xml-crypto-next 7.0.0

package/lib/hash-algorithms.d.ts

@@ -0,0 +1,13 @@
+import type { HashAlgorithm } from "./types";
+export declare class Sha1 implements HashAlgorithm {
+    getHash: (xml: any) => string;
+    getAlgorithmName: () => string;
+}
+export declare class Sha256 implements HashAlgorithm {
+    getHash: (xml: any) => string;
+    getAlgorithmName: () => string;
+}
+export declare class Sha512 implements HashAlgorithm {
+    getHash: (xml: any) => string;
+    getAlgorithmName: () => string;
+}

package/lib/hash-algorithms.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sha512 = exports.Sha256 = exports.Sha1 = void 0;
+const crypto = require("crypto");
+class Sha1 {
+    constructor() {
+        this.getHash = function (xml) {
+            const shasum = crypto.createHash("sha1");
+            shasum.update(xml, "utf8");
+            const res = shasum.digest("base64");
+            return res;
+        };
+        this.getAlgorithmName = function () {
+            return "http://www.w3.org/2000/09/xmldsig#sha1";
+        };
+    }
+}
+exports.Sha1 = Sha1;
+class Sha256 {
+    constructor() {
+        this.getHash = function (xml) {
+            const shasum = crypto.createHash("sha256");
+            shasum.update(xml, "utf8");
+            const res = shasum.digest("base64");
+            return res;
+        };
+        this.getAlgorithmName = function () {
+            return "http://www.w3.org/2001/04/xmlenc#sha256";
+        };
+    }
+}
+exports.Sha256 = Sha256;
+class Sha512 {
+    constructor() {
+        this.getHash = function (xml) {
+            const shasum = crypto.createHash("sha512");
+            shasum.update(xml, "utf8");
+            const res = shasum.digest("base64");
+            return res;
+        };
+        this.getAlgorithmName = function () {
+            return "http://www.w3.org/2001/04/xmlenc#sha512";
+        };
+    }
+}
+exports.Sha512 = Sha512;
+//# sourceMappingURL=hash-algorithms.js.map

package/lib/hash-algorithms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash-algorithms.js","sourceRoot":"","sources":["../src/hash-algorithms.ts"],"names":[],"mappings":";;;AAAA,iCAAiC;AAGjC,MAAa,IAAI;IAAjB;QACE,YAAO,GAAG,UAAU,GAAG;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,qBAAgB,GAAG;YACjB,OAAO,wCAAwC,CAAC;QAClD,CAAC,CAAC;IACJ,CAAC;CAAA;AAXD,oBAWC;AAED,MAAa,MAAM;IAAnB;QACE,YAAO,GAAG,UAAU,GAAG;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,qBAAgB,GAAG;YACjB,OAAO,yCAAyC,CAAC;QACnD,CAAC,CAAC;IACJ,CAAC;CAAA;AAXD,wBAWC;AAED,MAAa,MAAM;IAAnB;QACE,YAAO,GAAG,UAAU,GAAG;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,qBAAgB,GAAG;YACjB,OAAO,yCAAyC,CAAC;QACnD,CAAC,CAAC;IACJ,CAAC;CAAA;AAXD,wBAWC","sourcesContent":["import * as crypto from \"crypto\";\r\nimport type { HashAlgorithm } from \"./types\";\r\n\r\nexport class Sha1 implements HashAlgorithm {\r\n  getHash = function (xml) {\r\n    const shasum = crypto.createHash(\"sha1\");\r\n    shasum.update(xml, \"utf8\");\r\n    const res = shasum.digest(\"base64\");\r\n    return res;\r\n  };\r\n\r\n  getAlgorithmName = function () {\r\n    return \"http://www.w3.org/2000/09/xmldsig#sha1\";\r\n  };\r\n}\r\n\r\nexport class Sha256 implements HashAlgorithm {\r\n  getHash = function (xml) {\r\n    const shasum = crypto.createHash(\"sha256\");\r\n    shasum.update(xml, \"utf8\");\r\n    const res = shasum.digest(\"base64\");\r\n    return res;\r\n  };\r\n\r\n  getAlgorithmName = function () {\r\n    return \"http://www.w3.org/2001/04/xmlenc#sha256\";\r\n  };\r\n}\r\n\r\nexport class Sha512 implements HashAlgorithm {\r\n  getHash = function (xml) {\r\n    const shasum = crypto.createHash(\"sha512\");\r\n    shasum.update(xml, \"utf8\");\r\n    const res = shasum.digest(\"base64\");\r\n    return res;\r\n  };\r\n\r\n  getAlgorithmName = function () {\r\n    return \"http://www.w3.org/2001/04/xmlenc#sha512\";\r\n  };\r\n}\r\n"]}

package/lib/index.d.ts

@@ -0,0 +1,5 @@
+export { C14nCanonicalization, C14nCanonicalizationWithComments } from "./c14n-canonicalization";
+export { ExclusiveCanonicalization, ExclusiveCanonicalizationWithComments, } from "./exclusive-canonicalization";
+export { SignedXml } from "./signed-xml";
+export * from "./types";
+export * from "./utils";

package/lib/index.js

@@ -0,0 +1,28 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SignedXml = exports.ExclusiveCanonicalizationWithComments = exports.ExclusiveCanonicalization = exports.C14nCanonicalizationWithComments = exports.C14nCanonicalization = void 0;
+var c14n_canonicalization_1 = require("./c14n-canonicalization");
+Object.defineProperty(exports, "C14nCanonicalization", { enumerable: true, get: function () { return c14n_canonicalization_1.C14nCanonicalization; } });
+Object.defineProperty(exports, "C14nCanonicalizationWithComments", { enumerable: true, get: function () { return c14n_canonicalization_1.C14nCanonicalizationWithComments; } });
+var exclusive_canonicalization_1 = require("./exclusive-canonicalization");
+Object.defineProperty(exports, "ExclusiveCanonicalization", { enumerable: true, get: function () { return exclusive_canonicalization_1.ExclusiveCanonicalization; } });
+Object.defineProperty(exports, "ExclusiveCanonicalizationWithComments", { enumerable: true, get: function () { return exclusive_canonicalization_1.ExclusiveCanonicalizationWithComments; } });
+var signed_xml_1 = require("./signed-xml");
+Object.defineProperty(exports, "SignedXml", { enumerable: true, get: function () { return signed_xml_1.SignedXml; } });
+__exportStar(require("./types"), exports);
+__exportStar(require("./utils"), exports);
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,iEAAiG;AAAxF,6HAAA,oBAAoB,OAAA;AAAE,yIAAA,gCAAgC,OAAA;AAC/D,2EAGsC;AAFpC,uIAAA,yBAAyB,OAAA;AACzB,mJAAA,qCAAqC,OAAA;AAEvC,2CAAyC;AAAhC,uGAAA,SAAS,OAAA;AAClB,0CAAwB;AACxB,0CAAwB","sourcesContent":["export { C14nCanonicalization, C14nCanonicalizationWithComments } from \"./c14n-canonicalization\";\r\nexport {\r\n  ExclusiveCanonicalization,\r\n  ExclusiveCanonicalizationWithComments,\r\n} from \"./exclusive-canonicalization\";\r\nexport { SignedXml } from \"./signed-xml\";\r\nexport * from \"./types\";\r\nexport * from \"./utils\";\r\n"]}

package/lib/signature-algorithms.d.ts

@@ -0,0 +1,104 @@
+import * as crypto from "crypto";
+import { type SignatureAlgorithm } from "./types";
+export declare class RsaSha1 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+export declare class RsaSha256 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+export declare class RsaSha256Mgf1 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+export declare class RsaSha384 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+export declare class RsaSha384Mgf1 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+export declare class RsaSha512 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+export declare class RsaSha512Mgf1 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+export declare class Ed25519 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}
+declare module "crypto" {
+    function BinaryLikeToBuffer(data: crypto.BinaryLike): Buffer;
+}
+export declare class HmacSha1 implements SignatureAlgorithm {
+    getSignature: {
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string;
+        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike, args_2: import("./types").ErrorFirstCallback<string>): void;
+    };
+    verifySignature: {
+        (material: string, key: crypto.KeyLike, signatureValue: string): boolean;
+        (material: string, key: crypto.KeyLike, signatureValue: string, args_3: import("./types").ErrorFirstCallback<boolean>): void;
+    };
+    getAlgorithmName: () => string;
+}

package/lib/signature-algorithms.js

@@ -0,0 +1,242 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HmacSha1 = exports.Ed25519 = exports.RsaSha512Mgf1 = exports.RsaSha512 = exports.RsaSha384Mgf1 = exports.RsaSha384 = exports.RsaSha256Mgf1 = exports.RsaSha256 = exports.RsaSha1 = void 0;
+const crypto = require("crypto");
+const types_1 = require("./types");
+class RsaSha1 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            const signer = crypto.createSign("RSA-SHA1");
+            signer.update(signedInfo);
+            const res = signer.sign(privateKey, "base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            const verifier = crypto.createVerify("RSA-SHA1");
+            verifier.update(material);
+            const res = verifier.verify(key, signatureValue, "base64");
+            return res;
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2000/09/xmldsig#rsa-sha1";
+        };
+    }
+}
+exports.RsaSha1 = RsaSha1;
+class RsaSha256 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            const signer = crypto.createSign("RSA-SHA256");
+            signer.update(signedInfo);
+            const res = signer.sign(privateKey, "base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            const verifier = crypto.createVerify("RSA-SHA256");
+            verifier.update(material);
+            const res = verifier.verify(key, signatureValue, "base64");
+            return res;
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256";
+        };
+    }
+}
+exports.RsaSha256 = RsaSha256;
+class RsaSha256Mgf1 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            if (!(typeof privateKey === "string" || Buffer.isBuffer(privateKey))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            const signer = crypto.createSign("RSA-SHA256");
+            signer.update(signedInfo);
+            const res = signer.sign({
+                key: privateKey,
+                padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+                saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
+            }, "base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            if (!(typeof key === "string" || Buffer.isBuffer(key))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            const verifier = crypto.createVerify("RSA-SHA256");
+            verifier.update(material);
+            const res = verifier.verify({
+                key: key,
+                padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+                saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
+            }, signatureValue, "base64");
+            return res;
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1";
+        };
+    }
+}
+exports.RsaSha256Mgf1 = RsaSha256Mgf1;
+class RsaSha384 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            const signer = crypto.createSign("RSA-SHA384");
+            signer.update(signedInfo);
+            const res = signer.sign(privateKey, "base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            const verifier = crypto.createVerify("RSA-SHA384");
+            verifier.update(material);
+            const res = verifier.verify(key, signatureValue, "base64");
+            return res;
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2001/04/xmldsig-more#rsa-sha384";
+        };
+    }
+}
+exports.RsaSha384 = RsaSha384;
+class RsaSha384Mgf1 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            if (!(typeof privateKey === "string" || Buffer.isBuffer(privateKey))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            const signer = crypto.createSign("RSA-SHA384");
+            signer.update(signedInfo);
+            const res = signer.sign({
+                key: privateKey,
+                padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+                saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
+            }, "base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            if (!(typeof key === "string" || Buffer.isBuffer(key))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            const verifier = crypto.createVerify("RSA-SHA384");
+            verifier.update(material);
+            const res = verifier.verify({
+                key: key,
+                padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+                saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
+            }, signatureValue, "base64");
+            return res;
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2007/05/xmldsig-more#sha384-rsa-MGF1";
+        };
+    }
+}
+exports.RsaSha384Mgf1 = RsaSha384Mgf1;
+class RsaSha512 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            const signer = crypto.createSign("RSA-SHA512");
+            signer.update(signedInfo);
+            const res = signer.sign(privateKey, "base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            const verifier = crypto.createVerify("RSA-SHA512");
+            verifier.update(material);
+            const res = verifier.verify(key, signatureValue, "base64");
+            return res;
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2001/04/xmldsig-more#rsa-sha512";
+        };
+    }
+}
+exports.RsaSha512 = RsaSha512;
+class RsaSha512Mgf1 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            if (!(typeof privateKey === "string" || Buffer.isBuffer(privateKey))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            const signer = crypto.createSign("RSA-SHA512");
+            signer.update(signedInfo);
+            const res = signer.sign({
+                key: privateKey,
+                padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+                saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
+            }, "base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            if (!(typeof key === "string" || Buffer.isBuffer(key))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            const verifier = crypto.createVerify("RSA-SHA512");
+            verifier.update(material);
+            const res = verifier.verify({
+                key: key,
+                padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+                saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
+            }, signatureValue, "base64");
+            return res;
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2007/05/xmldsig-more#sha512-rsa-MGF1";
+        };
+    }
+}
+exports.RsaSha512Mgf1 = RsaSha512Mgf1;
+class Ed25519 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            if (!(typeof privateKey === "string" || Buffer.isBuffer(privateKey))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            // 使用 crypto.sign() 一次性签名 (Ed25519 不支持流式处理)
+            const signature = crypto.sign(null, signedInfo, privateKey);
+            return signature.toString('base64');
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            if (!(typeof key === "string" || Buffer.isBuffer(key))) {
+                throw new Error("keys must be strings or buffers");
+            }
+            // 将 Base64 签名转换为 Buffer
+            const signature = Buffer.from(signatureValue, 'base64');
+            // 使用 crypto.verify() 验证签名
+            // @ts-ignore
+            return crypto.verify(null, material, key, signature);
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2007/05/xmldsig-more#eddsa-ed25519";
+        };
+    }
+}
+exports.Ed25519 = Ed25519;
+class HmacSha1 {
+    constructor() {
+        this.getSignature = (0, types_1.createOptionalCallbackFunction)((signedInfo, privateKey) => {
+            const signer = crypto.createHmac("SHA1", privateKey);
+            signer.update(signedInfo);
+            const res = signer.digest("base64");
+            return res;
+        });
+        this.verifySignature = (0, types_1.createOptionalCallbackFunction)((material, key, signatureValue) => {
+            const verifier = crypto.createHmac("SHA1", key);
+            verifier.update(material);
+            const res = verifier.digest("base64");
+            // Use constant-time comparison to prevent timing attacks (CWE-208)
+            // See: https://github.com/node-saml/xml-crypto/issues/522
+            try {
+                return crypto.timingSafeEqual(Buffer.from(res, "base64"), Buffer.from(signatureValue, "base64"));
+            }
+            catch (e) {
+                // timingSafeEqual throws if buffer lengths don't match
+                return false;
+            }
+        });
+        this.getAlgorithmName = () => {
+            return "http://www.w3.org/2000/09/xmldsig#hmac-sha1";
+        };
+    }
+}
+exports.HmacSha1 = HmacSha1;
+//# sourceMappingURL=signature-algorithms.js.map

package/lib/signature-algorithms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-algorithms.js","sourceRoot":"","sources":["../src/signature-algorithms.ts"],"names":[],"mappings":";;;AAAA,iCAAiC;AACjC,mCAAkF;AAElF,MAAa,OAAO;IAApB;QACE,iBAAY,GAAG,IAAA,sCAA8B,EAC3C,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE9C,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC9C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACjD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAE3D,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACtB,OAAO,4CAA4C,CAAC;QACtD,CAAC,CAAC;IACJ,CAAC;CAAA;AAxBD,0BAwBC;AAED,MAAa,SAAS;IAAtB;QACE,iBAAY,GAAG,IAAA,sCAA8B,EAC3C,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE9C,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC9C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAE3D,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACtB,OAAO,mDAAmD,CAAC;QAC7D,CAAC,CAAC;IACJ,CAAC;CAAA;AAxBD,8BAwBC;AAED,MAAa,aAAa;IAA1B;QACE,iBAAY,GAAG,IAAA,sCAA8B,EAC3C,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YACpE,IAAI,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CACrB;gBACE,GAAG,EAAE,UAAU;gBACf,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;aACpD,EACD,QAAQ,CACT,CAAC;YAEF,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC9C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACzE,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CACzB;gBACE,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;aACpD,EACD,cAAc,EACd,QAAQ,CACT,CAAC;YAEF,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACtB,OAAO,wDAAwD,CAAC;QAClE,CAAC,CAAC;IACJ,CAAC;CAAA;AA7CD,sCA6CC;AACD,MAAa,SAAS;IAAtB;QACI,iBAAY,GAAG,IAAA,sCAA8B,EACzC,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YAClE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE9C,OAAO,GAAG,CAAC;QACf,CAAC,CACJ,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC5C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAE3D,OAAO,GAAG,CAAC;QACf,CAAC,CACJ,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACpB,OAAO,mDAAmD,CAAC;QAC/D,CAAC,CAAC;IACN,CAAC;CAAA;AAxBD,8BAwBC;AAED,MAAa,aAAa;IAA1B;QACI,iBAAY,GAAG,IAAA,sCAA8B,EACzC,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YAClE,IAAI,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CACnB;gBACI,GAAG,EAAE,UAAU;gBACf,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;aACtD,EACD,QAAQ,CACX,CAAC;YAEF,OAAO,GAAG,CAAC;QACf,CAAC,CACJ,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC5C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACvE,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CACvB;gBACI,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;aACtD,EACD,cAAc,EACd,QAAQ,CACX,CAAC;YAEF,OAAO,GAAG,CAAC;QACf,CAAC,CACJ,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACpB,OAAO,wDAAwD,CAAC;QACpE,CAAC,CAAC;IACN,CAAC;CAAA;AA7CD,sCA6CC;AACD,MAAa,SAAS;IAAtB;QACE,iBAAY,GAAG,IAAA,sCAA8B,EAC3C,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE9C,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC9C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAE3D,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACtB,OAAO,mDAAmD,CAAC;QAC7D,CAAC,CAAC;IACJ,CAAC;CAAA;AAxBD,8BAwBC;AACD,MAAa,aAAa;IAA1B;QACI,iBAAY,GAAG,IAAA,sCAA8B,EACzC,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YAClE,IAAI,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CACnB;gBACI,GAAG,EAAE,UAAU;gBACf,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;aACtD,EACD,QAAQ,CACX,CAAC;YAEF,OAAO,GAAG,CAAC;QACf,CAAC,CACJ,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC5C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACvE,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CACvB;gBACI,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;aACtD,EACD,cAAc,EACd,QAAQ,CACX,CAAC;YAEF,OAAO,GAAG,CAAC;QACf,CAAC,CACJ,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACpB,OAAO,wDAAwD,CAAC;QACpE,CAAC,CAAC;IACN,CAAC;CAAA;AA7CD,sCA6CC;AACD,MAAa,OAAO;IAApB;QACI,iBAAY,GAAG,IAAA,sCAA8B,EACzC,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YAClE,IAAI,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvD,CAAC;YACD,2CAA2C;YAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAA8U,UAAU,EAAE,UAAU,CAAC,CAAC;YACxY,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC,CACJ,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC5C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACvE,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvD,CAAC;YACD,wBAAwB;YACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YACxD,0BAA0B;YAC1B,aAAa;YACb,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC,CACJ,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACpB,OAAO,sDAAsD,CAAC;QAClE,CAAC,CAAC;IACN,CAAC;CAAA;AA5BD,0BA4BC;AAQD,MAAa,QAAQ;IAArB;QACE,iBAAY,GAAG,IAAA,sCAA8B,EAC3C,CAAC,UAA6B,EAAE,UAA0B,EAAU,EAAE;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEpC,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;QAEF,oBAAe,GAAG,IAAA,sCAA8B,EAC9C,CAAC,QAAgB,EAAE,GAAmB,EAAE,cAAsB,EAAW,EAAE;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAChD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEtC,mEAAmE;YACnE,0DAA0D;YAC1D,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAC1B,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CACtC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,uDAAuD;gBACvD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CACF,CAAC;QAEF,qBAAgB,GAAG,GAAG,EAAE;YACtB,OAAO,6CAA6C,CAAC;QACvD,CAAC,CAAC;IACJ,CAAC;CAAA;AAlCD,4BAkCC","sourcesContent":["import * as crypto from \"crypto\";\r\nimport { type SignatureAlgorithm, createOptionalCallbackFunction } from \"./types\";\r\n\r\nexport class RsaSha1 implements SignatureAlgorithm {\r\n  getSignature = createOptionalCallbackFunction(\r\n    (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n      const signer = crypto.createSign(\"RSA-SHA1\");\r\n      signer.update(signedInfo);\r\n      const res = signer.sign(privateKey, \"base64\");\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  verifySignature = createOptionalCallbackFunction(\r\n    (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n      const verifier = crypto.createVerify(\"RSA-SHA1\");\r\n      verifier.update(material);\r\n      const res = verifier.verify(key, signatureValue, \"base64\");\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  getAlgorithmName = () => {\r\n    return \"http://www.w3.org/2000/09/xmldsig#rsa-sha1\";\r\n  };\r\n}\r\n\r\nexport class RsaSha256 implements SignatureAlgorithm {\r\n  getSignature = createOptionalCallbackFunction(\r\n    (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n      const signer = crypto.createSign(\"RSA-SHA256\");\r\n      signer.update(signedInfo);\r\n      const res = signer.sign(privateKey, \"base64\");\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  verifySignature = createOptionalCallbackFunction(\r\n    (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n      const verifier = crypto.createVerify(\"RSA-SHA256\");\r\n      verifier.update(material);\r\n      const res = verifier.verify(key, signatureValue, \"base64\");\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  getAlgorithmName = () => {\r\n    return \"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\";\r\n  };\r\n}\r\n\r\nexport class RsaSha256Mgf1 implements SignatureAlgorithm {\r\n  getSignature = createOptionalCallbackFunction(\r\n    (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n      if (!(typeof privateKey === \"string\" || Buffer.isBuffer(privateKey))) {\r\n        throw new Error(\"keys must be strings or buffers\");\r\n      }\r\n      const signer = crypto.createSign(\"RSA-SHA256\");\r\n      signer.update(signedInfo);\r\n      const res = signer.sign(\r\n        {\r\n          key: privateKey,\r\n          padding: crypto.constants.RSA_PKCS1_PSS_PADDING,\r\n          saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,\r\n        },\r\n        \"base64\",\r\n      );\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  verifySignature = createOptionalCallbackFunction(\r\n    (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n      if (!(typeof key === \"string\" || Buffer.isBuffer(key))) {\r\n        throw new Error(\"keys must be strings or buffers\");\r\n      }\r\n      const verifier = crypto.createVerify(\"RSA-SHA256\");\r\n      verifier.update(material);\r\n      const res = verifier.verify(\r\n        {\r\n          key: key,\r\n          padding: crypto.constants.RSA_PKCS1_PSS_PADDING,\r\n          saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,\r\n        },\r\n        signatureValue,\r\n        \"base64\",\r\n      );\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  getAlgorithmName = () => {\r\n    return \"http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1\";\r\n  };\r\n}\r\nexport class RsaSha384 implements SignatureAlgorithm {\r\n    getSignature = createOptionalCallbackFunction(\r\n        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n            const signer = crypto.createSign(\"RSA-SHA384\");\r\n            signer.update(signedInfo);\r\n            const res = signer.sign(privateKey, \"base64\");\r\n\r\n            return res;\r\n        },\r\n    );\r\n\r\n    verifySignature = createOptionalCallbackFunction(\r\n        (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n            const verifier = crypto.createVerify(\"RSA-SHA384\");\r\n            verifier.update(material);\r\n            const res = verifier.verify(key, signatureValue, \"base64\");\r\n\r\n            return res;\r\n        },\r\n    );\r\n\r\n    getAlgorithmName = () => {\r\n        return \"http://www.w3.org/2001/04/xmldsig-more#rsa-sha384\";\r\n    };\r\n}\r\n\r\nexport class RsaSha384Mgf1 implements SignatureAlgorithm {\r\n    getSignature = createOptionalCallbackFunction(\r\n        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n            if (!(typeof privateKey === \"string\" || Buffer.isBuffer(privateKey))) {\r\n                throw new Error(\"keys must be strings or buffers\");\r\n            }\r\n            const signer = crypto.createSign(\"RSA-SHA384\");\r\n            signer.update(signedInfo);\r\n            const res = signer.sign(\r\n                {\r\n                    key: privateKey,\r\n                    padding: crypto.constants.RSA_PKCS1_PSS_PADDING,\r\n                    saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,\r\n                },\r\n                \"base64\",\r\n            );\r\n\r\n            return res;\r\n        },\r\n    );\r\n\r\n    verifySignature = createOptionalCallbackFunction(\r\n        (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n            if (!(typeof key === \"string\" || Buffer.isBuffer(key))) {\r\n                throw new Error(\"keys must be strings or buffers\");\r\n            }\r\n            const verifier = crypto.createVerify(\"RSA-SHA384\");\r\n            verifier.update(material);\r\n            const res = verifier.verify(\r\n                {\r\n                    key: key,\r\n                    padding: crypto.constants.RSA_PKCS1_PSS_PADDING,\r\n                    saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,\r\n                },\r\n                signatureValue,\r\n                \"base64\",\r\n            );\r\n\r\n            return res;\r\n        },\r\n    );\r\n\r\n    getAlgorithmName = () => {\r\n        return \"http://www.w3.org/2007/05/xmldsig-more#sha384-rsa-MGF1\";\r\n    };\r\n}\r\nexport class RsaSha512 implements SignatureAlgorithm {\r\n  getSignature = createOptionalCallbackFunction(\r\n    (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n      const signer = crypto.createSign(\"RSA-SHA512\");\r\n      signer.update(signedInfo);\r\n      const res = signer.sign(privateKey, \"base64\");\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  verifySignature = createOptionalCallbackFunction(\r\n    (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n      const verifier = crypto.createVerify(\"RSA-SHA512\");\r\n      verifier.update(material);\r\n      const res = verifier.verify(key, signatureValue, \"base64\");\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  getAlgorithmName = () => {\r\n    return \"http://www.w3.org/2001/04/xmldsig-more#rsa-sha512\";\r\n  };\r\n}\r\nexport class RsaSha512Mgf1 implements SignatureAlgorithm {\r\n    getSignature = createOptionalCallbackFunction(\r\n        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n            if (!(typeof privateKey === \"string\" || Buffer.isBuffer(privateKey))) {\r\n                throw new Error(\"keys must be strings or buffers\");\r\n            }\r\n            const signer = crypto.createSign(\"RSA-SHA512\");\r\n            signer.update(signedInfo);\r\n            const res = signer.sign(\r\n                {\r\n                    key: privateKey,\r\n                    padding: crypto.constants.RSA_PKCS1_PSS_PADDING,\r\n                    saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,\r\n                },\r\n                \"base64\",\r\n            );\r\n\r\n            return res;\r\n        },\r\n    );\r\n\r\n    verifySignature = createOptionalCallbackFunction(\r\n        (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n            if (!(typeof key === \"string\" || Buffer.isBuffer(key))) {\r\n                throw new Error(\"keys must be strings or buffers\");\r\n            }\r\n            const verifier = crypto.createVerify(\"RSA-SHA512\");\r\n            verifier.update(material);\r\n            const res = verifier.verify(\r\n                {\r\n                    key: key,\r\n                    padding: crypto.constants.RSA_PKCS1_PSS_PADDING,\r\n                    saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,\r\n                },\r\n                signatureValue,\r\n                \"base64\",\r\n            );\r\n\r\n            return res;\r\n        },\r\n    );\r\n\r\n    getAlgorithmName = () => {\r\n        return \"http://www.w3.org/2007/05/xmldsig-more#sha512-rsa-MGF1\";\r\n    };\r\n}\r\nexport class Ed25519 implements SignatureAlgorithm {\r\n    getSignature = createOptionalCallbackFunction(\r\n        (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n            if (!(typeof privateKey === \"string\" || Buffer.isBuffer(privateKey))) {\r\n                throw new Error(\"keys must be strings or buffers\");\r\n            }\r\n            // 使用 crypto.sign() 一次性签名 (Ed25519 不支持流式处理)\r\n            const signature = crypto.sign(null, <Uint8Array<ArrayBuffer> | Uint8ClampedArray<ArrayBuffer> | Uint16Array<ArrayBuffer> | Uint32Array<ArrayBuffer> | Int8Array<ArrayBuffer> | Int16Array<ArrayBuffer> | Int32Array<ArrayBuffer> | BigUint64Array<ArrayBuffer> | BigInt64Array<ArrayBuffer> | Float32Array<ArrayBuffer> | Float64Array<ArrayBuffer> | DataView<ArrayBufferLike>>signedInfo, privateKey);\r\n            return signature.toString('base64');\r\n        },\r\n    );\r\n\r\n    verifySignature = createOptionalCallbackFunction(\r\n        (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n            if (!(typeof key === \"string\" || Buffer.isBuffer(key))) {\r\n                throw new Error(\"keys must be strings or buffers\");\r\n            }\r\n            // 将 Base64 签名转换为 Buffer\r\n            const signature = Buffer.from(signatureValue, 'base64');\r\n            // 使用 crypto.verify() 验证签名\r\n            // @ts-ignore\r\n            return crypto.verify(null, material, key, signature);\r\n        },\r\n    );\r\n\r\n    getAlgorithmName = () => {\r\n        return \"http://www.w3.org/2007/05/xmldsig-more#eddsa-ed25519\";\r\n    };\r\n}\r\n\r\n// 添加辅助函数将 BinaryLike 转换为 Buffer\r\ndeclare module \"crypto\" {\r\n    export function BinaryLikeToBuffer(data: crypto.BinaryLike): Buffer;\r\n}\r\n\r\n\r\nexport class HmacSha1 implements SignatureAlgorithm {\r\n  getSignature = createOptionalCallbackFunction(\r\n    (signedInfo: crypto.BinaryLike, privateKey: crypto.KeyLike): string => {\r\n      const signer = crypto.createHmac(\"SHA1\", privateKey);\r\n      signer.update(signedInfo);\r\n      const res = signer.digest(\"base64\");\r\n\r\n      return res;\r\n    },\r\n  );\r\n\r\n  verifySignature = createOptionalCallbackFunction(\r\n    (material: string, key: crypto.KeyLike, signatureValue: string): boolean => {\r\n      const verifier = crypto.createHmac(\"SHA1\", key);\r\n      verifier.update(material);\r\n      const res = verifier.digest(\"base64\");\r\n\r\n      // Use constant-time comparison to prevent timing attacks (CWE-208)\r\n      // See: https://github.com/node-saml/xml-crypto/issues/522\r\n      try {\r\n        return crypto.timingSafeEqual(\r\n          Buffer.from(res, \"base64\"),\r\n          Buffer.from(signatureValue, \"base64\"),\r\n        );\r\n      } catch (e) {\r\n        // timingSafeEqual throws if buffer lengths don't match\r\n        return false;\r\n      }\r\n    },\r\n  );\r\n\r\n  getAlgorithmName = () => {\r\n    return \"http://www.w3.org/2000/09/xmldsig#hmac-sha1\";\r\n  };\r\n}\r\n"]}