From 1b01c2c4132f3db552f32ad56d92f4670d6365db Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Fri, 26 Apr 2019 23:27:08 -0400
Subject: [PATCH 1/7] working der generation

---
 app.js                    | 3 +++
 index.html                | 4 +++-
 lib/bluecrypt-encoding.js | 2 +-
 lib/x509.js               | 6 +++---
 4 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/app.js b/app.js
index fcacb77..1738a2c 100644
--- a/app.js
+++ b/app.js
@@ -43,6 +43,9 @@ function run() {
     };
     console.log('opts', opts);
     Keypairs.generate(opts).then(function (results) {
+      var der = x509.packPkcs8(results.private);
+      console.log(der)
+      // Pem.encode(x509.packPkcs8(privateJwk))
       $('.js-jwk').innerText = JSON.stringify(results, null, 2);
       //
       $('.js-loading').hidden = true;
diff --git a/index.html b/index.html
index da066a9..0d35e9a 100644
--- a/index.html
+++ b/index.html
@@ -66,8 +66,10 @@
       <summary>ACME Account Response</summary>
       <pre><code class="js-acme-account-response">&nbsp;</code></pre>
     </details>
-
+    <script src="./lib/bluecrypt-encoding.js"></script>
     <script src="./lib/ecdsa.js"></script>
+    <script src="./lib/asn1-packer.js"></script>
+    <script src="./lib/x509.js"></script>
     <script src="./lib/rsa.js"></script>
     <script src="./lib/keypairs.js"></script>
     <script src="./lib/acme.js"></script>
diff --git a/lib/bluecrypt-encoding.js b/lib/bluecrypt-encoding.js
index d3f2292..7dc1073 100644
--- a/lib/bluecrypt-encoding.js
+++ b/lib/bluecrypt-encoding.js
@@ -1,6 +1,6 @@
 (function (exports) {
 
-var Enc = exports.BluecryptEncoding = {};
+var Enc = exports.Enc = {};
 
 Enc.bufToBin = function (buf) {
   var bin = '';
diff --git a/lib/x509.js b/lib/x509.js
index 63d1a7d..114375d 100644
--- a/lib/x509.js
+++ b/lib/x509.js
@@ -128,7 +128,7 @@
     var x = Enc.base64ToHex(jwk.x);
     var y = Enc.base64ToHex(jwk.y);
     var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
-    return Enc.hexToUint8(
+    return Enc.hexToBuf(
       ASN1('30'
         , ASN1.UInt('01')
         , ASN1('04', d)
@@ -141,7 +141,7 @@
     var x = Enc.base64ToHex(jwk.x);
     var y = Enc.base64ToHex(jwk.y);
     var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
-    return Enc.hexToUint8(
+    return Enc.hexToBuf(
       ASN1('30'
         , ASN1.UInt('00')
         , ASN1('30'
@@ -159,7 +159,7 @@
     var x = Enc.base64ToHex(jwk.x);
     var y = Enc.base64ToHex(jwk.y);
     var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
-    return Enc.hexToUint8(
+    return Enc.hexToBuf(
       ASN1('30'
         , ASN1('30'
           , OBJ_ID_EC_PUB
-- 
2.38.5


From 735ec948da2f15c9b0c269340270f82f3a3b66dd Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Sat, 27 Apr 2019 00:02:57 -0400
Subject: [PATCH 2/7] working pem generation

---
 app.js       |  8 ++++++--
 index.html   | 14 +++++++++++++
 lib/ecdsa.js | 55 +++++++++++++++++++++++++++++++++++++++++++++++++++-
 3 files changed, 74 insertions(+), 3 deletions(-)

diff --git a/app.js b/app.js
index 1738a2c..097d710 100644
--- a/app.js
+++ b/app.js
@@ -44,15 +44,19 @@ function run() {
     console.log('opts', opts);
     Keypairs.generate(opts).then(function (results) {
       var der = x509.packPkcs8(results.private);
-      console.log(der)
-      // Pem.encode(x509.packPkcs8(privateJwk))
+      var pem = Eckles.export({jwk:results.private})
+ 
       $('.js-jwk').innerText = JSON.stringify(results, null, 2);
+      $('.js-der').innerText = JSON.stringify(der, null, 2);
+      $('.js-input-pem').innerText = pem;
       //
       $('.js-loading').hidden = true;
       $('.js-jwk').hidden = false;
       $$('input').map(function ($el) { $el.disabled = false; });
       $$('button').map(function ($el) { $el.disabled = false; });
       $('.js-toc-jwk').hidden = false;
+      $('.js-toc-der').hidden = false;
+      $('.js-toc-pem').hidden = false;
     });
   });
 
diff --git a/index.html b/index.html
index 0d35e9a..d4fec55 100644
--- a/index.html
+++ b/index.html
@@ -1,6 +1,12 @@
 <html>
   <head>
     <title>BlueCrypt</title>
+    <style>
+      textarea {
+        width: 42em;
+        height: 10em;
+      }
+    </style>
   </head>
   <body>
     <h1>BlueCrypt for the Browser</h1>
@@ -58,6 +64,14 @@
       <summary>JWK Keypair</summary>
       <pre><code class="js-jwk">&nbsp;</code></pre>
     </details>
+    <details class="js-toc-der" hidden>
+      <summary>DER Binary</summary>
+      <pre><code class="js-der">&nbsp;</code></pre>
+    </details>
+    <details class="js-toc-pem" hidden>
+      <summary>PEM (base64-encoded DER)</summary>
+      <textarea class="js-input-pem" readonly></textarea>
+    </details>
     <details class="js-toc-acme-account-request" hidden>
       <summary>ACME Account Request</summary>
       <pre><code class="js-acme-account-request">&nbsp;</code></pre>
diff --git a/lib/ecdsa.js b/lib/ecdsa.js
index dedc4fb..deb2c86 100644
--- a/lib/ecdsa.js
+++ b/lib/ecdsa.js
@@ -32,7 +32,7 @@ EC.generate = function (opts) {
       + " Please choose either 'P-256' or 'P-384'. "
       + EC._stance));
   }
-
+  
   var extractable = true;
   return window.crypto.subtle.generateKey(
     wcOpts
@@ -51,6 +51,59 @@ EC.generate = function (opts) {
   });
 };
 
+EC.export = function (opts) {
+  if (!opts || !opts.jwk || 'object' !== typeof opts.jwk) {
+    throw new Error("must pass { jwk: jwk } as a JSON object");
+  }
+  var jwk = JSON.parse(JSON.stringify(opts.jwk));
+  var format = opts.format;
+  if (opts.public || -1 !== [ 'spki', 'pkix', 'ssh', 'rfc4716' ].indexOf(format)) {
+    jwk.d = null;
+  }
+  if ('EC' !== jwk.kty) {
+    throw new Error("options.jwk.kty must be 'EC' for EC keys");
+  }
+  if (!jwk.d) {
+    if (!format || -1 !== [ 'spki', 'pkix' ].indexOf(format)) {
+      format = 'spki';
+    } else if (-1 !== [ 'ssh', 'rfc4716' ].indexOf(format)) {
+      format = 'ssh';
+    } else {
+      throw new Error("options.format must be 'spki' or 'ssh' for public EC keys, not ("
+        + typeof format + ") " + format);
+    }
+  } else {
+    if (!format || 'sec1' === format) {
+      format = 'sec1';
+    } else if ('pkcs8' !== format) {
+      throw new Error("options.format must be 'sec1' or 'pkcs8' for private EC keys, not '" + format + "'");
+    }
+  }
+  if (-1 === [ 'P-256', 'P-384' ].indexOf(jwk.crv)) {
+    throw new Error("options.jwk.crv must be either P-256 or P-384 for EC keys, not '" + jwk.crv + "'");
+  }
+  if (!jwk.y) {
+    throw new Error("options.jwk.y must be a urlsafe base64-encoded either P-256 or P-384");
+  }
+
+  if ('sec1' === format) {
+    return PEM.packBlock({ type: "EC PRIVATE KEY", bytes: x509.packSec1(jwk) });
+  } else if ('pkcs8' === format) {
+    return PEM.packBlock({ type: "PRIVATE KEY", bytes: x509.packPkcs8(jwk) });
+  } else if (-1 !== [ 'spki', 'pkix' ].indexOf(format)) {
+    return PEM.packBlock({ type: "PUBLIC KEY", bytes: x509.packSpki(jwk) });
+  } else if (-1 !== [ 'ssh', 'rfc4716' ].indexOf(format)) {
+    return SSH.packSsh(jwk);
+  } else {
+    throw new Error("Sanity Error: reached unreachable code block with format: " + format);
+  }
+};
+EC.pack = function (opts) {
+  return Promise.resolve().then(function () {
+    return EC.exportSync(opts);
+  });
+};
+
 // Chopping off the private parts is now part of the public API.
 // I thought it sounded a little too crude at first, but it really is the best name in every possible way.
 EC.neuter = function (opts) {
-- 
2.38.5


From 4b44a576c1d2b876d05d84ee16ce572d7af3bc0b Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Sat, 27 Apr 2019 00:03:42 -0400
Subject: [PATCH 3/7] move some docs to js formatted documentation

---
 lib/keypairs.js | 14 ++++++++------
 lib/x509.js     |  4 ++++
 2 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/lib/keypairs.js b/lib/keypairs.js
index 1492954..79566d9 100644
--- a/lib/keypairs.js
+++ b/lib/keypairs.js
@@ -3,8 +3,8 @@
 'use strict';
 
 var Keypairs = exports.Keypairs = {};
-var Rasha = exports.Rasha || require('rasha');
-var Eckles = exports.Eckles || require('eckles');
+var Rasha = exports.Rasha;
+var Eckles = exports.Eckles;
 var Enc = exports.Enc || {};
 
 Keypairs._stance = "We take the stance that if you're knowledgeable enough to"
@@ -34,10 +34,12 @@ Keypairs.generate = function (opts) {
 };
 
 
-// Chopping off the private parts is now part of the public API.
-// I thought it sounded a little too crude at first, but it really is the best name in every possible way.
+/**
+ * Chopping off the private parts is now part of the public API.
+ * I thought it sounded a little too crude at first, but it really is the best name in every possible way.
+ */
 Keypairs.neuter = Keypairs._neuter = function (opts) {
-  // trying to find the best balance of an immutable copy with custom attributes
+  /** trying to find the best balance of an immutable copy with custom attributes */
   var jwk = {};
   Object.keys(opts.jwk).forEach(function (k) {
     if ('undefined' === typeof opts.jwk[k]) { return; }
@@ -61,7 +63,7 @@ Keypairs.thumbprint = function (opts) {
 Keypairs.publish = function (opts) {
   if ('object' !== typeof opts.jwk || !opts.jwk.kty) { throw new Error("invalid jwk: " + JSON.stringify(opts.jwk)); }
 
-  // returns a copy
+  /** returns a copy */ 
   var jwk = Keypairs.neuter(opts);
 
   if (jwk.exp) {
diff --git a/lib/x509.js b/lib/x509.js
index 114375d..3bf60fd 100644
--- a/lib/x509.js
+++ b/lib/x509.js
@@ -136,6 +136,10 @@
         , ASN1('A1', ASN1.BitStr('04' + x + y)))
     );
   };
+  /**
+   * take a private jwk and creates a der from it
+   * @param {*} jwk 
+   */
   x509.packPkcs8 = function (jwk) {
     var d = Enc.base64ToHex(jwk.d);
     var x = Enc.base64ToHex(jwk.x);
-- 
2.38.5


From f0166afeeb61cac115313f05c5dbdec69d87f8a7 Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Sat, 27 Apr 2019 00:09:57 -0400
Subject: [PATCH 4/7] do der and pem for ecdsa only

---
 app.js | 130 +++++++++++++++++++++++++++++----------------------------
 1 file changed, 67 insertions(+), 63 deletions(-)

diff --git a/app.js b/app.js
index 097d710..c56ea50 100644
--- a/app.js
+++ b/app.js
@@ -1,75 +1,79 @@
 (function () {
-'use strict';
+  'use strict';
 
-var Keypairs = window.Keypairs;
+  var Keypairs = window.Keypairs;
 
-function $(sel) {
-  return document.querySelector(sel);
-}
-function $$(sel) {
-  return Array.prototype.slice.call(document.querySelectorAll(sel));
-}
+  function $(sel) {
+    return document.querySelector(sel);
+  }
+  function $$(sel) {
+    return Array.prototype.slice.call(document.querySelectorAll(sel));
+  }
 
-function run() {
-  console.log('hello');
+  function run() {
+    console.log('hello');
 
-  // Show different options for ECDSA vs RSA
-  $$('input[name="kty"]').forEach(function ($el) {
-    $el.addEventListener('change', function (ev) {
-      console.log(this);
-      console.log(ev);
-      if ("RSA" === ev.target.value) {
-        $('.js-rsa-opts').hidden = false;
-        $('.js-ec-opts').hidden = true;
-      } else {
-        $('.js-rsa-opts').hidden = true;
-        $('.js-ec-opts').hidden = false;
-      }
+    // Show different options for ECDSA vs RSA
+    $$('input[name="kty"]').forEach(function ($el) {
+      $el.addEventListener('change', function (ev) {
+        console.log(this);
+        console.log(ev);
+        if ("RSA" === ev.target.value) {
+          $('.js-rsa-opts').hidden = false;
+          $('.js-ec-opts').hidden = true;
+        } else {
+          $('.js-rsa-opts').hidden = true;
+          $('.js-ec-opts').hidden = false;
+        }
+      });
     });
-  });
 
-  // Generate a key on submit
-  $('form.js-keygen').addEventListener('submit', function (ev) {
-    ev.preventDefault();
-    ev.stopPropagation();
-    $('.js-loading').hidden = false;
-    $('.js-jwk').hidden = true;
-    $$('input').map(function ($el) { $el.disabled = true; });
-    $$('button').map(function ($el) { $el.disabled = true; });
-    var opts = {
-      kty: $('input[name="kty"]:checked').value
-    , namedCurve: $('input[name="ec-crv"]:checked').value
-    , modulusLength: $('input[name="rsa-len"]:checked').value
-    };
-    console.log('opts', opts);
-    Keypairs.generate(opts).then(function (results) {
-      var der = x509.packPkcs8(results.private);
-      var pem = Eckles.export({jwk:results.private})
- 
-      $('.js-jwk').innerText = JSON.stringify(results, null, 2);
-      $('.js-der').innerText = JSON.stringify(der, null, 2);
-      $('.js-input-pem').innerText = pem;
-      //
-      $('.js-loading').hidden = true;
-      $('.js-jwk').hidden = false;
-      $$('input').map(function ($el) { $el.disabled = false; });
-      $$('button').map(function ($el) { $el.disabled = false; });
-      $('.js-toc-jwk').hidden = false;
-      $('.js-toc-der').hidden = false;
-      $('.js-toc-pem').hidden = false;
+    // Generate a key on submit
+    $('form.js-keygen').addEventListener('submit', function (ev) {
+      ev.preventDefault();
+      ev.stopPropagation();
+      $('.js-loading').hidden = false;
+      $('.js-jwk').hidden = true;
+      $('.js-toc-der').hidden = true;
+      $('.js-toc-pem').hidden = true;
+      $$('input').map(function ($el) { $el.disabled = true; });
+      $$('button').map(function ($el) { $el.disabled = true; });
+      var opts = {
+        kty: $('input[name="kty"]:checked').value
+        , namedCurve: $('input[name="ec-crv"]:checked').value
+        , modulusLength: $('input[name="rsa-len"]:checked').value
+      };
+      console.log('opts', opts);
+      Keypairs.generate(opts).then(function (results) {
+        if (opts.kty == 'EC') {
+          var der = x509.packPkcs8(results.private);
+          var pem = Eckles.export({ jwk: results.private })
+          $('.js-der').innerText = JSON.stringify(der, null, 2);
+          $('.js-input-pem').innerText = pem;
+          $('.js-toc-der').hidden = false;
+          $('.js-toc-pem').hidden = false;
+        }
+
+        $('.js-jwk').innerText = JSON.stringify(results, null, 2);
+        //
+        $('.js-loading').hidden = true;
+        $('.js-jwk').hidden = false;
+        $$('input').map(function ($el) { $el.disabled = false; });
+        $$('button').map(function ($el) { $el.disabled = false; });
+        $('.js-toc-jwk').hidden = false;
+      });
     });
-  });
 
-  $('form.js-acme-account').addEventListener('submit', function (ev) {
-    ev.preventDefault();
-    ev.stopPropagation();
-    $('.js-loading').hidden = false;
-    ACME.accounts.create
-  });
+    $('form.js-acme-account').addEventListener('submit', function (ev) {
+      ev.preventDefault();
+      ev.stopPropagation();
+      $('.js-loading').hidden = false;
+      ACME.accounts.create
+    });
 
-  $('.js-generate').hidden = false;
-  $('.js-create-account').hidden = false;
-}
+    $('.js-generate').hidden = false;
+    $('.js-create-account').hidden = false;
+  }
 
-window.addEventListener('load', run);
+  window.addEventListener('load', run);
 }());
-- 
2.38.5


From 70103de28d65fd79416302032f03d16e237fa692 Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Sat, 27 Apr 2019 00:31:16 -0400
Subject: [PATCH 5/7] working rsa pem

---
 app.js      | 14 ++++++++----
 lib/rsa.js  | 61 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 lib/x509.js | 61 ++++++++++++++++++++++++++++++++++++++++++++++++++++-
 3 files changed, 131 insertions(+), 5 deletions(-)

diff --git a/app.js b/app.js
index c56ea50..06c0022 100644
--- a/app.js
+++ b/app.js
@@ -45,17 +45,23 @@
       };
       console.log('opts', opts);
       Keypairs.generate(opts).then(function (results) {
+        var der;
         if (opts.kty == 'EC') {
-          var der = x509.packPkcs8(results.private);
+          der = x509.packPkcs8(results.private);
           var pem = Eckles.export({ jwk: results.private })
-          $('.js-der').innerText = JSON.stringify(der, null, 2);
           $('.js-input-pem').innerText = pem;
-          $('.js-toc-der').hidden = false;
           $('.js-toc-pem').hidden = false;
+        } else {
+          der = x509.packPkcs8(results.private);
+          var pem = Rasha.pack({ jwk: results.private }).then(function (pem) {
+            $('.js-input-pem').innerText = pem;
+            $('.js-toc-pem').hidden = false;
+          })
         }
 
+        $('.js-der').innerText = JSON.stringify(der, null, 2);
+        $('.js-toc-der').hidden = false;
         $('.js-jwk').innerText = JSON.stringify(results, null, 2);
-        //
         $('.js-loading').hidden = true;
         $('.js-jwk').hidden = false;
         $$('input').map(function ($el) { $el.disabled = false; });
diff --git a/lib/rsa.js b/lib/rsa.js
index 4ec7e07..17ceccb 100644
--- a/lib/rsa.js
+++ b/lib/rsa.js
@@ -3,6 +3,7 @@
 'use strict';
 
 var RSA = exports.Rasha = {};
+var x509 = exports.x509;
 if ('undefined' !== typeof module) { module.exports = RSA; }
 var Enc = {};
 var textEncoder = new TextEncoder();
@@ -106,6 +107,66 @@ RSA.thumbprint = function (opts) {
   });
 };
 
+RSA.export = function (opts) {
+  if (!opts || !opts.jwk || 'object' !== typeof opts.jwk) {
+    throw new Error("must pass { jwk: jwk }");
+  }
+  var jwk = JSON.parse(JSON.stringify(opts.jwk));
+  var format = opts.format;
+  var pub = opts.public;
+  if (pub || -1 !== [ 'spki', 'pkix', 'ssh', 'rfc4716' ].indexOf(format)) {
+    jwk = RSA.nueter(jwk);
+  }
+  if ('RSA' !== jwk.kty) {
+    throw new Error("options.jwk.kty must be 'RSA' for RSA keys");
+  }
+  if (!jwk.p) {
+    // TODO test for n and e
+    pub = true;
+    if (!format || 'pkcs1' === format) {
+      format = 'pkcs1';
+    } else if (-1 !== [ 'spki', 'pkix' ].indexOf(format)) {
+      format = 'spki';
+    } else if (-1 !== [ 'ssh', 'rfc4716' ].indexOf(format)) {
+      format = 'ssh';
+    } else {
+      throw new Error("options.format must be 'spki', 'pkcs1', or 'ssh' for public RSA keys, not ("
+        + typeof format + ") " + format);
+    }
+  } else {
+    // TODO test for all necessary keys (d, p, q ...)
+    if (!format || 'pkcs1' === format) {
+      format = 'pkcs1';
+    } else if ('pkcs8' !== format) {
+      throw new Error("options.format must be 'pkcs1' or 'pkcs8' for private RSA keys");
+    }
+  }
+
+  if ('pkcs1' === format) {
+    if (jwk.d) {
+      return PEM.packBlock({ type: "RSA PRIVATE KEY", bytes: x509.packPkcs1(jwk) });
+    } else {
+      return PEM.packBlock({ type: "RSA PUBLIC KEY", bytes: x509.packPkcs1(jwk) });
+    }
+  } else if ('pkcs8' === format) {
+    return PEM.packBlock({ type: "PRIVATE KEY", bytes: x509.packPkcs8(jwk) });
+  } else if (-1 !== [ 'spki', 'pkix' ].indexOf(format)) {
+    return PEM.packBlock({ type: "PUBLIC KEY", bytes: x509.packSpki(jwk) });
+  } else if (-1 !== [ 'ssh', 'rfc4716' ].indexOf(format)) {
+    return SSH.pack({ jwk: jwk, comment: opts.comment });
+  } else {
+    throw new Error("Sanity Error: reached unreachable code block with format: " + format);
+  }
+};
+RSA.pack = function (opts) {
+  // wrapped in a promise for API compatibility
+  // with the forthcoming browser version
+  // (and potential future native node capability)
+  return Promise.resolve().then(function () {
+    return RSA.export(opts);
+  });
+};
+
 Enc.bufToUrlBase64 = function (u8) {
   return Enc.bufToBase64(u8)
     .replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
diff --git a/lib/x509.js b/lib/x509.js
index 3bf60fd..f1ac559 100644
--- a/lib/x509.js
+++ b/lib/x509.js
@@ -1,7 +1,7 @@
 'use strict';
 (function (exports) {
   'use strict';
-  var x509 = exports.x509 = {}; 
+  var x509 = exports.x509 = {};
   var ASN1 = exports.ASN1;
   var Enc = exports.Enc;
 
@@ -55,6 +55,27 @@
     };
   };
 
+  x509.packPkcs1 = function (jwk) {
+    var n = ASN1.UInt(Enc.base64ToHex(jwk.n));
+    var e = ASN1.UInt(Enc.base64ToHex(jwk.e));
+  
+    if (!jwk.d) {
+      return Enc.hexToBuf(ASN1('30', n, e));
+    }
+  
+    return Enc.hexToBuf(ASN1('30'
+    , ASN1.UInt('00')
+    , n
+    , e
+    , ASN1.UInt(Enc.base64ToHex(jwk.d))
+    , ASN1.UInt(Enc.base64ToHex(jwk.p))
+    , ASN1.UInt(Enc.base64ToHex(jwk.q))
+    , ASN1.UInt(Enc.base64ToHex(jwk.dp))
+    , ASN1.UInt(Enc.base64ToHex(jwk.dq))
+    , ASN1.UInt(Enc.base64ToHex(jwk.qi))
+    ));
+  };
+
   x509.parsePkcs8 = function parseEcPkcs8(u8, jwk) {
     var index = 24 + (OBJ_ID_EC.length / 2);
     var len = 32;
@@ -141,6 +162,44 @@
    * @param {*} jwk 
    */
   x509.packPkcs8 = function (jwk) {
+    if (jwk.kty == 'RSA') {
+      if (!jwk.d) {
+        // Public RSA
+        return Enc.hexToBuf(ASN1('30'
+          , ASN1('30'
+            , ASN1('06', '2a864886f70d010101')
+            , ASN1('05')
+          )
+          , ASN1.BitStr(ASN1('30'
+            , ASN1.UInt(Enc.base64ToHex(jwk.n))
+            , ASN1.UInt(Enc.base64ToHex(jwk.e))
+          ))
+        ));
+      }
+
+      // Private RSA
+      return Enc.hexToBuf(ASN1('30'
+        , ASN1.UInt('00')
+        , ASN1('30'
+          , ASN1('06', '2a864886f70d010101')
+          , ASN1('05')
+        )
+        , ASN1('04'
+          , ASN1('30'
+            , ASN1.UInt('00')
+            , ASN1.UInt(Enc.base64ToHex(jwk.n))
+            , ASN1.UInt(Enc.base64ToHex(jwk.e))
+            , ASN1.UInt(Enc.base64ToHex(jwk.d))
+            , ASN1.UInt(Enc.base64ToHex(jwk.p))
+            , ASN1.UInt(Enc.base64ToHex(jwk.q))
+            , ASN1.UInt(Enc.base64ToHex(jwk.dp))
+            , ASN1.UInt(Enc.base64ToHex(jwk.dq))
+            , ASN1.UInt(Enc.base64ToHex(jwk.qi))
+          )
+        )
+      ));
+    }
+
     var d = Enc.base64ToHex(jwk.d);
     var x = Enc.base64ToHex(jwk.x);
     var y = Enc.base64ToHex(jwk.y);
-- 
2.38.5


From 36f5337f7d5f51022f2b291c0fa86e2e70df26a5 Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Sat, 27 Apr 2019 00:53:28 -0400
Subject: [PATCH 6/7] better binary der display

---
 app.js     | 2 +-
 index.html | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/app.js b/app.js
index 06c0022..8db2949 100644
--- a/app.js
+++ b/app.js
@@ -59,7 +59,7 @@
           })
         }
 
-        $('.js-der').innerText = JSON.stringify(der, null, 2);
+        $('.js-der').innerText = der;
         $('.js-toc-der').hidden = false;
         $('.js-jwk').innerText = JSON.stringify(results, null, 2);
         $('.js-loading').hidden = true;
diff --git a/index.html b/index.html
index d4fec55..921d6d7 100644
--- a/index.html
+++ b/index.html
@@ -6,6 +6,14 @@
         width: 42em;
         height: 10em;
       }
+      /* need to word wrap the binary no space der */
+      .js-der{
+        white-space: pre-wrap;      /* CSS3 */   
+        white-space: -moz-pre-wrap; /* Firefox */    
+        white-space: -pre-wrap;     /* Opera <7 */   
+        white-space: -o-pre-wrap;   /* Opera 7 */    
+        word-wrap: break-word;      /* IE */
+      }
     </style>
   </head>
   <body>
-- 
2.38.5


From fbe30dbfbc47075291c95758b913bcff24686a45 Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Sat, 27 Apr 2019 01:24:37 -0400
Subject: [PATCH 7/7] public and private

---
 app.js     | 39 ++++++++++++++++++++++++++-------------
 index.html | 22 +++++++++++++++-------
 2 files changed, 41 insertions(+), 20 deletions(-)

diff --git a/app.js b/app.js
index 8db2949..f2066dd 100644
--- a/app.js
+++ b/app.js
@@ -34,8 +34,10 @@
       ev.stopPropagation();
       $('.js-loading').hidden = false;
       $('.js-jwk').hidden = true;
-      $('.js-toc-der').hidden = true;
-      $('.js-toc-pem').hidden = true;
+      $('.js-toc-der-public').hidden = true;
+      $('.js-toc-pem-public').hidden = true;
+      $('.js-toc-der-private').hidden = true;
+      $('.js-toc-pem-private').hidden = true;
       $$('input').map(function ($el) { $el.disabled = true; });
       $$('button').map(function ($el) { $el.disabled = true; });
       var opts = {
@@ -45,22 +47,33 @@
       };
       console.log('opts', opts);
       Keypairs.generate(opts).then(function (results) {
-        var der;
+        var der_public, der_private;
         if (opts.kty == 'EC') {
-          der = x509.packPkcs8(results.private);
-          var pem = Eckles.export({ jwk: results.private })
-          $('.js-input-pem').innerText = pem;
-          $('.js-toc-pem').hidden = false;
+          der_public = x509.packSpki(results.public);
+          der_private = x509.packPkcs8(results.private);
+          var pem_private = Eckles.export({ jwk: results.private })
+          var pem_public = Eckles.export({ jwk: results.public, public: true })
+          $('.js-input-pem-public').innerText = pem_public;
+          $('.js-toc-pem-public').hidden = false;
+          $('.js-input-pem-private').innerText = pem_private;
+          $('.js-toc-pem-private').hidden = false;
         } else {
-          der = x509.packPkcs8(results.private);
-          var pem = Rasha.pack({ jwk: results.private }).then(function (pem) {
-            $('.js-input-pem').innerText = pem;
-            $('.js-toc-pem').hidden = false;
+          der_private = x509.packPkcs8(results.private);
+          der_public = x509.packPkcs8(results.public);
+          Rasha.pack({ jwk: results.private }).then(function (pem) {
+            $('.js-input-pem-private').innerText = pem;
+            $('.js-toc-pem-private').hidden = false;
+          })
+          Rasha.pack({ jwk: results.public }).then(function (pem) {
+            $('.js-input-pem-public').innerText = pem;
+            $('.js-toc-pem-public').hidden = false;
           })
         }
 
-        $('.js-der').innerText = der;
-        $('.js-toc-der').hidden = false;
+        $('.js-der-public').innerText = der_public;
+        $('.js-toc-der-public').hidden = false;
+        $('.js-der-private').innerText = der_private;
+        $('.js-toc-der-private').hidden = false;
         $('.js-jwk').innerText = JSON.stringify(results, null, 2);
         $('.js-loading').hidden = true;
         $('.js-jwk').hidden = false;
diff --git a/index.html b/index.html
index 921d6d7..047936b 100644
--- a/index.html
+++ b/index.html
@@ -7,7 +7,7 @@
         height: 10em;
       }
       /* need to word wrap the binary no space der */
-      .js-der{
+      .js-der-public, .js-der-private{
         white-space: pre-wrap;      /* CSS3 */   
         white-space: -moz-pre-wrap; /* Firefox */    
         white-space: -pre-wrap;     /* Opera <7 */   
@@ -72,13 +72,21 @@
       <summary>JWK Keypair</summary>
       <pre><code class="js-jwk">&nbsp;</code></pre>
     </details>
-    <details class="js-toc-der" hidden>
-      <summary>DER Binary</summary>
-      <pre><code class="js-der">&nbsp;</code></pre>
+    <details class="js-toc-der-private" hidden>
+      <summary>DER Private Binary</summary>
+      <pre><code class="js-der-private">&nbsp;</code></pre>
     </details>
-    <details class="js-toc-pem" hidden>
-      <summary>PEM (base64-encoded DER)</summary>
-      <textarea class="js-input-pem" readonly></textarea>
+    <details class="js-toc-der-public" hidden>
+      <summary>DER Public Binary</summary>
+      <pre><code class="js-der-public">&nbsp;</code></pre>
+    </details>
+    <details class="js-toc-pem-private" hidden>
+      <summary>PEM Private (base64-encoded DER)</summary>
+      <pre><code  class="js-input-pem-private" ></code></pre>
+    </details>
+    <details class="js-toc-pem-public" hidden>
+      <summary>PEM Public (base64-encoded DER)</summary>
+      <pre><code  class="js-input-pem-public" ></code></pre>
     </details>
     <details class="js-toc-acme-account-request" hidden>
       <summary>ACME Account Request</summary>
-- 
2.38.5