@agentdance/node-webrtc-dtls 1.0.0

package/dist/certificate.d.ts

@@ -0,0 +1,31 @@
+import * as crypto from 'node:crypto';
+export interface DtlsCertificate {
+    cert: Buffer;
+    privateKey: crypto.KeyObject;
+    fingerprint: {
+        algorithm: 'sha-256';
+        value: string;
+    };
+}
+/**
+ * Compute SHA-256 fingerprint of a DER certificate.
+ * Returns colon-separated uppercase hex, e.g. "AA:BB:CC:..."
+ */
+export declare function computeFingerprint(certDer: Buffer): string;
+/**
+ * Verify that a DER certificate matches the expected fingerprint.
+ */
+export declare function verifyFingerprint(certDer: Buffer, expected: {
+    algorithm: string;
+    value: string;
+}): boolean;
+/**
+ * Generate a self-signed ECDSA (P-256) certificate for use in DTLS.
+ */
+export declare function generateSelfSignedCertificate(): DtlsCertificate;
+/**
+ * Extract public key from DER-encoded certificate.
+ * Parses the SubjectPublicKeyInfo to get the EC public key.
+ */
+export declare function extractPublicKeyFromCert(certDer: Buffer): crypto.KeyObject;
+//# sourceMappingURL=certificate.d.ts.map

package/dist/certificate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.d.ts","sourceRoot":"","sources":["../src/certificate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC;IAC7B,WAAW,EAAE;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAgMD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7C,OAAO,CAQT;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,eAAe,CAW/D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,SAAS,CAI1E"}

package/dist/certificate.js

@@ -0,0 +1,199 @@
+// Self-signed ECDSA certificate generation for DTLS
+// Uses a minimal ASN.1/DER builder – no external dependencies.
+import * as crypto from 'node:crypto';
+// ─── ASN.1 / DER helpers ──────────────────────────────────────────────────────
+function derLength(len) {
+    if (len < 0x80) {
+        return Buffer.from([len]);
+    }
+    else if (len < 0x100) {
+        return Buffer.from([0x81, len]);
+    }
+    else if (len < 0x10000) {
+        return Buffer.from([0x82, (len >> 8) & 0xff, len & 0xff]);
+    }
+    else {
+        return Buffer.from([
+            0x83,
+            (len >> 16) & 0xff,
+            (len >> 8) & 0xff,
+            len & 0xff,
+        ]);
+    }
+}
+function tlv(tag, ...contents) {
+    const body = Buffer.concat(contents);
+    return Buffer.concat([Buffer.from([tag]), derLength(body.length), body]);
+}
+function sequence(...contents) {
+    return tlv(0x30, ...contents);
+}
+function set_(...contents) {
+    return tlv(0x31, ...contents);
+}
+function integer(bytes) {
+    // Ensure positive integer (prepend 0x00 if high bit set)
+    let val = bytes;
+    if (val[0] & 0x80) {
+        val = Buffer.concat([Buffer.from([0x00]), val]);
+    }
+    return tlv(0x02, val);
+}
+function integerN(n) {
+    const buf = Buffer.allocUnsafe(4);
+    buf.writeInt32BE(n, 0);
+    // Trim leading zeros but keep at least 1 byte
+    let start = 0;
+    while (start < buf.length - 1 && buf[start] === 0 && !(buf[start + 1] & 0x80)) {
+        start++;
+    }
+    return integer(buf.subarray(start));
+}
+function oid(dotNotation) {
+    const parts = dotNotation.split('.').map(Number);
+    // First two components encoded as 40*a + b
+    const encoded = [40 * parts[0] + parts[1]];
+    for (let i = 2; i < parts.length; i++) {
+        let n = parts[i];
+        const bytes = [];
+        bytes.push(n & 0x7f);
+        n >>= 7;
+        while (n > 0) {
+            bytes.unshift((n & 0x7f) | 0x80);
+            n >>= 7;
+        }
+        encoded.push(...bytes);
+    }
+    return tlv(0x06, Buffer.from(encoded));
+}
+function utf8String(s) {
+    return tlv(0x0c, Buffer.from(s, 'utf8'));
+}
+function utcTime(d) {
+    const pad = (n) => String(n).padStart(2, '0');
+    const y = String(d.getUTCFullYear()).slice(2);
+    const str = y +
+        pad(d.getUTCMonth() + 1) +
+        pad(d.getUTCDate()) +
+        pad(d.getUTCHours()) +
+        pad(d.getUTCMinutes()) +
+        pad(d.getUTCSeconds()) +
+        'Z';
+    return tlv(0x17, Buffer.from(str, 'ascii'));
+}
+function bitString(bytes, unusedBits = 0) {
+    return tlv(0x03, Buffer.from([unusedBits]), bytes);
+}
+function octetString(bytes) {
+    return tlv(0x04, bytes);
+}
+function contextTag(n, ...contents) {
+    return tlv(0xa0 | n, ...contents);
+}
+// ─── Known OIDs ───────────────────────────────────────────────────────────────
+// ecPublicKey: 1.2.840.10045.2.1
+const OID_EC_PUBLIC_KEY = oid('1.2.840.10045.2.1');
+// secp256r1 / P-256: 1.2.840.10045.3.1.7
+const OID_P256 = oid('1.2.840.10045.3.1.7');
+// ecdsa-with-SHA256: 1.2.840.10045.4.3.2
+const OID_ECDSA_SHA256 = oid('1.2.840.10045.4.3.2');
+// commonName: 2.5.4.3
+const OID_COMMON_NAME = oid('2.5.4.3');
+// subjectKeyIdentifier: 2.5.29.14
+const OID_SKI = oid('2.5.29.14');
+// ─── Certificate builder ──────────────────────────────────────────────────────
+/**
+ * Build a self-signed X.509 certificate in DER format.
+ * Uses ECDSA P-256 with SHA-256.
+ */
+function buildSelfSignedCert(keyPair, commonNameValue, validityDays) {
+    // Export public key as uncompressed EC point
+    const jwk = keyPair.publicKey.export({ format: 'jwk' });
+    if (!jwk.x || !jwk.y)
+        throw new Error('Not an EC key pair');
+    const x = Buffer.from(jwk.x, 'base64url');
+    const y = Buffer.from(jwk.y, 'base64url');
+    const coordSize = 32;
+    const xPad = Buffer.alloc(coordSize);
+    const yPad = Buffer.alloc(coordSize);
+    x.copy(xPad, coordSize - x.length);
+    y.copy(yPad, coordSize - y.length);
+    const ecPoint = Buffer.concat([Buffer.from([0x04]), xPad, yPad]);
+    // Dates
+    const now = new Date();
+    const notBefore = new Date(now.getTime() - 60000); // 1 min ago
+    const notAfter = new Date(now.getTime() + validityDays * 86400000);
+    // Serial number (random 8 bytes)
+    const serialBytes = crypto.randomBytes(8);
+    // Ensure positive (clear high bit)
+    serialBytes[0] = serialBytes[0] & 0x7f;
+    // Subject / Issuer RDN: CN=<commonName>
+    const rdn = sequence(set_(sequence(OID_COMMON_NAME, utf8String(commonNameValue))));
+    // SubjectPublicKeyInfo
+    const spki = sequence(sequence(OID_EC_PUBLIC_KEY, OID_P256), bitString(ecPoint));
+    // Subject key identifier extension
+    const skiValue = crypto.createHash('sha1').update(ecPoint).digest();
+    const skiExtension = sequence(OID_SKI, octetString(octetString(skiValue)));
+    const extensions = contextTag(3, sequence(skiExtension));
+    // TBSCertificate
+    const tbs = sequence(contextTag(0, integerN(2)), // version: v3
+    integer(serialBytes), // serialNumber
+    sequence(OID_ECDSA_SHA256), // signature algorithm
+    rdn, // issuer
+    sequence(utcTime(notBefore), utcTime(notAfter)), // validity
+    rdn, // subject
+    spki, // subjectPublicKeyInfo
+    extensions);
+    // Sign TBSCertificate
+    const signature = crypto.sign('sha256', tbs, keyPair.privateKey);
+    // Certificate = SEQUENCE { tbs, algorithm, signature }
+    const cert = sequence(tbs, sequence(OID_ECDSA_SHA256), bitString(signature));
+    return cert;
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Compute SHA-256 fingerprint of a DER certificate.
+ * Returns colon-separated uppercase hex, e.g. "AA:BB:CC:..."
+ */
+export function computeFingerprint(certDer) {
+    const hash = crypto.createHash('sha256').update(certDer).digest();
+    return Array.from(hash)
+        .map((b) => b.toString(16).padStart(2, '0').toUpperCase())
+        .join(':');
+}
+/**
+ * Verify that a DER certificate matches the expected fingerprint.
+ */
+export function verifyFingerprint(certDer, expected) {
+    const algo = expected.algorithm.toLowerCase().replace('-', '');
+    if (algo !== 'sha256') {
+        throw new Error(`Unsupported fingerprint algorithm: ${expected.algorithm}`);
+    }
+    const actual = computeFingerprint(certDer);
+    // Case-insensitive comparison
+    return actual.toLowerCase() === expected.value.toLowerCase();
+}
+/**
+ * Generate a self-signed ECDSA (P-256) certificate for use in DTLS.
+ */
+export function generateSelfSignedCertificate() {
+    const keyPair = crypto.generateKeyPairSync('ec', { namedCurve: 'P-256' });
+    const cn = `dtls-${crypto.randomBytes(8).toString('hex')}`;
+    const certDer = buildSelfSignedCert(keyPair, cn, 365);
+    const fingerprint = computeFingerprint(certDer);
+    return {
+        cert: certDer,
+        privateKey: keyPair.privateKey,
+        fingerprint: { algorithm: 'sha-256', value: fingerprint },
+    };
+}
+/**
+ * Extract public key from DER-encoded certificate.
+ * Parses the SubjectPublicKeyInfo to get the EC public key.
+ */
+export function extractPublicKeyFromCert(certDer) {
+    // Use Node.js X509Certificate (available since Node 15.6)
+    const x509 = new crypto.X509Certificate(certDer);
+    return x509.publicKey;
+}
+//# sourceMappingURL=certificate.js.map

package/dist/certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.js","sourceRoot":"","sources":["../src/certificate.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,+DAA+D;AAE/D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAQtC,iFAAiF;AAEjF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,GAAG,GAAG,OAAO,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,CAAC,IAAI,CAAC;YACjB,IAAI;YACJ,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI;YAClB,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI;YACjB,GAAG,GAAG,IAAI;SACX,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,GAAW,EAAE,GAAG,QAAkB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAG,QAAkB;IACrC,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,IAAI,CAAC,GAAG,QAAkB;IACjC,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,yDAAyD;IACzD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,GAAG,CAAC,CAAC,CAAE,GAAG,IAAI,EAAE,CAAC;QACnB,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvB,8CAA8C;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAC/E,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,GAAG,CAAC,WAAmB;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjD,2CAA2C;IAC3C,MAAM,OAAO,GAAa,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAClB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrB,CAAC,KAAK,CAAC,CAAC;QACR,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACjC,CAAC,KAAK,CAAC,CAAC;QACV,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,OAAO,CAAC,CAAO;IACtB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,GAAG,GACP,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACxB,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACnB,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACtB,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACtB,GAAG,CAAC;IACN,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,UAAU,GAAG,CAAC;IAC9C,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,CAAS,EAAE,GAAG,QAAkB;IAClD,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,iFAAiF;AAEjF,iCAAiC;AACjC,MAAM,iBAAiB,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACnD,yCAAyC;AACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAC5C,yCAAyC;AACzC,MAAM,gBAAgB,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACpD,sBAAsB;AACtB,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;AACvC,kCAAkC;AAClC,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;AAEjC,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,OAAsC,EACtC,eAAuB,EACvB,YAAoB;IAEpB,6CAA6C;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAsB,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAEjE,QAAQ;IACR,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY;IAC/D,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,GAAG,QAAQ,CAAC,CAAC;IAEnE,iCAAiC;IACjC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1C,mCAAmC;IACnC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC;IAExC,wCAAwC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnF,uBAAuB;IACvB,MAAM,IAAI,GAAG,QAAQ,CACnB,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EACrC,SAAS,CAAC,OAAO,CAAC,CACnB,CAAC;IAEF,mCAAmC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG,QAAQ,CAC3B,OAAO,EACP,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CACnC,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAEzD,iBAAiB;IACjB,MAAM,GAAG,GAAG,QAAQ,CAClB,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc;IAC1C,OAAO,CAAC,WAAW,CAAC,EAAE,eAAe;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB;IAClD,GAAG,EAAE,SAAS;IACd,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW;IAC5D,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,uBAAuB;IAC7B,UAAU,CACX,CAAC;IAEF,sBAAsB;IACtB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjE,uDAAuD;IACvD,MAAM,IAAI,GAAG,QAAQ,CACnB,GAAG,EACH,QAAQ,CAAC,gBAAgB,CAAC,EAC1B,SAAS,CAAC,SAAS,CAAC,CACrB,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IAClE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;SACzD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,QAA8C;IAE9C,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,8BAA8B;IAC9B,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,QAAQ,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,0DAA0D;IAC1D,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,89 @@
+import * as crypto from 'node:crypto';
+/**
+ * HMAC-SHA256
+ */
+export declare function hmacSha256(key: Buffer, data: Buffer): Buffer;
+/**
+ * HMAC-SHA384
+ */
+export declare function hmacSha384(key: Buffer, data: Buffer): Buffer;
+/**
+ * DTLS 1.2 PRF (SHA-256 based, RFC 5246)
+ * PRF(secret, label, seed) = P_SHA256(secret, label + seed)
+ */
+export declare function prf(secret: Buffer, label: string, seed: Buffer, length: number): Buffer;
+/**
+ * PRF with SHA-384 (for AES-256 cipher suites)
+ */
+export declare function prfSha384(secret: Buffer, label: string, seed: Buffer, length: number): Buffer;
+/**
+ * Compute master secret from pre-master secret.
+ * master_secret = PRF(pre_master_secret, "master secret", ClientRandom + ServerRandom, 48)
+ */
+export declare function computeMasterSecret(preMasterSecret: Buffer, clientRandom: Buffer, serverRandom: Buffer): Buffer;
+export interface KeyBlock {
+    clientWriteKey: Buffer;
+    serverWriteKey: Buffer;
+    clientWriteIv: Buffer;
+    serverWriteIv: Buffer;
+}
+/**
+ * Expand key material from master secret (RFC 5246 Section 6.3).
+ * For AES-128-GCM: key_length=16, iv_length=4 (implicit part).
+ * key_block = PRF(master_secret, "key expansion", ServerRandom + ClientRandom, ...)
+ */
+export declare function expandKeyMaterial(masterSecret: Buffer, clientRandom: Buffer, serverRandom: Buffer, keyLength?: number, ivLength?: number): KeyBlock;
+/**
+ * Export keying material (RFC 5705 / RFC 5764 Section 4.2).
+ * Used to derive SRTP master keys from DTLS.
+ * EKM = PRF(master_secret, label, ClientRandom + ServerRandom, length)
+ */
+export declare function exportKeyingMaterial(masterSecret: Buffer, clientRandom: Buffer, serverRandom: Buffer, label: string, length: number): Buffer;
+export interface AesGcmResult {
+    ciphertext: Buffer;
+    tag: Buffer;
+}
+/**
+ * AES-128-GCM encrypt.
+ * Returns ciphertext + 16-byte authentication tag.
+ */
+export declare function aesgcmEncrypt(key: Buffer, iv: Buffer, plaintext: Buffer, aad: Buffer): AesGcmResult;
+/**
+ * AES-128-GCM decrypt.
+ */
+export declare function aesgcmDecrypt(key: Buffer, iv: Buffer, ciphertext: Buffer, tag: Buffer, aad: Buffer): Buffer;
+export interface EcdhKeyPair {
+    privateKey: crypto.KeyObject;
+    publicKey: crypto.KeyObject;
+}
+/**
+ * Generate an ephemeral ECDH key pair on P-256 (secp256r1).
+ */
+export declare function generateEcdhKeyPair(): EcdhKeyPair;
+/**
+ * Compute ECDH pre-master secret from our private key and peer's public key bytes.
+ * peerPublicKeyBytes: uncompressed EC point (0x04 + x + y, 65 bytes for P-256)
+ */
+export declare function computeEcdhPreMasterSecret(privateKey: crypto.KeyObject, peerPublicKeyBytes: Buffer): Buffer;
+/**
+ * Encode EC public key to uncompressed point format: 0x04 + x (32 bytes) + y (32 bytes)
+ */
+export declare function encodeEcPublicKey(publicKey: crypto.KeyObject): Buffer;
+/**
+ * Decode uncompressed EC point to a KeyObject (P-256).
+ */
+export declare function decodeEcPublicKey(bytes: Buffer): crypto.KeyObject;
+/**
+ * Compute SHA-256 hash of data.
+ */
+export declare function sha256(data: Buffer): Buffer;
+/**
+ * Sign data with ECDSA-SHA256 private key.
+ * Returns DER-encoded signature.
+ */
+export declare function ecdsaSign(privateKey: crypto.KeyObject, data: Buffer): Buffer;
+/**
+ * Verify ECDSA-SHA256 signature.
+ */
+export declare function ecdsaVerify(publicKey: crypto.KeyObject, data: Buffer, signature: Buffer): boolean;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAItC;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5D;AA+BD;;;GAGG;AACH,wBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAIvF;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAI7F;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,GACnB,MAAM,CAGR;AAED,MAAM,WAAW,QAAQ;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,SAAS,GAAE,MAAW,EACtB,QAAQ,GAAE,MAAU,GACnB,QAAQ,CAgBV;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,MAAM,CAGR;AAID,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,YAAY,CAMd;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,MAAM,CAKR;AAID,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;CAC7B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,WAAW,CAKjD;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,CAAC,SAAS,EAC5B,kBAAkB,EAAE,MAAM,GACzB,MAAM,CAGR;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAmBrE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,SAAS,CAgBjE;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,CAAC,SAAS,EAC3B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAMT"}

package/dist/crypto.js

@@ -0,0 +1,193 @@
+// DTLS 1.2 Cryptographic primitives
+// RFC 5246 (TLS 1.2) PRF with SHA-256, AES-GCM, ECDH
+import * as crypto from 'node:crypto';
+// ─── HMAC / PRF ───────────────────────────────────────────────────────────────
+/**
+ * HMAC-SHA256
+ */
+export function hmacSha256(key, data) {
+    return crypto.createHmac('sha256', key).update(data).digest();
+}
+/**
+ * HMAC-SHA384
+ */
+export function hmacSha384(key, data) {
+    return crypto.createHmac('sha384', key).update(data).digest();
+}
+/**
+ * P_hash function (RFC 5246 Section 5)
+ * P_hash(secret, seed) = HMAC(secret, A(1) + seed) + HMAC(secret, A(2) + seed) + ...
+ * where A(0) = seed, A(i) = HMAC(secret, A(i-1))
+ */
+function pHash(hmacFn, secret, seed, length) {
+    const output = Buffer.allocUnsafe(length);
+    let written = 0;
+    // A(1)
+    let a = hmacFn(secret, seed);
+    while (written < length) {
+        const chunk = hmacFn(secret, Buffer.concat([a, seed]));
+        const toCopy = Math.min(chunk.length, length - written);
+        chunk.copy(output, written, 0, toCopy);
+        written += toCopy;
+        // A(i+1) = HMAC(secret, A(i))
+        a = hmacFn(secret, a);
+    }
+    return output;
+}
+/**
+ * DTLS 1.2 PRF (SHA-256 based, RFC 5246)
+ * PRF(secret, label, seed) = P_SHA256(secret, label + seed)
+ */
+export function prf(secret, label, seed, length) {
+    const labelBuf = Buffer.from(label, 'ascii');
+    const combined = Buffer.concat([labelBuf, seed]);
+    return pHash(hmacSha256, secret, combined, length);
+}
+/**
+ * PRF with SHA-384 (for AES-256 cipher suites)
+ */
+export function prfSha384(secret, label, seed, length) {
+    const labelBuf = Buffer.from(label, 'ascii');
+    const combined = Buffer.concat([labelBuf, seed]);
+    return pHash(hmacSha384, secret, combined, length);
+}
+// ─── Key derivation ───────────────────────────────────────────────────────────
+/**
+ * Compute master secret from pre-master secret.
+ * master_secret = PRF(pre_master_secret, "master secret", ClientRandom + ServerRandom, 48)
+ */
+export function computeMasterSecret(preMasterSecret, clientRandom, serverRandom) {
+    const seed = Buffer.concat([clientRandom, serverRandom]);
+    return prf(preMasterSecret, 'master secret', seed, 48);
+}
+/**
+ * Expand key material from master secret (RFC 5246 Section 6.3).
+ * For AES-128-GCM: key_length=16, iv_length=4 (implicit part).
+ * key_block = PRF(master_secret, "key expansion", ServerRandom + ClientRandom, ...)
+ */
+export function expandKeyMaterial(masterSecret, clientRandom, serverRandom, keyLength = 16, ivLength = 4) {
+    // NOTE: seed is ServerRandom + ClientRandom (reversed from master secret)
+    const seed = Buffer.concat([serverRandom, clientRandom]);
+    const totalLength = 2 * keyLength + 2 * ivLength;
+    const keyBlock = prf(masterSecret, 'key expansion', seed, totalLength);
+    let off = 0;
+    const clientWriteKey = Buffer.from(keyBlock.subarray(off, off + keyLength));
+    off += keyLength;
+    const serverWriteKey = Buffer.from(keyBlock.subarray(off, off + keyLength));
+    off += keyLength;
+    const clientWriteIv = Buffer.from(keyBlock.subarray(off, off + ivLength));
+    off += ivLength;
+    const serverWriteIv = Buffer.from(keyBlock.subarray(off, off + ivLength));
+    return { clientWriteKey, serverWriteKey, clientWriteIv, serverWriteIv };
+}
+/**
+ * Export keying material (RFC 5705 / RFC 5764 Section 4.2).
+ * Used to derive SRTP master keys from DTLS.
+ * EKM = PRF(master_secret, label, ClientRandom + ServerRandom, length)
+ */
+export function exportKeyingMaterial(masterSecret, clientRandom, serverRandom, label, length) {
+    const seed = Buffer.concat([clientRandom, serverRandom]);
+    return prf(masterSecret, label, seed, length);
+}
+/**
+ * AES-128-GCM encrypt.
+ * Returns ciphertext + 16-byte authentication tag.
+ */
+export function aesgcmEncrypt(key, iv, plaintext, aad) {
+    const cipher = crypto.createCipheriv('aes-128-gcm', key, iv);
+    cipher.setAAD(aad);
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return { ciphertext, tag };
+}
+/**
+ * AES-128-GCM decrypt.
+ */
+export function aesgcmDecrypt(key, iv, ciphertext, tag, aad) {
+    const decipher = crypto.createDecipheriv('aes-128-gcm', key, iv);
+    decipher.setAAD(aad);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+}
+/**
+ * Generate an ephemeral ECDH key pair on P-256 (secp256r1).
+ */
+export function generateEcdhKeyPair() {
+    const { privateKey, publicKey } = crypto.generateKeyPairSync('ec', {
+        namedCurve: 'P-256',
+    });
+    return { privateKey, publicKey };
+}
+/**
+ * Compute ECDH pre-master secret from our private key and peer's public key bytes.
+ * peerPublicKeyBytes: uncompressed EC point (0x04 + x + y, 65 bytes for P-256)
+ */
+export function computeEcdhPreMasterSecret(privateKey, peerPublicKeyBytes) {
+    const peerPublicKey = decodeEcPublicKey(peerPublicKeyBytes);
+    return crypto.diffieHellman({ privateKey, publicKey: peerPublicKey });
+}
+/**
+ * Encode EC public key to uncompressed point format: 0x04 + x (32 bytes) + y (32 bytes)
+ */
+export function encodeEcPublicKey(publicKey) {
+    // Export as raw uncompressed point via JWK
+    const jwk = publicKey.export({ format: 'jwk' });
+    if (!jwk.x || !jwk.y)
+        throw new Error('Not an EC public key');
+    const x = Buffer.from(jwk.x, 'base64url');
+    const y = Buffer.from(jwk.y, 'base64url');
+    // Pad to 32 bytes for P-256
+    const coordSize = 32;
+    const xPadded = Buffer.alloc(coordSize);
+    const yPadded = Buffer.alloc(coordSize);
+    x.copy(xPadded, coordSize - x.length);
+    y.copy(yPadded, coordSize - y.length);
+    const out = Buffer.allocUnsafe(1 + coordSize * 2);
+    out[0] = 0x04; // uncompressed
+    xPadded.copy(out, 1);
+    yPadded.copy(out, 1 + coordSize);
+    return out;
+}
+/**
+ * Decode uncompressed EC point to a KeyObject (P-256).
+ */
+export function decodeEcPublicKey(bytes) {
+    if (bytes[0] !== 0x04) {
+        throw new Error('Only uncompressed EC points supported (0x04 prefix)');
+    }
+    const coordSize = (bytes.length - 1) / 2;
+    const x = bytes.subarray(1, 1 + coordSize);
+    const y = bytes.subarray(1 + coordSize);
+    const jwk = {
+        kty: 'EC',
+        crv: 'P-256',
+        x: x.toString('base64url'),
+        y: y.toString('base64url'),
+    };
+    return crypto.createPublicKey({ key: jwk, format: 'jwk' });
+}
+/**
+ * Compute SHA-256 hash of data.
+ */
+export function sha256(data) {
+    return crypto.createHash('sha256').update(data).digest();
+}
+/**
+ * Sign data with ECDSA-SHA256 private key.
+ * Returns DER-encoded signature.
+ */
+export function ecdsaSign(privateKey, data) {
+    return crypto.sign('sha256', data, privateKey);
+}
+/**
+ * Verify ECDSA-SHA256 signature.
+ */
+export function ecdsaVerify(publicKey, data, signature) {
+    try {
+        return crypto.verify('sha256', data, publicKey, signature);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,qDAAqD;AAErD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY;IAClD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAY,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY;IAClD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAY,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,SAAS,KAAK,CACZ,MAA6C,EAC7C,MAAc,EACd,IAAY,EACZ,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO;IACP,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE7B,OAAO,OAAO,GAAG,MAAM,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC;QAClB,8BAA8B;QAC9B,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY,EAAE,MAAc;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY,EAAE,MAAc;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,eAAuB,EACvB,YAAoB,EACpB,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,YAAoB,EACpB,YAAoB,EACpB,YAAoB,EAAE,EACtB,WAAmB,CAAC;IAEpB,0EAA0E;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAEvE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5E,GAAG,IAAI,SAAS,CAAC;IACjB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5E,GAAG,IAAI,SAAS,CAAC;IACjB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC1E,GAAG,IAAI,QAAQ,CAAC;IAChB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC;IAE1E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,YAAoB,EACpB,YAAoB,EACpB,KAAa,EACb,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,EAAU,EACV,SAAiB,EACjB,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,EAAU,EACV,UAAkB,EAClB,GAAW,EACX,GAAW;IAEX,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AASD;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE;QACjE,UAAU,EAAE,OAAO;KACpB,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAA4B,EAC5B,kBAA0B;IAE1B,MAAM,aAAa,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,CAAW,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA2B;IAC3D,2CAA2C;IAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAsB,CAAC;IACrE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE1C,4BAA4B;IAC5B,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC;IAClD,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,eAAe;IAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAExC,MAAM,GAAG,GAAsB;QAC7B,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,OAAO;QACZ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC3B,CAAC;IAEF,OAAO,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAY,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,UAA4B,EAAE,IAAY;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAW,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,SAA2B,EAC3B,IAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/handshake.d.ts

@@ -0,0 +1,113 @@
+import { DTLS_VERSION_1_2, type DtlsVersion } from './types.js';
+export declare enum HandshakeType {
+    HelloRequest = 0,
+    ClientHello = 1,
+    ServerHello = 2,
+    HelloVerifyRequest = 3,
+    Certificate = 11,
+    ServerKeyExchange = 12,
+    CertificateRequest = 13,
+    ServerHelloDone = 14,
+    CertificateVerify = 15,
+    ClientKeyExchange = 16,
+    Finished = 20
+}
+export interface HandshakeMessage {
+    msgType: HandshakeType;
+    length: number;
+    messageSeq: number;
+    fragmentOffset: number;
+    fragmentLength: number;
+    body: Buffer;
+}
+export interface TlsExtension {
+    type: number;
+    data: Buffer;
+}
+export interface ClientHello {
+    clientVersion: DtlsVersion;
+    random: Buffer;
+    sessionId: Buffer;
+    cookie: Buffer;
+    cipherSuites: number[];
+    compressionMethods: number[];
+    extensions: TlsExtension[];
+}
+export interface ServerHello {
+    serverVersion: DtlsVersion;
+    random: Buffer;
+    sessionId: Buffer;
+    cipherSuite: number;
+    compressionMethod: number;
+    extensions: TlsExtension[];
+}
+export interface HelloVerifyRequest {
+    serverVersion: DtlsVersion;
+    cookie: Buffer;
+}
+export interface ServerKeyExchange {
+    curveType: number;
+    namedCurve: number;
+    publicKey: Buffer;
+    signatureAlgorithm: {
+        hash: number;
+        signature: number;
+    };
+    signature: Buffer;
+}
+export interface ClientKeyExchange {
+    publicKey: Buffer;
+}
+export declare const CipherSuites: {
+    readonly TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 49195;
+    readonly TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 49199;
+    readonly TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 49196;
+};
+export declare const ExtensionType: {
+    readonly UseSrtp: 14;
+    readonly SupportedGroups: 10;
+    readonly EcPointFormats: 11;
+    readonly SignatureAlgorithms: 13;
+    readonly RenegotiationInfo: 65281;
+};
+export declare const NamedCurve: {
+    readonly secp256r1: 23;
+    readonly secp384r1: 24;
+};
+export declare const SrtpProtectionProfile: {
+    readonly SRTP_AES128_CM_SHA1_80: 1;
+    readonly SRTP_AES128_CM_SHA1_32: 2;
+};
+export declare function encodeHandshakeMessage(msg: HandshakeMessage): Buffer;
+export declare function decodeHandshakeMessage(buf: Buffer): HandshakeMessage;
+export declare function encodeClientHello(hello: ClientHello): Buffer;
+export declare function decodeClientHello(buf: Buffer): ClientHello;
+export declare function encodeServerHello(hello: ServerHello): Buffer;
+export declare function decodeServerHello(buf: Buffer): ServerHello;
+export declare function encodeHelloVerifyRequest(hvr: HelloVerifyRequest): Buffer;
+export declare function decodeHelloVerifyRequest(buf: Buffer): HelloVerifyRequest;
+export declare function encodeServerKeyExchange(ske: ServerKeyExchange): Buffer;
+export declare function decodeServerKeyExchange(buf: Buffer): ServerKeyExchange;
+export declare function encodeCertificate(certDer: Buffer): Buffer;
+export declare function decodeCertificate(buf: Buffer): Buffer[];
+export declare function encodeClientKeyExchange(cke: ClientKeyExchange): Buffer;
+export declare function decodeClientKeyExchange(buf: Buffer): ClientKeyExchange;
+/**
+ * Build use_srtp extension data (RFC 5764)
+ * protection_profiles: list of 2-byte profile IDs
+ */
+export declare function buildUseSrtpExtension(profiles: number[]): Buffer;
+export declare function parseSrtpProfiles(data: Buffer): number[];
+/**
+ * Build supported_groups extension (named curves)
+ */
+export declare function buildSupportedGroupsExtension(curves: number[]): Buffer;
+/**
+ * Build signature_algorithms extension
+ */
+export declare function buildSignatureAlgorithmsExtension(pairs: Array<{
+    hash: number;
+    sig: number;
+}>): Buffer;
+export { DTLS_VERSION_1_2 };
+//# sourceMappingURL=handshake.d.ts.map

package/dist/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAEhE,oBAAY,aAAa;IACvB,YAAY,IAAI;IAChB,WAAW,IAAI;IACf,WAAW,IAAI;IACf,kBAAkB,IAAI;IACtB,WAAW,KAAK;IAChB,iBAAiB,KAAK;IACtB,kBAAkB,KAAK;IACvB,eAAe,KAAK;IACpB,iBAAiB,KAAK;IACtB,iBAAiB,KAAK;IACtB,QAAQ,KAAK;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,WAAW,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,WAAW,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,WAAW,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAIhC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAGX,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAGX,eAAO,MAAM,UAAU;;;CAGb,CAAC;AAGX,eAAO,MAAM,qBAAqB;;;CAGxB,CAAC;AAMX,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAqBpE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAsBpE;AAID,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAgD5D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAmD1D;AAID,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CA4B5D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAkC1D;AAID,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAOxE;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAMxE;AAID,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAkBtE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAoBtE;AAID,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASzD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAavD;AAID,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAKtE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAItE;AAuCD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAUhE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAUxD;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAQtE;AAED;;GAEG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1C,MAAM,CASR;AAcD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}