54 lines
2.2 KiB
TypeScript
54 lines
2.2 KiB
TypeScript
|
import { expect, test } from "bun:test";
|
||
|
|
|
||
|
|
const CURVE_CONFIGS = [
|
||
|
|
{ curve: "P-256", expectedLength: 43 }, // 32 bytes = 43 base64url characters
|
||
|
|
{ curve: "P-384", expectedLength: 64 }, // 48 bytes = 64 base64url characters
|
||
|
|
{ curve: "P-521", expectedLength: 88 }, // 66 bytes = 88 base64url characters
|
||
|
|
] as const;
|
||
|
|
|
||
|
|
test("ECDSA exported JWK fields have correct length", async () => {
|
||
|
|
for (const { curve, expectedLength } of CURVE_CONFIGS) {
|
||
|
|
// Generate 10 keys to ensure we catch padding issues (which occur ~50% of the time for P-521)
|
||
|
|
for (let i = 0; i < 10; i++) {
|
||
|
|
const { privateKey } = await crypto.subtle.generateKey({ name: "ECDSA", namedCurve: curve }, true, ["sign"]);
|
||
|
|
const jwk = await crypto.subtle.exportKey("jwk", privateKey);
|
||
|
|
|
||
|
|
expect(jwk.d).toBeDefined();
|
||
|
|
expect(jwk.d!.length).toBe(expectedLength);
|
||
|
|
expect(jwk.x!.length).toBe(expectedLength);
|
||
|
|
expect(jwk.y!.length).toBe(expectedLength);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
});
|
||
|
|
|
||
|
|
test("ECDH exported JWK fields have correct length", async () => {
|
||
|
|
for (const { curve, expectedLength } of CURVE_CONFIGS) {
|
||
|
|
// Generate 10 keys to ensure we catch padding issues
|
||
|
|
for (let i = 0; i < 10; i++) {
|
||
|
|
const { privateKey } = await crypto.subtle.generateKey({ name: "ECDH", namedCurve: curve }, true, ["deriveBits"]);
|
||
|
|
const jwk = await crypto.subtle.exportKey("jwk", privateKey);
|
||
|
|
|
||
|
|
expect(jwk.d).toBeDefined();
|
||
|
|
expect(jwk.d!.length).toBe(expectedLength);
|
||
|
|
expect(jwk.x!.length).toBe(expectedLength);
|
||
|
|
expect(jwk.y!.length).toBe(expectedLength);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
});
|
||
|
|
|
||
|
|
test("exported JWK can be re-imported and used for signing", async () => {
|
||
|
|
const { privateKey } = await crypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-521" }, true, ["sign"]);
|
||
|
|
|
||
|
|
const jwk = await crypto.subtle.exportKey("jwk", privateKey);
|
||
|
|
expect(jwk.d!.length).toBe(88);
|
||
|
|
|
||
|
|
// Re-import the key
|
||
|
|
const importedKey = await crypto.subtle.importKey("jwk", jwk, { name: "ECDSA", namedCurve: "P-521" }, true, ["sign"]);
|
||
|
|
|
||
|
|
// Verify we can use it for signing
|
||
|
|
const data = new TextEncoder().encode("test data");
|
||
|
|
const signature = await crypto.subtle.sign({ name: "ECDSA", hash: "SHA-384" }, importedKey, data);
|
||
|
|
|
||
|
|
expect(signature.byteLength).toBeGreaterThan(0);
|
||
|
|
});
|