Oslo (@oslo_project) 's Twitter Profile
Oslo

@oslo_project

Simple auth packages for the entire JS ecosystem

ID: 1787861543398563843

calendar_today07-05-2024 15:07:04

14 Tweet

207 Followers

1 Following

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

New package: oslojs/cbor! This is a new Oslo package for decoding CBOR data. It's pretty boring but I needed it for the upcoming webauthn/passkey package cbor.oslojs.dev

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

fiiiinaallyyyy finished the ASN.1 package, well for now at least. Gonna start working on the WebAuthn package tomorrow asn1.oslojs.dev

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

Announcing oslojs/webauthn, a new Oslo package for the Web Authentication API! Needs a lot more testing but it's finally here!!! Learned so much about passkeys, CBOR, COSE, ASN.1, X.509, and ECDSA! github.com/oslo-project/w…

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

Got P-256, P-384, and P-521 working :D Next version of oslojs/crypto with including APIs for verifying ECDSA signatures and transforming public keys. This is gonna make working with oslojs/webauthn much easier too

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

oslojs/crypto now supports ECDSA! Implementations are not fully constant time so only APIs for verification is provided (where it doesn't matter if it's leaking info) crypto.oslojs.dev/examples/verif…

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

Added RSA signature verification to Oslo! Not constant time but again should be fine for signature verification. Also added NIST test vectors and happy to report that both our ECDSA and RSA implementations pass them! github.com/oslo-project/c…

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

I removed the webcrypto dependency from Oslo. We only used it for generating random bytes so it's gonna be smarter to rely on whatever native API is available github.com/oslo-project/c…

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

Oslo packages are now stable! Simple, fully-typed, runtime-agnostic, and zero third-party dependencies. - oslojs/encoding - oslojs/crypto - oslojs/webauthn - oslojs/otp - oslojs/asn1 - oslojs/cbor - oslojs/binary oslojs.dev

pilcrow (@pilcrowonpaper) 's Twitter Profile Photo

Sorry it took a while but all future releases of my packages will include a provenance statement and the changelog will be available in GitHub Releases