sm-crypto-wasm 0.3.1 → 0.7.0

package/dist/x509/issue.js

@@ -0,0 +1,414 @@
+/**
+ * X.509 证书签发（自签 + 用 CA 证书签发终端证书）。
+ *
+ * 安全边界（红线 #4 / #5 / #6）：
+ * - 证书版本固定 v3；
+ * - `basicConstraints.ca=false` 的证书不得用于签发子证书，且该证书不能带
+ *   `keyUsage: keyCertSign`；
+ * - 用作签发者的证书必须是 CA（`basicConstraints.ca === true`），若带 KeyUsage
+ *   必须包含 `keyCertSign`；
+ * - CA 证书的 KeyUsage（若提供）必须包含 `keyCertSign`；
+ * - 序列号为正整数；默认生成 16 字节随机数并把最高位清零；
+ * - SAN 的 dNSName / rfc822Name / URI 必须为 ASCII，iPAddress 必须是合法 4/16 字节。
+ *
+ * 本模块**不生成密钥、不管理私钥**：私钥由调用方提供，签名后不驻留。
+ */
+import { parseSm2PublicKeyPem } from '../pem/sm2.js';
+import { bytesToPem, hexToBytes, toBytes } from '../runtime/convert.js';
+import { randomBytes } from '../runtime/random.js';
+import * as sm2 from '../sm2/index.js';
+import * as sm3 from '../sm3/index.js';
+import { encodeAuthorityKeyIdentifier, encodeBasicConstraints, encodeCertificate, encodeExtendedKeyUsage, encodeKeyUsage, encodeSubjectAltName, encodeSubjectKeyIdentifier, encodeTbsCertificate, normalizePublicKey, } from './encode.js';
+import { CertificateError } from './errors.js';
+import { OID_AUTHORITY_KEY_IDENTIFIER, OID_BASIC_CONSTRAINTS, OID_EXTENDED_KEY_USAGE, OID_KEY_USAGE, OID_SUBJECT_ALT_NAME, OID_SUBJECT_KEY_IDENTIFIER, } from './oids.js';
+import { parseCertificate } from './parse.js';
+import { sha1Hex } from './sha1.js';
+import { rawSignatureToDer } from './sig.js';
+/**
+ * 签发一张 SM2 证书。
+ *
+ * @throws CertificateError 输入不满足证书约束。
+ * @throws RangeError 序列号/有效期/路径长度越界。
+ */
+export function issueCertificate(opts) {
+    validateSubject(opts.subject, 'subject');
+    const issuer = opts.issuer ??
+        (opts.signer.certificate ? nameToInput(opts.signer.certificate.subject) : opts.subject);
+    validateSubject(issuer, 'issuer');
+    validateSigner(opts.signer);
+    validateBasicConstraints(opts);
+    const serialNumber = opts.serialNumber ?? randomSerialNumber();
+    validateSerialNumber(serialNumber);
+    const notBefore = opts.notBefore ?? new Date(Date.now() - 5 * 60_000);
+    const validity = { notBefore, notAfter: opts.notAfter };
+    validateValidity(validity);
+    const publicKey = resolveSubjectPublicKey(opts);
+    const extensions = buildExtensions(opts, publicKey, issuer === opts.subject && !opts.signer.certificate);
+    const tbs = encodeTbsCertificate({
+        version: 3,
+        serialNumber,
+        issuer,
+        validity,
+        subject: opts.subject,
+        publicKey,
+        extensions: extensions.list,
+    });
+    // 默认空标识：与 OpenSSL 的 X.509 路径一致（`openssl verify` 可直接验证）。
+    // 需要 GM/T 默认标识时由调用方显式传 `DEFAULT_SM2_USER_ID`。
+    const signatureHex = sm2.signWithID(opts.signer.privateKey, tbs.raw, opts.userID ?? new Uint8Array(0));
+    const signatureDer = rawSignatureToDer(hexToBytes(signatureHex, 'signature'));
+    const der = encodeCertificate(tbs, signatureDer);
+    return {
+        pem: bytesToPem(der, 'CERTIFICATE'),
+        der,
+        certificate: parseCertificate(der),
+    };
+}
+/**
+ * 生成自签证书（issuer = subject）。
+ *
+ * @throws CertificateError / RangeError 同 `issueCertificate`。
+ */
+export function createSelfSignedCertificate(opts) {
+    const { privateKey, ...rest } = opts;
+    return issueCertificate({ ...rest, signer: { privateKey } });
+}
+/**
+ * 解析 RFC 4514 子集形式的 DN 字符串，如 `"C=CN,O=Example,CN=Example CA"`。
+ *
+ * 支持反斜杠转义（`\,`、`\=`、`\\`）；不做完整 RFC 4514（多值 RDN、
+ * `#hex` 编码、十六进制转义等）。
+ *
+ * @throws CertificateError 格式非法或属性名未知。
+ */
+export function parseDistinguishedName(input) {
+    if (typeof input !== 'string' || input.trim().length === 0) {
+        throw new CertificateError('parseDistinguishedName: empty input');
+    }
+    const result = {};
+    for (const part of splitUnescaped(input, ',')) {
+        const eq = indexOfUnescaped(part, '=');
+        if (eq < 0)
+            throw new CertificateError(`parseDistinguishedName: missing '=' in "${part}"`);
+        const label = decodeEscapes(part.slice(0, eq)).trim();
+        const value = decodeEscapes(part.slice(eq + 1)).trim();
+        const field = FIELD_BY_LABEL[label.toUpperCase()];
+        if (field === undefined) {
+            throw new CertificateError(`parseDistinguishedName: unsupported attribute "${label}"`);
+        }
+        result[field] = value;
+    }
+    if (result.commonName === undefined) {
+        throw new CertificateError('parseDistinguishedName: CN is required');
+    }
+    return {
+        commonName: result.commonName,
+        ...(result.organization === undefined ? {} : { organization: result.organization }),
+        ...(result.organizationalUnit === undefined
+            ? {}
+            : { organizationalUnit: result.organizationalUnit }),
+        ...(result.country === undefined ? {} : { country: result.country }),
+        ...(result.state === undefined ? {} : { state: result.state }),
+        ...(result.locality === undefined ? {} : { locality: result.locality }),
+        ...(result.emailAddress === undefined ? {} : { emailAddress: result.emailAddress }),
+    };
+}
+// ---------- 校验 ----------
+function validateSubject(dn, what) {
+    if (typeof dn !== 'object' || dn === null || typeof dn.commonName !== 'string') {
+        throw new TypeError(`${what}: commonName is required`);
+    }
+    if (dn.commonName.length === 0) {
+        throw new CertificateError(`${what}: commonName must not be empty`);
+    }
+    for (const key of [
+        'organization',
+        'organizationalUnit',
+        'state',
+        'locality',
+        'emailAddress',
+    ]) {
+        const value = dn[key];
+        if (value !== undefined && typeof value !== 'string') {
+            throw new TypeError(`${what}.${key} must be a string`);
+        }
+    }
+    if (dn.country !== undefined && !/^[A-Za-z]{2}$/.test(dn.country)) {
+        throw new CertificateError(`${what}.country must be a 2-letter code`);
+    }
+    if (dn.emailAddress !== undefined) {
+        assertAscii(dn.emailAddress, `${what}.emailAddress`);
+    }
+}
+function validateSigner(signer) {
+    if (typeof signer !== 'object' || signer === null || signer.privateKey === undefined) {
+        throw new TypeError('signer.privateKey is required');
+    }
+    const cert = signer.certificate;
+    if (cert === undefined)
+        return;
+    // 红线 #4：只有 CA 证书才能签发子证书。
+    if (cert.basicConstraints?.ca !== true) {
+        throw new CertificateError('signer certificate is not a CA (basicConstraints.ca !== true)');
+    }
+    if (cert.keyUsage !== undefined && !cert.keyUsage.keyCertSign) {
+        throw new CertificateError('signer certificate keyUsage does not include keyCertSign');
+    }
+}
+function validateBasicConstraints(opts) {
+    const basic = opts.basicConstraints;
+    const keyUsage = opts.keyUsage;
+    if (basic === undefined)
+        return;
+    if (basic.ca) {
+        if (keyUsage !== undefined && !keyUsage.includes('keyCertSign')) {
+            throw new CertificateError('CA certificate requires keyUsage keyCertSign');
+        }
+    }
+    else {
+        if (keyUsage?.includes('keyCertSign')) {
+            throw new CertificateError('basicConstraints.ca=false cannot be combined with keyUsage keyCertSign');
+        }
+        if (basic.pathLen !== undefined) {
+            throw new RangeError('basicConstraints.pathLen is only valid for CA certificates');
+        }
+    }
+}
+function validateSerialNumber(serialNumber) {
+    if (typeof serialNumber !== 'bigint')
+        throw new TypeError('serialNumber must be a bigint');
+    if (serialNumber <= 0n)
+        throw new RangeError('serialNumber must be positive');
+    if (serialNumber >= 1n << 160n) {
+        throw new RangeError('serialNumber must fit in 20 bytes');
+    }
+}
+function validateValidity(validity) {
+    for (const [name, date] of [
+        ['notBefore', validity.notBefore],
+        ['notAfter', validity.notAfter],
+    ]) {
+        if (!(date instanceof Date) || Number.isNaN(date.getTime())) {
+            throw new TypeError(`${name} must be a valid Date`);
+        }
+    }
+    // 证书时间精度到秒；按秒比较避免毫秒差导致编码后两者相等。
+    const nb = Math.floor(validity.notBefore.getTime() / 1000);
+    const na = Math.floor(validity.notAfter.getTime() / 1000);
+    if (na <= nb)
+        throw new RangeError('notAfter must be later than notBefore');
+}
+function validateSubjectAltNames(names) {
+    if (names === undefined)
+        return;
+    for (const name of names) {
+        if (name === null || typeof name !== 'object' || typeof name.value !== 'string') {
+            throw new TypeError('subjectAltNames: each entry needs { type, value }');
+        }
+        if (name.value.length === 0) {
+            throw new CertificateError('subjectAltNames: value must not be empty');
+        }
+        switch (name.type) {
+            case 'dns':
+                assertAscii(name.value, 'subjectAltNames dNSName');
+                break;
+            case 'email':
+                assertAscii(name.value, 'subjectAltNames rfc822Name');
+                break;
+            case 'uri':
+                assertAscii(name.value, 'subjectAltNames URI');
+                break;
+            case 'ip':
+                // 具体解析在编码阶段完成；这里只做早期校验。
+                break;
+            default:
+                throw new CertificateError(`subjectAltNames: unknown type "${String(name.type)}"`);
+        }
+    }
+}
+function assertAscii(value, what) {
+    for (let i = 0; i < value.length; i++) {
+        if (value.charCodeAt(i) > 0x7f)
+            throw new CertificateError(`${what} must be ASCII`);
+    }
+}
+// ---------- 扩展 ----------
+function buildExtensions(opts, publicKey, selfSigned) {
+    validateSubjectAltNames(opts.subjectAltNames);
+    const list = [];
+    if (opts.basicConstraints !== undefined) {
+        list.push({
+            oid: OID_BASIC_CONSTRAINTS,
+            critical: true,
+            value: encodeBasicConstraints(opts.basicConstraints),
+        });
+    }
+    if (opts.keyUsage !== undefined && opts.keyUsage.length > 0) {
+        list.push({ oid: OID_KEY_USAGE, critical: true, value: encodeKeyUsage(opts.keyUsage) });
+    }
+    if (opts.extendedKeyUsage !== undefined && opts.extendedKeyUsage.length > 0) {
+        list.push({
+            oid: OID_EXTENDED_KEY_USAGE,
+            critical: false,
+            value: encodeExtendedKeyUsage(opts.extendedKeyUsage),
+        });
+    }
+    if (opts.subjectAltNames !== undefined && opts.subjectAltNames.length > 0) {
+        list.push({
+            oid: OID_SUBJECT_ALT_NAME,
+            critical: false,
+            value: encodeSubjectAltName(opts.subjectAltNames),
+        });
+    }
+    const skiOption = opts.subjectKeyIdentifier ?? true;
+    let ski;
+    if (skiOption !== false) {
+        const hash = typeof skiOption === 'object' ? skiOption.hash : 'sm3';
+        const digest = hash === 'sha1' ? sha1Hex(publicKey) : sm3.hash(publicKey);
+        ski = hexToBytes(digest, 'subjectKeyIdentifier').slice(0, 20);
+        list.push({
+            oid: OID_SUBJECT_KEY_IDENTIFIER,
+            critical: false,
+            value: encodeSubjectKeyIdentifier(ski),
+        });
+    }
+    const wantAki = opts.authorityKeyIdentifier ?? true;
+    if (wantAki) {
+        const aki = opts.signer.certificate?.subjectKeyIdentifier ?? (selfSigned ? ski : undefined);
+        if (aki !== undefined) {
+            list.push({
+                oid: OID_AUTHORITY_KEY_IDENTIFIER,
+                critical: false,
+                value: encodeAuthorityKeyIdentifier(aki),
+            });
+        }
+    }
+    return { list };
+}
+// ---------- 辅助 ----------
+function resolveSubjectPublicKey(opts) {
+    if (opts.subjectPublicKey !== undefined) {
+        return readPublicKey(opts.subjectPublicKey, 'subjectPublicKey');
+    }
+    if (opts.signer.certificate !== undefined) {
+        throw new CertificateError('subjectPublicKey is required when signing with a CA certificate');
+    }
+    return readPublicKey(sm2.getPublicKey(opts.signer.privateKey), 'signer public key');
+}
+function readPublicKey(input, where) {
+    if (typeof input === 'string' && input.includes('-----BEGIN')) {
+        try {
+            return new Uint8Array(parseSm2PublicKeyPem(input));
+        }
+        catch (err) {
+            throw new CertificateError(`${where}: invalid SM2 public key PEM`, { cause: err });
+        }
+    }
+    const bytes = typeof input === 'string' ? toBytes(input, where) : new Uint8Array(input);
+    return normalizePublicKey(bytes);
+}
+function nameToInput(name) {
+    return {
+        // Name.commonName 理论上可缺失；encodeName 会在全空时报错。
+        commonName: name.commonName ?? '',
+        ...(name.organization === undefined ? {} : { organization: name.organization }),
+        ...(name.organizationalUnit === undefined
+            ? {}
+            : { organizationalUnit: name.organizationalUnit }),
+        ...(name.country === undefined ? {} : { country: name.country }),
+        ...(name.state === undefined ? {} : { state: name.state }),
+        ...(name.locality === undefined ? {} : { locality: name.locality }),
+        ...(name.emailAddress === undefined ? {} : { emailAddress: name.emailAddress }),
+    };
+}
+function randomSerialNumber() {
+    for (;;) {
+        const bytes = randomBytes(16);
+        // 最高位清零：编码时无需额外补 0x00，也满足“正整数”约束。
+        bytes[0] = bytes[0] & 0x7f;
+        let value = 0n;
+        for (const byte of bytes)
+            value = (value << 8n) | BigInt(byte);
+        if (value > 0n)
+            return value;
+    }
+}
+const FIELD_BY_LABEL = {
+    CN: 'commonName',
+    '2.5.4.3': 'commonName',
+    O: 'organization',
+    '2.5.4.10': 'organization',
+    OU: 'organizationalUnit',
+    '2.5.4.11': 'organizationalUnit',
+    C: 'country',
+    '2.5.4.6': 'country',
+    ST: 'state',
+    '2.5.4.8': 'state',
+    L: 'locality',
+    '2.5.4.7': 'locality',
+    EMAILADDRESS: 'emailAddress',
+    E: 'emailAddress',
+    '1.2.840.113549.1.9.1': 'emailAddress',
+};
+function splitUnescaped(input, separator) {
+    const parts = [];
+    let current = '';
+    let escaped = false;
+    for (const ch of input) {
+        if (escaped) {
+            current += `\\${ch}`;
+            escaped = false;
+            continue;
+        }
+        if (ch === '\\') {
+            escaped = true;
+            continue;
+        }
+        if (ch === separator) {
+            parts.push(current);
+            current = '';
+            continue;
+        }
+        current += ch;
+    }
+    if (escaped)
+        throw new CertificateError('parseDistinguishedName: trailing escape');
+    parts.push(current);
+    return parts;
+}
+function indexOfUnescaped(input, target) {
+    let escaped = false;
+    for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (ch === '\\') {
+            escaped = true;
+            continue;
+        }
+        if (ch === target)
+            return i;
+    }
+    return -1;
+}
+function decodeEscapes(input) {
+    let out = '';
+    let escaped = false;
+    for (const ch of input) {
+        if (escaped) {
+            out += ch;
+            escaped = false;
+        }
+        else if (ch === '\\') {
+            escaped = true;
+        }
+        else {
+            out += ch;
+        }
+    }
+    if (escaped)
+        throw new CertificateError('parseDistinguishedName: trailing escape');
+    return out;
+}

package/dist/x509/oids.d.ts

@@ -0,0 +1,40 @@
+/**
+ * X.509 / CMS 使用的 OID 常量。
+ *
+ * 只收录本库直接需要的项；未知 OID 一律保留原值，不做白名单校验
+ * （红线 #9：国密证书常带私有扩展）。
+ */
+/** `id-ecPublicKey`（1.2.840.10045.2.1）。SM2 证书的常见算法标识。 */
+export declare const OID_ID_EC_PUBLIC_KEY = "1.2.840.10045.2.1";
+/** `sm2p256v1` 推荐曲线（1.2.156.10197.1.301）。 */
+export declare const OID_SM2_CURVE = "1.2.156.10197.1.301";
+/** SM3withSM2（1.2.156.10197.1.501）。 */
+export declare const OID_SM3_WITH_SM2 = "1.2.156.10197.1.501";
+/** `rsaEncryption`（1.2.840.113549.1.1.1）。 */
+export declare const OID_RSA_ENCRYPTION = "1.2.840.113549.1.1.1";
+/** 任意 `sha*WithRSAEncryption` 的公共前缀。 */
+export declare const OID_RSA_SIGNATURE_PREFIX = "1.2.840.113549.1.1.";
+/** `sha256WithRSAEncryption`（1.2.840.113549.1.1.11）。 */
+export declare const OID_SHA256_WITH_RSA = "1.2.840.113549.1.1.11";
+export declare const OID_COMMON_NAME = "2.5.4.3";
+export declare const OID_ORGANIZATION = "2.5.4.10";
+export declare const OID_ORGANIZATIONAL_UNIT = "2.5.4.11";
+export declare const OID_COUNTRY = "2.5.4.6";
+export declare const OID_STATE = "2.5.4.8";
+export declare const OID_LOCALITY = "2.5.4.7";
+export declare const OID_EMAIL_ADDRESS = "1.2.840.113549.1.9.1";
+/** Name 属性 OID → RFC 4514 简写。 */
+export declare const NAME_OID_LABELS: Readonly<Record<string, string>>;
+export declare const OID_SUBJECT_KEY_IDENTIFIER = "2.5.29.14";
+export declare const OID_KEY_USAGE = "2.5.29.15";
+export declare const OID_SUBJECT_ALT_NAME = "2.5.29.17";
+export declare const OID_ISSUER_ALT_NAME = "2.5.29.18";
+export declare const OID_BASIC_CONSTRAINTS = "2.5.29.19";
+export declare const OID_AUTHORITY_KEY_IDENTIFIER = "2.5.29.35";
+export declare const OID_EXTENDED_KEY_USAGE = "2.5.29.37";
+export declare const OID_EKU_SERVER_AUTH = "1.3.6.1.5.5.7.3.1";
+export declare const OID_EKU_CLIENT_AUTH = "1.3.6.1.5.5.7.3.2";
+export declare const OID_EKU_CODE_SIGNING = "1.3.6.1.5.5.7.3.3";
+export declare const OID_EKU_EMAIL_PROTECTION = "1.3.6.1.5.5.7.3.4";
+export declare const OID_EKU_TIME_STAMPING = "1.3.6.1.5.5.7.3.8";
+export declare const OID_EKU_OCSP_SIGNING = "1.3.6.1.5.5.7.3.9";

package/dist/x509/oids.js

@@ -0,0 +1,52 @@
+/**
+ * X.509 / CMS 使用的 OID 常量。
+ *
+ * 只收录本库直接需要的项；未知 OID 一律保留原值，不做白名单校验
+ * （红线 #9：国密证书常带私有扩展）。
+ */
+// ---------- 算法 ----------
+/** `id-ecPublicKey`（1.2.840.10045.2.1）。SM2 证书的常见算法标识。 */
+export const OID_ID_EC_PUBLIC_KEY = '1.2.840.10045.2.1';
+/** `sm2p256v1` 推荐曲线（1.2.156.10197.1.301）。 */
+export const OID_SM2_CURVE = '1.2.156.10197.1.301';
+/** SM3withSM2（1.2.156.10197.1.501）。 */
+export const OID_SM3_WITH_SM2 = '1.2.156.10197.1.501';
+/** `rsaEncryption`（1.2.840.113549.1.1.1）。 */
+export const OID_RSA_ENCRYPTION = '1.2.840.113549.1.1.1';
+/** 任意 `sha*WithRSAEncryption` 的公共前缀。 */
+export const OID_RSA_SIGNATURE_PREFIX = '1.2.840.113549.1.1.';
+/** `sha256WithRSAEncryption`（1.2.840.113549.1.1.11）。 */
+export const OID_SHA256_WITH_RSA = '1.2.840.113549.1.1.11';
+// ---------- Name 属性 ----------
+export const OID_COMMON_NAME = '2.5.4.3';
+export const OID_ORGANIZATION = '2.5.4.10';
+export const OID_ORGANIZATIONAL_UNIT = '2.5.4.11';
+export const OID_COUNTRY = '2.5.4.6';
+export const OID_STATE = '2.5.4.8';
+export const OID_LOCALITY = '2.5.4.7';
+export const OID_EMAIL_ADDRESS = '1.2.840.113549.1.9.1';
+/** Name 属性 OID → RFC 4514 简写。 */
+export const NAME_OID_LABELS = {
+    [OID_COMMON_NAME]: 'CN',
+    [OID_ORGANIZATION]: 'O',
+    [OID_ORGANIZATIONAL_UNIT]: 'OU',
+    [OID_COUNTRY]: 'C',
+    [OID_STATE]: 'ST',
+    [OID_LOCALITY]: 'L',
+    [OID_EMAIL_ADDRESS]: 'emailAddress',
+};
+// ---------- 扩展 ----------
+export const OID_SUBJECT_KEY_IDENTIFIER = '2.5.29.14';
+export const OID_KEY_USAGE = '2.5.29.15';
+export const OID_SUBJECT_ALT_NAME = '2.5.29.17';
+export const OID_ISSUER_ALT_NAME = '2.5.29.18';
+export const OID_BASIC_CONSTRAINTS = '2.5.29.19';
+export const OID_AUTHORITY_KEY_IDENTIFIER = '2.5.29.35';
+export const OID_EXTENDED_KEY_USAGE = '2.5.29.37';
+// ---------- Extended Key Usage ----------
+export const OID_EKU_SERVER_AUTH = '1.3.6.1.5.5.7.3.1';
+export const OID_EKU_CLIENT_AUTH = '1.3.6.1.5.5.7.3.2';
+export const OID_EKU_CODE_SIGNING = '1.3.6.1.5.5.7.3.3';
+export const OID_EKU_EMAIL_PROTECTION = '1.3.6.1.5.5.7.3.4';
+export const OID_EKU_TIME_STAMPING = '1.3.6.1.5.5.7.3.8';
+export const OID_EKU_OCSP_SIGNING = '1.3.6.1.5.5.7.3.9';

package/dist/x509/parse.d.ts

@@ -0,0 +1,24 @@
+/**
+ * X.509 证书解析（只读）。
+ *
+ * 支持 DER / PEM / base64 输入；不做链校验、不拉 CRL/OCSP。
+ *
+ * 严格性（红线 #3）：
+ * - 单个证书必须恰好是一个完整 DER 对象，尾部多余字节直接拒绝；
+ * - X.509 路径不使用 BER indefinite-length；
+ * - 未知扩展 / 未知算法 / 未知 Name 属性不抛错，保留原始值（红线 #9）。
+ */
+import type { Certificate, CertificateInput } from './types.js';
+/**
+ * 解析单张证书。
+ *
+ * @param input PEM 字符串、base64 字符串、hex 字符串或 DER 字节。
+ * @throws CertificateError 结构非法、截断或尾部有多余字节。
+ */
+export declare function parseCertificate(input: CertificateInput): Certificate;
+/**
+ * 解析一个或多个证书（PEM bundle / 连续 DER）。
+ *
+ * @throws CertificateError 任一证书结构非法。
+ */
+export declare function parseCertificates(input: CertificateInput): Certificate[];