))
-  if (s === 0n || s >= n) {
-    return [signature]
-  }
-  const sFlipped = bigIntToBytes(n - s, size)
-
-  if (!isEip191) {
-    return [signature, new Uint8Array([...r, ...sFlipped])]
-  }
-
-  const v = signature[size * 2]
-  /** @type {number} */
-  let parity
-  if (v === 0 || v === 27) parity = 0
-  else if (v === 1 || v === 28) parity = 1
-  else if (v >= 35) parity = v % 2 === 0 ? 1 : 0
-  else return [signature]
-
-  const sBytes = signature.subarray(size, size * 2)
-  const candidates = [
-    new Uint8Array([...r, ...sBytes, parity]),
-    new Uint8Array([...r, ...sBytes, parity + 27]),
-    new Uint8Array([...r, ...sFlipped, 1 - parity]),
-    new Uint8Array([...r, ...sFlipped, 28 - parity]),
-  ]
-  return [signature, ...candidates.filter((c) => !equals(c, signature))]
-}
-
-/**
- * CIDs of every envelope that verifies the same as `envelope`: one per
- * signature in {@link equivalentSignatures}, starting with the CID of
- * `envelope` itself.
- *
- * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
- */
-export async function equivalentCids(envelope) {
-  return await Promise.all(
-    equivalentSignatures(envelope.alg, envelope.signature).map((signature) =>
-      cid({ ...envelope, signature })
-    )
-  )
-}
-
 /**
  * Assert that the input is not revoked.
  *
- * Checks every equivalent CID of the envelope (see {@link equivalentCids}),
- * so re-encoding a revoked UCAN with another valid signature does not get it
- * past a CID-based revocation list.
- *
- * @param {import('./types.js').DecodedEnvelope<PayloadSpec>} envelope
+ * @param {CID} cid
  * @param {(cid: CID) => Promise<boolean>} [isRevokedFn]
  */
-export async function assertNotRevoked(envelope, isRevokedFn) {
-  if (!isRevokedFn) {
-    return
-  }
-  for (const c of await equivalentCids(envelope)) {
-    if (await isRevokedFn(c)) {
-      throw new Error('UCAN revoked')
-    }
+export async function assertNotRevoked(cid, isRevokedFn) {
+  if (isRevokedFn && (await isRevokedFn(cid))) {
+    throw new Error('UCAN revoked')
   }
 }
 

package/src/varsig.js

@@ -19,7 +19,6 @@ export const CODE_ENCODING = /** @types  {const} */ {
  * @type {Record<number, string>}
  */
 export const SIG_PREFIX = /** @type {const} */ ({
-  0x12_05: 'RSA',
   0xed: 'EdDSA',
   0xec: 'ECDSA',
 })
@@ -37,8 +36,6 @@ const VARINT = {
   'DAG-CBOR': [113],
 
   /** Presets */
-  // rsa(2b)+SHA2-256(1b)+256(1b)
-  RS256: [133, 36, 18, 128, 2],
   // eddsa(2b)+edwards25519(2b)+SHA2-512(1b)
   Ed25519: [237, 1, 237, 1, 19],
   // ECDSA(2b) + p256(2b)   + SHA2-256(1b)
@@ -54,7 +51,7 @@ const VARINT = {
 }
 
 /**
- * @param {import('./types.js').VarsigOptions} options
+ * @param {import('./types.js').VarsigEncodeOptions} options
  */
 export function encode(options) {
   const enc = VARINT[options.enc]
@@ -62,7 +59,9 @@ export function encode(options) {
     throw new TypeError(`Unsupported encoding ${options.enc}`)
   }
 
-  const alg = VARINT[options.alg]
+  const alg = /** @type {Partial<Record<string, number[]>>} */ (VARINT)[
+    options.alg
+  ]
   if (!alg) {
     throw new TypeError(`Unsupported algorithm ${options.alg}`)
   }
@@ -121,13 +120,6 @@ export function decode(buf) {
   /** @type {import('./types.js').DecodeOutput} */
   let output
   switch (SIG_PREFIX[code]) {
-    case 'RSA': {
-      output = {
-        alg: getPreset(bytes.readBytes(5), ['RS256']),
-        enc: getEncoding(bytes.readBytes(1)),
-      }
-      break
-    }
     case 'EdDSA': {
       output = {
         alg: getPreset(bytes.readBytes(5), ['Ed25519']),