New package: oslojs/cbor! This is a new Oslo package for decoding CBOR data. It's pretty boring but I needed it for the upcoming webauthn/passkey package cbor.oslojs.dev

fiiiinaallyyyy finished the ASN.1 package, well for now at least. Gonna start working on the WebAuthn package tomorrow asn1.oslojs.dev

Announcing oslojs/webauthn, a new Oslo package for the Web Authentication API! Needs a lot more testing but it's finally here!!! Learned so much about passkeys, CBOR, COSE, ASN.1, X.509, and ECDSA! github.com/oslo-project/w…

Got P-256, P-384, and P-521 working :D Next version of oslojs/crypto with including APIs for verifying ECDSA signatures and transforming public keys. This is gonna make working with oslojs/webauthn much easier too

oslojs/crypto now supports ECDSA! Implementations are not fully constant time so only APIs for verification is provided (where it doesn't matter if it's leaking info) crypto.oslojs.dev/examples/verif…

oslojs/crypto 0.4.0 adds APIs for encoding X.509 ECDSA public keys and signatures github.com/oslo-project/c…

Added RSA signature verification to Oslo! Not constant time but again should be fine for signature verification. Also added NIST test vectors and happy to report that both our ECDSA and RSA implementations pass them! github.com/oslo-project/c…

Added SHA-3 hash functions including SHAKE! Biggest tests yet lol github.com/oslo-project/c…

I removed the webcrypto dependency from Oslo. We only used it for generating random bytes so it's gonna be smarter to rely on whatever native API is available github.com/oslo-project/c…

Rewrote the encoding library to be cleaner and to follow the spec more closely encoding.oslojs.dev

New library :D Finally figured out how to abstract JWTs into a library github.com/oslo-project/j…

Oslo packages are now stable! Simple, fully-typed, runtime-agnostic, and zero third-party dependencies. - oslojs/encoding - oslojs/crypto - oslojs/webauthn - oslojs/otp - oslojs/asn1 - oslojs/cbor - oslojs/binary oslojs.dev

Super minor but I added verifyTOTPWithGracePeriod() to verify TOTP with a grace period otp.oslojs.dev/reference/main…

Sorry it took a while but all future releases of my packages will include a provenance statement and the changelog will be available in GitHub Releases