@bitgo-beta/passkey-crypto 0.0.1-beta.336 → 0.0.1-beta.337

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitgo-beta/passkey-crypto",
-  "version": "0.0.1-beta.336",
+  "version": "0.0.1-beta.337",
   "description": "Pure cryptographic primitives for BitGo passkey (WebAuthn PRF) key derivation",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -35,12 +35,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@bitgo-beta/sdk-core": "8.2.1-beta.2062",
+    "@bitgo-beta/sdk-core": "8.2.1-beta.2063",
     "@bitgo/public-types": "6.75.0"
   },
   "devDependencies": {
     "@types/node": "^18.0.0",
     "sjcl": "1.0.1"
   },
-  "gitHead": "03f402bc570f300c1b2ca12b750123d4f4eeff93"
+  "gitHead": "bca7ed1b28f2fd78c1c8449270ef96f6f0e01101"
 }

package/dist/src/base64url.d.ts

@@ -1,16 +0,0 @@
-/**
- * Base64url encoding helpers.
- *
- * Base64url uses the same alphabet as standard base64 except `+` becomes `-`,
- * `/` becomes `_`, and padding (`=`) is stripped. Browser WebAuthn APIs and
- * the BitGo server both use base64url for credential IDs and PRF salts, so we
- * normalise to it everywhere on the client to avoid mismatches caused by
- * mixing encodings.
- */
-/** Converts a standard base64 string (or already-base64url string) to base64url. */
-export declare function toBase64Url(s: string): string;
-/** Encodes an ArrayBuffer or Buffer as a base64url string (no padding). */
-export declare function bufferToBase64Url(buffer: ArrayBuffer | Buffer): string;
-/** Decodes a base64url string into a Buffer. */
-export declare function base64UrlToBuffer(s: string): Buffer;
-//# sourceMappingURL=base64url.d.ts.map

package/dist/src/base64url.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"base64url.d.ts","sourceRoot":"","sources":["../../src/base64url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,MAAM,CAEtE;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/src/base64url.js

@@ -1,27 +0,0 @@
-"use strict";
-/**
- * Base64url encoding helpers.
- *
- * Base64url uses the same alphabet as standard base64 except `+` becomes `-`,
- * `/` becomes `_`, and padding (`=`) is stripped. Browser WebAuthn APIs and
- * the BitGo server both use base64url for credential IDs and PRF salts, so we
- * normalise to it everywhere on the client to avoid mismatches caused by
- * mixing encodings.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.toBase64Url = toBase64Url;
-exports.bufferToBase64Url = bufferToBase64Url;
-exports.base64UrlToBuffer = base64UrlToBuffer;
-/** Converts a standard base64 string (or already-base64url string) to base64url. */
-function toBase64Url(s) {
-    return s.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-}
-/** Encodes an ArrayBuffer or Buffer as a base64url string (no padding). */
-function bufferToBase64Url(buffer) {
-    return toBase64Url(Buffer.from(buffer).toString('base64'));
-}
-/** Decodes a base64url string into a Buffer. */
-function base64UrlToBuffer(s) {
-    return Buffer.from(s.replace(/-/g, '+').replace(/_/g, '/'), 'base64');
-}
-//# sourceMappingURL=data:application/json;base64,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

package/dist/src/deriveEnterpriseSalt.d.ts

@@ -1,18 +0,0 @@
-/**
- * Derives an enterprise-scoped PRF salt to prevent cross-enterprise key reuse.
- *
- * Computes HMAC-SHA256(key=prfSalt_base64url_decoded, data=enterpriseId_utf8).
- * The baseSalt must always come from the server — never generate it client-side.
- *
- * Returns base64url so the same encoding is used everywhere the salt is handled
- * (server storage, PRF eval input, prfHelpers lookup). Mixing encodings
- * (e.g. hex on the client, base64url on the server) caused the PRF to receive
- * different bytes during attach vs derive in browser environments where
- * `Buffer.toString('hex')` is unreliable.
- *
- * @param baseSalt - Server-provided base64url-encoded PRF salt
- * @param enterpriseId - Enterprise identifier
- * @returns Base64url-encoded HMAC-SHA256 digest (no padding)
- */
-export declare function deriveEnterpriseSalt(baseSalt: string, enterpriseId: string): string;
-//# sourceMappingURL=deriveEnterpriseSalt.d.ts.map

package/dist/src/deriveEnterpriseSalt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deriveEnterpriseSalt.d.ts","sourceRoot":"","sources":["../../src/deriveEnterpriseSalt.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAGnF"}

package/dist/src/deriveEnterpriseSalt.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deriveEnterpriseSalt = deriveEnterpriseSalt;
-const crypto_1 = require("crypto");
-const base64url_1 = require("./base64url");
-/**
- * Derives an enterprise-scoped PRF salt to prevent cross-enterprise key reuse.
- *
- * Computes HMAC-SHA256(key=prfSalt_base64url_decoded, data=enterpriseId_utf8).
- * The baseSalt must always come from the server — never generate it client-side.
- *
- * Returns base64url so the same encoding is used everywhere the salt is handled
- * (server storage, PRF eval input, prfHelpers lookup). Mixing encodings
- * (e.g. hex on the client, base64url on the server) caused the PRF to receive
- * different bytes during attach vs derive in browser environments where
- * `Buffer.toString('hex')` is unreliable.
- *
- * @param baseSalt - Server-provided base64url-encoded PRF salt
- * @param enterpriseId - Enterprise identifier
- * @returns Base64url-encoded HMAC-SHA256 digest (no padding)
- */
-function deriveEnterpriseSalt(baseSalt, enterpriseId) {
-    const keyBytes = (0, base64url_1.base64UrlToBuffer)(baseSalt);
-    return (0, base64url_1.toBase64Url)((0, crypto_1.createHmac)('sha256', keyBytes).update(enterpriseId).digest('base64'));
-}
-//# sourceMappingURL=data:application/json;base64,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

package/dist/src/derivePassword.d.ts

@@ -1,11 +0,0 @@
-/**
- * Derives a wallet passphrase from a WebAuthn PRF result.
- *
- * The PRF output (ArrayBuffer) is hex-encoded and used directly as the
- * walletPassphrase for SJCL-based encryption (bitgo.encrypt).
- *
- * @param prfResult - Raw PRF output from WebAuthn credential assertion
- * @returns Lowercase hex string to use as walletPassphrase
- */
-export declare function derivePassword(prfResult: ArrayBuffer): string;
-//# sourceMappingURL=derivePassword.d.ts.map

package/dist/src/derivePassword.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"derivePassword.d.ts","sourceRoot":"","sources":["../../src/derivePassword.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,WAAW,GAAG,MAAM,CAE7D"}

package/dist/src/derivePassword.js

@@ -1,16 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.derivePassword = derivePassword;
-/**
- * Derives a wallet passphrase from a WebAuthn PRF result.
- *
- * The PRF output (ArrayBuffer) is hex-encoded and used directly as the
- * walletPassphrase for SJCL-based encryption (bitgo.encrypt).
- *
- * @param prfResult - Raw PRF output from WebAuthn credential assertion
- * @returns Lowercase hex string to use as walletPassphrase
- */
-function derivePassword(prfResult) {
-    return Buffer.from(prfResult).toString('hex');
-}
-//# sourceMappingURL=data:application/json;base64,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

package/dist/src/webAuthnTypes.d.ts

@@ -1,18 +0,0 @@
-export type { WebAuthnOtpDevice } from '@bitgo/public-types';
-/** Result of a WebAuthn assertion with the PRF extension. */
-export interface PasskeyAuthResult {
-    prfResult: ArrayBuffer | undefined;
-    credentialId: string;
-    otpCode: string;
-}
-/** Options for WebAuthnProvider.get(). */
-export interface PasskeyGetOptions {
-    publicKey: PublicKeyCredentialRequestOptions;
-    evalByCredential?: Record<string, string>;
-}
-/** Abstraction over the WebAuthn credential API. */
-export interface WebAuthnProvider {
-    create(options: PublicKeyCredentialCreationOptions): Promise<PublicKeyCredential>;
-    get(options: PasskeyGetOptions): Promise<PasskeyAuthResult>;
-}
-//# sourceMappingURL=webAuthnTypes.d.ts.map

package/dist/src/webAuthnTypes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webAuthnTypes.d.ts","sourceRoot":"","sources":["../../src/webAuthnTypes.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,WAAW,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,iCAAiC,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClF,GAAG,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC7D"}

package/dist/src/webAuthnTypes.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=data:application/json;base64,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