dcc-decoder
Version:
<img alttext="COVID Green Logo" src="https://raw.githubusercontent.com/lfph/artwork/master/projects/covidgreen/stacked/color/covidgreen-stacked-color.png" width="300" />
116 lines (115 loc) • 4.71 kB
JavaScript
;
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
__setModuleDefault(result, mod);
return result;
};
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
var __importDefault = (this && this.__importDefault) || function (mod) {
return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
const cose_js_1 = __importDefault(require("cose-js"));
const cbor_1 = __importDefault(require("cbor"));
const node_rsa_1 = __importDefault(require("node-rsa"));
const hcert_1 = require("../types/hcert");
const errors = __importStar(require("../types/errors"));
function verifyECDSA(message, keys) {
return __awaiter(this, void 0, void 0, function* () {
for (const key of keys) {
try {
const verifiedBuf = yield cose_js_1.default.sign.verify(message, {
key: {
kid: key.kid,
x: Buffer.from(key.x, 'base64'),
y: Buffer.from(key.y, 'base64'),
},
});
if (verifiedBuf) {
// console.log('key worked', key.kid, key.country)
return true;
}
}
catch (e) {
console.log('Sig failed', key.kid, e);
}
}
return errors.invalidSignature();
});
}
const EMPTY_BUFFER = Buffer.alloc(0);
const rsaOptions = {
signingScheme: {
scheme: 'pss',
hash: 'sha256',
saltLength: 32,
},
};
function verifyRSA(message, keys) {
return __awaiter(this, void 0, void 0, function* () {
const decoded = cbor_1.default.decodeFirstSync(Buffer.from(message)).value;
const protectedHeader = decoded[hcert_1.CBOR_STRUCTURE.PROTECTED_HEADER].length
? decoded[hcert_1.CBOR_STRUCTURE.PROTECTED_HEADER]
: cbor_1.default.encode(EMPTY_BUFFER);
const signature = decoded[hcert_1.CBOR_STRUCTURE.SIGNATURE];
const sigStructure = [
'Signature1',
protectedHeader,
EMPTY_BUFFER,
decoded[hcert_1.CBOR_STRUCTURE.PAYLOAD],
];
const toBeSigned = cbor_1.default.encode(sigStructure);
for (const key of keys) {
try {
const rsa = new node_rsa_1.default(key.pem, 'pkcs8-public-pem');
rsa.setOptions(rsaOptions);
const result = rsa.verify(toBeSigned, signature, 'buffer');
// console.log('RESULT:', result)
if (result) {
// console.log('key worked', key.kid, key.country)
return true;
}
}
catch (e) {
console.log('Sig failed', key.kid, e);
}
}
return errors.invalidSignature();
});
}
function verifySignature(message, algo, keys) {
return __awaiter(this, void 0, void 0, function* () {
if (algo === hcert_1.ALGOS.ECDSA_256) {
return verifyECDSA(message, keys);
}
else if (algo === hcert_1.ALGOS.RSA_PSS_256) {
return verifyRSA(message, keys);
}
else {
return errors.unknownSigAlgo();
}
});
}
exports.default = verifySignature;