fix(signer): correct P-256 DID JWK x/y coordinates#9
fix(signer): correct P-256 DID JWK x/y coordinates#9eqty-devbot wants to merge 3 commits intoeqtylab:mainfrom
Conversation
|
@eqty-devbot I see you said
There is a nix flake with a default development shell in this repo that includes all dev tooling. Can you enter that development shell and test things out, then update this PR based on anything you find needs to be fixed. In addition please update your memory so that on future dev tasks you know that you can run |
|
Thanks — I reran everything inside the repo dev shell with:\n\n- \n- \n\nBoth passed. Running in this environment surfaced one lockfile drift, so I pushed commit to update . |
|
Correction (formatting issue in my previous comment): I reran everything inside the repo dev shell with:
Both passed. I also pushed commit |
Summary
Applies the same P-256 DID document JWK fix from integrity-monorepo commit
9bcfa19e2c50379f4f52fb4580ecec126beefa55.What changed
integrity-signer/src/signer/p256_signer.rs:fix_p256_jwkworkaround that derives uncompressed public key coordinates from the P-256 secret key and writes properx/yJWK fields.fix_p256_jwkfrom bothcreate()andimport().p256dependency tointegrity-signer/Cargo.toml.Why
did-keycan produce malformed P-256 JWK values in DID docs (compressed key inx, missingy). This breaks JWK consumers in VC signing/verification flows. This patch ensures valid JOSE-compatible coordinates are emitted.Notes
cargo checkin this environment becausecargois not installed on host PATH.