1 changed files with 173 additions and 0 deletions
@ -0,0 +1,173 @@ |
|||
'use strict'; |
|||
(function (exports) { |
|||
'use strict'; |
|||
var x509 = exports.x509 = {}; |
|||
var ASN1 = exports.ASN1; |
|||
var Enc = exports.Enc; |
|||
|
|||
// 1.2.840.10045.3.1.7
|
|||
// prime256v1 (ANSI X9.62 named elliptic curve)
|
|||
var OBJ_ID_EC = '06 08 2A8648CE3D030107'.replace(/\s+/g, '').toLowerCase(); |
|||
// 1.3.132.0.34
|
|||
// secp384r1 (SECG (Certicom) named elliptic curve)
|
|||
var OBJ_ID_EC_384 = '06 05 2B81040022'.replace(/\s+/g, '').toLowerCase(); |
|||
// 1.2.840.10045.2.1
|
|||
// ecPublicKey (ANSI X9.62 public key type)
|
|||
var OBJ_ID_EC_PUB = '06 07 2A8648CE3D0201'.replace(/\s+/g, '').toLowerCase(); |
|||
|
|||
x509.parseSec1 = function parseEcOnlyPrivkey(u8, jwk) { |
|||
var index = 7; |
|||
var len = 32; |
|||
var olen = OBJ_ID_EC.length / 2; |
|||
|
|||
if ("P-384" === jwk.crv) { |
|||
olen = OBJ_ID_EC_384.length / 2; |
|||
index = 8; |
|||
len = 48; |
|||
} |
|||
if (len !== u8[index - 1]) { |
|||
throw new Error("Unexpected bitlength " + len); |
|||
} |
|||
|
|||
// private part is d
|
|||
var d = u8.slice(index, index + len); |
|||
// compression bit index
|
|||
var ci = index + len + 2 + olen + 2 + 3; |
|||
var c = u8[ci]; |
|||
var x, y; |
|||
|
|||
if (0x04 === c) { |
|||
y = u8.slice(ci + 1 + len, ci + 1 + len + len); |
|||
} else if (0x02 !== c) { |
|||
throw new Error("not a supported EC private key"); |
|||
} |
|||
x = u8.slice(ci + 1, ci + 1 + len); |
|||
|
|||
return { |
|||
kty: jwk.kty |
|||
, crv: jwk.crv |
|||
, d: Enc.bufToUrlBase64(d) |
|||
//, dh: Enc.bufToHex(d)
|
|||
, x: Enc.bufToUrlBase64(x) |
|||
//, xh: Enc.bufToHex(x)
|
|||
, y: Enc.bufToUrlBase64(y) |
|||
//, yh: Enc.bufToHex(y)
|
|||
}; |
|||
}; |
|||
|
|||
x509.parsePkcs8 = function parseEcPkcs8(u8, jwk) { |
|||
var index = 24 + (OBJ_ID_EC.length / 2); |
|||
var len = 32; |
|||
if ("P-384" === jwk.crv) { |
|||
index = 24 + (OBJ_ID_EC_384.length / 2) + 2; |
|||
len = 48; |
|||
} |
|||
|
|||
//console.log(index, u8.slice(index));
|
|||
if (0x04 !== u8[index]) { |
|||
//console.log(jwk);
|
|||
throw new Error("privkey not found"); |
|||
} |
|||
var d = u8.slice(index + 2, index + 2 + len); |
|||
var ci = index + 2 + len + 5; |
|||
var xi = ci + 1; |
|||
var x = u8.slice(xi, xi + len); |
|||
var yi = xi + len; |
|||
var y; |
|||
if (0x04 === u8[ci]) { |
|||
y = u8.slice(yi, yi + len); |
|||
} else if (0x02 !== u8[ci]) { |
|||
throw new Error("invalid compression bit (expected 0x04 or 0x02)"); |
|||
} |
|||
|
|||
return { |
|||
kty: jwk.kty |
|||
, crv: jwk.crv |
|||
, d: Enc.bufToUrlBase64(d) |
|||
//, dh: Enc.bufToHex(d)
|
|||
, x: Enc.bufToUrlBase64(x) |
|||
//, xh: Enc.bufToHex(x)
|
|||
, y: Enc.bufToUrlBase64(y) |
|||
//, yh: Enc.bufToHex(y)
|
|||
}; |
|||
}; |
|||
|
|||
x509.parseSpki = function parsePem(u8, jwk) { |
|||
var ci = 16 + OBJ_ID_EC.length / 2; |
|||
var len = 32; |
|||
|
|||
if ("P-384" === jwk.crv) { |
|||
ci = 16 + OBJ_ID_EC_384.length / 2; |
|||
len = 48; |
|||
} |
|||
|
|||
var c = u8[ci]; |
|||
var xi = ci + 1; |
|||
var x = u8.slice(xi, xi + len); |
|||
var yi = xi + len; |
|||
var y; |
|||
if (0x04 === c) { |
|||
y = u8.slice(yi, yi + len); |
|||
} else if (0x02 !== c) { |
|||
throw new Error("not a supported EC private key"); |
|||
} |
|||
|
|||
return { |
|||
kty: jwk.kty |
|||
, crv: jwk.crv |
|||
, x: Enc.bufToUrlBase64(x) |
|||
//, xh: Enc.bufToHex(x)
|
|||
, y: Enc.bufToUrlBase64(y) |
|||
//, yh: Enc.bufToHex(y)
|
|||
}; |
|||
}; |
|||
x509.parsePkix = x509.parseSpki; |
|||
|
|||
x509.packSec1 = function (jwk) { |
|||
var d = Enc.base64ToHex(jwk.d); |
|||
var x = Enc.base64ToHex(jwk.x); |
|||
var y = Enc.base64ToHex(jwk.y); |
|||
var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384; |
|||
return Enc.hexToUint8( |
|||
ASN1('30' |
|||
, ASN1.UInt('01') |
|||
, ASN1('04', d) |
|||
, ASN1('A0', objId) |
|||
, ASN1('A1', ASN1.BitStr('04' + x + y))) |
|||
); |
|||
}; |
|||
x509.packPkcs8 = function (jwk) { |
|||
var d = Enc.base64ToHex(jwk.d); |
|||
var x = Enc.base64ToHex(jwk.x); |
|||
var y = Enc.base64ToHex(jwk.y); |
|||
var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384; |
|||
return Enc.hexToUint8( |
|||
ASN1('30' |
|||
, ASN1.UInt('00') |
|||
, ASN1('30' |
|||
, OBJ_ID_EC_PUB |
|||
, objId |
|||
) |
|||
, ASN1('04' |
|||
, ASN1('30' |
|||
, ASN1.UInt('01') |
|||
, ASN1('04', d) |
|||
, ASN1('A1', ASN1.BitStr('04' + x + y))))) |
|||
); |
|||
}; |
|||
x509.packSpki = function (jwk) { |
|||
var x = Enc.base64ToHex(jwk.x); |
|||
var y = Enc.base64ToHex(jwk.y); |
|||
var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384; |
|||
return Enc.hexToUint8( |
|||
ASN1('30' |
|||
, ASN1('30' |
|||
, OBJ_ID_EC_PUB |
|||
, objId |
|||
) |
|||
, ASN1.BitStr('04' + x + y)) |
|||
); |
|||
}; |
|||
x509.packPkix = x509.packSpki; |
|||
|
|||
}('undefined' !== typeof module ? module.exports : window)); |
Loading…
Reference in new issue