archetech / archon / 34427326808

87%

Build Type

push

github

Committed by web-flow

Commit Message

feat(keymaster): Credentials other DID methods can verify (#1085)

* feat(cipher): Add Ed25519 signing and Multikey encoding

The Data Integrity cryptosuites that verifiers outside Archon accept are
defined for Ed25519, and the repo had no Ed25519 signing anywhere -- only
the birational map that turns a foreign Ed25519 key into an X25519 one
for DIDComm.

Ed25519Jwk* sits beside the Okp* triple rather than widening it: that one
is pinned to X25519 for key agreement, and the two curves are never
interchangeable.

multikey.ts holds the multibase encodings the DID document and a
proofValue need -- prefixed with a multicodec for a verification method,
bare for a signature -- and takes over the constants that were private to
didcomm.ts. canonicalizeJSON joins the Cipher interface because
eddsa-jcs-2022 canonicalizes the proof config and the document
separately, and keymaster holds the interface rather than the class.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GYGMfX3foBcVqP7AQNXjWj

* fix(keymaster): Keep keys published beside the one being rotated

rotateKeys rebuilt verificationMethod as a single-element array, so every
key published alongside the identity key was dropped. keyAgreement was
not rebuilt with it, leaving publishDidComm's #key-agreement-1 named by a
relationship whose verification method no longer existed -- a document no
sender can dereference, and DIDComm to that identity stops working.

The rotated key is replaced in place now and the relationships that named
it are rewritten, leaving every other method alone.

didCommFragment was never DIDComm-specific and rotateKeys needs the same
comparison, so it and its Python twin become one keyFragment helper each.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GYGMfX3foBcVqP7AQNXjWj

* feat(keymaster): Derive and publish an Ed25519 assertion key

The Data Integrity cryptosuites a d... (continued)

Coverage Stats

4080 of 4695 branches covered (86.9%)

Branch coverage included in aggregate %.

214 of 226 new or added lines in 6 files covered. (94.69%)

1 existing line in 1 file now uncovered.

8744 of 9182 relevant lines covered (95.23%)

744.42 hits per line