@alessiofrittoli/crypto-cipher 2.2.0 → 3.0.0-alpha.2

package/dist/index.d.ts

@@ -1,214 +1,4 @@
-import crypto from 'crypto';
-import { CoerceToUint8ArrayInput } from '@alessiofrittoli/crypto-buffer/coercion';
-import { Cph } from './types.js';
-import 'stream';
+import 'crypto';
 import '@alessiofrittoli/crypto-buffer';
-
-/**
- * Utility class for AES encryption and decryption following [NIST SP 800-38D](https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf) standard reccomendations.
- */
-declare class Cipher {
-    /**
-     * Cipher default `salt` lengths.
-     */
-    static readonly SALT_LENGTH: {
-        readonly min: 16;
-        readonly max: 64;
-        readonly default: 32;
-    };
-    /**
-     * Cipher default `IV` lengths.
-     */
-    static readonly IV_LENGTH: {
-        readonly min: 8;
-        readonly max: 32;
-        readonly default: 16;
-    };
-    /**
-     * Cipher default `Auth Tag` lengths.
-     */
-    static readonly AUTH_TAG_LENGTH: {
-        readonly min: 4;
-        readonly max: 16;
-        readonly default: 16;
-    };
-    /**
-     * Cipher default `Additional Authenticated Data` lengths.
-     */
-    static readonly AAD_LENGTH: {
-        readonly min: 16;
-        readonly max: 128;
-        readonly default: 32;
-    };
-    /**
-     * Default AES algorithms used based on functionality.
-     */
-    static readonly DEFAULT_ALGORITHM: {
-        readonly buffer: "aes-256-gcm";
-        readonly stream: "aes-256-cbc";
-    };
-    /**
-     * Supported AES algorithms.
-     */
-    static readonly ALGORITHMS: Cph.AesAlgorithm[];
-    /**
-     * Encrypt in-memory data buffer.
-     *
-     * ⚠️ This is not suitable for large data. Use {@link Cipher.streamEncrypt()} or {@link Cipher.hybridEncrypt()} methods for large data encryption.
-     *
-     * @param	data	The data to encrypt.
-     * @param	secret	The secret key used to encrypt the `data`.
-     * @param	options	( Optional ) Additional options.
-     * @returns	The encrypted result Buffer.
-     */
-    static encrypt(data: CoerceToUint8ArrayInput, secret: CoerceToUint8ArrayInput, options?: Cph.Options): Buffer;
-    /**
-     * Decrypt in-memory data buffer.
-     *
-     * ⚠️ This is not suitable for large data. Use {@link Cipher.streamDecrypt()} or {@link Cipher.hybridDecrypt()} methods for large data decryption.
-     *
-     * @param	data	The data to decrypt.
-     * @param	secret	The secret key used to decrypt the `data`.
-     * @param	options	( Optional ) Additional options. Must be the same used while encrypting data.
-     * @returns	The decrypted data Buffer.
-     */
-    static decrypt(data: CoerceToUint8ArrayInput, secret: CoerceToUint8ArrayInput, options?: Cph.Options): Buffer;
-    /**
-     * Encrypt a `Readable` to a `Writable` Stream.
-     *
-     * The `Readable` Stream could be 'in-memory buffer' or 'file' based.
-     *
-     * @param	secret	The secret key used to encrypt the `data`.
-     * @param	options Additional options.
-     * @returns An object containing:
-     * 	- a new instance of `crypto.Cipher` allowing you to add listeners to the `cipher` encryption process.
-     * 	- the actual `encrypt` callback that must be called and awaited in order to start the encryption process.
-     */
-    static streamEncrypt(secret: CoerceToUint8ArrayInput, options: Cph.Stream.Symmetric.EncryptOptions): Cph.Stream.Symmetric.EncryptReturnType;
-    /**
-     * Decrypt a `Readable` to a `Writable` Stream.
-     *
-     * The `Readable` Stream could be 'in-memory buffer' or 'file' based.
-     *
-     * @param	secret	The secret key used to encrypt the `data`.
-     * @param	options Additional options.
-     * @returns A new Promise that resolves when Key IV extraction completes returning an object containing:
-     * 	- a new instance of `crypto.Decipher` allowing you to add listeners to the `decipher` decryption process.
-     * 	- the actual `decrypt` callback that must be called and awaited in order to start the decryption process.
-     */
-    static streamDecrypt(secret: CoerceToUint8ArrayInput, options: Cph.Stream.Symmetric.DecryptOptions): Promise<Cph.Stream.Symmetric.DecryptReturnType>;
-    /**
-     * Encrypt a `Readable` to a `Writable` Stream with hybird Encryption.
-     *
-     * The `Readable` Stream could be 'in-memory buffer' or 'file' based.
-     *
-     * @param	secret		The secret key used to encrypt the stream.
-     * @param	publicKey	The RSA public key used to encrypt the symmetric key.
-     * @param	options		Options for the stream encryption.
-     * @returns An object containing:
-     * 	- a new instance of `crypto.Cipher` allowing you to add listeners to the `cipher` encryption process.
-     * 	- the actual `encrypt` callback that must be called and awaited in order to start the encryption process.
-     */
-    static hybridEncrypt(secret: CoerceToUint8ArrayInput, publicKey: crypto.RsaPublicKey | crypto.RsaPrivateKey | crypto.KeyLike, options: Cph.Stream.Hybrid.EncryptOptions): Cph.Stream.Hybrid.EncryptReturnType;
-    /**
-     * Decrypt a `Readable` to a `Writable` Stream with hybrid Decryption.
-     *
-     * The `Readable` Stream could be 'in-memory buffer' or 'file' based.
-     *
-     * @param	privateKey	The RSA private key used to decrypt the symmetric key.
-     * @param	options		Options for the stream decryption.
-     * @returns A new Promise that resolves when Key IV extraction completes returning an object containing:
-     * 	- a new instance of `crypto.Decipher` allowing you to add listeners to the `decipher` decryption process.
-     * 	- the actual `decrypt` callback that must be called and awaited in order to start the decryption process.
-     */
-    static hybridDecrypt(privateKey: crypto.RsaPrivateKey | crypto.KeyLike, options: Cph.Stream.Hybrid.DecryptOptions): Promise<Cph.Stream.Hybrid.DecryptReturnType>;
-    /**
-     * Handle pipe flow to encrypt a Stream.
-     *
-     * @param	options Required parameters.
-     * @returns A new Promise that resolves `void` once stream is completed.
-     */
-    private static stream;
-    /**
-     * Handle pipe flow to decrypt a Stream.
-     *
-     * @param	options Required parameters.
-     * @returns A new Promise that resolves `void` once stream is completed.
-     */
-    private static decipherStream;
-    /**
-     * Extract the Cipher Encrypted Symmetric Key and Initialization Vector from an encrypted `Readable` Stream.
-     *
-     * @param	input		The `Readable` Stream.
-     * @param	keyLength	The encrypted key length in bytes. This is used to properly extract the encrypted Cipher Key and Initialization Vector.
-     * @returns	A new Promise that resolve a tuple containing the Cipher Encrypted Symmetric Key and Initialization Vector once fulfilled.
-     */
-    private static extractKeyIV;
-    /**
-     * Generates a `Scrypt` Symmetric Key and the Initialization Vector with the given options.
-     *
-     * @param	secret	The secret key.
-     * @param	options	( Optional ) Additional options.
-     *
-     * @returns An object with the generated `Key`, `IV`, `salt` and resolved `options`.
-     */
-    static newKeyIV<T extends Cph.ResolvedOptions = Cph.ResolvedOptions>(secret: CoerceToUint8ArrayInput, options?: Cph.Options): {
-        options: T;
-        Key: Buffer<ArrayBufferLike>;
-        IV: Buffer<ArrayBufferLike>;
-        AAD: Buffer<ArrayBufferLike> | Uint8Array<ArrayBufferLike>;
-        salt: Buffer<ArrayBufferLike>;
-    };
-    /**
-     * Resolves the given `options` with `Cipher` defaults and constraints.
-     *
-     * @param options ( Optional ) Additional options.
-     * @returns The given `options` with `Cipher` defaults and constraints.
-     */
-    static resolveOptions<T extends Cph.ResolvedOptions = Cph.ResolvedOptions>(options?: Cph.Options): T;
-    /**
-     * Get the Initialization Vector length based on the given algorithm.
-     *
-     * @param	algorithm The algorithm in use.
-     * @param	options ( Optional ) Additional options.
-     * @returns	The Initialization Vector length based on the given algorithm
-     */
-    private static getIVLength;
-    /**
-     * Ensure correct key length based on the given algorithm.
-     *
-     * @param	algorithm The AES algorithm name.
-     * @returns	An object with validated `algorithm` and `keyLength`.
-     */
-    private static getKeyLength;
-    /**
-     * Check if the given algorithm is a Cipher AES-GCM algorithm.
-     *
-     * @param algorithm The AES Algorithm to check.
-     * @returns `true` if the given algorithm is a Cipher AES-GCM algorithm. `false` otherwise.
-     */
-    static isGCM(algorithm: Cph.AesAlgorithm): algorithm is crypto.CipherGCMTypes;
-    /**
-     * Check if the given algorithm is a Cipher AES-CCM algorithm.
-     *
-     * @param algorithm The AES Algorithm to check.
-     * @returns `true` if the given algorithm is a Cipher AES-CCM algorithm. `false` otherwise.
-     */
-    static isCCM(algorithm: Cph.AesAlgorithm): algorithm is crypto.CipherCCMTypes;
-    /**
-     * Check if the given algorithm is a Cipher AES-OCB algorithm.
-     *
-     * @param algorithm The AES Algorithm to check.
-     * @returns `true` if the given algorithm is a Cipher AES-OCB algorithm. `false` otherwise.
-     */
-    static isOCB(algorithm: Cph.AesAlgorithm): algorithm is crypto.CipherOCBTypes;
-    /**
-     * Check if the given algorithm is a Cipher AES-CBC algorithm.
-     *
-     * @param algorithm The AES Algorithm to check.
-     * @returns `true` if the given algorithm is a Cipher AES-CBC algorithm. `false` otherwise.
-     */
-    static isCBC(algorithm: Cph.AesAlgorithm): algorithm is Cph.CBCTypes;
-}
-
-export { Cipher };
+export { a as Cipher } from './index-B9WIVWrs.js';
+import 'stream';

package/dist/index.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);var _stream = require('stream');var _coercion = require('@alessiofrittoli/crypto-buffer/coercion');var t=class t{static encrypt(r,e,o={}){let a=_coercion.coerceToUint8Array.call(void 0, r),{salt:c,Key:s,IV:n,AAD:p,options:{algorithm:i,authTag:h}}=t.newKeyIV(e,o);if(t.isCBC(i)){let T=_crypto2.default.createCipheriv(i,s,n),d=Buffer.concat([T.update(a),T.final()]);return Buffer.concat([c,n,d])}let y=_crypto2.default.createCipheriv(i,s,n,{authTagLength:h});t.isCCM(i)&&y.setAAD(p,{plaintextLength:a.length}),(t.isGCM(i)||t.isOCB(i))&&y.setAAD(p);let u=Buffer.concat([y.update(a),y.final()]),l=y.getAuthTag();return Buffer.concat([c,n,p,l,u])}static decrypt(r,e,o={}){let a=_coercion.coerceToUint8Array.call(void 0, r),c=_coercion.coerceToUint8Array.call(void 0, e),s=t.resolveOptions(o),{algorithm:n}=s,p=a.subarray(0,s.salt);a=a.subarray(s.salt);let i=a.subarray(0,s.iv);a=a.subarray(s.iv);let h=_crypto2.default.scryptSync(c,p,s.length);if(t.isCBC(n)){let f=_crypto2.default.createDecipheriv(s.algorithm,h,i);return Buffer.concat([f.update(a),f.final()])}let y=s.aadLength,u=s.authTag,l=a.subarray(0,y);a=a.subarray(y);let T=a.subarray(0,u);a=a.subarray(u);let d=_crypto2.default.createDecipheriv(n,h,i,{authTagLength:u});return t.isCCM(n)&&d.setAAD(l,{plaintextLength:a.length}),(t.isGCM(n)||t.isOCB(n))&&d.setAAD(l),d.setAuthTag(T),Buffer.concat([d.update(a),d.final()])}static streamEncrypt(r,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:o,IV:a,options:{input:c,output:s,algorithm:n,salt:p,iv:i,authTag:h}}=t.newKeyIV(r,e),y=t.encrypt(Buffer.concat([o,a]),r,{algorithm:n,salt:p,iv:i,authTag:h}),u=_crypto2.default.createCipheriv(n,o,a);return{cipher:u,encrypt:()=>t.stream({cipher:u,input:c,output:s,encryptedKey:y})}}static streamDecrypt(r,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{input:o,output:a,algorithm:c,salt:s,iv:n,authTag:p,length:i}=t.resolveOptions(e),h=i+n+s+n+p;return t.extractKeyIV(o,h).then(([y,u])=>{if(u.errored)throw u.errored;let l=t.decrypt(y,r,{algorithm:c,salt:s,iv:n,authTag:p}),T=l.subarray(0,i),d=l.subarray(i),f=_crypto2.default.createDecipheriv(c,T,d);return{decipher:f,decrypt:()=>t.decipherStream({decipher:f,input:u,output:a})}})}static hybridEncrypt(r,e,o){o.algorithm||(o.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:a,IV:c,options:{algorithm:s,input:n,output:p}}=t.newKeyIV(r,o),i=_crypto2.default.publicEncrypt(e,Buffer.concat([a,c])),h=_crypto2.default.createCipheriv(s,a,c);return{cipher:h,encrypt:()=>t.stream({cipher:h,input:n,output:p,encryptedKey:i})}}static hybridDecrypt(r,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{input:o,output:a,algorithm:c,length:s,rsaKeyLength:n}=t.resolveOptions(e);return t.extractKeyIV(o,n).then(([p,i])=>{let h=_crypto2.default.privateDecrypt(r,p),y=h.subarray(0,s),u=h.subarray(s),l=_crypto2.default.createDecipheriv(c,y,u);return{decipher:l,decrypt:()=>t.decipherStream({decipher:l,input:i,output:a})}})}static stream(r){let{cipher:e,encryptedKey:o,input:a,output:c}=r;return new Promise((s,n)=>{e.on("error",n),a.on("error",n),c.on("error",n),c.on("finish",s),c.write(o),a.pipe(e).pipe(c)})}static decipherStream(r){let{decipher:e,input:o,output:a}=r;return new Promise((c,s)=>{e.on("error",s),o.on("error",s),a.on("error",s),a.on("finish",c),o.pipe(e).pipe(a)})}static extractKeyIV(r,e){return new Promise((o,a)=>{let c=Buffer.alloc(0),s=0,n=!1,p=new (0, _stream.Transform)({async transform(i,h,y){if(c.length<e&&(c=Buffer.concat([c,i])),s+=i.length,c.length>e){let u=Math.max(0,c.length-e);c=c.subarray(0,e);let l=i.subarray(u*-1);return n||(o([c,this]),n=!0),this.push(l,h),y()}return s>e&&(n||(o([c,this]),n=!0),this.push(i,h)),y()},final(i){return c.length<e?i(new Error("The extracted KeyIV length is less than the expected length.")):i()}});p.on("error",a),r.on("error",i=>{p.destroy(i),a(i)}),r.pipe(p)})}static newKeyIV(r,e={}){let o=_coercion.coerceToUint8Array.call(void 0, r),a=t.resolveOptions(e),c=_crypto2.default.randomBytes(a.salt),s=_crypto2.default.scryptSync(o,c,a.length),n=_crypto2.default.randomBytes(a.iv),p=a.aad||_crypto2.default.scryptSync(s,c,a.aadLength);return{options:a,Key:s,IV:n,AAD:p,salt:c}}static resolveOptions(r={}){let e={...r};e.aad&&(e.aad=_coercion.coerceToUint8Array.call(void 0, e.aad)),e.salt||(e.salt=t.SALT_LENGTH.default),e.authTag||(e.authTag=t.AUTH_TAG_LENGTH.default),e.aadLength=_optionalChain([e, 'access', _ => _.aad, 'optionalAccess', _2 => _2.length])||e.aadLength||t.AAD_LENGTH.default,e.salt=Math.min(Math.max(e.salt,t.SALT_LENGTH.min),t.SALT_LENGTH.max),e.authTag=Math.min(Math.max(e.authTag,t.AUTH_TAG_LENGTH.min),t.AUTH_TAG_LENGTH.max),e.aad||(e.aadLength=Math.min(Math.max(e.aadLength,t.AAD_LENGTH.min),t.AAD_LENGTH.max));let{keyLength:o,algorithm:a}=t.getKeyLength(r.algorithm);return e.algorithm=a,e.length=o,e.iv=t.getIVLength(a,r),e}static getIVLength(r=t.DEFAULT_ALGORITHM.buffer,e={}){switch(r){case"aes-128-ccm":case"aes-128-ocb":case"aes-192-ccm":case"aes-192-ocb":case"aes-256-ccm":case"aes-256-ocb":return 8;case"chacha20-poly1305":return 12;default:return Math.min(Math.max(e.iv||t.IV_LENGTH.default,t.IV_LENGTH.min),t.IV_LENGTH.max)}}static getKeyLength(r=t.DEFAULT_ALGORITHM.buffer){switch(r){case"chacha20-poly1305":return{algorithm:r,keyLength:256/8};case"aes-128-cbc":case"aes-128-ccm":case"aes-128-gcm":case"aes-128-ocb":return{algorithm:r,keyLength:128/8};case"aes-192-cbc":case"aes-192-ccm":case"aes-192-gcm":case"aes-192-ocb":return{algorithm:r,keyLength:192/8};case"aes-256-cbc":case"aes-256-ccm":case"aes-256-gcm":case"aes-256-ocb":default:return{algorithm:r,keyLength:256/8}}}static isGCM(r){return r==="aes-128-gcm"||r==="aes-192-gcm"||r==="aes-256-gcm"}static isCCM(r){return r==="aes-128-ccm"||r==="aes-192-ccm"||r==="aes-256-ccm"||r==="chacha20-poly1305"}static isOCB(r){return r==="aes-128-ocb"||r==="aes-192-ocb"||r==="aes-256-ocb"}static isCBC(r){return r==="aes-128-cbc"||r==="aes-192-cbc"||r==="aes-256-cbc"}};t.SALT_LENGTH={min:16,max:64,default:32},t.IV_LENGTH={min:8,max:32,default:16},t.AUTH_TAG_LENGTH={min:4,max:16,default:16},t.AAD_LENGTH={min:16,max:128,default:32},t.DEFAULT_ALGORITHM={buffer:"aes-256-gcm",stream:"aes-256-cbc"},t.ALGORITHMS=["aes-128-cbc","aes-128-ccm","aes-128-gcm","aes-128-ocb","aes-192-cbc","aes-192-ccm","aes-192-gcm","aes-192-ocb","aes-256-cbc","aes-256-ccm","aes-256-gcm","aes-256-ocb","chacha20-poly1305"];var A=t;exports.Cipher = A;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);var _utils = require('@alessiofrittoli/stream-reader/utils');var _mathutils = require('@alessiofrittoli/math-utils');var _cryptobuffer = require('@alessiofrittoli/crypto-buffer');var t=class t{static Encrypt(a,e,s={}){let r=_cryptobuffer.coerceToUint8Array.call(void 0, a),{salt:n,Key:o,IV:c,AAD:A,options:{algorithm:p,authTag:h}}=t.NewKeyIV({...s,secret:e});if(t.IsCBC(p)){let I=_crypto2.default.createCipheriv(p,o,c),u=Buffer.concat([I.update(r),I.final()]);return Buffer.concat([n,c,u])}let y=_crypto2.default.createCipheriv(p,o,c,{authTagLength:h});(t.IsCCM(p)||t.IsChacha20Poly(p))&&y.setAAD(A,{plaintextLength:r.length}),(t.IsGCM(p)||t.IsOCB(p))&&y.setAAD(A);let C=Buffer.concat([y.update(r),y.final()]),L=y.getAuthTag();return Buffer.concat([n,c,A,L,C])}static Decrypt(a,e,s={}){let r=_cryptobuffer.coerceToUint8Array.call(void 0, a),n=t.ResolveOptions(s),o=_cryptobuffer.coerceToUint8Array.call(void 0, e),{algorithm:c}=n,A=r.subarray(0,n.salt);r=r.subarray(n.salt);let p=r.subarray(0,n.iv);r=r.subarray(n.iv);let h=_crypto2.default.scryptSync(o,A,n.length);if(t.IsCBC(c)){let G=_crypto2.default.createDecipheriv(n.algorithm,h,p);return Buffer.concat([G.update(r),G.final()])}let y=n.aadLength,C=n.authTag,L=r.subarray(0,y);r=r.subarray(y);let I=r.subarray(0,C);r=r.subarray(C);let u=_crypto2.default.createDecipheriv(c,h,p,{authTagLength:C});return(t.IsCCM(c)||t.IsChacha20Poly(c))&&u.setAAD(L,{plaintextLength:r.length}),(t.IsGCM(c)||t.IsOCB(c))&&u.setAAD(L),u.setAuthTag(I),Buffer.concat([u.update(r),u.final()])}static HybridEncrypt(a,e,s){let r=_crypto2.default.randomBytes(32),n=_crypto2.default.publicEncrypt({key:e,padding:_crypto2.default.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},r);return Buffer.concat([_cryptobuffer.writeUint32BE.call(void 0, n.length),n,t.Encrypt(a,r,s)])}static HybridDecrypt(a,e,s){let r=Buffer.from(_cryptobuffer.coerceToUint8Array.call(void 0, a)),n=_cryptobuffer.readUint32BE.call(void 0, r.subarray(0,4)),o=r.subarray(4,4+n),c=r.subarray(4+n),{privateKey:A,passphrase:p}=t.GetPrivateKey(e),h=_crypto2.default.privateDecrypt({key:A,passphrase:p,padding:_crypto2.default.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},o);return t.Decrypt(c,h,s)}static DecryptKeyIV(a){let{privateKey:e,EncryptedKeyIV:s,keyLength:r}=a,{privateKey:n,passphrase:o}=t.GetPrivateKey(e),c=_crypto2.default.privateDecrypt({key:n,passphrase:o,padding:_crypto2.default.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},s),A=c.subarray(0,r),p=c.subarray(r);return{Key:A,IV:p}}static GetPrivateKey(a){let e=typeof a=="object"&&"key"in a?a.key:a,s=typeof a=="object"&&"passphrase"in a?a.passphrase:void 0;return{privateKey:e,passphrase:s}}static NewKeyIV(a={}){let{secret:e}=a,s=t.ResolveOptions(a),r=e?_cryptobuffer.coerceToUint8Array.call(void 0, e):_crypto2.default.randomBytes(s.length),n=_crypto2.default.randomBytes(s.salt),o=_crypto2.default.scryptSync(r,n,s.length),c=_crypto2.default.randomBytes(s.iv),A=s.aad||_crypto2.default.scryptSync(o,n,s.aadLength);return{options:s,Key:o,IV:c,AAD:A,salt:n}}static ResolveOptions(a={}){let e={...a};e.aad&&(e.aad=_cryptobuffer.coerceToUint8Array.call(void 0, e.aad)),e.salt||(e.salt=t.SALT_LENGTH.default),e.authTag||(e.authTag=t.AUTH_TAG_LENGTH.default),e.aadLength=_optionalChain([e, 'access', _ => _.aad, 'optionalAccess', _2 => _2.length])||e.aadLength||t.AAD_LENGTH.default,e.salt=_mathutils.clamp.call(void 0, e.salt,t.SALT_LENGTH.min,t.SALT_LENGTH.max),e.authTag=_mathutils.clamp.call(void 0, e.authTag,t.AUTH_TAG_LENGTH.min,t.AUTH_TAG_LENGTH.max),e.aad||(e.aadLength=_mathutils.clamp.call(void 0, e.aadLength,t.AAD_LENGTH.min,t.AAD_LENGTH.max));let{keyLength:s,algorithm:r}=t.GetKeyLength(a.algorithm);return e.algorithm=r,e.length=s,e.iv=t.GetIVLength(r,a),e}static GetIVLength(a=t.DEFAULT_ALGORITHM.buffer,e={}){switch(a){case t.ALGORITHM.AES_128_CCM:case t.ALGORITHM.AES_192_CCM:case t.ALGORITHM.AES_256_CCM:case t.ALGORITHM.AES_128_OCB:case t.ALGORITHM.AES_192_OCB:case t.ALGORITHM.AES_256_OCB:return 8;case t.ALGORITHM.CHACHA_20_POLY:return 12;default:return _mathutils.clamp.call(void 0, e.iv||t.IV_LENGTH.default,t.IV_LENGTH.min,t.IV_LENGTH.max)}}static GetKeyLength(a=t.DEFAULT_ALGORITHM.buffer){switch(a){case t.ALGORITHM.CHACHA_20_POLY:return{algorithm:a,keyLength:256/8};case t.ALGORITHM.AES_128_CBC:case t.ALGORITHM.AES_128_CCM:case t.ALGORITHM.AES_128_GCM:case t.ALGORITHM.AES_128_OCB:return{algorithm:a,keyLength:128/8};case t.ALGORITHM.AES_192_CBC:case t.ALGORITHM.AES_192_CCM:case t.ALGORITHM.AES_192_GCM:case t.ALGORITHM.AES_192_OCB:return{algorithm:a,keyLength:192/8};case t.ALGORITHM.AES_256_CBC:case t.ALGORITHM.AES_256_CCM:case t.ALGORITHM.AES_256_GCM:case t.ALGORITHM.AES_256_OCB:default:return{algorithm:a,keyLength:256/8}}}static IsGCM(a){return a===t.ALGORITHM.AES_128_GCM||a===t.ALGORITHM.AES_192_GCM||a===t.ALGORITHM.AES_256_GCM}static IsCCM(a){return a===t.ALGORITHM.AES_128_CCM||a===t.ALGORITHM.AES_192_CCM||a===t.ALGORITHM.AES_256_CCM}static IsChacha20Poly(a){return a===t.ALGORITHM.CHACHA_20_POLY}static IsOCB(a){return a===t.ALGORITHM.AES_128_OCB||a===t.ALGORITHM.AES_192_OCB||a===t.ALGORITHM.AES_256_OCB}static IsCBC(a){return a===t.ALGORITHM.AES_128_CBC||a===t.ALGORITHM.AES_192_CBC||a===t.ALGORITHM.AES_256_CBC}};t.SALT_LENGTH={min:16,max:64,default:32},t.IV_LENGTH={min:8,max:32,default:16},t.AUTH_TAG_LENGTH={min:4,max:16,default:16},t.AAD_LENGTH={min:16,max:128,default:32},t.ALGORITHM={AES_128_CBC:"aes-128-cbc",AES_192_CBC:"aes-192-cbc",AES_256_CBC:"aes-256-cbc",AES_128_CCM:"aes-128-ccm",AES_192_CCM:"aes-192-ccm",AES_256_CCM:"aes-256-ccm",AES_128_GCM:"aes-128-gcm",AES_192_GCM:"aes-192-gcm",AES_256_GCM:"aes-256-gcm",AES_128_OCB:"aes-128-ocb",AES_192_OCB:"aes-192-ocb",AES_256_OCB:"aes-256-ocb",CHACHA_20_POLY:"chacha20-poly1305"},t.DEFAULT_ALGORITHM={buffer:t.ALGORITHM.AES_256_GCM,stream:t.ALGORITHM.AES_256_CBC},t.ALGORITHMS=Object.values(t.ALGORITHM),t.stream={Encrypt(a,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:s,IV:r,salt:n,options:{input:o,output:c,algorithm:A}}=t.NewKeyIV({secret:a,...e}),p=_crypto2.default.createCipheriv(A,s,r);return c.write(Buffer.concat([n,r])),t.stream.Cipher({cipher:p,input:o,output:c})},async Decrypt(a,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{input:s,output:r,algorithm:n,length:o,salt:c,iv:A}=t.ResolveOptions(e),[p,h]=await _utils.extractBytesFromReadable.call(void 0, s,c+A),y=p.subarray(0,c),C=p.subarray(c),L=_crypto2.default.scryptSync(_cryptobuffer.coerceToUint8Array.call(void 0, a),y,o),I=_crypto2.default.createDecipheriv(n,L,C);return t.stream.Decipher({decipher:I,input:h,output:r})},HybridEncrypt(a,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:s,IV:r,options:{algorithm:n,input:o,output:c}}=t.NewKeyIV(e),A=_crypto2.default.publicEncrypt({key:a,padding:_crypto2.default.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},Buffer.concat([s,r])),p=_crypto2.default.createCipheriv(n,s,r);return t.stream.Cipher({cipher:p,encryptedKey:A,input:o,output:c})},HybridDecrypt(a,e){let{input:s,output:r}=e,{keyLength:n,algorithm:o}=t.GetKeyLength(e.algorithm||t.DEFAULT_ALGORITHM.stream);return new Promise((c,A)=>(s.on("error",A),r.on("error",A),t._stream.ExtractKeyLength(s).then(t._stream.ExtractKeyIV).then(([p,h])=>({...t.DecryptKeyIV({privateKey:a,EncryptedKeyIV:p,keyLength:n}),input:h})).then(async({Key:p,IV:h,input:y})=>{y.on("error",A);let C=_crypto2.default.createDecipheriv(o,p,h);await t.stream.Decipher({decipher:C,input:y,output:r}),c()}).catch(A)))},Cipher(a){let{cipher:e,encryptedKey:s,input:r,output:n}=a;return new Promise((o,c)=>{e.on("error",c),r.on("error",c),n.on("error",c),n.on("finish",o),s&&(n.write(_cryptobuffer.writeUint32BE.call(void 0, s.length)),n.write(s)),r.pipe(e).pipe(n)})},Decipher(a){let{decipher:e,input:s,output:r}=a;return new Promise((n,o)=>{e.on("error",o),s.on("error",o),r.on("error",o),r.on("finish",n),s.pipe(e).pipe(r)})}},t._stream={ExtractKeyLength(a){return _utils.extractBytesFromReadable.call(void 0, a,4).then(([e,s])=>[_cryptobuffer.readUint32BE.call(void 0, e),s])},ExtractKeyIV([a,e]){return _utils.extractBytesFromReadable.call(void 0, e,a)}};var d=t;exports.Cipher = d;

package/dist/index.mjs

@@ -1 +1 @@
-import m from"crypto";import{Transform as C}from"stream";import{coerceToUint8Array as g}from"@alessiofrittoli/crypto-buffer/coercion";var t=class t{static encrypt(r,e,o={}){let a=g(r),{salt:c,Key:s,IV:n,AAD:p,options:{algorithm:i,authTag:h}}=t.newKeyIV(e,o);if(t.isCBC(i)){let T=m.createCipheriv(i,s,n),d=Buffer.concat([T.update(a),T.final()]);return Buffer.concat([c,n,d])}let y=m.createCipheriv(i,s,n,{authTagLength:h});t.isCCM(i)&&y.setAAD(p,{plaintextLength:a.length}),(t.isGCM(i)||t.isOCB(i))&&y.setAAD(p);let u=Buffer.concat([y.update(a),y.final()]),l=y.getAuthTag();return Buffer.concat([c,n,p,l,u])}static decrypt(r,e,o={}){let a=g(r),c=g(e),s=t.resolveOptions(o),{algorithm:n}=s,p=a.subarray(0,s.salt);a=a.subarray(s.salt);let i=a.subarray(0,s.iv);a=a.subarray(s.iv);let h=m.scryptSync(c,p,s.length);if(t.isCBC(n)){let f=m.createDecipheriv(s.algorithm,h,i);return Buffer.concat([f.update(a),f.final()])}let y=s.aadLength,u=s.authTag,l=a.subarray(0,y);a=a.subarray(y);let T=a.subarray(0,u);a=a.subarray(u);let d=m.createDecipheriv(n,h,i,{authTagLength:u});return t.isCCM(n)&&d.setAAD(l,{plaintextLength:a.length}),(t.isGCM(n)||t.isOCB(n))&&d.setAAD(l),d.setAuthTag(T),Buffer.concat([d.update(a),d.final()])}static streamEncrypt(r,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:o,IV:a,options:{input:c,output:s,algorithm:n,salt:p,iv:i,authTag:h}}=t.newKeyIV(r,e),y=t.encrypt(Buffer.concat([o,a]),r,{algorithm:n,salt:p,iv:i,authTag:h}),u=m.createCipheriv(n,o,a);return{cipher:u,encrypt:()=>t.stream({cipher:u,input:c,output:s,encryptedKey:y})}}static streamDecrypt(r,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{input:o,output:a,algorithm:c,salt:s,iv:n,authTag:p,length:i}=t.resolveOptions(e),h=i+n+s+n+p;return t.extractKeyIV(o,h).then(([y,u])=>{if(u.errored)throw u.errored;let l=t.decrypt(y,r,{algorithm:c,salt:s,iv:n,authTag:p}),T=l.subarray(0,i),d=l.subarray(i),f=m.createDecipheriv(c,T,d);return{decipher:f,decrypt:()=>t.decipherStream({decipher:f,input:u,output:a})}})}static hybridEncrypt(r,e,o){o.algorithm||(o.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:a,IV:c,options:{algorithm:s,input:n,output:p}}=t.newKeyIV(r,o),i=m.publicEncrypt(e,Buffer.concat([a,c])),h=m.createCipheriv(s,a,c);return{cipher:h,encrypt:()=>t.stream({cipher:h,input:n,output:p,encryptedKey:i})}}static hybridDecrypt(r,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{input:o,output:a,algorithm:c,length:s,rsaKeyLength:n}=t.resolveOptions(e);return t.extractKeyIV(o,n).then(([p,i])=>{let h=m.privateDecrypt(r,p),y=h.subarray(0,s),u=h.subarray(s),l=m.createDecipheriv(c,y,u);return{decipher:l,decrypt:()=>t.decipherStream({decipher:l,input:i,output:a})}})}static stream(r){let{cipher:e,encryptedKey:o,input:a,output:c}=r;return new Promise((s,n)=>{e.on("error",n),a.on("error",n),c.on("error",n),c.on("finish",s),c.write(o),a.pipe(e).pipe(c)})}static decipherStream(r){let{decipher:e,input:o,output:a}=r;return new Promise((c,s)=>{e.on("error",s),o.on("error",s),a.on("error",s),a.on("finish",c),o.pipe(e).pipe(a)})}static extractKeyIV(r,e){return new Promise((o,a)=>{let c=Buffer.alloc(0),s=0,n=!1,p=new C({async transform(i,h,y){if(c.length<e&&(c=Buffer.concat([c,i])),s+=i.length,c.length>e){let u=Math.max(0,c.length-e);c=c.subarray(0,e);let l=i.subarray(u*-1);return n||(o([c,this]),n=!0),this.push(l,h),y()}return s>e&&(n||(o([c,this]),n=!0),this.push(i,h)),y()},final(i){return c.length<e?i(new Error("The extracted KeyIV length is less than the expected length.")):i()}});p.on("error",a),r.on("error",i=>{p.destroy(i),a(i)}),r.pipe(p)})}static newKeyIV(r,e={}){let o=g(r),a=t.resolveOptions(e),c=m.randomBytes(a.salt),s=m.scryptSync(o,c,a.length),n=m.randomBytes(a.iv),p=a.aad||m.scryptSync(s,c,a.aadLength);return{options:a,Key:s,IV:n,AAD:p,salt:c}}static resolveOptions(r={}){let e={...r};e.aad&&(e.aad=g(e.aad)),e.salt||(e.salt=t.SALT_LENGTH.default),e.authTag||(e.authTag=t.AUTH_TAG_LENGTH.default),e.aadLength=e.aad?.length||e.aadLength||t.AAD_LENGTH.default,e.salt=Math.min(Math.max(e.salt,t.SALT_LENGTH.min),t.SALT_LENGTH.max),e.authTag=Math.min(Math.max(e.authTag,t.AUTH_TAG_LENGTH.min),t.AUTH_TAG_LENGTH.max),e.aad||(e.aadLength=Math.min(Math.max(e.aadLength,t.AAD_LENGTH.min),t.AAD_LENGTH.max));let{keyLength:o,algorithm:a}=t.getKeyLength(r.algorithm);return e.algorithm=a,e.length=o,e.iv=t.getIVLength(a,r),e}static getIVLength(r=t.DEFAULT_ALGORITHM.buffer,e={}){switch(r){case"aes-128-ccm":case"aes-128-ocb":case"aes-192-ccm":case"aes-192-ocb":case"aes-256-ccm":case"aes-256-ocb":return 8;case"chacha20-poly1305":return 12;default:return Math.min(Math.max(e.iv||t.IV_LENGTH.default,t.IV_LENGTH.min),t.IV_LENGTH.max)}}static getKeyLength(r=t.DEFAULT_ALGORITHM.buffer){switch(r){case"chacha20-poly1305":return{algorithm:r,keyLength:256/8};case"aes-128-cbc":case"aes-128-ccm":case"aes-128-gcm":case"aes-128-ocb":return{algorithm:r,keyLength:128/8};case"aes-192-cbc":case"aes-192-ccm":case"aes-192-gcm":case"aes-192-ocb":return{algorithm:r,keyLength:192/8};case"aes-256-cbc":case"aes-256-ccm":case"aes-256-gcm":case"aes-256-ocb":default:return{algorithm:r,keyLength:256/8}}}static isGCM(r){return r==="aes-128-gcm"||r==="aes-192-gcm"||r==="aes-256-gcm"}static isCCM(r){return r==="aes-128-ccm"||r==="aes-192-ccm"||r==="aes-256-ccm"||r==="chacha20-poly1305"}static isOCB(r){return r==="aes-128-ocb"||r==="aes-192-ocb"||r==="aes-256-ocb"}static isCBC(r){return r==="aes-128-cbc"||r==="aes-192-cbc"||r==="aes-256-cbc"}};t.SALT_LENGTH={min:16,max:64,default:32},t.IV_LENGTH={min:8,max:32,default:16},t.AUTH_TAG_LENGTH={min:4,max:16,default:16},t.AAD_LENGTH={min:16,max:128,default:32},t.DEFAULT_ALGORITHM={buffer:"aes-256-gcm",stream:"aes-256-cbc"},t.ALGORITHMS=["aes-128-cbc","aes-128-ccm","aes-128-gcm","aes-128-ocb","aes-192-cbc","aes-192-ccm","aes-192-gcm","aes-192-ocb","aes-256-cbc","aes-256-ccm","aes-256-gcm","aes-256-ocb","chacha20-poly1305"];var A=t;export{A as Cipher};
+import i from"crypto";import{extractBytesFromReadable as E}from"@alessiofrittoli/stream-reader/utils";import{clamp as O}from"@alessiofrittoli/math-utils";import{coerceToUint8Array as T,readUint32BE as l,writeUint32BE as m}from"@alessiofrittoli/crypto-buffer";var t=class t{static Encrypt(a,e,s={}){let r=T(a),{salt:n,Key:o,IV:c,AAD:A,options:{algorithm:p,authTag:h}}=t.NewKeyIV({...s,secret:e});if(t.IsCBC(p)){let I=i.createCipheriv(p,o,c),u=Buffer.concat([I.update(r),I.final()]);return Buffer.concat([n,c,u])}let y=i.createCipheriv(p,o,c,{authTagLength:h});(t.IsCCM(p)||t.IsChacha20Poly(p))&&y.setAAD(A,{plaintextLength:r.length}),(t.IsGCM(p)||t.IsOCB(p))&&y.setAAD(A);let C=Buffer.concat([y.update(r),y.final()]),L=y.getAuthTag();return Buffer.concat([n,c,A,L,C])}static Decrypt(a,e,s={}){let r=T(a),n=t.ResolveOptions(s),o=T(e),{algorithm:c}=n,A=r.subarray(0,n.salt);r=r.subarray(n.salt);let p=r.subarray(0,n.iv);r=r.subarray(n.iv);let h=i.scryptSync(o,A,n.length);if(t.IsCBC(c)){let G=i.createDecipheriv(n.algorithm,h,p);return Buffer.concat([G.update(r),G.final()])}let y=n.aadLength,C=n.authTag,L=r.subarray(0,y);r=r.subarray(y);let I=r.subarray(0,C);r=r.subarray(C);let u=i.createDecipheriv(c,h,p,{authTagLength:C});return(t.IsCCM(c)||t.IsChacha20Poly(c))&&u.setAAD(L,{plaintextLength:r.length}),(t.IsGCM(c)||t.IsOCB(c))&&u.setAAD(L),u.setAuthTag(I),Buffer.concat([u.update(r),u.final()])}static HybridEncrypt(a,e,s){let r=i.randomBytes(32),n=i.publicEncrypt({key:e,padding:i.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},r);return Buffer.concat([m(n.length),n,t.Encrypt(a,r,s)])}static HybridDecrypt(a,e,s){let r=Buffer.from(T(a)),n=l(r.subarray(0,4)),o=r.subarray(4,4+n),c=r.subarray(4+n),{privateKey:A,passphrase:p}=t.GetPrivateKey(e),h=i.privateDecrypt({key:A,passphrase:p,padding:i.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},o);return t.Decrypt(c,h,s)}static DecryptKeyIV(a){let{privateKey:e,EncryptedKeyIV:s,keyLength:r}=a,{privateKey:n,passphrase:o}=t.GetPrivateKey(e),c=i.privateDecrypt({key:n,passphrase:o,padding:i.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},s),A=c.subarray(0,r),p=c.subarray(r);return{Key:A,IV:p}}static GetPrivateKey(a){let e=typeof a=="object"&&"key"in a?a.key:a,s=typeof a=="object"&&"passphrase"in a?a.passphrase:void 0;return{privateKey:e,passphrase:s}}static NewKeyIV(a={}){let{secret:e}=a,s=t.ResolveOptions(a),r=e?T(e):i.randomBytes(s.length),n=i.randomBytes(s.salt),o=i.scryptSync(r,n,s.length),c=i.randomBytes(s.iv),A=s.aad||i.scryptSync(o,n,s.aadLength);return{options:s,Key:o,IV:c,AAD:A,salt:n}}static ResolveOptions(a={}){let e={...a};e.aad&&(e.aad=T(e.aad)),e.salt||(e.salt=t.SALT_LENGTH.default),e.authTag||(e.authTag=t.AUTH_TAG_LENGTH.default),e.aadLength=e.aad?.length||e.aadLength||t.AAD_LENGTH.default,e.salt=O(e.salt,t.SALT_LENGTH.min,t.SALT_LENGTH.max),e.authTag=O(e.authTag,t.AUTH_TAG_LENGTH.min,t.AUTH_TAG_LENGTH.max),e.aad||(e.aadLength=O(e.aadLength,t.AAD_LENGTH.min,t.AAD_LENGTH.max));let{keyLength:s,algorithm:r}=t.GetKeyLength(a.algorithm);return e.algorithm=r,e.length=s,e.iv=t.GetIVLength(r,a),e}static GetIVLength(a=t.DEFAULT_ALGORITHM.buffer,e={}){switch(a){case t.ALGORITHM.AES_128_CCM:case t.ALGORITHM.AES_192_CCM:case t.ALGORITHM.AES_256_CCM:case t.ALGORITHM.AES_128_OCB:case t.ALGORITHM.AES_192_OCB:case t.ALGORITHM.AES_256_OCB:return 8;case t.ALGORITHM.CHACHA_20_POLY:return 12;default:return O(e.iv||t.IV_LENGTH.default,t.IV_LENGTH.min,t.IV_LENGTH.max)}}static GetKeyLength(a=t.DEFAULT_ALGORITHM.buffer){switch(a){case t.ALGORITHM.CHACHA_20_POLY:return{algorithm:a,keyLength:256/8};case t.ALGORITHM.AES_128_CBC:case t.ALGORITHM.AES_128_CCM:case t.ALGORITHM.AES_128_GCM:case t.ALGORITHM.AES_128_OCB:return{algorithm:a,keyLength:128/8};case t.ALGORITHM.AES_192_CBC:case t.ALGORITHM.AES_192_CCM:case t.ALGORITHM.AES_192_GCM:case t.ALGORITHM.AES_192_OCB:return{algorithm:a,keyLength:192/8};case t.ALGORITHM.AES_256_CBC:case t.ALGORITHM.AES_256_CCM:case t.ALGORITHM.AES_256_GCM:case t.ALGORITHM.AES_256_OCB:default:return{algorithm:a,keyLength:256/8}}}static IsGCM(a){return a===t.ALGORITHM.AES_128_GCM||a===t.ALGORITHM.AES_192_GCM||a===t.ALGORITHM.AES_256_GCM}static IsCCM(a){return a===t.ALGORITHM.AES_128_CCM||a===t.ALGORITHM.AES_192_CCM||a===t.ALGORITHM.AES_256_CCM}static IsChacha20Poly(a){return a===t.ALGORITHM.CHACHA_20_POLY}static IsOCB(a){return a===t.ALGORITHM.AES_128_OCB||a===t.ALGORITHM.AES_192_OCB||a===t.ALGORITHM.AES_256_OCB}static IsCBC(a){return a===t.ALGORITHM.AES_128_CBC||a===t.ALGORITHM.AES_192_CBC||a===t.ALGORITHM.AES_256_CBC}};t.SALT_LENGTH={min:16,max:64,default:32},t.IV_LENGTH={min:8,max:32,default:16},t.AUTH_TAG_LENGTH={min:4,max:16,default:16},t.AAD_LENGTH={min:16,max:128,default:32},t.ALGORITHM={AES_128_CBC:"aes-128-cbc",AES_192_CBC:"aes-192-cbc",AES_256_CBC:"aes-256-cbc",AES_128_CCM:"aes-128-ccm",AES_192_CCM:"aes-192-ccm",AES_256_CCM:"aes-256-ccm",AES_128_GCM:"aes-128-gcm",AES_192_GCM:"aes-192-gcm",AES_256_GCM:"aes-256-gcm",AES_128_OCB:"aes-128-ocb",AES_192_OCB:"aes-192-ocb",AES_256_OCB:"aes-256-ocb",CHACHA_20_POLY:"chacha20-poly1305"},t.DEFAULT_ALGORITHM={buffer:t.ALGORITHM.AES_256_GCM,stream:t.ALGORITHM.AES_256_CBC},t.ALGORITHMS=Object.values(t.ALGORITHM),t.stream={Encrypt(a,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:s,IV:r,salt:n,options:{input:o,output:c,algorithm:A}}=t.NewKeyIV({secret:a,...e}),p=i.createCipheriv(A,s,r);return c.write(Buffer.concat([n,r])),t.stream.Cipher({cipher:p,input:o,output:c})},async Decrypt(a,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{input:s,output:r,algorithm:n,length:o,salt:c,iv:A}=t.ResolveOptions(e),[p,h]=await E(s,c+A),y=p.subarray(0,c),C=p.subarray(c),L=i.scryptSync(T(a),y,o),I=i.createDecipheriv(n,L,C);return t.stream.Decipher({decipher:I,input:h,output:r})},HybridEncrypt(a,e){e.algorithm||(e.algorithm=t.DEFAULT_ALGORITHM.stream);let{Key:s,IV:r,options:{algorithm:n,input:o,output:c}}=t.NewKeyIV(e),A=i.publicEncrypt({key:a,padding:i.constants.RSA_PKCS1_OAEP_PADDING,oaepHash:"sha256"},Buffer.concat([s,r])),p=i.createCipheriv(n,s,r);return t.stream.Cipher({cipher:p,encryptedKey:A,input:o,output:c})},HybridDecrypt(a,e){let{input:s,output:r}=e,{keyLength:n,algorithm:o}=t.GetKeyLength(e.algorithm||t.DEFAULT_ALGORITHM.stream);return new Promise((c,A)=>(s.on("error",A),r.on("error",A),t._stream.ExtractKeyLength(s).then(t._stream.ExtractKeyIV).then(([p,h])=>({...t.DecryptKeyIV({privateKey:a,EncryptedKeyIV:p,keyLength:n}),input:h})).then(async({Key:p,IV:h,input:y})=>{y.on("error",A);let C=i.createDecipheriv(o,p,h);await t.stream.Decipher({decipher:C,input:y,output:r}),c()}).catch(A)))},Cipher(a){let{cipher:e,encryptedKey:s,input:r,output:n}=a;return new Promise((o,c)=>{e.on("error",c),r.on("error",c),n.on("error",c),n.on("finish",o),s&&(n.write(m(s.length)),n.write(s)),r.pipe(e).pipe(n)})},Decipher(a){let{decipher:e,input:s,output:r}=a;return new Promise((n,o)=>{e.on("error",o),s.on("error",o),r.on("error",o),r.on("finish",n),s.pipe(e).pipe(r)})}},t._stream={ExtractKeyLength(a){return E(a,4).then(([e,s])=>[l(e),s])},ExtractKeyIV([a,e]){return E(e,a)}};var d=t;export{d as Cipher};

package/dist/types.d.mts

@@ -1,115 +1,4 @@
-import crypto from 'crypto';
-import { Readable, Writable } from 'stream';
-import { CoerceToUint8ArrayInput } from '@alessiofrittoli/crypto-buffer';
-
-/**
- * Cipher types.
- */
-declare namespace Cph {
-    /** Cipher CBC algorithm types. */
-    type CBCTypes = 'aes-128-cbc' | 'aes-192-cbc' | 'aes-256-cbc';
-    /** Cipher supported algorithm types. */
-    type AesAlgorithm = (crypto.CipherCCMTypes | crypto.CipherGCMTypes | crypto.CipherOCBTypes | Cph.CBCTypes | crypto.CipherChaCha20Poly1305Types);
-    /**
-     * Common Cipher options.
-     * @template T The AES algorithm type.
-     */
-    interface Options<T extends Cph.AesAlgorithm = Cph.AesAlgorithm> {
-        /** The Cipher algorithm to use. Default: `aes-256-gcm` | `aes-256-cbc`. */
-        algorithm?: T;
-        /** The salt length. Minimum: `16`, Maximum: `64`. Default: `32`. */
-        salt?: number;
-        /** The `IV` length. Minimum: `8`, Maximum: `32`. Default: `16`. */
-        iv?: number;
-        /** The `authTag` length. Minimum: `4`, Maximum: `16`. Default: `16`. */
-        authTag?: number;
-        /** Custom `Additional Authenticated Data`. */
-        aad?: CoerceToUint8ArrayInput;
-        /** The `AAD` length. Minimum: `16`, Maximum: `128`. Default: `32`. */
-        aadLength?: number;
-    }
-    /**
-     * Resolved Common options.
-     */
-    interface ResolvedOptions<T extends Cph.AesAlgorithm = Cph.AesAlgorithm> extends Required<Omit<Cph.Options<T>, 'aad'>> {
-        /** The symmetric key length. */
-        length: number;
-        aad?: Uint8Array;
-    }
-    namespace Stream {
-        namespace Symmetric {
-            /**
-             * Options for encrypting a stream.
-             */
-            interface EncryptOptions extends Cph.Options<Cph.CBCTypes> {
-                /** The `Readable` Stream from where raw data to encrypt is read. */
-                input: Readable;
-                /** The `Writable` Stream where encrypted data is written. */
-                output: Writable;
-            }
-            /**
-             * Resolved Stream Encrypt options (symmetric and hybrid).
-             */
-            type EncryptResolvedOptions = (Cph.ResolvedOptions & Required<Cph.Stream.Symmetric.EncryptOptions>);
-            /**
-             * Returnign object from `Cipher.encryptStream()` method.
-             */
-            interface EncryptReturnType {
-                /** The `crypto.Cipher` instance. */
-                cipher: crypto.Cipher;
-                /** The actual `encrypt` callback that must be called and awaited in order to start the encryption process. */
-                encrypt: () => Promise<void>;
-            }
-            /**
-             * Options for decrypting a stream (symmetric).
-             */
-            interface DecryptOptions extends Cph.Stream.Symmetric.EncryptOptions {
-                /** The `Readable` Stream from where encrypted data is read. */
-                input: Readable;
-                /** The `Writable` Stream where decrypted data is written. */
-                output: Writable;
-            }
-            /**
-             * Resolved Stream Decrypt options (symmetric).
-             */
-            type DecryptResolvedOptions = (Cph.ResolvedOptions & Required<Cph.Stream.Symmetric.DecryptOptions>);
-            interface DecryptReturnType {
-                /** The `crypto.Decipher` instance. */
-                decipher: crypto.Decipher;
-                /** The actual `decrypt` callback that must be called and awaited in order to start the decryption process. */
-                decrypt: () => Promise<void>;
-            }
-        }
-        namespace Hybrid {
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.EncryptOptions}
-             */
-            type EncryptOptions = Cph.Stream.Symmetric.EncryptOptions;
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.EncryptResolvedOptions}
-             */
-            type EncryptResolvedOptions = Cph.Stream.Symmetric.EncryptResolvedOptions;
-            /**
-             * Options for decrypting a stream.
-             */
-            interface DecryptOptions extends Cph.Stream.Symmetric.DecryptOptions {
-                /** The RSA key length in bytes used while encrypting data. This is used to properly extract the encrypted Cipher Key and Initialization Vector. */
-                rsaKeyLength: number;
-            }
-            /**
-             * Resolved Stream Decrypt options.
-             */
-            type DecryptResolvedOptions = (Cph.ResolvedOptions & Required<Cph.Stream.Hybrid.DecryptOptions>);
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.EncryptReturnType}
-             */
-            type EncryptReturnType = Cph.Stream.Symmetric.EncryptReturnType;
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.DecryptReturnType}
-             */
-            type DecryptReturnType = Cph.Stream.Symmetric.DecryptReturnType;
-        }
-    }
-}
-
-export { Cph };
+import 'crypto';
+import 'stream';
+import '@alessiofrittoli/crypto-buffer';
+export { C as Cph } from './index-B9WIVWrs.mjs';

package/dist/types.d.ts

@@ -1,115 +1,4 @@
-import crypto from 'crypto';
-import { Readable, Writable } from 'stream';
-import { CoerceToUint8ArrayInput } from '@alessiofrittoli/crypto-buffer';
-
-/**
- * Cipher types.
- */
-declare namespace Cph {
-    /** Cipher CBC algorithm types. */
-    type CBCTypes = 'aes-128-cbc' | 'aes-192-cbc' | 'aes-256-cbc';
-    /** Cipher supported algorithm types. */
-    type AesAlgorithm = (crypto.CipherCCMTypes | crypto.CipherGCMTypes | crypto.CipherOCBTypes | Cph.CBCTypes | crypto.CipherChaCha20Poly1305Types);
-    /**
-     * Common Cipher options.
-     * @template T The AES algorithm type.
-     */
-    interface Options<T extends Cph.AesAlgorithm = Cph.AesAlgorithm> {
-        /** The Cipher algorithm to use. Default: `aes-256-gcm` | `aes-256-cbc`. */
-        algorithm?: T;
-        /** The salt length. Minimum: `16`, Maximum: `64`. Default: `32`. */
-        salt?: number;
-        /** The `IV` length. Minimum: `8`, Maximum: `32`. Default: `16`. */
-        iv?: number;
-        /** The `authTag` length. Minimum: `4`, Maximum: `16`. Default: `16`. */
-        authTag?: number;
-        /** Custom `Additional Authenticated Data`. */
-        aad?: CoerceToUint8ArrayInput;
-        /** The `AAD` length. Minimum: `16`, Maximum: `128`. Default: `32`. */
-        aadLength?: number;
-    }
-    /**
-     * Resolved Common options.
-     */
-    interface ResolvedOptions<T extends Cph.AesAlgorithm = Cph.AesAlgorithm> extends Required<Omit<Cph.Options<T>, 'aad'>> {
-        /** The symmetric key length. */
-        length: number;
-        aad?: Uint8Array;
-    }
-    namespace Stream {
-        namespace Symmetric {
-            /**
-             * Options for encrypting a stream.
-             */
-            interface EncryptOptions extends Cph.Options<Cph.CBCTypes> {
-                /** The `Readable` Stream from where raw data to encrypt is read. */
-                input: Readable;
-                /** The `Writable` Stream where encrypted data is written. */
-                output: Writable;
-            }
-            /**
-             * Resolved Stream Encrypt options (symmetric and hybrid).
-             */
-            type EncryptResolvedOptions = (Cph.ResolvedOptions & Required<Cph.Stream.Symmetric.EncryptOptions>);
-            /**
-             * Returnign object from `Cipher.encryptStream()` method.
-             */
-            interface EncryptReturnType {
-                /** The `crypto.Cipher` instance. */
-                cipher: crypto.Cipher;
-                /** The actual `encrypt` callback that must be called and awaited in order to start the encryption process. */
-                encrypt: () => Promise<void>;
-            }
-            /**
-             * Options for decrypting a stream (symmetric).
-             */
-            interface DecryptOptions extends Cph.Stream.Symmetric.EncryptOptions {
-                /** The `Readable` Stream from where encrypted data is read. */
-                input: Readable;
-                /** The `Writable` Stream where decrypted data is written. */
-                output: Writable;
-            }
-            /**
-             * Resolved Stream Decrypt options (symmetric).
-             */
-            type DecryptResolvedOptions = (Cph.ResolvedOptions & Required<Cph.Stream.Symmetric.DecryptOptions>);
-            interface DecryptReturnType {
-                /** The `crypto.Decipher` instance. */
-                decipher: crypto.Decipher;
-                /** The actual `decrypt` callback that must be called and awaited in order to start the decryption process. */
-                decrypt: () => Promise<void>;
-            }
-        }
-        namespace Hybrid {
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.EncryptOptions}
-             */
-            type EncryptOptions = Cph.Stream.Symmetric.EncryptOptions;
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.EncryptResolvedOptions}
-             */
-            type EncryptResolvedOptions = Cph.Stream.Symmetric.EncryptResolvedOptions;
-            /**
-             * Options for decrypting a stream.
-             */
-            interface DecryptOptions extends Cph.Stream.Symmetric.DecryptOptions {
-                /** The RSA key length in bytes used while encrypting data. This is used to properly extract the encrypted Cipher Key and Initialization Vector. */
-                rsaKeyLength: number;
-            }
-            /**
-             * Resolved Stream Decrypt options.
-             */
-            type DecryptResolvedOptions = (Cph.ResolvedOptions & Required<Cph.Stream.Hybrid.DecryptOptions>);
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.EncryptReturnType}
-             */
-            type EncryptReturnType = Cph.Stream.Symmetric.EncryptReturnType;
-            /**
-             * Alias for {@link Cph.Stream.Symmetric.DecryptReturnType}
-             */
-            type DecryptReturnType = Cph.Stream.Symmetric.DecryptReturnType;
-        }
-    }
-}
-
-export { Cph };
+import 'crypto';
+import 'stream';
+import '@alessiofrittoli/crypto-buffer';
+export { C as Cph } from './index-B9WIVWrs.js';