JWS Signatures do not match

[OR13]

When making the following patch to @panva/jose, I can get the same sigantures

as the json-ld-sigantures repo for Ed25519.

https://github.com/panva/jose/blob/master/lib/jws/sign.js#L95

if (joseHeader.protected.crit && joseHeader.protected.crit.includes('b64')) {
      if (i(this).b64 !== undefined && i(this).b64 !== joseHeader.protected.b64) {
        throw new JWSInvalid('the "b64" Header Parameter value MUST be the same for all recipients')
      } else {
        i(this).b64 = joseHeader.protected.b64
      }
      if (!joseHeader.protected.b64) {
        i(this).payload = base64url.decodeToBuffer(i(this).payload)
        // i(this).payload = base64url.decode(i(this).payload)
      }
    }

    recipient.header = unprotectedHeader
    recipient.protected = Object.keys(joseHeader.protected).length ? base64url.JSON.encode(joseHeader.protected) : ''
    // const data = Buffer.from(`${recipient.protected}.${i(this).payload}`);
    const data = Buffer.concat([
      Buffer.from(recipient.protected),
      Buffer.from('.'),
      i(this).payload
    ])
    recipient.signature = base64url.encodeBuffer(sign(alg, key, data))
  }

[OR13]

from jwcrypto import jwk
from jwcrypto import jws
from jwcrypto.common import json_decode, json_encode


keys = {
    "publicKeyJwk": {
        "crv": "Ed25519",
        "x": "h83ufcOAO9zVigHCgOOTp8waN_ycH4xnPRvn45yu6gw",
        "kty": "OKP",
        "kid": "8R_gUPjBoJ_nf39_G7VLGWNuhL5etuW7zvS46kwYN6Q"
    },
    "privateKeyJwk": {
        "crv": "Ed25519",
        "x": "h83ufcOAO9zVigHCgOOTp8waN_ycH4xnPRvn45yu6gw",
        "d": "Mqr_E4EQ51DxzVHh74HEy6F0JIykqDnrwgeJOxiLeTU",
        "kty": "OKP",
        "kid": "8R_gUPjBoJ_nf39_G7VLGWNuhL5etuW7zvS46kwYN6Q"
    }
}


header = {
    "alg": "EdDSA",
    "b64": False,
    "crit": ["b64"]
}


payload = bytes.fromhex('4a4b4c')
# # payload = 'test'
# payload = json_encode({"hello": 1})

s = jws.JWS(payload)
s.add_signature(jwk.JWK.from_json(json_encode(keys['privateKeyJwk'])),
                'EdDSA', json_encode(header))

jws = s.serialize(compact=True)


print(jws)

was able to prove that @panva/jose detached jws matches this python library... pretty sure its correct.

[Taraawan]

How to use jose libarary unencoded payload b64:false using nodejs any idea??

[OR13]

hmm, maybe try:

• https://www.npmjs.com/package/jose
• https://github.com/transmute-industries/verifiable-data
• https://github.com/transmute-industries/verifiable-credentials