Get the issuance certificate from a TrustedEntity.

Helper to find a specific service type within a TrustedEntity.

Get the revocation certificate from a TrustedEntity.

Type guard to check if a config is for mso_mdoc format

Type guard to check if a config is for dc+sd-jwt format

Build an mso_mdoc credential configuration

Build a dc+sd-jwt credential configuration

Converts a TypedCredentialConfig to CredentialConfigurationSupported This is a type assertion helper since our types are derived from the SDK

Helper function to validate and transform IAE actions array.

Conditionally strips trusted_authorities from each credential query in a DCQL query object.

Some wallets do not yet correctly handle trusted_authorities in the DCQL query of an OID4VP authorization request. removeTrustedAuthorities is an escape hatch (controlled by the VP_REMOVE_TA env flag) for deployments that need to work around such wallets; it is disabled by default so trusted_authorities is sent to wallets as configured.

a DCQL query with credentials stripped of trusted_authorities when removeTrustedAuthorities is true, otherwise the original query

Parse a certificate from a Base64-encoded DER string (as used in LoTE trust lists). Converts to PEM format which is more reliably parsed by

Content types we consider safe to buffer and stringify for logs. Anything else (binary uploads/downloads, streaming) is skipped entirely.

Convert base64url or base64 string to Uint8Array.

Bootstrap function to initialize the NestJS application.

Load TLS options from certificate and key files. Returns undefined if TLS is not enabled or files are not found.

Build a COSE_Key map (integer-keyed) for a P-256 public key from JWK base64url components.

Build the CBOR DeviceRequest per ISO 18013-5 §8.3.2.1.2.1.

Build the CBOR-encoded EncryptionInfo per ISO/IEC TS 18013-7:2025 Annex C:

EncryptionInfo = ["dcapi", EncryptionParameters] EncryptionParameters = {"nonce": bstr, "recipientPublicKey": COSE_Key}

Build the DCAPIHandover SessionTranscript per ISO/IEC TS 18013-7:2025 Annex C:

SessionTranscript = [null, null, ["dcapi", SHA-256(CBOR([encInfoB64u, origin]))]]

The transcript is used in two places:

• hpkeInfo: plain CBOR encoding — the HPKE RFC 9180 info parameter used by the wallet when encrypting and by the verifier when decrypting.
• sessionTranscript: the structure passed to Verifier.verifyDeviceResponse for DeviceAuth verification.

Parse the wallet's EncryptedResponse per ISO/IEC TS 18013-7:2025 Annex C:

EncryptedResponse = ["dcapi", {"enc": bstr, "cipherText": bstr}]

enc is the wallet's ephemeral P-256 public key (uncompressed, 65 bytes) and cipherText the HPKE AES-128-GCM output (GCM tag in the last 16 bytes).

Build a P-256 SubjectPublicKeyInfo around the raw uncompressed EC point so we can hand it to WebCrypto's SPKI importer.

Layout (DER): SEQUENCE { AlgorithmIdentifier, BIT STRING { 04 || x || y } } where AlgorithmIdentifier = SEQUENCE { id-ecPublicKey, prime256v1 OID }.

CKA_EC_POINT is specified as a DER-encoded OCTET STRING wrapping the raw ECPoint. Some HSM vendors return the unwrapped ECPoint directly, so we accept both.

Build PostgreSQL SSL settings from environment/config values.

Supported variables:

• DB_SSL=true|false
• DB_SSL_REJECT_UNAUTHORIZED=true|false
• DB_SSL_CA_PATH=/path/to/ca.crt
• DB_SSL_CERT_PATH=/path/to/client.crt
• DB_SSL_KEY_PATH=/path/to/client.key
• DB_SSL_KEY_PASSPHRASE=secret

DHKEM(P-256) Decap: derive shared secret using recipient's private key and the sender's encapsulated public key (enc = 65-byte uncompressed P-256 point). RFC 9180 §4.1

Decrypt an HPKE Base Mode ciphertext (RFC 9180 §6.1 OpenBase).

HPKE KeyScheduleBase: derive AEAD key and nonce from the KEM shared secret. RFC 9180 §5.1 (mode_base = 0x00, psk="" psk_id="")

Convert an ASN.1 DER-encoded ECDSA-Sig-Value (SEQUENCE { r, s }) to the raw r || s representation used by JOSE/COSE. coordLength is the curve coordinate size in bytes (32 for P-256).

Extract DPoP JWK thumbprint from DPoP JWT. Returns undefined if parsing fails or DPoP is not provided.

Extracts the raw cryptographic token from the presentation payload. Supporting Multi-Credential-Flows by evaluating the descriptor_map or falling back to ID-mapping.

Filter an OpenAPI document to only include paths matching (or not matching) a given predicate. Also prunes the tag list to only include tags that are actually referenced by the remaining paths.

Get the encryption service instance. Throws if not initialized.

Initialize the encryption transformer with an EncryptionService instance. Must be called during application bootstrap before any database operations.

Utility function to extract headers from an Express request

Convenience: derive a real WebCrypto public CryptoKey from a public JWK. Used by the cert builder to populate SubjectPublicKeyInfo / compute Subject- and AuthorityKeyIdentifier extensions.

Build an opaque CryptoKey-shaped value that routes WebCrypto sign operations through a KmsAdapter.

The returned object is NEVER usable for export, verify or any other native subtle operation — only for signing, and only when the KmsCryptoProvider is active (which is the default once the KmsProviderRegistry boots).

Register the tolerant issuerAltName parser globally. Call once at bootstrap (idempotent — re-registering simply overwrites the factory entry).