diff --git a/lib/x509.js b/lib/x509.js
new file mode 100644
index 0000000..63d1a7d
--- /dev/null
+++ b/lib/x509.js
@@ -0,0 +1,173 @@
+'use strict';
+(function (exports) {
+  'use strict';
+  var x509 = exports.x509 = {}; 
+  var ASN1 = exports.ASN1;
+  var Enc = exports.Enc;
+
+  // 1.2.840.10045.3.1.7
+  // prime256v1 (ANSI X9.62 named elliptic curve)
+  var OBJ_ID_EC = '06 08 2A8648CE3D030107'.replace(/\s+/g, '').toLowerCase();
+  // 1.3.132.0.34
+  // secp384r1 (SECG (Certicom) named elliptic curve)
+  var OBJ_ID_EC_384 = '06 05 2B81040022'.replace(/\s+/g, '').toLowerCase();
+  // 1.2.840.10045.2.1
+  // ecPublicKey (ANSI X9.62 public key type)
+  var OBJ_ID_EC_PUB = '06 07 2A8648CE3D0201'.replace(/\s+/g, '').toLowerCase();
+
+  x509.parseSec1 = function parseEcOnlyPrivkey(u8, jwk) {
+    var index = 7;
+    var len = 32;
+    var olen = OBJ_ID_EC.length / 2;
+
+    if ("P-384" === jwk.crv) {
+      olen = OBJ_ID_EC_384.length / 2;
+      index = 8;
+      len = 48;
+    }
+    if (len !== u8[index - 1]) {
+      throw new Error("Unexpected bitlength " + len);
+    }
+
+    // private part is d
+    var d = u8.slice(index, index + len);
+    // compression bit index
+    var ci = index + len + 2 + olen + 2 + 3;
+    var c = u8[ci];
+    var x, y;
+
+    if (0x04 === c) {
+      y = u8.slice(ci + 1 + len, ci + 1 + len + len);
+    } else if (0x02 !== c) {
+      throw new Error("not a supported EC private key");
+    }
+    x = u8.slice(ci + 1, ci + 1 + len);
+
+    return {
+      kty: jwk.kty
+      , crv: jwk.crv
+      , d: Enc.bufToUrlBase64(d)
+      //, dh: Enc.bufToHex(d)
+      , x: Enc.bufToUrlBase64(x)
+      //, xh: Enc.bufToHex(x)
+      , y: Enc.bufToUrlBase64(y)
+      //, yh: Enc.bufToHex(y)
+    };
+  };
+
+  x509.parsePkcs8 = function parseEcPkcs8(u8, jwk) {
+    var index = 24 + (OBJ_ID_EC.length / 2);
+    var len = 32;
+    if ("P-384" === jwk.crv) {
+      index = 24 + (OBJ_ID_EC_384.length / 2) + 2;
+      len = 48;
+    }
+
+    //console.log(index, u8.slice(index));
+    if (0x04 !== u8[index]) {
+      //console.log(jwk);
+      throw new Error("privkey not found");
+    }
+    var d = u8.slice(index + 2, index + 2 + len);
+    var ci = index + 2 + len + 5;
+    var xi = ci + 1;
+    var x = u8.slice(xi, xi + len);
+    var yi = xi + len;
+    var y;
+    if (0x04 === u8[ci]) {
+      y = u8.slice(yi, yi + len);
+    } else if (0x02 !== u8[ci]) {
+      throw new Error("invalid compression bit (expected 0x04 or 0x02)");
+    }
+
+    return {
+      kty: jwk.kty
+      , crv: jwk.crv
+      , d: Enc.bufToUrlBase64(d)
+      //, dh: Enc.bufToHex(d)
+      , x: Enc.bufToUrlBase64(x)
+      //, xh: Enc.bufToHex(x)
+      , y: Enc.bufToUrlBase64(y)
+      //, yh: Enc.bufToHex(y)
+    };
+  };
+
+  x509.parseSpki = function parsePem(u8, jwk) {
+    var ci = 16 + OBJ_ID_EC.length / 2;
+    var len = 32;
+
+    if ("P-384" === jwk.crv) {
+      ci = 16 + OBJ_ID_EC_384.length / 2;
+      len = 48;
+    }
+
+    var c = u8[ci];
+    var xi = ci + 1;
+    var x = u8.slice(xi, xi + len);
+    var yi = xi + len;
+    var y;
+    if (0x04 === c) {
+      y = u8.slice(yi, yi + len);
+    } else if (0x02 !== c) {
+      throw new Error("not a supported EC private key");
+    }
+
+    return {
+      kty: jwk.kty
+      , crv: jwk.crv
+      , x: Enc.bufToUrlBase64(x)
+      //, xh: Enc.bufToHex(x)
+      , y: Enc.bufToUrlBase64(y)
+      //, yh: Enc.bufToHex(y)
+    };
+  };
+  x509.parsePkix = x509.parseSpki;
+
+  x509.packSec1 = function (jwk) {
+    var d = Enc.base64ToHex(jwk.d);
+    var x = Enc.base64ToHex(jwk.x);
+    var y = Enc.base64ToHex(jwk.y);
+    var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
+    return Enc.hexToUint8(
+      ASN1('30'
+        , ASN1.UInt('01')
+        , ASN1('04', d)
+        , ASN1('A0', objId)
+        , ASN1('A1', ASN1.BitStr('04' + x + y)))
+    );
+  };
+  x509.packPkcs8 = function (jwk) {
+    var d = Enc.base64ToHex(jwk.d);
+    var x = Enc.base64ToHex(jwk.x);
+    var y = Enc.base64ToHex(jwk.y);
+    var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
+    return Enc.hexToUint8(
+      ASN1('30'
+        , ASN1.UInt('00')
+        , ASN1('30'
+          , OBJ_ID_EC_PUB
+          , objId
+        )
+        , ASN1('04'
+          , ASN1('30'
+            , ASN1.UInt('01')
+            , ASN1('04', d)
+            , ASN1('A1', ASN1.BitStr('04' + x + y)))))
+    );
+  };
+  x509.packSpki = function (jwk) {
+    var x = Enc.base64ToHex(jwk.x);
+    var y = Enc.base64ToHex(jwk.y);
+    var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
+    return Enc.hexToUint8(
+      ASN1('30'
+        , ASN1('30'
+          , OBJ_ID_EC_PUB
+          , objId
+        )
+        , ASN1.BitStr('04' + x + y))
+    );
+  };
+  x509.packPkix = x509.packSpki;
+
+}('undefined' !== typeof module ? module.exports : window));