jsonld-signatures-merkleproof2019
Version:
A jsonld signature implementation to support MerkleProof2019 verification in Verifiable Credential context
196 lines (195 loc) • 10 kB
JavaScript
;
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
var desc = Object.getOwnPropertyDescriptor(m, k);
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
desc = { enumerable: true, get: function() { return m[k]; } };
}
Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || (function () {
var ownKeys = function(o) {
ownKeys = Object.getOwnPropertyNames || function (o) {
var ar = [];
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
return ar;
};
return ownKeys(o);
};
return function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
__setModuleDefault(result, mod);
return result;
};
})();
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
var __importDefault = (this && this.__importDefault) || function (mod) {
return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.privateKeyJwkFromPrivateKeyBase58 = exports.publicKeyJwkFromPublicKeyBase58 = exports.publicKeyHexFromPrivateKeyHex = exports.publicKeyUInt8ArrayFromPublicKeyBase58 = exports.privateKeyUInt8ArrayFromPrivateKeyBase58 = exports.privateKeyBase58FromPrivateKeyHex = exports.publicKeyBase58FromPublicKeyHex = exports.publicKeyUInt8ArrayFromMultibase = exports.publicKeyUInt8ArrayFromJwk = exports.privateKeyUInt8ArrayFromJwk = exports.publicKeyHexFromJwk = exports.privateKeyHexFromJwk = exports.publicKeyJwkFromPublicKeyPem = exports.privateKeyJwkFromPrivateKeyPem = exports.publicKeyJwkFromPublicKeyHex = exports.privateKeyJwkFromPrivateKeyHex = exports.getKid = void 0;
const keyto_1 = __importDefault(require("@trust/keyto"));
const base64url_1 = __importDefault(require("base64url"));
const crypto_1 = __importDefault(require("crypto"));
const bs58_1 = __importDefault(require("bs58"));
const secp256k1_1 = __importDefault(require("secp256k1"));
const buffer_1 = require("buffer");
const canonicalize_1 = __importDefault(require("canonicalize"));
// @ts-expect-error not a TS package
const multikey = __importStar(require("@digitalbazaar/ecdsa-multikey"));
const buffer = typeof Buffer === 'undefined' ? buffer_1.Buffer : Buffer;
const compressedHexEncodedPublicKeyLength = 66;
/**
* Example
* ```js
* {
* kty: 'EC',
* crv: 'secp256k1',
* d: 'rhYFsBPF9q3-uZThy7B3c4LDF_8wnozFUAEm5LLC4Zw',
* x: 'dWCvM4fTdeM0KmloF57zxtBPXTOythHPMm1HCLrdd3A',
* y: '36uMVGM7hnw-N6GnjFcihWE3SkrhMLzzLCdPMXPEXlA',
* kid: 'JUvpllMEYUZ2joO59UNui_XYDqxVqiFLLAJ8klWuPBw'
* }
* ```
* See [rfc7638](https://tools.ietf.org/html/rfc7638) for more details on Jwk.
*/
const getKid = (jwk) => {
const copy = Object.assign({}, jwk);
delete copy.d;
delete copy.kid;
delete copy.alg;
const digest = crypto_1.default
.createHash('sha256')
.update((0, canonicalize_1.default)(copy))
.digest();
return base64url_1.default.encode(buffer.from(digest));
};
exports.getKid = getKid;
/** convert compressed hex encoded private key to jwk */
const privateKeyJwkFromPrivateKeyHex = (privateKeyHex) => {
const jwk = Object.assign(Object.assign({}, keyto_1.default.from(privateKeyHex, 'blk').toJwk('private')), { crv: 'secp256k1' });
const kid = (0, exports.getKid)(jwk);
return Object.assign(Object.assign({}, jwk), { kid });
};
exports.privateKeyJwkFromPrivateKeyHex = privateKeyJwkFromPrivateKeyHex;
/** convert compressed hex encoded public key to jwk */
const publicKeyJwkFromPublicKeyHex = (publicKeyHex) => {
let key = publicKeyHex;
if (publicKeyHex.length === compressedHexEncodedPublicKeyLength) {
const keyBin = secp256k1_1.default.publicKeyConvert(buffer.from(publicKeyHex, 'hex'), false);
key = buffer.from(keyBin).toString('hex');
}
const jwk = Object.assign(Object.assign({}, keyto_1.default.from(key, 'blk').toJwk('public')), { crv: 'secp256k1' });
const kid = (0, exports.getKid)(jwk);
return Object.assign(Object.assign({}, jwk), { kid });
};
exports.publicKeyJwkFromPublicKeyHex = publicKeyJwkFromPublicKeyHex;
/** convert pem encoded private key to jwk */
const privateKeyJwkFromPrivateKeyPem = (privateKeyPem) => {
const jwk = Object.assign(Object.assign({}, keyto_1.default.from(privateKeyPem, 'pem').toJwk('private')), { crv: 'secp256k1' });
// console.log(jwk);
const kid = (0, exports.getKid)(jwk);
return Object.assign(Object.assign({}, jwk), { kid });
};
exports.privateKeyJwkFromPrivateKeyPem = privateKeyJwkFromPrivateKeyPem;
/** convert pem encoded public key to jwk */
const publicKeyJwkFromPublicKeyPem = (publicKeyPem) => {
const jwk = Object.assign(Object.assign({}, keyto_1.default.from(publicKeyPem, 'pem').toJwk('public')), { crv: 'secp256k1' });
const kid = (0, exports.getKid)(jwk);
return Object.assign(Object.assign({}, jwk), { kid });
};
exports.publicKeyJwkFromPublicKeyPem = publicKeyJwkFromPublicKeyPem;
/** convert jwk to hex encoded private key */
const privateKeyHexFromJwk = (jwk) => keyto_1.default
.from(Object.assign(Object.assign({}, jwk), { crv: 'K-256' }), 'jwk')
.toString('blk', 'private');
exports.privateKeyHexFromJwk = privateKeyHexFromJwk;
/** convert jwk to hex encoded public key */
const publicKeyHexFromJwk = (jwk) => {
const uncompressedPublicKey = keyto_1.default
.from(Object.assign(Object.assign({}, jwk), { crv: 'K-256' }), 'jwk')
.toString('blk', 'public');
const compressed = secp256k1_1.default.publicKeyConvert(buffer.from(uncompressedPublicKey, 'hex'), true);
return buffer.from(compressed).toString('hex');
};
exports.publicKeyHexFromJwk = publicKeyHexFromJwk;
/** convert jwk to binary encoded private key */
const privateKeyUInt8ArrayFromJwk = (jwk) => {
const privateKeyHex = (0, exports.privateKeyHexFromJwk)(jwk);
let asBuffer = buffer.from(privateKeyHex, 'hex');
let padding = 32 - asBuffer.length;
while (padding > 0) {
asBuffer = buffer.concat([buffer.from('00', 'hex'), asBuffer]);
padding--;
}
return asBuffer;
};
exports.privateKeyUInt8ArrayFromJwk = privateKeyUInt8ArrayFromJwk;
/** convert jwk to binary encoded public key */
const publicKeyUInt8ArrayFromJwk = (jwk) => {
const publicKeyHex = (0, exports.publicKeyHexFromJwk)(jwk);
let asBuffer = buffer.from(publicKeyHex, 'hex');
let padding = 32 - asBuffer.length;
while (padding > 0) {
asBuffer = buffer.concat([buffer.from('00', 'hex'), asBuffer]);
padding--;
}
return asBuffer;
};
exports.publicKeyUInt8ArrayFromJwk = publicKeyUInt8ArrayFromJwk;
const publicKeyUInt8ArrayFromMultibase = (publicKeyMultibase) => __awaiter(void 0, void 0, void 0, function* () {
const pubKeyJwk = yield multikey.toJwk({ keyPair: publicKeyMultibase });
return (0, exports.publicKeyUInt8ArrayFromJwk)(pubKeyJwk);
});
exports.publicKeyUInt8ArrayFromMultibase = publicKeyUInt8ArrayFromMultibase;
/** convert publicKeyHex to base58 */
const publicKeyBase58FromPublicKeyHex = (publicKeyHex) => {
return bs58_1.default.encode(buffer.from(publicKeyHex, 'hex'));
};
exports.publicKeyBase58FromPublicKeyHex = publicKeyBase58FromPublicKeyHex;
/** convert publicKeyHex to base58 */
const privateKeyBase58FromPrivateKeyHex = (privateKeyHex) => {
return bs58_1.default.encode(buffer.from(privateKeyHex, 'hex'));
};
exports.privateKeyBase58FromPrivateKeyHex = privateKeyBase58FromPrivateKeyHex;
const privateKeyUInt8ArrayFromPrivateKeyBase58 = (privateKeyBase58) => {
return bs58_1.default.decode(privateKeyBase58);
};
exports.privateKeyUInt8ArrayFromPrivateKeyBase58 = privateKeyUInt8ArrayFromPrivateKeyBase58;
const publicKeyUInt8ArrayFromPublicKeyBase58 = (publicKeyBase58) => {
return bs58_1.default.decode(publicKeyBase58);
};
exports.publicKeyUInt8ArrayFromPublicKeyBase58 = publicKeyUInt8ArrayFromPublicKeyBase58;
const publicKeyHexFromPrivateKeyHex = (privateKeyHex) => {
const publicKey = secp256k1_1.default.publicKeyCreate(new Uint8Array(buffer.from(privateKeyHex, 'hex')));
return buffer.from(publicKey).toString('hex');
};
exports.publicKeyHexFromPrivateKeyHex = publicKeyHexFromPrivateKeyHex;
const publicKeyJwkFromPublicKeyBase58 = (publicKeybase58) => {
const decodedPublicKeyAsHex = bs58_1.default.decode(publicKeybase58).toString();
return (0, exports.publicKeyJwkFromPublicKeyHex)(decodedPublicKeyAsHex);
};
exports.publicKeyJwkFromPublicKeyBase58 = publicKeyJwkFromPublicKeyBase58;
const privateKeyJwkFromPrivateKeyBase58 = (privateKeyBase58) => {
const decodedPrivateKeyAsHex = bs58_1.default.decode(privateKeyBase58).toString();
return (0, exports.privateKeyJwkFromPrivateKeyHex)(decodedPrivateKeyAsHex);
};
exports.privateKeyJwkFromPrivateKeyBase58 = privateKeyJwkFromPrivateKeyBase58;