quantum-resistant-rustykey 0.13.9 → 0.14.0

package/dist/sqisign-accel-worker.js

@@ -1,3 +1,27 @@
+// src/opfs-sk/browser-gate.ts
+var OPFS_SK_WORKER_NAME = "qrr-opfs-sk";
+var BROWSER_SK_CEREMONY_ERROR = "Browser keygen/sign requires WebAuthn userVerification:required, PRF, TEE, and loadOpfsSkWallet() (ciphertext in OPFS). Node and server REST loaders are unchanged. verify() remains available.";
+function hasWorkerGlobalScope() {
+  return typeof globalThis.WorkerGlobalScope !== "undefined";
+}
+function hasWindow() {
+  return typeof globalThis.window !== "undefined";
+}
+function workerName() {
+  const name = globalThis.name;
+  return typeof name === "string" ? name : "";
+}
+function isUnconstrainedSigningRealm() {
+  return !hasWindow() && !hasWorkerGlobalScope();
+}
+function isOpfsSkWorkerRealm() {
+  return hasWorkerGlobalScope() && !hasWindow() && workerName() === OPFS_SK_WORKER_NAME;
+}
+function assertBrowserSkCeremonyAllowed() {
+  if (isUnconstrainedSigningRealm() || isOpfsSkWorkerRealm()) return;
+  throw new Error(BROWSER_SK_CEREMONY_ERROR);
+}
+
 // src/signature-common.ts
 function fromHex(hex) {
   const cleaned = hex.trim().replace(/^0x/i, "").replace(/\s+/g, "");
@@ -17,12 +41,36 @@ function asBytes(value) {
 }
 function withStack(module, run) {
   const stack = module.stackSave();
+  const regions = [];
   try {
-    return run((size) => module.stackAlloc(size));
+    return run((size) => {
+      const ptr = module.stackAlloc(size);
+      regions.push({ ptr, length: size });
+      return ptr;
+    });
   } finally {
+    zeroizeStackAllocations(module, stack, regions);
     module.stackRestore(stack);
   }
 }
+function zeroizeBytes(bytes) {
+  bytes.fill(0);
+}
+function zeroizeStackAllocations(module, savedStack, regions) {
+  const heap = module.HEAPU8;
+  for (const { ptr, length } of regions) {
+    zeroizeHeapRange(heap, ptr, ptr + length);
+  }
+  const now = module.stackSave();
+  const lo = now < savedStack ? now : savedStack;
+  const hi = now < savedStack ? savedStack : now;
+  zeroizeHeapRange(heap, lo, hi);
+}
+function zeroizeHeapRange(heap, start, end) {
+  const lo = start < 0 ? 0 : start;
+  const hi = end > heap.length ? heap.length : end;
+  if (hi > lo) heap.fill(0, lo, hi);
+}
 function writeBytes(module, alloc, bytes) {
   const ptr = alloc(bytes.length);
   module.HEAPU8.set(bytes, ptr);
@@ -1440,43 +1488,47 @@ async function runKeygen(variant) {
       )
     )
   );
-  return withStack(module, (alloc) => {
-    const pkPtr = alloc(
-      wasmExport(
-        module[`_sqisign_${p}_public_key_bytes`]
-      )
-    );
-    const skPtr = alloc(
-      wasmExport(
-        module[`_sqisign_${p}_private_key_bytes`]
-      )
-    );
-    const seedPtr = writeBytes(module, alloc, seed);
-    const rc = wasmExportWithArgs(
-      module[`_sqisign_${p}_keypair_seeded`],
-      pkPtr,
-      skPtr,
-      seedPtr
-    );
-    if (rc !== 0)
-      throw new Error(`SQISign ${variant} keypair failed with code ${rc}`);
-    return {
-      pk: readBytes(
-        module,
-        pkPtr,
+  try {
+    return withStack(module, (alloc) => {
+      const pkPtr = alloc(
         wasmExport(
           module[`_sqisign_${p}_public_key_bytes`]
         )
-      ),
-      sk: readBytes(
-        module,
-        skPtr,
+      );
+      const skPtr = alloc(
         wasmExport(
           module[`_sqisign_${p}_private_key_bytes`]
         )
-      )
-    };
-  });
+      );
+      const seedPtr = writeBytes(module, alloc, seed);
+      const rc = wasmExportWithArgs(
+        module[`_sqisign_${p}_keypair_seeded`],
+        pkPtr,
+        skPtr,
+        seedPtr
+      );
+      if (rc !== 0)
+        throw new Error(`SQISign ${variant} keypair failed with code ${rc}`);
+      return {
+        pk: readBytes(
+          module,
+          pkPtr,
+          wasmExport(
+            module[`_sqisign_${p}_public_key_bytes`]
+          )
+        ),
+        sk: readBytes(
+          module,
+          skPtr,
+          wasmExport(
+            module[`_sqisign_${p}_private_key_bytes`]
+          )
+        )
+      };
+    });
+  } finally {
+    zeroizeBytes(seed);
+  }
 }
 async function runSign(variant, msg, sk) {
   const module = await getModule(variant);
@@ -1488,33 +1540,37 @@ async function runSign(variant, msg, sk) {
       )
     )
   );
-  return withStack(module, (alloc) => {
-    const sigPtr = alloc(
-      wasmExport(
-        module[`_sqisign_${p}_signature_bytes`]
-      )
-    );
-    const msgPtr = writeBytes(module, alloc, msg);
-    const skPtr = writeBytes(module, alloc, sk);
-    const seedPtr = writeBytes(module, alloc, seed);
-    const rc = wasmExportWithArgs(
-      module[`_sqisign_${p}_sign_seeded`],
-      sigPtr,
-      msgPtr,
-      msg.length,
-      skPtr,
-      seedPtr
-    );
-    if (rc !== 0)
-      throw new Error(`SQISign ${variant} sign failed with code ${rc}`);
-    return readBytes(
-      module,
-      sigPtr,
-      wasmExport(
-        module[`_sqisign_${p}_signature_bytes`]
-      )
-    );
-  });
+  try {
+    return withStack(module, (alloc) => {
+      const sigPtr = alloc(
+        wasmExport(
+          module[`_sqisign_${p}_signature_bytes`]
+        )
+      );
+      const msgPtr = writeBytes(module, alloc, msg);
+      const skPtr = writeBytes(module, alloc, sk);
+      const seedPtr = writeBytes(module, alloc, seed);
+      const rc = wasmExportWithArgs(
+        module[`_sqisign_${p}_sign_seeded`],
+        sigPtr,
+        msgPtr,
+        msg.length,
+        skPtr,
+        seedPtr
+      );
+      if (rc !== 0)
+        throw new Error(`SQISign ${variant} sign failed with code ${rc}`);
+      return readBytes(
+        module,
+        sigPtr,
+        wasmExport(
+          module[`_sqisign_${p}_signature_bytes`]
+        )
+      );
+    });
+  } finally {
+    zeroizeBytes(seed);
+  }
 }
 async function runVerify(variant, sig, msg, pk) {
   const module = await getModule(variant);
@@ -1535,6 +1591,9 @@ async function runVerify(variant, sig, msg, pk) {
 }
 async function handleOp(request) {
   try {
+    if (request.op === "keygen" || request.op === "sign") {
+      assertBrowserSkCeremonyAllowed();
+    }
     if (request.op === "keygen") {
       const { pk, sk } = await runKeygen(request.variant);
       return { id: request.id, ok: true, pk, sk };