dan/jose
1
0
Fork 0
mirror of https://github.com/danbulant/jose synced 2026-05-19 20:38:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: only add y to the epk header parameter when EC keys are used

Browse source 
fixes #348
This commit is contained in:
Filip Skokan 2022-01-22 17:57:06 +01:00
parent 1039bcdb87
commit dd6775eed0
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
src/lib/encrypt_key_management.ts
View file

@ -4,7 +4,12 @@ import { encrypt as pbes2Kw } from '../runtime/pbes2kw.js'
import { encrypt as rsaEs } from '../runtime/rsaes.js'
import { encode as base64url } from '../runtime/base64url.js'
import type { KeyLike, JWEKeyManagementHeaderParameters, JWEHeaderParameters } from '../types.d'
import type {
KeyLike,
JWEKeyManagementHeaderParameters,
JWEHeaderParameters,
JWK,
} from '../types.d'
import generateCek, { bitLength as cekLength } from '../lib/cek.js'
import { JOSENotSupported } from '../util/errors.js'
import { exportJWK } from '../key/export.js'
@ -23,7 +28,7 @@ async function encryptKeyManagement(
parameters?: JWEHeaderParameters
}> {
let encryptedKey: Uint8Array | undefined
let parameters: JWEHeaderParameters | undefined
let parameters: (JWEHeaderParameters & { epk?: JWK }) | undefined
let cek: KeyLike | Uint8Array
checkKeyType(alg, key, 'encrypt')
@ -56,7 +61,8 @@ async function encryptKeyManagement(
apu,
apv,
)
parameters = { epk: { x, y, crv, kty } }
parameters = { epk: { x, crv, kty } }
if (kty === 'EC') parameters.epk!.y = y
if (apu) parameters.apu = base64url(apu)
if (apv) parameters.apv = base64url(apv)