package attest import ( "bytes" "crypto/sha256" "encoding/hex" "encoding/json" "fmt" "sort" ) func sha256hex(b []byte) string { sum := sha256.Sum256(b) return hex.EncodeToString(sum[:]) } func canonicalJSON(v any) ([]byte, error) { first, err := json.Marshal(v) if err != nil { return nil, err } var any_ any if err := json.Unmarshal(first, &any_); err != nil { return nil, err } var buf bytes.Buffer if err := writeSorted(&buf, any_); err != nil { return nil, err } return buf.Bytes(), nil } func writeSorted(buf *bytes.Buffer, v any) error { switch x := v.(type) { case nil: buf.WriteString("null") case bool: if x { buf.WriteString("true") } else { buf.WriteString("false") } case float64: b, _ := json.Marshal(x) buf.Write(b) case string: b, _ := json.Marshal(x) buf.Write(b) case []any: buf.WriteByte('[') for i, el := range x { if i > 0 { buf.WriteByte(',') } if err := writeSorted(buf, el); err != nil { return err } } buf.WriteByte(']') case map[string]any: keys := make([]string, 0, len(x)) for k := range x { keys = append(keys, k) } sort.Strings(keys) buf.WriteByte('{') for i, k := range keys { if i > 0 { buf.WriteByte(',') } kb, _ := json.Marshal(k) buf.Write(kb) buf.WriteByte(':') if err := writeSorted(buf, x[k]); err != nil { return err } } buf.WriteByte('}') default: return fmt.Errorf("writeSorted: unsupported type %T", v) } return nil }