@libp2p/crypto/src/keys/ecdsa/index.ts

Crypto primitives for libp2p

import type { JWKKeyPair } from '../interface.js'
import type { AbortOptions } from '@libp2p/interface'
import type { Uint8ArrayList } from 'uint8arraylist'

export type Curve = 'P-256' | 'P-384' | 'P-521'

export const ECDSA_P_256_OID = '1.2.840.10045.3.1.7'
export const ECDSA_P_384_OID = '1.3.132.0.34'
export const ECDSA_P_521_OID = '1.3.132.0.35'

export async function generateECDSAKey (curve: Curve = 'P-256'): Promise<JWKKeyPair> {
  const keyPair = await crypto.subtle.generateKey({
    name: 'ECDSA',
    namedCurve: curve
  }, true, ['sign', 'verify'])

  return {
    publicKey: await crypto.subtle.exportKey('jwk', keyPair.publicKey),
    privateKey: await crypto.subtle.exportKey('jwk', keyPair.privateKey)
  }
}

export async function hashAndSign (key: JsonWebKey, msg: Uint8Array | Uint8ArrayList, options?: AbortOptions): Promise<Uint8Array> {
  const privateKey = await crypto.subtle.importKey('jwk', key, {
    name: 'ECDSA',
    namedCurve: key.crv ?? 'P-256'
  }, false, ['sign'])
  options?.signal?.throwIfAborted()

  const signature = await crypto.subtle.sign({
    name: 'ECDSA',
    hash: {
      name: 'SHA-256'
    }
  }, privateKey, msg.subarray())
  options?.signal?.throwIfAborted()

  return new Uint8Array(signature, 0, signature.byteLength)
}

export async function hashAndVerify (key: JsonWebKey, sig: Uint8Array, msg: Uint8Array | Uint8ArrayList, options?: AbortOptions): Promise<boolean> {
  const publicKey = await crypto.subtle.importKey('jwk', key, {
    name: 'ECDSA',
    namedCurve: key.crv ?? 'P-256'
  }, false, ['verify'])
  options?.signal?.throwIfAborted()

  const result = await crypto.subtle.verify({
    name: 'ECDSA',
    hash: {
      name: 'SHA-256'
    }
  }, publicKey, sig, msg.subarray())
  options?.signal?.throwIfAborted()

  return result
}