sm-crypto-wasm 0.3.1 → 0.7.1

package/dist/asn1/oid.js

@@ -0,0 +1,136 @@
+/**
+ * OBJECT IDENTIFIER 编解码。
+ *
+ * 与旧实现的差异：
+ * - 用 `bigint` 累加，不再受 32 位按位运算限制（`1.2.840.113549...` 这类
+ *   长组件不会溢出）；
+ * - 首个子标识符也走 base128 编码，支持 `2.999` 这类第二组件 ≥ 40 的 OID；
+ * - 解码时拒绝截断、空输入与非最小（前导 0x80）编码。
+ *
+ * OBJECT IDENTIFIER encoding and decoding.
+ *
+ * Differences from the legacy implementation:
+ * - Accumulates in `bigint`, so 32-bit bitwise limits no longer apply (long arcs such
+ *   as `1.2.840.113549...` cannot overflow);
+ * - The first subidentifier also goes through base128, so OIDs whose second arc is
+ *   ≥ 40 (such as `2.999`) are supported;
+ * - Decoding rejects truncation, empty input and non-minimal (leading 0x80) encodings.
+ */
+import { Asn1Error } from './types.js';
+/**
+ * 点分 OID → 内容字节（不含 tag 与 length）。
+ *
+ * @param oid 形如 `"1.2.156.10197.1.100"`。
+ * @throws Asn1Error 格式非法或组件越界。
+ *
+ * Dotted OID → content bytes (without tag and length).
+ *
+ * @param oid Something like `"1.2.156.10197.1.100"`.
+ * @throws Asn1Error On malformed syntax or out-of-range components.
+ */
+export function encodeOid(oid) {
+    const parts = parseOidComponents(oid);
+    const first = parts[0] * 40n + parts[1];
+    const out = encodeBase128(first);
+    for (let i = 2; i < parts.length; i++) {
+        out.push(...encodeBase128(parts[i]));
+    }
+    return new Uint8Array(out);
+}
+/**
+ * 内容字节 → 点分 OID。
+ *
+ * @throws Asn1Error 空输入、截断或非法 base128 编码。
+ *
+ * Content bytes → dotted OID.
+ *
+ * @throws Asn1Error On empty input, truncation, or an invalid base128 encoding.
+ */
+export function decodeOid(bytes) {
+    if (bytes.length === 0)
+        throw new Asn1Error('decodeOid: empty');
+    const values = [];
+    let value = 0n;
+    let pending = false;
+    for (let i = 0; i < bytes.length; i++) {
+        const octet = bytes[i] ?? 0;
+        // 每个子标识符的编码不得以 0x80 开头（非最小编码）。
+        //
+        // A subidentifier's encoding must not start with 0x80 (non-minimal encoding).
+        if (!pending && octet === 0x80) {
+            throw new Asn1Error('decodeOid: non-minimal base128 encoding');
+        }
+        value = (value << 7n) | BigInt(octet & 0x7f);
+        pending = (octet & 0x80) !== 0;
+        if (!pending) {
+            values.push(value);
+            value = 0n;
+        }
+    }
+    if (pending)
+        throw new Asn1Error('decodeOid: truncated base128 component');
+    const first = values[0];
+    let a;
+    let b;
+    if (first < 40n) {
+        a = 0n;
+        b = first;
+    }
+    else if (first < 80n) {
+        a = 1n;
+        b = first - 40n;
+    }
+    else {
+        a = 2n;
+        b = first - 80n;
+    }
+    const parts = [a, b, ...values.slice(1)];
+    return parts.map((v) => v.toString(10)).join('.');
+}
+/**
+ * 校验并拆分点分 OID（每个组件为无符号十进制整数）。
+ *
+ * Validates and splits a dotted OID (each component is an unsigned decimal integer).
+ */
+function parseOidComponents(oid) {
+    if (typeof oid !== 'string' || oid.length === 0) {
+        throw new Asn1Error(`encodeOid: bad oid "${String(oid)}"`);
+    }
+    const raw = oid.split('.');
+    if (raw.length < 2)
+        throw new Asn1Error(`encodeOid: bad oid "${oid}"`);
+    const parts = [];
+    for (const item of raw) {
+        if (!/^(0|[1-9][0-9]*)$/.test(item)) {
+            throw new Asn1Error(`encodeOid: bad component "${item}" in "${oid}"`);
+        }
+        parts.push(BigInt(item));
+    }
+    const first = parts[0];
+    const second = parts[1];
+    if (first > 2n)
+        throw new Asn1Error(`encodeOid: first component must be 0..2, got ${first}`);
+    if (first < 2n && second > 39n) {
+        throw new Asn1Error(`encodeOid: second component must be 0..39 for arc ${first}, got ${second}`);
+    }
+    return parts;
+}
+/**
+ * 无符号 bigint → base128 字节（高位 bit 为续行标志）。
+ *
+ * Unsigned bigint → base128 bytes (the high bit marks a continuation).
+ */
+function encodeBase128(value) {
+    if (value < 0n)
+        throw new Asn1Error(`encodeBase128: negative value ${value}`);
+    const groups = [];
+    let v = value;
+    do {
+        groups.unshift(Number(v & 0x7fn));
+        v >>= 7n;
+    } while (v > 0n);
+    for (let i = 0; i < groups.length - 1; i++) {
+        groups[i] = groups[i] | 0x80;
+    }
+    return groups;
+}

package/dist/asn1/time.d.ts

@@ -0,0 +1,71 @@
+/**
+ * X.509 时间编码/解析（UTCTime / GeneralizedTime）。
+ *
+ * 规则（RFC 5280）：
+ * - 1950–2049 用 UTCTime（`YYMMDDHHMMSSZ`）；
+ * - 其余年份用 GeneralizedTime（`YYYYMMDDHHMMSSZ`）；
+ * - 证书时间精度到秒：解析时毫秒一律截断，保证 parse → encode round-trip。
+ *
+ * 解析刻意宽松（接受无秒、无时区、GeneralizedTime 的小数秒），因为真实现场
+ * 存在非规范编码；编码始终输出规范形式。
+ *
+ * X.509 time encoding/parsing (UTCTime / GeneralizedTime).
+ *
+ * Rules (RFC 5280):
+ * - 1950–2049 use UTCTime (`YYMMDDHHMMSSZ`);
+ * - Other years use GeneralizedTime (`YYYYMMDDHHMMSSZ`);
+ * - Certificate time has second precision: milliseconds are truncated when parsing,
+ *   keeping parse → encode round-trips stable.
+ *
+ * Parsing is deliberately lenient (missing seconds, missing timezone, GeneralizedTime
+ * fractional seconds) because non-canonical encodings exist in the wild; encoding
+ * always emits the canonical form.
+ */
+/**
+ * 编码 UTCTime（仅接受 1950–2049 年）。
+ *
+ * @throws RangeError 日期无效或年份越界。
+ *
+ * Encodes a UTCTime (years 1950–2049 only).
+ *
+ * @throws RangeError When the Date is invalid or the year is out of range.
+ */
+export declare function encodeUtcTime(date: Date): string;
+/**
+ * 编码 GeneralizedTime。
+ *
+ * @throws RangeError 日期无效。
+ *
+ * Encodes a GeneralizedTime.
+ *
+ * @throws RangeError When the Date is invalid.
+ */
+export declare function encodeGeneralizedTime(date: Date): string;
+/**
+ * 按 RFC 5280 自动选择 UTCTime（1950–2049）或 GeneralizedTime。
+ *
+ * Picks UTCTime (1950–2049) or GeneralizedTime automatically as RFC 5280 requires.
+ */
+export declare function encodeTime(date: Date): string;
+/**
+ * 解析 UTCTime 或 GeneralizedTime 字符串。
+ *
+ * 接受：
+ * - `YYMMDDHHMMSSZ` / `YYMMDDHHMMZ`（UTCTime，50–99 → 1950–1999，00–49 → 2000–2049）；
+ * - `YYYYMMDDHHMMSSZ` / `YYYYMMDDHHMMZ` / `YYYYMMDDHHMMSS.sssZ`（GeneralizedTime）；
+ * - 时间部分可带 `+HHMM` / `-HHMM` 偏移；省略时区按 UTC 处理。
+ *
+ * @returns 毫秒为 0 的 `Date`。
+ * @throws Asn1Error 格式或日期分量非法。
+ *
+ * Parses a UTCTime or GeneralizedTime string.
+ *
+ * Accepts:
+ * - `YYMMDDHHMMSSZ` / `YYMMDDHHMMZ` (UTCTime; 50–99 → 1950–1999, 00–49 → 2000–2049);
+ * - `YYYYMMDDHHMMSSZ` / `YYYYMMDDHHMMZ` / `YYYYMMDDHHMMSS.sssZ` (GeneralizedTime);
+ * - an optional `+HHMM` / `-HHMM` offset on the time part; a missing timezone means UTC.
+ *
+ * @returns A `Date` whose milliseconds are 0.
+ * @throws Asn1Error On illegal syntax or date components.
+ */
+export declare function parseTime(text: string): Date;

package/dist/asn1/time.js

@@ -0,0 +1,165 @@
+/**
+ * X.509 时间编码/解析（UTCTime / GeneralizedTime）。
+ *
+ * 规则（RFC 5280）：
+ * - 1950–2049 用 UTCTime（`YYMMDDHHMMSSZ`）；
+ * - 其余年份用 GeneralizedTime（`YYYYMMDDHHMMSSZ`）；
+ * - 证书时间精度到秒：解析时毫秒一律截断，保证 parse → encode round-trip。
+ *
+ * 解析刻意宽松（接受无秒、无时区、GeneralizedTime 的小数秒），因为真实现场
+ * 存在非规范编码；编码始终输出规范形式。
+ *
+ * X.509 time encoding/parsing (UTCTime / GeneralizedTime).
+ *
+ * Rules (RFC 5280):
+ * - 1950–2049 use UTCTime (`YYMMDDHHMMSSZ`);
+ * - Other years use GeneralizedTime (`YYYYMMDDHHMMSSZ`);
+ * - Certificate time has second precision: milliseconds are truncated when parsing,
+ *   keeping parse → encode round-trips stable.
+ *
+ * Parsing is deliberately lenient (missing seconds, missing timezone, GeneralizedTime
+ * fractional seconds) because non-canonical encodings exist in the wild; encoding
+ * always emits the canonical form.
+ */
+import { Asn1Error } from './types.js';
+/**
+ * 编码 UTCTime（仅接受 1950–2049 年）。
+ *
+ * @throws RangeError 日期无效或年份越界。
+ *
+ * Encodes a UTCTime (years 1950–2049 only).
+ *
+ * @throws RangeError When the Date is invalid or the year is out of range.
+ */
+export function encodeUtcTime(date) {
+    const { year, month, day, hour, minute, second } = utcParts(date, 'encodeUtcTime');
+    if (year < 1950 || year > 2049) {
+        throw new RangeError(`encodeUtcTime: year ${year} outside 1950..2049`);
+    }
+    const yy = year % 100;
+    return `${pad2(yy)}${pad2(month)}${pad2(day)}${pad2(hour)}${pad2(minute)}${pad2(second)}Z`;
+}
+/**
+ * 编码 GeneralizedTime。
+ *
+ * @throws RangeError 日期无效。
+ *
+ * Encodes a GeneralizedTime.
+ *
+ * @throws RangeError When the Date is invalid.
+ */
+export function encodeGeneralizedTime(date) {
+    const { year, month, day, hour, minute, second } = utcParts(date, 'encodeGeneralizedTime');
+    return `${pad4(year)}${pad2(month)}${pad2(day)}${pad2(hour)}${pad2(minute)}${pad2(second)}Z`;
+}
+/**
+ * 按 RFC 5280 自动选择 UTCTime（1950–2049）或 GeneralizedTime。
+ *
+ * Picks UTCTime (1950–2049) or GeneralizedTime automatically as RFC 5280 requires.
+ */
+export function encodeTime(date) {
+    const year = utcParts(date, 'encodeTime').year;
+    return year >= 1950 && year <= 2049 ? encodeUtcTime(date) : encodeGeneralizedTime(date);
+}
+/**
+ * 解析 UTCTime 或 GeneralizedTime 字符串。
+ *
+ * 接受：
+ * - `YYMMDDHHMMSSZ` / `YYMMDDHHMMZ`（UTCTime，50–99 → 1950–1999，00–49 → 2000–2049）；
+ * - `YYYYMMDDHHMMSSZ` / `YYYYMMDDHHMMZ` / `YYYYMMDDHHMMSS.sssZ`（GeneralizedTime）；
+ * - 时间部分可带 `+HHMM` / `-HHMM` 偏移；省略时区按 UTC 处理。
+ *
+ * @returns 毫秒为 0 的 `Date`。
+ * @throws Asn1Error 格式或日期分量非法。
+ *
+ * Parses a UTCTime or GeneralizedTime string.
+ *
+ * Accepts:
+ * - `YYMMDDHHMMSSZ` / `YYMMDDHHMMZ` (UTCTime; 50–99 → 1950–1999, 00–49 → 2000–2049);
+ * - `YYYYMMDDHHMMSSZ` / `YYYYMMDDHHMMZ` / `YYYYMMDDHHMMSS.sssZ` (GeneralizedTime);
+ * - an optional `+HHMM` / `-HHMM` offset on the time part; a missing timezone means UTC.
+ *
+ * @returns A `Date` whose milliseconds are 0.
+ * @throws Asn1Error On illegal syntax or date components.
+ */
+export function parseTime(text) {
+    const s = text.trim();
+    const m = /^(\d{2}|\d{4})(\d{2})(\d{2})(\d{2})(\d{2})?(\d{2})?([.,]\d+)?(Z|[+-]\d{4})?$/.exec(s);
+    if (!m)
+        throw new Asn1Error(`parseTime: unsupported time syntax "${text}"`);
+    const yearToken = m[1];
+    const year = yearToken.length === 2 ? utcYear(Number(yearToken)) : Number(yearToken);
+    const month = Number(m[2]);
+    const day = Number(m[3]);
+    const hour = Number(m[4]);
+    const minute = m[5] === undefined ? 0 : Number(m[5]);
+    const second = m[6] === undefined ? 0 : Number(m[6]);
+    const zone = m[8];
+    let offsetMinutes = 0;
+    if (zone !== undefined && zone !== 'Z') {
+        const sign = zone.startsWith('-') ? -1 : 1;
+        const oh = Number(zone.slice(1, 3));
+        const om = Number(zone.slice(3, 5));
+        if (oh > 23 || om > 59)
+            throw new Asn1Error(`parseTime: bad timezone offset "${zone}"`);
+        offsetMinutes = sign * (oh * 60 + om);
+    }
+    const localMs = Date.UTC(year, month - 1, day, hour, minute, second);
+    // 先在「输入的本地分量」上校验日期合法性，再应用时区偏移。
+    //
+    // Validate the date against the input's local components first, then apply the
+    // timezone offset.
+    const local = new Date(localMs);
+    if (Number.isNaN(local.getTime()) ||
+        local.getUTCFullYear() !== year ||
+        local.getUTCMonth() !== month - 1 ||
+        local.getUTCDate() !== day ||
+        local.getUTCHours() !== hour ||
+        local.getUTCMinutes() !== minute ||
+        local.getUTCSeconds() !== second) {
+        throw new Asn1Error(`parseTime: invalid date components in "${text}"`);
+    }
+    return new Date(localMs - offsetMinutes * 60_000);
+}
+/**
+ * UTCTime 两位年份展开。
+ *
+ * Expands a two-digit UTCTime year.
+ */
+function utcYear(yy) {
+    return yy >= 50 ? 1900 + yy : 2000 + yy;
+}
+/**
+ * 提取日期的 UTC 分量并校验日期有效性。
+ *
+ * Extracts the UTC components of a Date and validates it.
+ */
+function utcParts(date, where) {
+    if (!(date instanceof Date) || Number.isNaN(date.getTime())) {
+        throw new RangeError(`${where}: invalid Date`);
+    }
+    return {
+        year: date.getUTCFullYear(),
+        month: date.getUTCMonth() + 1,
+        day: date.getUTCDate(),
+        hour: date.getUTCHours(),
+        minute: date.getUTCMinutes(),
+        second: date.getUTCSeconds(),
+    };
+}
+/**
+ * 十进制补零到 2 位。
+ *
+ * Zero-pads a decimal number to 2 digits.
+ */
+function pad2(n) {
+    return n.toString(10).padStart(2, '0');
+}
+/**
+ * 十进制补零到 4 位。
+ *
+ * Zero-pads a decimal number to 4 digits.
+ */
+function pad4(n) {
+    return n.toString(10).padStart(4, '0');
+}

package/dist/asn1/types.d.ts

@@ -0,0 +1,160 @@
+/**
+ * ASN.1 通用类型与常量（DER/BER 子集）。
+ *
+ * 与旧 `src/pem/asn1.ts` 的关系：
+ * - 旧实现只覆盖 PKCS#8 用到的最小类型，且不保留 `constructed` 位；
+ * - 本层是 X.509 / CMS / WebCrypto 共用的通用基础设施，覆盖
+ *   BOOLEAN、SET、字符串、时间、context/application/private 标签等。
+ *
+ * 设计要点：
+ * - 每个节点保留 `raw`（含 tag + length + value 的原始切片），X.509 的 TBS
+ *   与 CMS 的 `signedAttrs` 验签必须对原始字节做摘要，不能重新编码；
+ * - `raw` 是对输入缓冲的**视图**（不拷贝），调用方不应假定其生命周期；
+ *   需要长期持有时自行 `slice()`；
+ * - 解析错误统一为 `Asn1Error`；上层（X.509/CMS）负责转换为各自的错误类型。
+ *
+ * Shared ASN.1 types and constants (a DER/BER subset).
+ *
+ * Relationship to the legacy `src/pem/asn1.ts`:
+ * - The old implementation only covered the minimal types used by PKCS#8 and did
+ *   not preserve the `constructed` bit;
+ * - This layer is the shared infrastructure for X.509 / CMS / WebCrypto: it covers
+ *   BOOLEAN, SET, string types, time, and context/application/private tags.
+ *
+ * Design notes:
+ * - Each node keeps `raw` (the original slice including tag + length + value).
+ *   X.509 TBS digests and CMS `signedAttrs` verification must hash the original
+ *   bytes, never a re-encoding;
+ * - `raw` is a **view** onto the input buffer (no copy); callers must not assume
+ *   its lifetime and should `slice()` when they need to keep it;
+ * - Parse errors are always `Asn1Error`; upper layers (X.509/CMS) map them to
+ *   their own error types.
+ */
+/**
+ * ASN.1 标签类别。
+ *
+ * ASN.1 tag class.
+ */
+export type Asn1Class = 0 | 1 | 2 | 3;
+/**
+ * ASN.1 标签类别常量。
+ *
+ * ASN.1 tag class constants.
+ */
+export declare const Asn1Class: {
+    readonly Universal: 0;
+    readonly Application: 1;
+    readonly ContextSpecific: 2;
+    readonly Private: 3;
+};
+/**
+ * UNIVERSAL 类常用标签编号。
+ *
+ * Frequently used UNIVERSAL tag numbers.
+ */
+export declare const UniversalTag: {
+    readonly EndOfContent: 0;
+    readonly Boolean: 1;
+    readonly Integer: 2;
+    readonly BitString: 3;
+    readonly OctetString: 4;
+    readonly Null: 5;
+    readonly ObjectIdentifier: 6;
+    readonly Enumerated: 10;
+    readonly Utf8String: 12;
+    readonly Sequence: 16;
+    readonly Set: 17;
+    readonly NumericString: 18;
+    readonly PrintableString: 19;
+    readonly TeletexString: 20;
+    readonly VideotexString: 21;
+    readonly Ia5String: 22;
+    readonly UtcTime: 23;
+    readonly GeneralizedTime: 24;
+    readonly UniversalString: 28;
+    readonly BmpString: 30;
+};
+/**
+ * ASN.1 节点。
+ *
+ * An ASN.1 node.
+ */
+export interface Asn1Node {
+    /**
+     * 标签类别：UNIVERSAL=0、APPLICATION=1、CONTEXT=2、PRIVATE=3。
+     *
+     * Tag class: UNIVERSAL=0, APPLICATION=1, CONTEXT=2, PRIVATE=3.
+     */
+    readonly cls: Asn1Class;
+    /**
+     * 标签编号（高 tag number 已展开为数值，不含 0x1f 标志位）。
+     *
+     * Tag number (high tag numbers are already decoded to a plain number, without
+     * the 0x1f marker bit).
+     */
+    readonly tag: number;
+    /**
+     * 是否为 constructed 编码。
+     *
+     * Whether the encoding is constructed.
+     */
+    readonly constructed: boolean;
+    /**
+     * 是否使用 BER indefinite-length（`0x80` + EOC）。DER 节点恒为 false。
+     *
+     * Whether BER indefinite-length (`0x80` + EOC) is used; always false for DER.
+     */
+    readonly indefinite: boolean;
+    /**
+     * 内容字节数（indefinite 时为实际内容长度，不含 EOC）。
+     *
+     * Content length in bytes (for indefinite nodes this is the real content length,
+     * excluding the EOC).
+     */
+    readonly length: number;
+    /**
+     * primitive 的 value；constructed 为子节点编码拼接后的内容字节。
+     *
+     * The value of a primitive node; for a constructed node, the concatenated
+     * encodings of its children.
+     */
+    readonly value: Uint8Array;
+    /**
+     * constructed 节点的子节点；primitive 为 `undefined`。
+     *
+     * Children of a constructed node; `undefined` for primitive nodes.
+     */
+    readonly children?: readonly Asn1Node[];
+    /**
+     * 节点原始字节（含 tag + length + value；indefinite 时含 EOC）。
+     *
+     * Raw node bytes (tag + length + value; including the EOC when indefinite).
+     */
+    readonly raw: Uint8Array;
+}
+/**
+ * ASN.1 解析/编码错误。
+ *
+ * ASN.1 parse/encode error.
+ */
+export declare class Asn1Error extends Error {
+    readonly name = "Asn1Error";
+}
+/**
+ * 判断节点是否为指定 UNIVERSAL 类型。
+ *
+ * Tests whether a node is the given UNIVERSAL type.
+ */
+export declare function isUniversal(node: Asn1Node, tag: number): boolean;
+/**
+ * 断言节点为指定 UNIVERSAL 类型，否则抛 `Asn1Error`。
+ *
+ * Asserts that a node is the given UNIVERSAL type, otherwise throws `Asn1Error`.
+ */
+export declare function expectUniversal(node: Asn1Node | undefined, tag: number, what: string): Asn1Node;
+/**
+ * 断言节点为 constructed SEQUENCE 并返回子节点。
+ *
+ * Asserts that a node is a constructed SEQUENCE and returns its children.
+ */
+export declare function expectSequence(node: Asn1Node | undefined, what: string): readonly Asn1Node[];

package/dist/asn1/types.js

@@ -0,0 +1,112 @@
+/**
+ * ASN.1 通用类型与常量（DER/BER 子集）。
+ *
+ * 与旧 `src/pem/asn1.ts` 的关系：
+ * - 旧实现只覆盖 PKCS#8 用到的最小类型，且不保留 `constructed` 位；
+ * - 本层是 X.509 / CMS / WebCrypto 共用的通用基础设施，覆盖
+ *   BOOLEAN、SET、字符串、时间、context/application/private 标签等。
+ *
+ * 设计要点：
+ * - 每个节点保留 `raw`（含 tag + length + value 的原始切片），X.509 的 TBS
+ *   与 CMS 的 `signedAttrs` 验签必须对原始字节做摘要，不能重新编码；
+ * - `raw` 是对输入缓冲的**视图**（不拷贝），调用方不应假定其生命周期；
+ *   需要长期持有时自行 `slice()`；
+ * - 解析错误统一为 `Asn1Error`；上层（X.509/CMS）负责转换为各自的错误类型。
+ *
+ * Shared ASN.1 types and constants (a DER/BER subset).
+ *
+ * Relationship to the legacy `src/pem/asn1.ts`:
+ * - The old implementation only covered the minimal types used by PKCS#8 and did
+ *   not preserve the `constructed` bit;
+ * - This layer is the shared infrastructure for X.509 / CMS / WebCrypto: it covers
+ *   BOOLEAN, SET, string types, time, and context/application/private tags.
+ *
+ * Design notes:
+ * - Each node keeps `raw` (the original slice including tag + length + value).
+ *   X.509 TBS digests and CMS `signedAttrs` verification must hash the original
+ *   bytes, never a re-encoding;
+ * - `raw` is a **view** onto the input buffer (no copy); callers must not assume
+ *   its lifetime and should `slice()` when they need to keep it;
+ * - Parse errors are always `Asn1Error`; upper layers (X.509/CMS) map them to
+ *   their own error types.
+ */
+/**
+ * ASN.1 标签类别常量。
+ *
+ * ASN.1 tag class constants.
+ */
+export const Asn1Class = {
+    Universal: 0,
+    Application: 1,
+    ContextSpecific: 2,
+    Private: 3,
+};
+/**
+ * UNIVERSAL 类常用标签编号。
+ *
+ * Frequently used UNIVERSAL tag numbers.
+ */
+export const UniversalTag = {
+    EndOfContent: 0,
+    Boolean: 1,
+    Integer: 2,
+    BitString: 3,
+    OctetString: 4,
+    Null: 5,
+    ObjectIdentifier: 6,
+    Enumerated: 10,
+    Utf8String: 12,
+    Sequence: 16,
+    Set: 17,
+    NumericString: 18,
+    PrintableString: 19,
+    TeletexString: 20,
+    VideotexString: 21,
+    Ia5String: 22,
+    UtcTime: 23,
+    GeneralizedTime: 24,
+    UniversalString: 28,
+    BmpString: 30,
+};
+/**
+ * ASN.1 解析/编码错误。
+ *
+ * ASN.1 parse/encode error.
+ */
+export class Asn1Error extends Error {
+    name = 'Asn1Error';
+}
+/**
+ * 判断节点是否为指定 UNIVERSAL 类型。
+ *
+ * Tests whether a node is the given UNIVERSAL type.
+ */
+export function isUniversal(node, tag) {
+    return node.cls === Asn1Class.Universal && node.tag === tag;
+}
+/**
+ * 断言节点为指定 UNIVERSAL 类型，否则抛 `Asn1Error`。
+ *
+ * Asserts that a node is the given UNIVERSAL type, otherwise throws `Asn1Error`.
+ */
+export function expectUniversal(node, tag, what) {
+    if (node === undefined) {
+        throw new Asn1Error(`${what}: missing element (expected tag ${tag})`);
+    }
+    if (!isUniversal(node, tag)) {
+        throw new Asn1Error(`${what}: expected UNIVERSAL tag ${tag}, got class ${node.cls} tag ${node.tag}`);
+    }
+    return node;
+}
+/**
+ * 断言节点为 constructed SEQUENCE 并返回子节点。
+ *
+ * Asserts that a node is a constructed SEQUENCE and returns its children.
+ */
+export function expectSequence(node, what) {
+    const seq = expectUniversal(node, UniversalTag.Sequence, what);
+    if (!seq.children) {
+        throw new Asn1Error(`${what}: SEQUENCE is not constructed`);
+    }
+    return seq.children;
+}

package/dist/cms/errors.d.ts

@@ -0,0 +1,23 @@
+/**
+ * CMS（PKCS#7 SignedData）错误类型。
+ *
+ * CMS (PKCS#7 SignedData) error types.
+ */
+import { SmCryptoError } from '../runtime/errors.js';
+/**
+ * CMS 解析/签名/验签失败。
+ *
+ * CMS parse/sign/verify failure.
+ */
+export declare class CmsError extends SmCryptoError {
+    readonly name: string;
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * `verifySignedData` 的结构化失败原因。
+ *
+ * Structured failure reasons returned by `verifySignedData`.
+ */
+export type CmsVerifyErrorCode = 'NO_CERTIFICATE' | 'DIGEST_MISMATCH' | 'SIGNATURE_INVALID' | 'UNSUPPORTED_ALGORITHM' | 'MALFORMED';

package/dist/cms/errors.js

@@ -0,0 +1,17 @@
+/**
+ * CMS（PKCS#7 SignedData）错误类型。
+ *
+ * CMS (PKCS#7 SignedData) error types.
+ */
+import { SmCryptoError } from '../runtime/errors.js';
+/**
+ * CMS 解析/签名/验签失败。
+ *
+ * CMS parse/sign/verify failure.
+ */
+export class CmsError extends SmCryptoError {
+    name = 'CmsError';
+    constructor(message, options) {
+        super(message, options);
+    }
+}