-
Notifications
You must be signed in to change notification settings - Fork 20
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #334 from docknetwork/feat/derived-bbs-credentials
Allow to derive BBS+ W3C credentials for presenting
- Loading branch information
Showing
13 changed files
with
513 additions
and
71 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
141 changes: 141 additions & 0 deletions
141
src/utils/vc/crypto/Bls12381BBSSignatureProofDock2022.js
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,141 @@ | ||
| import { | ||
| BBSPlusPublicKeyG2, | ||
| } from '@docknetwork/crypto-wasm-ts'; | ||
| import { Presentation } from '@docknetwork/crypto-wasm-ts/lib/anonymous-credentials/presentation'; | ||
| import b58 from 'bs58'; | ||
|
|
||
| import Bls12381BBSSignatureDock2022 from './Bls12381BBSSignatureDock2022'; | ||
| import { Bls12381BBSSigDockSigName, Bls12381BBSSigProofDockSigName } from './constants'; | ||
|
|
||
| import Bls12381G2KeyPairDock2022 from './Bls12381G2KeyPairDock2022'; | ||
| import CustomLinkedDataSignature from './custom-linkeddatasignature'; | ||
|
|
||
| const SUITE_CONTEXT_URL = 'https://www.w3.org/2018/credentials/v1'; | ||
|
|
||
| /* | ||
| * Converts a derived BBS+ proof credential to the native presentation format | ||
| */ | ||
| export function convertToPresentation(document) { | ||
| const { | ||
| '@context': context, | ||
| type, | ||
| credentialSchema, | ||
| issuer, | ||
| issuanceDate, | ||
| proof, | ||
| ...revealedAttributes | ||
| } = document; | ||
|
|
||
| return { | ||
| version: '0.0.1', | ||
| nonce: proof.nonce, | ||
| context: proof.context, | ||
| spec: { | ||
| credentials: [ | ||
| { | ||
| version: proof.version, | ||
| schema: JSON.stringify(credentialSchema), | ||
| revealedAttributes: { | ||
| proof: { | ||
| type: Bls12381BBSSigDockSigName, | ||
| verificationMethod: proof.verificationMethod, | ||
| }, | ||
| '@context': JSON.stringify(context), | ||
| type: JSON.stringify(type), | ||
| ...revealedAttributes, | ||
| }, | ||
| }, | ||
| ], | ||
| attributeEqualities: proof.attributeEqualities, | ||
| }, | ||
| attributeCiphertexts: proof.attributeCiphertexts, | ||
| proof: proof.proofValue, | ||
| }; | ||
| } | ||
|
|
||
| /** | ||
| * A BBS+ signature suite for use with derived BBS+ credentials aka BBS+ presentations | ||
| */ | ||
| export default class Bls12381BBSSignatureProofDock2022 extends CustomLinkedDataSignature { | ||
| /** | ||
| * Default constructor | ||
| * @param options {SignatureSuiteOptions} options for constructing the signature suite | ||
| */ | ||
| constructor(options = {}) { | ||
| const { | ||
| verificationMethod, | ||
| } = options; | ||
|
|
||
| super({ | ||
| type: Bls12381BBSSigProofDockSigName, | ||
| LDKeyClass: Bls12381G2KeyPairDock2022, | ||
| contextUrl: SUITE_CONTEXT_URL, | ||
| alg: Bls12381BBSSigProofDockSigName, | ||
| }); | ||
|
|
||
| this.proof = { | ||
| '@context': [ | ||
| { | ||
| sec: 'https://w3id.org/security#', | ||
| proof: { | ||
| '@id': 'sec:proof', | ||
| '@type': '@id', | ||
| '@container': '@graph', | ||
| }, | ||
| }, | ||
| 'https://ld.dock.io/security/bbs/v1', | ||
| ], | ||
| type: Bls12381BBSSigProofDockSigName, | ||
| }; | ||
|
|
||
| this.verificationMethod = verificationMethod; | ||
| } | ||
|
|
||
| async verifyProof({ | ||
| proof, document, documentLoader, expansionMap, | ||
| }) { | ||
| try { | ||
| const verificationMethod = await this.getVerificationMethod( | ||
| { | ||
| proof, document, documentLoader, expansionMap, | ||
| }, | ||
| ); | ||
|
|
||
| const presentationJSON = convertToPresentation({ ...document, proof }); | ||
| const recreatedPres = Presentation.fromJSON(presentationJSON); | ||
|
|
||
| const pks = [verificationMethod].map((keyDocument) => { | ||
| const pkRaw = b58.decode(keyDocument.publicKeyBase58); | ||
| return new BBSPlusPublicKeyG2(pkRaw); | ||
| }); | ||
|
|
||
| if (!recreatedPres.verify(pks)) { | ||
| throw new Error('Invalid signature'); | ||
| } | ||
|
|
||
| return { verified: true, verificationMethod }; | ||
| } catch (error) { | ||
| return { verified: false, error }; | ||
| } | ||
| } | ||
|
|
||
| /** | ||
| * @param document {object} to be signed. | ||
| * @param proof {object} | ||
| * @param documentLoader {function} | ||
| * @param expansionMap {function} | ||
| */ | ||
| async getVerificationMethod({ proof, documentLoader }) { | ||
| return Bls12381BBSSignatureDock2022.getVerificationMethod({ proof, documentLoader }); | ||
| } | ||
|
|
||
| ensureSuiteContext() { | ||
| // no-op | ||
| } | ||
| } | ||
|
|
||
| Bls12381BBSSignatureProofDock2022.proofType = [ | ||
| Bls12381BBSSigProofDockSigName, | ||
| `sec:${Bls12381BBSSigProofDockSigName}`, | ||
| `https://w3id.org/security#${Bls12381BBSSigProofDockSigName}`, | ||
| ]; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.