Canonicalization is easy using the existing CBOR and JCS RFCs (as I noted before), and implementation of JCS is something you might use as a test for a junior dev, because it's such a trivial to write: https://github.com/erdtman/canonicalize/blob/master/lib/canonicalize.js