Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 | 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 26x 26x 26x 26x 26x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 34x 34x 34x 34x 34x 34x 26x 34x 8x 8x 8x 34x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 27x 27x 27x 27x 27x 27x 27x 2x 2x 2x 27x 1x 1x 1x 1x | /*!
* Copyright (c) 2026 The Triauth Authors (https://www.triauth.org/)
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
* SPDX-License-Identifier: Apache-2.0
*/
import { Base } from './base.js';
import { register } from './registry.js';
import { Helpers } from '../helpers.js';
/**
* A verifier for Ed25519 (EdDSA over Curve25519) signatures.
*
* Support for Ed25519 keys in triauth is considered experimental,
* as some runtimes may still lack native support for Ed25519 crypto.
*
* @class
* @memberof Triauth.Verifiers
*/
export class Ed25519 extends Base {
/**
* Constructs a new instance of Ed25519 verifier for the given public crypto key and options.
*
* @param publicKey {CryptoKey} - A public key in form of CryptoKey object.
* @param [options={}] {object} - Key options as read from the DNS record that contained the publicKey.
* @param [context={}] {object} - Per-verification context. Unused by this verifier.
* @param [config={}] {object} - Optional overrides for the global Triauth.config settings
*/
// eslint-disable-next-line no-unused-vars
constructor(publicKey, options = {}, context = {}, config = {}) {
super();
this.publicKey = publicKey;
this.config = Helpers.mergeConfig(config);
}
/**
* Builds an instance of the Verifier from the raw key information read from the DNS.
*
* @param rawPublicKey {string} - A key as published in the DNS record (base64url of the 32-byte raw public key).
* @param [options={}] {object} - Key options as read from the DNS record that contained the rawPublicKey.
* @param [context={}] {object} - Per-verification context. Unused by this verifier.
* @param [config={}] {object} - Optional overrides for the global Triauth.config settings
*
* @returns {Promise<Ed25519|null>} A promise that resolves to the instance of this verifier, or null if key is invalid or other problem occurred.
*/
static async fromPublishableKey(rawPublicKey, options = {}, context = {}, config = {}) {
config = Helpers.mergeConfig(config);
try {
const publicKey = (await crypto.subtle.importKey('raw', /** @type {BufferSource} */ (Helpers.base64UrlToUint8(rawPublicKey)), {
name: 'Ed25519'
}, true, ['verify']));
return new this(publicKey, options, context, config);
} catch (err) {
config.logger?.debug?.(err);
return null;
}
}
/**
* Verifies that a given signature matches the verifier's public key and the given message.
*
* @param message {string} - The message to verify against.
* @param signatureBase64Url {string} - Base64Url encoded signature.
* @param signedData {object} - Signature envelope's signedMetadata. Unused by this verifier.
* @param unsignedData {object} - Signature envelope's unsignedMetadata. Unused by this verifier.
*
* @returns {Promise<boolean>} A promise that resolves to true or false basing on the verification result.
*/
// eslint-disable-next-line no-unused-vars
async verify(message, signatureBase64Url, signedData, unsignedData) {
try {
const data = Helpers.stringToUtf8Bytes(message);
const signature = Helpers.base64UrlToUint8(signatureBase64Url);
return await crypto.subtle.verify({
name: 'Ed25519'
}, this.publicKey, /** @type {BufferSource} */ (signature), /** @type {BufferSource} */ (data));
} catch (err) {
this.config.logger?.debug?.(err);
return false;
}
}
}
register('ed25519', Ed25519);
|