Function parseEd25519Pem

cli/src/audit/identity.ts:62–84

(pem: string, name: string)

 * Shared between the dfx and icp identity loaders.
 */
export const parseEd25519Pem = (pem: string, name: string): Identity => {
  let jwk;
  try {
    const key = createPrivateKey({ key: pem, format: 'pem' });
    jwk = key.export({ format: 'jwk' });
  } catch (err) {
    throw new Error(`Failed to parse PEM for identity '${name}': ${(err as Error).message}`);
  }

  if (jwk.kty !== 'OKP' || jwk.crv !== 'Ed25519') {
    throw new Error(
      `Identity '${name}' is not Ed25519 (kty=${jwk.kty}, crv=${jwk.crv}). The audit supports Ed25519 identities only.`,
    );
  }
  if (typeof jwk.d !== 'string' || typeof jwk.x !== 'string') {
    throw new Error(`Identity '${name}' PEM is missing key material.`);
  }

  // agent-js Ed25519KeyIdentity.fromSecretKey takes the 32-byte seed only;
  // the public key is derived internally.
  const secret = b64urlDecode(jwk.d);
  return Ed25519KeyIdentity.fromSecretKey(secret.buffer);
};

export const b64urlDecode = (input: string): Uint8Array => {
  const pad = '='.repeat((4 - (input.length % 4)) % 4);