Files

T

woggioni 1032b10c49 Fix EC JWK: fixed-width x, y, d encoding; restrict to registered curve names

- Encode EC coordinates and private d with curve-width (32/48/66 bytes) to satisfy RFC 7518,
  preserving leading zero octets.
- Restrict JWK  values to registered JOSE names: P-256, P-384, P-521, secp256k1.
  Raise ValueError for unregistered curves (P-192, P-224, Brainpool).
- Add regression tests: deterministic coordinate/private-value widths, leading-zero
  preservation, supported curve names, and rejection of unsupported curves.
- Mypy clean; all core and backend tests pass.

2026-10-26 12:06:16 +08:00

src/kca/core

Fix EC JWK: fixed-width x, y, d encoding; restrict to registered curve names

2026-10-26 12:06:16 +08:00

tests

Fix EC JWK: fixed-width x, y, d encoding; restrict to registered curve names

2026-10-26 12:06:16 +08:00

pyproject.toml

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

README.md

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

README.md

kca-core

Pure, I/O-free PKI domain logic for KCA. It knows how to generate and parse keys, build distinguished names, encode X.509 extensions, issue certificates, create CSRs and CRLs, apply templates, and convert every supported import and export format. It has no kaya, database or filesystem dependencies and is unit-tested in isolation.