@cardanowall/crypto-core 0.2.0 → 0.3.0

package/dist/sealed-poe.d.ts

@@ -1,7 +1,9 @@
+import { C as CanonicalCborValue } from './canonical-DHeJLYDR.js';
+
 type SealedKem = 'x25519' | 'mlkem768x25519';
 declare function chunkKemCt(value: Uint8Array): Uint8Array[];
 declare function joinKemCt(chunks: ReadonlyArray<Uint8Array>): Uint8Array;
-declare function slotsToMacCbor(slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>, kem: SealedKem): Uint8Array;
+declare function canonicalizeSlots(slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>, kem: SealedKem): CanonicalCborValue;
 
 declare const CARDANO_POE_HKDF_INFO_KEK: Uint8Array;
 declare const CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519: Uint8Array;
@@ -108,7 +110,7 @@ type TrialDecryptOnlyResult = {
 declare function eciesSealedPoeUnwrap(args: UnwrapArgs): UnwrapResult;
 declare function eciesSealedPoeTrialDecrypt(args: TrialDecryptOnlyArgs): TrialDecryptOnlyResult;
 
-type EciesSealedPoeErrorCode = 'ENC_SLOTS_EMPTY' | 'ENC_SLOTS_REQUIRED' | 'ENC_SLOTS_MAC_REQUIRED' | 'ENC_SLOTS_MAC_INVALID_LENGTH' | 'KEM_EPK_LENGTH_MISMATCH' | 'KEM_CT_LENGTH_MISMATCH' | 'INVALID_CEK_LENGTH' | 'NONCE_LENGTH_MISMATCH' | 'INVALID_EPHEMERAL_SECRET_LENGTH' | 'EPHEMERAL_SECRETS_COUNT_MISMATCH' | 'UNSUPPORTED_ENC_VERSION' | 'UNSUPPORTED_AEAD_ALG' | 'UNSUPPORTED_KEM_ALG' | 'INVALID_ENVELOPE_SHAPE' | 'INVALID_RECIPIENT_KEY' | 'WRAP_LENGTH_MISMATCH';
+type EciesSealedPoeErrorCode = 'ENC_SLOTS_EMPTY' | 'ENC_SLOTS_REQUIRED' | 'ENC_SLOTS_MAC_REQUIRED' | 'ENC_SLOTS_MAC_INVALID_LENGTH' | 'ENC_SLOTS_DUPLICATE_KEM_MATERIAL' | 'ENC_SLOTS_TOO_MANY' | 'ENC_ENVELOPE_TOO_LARGE' | 'KEM_EPK_LENGTH_MISMATCH' | 'KEM_CT_LENGTH_MISMATCH' | 'INVALID_CEK_LENGTH' | 'NONCE_LENGTH_MISMATCH' | 'INVALID_EPHEMERAL_SECRET_LENGTH' | 'EPHEMERAL_SECRETS_COUNT_MISMATCH' | 'UNSUPPORTED_ENC_VERSION' | 'UNSUPPORTED_AEAD_ALG' | 'UNSUPPORTED_KEM_ALG' | 'INVALID_ENVELOPE_SHAPE' | 'INVALID_RECIPIENT_KEY' | 'WRAP_LENGTH_MISMATCH';
 declare class EciesSealedPoeError extends Error {
     readonly code: EciesSealedPoeErrorCode;
     constructor(code: EciesSealedPoeErrorCode, message: string, options?: {
@@ -116,6 +118,56 @@ declare class EciesSealedPoeError extends Error {
     });
 }
 
+declare const CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PAYLOAD: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE: Uint8Array;
+declare const CARDANO_POE_XWING_KEK_SALT_PREFIX: Uint8Array;
+declare const CARDANO_POE_PW_NORM_PROFILE: "cardano-poe-pw-norm-v1";
+declare const MAX_SLOTS = 1024;
+declare const MAX_DECODED_ENVELOPE_BYTES = 65536;
+declare const MAX_SEALED_PLAINTEXT = 274877906880;
+declare const MAX_SEALED_CIPHERTEXT: number;
+declare function assertPlaintextWithinBound(plaintextLength: number): void;
+declare function assertCiphertextWithinBound(ciphertextLength: number): void;
+declare class SealedPayloadTooLargeError extends Error {
+    constructor(message: string);
+}
+declare function computeSlotsHash(args: {
+    kem: SealedKem;
+    nonce: Uint8Array;
+    slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>;
+}): Uint8Array;
+declare function adContentSlots(args: {
+    kem: SealedKem;
+    nonce: Uint8Array;
+    slotsHash: Uint8Array;
+    slotsMac: Uint8Array;
+}): Uint8Array;
+declare function adContentPassphrase(args: {
+    nonce: Uint8Array;
+    passphrase: {
+        alg: string;
+        salt: Uint8Array;
+        params: {
+            m: number;
+            t: number;
+            p: number;
+        };
+    };
+}): Uint8Array;
+declare function slotsPayloadKey(args: {
+    cek: Uint8Array;
+    nonce: Uint8Array;
+}): Uint8Array;
+declare function passphrasePayloadKey(args: {
+    cek: Uint8Array;
+    nonce: Uint8Array;
+}): Uint8Array;
+declare function xwingKekSalt(args: {
+    kemCt: Uint8Array;
+    pubR: Uint8Array;
+}): Uint8Array;
+
 interface ParsedSlotShape {
     readonly epk?: Uint8Array | undefined;
     readonly kem_ct?: ReadonlyArray<Uint8Array> | undefined;
@@ -131,4 +183,4 @@ interface ParsedEnvelopeShape {
 }
 declare function sealedEnvelopeFromParsed(enc: ParsedEnvelopeShape): SealedEnvelope | null;
 
-export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_SLOTS_MAC, EciesSealedPoeError, type EciesSealedPoeErrorCode, type Mlkem768X25519Slot, type ParsedEnvelopeShape, type ParsedSlotShape, type RecipientKeyBundle, type SealedEnvelope, type SealedKem, type SealedPoeOutput, type TrialDecryptOnlyArgs, type TrialDecryptOnlyResult, type UnwrapArgs, type UnwrapArgsBundle, type UnwrapArgsMultiPriv, type UnwrapArgsSinglePriv, type UnwrapFailureReason, type UnwrapResult, type WrapArgs, type X25519Slot, chunkKemCt, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, joinKemCt, sealedEnvelopeFromParsed, slotsToMacCbor, uniformIndexBelow };
+export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, EciesSealedPoeError, type EciesSealedPoeErrorCode, MAX_DECODED_ENVELOPE_BYTES, MAX_SEALED_CIPHERTEXT, MAX_SEALED_PLAINTEXT, MAX_SLOTS, type Mlkem768X25519Slot, type ParsedEnvelopeShape, type ParsedSlotShape, type RecipientKeyBundle, type SealedEnvelope, type SealedKem, SealedPayloadTooLargeError, type SealedPoeOutput, type TrialDecryptOnlyArgs, type TrialDecryptOnlyResult, type UnwrapArgs, type UnwrapArgsBundle, type UnwrapArgsMultiPriv, type UnwrapArgsSinglePriv, type UnwrapFailureReason, type UnwrapResult, type WrapArgs, type X25519Slot, adContentPassphrase, adContentSlots, assertCiphertextWithinBound, assertPlaintextWithinBound, canonicalizeSlots, chunkKemCt, computeSlotsHash, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, joinKemCt, passphrasePayloadKey, sealedEnvelopeFromParsed, slotsPayloadKey, uniformIndexBelow, xwingKekSalt };