@aptos-labs/ts-sdk 6.3.1 → 7.0.0

package/dist/core/crypto/encryption/ciphertext.js

@@ -0,0 +1,166 @@
+// Copyright © Aptos Foundation
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Ported from aptos-core/crates/aptos-batch-encryption/ts-batch-encrypt/src/ciphertext.ts.
+ * BCS layout must match the Rust types in aptos_batch_encryption::shared::ciphertext.
+ */
+import { ed25519 } from "@noble/curves/ed25519.js";
+import { bls12_381 } from "@noble/curves/bls12-381.js";
+import { Serializable, Serializer } from "../../../bcs/serializer.js";
+import { leBytesToBigint, bigintToLEBytesFr, fp12ToLEBytes } from "./fieldSerialization.js";
+import { bytesToG2, G2_SIZE, g2ToBytes } from "./curveSerialization.js";
+import { getRandomFr, hashG2Element, hashToFr, ID_HASH_DST, OneTimePad, SymmetricCiphertext, SymmetricKey, } from "./symmetric.js";
+/**
+ * Corresponds to the Rust type `aptos_batch_encryption::shared::ciphertext::BIBECiphertext`.
+ */
+export class BIBECiphertext extends Serializable {
+    id;
+    ctG2;
+    paddedKey;
+    symmetricCiphertext;
+    constructor(id, ctG2, paddedKey, symmetricCiphertext) {
+        super();
+        if (ctG2.length !== 3) {
+            throw new Error("Need 3 G2 points here");
+        }
+        this.id = id;
+        this.ctG2 = ctG2;
+        this.paddedKey = paddedKey;
+        this.symmetricCiphertext = symmetricCiphertext;
+    }
+    serialize(serializer) {
+        serializer.serializeBytes(bigintToLEBytesFr(this.id));
+        // BCS: single length prefix for all 3 G2 elements (matches arkworks-serde wrapper in Rust)
+        const ctG2Bytes = new Uint8Array(G2_SIZE * 3);
+        ctG2Bytes.set(g2ToBytes(this.ctG2[0]), 0);
+        ctG2Bytes.set(g2ToBytes(this.ctG2[1]), G2_SIZE);
+        ctG2Bytes.set(g2ToBytes(this.ctG2[2]), G2_SIZE * 2);
+        serializer.serializeBytes(ctG2Bytes);
+        this.paddedKey.serialize(serializer);
+        this.symmetricCiphertext.serialize(serializer);
+    }
+    static deserialize(deserializer) {
+        const id = leBytesToBigint(deserializer.deserializeBytes());
+        const ctG2Bytes = deserializer.deserializeBytes();
+        if (ctG2Bytes.length !== G2_SIZE * 3) {
+            throw new Error(`Expected ${G2_SIZE * 3} bytes for 3 G2 points, got ${ctG2Bytes.length}`);
+        }
+        const ctG2 = [
+            bytesToG2(ctG2Bytes.slice(0, G2_SIZE)),
+            bytesToG2(ctG2Bytes.slice(G2_SIZE, G2_SIZE * 2)),
+            bytesToG2(ctG2Bytes.slice(G2_SIZE * 2, G2_SIZE * 3)),
+        ];
+        const paddedKey = SymmetricKey.deserialize(deserializer);
+        const symmetricCiphertext = SymmetricCiphertext.deserialize(deserializer);
+        return new BIBECiphertext(id, ctG2, paddedKey, symmetricCiphertext);
+    }
+}
+/**
+ * Corresponds to the Rust type `aptos_batch_encryption::shared::ciphertext::Ciphertext`.
+ */
+export class Ciphertext extends Serializable {
+    vk;
+    bibeCt;
+    associatedDataBytes;
+    signature;
+    constructor(vk, bibeCt, associatedDataBytes, signature) {
+        super();
+        if (vk.length !== 32) {
+            throw new Error(`ed25519 public key must be 32 bytes, got ${vk.length}`);
+        }
+        if (signature.length !== 64) {
+            throw new Error(`ed25519 signature must be 64 bytes, got ${signature.length}`);
+        }
+        this.vk = vk;
+        this.bibeCt = bibeCt;
+        this.associatedDataBytes = associatedDataBytes;
+        this.signature = signature;
+    }
+    serialize(serializer) {
+        // Rust: ed25519 VKs serialized as variable bytes
+        serializer.serializeBytes(this.vk);
+        this.bibeCt.serialize(serializer);
+        serializer.serializeBytes(this.associatedDataBytes);
+        // Rust: signatures serialized as fixed bytes
+        serializer.serializeFixedBytes(this.signature);
+    }
+    static deserialize(deserializer) {
+        const vk = deserializer.deserializeBytes();
+        const bibeCt = BIBECiphertext.deserialize(deserializer);
+        const associatedDataBytes = deserializer.deserializeBytes();
+        const signature = deserializer.deserializeFixedBytes(64);
+        return new Ciphertext(vk, bibeCt, associatedDataBytes, signature);
+    }
+}
+/**
+ * Corresponds to the Rust type `aptos_batch_encryption::shared::encryption_key::EncryptionKey`.
+ *
+ * Deserialize from hex (API) -> bytes -> BCS -> EncryptionKey.
+ */
+export class EncryptionKey extends Serializable {
+    sigMpkG2;
+    tauG2;
+    constructor(sigMpkG2, tauG2) {
+        super();
+        this.sigMpkG2 = sigMpkG2;
+        this.tauG2 = tauG2;
+    }
+    serialize(serializer) {
+        serializer.serializeBytes(g2ToBytes(this.sigMpkG2));
+        serializer.serializeBytes(g2ToBytes(this.tauG2));
+    }
+    static deserialize(deserializer) {
+        const sigMpkG2 = bytesToG2(deserializer.deserializeBytes());
+        const tauG2 = bytesToG2(deserializer.deserializeBytes());
+        return new EncryptionKey(sigMpkG2, tauG2);
+    }
+    bibeEncrypt(plaintext, id) {
+        const G2 = bls12_381.G2.Point;
+        const Gt = bls12_381.fields.Fp12;
+        const r = [getRandomFr(), getRandomFr()];
+        const hashedEncryptionKey = hashG2Element(this.sigMpkG2);
+        const ctG2 = [
+            G2.BASE.multiply(r[0]).add(this.sigMpkG2.multiply(r[1])),
+            G2.BASE.multiply(id).subtract(this.tauG2).multiply(r[0]),
+            G2.BASE.negate().multiply(r[1]),
+        ];
+        // Target group: multiplication instead of addition (contrast with arkworks).
+        // hashToCurve returns H2CPoint which is structurally compatible with WeierstrassPoint
+        // but TypeScript doesn't unify them, so we cast via unknown.
+        const g1Point = hashedEncryptionKey.multiply(r[1]);
+        const otpSourceGt = Gt.inv(bls12_381.pairing(g1Point, this.sigMpkG2));
+        const otpSourceBytes = fp12ToLEBytes(otpSourceGt);
+        const otp = OneTimePad.fromSourceBytes(otpSourceBytes);
+        const symmetricKey = new SymmetricKey();
+        const paddedKey = otp.padKey(symmetricKey);
+        const symmetricCiphertext = symmetricKey.encrypt(plaintext);
+        return new BIBECiphertext(id, ctG2, paddedKey, symmetricCiphertext);
+    }
+    /**
+     * Encrypts a plaintext with associated data, producing a `Ciphertext`.
+     * Matches Rust: Id::from_verifying_key_and_ad(vk, associated_data) then CTEncrypt.
+     * The ciphertext Id must equal hash(vk || BCS(associated_data)) with ID_HASH_DST so the node can verify.
+     */
+    encrypt(plaintext, associatedData) {
+        const secretKey = ed25519.utils.randomSecretKey();
+        const publicKey = ed25519.getPublicKey(secretKey);
+        // Serialize associated data first (Rust: bcs::to_bytes(associated_data))
+        const adSerializer = new Serializer();
+        associatedData.serialize(adSerializer);
+        const associatedDataBytes = adSerializer.toUint8Array();
+        // Id = hash(vk || BCS(associated_data)) with domain separator; must match Rust Id::from_verifying_key_and_ad
+        const hashPreimage = new Uint8Array(publicKey.length + associatedDataBytes.length);
+        hashPreimage.set(publicKey, 0);
+        hashPreimage.set(associatedDataBytes, publicKey.length);
+        const hashedId = hashToFr(hashPreimage, ID_HASH_DST);
+        const bibeCt = this.bibeEncrypt(plaintext, hashedId);
+        // to_sign = (bibe_ct, associated_data_bytes) in Rust; BCS tuple = first element then second
+        const toSignSerializer = new Serializer();
+        bibeCt.serialize(toSignSerializer);
+        toSignSerializer.serializeBytes(associatedDataBytes);
+        const toSign = toSignSerializer.toUint8Array();
+        const signature = ed25519.sign(toSign, secretKey);
+        return new Ciphertext(publicKey, bibeCt, associatedDataBytes, signature);
+    }
+}
+//# sourceMappingURL=ciphertext.js.map

package/dist/core/crypto/encryption/ciphertext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciphertext.js","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/ciphertext.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sCAAsC;AAEtC;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACL,WAAW,EACX,aAAa,EACb,QAAQ,EACR,WAAW,EACX,UAAU,EACV,mBAAmB,EACnB,YAAY,GACb,MAAM,gBAAgB,CAAC;AAExB;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,YAAY;IAC9C,EAAE,CAAS;IACX,IAAI,CAA0B;IAC9B,SAAS,CAAe;IACxB,mBAAmB,CAAsB;IAEzC,YACE,EAAU,EACV,IAA6B,EAC7B,SAAuB,EACvB,mBAAwC;QAExC,KAAK,EAAE,CAAC;QACR,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,2FAA2F;QAC3F,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC9C,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QACpD,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,MAAM,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAClD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,GAAG,CAAC,+BAA+B,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,GAAG;YACX,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACtC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;YAChD,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;SACrD,CAAC;QACF,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC1E,OAAO,IAAI,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,YAAY;IAC1C,EAAE,CAAa;IACf,MAAM,CAAiB;IACvB,mBAAmB,CAAa;IAChC,SAAS,CAAa;IAEtB,YAAY,EAAc,EAAE,MAAsB,EAAE,mBAA+B,EAAE,SAAqB;QACxG,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,SAAS,CAAC,UAAsB;QAC9B,iDAAiD;QACjD,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAClC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpD,6CAA6C;QAC7C,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,MAAM,EAAE,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,mBAAmB,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,YAAY,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,QAAQ,CAAwB;IAChC,KAAK,CAAwB;IAE7B,YAAY,QAA+B,EAAE,KAA4B;QACvE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACzD,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAEO,WAAW,CAAC,SAAuB,EAAE,EAAU;QACrD,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC;QAC9B,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QAEjC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACzC,MAAM,mBAAmB,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG;YACX,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChC,CAAC;QAEF,6EAA6E;QAC7E,sFAAsF;QACtF,6DAA6D;QAC7D,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAwC,CAAC;QAC1F,MAAM,WAAW,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEtE,MAAM,cAAc,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE3C,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE5D,OAAO,IAAI,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,SAAuB,EAAE,cAA4B;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAElD,yEAAyE;QACzE,MAAM,YAAY,GAAG,IAAI,UAAU,EAAE,CAAC;QACtC,cAAc,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,mBAAmB,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC;QAExD,6GAA6G;QAC7G,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACnF,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC/B,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAErD,4FAA4F;QAC5F,MAAM,gBAAgB,GAAG,IAAI,UAAU,EAAE,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnC,gBAAgB,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAC;QAE/C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAElD,OAAO,IAAI,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/core/crypto/encryption/curveSerialization.d.ts

@@ -0,0 +1,17 @@
+import type { Fp2 } from "@noble/curves/abstract/tower.js";
+import type { WeierstrassPoint, WeierstrassPointCons } from "@noble/curves/abstract/weierstrass.js";
+export declare const G1_SIZE = 48;
+export declare const G2_SIZE = 96;
+/** Evaluates the short Weierstrass curve equation `x³ + a·x + b` at `x` over the field of `p`. */
+export declare function weierstrassEquation<T>(x: T, p: WeierstrassPointCons<T>): T;
+export declare function g1ToBytes(p: WeierstrassPoint<bigint>): Uint8Array;
+/**
+ * Compressed-G1 deserializer with prime-order subgroup check, matching aptos-core `ts-batch-encrypt`.
+ */
+export declare function bytesToG1(bytes: Uint8Array): WeierstrassPoint<bigint>;
+export declare function g2ToBytes(p: WeierstrassPoint<Fp2>): Uint8Array;
+/**
+ * Compressed-G2 deserializer with prime-order subgroup check, matching aptos-core `ts-batch-encrypt`.
+ */
+export declare function bytesToG2(bytes: Uint8Array): WeierstrassPoint<Fp2>;
+//# sourceMappingURL=curveSerialization.d.ts.map

package/dist/core/crypto/encryption/curveSerialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curveSerialization.d.ts","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/curveSerialization.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGpG,eAAO,MAAM,OAAO,KAAK,CAAC;AAC1B,eAAO,MAAM,OAAO,KAAK,CAAC;AAE1B,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAI1E;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,UAAU,CAEjE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAMrE;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,UAAU,CAE9D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAMlE"}

package/dist/core/crypto/encryption/curveSerialization.js

@@ -0,0 +1,38 @@
+// Copyright © Aptos Foundation
+// SPDX-License-Identifier: Apache-2.0
+import { bls12_381 } from "@noble/curves/bls12-381.js";
+export const G1_SIZE = 48;
+export const G2_SIZE = 96;
+/** Evaluates the short Weierstrass curve equation `x³ + a·x + b` at `x` over the field of `p`. */
+export function weierstrassEquation(x, p) {
+    const x2 = p.Fp.sqr(x);
+    const x3 = p.Fp.mul(x2, x);
+    return p.Fp.add(p.Fp.add(x3, p.Fp.mul(x, p.CURVE().a)), p.CURVE().b);
+}
+export function g1ToBytes(p) {
+    return p.toBytes(true);
+}
+/**
+ * Compressed-G1 deserializer with prime-order subgroup check, matching aptos-core `ts-batch-encrypt`.
+ */
+export function bytesToG1(bytes) {
+    const p = bls12_381.G1.Point.fromBytes(bytes);
+    if (!p.isTorsionFree()) {
+        throw new Error("Tried to deserialize invalid group element: not torsion free");
+    }
+    return p;
+}
+export function g2ToBytes(p) {
+    return p.toBytes(true);
+}
+/**
+ * Compressed-G2 deserializer with prime-order subgroup check, matching aptos-core `ts-batch-encrypt`.
+ */
+export function bytesToG2(bytes) {
+    const p = bls12_381.G2.Point.fromBytes(bytes);
+    if (!p.isTorsionFree()) {
+        throw new Error("Tried to deserialize invalid group element: not torsion free");
+    }
+    return p;
+}
+//# sourceMappingURL=curveSerialization.js.map

package/dist/core/crypto/encryption/curveSerialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curveSerialization.js","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/curveSerialization.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sCAAsC;AAItC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,CAAC;AAC1B,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,CAAC;AAE1B,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAI,CAAI,EAAE,CAA0B;IACrE,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAA2B;IACnD,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAwB;IAChD,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/crypto/encryption/fieldSerialization.d.ts

@@ -0,0 +1,12 @@
+import type { Fp2, Fp6, Fp12 } from "@noble/curves/abstract/tower.js";
+export declare function bigintToLEBytesInternal(val: bigint, numBytes: number): Uint8Array;
+export declare function bigintToLEBytesFr(val: bigint): Uint8Array;
+export declare function bigintToLEBytesFq(val: bigint): Uint8Array;
+export declare function leBytesToBigint(bytes: Uint8Array): bigint;
+export declare function fp2ToLEBytes(val: Fp2): Uint8Array;
+export declare function fp6ToLEBytes(val: Fp6): Uint8Array;
+export declare function fp12ToLEBytes(val: Fp12): Uint8Array;
+export declare function leBytesToFp2(bytes: Uint8Array): Fp2;
+export declare function leBytesToFp6(bytes: Uint8Array): Fp6;
+export declare function leBytesToFp12(bytes: Uint8Array): Fp12;
+//# sourceMappingURL=fieldSerialization.d.ts.map

package/dist/core/crypto/encryption/fieldSerialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldSerialization.d.ts","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/fieldSerialization.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iCAAiC,CAAC;AAOtE,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAQjF;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAEzD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAEzD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMzD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAKjD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAMjD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,GAAG,UAAU,CAKnD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAKnD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAMnD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAQrD"}

package/dist/core/crypto/encryption/fieldSerialization.js

@@ -0,0 +1,70 @@
+// Copyright © Aptos Foundation
+// SPDX-License-Identifier: Apache-2.0
+const BIGINT_SIZE = 48;
+const FP2_SIZE = 2 * BIGINT_SIZE;
+const FP6_SIZE = 3 * FP2_SIZE;
+const FP12_SIZE = 2 * FP6_SIZE;
+export function bigintToLEBytesInternal(val, numBytes) {
+    const ret = [];
+    let v = val;
+    for (let i = 0; i < numBytes; i++) {
+        ret.push(Number(BigInt.asUintN(8, v)));
+        v >>= 8n;
+    }
+    return Uint8Array.from(ret);
+}
+export function bigintToLEBytesFr(val) {
+    return bigintToLEBytesInternal(val, 32);
+}
+export function bigintToLEBytesFq(val) {
+    return bigintToLEBytesInternal(val, 48);
+}
+export function leBytesToBigint(bytes) {
+    let ret = 0n;
+    for (let i = 0; i < bytes.length; i++) {
+        ret += BigInt(bytes[i]) << (BigInt(i) * 8n);
+    }
+    return ret;
+}
+export function fp2ToLEBytes(val) {
+    const ret = new Uint8Array(FP2_SIZE);
+    ret.set(bigintToLEBytesFq(val.c0));
+    ret.set(bigintToLEBytesFq(val.c1), BIGINT_SIZE);
+    return ret;
+}
+export function fp6ToLEBytes(val) {
+    const ret = new Uint8Array(FP6_SIZE);
+    ret.set(fp2ToLEBytes(val.c0));
+    ret.set(fp2ToLEBytes(val.c1), FP2_SIZE);
+    ret.set(fp2ToLEBytes(val.c2), 2 * FP2_SIZE);
+    return ret;
+}
+export function fp12ToLEBytes(val) {
+    const ret = new Uint8Array(FP12_SIZE);
+    ret.set(fp6ToLEBytes(val.c0));
+    ret.set(fp6ToLEBytes(val.c1), FP6_SIZE);
+    return ret;
+}
+export function leBytesToFp2(bytes) {
+    return {
+        c0: leBytesToBigint(bytes.slice(0, BIGINT_SIZE)),
+        c1: leBytesToBigint(bytes.slice(BIGINT_SIZE, FP2_SIZE)),
+    };
+}
+export function leBytesToFp6(bytes) {
+    return {
+        c0: leBytesToFp2(bytes.slice(0, FP2_SIZE)),
+        c1: leBytesToFp2(bytes.slice(FP2_SIZE, 2 * FP2_SIZE)),
+        c2: leBytesToFp2(bytes.slice(2 * FP2_SIZE, FP6_SIZE)),
+    };
+}
+export function leBytesToFp12(bytes) {
+    if (bytes.length !== FP12_SIZE) {
+        throw new Error(`Expected ${FP12_SIZE} bytes for Fp12, got ${bytes.length}`);
+    }
+    return {
+        c0: leBytesToFp6(bytes.slice(0, FP6_SIZE)),
+        c1: leBytesToFp6(bytes.slice(FP6_SIZE, FP12_SIZE)),
+    };
+}
+//# sourceMappingURL=fieldSerialization.js.map

package/dist/core/crypto/encryption/fieldSerialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldSerialization.js","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/fieldSerialization.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sCAAsC;AAItC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,CAAC;AACjC,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC;AAE/B,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,QAAgB;IACnE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG,GAAG,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,uBAAuB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,uBAAuB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAS;IACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,OAAO;QACL,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAChD,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC1C,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;QACrD,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,QAAQ,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,YAAY,SAAS,wBAAwB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC1C,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/core/crypto/encryption/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Batch encryption primitives for encrypted transaction payloads.
+ *
+ * Ported from aptos-core/crates/aptos-batch-encryption. Encrypt-only — decryption helpers are not implemented
+ * because the SDK never decrypts ciphertexts client-side. `bytesToG1`/`bytesToG2` enforce the prime-order
+ * subgroup check on deserialization, matching aptos-core `ts-batch-encrypt`.
+ *
+ * @module
+ */
+export { EncryptionKey } from "./ciphertext.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/crypto/encryption/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/index.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/core/crypto/encryption/index.js

@@ -0,0 +1,13 @@
+// Copyright © Aptos Foundation
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Batch encryption primitives for encrypted transaction payloads.
+ *
+ * Ported from aptos-core/crates/aptos-batch-encryption. Encrypt-only — decryption helpers are not implemented
+ * because the SDK never decrypts ciphertexts client-side. `bytesToG1`/`bytesToG2` enforce the prime-order
+ * subgroup check on deserialization, matching aptos-core `ts-batch-encrypt`.
+ *
+ * @module
+ */
+export { EncryptionKey } from "./ciphertext.js";
+//# sourceMappingURL=index.js.map

package/dist/core/crypto/encryption/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/index.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sCAAsC;AAEtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/core/crypto/encryption/symmetric.d.ts

@@ -0,0 +1,38 @@
+import type { WeierstrassPoint } from "@noble/curves/abstract/weierstrass.js";
+import type { Fp2 } from "@noble/curves/abstract/tower.js";
+import { Serializable, Serializer } from "../../../bcs/serializer.js";
+import { Deserializer } from "../../../bcs/deserializer.js";
+/** Domain separation tag for Id::from_verifying_key_and_ad. Must match Rust ID_HASH_DST. */
+export declare const ID_HASH_DST: NodeJS.NonSharedUint8Array;
+export declare class OneTimePad extends Serializable {
+    otp: Uint8Array;
+    constructor(otp: Uint8Array);
+    static fromSourceBytes(otpSource: Uint8Array): OneTimePad;
+    padKey(value: SymmetricKey): SymmetricKey;
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): OneTimePad;
+}
+export declare class SymmetricCiphertext extends Serializable {
+    nonce: Uint8Array;
+    ctBody: Uint8Array;
+    constructor(nonce: Uint8Array, ctBody: Uint8Array);
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): SymmetricCiphertext;
+}
+export declare class SymmetricKey extends Serializable {
+    key: Uint8Array;
+    constructor(key?: Uint8Array);
+    encrypt(msg: Serializable): SymmetricCiphertext;
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): SymmetricKey;
+}
+export declare function hmacKdf(otpSource: Uint8Array): Uint8Array;
+export declare function getRandomFr(): bigint;
+/**
+ * Hash bytes to a field element in Fr. Used for Id and other hashes.
+ * @param input - bytes to hash (e.g. vk || BCS(associated_data) for Id)
+ * @param dst - optional domain separation tag; use ID_HASH_DST for Id::from_verifying_key_and_ad
+ */
+export declare function hashToFr(input: Uint8Array, dst?: Uint8Array): bigint;
+export declare function hashG2Element(g2Element: WeierstrassPoint<Fp2>): WeierstrassPoint<bigint>;
+//# sourceMappingURL=symmetric.d.ts.map

package/dist/core/crypto/encryption/symmetric.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"symmetric.d.ts","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/symmetric.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAY5D,4FAA4F;AAC5F,eAAO,MAAM,WAAW,4BAA6D,CAAC;AAEtF,qBAAa,UAAW,SAAQ,YAAY;IAC1C,GAAG,EAAE,UAAU,CAAC;gBAEJ,GAAG,EAAE,UAAU;IAQ3B,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU;IAKzD,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY;IAQzC,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAIvC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,UAAU;CAG3D;AAED,qBAAa,mBAAoB,SAAQ,YAAY;IACnD,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;gBAEP,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU;IASjD,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAKvC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,mBAAmB;CAKpE;AAED,qBAAa,YAAa,SAAQ,YAAY;IAC5C,GAAG,EAAE,UAAU,CAAC;gBAEJ,GAAG,CAAC,EAAE,UAAU;IAY5B,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,mBAAmB;IAS/C,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAIvC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,YAAY;CAG7D;AAED,wBAAgB,OAAO,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAEzD;AAED,wBAAgB,WAAW,IAAI,MAAM,CAGpC;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,GAAE,UAA8B,GAAG,MAAM,CAUvF;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,4BAG7D"}

package/dist/core/crypto/encryption/symmetric.js

@@ -0,0 +1,124 @@
+// Copyright © Aptos Foundation
+// SPDX-License-Identifier: Apache-2.0
+import { randomBytes } from "@noble/hashes/utils.js";
+import { gcm } from "@noble/ciphers/aes.js";
+import { hkdf } from "@noble/hashes/hkdf.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { hash_to_field } from "@noble/curves/abstract/hash-to-curve.js";
+import { bls12_381 } from "@noble/curves/bls12-381.js";
+import { Serializable, Serializer } from "../../../bcs/serializer.js";
+import { leBytesToBigint } from "./fieldSerialization.js";
+import { g2ToBytes } from "./curveSerialization.js";
+const HASH_G2_ELEMENT_DST = "APTOS_BATCH_ENCRYPTION_HASH_G2_ELEMENT";
+const HKDF_SALT = new TextEncoder().encode("APTOS_BATCH_ENCRYPTION_OTP");
+/** AES-128 key length and OTP length (both 16 bytes). */
+const SYMMETRIC_KEY_LENGTH = 16;
+/** AES-GCM nonce length. */
+const GCM_NONCE_LENGTH = 12;
+/** Domain separation tag for Id::from_verifying_key_and_ad. Must match Rust ID_HASH_DST. */
+export const ID_HASH_DST = new TextEncoder().encode("APTOS_BATCH_ENCRYPTION_HASH_ID");
+export class OneTimePad extends Serializable {
+    otp;
+    constructor(otp) {
+        super();
+        if (otp.length !== SYMMETRIC_KEY_LENGTH) {
+            throw new Error(`One-time-pad length must be ${SYMMETRIC_KEY_LENGTH} bytes`);
+        }
+        this.otp = otp;
+    }
+    static fromSourceBytes(otpSource) {
+        const derived = hmacKdf(otpSource);
+        return new OneTimePad(derived.slice(0, SYMMETRIC_KEY_LENGTH));
+    }
+    padKey(value) {
+        const paddedKey = new Uint8Array(SYMMETRIC_KEY_LENGTH);
+        for (let i = 0; i < SYMMETRIC_KEY_LENGTH; i++) {
+            paddedKey[i] = value.key[i] ^ this.otp[i];
+        }
+        return new SymmetricKey(paddedKey);
+    }
+    serialize(serializer) {
+        serializer.serializeFixedBytes(this.otp);
+    }
+    static deserialize(deserializer) {
+        return new OneTimePad(deserializer.deserializeFixedBytes(SYMMETRIC_KEY_LENGTH));
+    }
+}
+export class SymmetricCiphertext extends Serializable {
+    nonce;
+    ctBody;
+    constructor(nonce, ctBody) {
+        super();
+        if (nonce.length !== GCM_NONCE_LENGTH) {
+            throw new Error(`Nonce must be ${GCM_NONCE_LENGTH} bytes`);
+        }
+        this.nonce = nonce;
+        this.ctBody = ctBody;
+    }
+    serialize(serializer) {
+        serializer.serializeFixedBytes(this.nonce);
+        serializer.serializeBytes(this.ctBody);
+    }
+    static deserialize(deserializer) {
+        const nonce = deserializer.deserializeFixedBytes(GCM_NONCE_LENGTH);
+        const ctBody = deserializer.deserializeBytes();
+        return new SymmetricCiphertext(nonce, ctBody);
+    }
+}
+export class SymmetricKey extends Serializable {
+    key;
+    constructor(key) {
+        super();
+        if (key) {
+            if (key.length !== SYMMETRIC_KEY_LENGTH) {
+                throw new Error(`Must provide a key of size ${SYMMETRIC_KEY_LENGTH}`);
+            }
+            this.key = key;
+        }
+        else {
+            this.key = randomBytes(SYMMETRIC_KEY_LENGTH);
+        }
+    }
+    encrypt(msg) {
+        const nonce = randomBytes(GCM_NONCE_LENGTH);
+        const serializer = new Serializer();
+        msg.serialize(serializer);
+        const bytes = serializer.toUint8Array();
+        const ctBody = gcm(this.key, nonce).encrypt(bytes);
+        return new SymmetricCiphertext(nonce, ctBody);
+    }
+    serialize(serializer) {
+        serializer.serializeFixedBytes(this.key);
+    }
+    static deserialize(deserializer) {
+        return new SymmetricKey(deserializer.deserializeFixedBytes(SYMMETRIC_KEY_LENGTH));
+    }
+}
+export function hmacKdf(otpSource) {
+    return hkdf(sha256, otpSource, HKDF_SALT, new Uint8Array(), 32);
+}
+export function getRandomFr() {
+    const randomBigint = leBytesToBigint(randomBytes(128));
+    return bls12_381.fields.Fr.create(randomBigint);
+}
+/**
+ * Hash bytes to a field element in Fr. Used for Id and other hashes.
+ * @param input - bytes to hash (e.g. vk || BCS(associated_data) for Id)
+ * @param dst - optional domain separation tag; use ID_HASH_DST for Id::from_verifying_key_and_ad
+ */
+export function hashToFr(input, dst = new Uint8Array(0)) {
+    const options = {
+        DST: dst,
+        expand: "xmd",
+        hash: sha256,
+        p: bls12_381.fields.Fr.ORDER,
+        m: 1,
+        k: 128,
+    };
+    return hash_to_field(Uint8Array.from(input), 1, options)[0][0];
+}
+export function hashG2Element(g2Element) {
+    const bytes = g2ToBytes(g2Element);
+    return bls12_381.G1.hashToCurve(bytes, { DST: HASH_G2_ELEMENT_DST });
+}
+//# sourceMappingURL=symmetric.js.map

package/dist/core/crypto/encryption/symmetric.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symmetric.js","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/symmetric.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sCAAsC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAgB,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AACrE,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAEzE,yDAAyD;AACzD,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,4BAA4B;AAC5B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,4FAA4F;AAC5F,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAEtF,MAAM,OAAO,UAAW,SAAQ,YAAY;IAC1C,GAAG,CAAa;IAEhB,YAAY,GAAe;QACzB,KAAK,EAAE,CAAC;QACR,IAAI,GAAG,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,+BAA+B,oBAAoB,QAAQ,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,SAAqB;QAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,KAAmB;QACxB,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,OAAO,IAAI,UAAU,CAAC,YAAY,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAClF,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD,KAAK,CAAa;IAClB,MAAM,CAAa;IAEnB,YAAY,KAAiB,EAAE,MAAkB;QAC/C,KAAK,EAAE,CAAC;QACR,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iBAAiB,gBAAgB,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC/C,OAAO,IAAI,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,YAAY;IAC5C,GAAG,CAAa;IAEhB,YAAY,GAAgB;QAC1B,KAAK,EAAE,CAAC;QACR,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,GAAG,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,8BAA8B,oBAAoB,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAiB;QACvB,MAAM,KAAK,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;QACpC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO,IAAI,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,OAAO,IAAI,YAAY,CAAC,YAAY,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACpF,CAAC;CACF;AAED,MAAM,UAAU,OAAO,CAAC,SAAqB;IAC3C,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAiB,EAAE,MAAkB,IAAI,UAAU,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAY;QACvB,GAAG,EAAE,GAAG;QACR,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;QACZ,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK;QAC5B,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,GAAG;KACP,CAAC;IACF,OAAO,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAgC;IAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC,CAAC;AACvE,CAAC"}