Implement OID4VP for mdocs (#157)

* adjust OID4VP signatures

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* adjust ICredential

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* implement base64url type

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* refactorings

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* adjust mdoc lib folder structure

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* rename namespaces to issuer namespaces

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* security stuff in core project

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* add keyId to MdocRecord

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* add comments to ClientMetadata.cs

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* implement mdoc presentation

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* implement mdoc oid4vp

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* adjust tests

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* some cleanup

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* bump dotnet version in pipeline

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* bump nuget version in pipeline

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* bump nuget version in pipeline

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* bump nuget version in pipeline

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* minor refactor

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* fix merge

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* rename SdJwtSignerService to SdJwtSigner

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* introduce raw signature

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* fix merge

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* adjust cose signature

Signed-off-by: Kevin <kevin.dinh@lissi.id>

* add string funcs

Signed-off-by: Kevin <kevin.dinh@lissi.id>

---------

Signed-off-by: Kevin <kevin.dinh@lissi.id>

Author: Dindexx

.github/workflows/publish-nuget.yaml

@@ -38,15 +38,17 @@ jobs:
                 echo "APP_VERSION=$VERSION$SUFFIX" >> $GITHUB_ENV
 
             - name: Setup NuGet
-              uses: NuGet/setup-nuget@v1.0.5
+              uses: NuGet/setup-nuget@v2
+              with:
+                nuget-version: 6.10.2
 
             - name: Restore dependencies
               run: nuget restore $SOLUTION
 
             - name: Setup .NET
               uses: actions/setup-dotnet@v3
               with:
-                  dotnet-version: 3.1.*
+                  dotnet-version: 8.0.*
 
 #            - name: Install libindy library
 #              run: |

src/Hyperledger.Aries/Storage/Models/Interfaces/ICredential.cs

@@ -0,0 +1,23 @@
+using Microsoft.IdentityModel.Tokens;
+
+namespace WalletFramework.Core.Base64Url;
+
+public readonly struct Base64UrlString
+{
+    private string Value { get; }
+
+    private Base64UrlString(string value)
+    {
+        Value = value;
+    }
+
+    public override string ToString() => Value;
+
+    public static implicit operator string(Base64UrlString base64UrlString) => base64UrlString.ToString();
+
+    public static Base64UrlString CreateBase64UrlString(IEnumerable<byte> base64UrlBytes)
+    {
+        var result = Base64UrlEncoder.Encode(base64UrlBytes.ToArray());
+        return new Base64UrlString(result);
+    }
+}    

src/WalletFramework.Core/Base64Url/Base64UrlString.cs

@@ -0,0 +1,9 @@
+namespace WalletFramework.Core.Credentials.Abstractions;
+
+/// <summary>
+///     This interface is used to represent a credential.
+/// </summary>
+public interface ICredential
+{
+    CredentialId GetId();
+}

src/WalletFramework.Core/Credentials/Abstractions/ICredential.cs

@@ -18,20 +18,21 @@ public interface IKeyStore
     Task<KeyId> GenerateKey(string alg = "ES256", bool isPermanent = true);
 
     /// <summary>
-    ///     Asynchronously loads a key by its identifier and returns it as a JSON Web Key (JWK) containing the public key
-    ///     information.
+    ///     Gets the public key of the pair 
     /// </summary>
-    /// <param name="keyId">The identifier of the key to load.</param>
-    /// <returns>A <see cref="Task{TResult}" /> representing the loaded key as a JWK string.</returns>
-    Task<string> LoadKey(KeyId keyId);
+    /// <param name="keyId">The identifier of the key pair.</param>
+    /// <returns>
+    ///     The public key
+    /// </returns>
+    Task<PublicKey> GetPublicKey(KeyId keyId);
 
     /// <summary>
     ///     Asynchronously signs the given payload using the key identified by the provided key ID.
     /// </summary>
     /// <param name="keyId">The identifier of the key to use for signing.</param>
     /// <param name="payload">The payload to sign.</param>
     /// <returns>A <see cref="Task{TResult}" /> representing the signed payload as a byte array.</returns>
-    Task<byte[]> Sign(KeyId keyId, byte[] payload);
+    Task<RawSignature> Sign(KeyId keyId, byte[] payload);
 
     /// <summary>
     ///     Asynchronously deletes the key associated with the provided key ID.

src/WalletFramework.Core/Cryptography/Abstractions/IKeyStore.cs

@@ -0,0 +1,5 @@
+using WalletFramework.Core.Functional;
+
+namespace WalletFramework.Core.Cryptography.Errors;
+
+public record InvalidSignatureError(string Message, Exception E) : Error(Message, E);

src/WalletFramework.Core/Cryptography/Errors/InvalidSignatureError.cs

@@ -0,0 +1,21 @@
+using WalletFramework.Core.Base64Url;
+
+namespace WalletFramework.Core.Cryptography.Models;
+
+public record PublicKey(Base64UrlString X, Base64UrlString Y)
+{
+    public string KeyType => "EC";
+
+    public string Curve => "P-256";
+}
+
+public static class PublicKeyFun
+{
+    public static object ToJwkObj(this PublicKey publicKey) => new
+    {
+        kty = publicKey.KeyType,
+        crv = publicKey.Curve,
+        x = publicKey.X.ToString(),
+        y = publicKey.Y.ToString()
+    };
+}

src/WalletFramework.Core/Cryptography/Models/PublicKey.cs

@@ -0,0 +1,53 @@
+using Org.BouncyCastle.Asn1;
+using WalletFramework.Core.Cryptography.Errors;
+using WalletFramework.Core.Functional;
+
+namespace WalletFramework.Core.Cryptography.Models;
+
+public readonly struct RawSignature
+{
+    private byte[] Value { get; }
+
+    public byte[] AsByteArray => Value;
+
+    public RawSignature(byte[] value)
+    {
+        Value = value;
+    }
+
+    public static implicit operator byte[](RawSignature signature) => signature.AsByteArray;
+
+    public static Validation<RawSignature> FromDerSignature(byte[] derSignature)
+    {
+        try
+        {
+            var seq = (Asn1Sequence)Asn1Object.FromByteArray(derSignature);
+            var r = ((DerInteger)seq[0]).Value;
+            var s = ((DerInteger)seq[1]).Value;
+            var rBytes = r.ToByteArrayUnsigned();
+            var sBytes = s.ToByteArrayUnsigned();
+            rBytes = PadTo32Bytes(rBytes);
+            sBytes = PadTo32Bytes(sBytes);
+            
+            var signatureBytes = rBytes.Concat(sBytes).ToArray();
+            return new RawSignature(signatureBytes);
+        }
+        catch (Exception e)
+        {
+            return new InvalidSignatureError("The signature could not be transformed to RAW format", e);
+        }
+    }
+        
+    private static byte[] PadTo32Bytes(byte[] value)
+    {
+        if (value.Length == 32)
+            return value;
+            
+        if (value.Length > 32)
+            throw new ArgumentException("Value is too large to fit in 32 bytes");
+            
+        var padded = new byte[32];
+        Array.Copy(value, 0, padded, 32 - value.Length, value.Length);
+        return padded;
+    }
+}

src/WalletFramework.Core/Cryptography/Models/RawSignature.cs

@@ -0,0 +1,27 @@
+using System.Security.Cryptography;
+
+namespace WalletFramework.Core.Encoding;
+
+public readonly struct Sha256Hash
+{
+    private byte[] Value { get; }
+
+    private Sha256Hash(byte[] value)
+    {
+        Value = value;
+    }
+
+    public byte[] AsBytes => Value;
+
+    public override string ToString() => Value.ToString();
+    
+    public static implicit operator byte[](Sha256Hash sha256Hash) => sha256Hash.Value;
+
+    public static Sha256Hash ComputeHash(byte[] value)
+    {
+        var sha256 = SHA256.Create();
+        var hash = sha256.ComputeHash(value);
+        return new Sha256Hash(hash);
+    }
+}    
+

src/WalletFramework.Core/Encoding/Sha256Hash.cs

@@ -88,7 +88,14 @@ public static Option<IEnumerable<TR>> TraverseAny<T, TR>(
             return list.Any() ? list : Option<IEnumerable<TR>>.None;
         });
     }
-    
+
+    public static Option<IEnumerable<T>> AsOption<T>(this IEnumerable<T> enumerable) =>
+        // ReSharper disable once PossibleMultipleEnumeration
+        enumerable.IsEmpty()
+            ? Option<IEnumerable<T>>.None
+            // ReSharper disable once PossibleMultipleEnumeration
+            : Some(enumerable);
+
     public static T UnwrapOrThrow<T>(this Option<T> option, Exception e) =>
         option.Match(
             t => t,