30 lines
907 B
Plaintext
30 lines
907 B
Plaintext
|
import * as crypto from 'node:crypto';
|
||
|
|
import { promisify } from 'node:util';
|
||
|
|
import nodeDigest from './dsa_digest.js';
|
||
|
|
import nodeKey from './node_key.js';
|
||
|
|
import sign from './sign.js';
|
||
|
|
import getVerifyKey from './get_sign_verify_key.js';
|
||
|
|
const oneShotVerify = promisify(crypto.verify);
|
||
|
|
const verify = async (alg, key, signature, data) => {
|
||
|
|
const keyObject = getVerifyKey(alg, key, 'verify');
|
||
|
|
if (alg.startsWith('HS')) {
|
||
|
|
const expected = await sign(alg, keyObject, data);
|
||
|
|
const actual = signature;
|
||
|
|
try {
|
||
|
|
return crypto.timingSafeEqual(actual, expected);
|
||
|
|
}
|
||
|
|
catch {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
const algorithm = nodeDigest(alg);
|
||
|
|
const keyInput = nodeKey(alg, keyObject);
|
||
|
|
try {
|
||
|
|
return await oneShotVerify(algorithm, data, keyInput, signature);
|
||
|
|
}
|
||
|
|
catch {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
};
|
||
|
|
export default verify;
|