@bitgo-beta/sdk-api 1.10.1-beta.210 → 1.10.1-beta.2100

package/dist/src/decryptV1.d.ts

@@ -0,0 +1,39 @@
+import * as t from 'io-ts';
+/**
+ * Upper bound on PBKDF2 iterations accepted from a v1 envelope. BitGo-produced
+ * v1 envelopes use 10,000; this cap is 10x that. Envelope validation enforces
+ * it up front before any KDF work runs.
+ */
+export declare const V1_MAX_ITER = 100000;
+/**
+ * io-ts codec for a v1 (SJCL) envelope.
+ *
+ * Enforces the shape and the `iter` cap up front, before any KDF work runs.
+ */
+declare const V1EnvelopeCodec: t.IntersectionC<[t.TypeC<{
+    v: t.LiteralC<1>;
+    iter: t.Type<number, number, unknown>;
+    ks: t.UnionC<[t.LiteralC<128>, t.LiteralC<256>]>;
+    ts: t.UnionC<[t.LiteralC<64>, t.LiteralC<96>, t.LiteralC<128>]>;
+    mode: t.LiteralC<"ccm">;
+    cipher: t.LiteralC<"aes">;
+    salt: t.Type<string, string, unknown>;
+    iv: t.Type<string, string, unknown>;
+    ct: t.Type<string, string, unknown>;
+}>, t.PartialC<{
+    adata: t.StringC;
+}>]>;
+export type V1Envelope = t.TypeOf<typeof V1EnvelopeCodec>;
+export declare function parseV1Envelope(ciphertext: string): V1Envelope;
+/**
+ * Decrypt a v1 (SJCL PBKDF2-SHA256 + AES-CCM) envelope with Node's native
+ * `node:crypto`.
+ *
+ * Node runtimes only: the `crypto` webpack substitutes in browser bundles
+ * (`crypto-browserify`) has no working AES-CCM, so `decryptV1WithFallback`
+ * routes browser runtimes straight to the frozen SJCL decoder instead of
+ * ever calling this.
+ */
+export declare function decryptV1(password: string, ciphertext: string): Promise<string>;
+export {};
+//# sourceMappingURL=decryptV1.d.ts.map

package/dist/src/decryptV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptV1.d.ts","sourceRoot":"","sources":["../../src/decryptV1.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,OAAO,CAAC;AAG3B;;;;GAIG;AACH,eAAO,MAAM,WAAW,SAAU,CAAC;AAEnC;;;;GAIG;AACH,QAAA,MAAM,eAAe;;;;;;;;;;;;IAenB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAE1D,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAQ9D;AAeD;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBrF"}

package/dist/src/decryptV1.js

@@ -0,0 +1,125 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.V1_MAX_ITER = void 0;
+exports.parseV1Envelope = parseV1Envelope;
+exports.decryptV1 = decryptV1;
+const sdk_core_1 = require("@bitgo-beta/sdk-core");
+const crypto_1 = require("crypto");
+const t = __importStar(require("io-ts"));
+const util_1 = require("util");
+/**
+ * Upper bound on PBKDF2 iterations accepted from a v1 envelope. BitGo-produced
+ * v1 envelopes use 10,000; this cap is 10x that. Envelope validation enforces
+ * it up front before any KDF work runs.
+ */
+exports.V1_MAX_ITER = 100000;
+/**
+ * io-ts codec for a v1 (SJCL) envelope.
+ *
+ * Enforces the shape and the `iter` cap up front, before any KDF work runs.
+ */
+const V1EnvelopeCodec = t.intersection([
+    t.type({
+        v: t.literal(1),
+        iter: (0, sdk_core_1.boundedInt)(1, exports.V1_MAX_ITER, 'iter'),
+        ks: t.union([t.literal(128), t.literal(256)]),
+        ts: t.union([t.literal(64), t.literal(96), t.literal(128)]),
+        mode: t.literal('ccm'),
+        cipher: t.literal('aes'),
+        salt: sdk_core_1.base64String,
+        iv: sdk_core_1.base64String,
+        ct: sdk_core_1.base64String,
+    }),
+    t.partial({
+        adata: t.string,
+    }),
+]);
+function parseV1Envelope(ciphertext) {
+    let parsed;
+    try {
+        parsed = JSON.parse(ciphertext);
+    }
+    catch {
+        throw new Error('v1 decrypt: invalid JSON envelope');
+    }
+    return (0, sdk_core_1.decodeWithCodec)(V1EnvelopeCodec, parsed, 'v1 decrypt: invalid envelope');
+}
+/**
+ * CCM length field size L, in bytes, chosen to encode the plaintext length.
+ *
+ * SJCL picks the smallest L in [2, 4) that can represent the plaintext length,
+ * then derives the nonce length as (15 - L). We mirror that so Node's CCM
+ * uses the same nonce framing as the SJCL encoder produced.
+ */
+function ccmNonceLength(plaintextLen) {
+    let L = 2;
+    while (L < 4 && plaintextLen >= Math.pow(2, 8 * L))
+        L++;
+    return 15 - L;
+}
+/**
+ * Decrypt a v1 (SJCL PBKDF2-SHA256 + AES-CCM) envelope with Node's native
+ * `node:crypto`.
+ *
+ * Node runtimes only: the `crypto` webpack substitutes in browser bundles
+ * (`crypto-browserify`) has no working AES-CCM, so `decryptV1WithFallback`
+ * routes browser runtimes straight to the frozen SJCL decoder instead of
+ * ever calling this.
+ */
+async function decryptV1(password, ciphertext) {
+    const env = parseV1Envelope(ciphertext);
+    const salt = Buffer.from(env.salt, 'base64');
+    const ivFull = Buffer.from(env.iv, 'base64');
+    const full = Buffer.from(env.ct, 'base64');
+    const tagBytes = env.ts / 8;
+    if (full.length < tagBytes)
+        throw new Error('v1 decrypt: ciphertext shorter than tag');
+    const cipher = full.subarray(0, full.length - tagBytes);
+    const authTag = full.subarray(full.length - tagBytes);
+    const nonceLen = ccmNonceLength(cipher.length);
+    if (ivFull.length < nonceLen)
+        throw new Error('v1 decrypt: iv shorter than nonce');
+    const iv = ivFull.subarray(0, nonceLen);
+    const keyBytes = env.ks / 8;
+    const key = await (0, util_1.promisify)(crypto_1.pbkdf2)(password, salt, env.iter, keyBytes, 'sha256');
+    const decipher = (0, crypto_1.createDecipheriv)(`aes-${env.ks}-ccm`, key, iv, { authTagLength: tagBytes });
+    decipher.setAuthTag(authTag);
+    const aad = env.adata ? Buffer.from(env.adata, 'utf8') : Buffer.alloc(0);
+    decipher.setAAD(aad, { plaintextLength: cipher.length });
+    const pt = Buffer.concat([decipher.update(cipher), decipher.final()]);
+    return pt.toString('utf8');
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/encrypt.d.ts

@@ -1,4 +1,3 @@
-/// <reference types="node" />
 /**
  * convert a 4 element Uint8Array to a 4 byte Number
  *
@@ -6,9 +5,46 @@
  * @return 4 byte number
  */
 export declare function bytesToWord(bytes?: Uint8Array | number[]): number;
-export declare function encrypt(password: string, plaintext: string, { salt, iv }?: {
-    salt?: Buffer | undefined;
-    iv?: Buffer | undefined;
-}): string;
-export declare function decrypt(password: string, ciphertext: string): string;
+/**
+ * Encrypt `plaintext` with `password`. Defaults to v2 (Argon2id + AES-256-GCM).
+ *
+ * Pass `encryptionVersion: 1` to produce a legacy v1 (SJCL) envelope; this is the
+ * only supported way to request v1 encryption.
+ */
+export declare function encrypt(password: string, plaintext: string, options?: {
+    salt?: Buffer;
+    iv?: Buffer;
+    adata?: string;
+    encryptionVersion?: 1 | 2;
+}): Promise<string>;
+/**
+ * v1 decrypt with an SJCL safety net.
+ *
+ * Node: native `node:crypto` first, SJCL fallback. Design intent during
+ * rollout: zero false negatives. Any native failure (envelope shape our
+ * stricter codec rejects, framing bug, unsupported algorithm, auth-tag
+ * mismatch, etc.) falls through to `sjcl.decrypt` so the caller is never
+ * blocked. The only exception is an iter-cap violation, which is rethrown
+ * to preserve DoS protection.
+ *
+ * Browser/worker: skip the native attempt entirely (its polyfilled AES-CCM
+ * is broken) and go straight to `sjcl.decrypt`, after running the same
+ * `parseV1Envelope` iter-cap check the native path would run.
+ *
+ * The console.warn only fires when native fails AND SJCL succeeds -- i.e.
+ * when the two engines disagree, which is the only signal worth
+ * investigating. Wrong password fails both engines silently and surfaces
+ * SJCL's auth error (mapped upstream to "incorrect password").
+ *
+ * `native` defaults to the module's `decryptV1` but is exposed as a parameter
+ * so tests can inject a throwing version to exercise the fallback path.
+ * `isBrowser` defaults to a real runtime check but is exposed so tests can
+ * exercise the browser-only branch under Node.
+ */
+export declare function decryptV1WithFallback(password: string, ciphertext: string, native?: (pw: string, ct: string) => Promise<string>, isBrowser?: boolean): Promise<string>;
+/**
+ * Auto-detect v1 (PBKDF2-SHA256 + AES-CCM) or v2 (Argon2id + AES-256-GCM)
+ * from the envelope `v` field and decrypt.
+ */
+export declare function decrypt(password: string, ciphertext: string): Promise<string>;
 //# sourceMappingURL=encrypt.d.ts.map

package/dist/src/encrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/encrypt.ts"],"names":[],"mappings":";AAGA;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,MAAM,CAMjE;AAED,wBAAgB,OAAO,CACrB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,EAAE,IAAqB,EAAE,EAAoB,EAAE;;;CAAK,GACnD,MAAM,CAoBR;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpE"}
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/encrypt.ts"],"names":[],"mappings":"AAiBA;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,MAAM,CAKjE;AAiCD;;;;;GAKG;AACH,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;CAAE,GAClF,OAAO,CAAC,MAAM,CAAC,CAKjB;AAaD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAa,EAC/D,SAAS,GAAE,OAA4B,GACtC,OAAO,CAAC,MAAM,CAAC,CAgCjB;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBnF"}

package/dist/src/encrypt.js

@@ -1,8 +1,56 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.decrypt = exports.encrypt = exports.bytesToWord = void 0;
-const sjcl = require("@bitgo-beta/sjcl");
+exports.bytesToWord = bytesToWord;
+exports.encrypt = encrypt;
+exports.decryptV1WithFallback = decryptV1WithFallback;
+exports.decrypt = decrypt;
+const sjcl = __importStar(require("@bitgo-beta/sjcl"));
 const crypto_1 = require("crypto");
+const decryptV1_1 = require("./decryptV1");
+const encryptV2_1 = require("./encryptV2");
+/**
+ * True in a browser main thread (`window`) or worker (`self`) runtime. The
+ * `crypto` webpack substitutes for `node:crypto` there (`crypto-browserify`,
+ * backed by `browserify-aes`) has no working AES-CCM, so a native v1 attempt
+ * would only pay for a doomed PBKDF2 run before falling back. Browser
+ * runtimes route v1 decrypt straight to SJCL instead.
+ */
+function isBrowserRuntime() {
+    return typeof window !== 'undefined' || typeof self !== 'undefined';
+}
 /**
  * convert a 4 element Uint8Array to a 4 byte Number
  *
@@ -15,14 +63,19 @@ function bytesToWord(bytes) {
     }
     return bytes.reduce((num, byte) => num * 0x100 + byte, 0);
 }
-exports.bytesToWord = bytesToWord;
-function encrypt(password, plaintext, { salt = crypto_1.randomBytes(8), iv = crypto_1.randomBytes(16) } = {}) {
-    if (salt.length !== 8) {
-        throw new Error(`salt must be 8 bytes`);
-    }
-    if (iv.length !== 16) {
-        throw new Error(`iv must be 16 bytes`);
-    }
+/**
+ * Internal v1 (SJCL PBKDF2-SHA256 + AES-256-CCM) encrypt helper.
+ *
+ * Not exported as part of the public encrypt/decrypt surface: callers must not use
+ * this directly. v1 output is requested via `encrypt(..., { encryptionVersion: 1 })`.
+ */
+function encryptV1(password, plaintext, options) {
+    const salt = options?.salt || (0, crypto_1.randomBytes)(8);
+    if (salt.length !== 8)
+        throw new Error('salt must be 8 bytes');
+    const iv = options?.iv || (0, crypto_1.randomBytes)(16);
+    if (iv.length !== 16)
+        throw new Error('iv must be 16 bytes');
     const encryptOptions = {
         iter: 10000,
         ks: 256,
@@ -34,11 +87,114 @@ function encrypt(password, plaintext, { salt = crypto_1.randomBytes(8), iv = cry
             bytesToWord(iv.slice(12, 16)),
         ],
     };
+    if (options?.adata)
+        encryptOptions.adata = options.adata;
     return sjcl.encrypt(password, plaintext, encryptOptions);
 }
-exports.encrypt = encrypt;
-function decrypt(password, ciphertext) {
-    return sjcl.decrypt(password, ciphertext);
+/**
+ * Encrypt `plaintext` with `password`. Defaults to v2 (Argon2id + AES-256-GCM).
+ *
+ * Pass `encryptionVersion: 1` to produce a legacy v1 (SJCL) envelope; this is the
+ * only supported way to request v1 encryption.
+ */
+async function encrypt(password, plaintext, options) {
+    if (options?.encryptionVersion === 1) {
+        return encryptV1(password, plaintext, options);
+    }
+    return (0, encryptV2_1.encryptV2)(password, plaintext, { adata: options?.adata });
 }
-exports.decrypt = decrypt;
-//# sourceMappingURL=data:application/json;base64,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
+/**
+ * Iter-cap violations are the only error we refuse to fall back on: SJCL has
+ * no upper bound on `iter`, so falling through to it would let a hostile
+ * envelope burn CPU running an inflated PBKDF2. Everything else -- codec
+ * rejection of a shape SJCL would accept, native crypto bug, auth-tag
+ * mismatch -- is safe to fall through to SJCL.
+ */
+function isIterCapViolation(err) {
+    return err instanceof Error && /iter:\s*expected integer|iter out of range/i.test(err.message);
+}
+/**
+ * v1 decrypt with an SJCL safety net.
+ *
+ * Node: native `node:crypto` first, SJCL fallback. Design intent during
+ * rollout: zero false negatives. Any native failure (envelope shape our
+ * stricter codec rejects, framing bug, unsupported algorithm, auth-tag
+ * mismatch, etc.) falls through to `sjcl.decrypt` so the caller is never
+ * blocked. The only exception is an iter-cap violation, which is rethrown
+ * to preserve DoS protection.
+ *
+ * Browser/worker: skip the native attempt entirely (its polyfilled AES-CCM
+ * is broken) and go straight to `sjcl.decrypt`, after running the same
+ * `parseV1Envelope` iter-cap check the native path would run.
+ *
+ * The console.warn only fires when native fails AND SJCL succeeds -- i.e.
+ * when the two engines disagree, which is the only signal worth
+ * investigating. Wrong password fails both engines silently and surfaces
+ * SJCL's auth error (mapped upstream to "incorrect password").
+ *
+ * `native` defaults to the module's `decryptV1` but is exposed as a parameter
+ * so tests can inject a throwing version to exercise the fallback path.
+ * `isBrowser` defaults to a real runtime check but is exposed so tests can
+ * exercise the browser-only branch under Node.
+ */
+async function decryptV1WithFallback(password, ciphertext, native = decryptV1_1.decryptV1, isBrowser = isBrowserRuntime()) {
+    if (isBrowser) {
+        try {
+            (0, decryptV1_1.parseV1Envelope)(ciphertext);
+        }
+        catch (parseErr) {
+            // Only honor the iter-cap violation: SJCL has no upper bound on `iter`,
+            // so falling through would let a hostile envelope burn CPU running an
+            // inflated PBKDF2. Any other shape rejection (e.g. a legacy envelope
+            // without a `v` field) is a form SJCL still accepts, so let
+            // sjcl.decrypt make the final call.
+            if (isIterCapViolation(parseErr))
+                throw parseErr;
+        }
+        return sjcl.decrypt(password, ciphertext);
+    }
+    try {
+        return await native(password, ciphertext);
+    }
+    catch (nativeErr) {
+        if (isIterCapViolation(nativeErr))
+            throw nativeErr;
+        let result;
+        try {
+            result = sjcl.decrypt(password, ciphertext);
+        }
+        catch (sjclErr) {
+            // Both engines rejected -- almost certainly a real auth failure.
+            // Rethrow SJCL's error so BitGoAPI.decrypt maps it to "incorrect password".
+            throw sjclErr;
+        }
+        // Native failed but SJCL succeeded -- real signal, log for the operator.
+        const message = nativeErr instanceof Error ? nativeErr.message : String(nativeErr);
+        // eslint-disable-next-line no-console
+        console.warn('[bitgo-sdk] v1 native decrypt failed; SJCL fallback succeeded:', message);
+        return result;
+    }
+}
+/**
+ * Auto-detect v1 (PBKDF2-SHA256 + AES-CCM) or v2 (Argon2id + AES-256-GCM)
+ * from the envelope `v` field and decrypt.
+ */
+async function decrypt(password, ciphertext) {
+    let envelopeVersion;
+    try {
+        const envelope = JSON.parse(ciphertext);
+        envelopeVersion = envelope.v;
+    }
+    catch {
+        throw new Error('decrypt: ciphertext is not valid JSON');
+    }
+    if (envelopeVersion === 2) {
+        // Do not catch: wrong password on v2 must not silently fall through to v1.
+        return (0, encryptV2_1.decryptV2)(password, ciphertext);
+    }
+    if (envelopeVersion !== undefined && envelopeVersion !== 1) {
+        throw new Error(`decrypt: unknown envelope version ${envelopeVersion}`);
+    }
+    return decryptV1WithFallback(password, ciphertext);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/encryptV2.d.ts

@@ -0,0 +1,67 @@
+import * as t from 'io-ts';
+/** Default Argon2id parameters per RFC 9106 second recommendation
+ * @see https://www.rfc-editor.org/rfc/rfc9106#section-4
+ */
+export declare const ARGON2_DEFAULTS: {
+    readonly memorySize: 65536;
+    readonly iterations: 3;
+    readonly parallelism: 4;
+    readonly hashLength: 32;
+    readonly saltLength: 16;
+};
+/** AES-256-GCM IV length in bytes */
+export declare const GCM_IV_LENGTH = 12;
+/** HKDF per-call salt length in bytes */
+export declare const HKDF_SALT_LENGTH = 32;
+declare const V2EnvelopeCodec: t.IntersectionC<[t.TypeC<{
+    v: t.LiteralC<2>;
+    iv: t.Type<string, string, unknown>;
+    ct: t.Type<string, string, unknown>;
+}>, t.PartialC<{
+    m: t.Type<number, number, unknown>;
+    t: t.Type<number, number, unknown>;
+    p: t.Type<number, number, unknown>;
+    salt: t.Type<string, string, unknown>;
+    /** Base64-encoded HKDF salt -- session envelopes and HKDF-only envelopes */
+    hkdfSalt: t.Type<string, string, unknown>;
+    /** Additional authenticated data for context binding (e.g. transaction hash + derivation path) */
+    adata: t.StringC;
+}>]>;
+export type V2Envelope = t.TypeOf<typeof V2EnvelopeCodec>;
+export declare function argon2ToHkdfKey(password: string, salt: Uint8Array, params: {
+    memorySize: number;
+    iterations: number;
+    parallelism: number;
+}): Promise<CryptoKey>;
+export declare function hkdfDeriveAesKey(hkdfKey: CryptoKey, hkdfSalt: Uint8Array, usage: KeyUsage, info?: Uint8Array): Promise<CryptoKey>;
+export declare function aesGcmEncrypt(key: CryptoKey, iv: Uint8Array, plaintext: string, additionalData?: Uint8Array): Promise<Uint8Array>;
+export declare function aesGcmDecrypt(key: CryptoKey, iv: Uint8Array, ct: Uint8Array, additionalData?: Uint8Array): Promise<string>;
+export declare function parseV2Envelope(ciphertext: string): V2Envelope;
+/**
+ * Encrypt plaintext using Argon2id KDF + AES-256-GCM.
+ *
+ * Returns a self-describing JSON v2 envelope containing all Argon2id parameters,
+ * salt, IV, and ciphertext -- fully standalone for decryption.
+ *
+ * For multi-call operations (MPC signing, wallet creation), prefer
+ * createEncryptionSession to run Argon2id once and derive per-call keys via HKDF.
+ */
+export declare function encryptV2(password: string, plaintext: string, options?: {
+    salt?: Uint8Array;
+    iv?: Uint8Array;
+    memorySize?: number;
+    iterations?: number;
+    parallelism?: number;
+    adata?: string;
+}): Promise<string>;
+/**
+ * Decrypt a v2 envelope. Auto-detects shape:
+ *   - Standard  (Argon2 params, no hkdfSalt): Argon2id -> AES-GCM
+ *   - Session   (Argon2 params + hkdfSalt): Argon2id -> HKDF -> AES-GCM
+ *   - HKDF-only (hkdfSalt, no Argon2 params): HKDF(password) -> AES-GCM
+ *
+ * All parameters are stored in the envelope -- no session context required.
+ */
+export declare function decryptV2(password: string, ciphertext: string): Promise<string>;
+export {};
+//# sourceMappingURL=encryptV2.d.ts.map

package/dist/src/encryptV2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptV2.d.ts","sourceRoot":"","sources":["../../src/encryptV2.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,CAAC,MAAM,OAAO,CAAC;AAK3B;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AAaX,qCAAqC;AACrC,eAAO,MAAM,aAAa,KAAK,CAAC;AAEhC,yCAAyC;AACzC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAcnC,QAAA,MAAM,eAAe;;;;;;;;;IAWjB,4EAA4E;;IAE5E,kGAAkG;;IAGpG,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAgD1D,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtE,OAAO,CAAC,SAAS,CAAC,CAGpB;AAOD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,QAAQ,EACf,IAAI,GAAE,UAA8B,GACnC,OAAO,CAAC,SAAS,CAAC,CAQpB;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,EACd,EAAE,EAAE,UAAU,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,CAAC,EAAE,UAAU,GAC1B,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,EACd,EAAE,EAAE,UAAU,EACd,EAAE,EAAE,UAAU,EACd,cAAc,CAAC,EAAE,UAAU,GAC1B,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAY9D;AAID;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAED;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BrF"}