@cardanowall/crypto-core 0.3.0 → 0.4.0

package/dist/sealed-poe.d.cts

@@ -1,31 +1,84 @@
-import { C as CanonicalCborValue } from './canonical-DHeJLYDR.cjs';
+declare const CARDANO_POE_ITEM_HASHES_PREFIX: Uint8Array;
+declare const CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX: Uint8Array;
+declare const CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_SLOTS_MAC: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PAYLOAD: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE: Uint8Array;
+declare const CARDANO_POE_X25519_KEK_SALT_PREFIX: Uint8Array;
+declare const CARDANO_POE_XWING_KEK_SALT_PREFIX: Uint8Array;
+declare const CARDANO_POE_PW_NORM_PROFILE: "cardano-poe-pw-norm-v1";
+declare const MAX_SLOTS = 1024;
+declare const MAX_DECODED_ENVELOPE_BYTES = 65536;
+type ItemHashes = Readonly<Record<string, Uint8Array>>;
+declare function itemHashesHash(hashes: ItemHashes): Uint8Array;
+declare function computeSlotsHash(args: {
+    aead: string;
+    kem: SealedKem;
+    nonce: Uint8Array;
+    slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>;
+    hashesHash: Uint8Array;
+}): Uint8Array;
+declare function computePassphraseHash(args: {
+    aead: string;
+    nonce: Uint8Array;
+    hashesHash: Uint8Array;
+    salt: Uint8Array;
+    params: {
+        m: number;
+        t: number;
+        p: number;
+    };
+}): Uint8Array;
+declare function computeSlotsMac(args: {
+    cek: Uint8Array;
+    slotsHash: Uint8Array;
+}): Uint8Array;
+declare function computePassphraseCommitment(args: {
+    cek: Uint8Array;
+    pwHash: Uint8Array;
+}): Uint8Array;
+declare function slotsPayloadKey(args: {
+    cek: Uint8Array;
+    nonce: Uint8Array;
+}): Uint8Array;
+declare function passphrasePayloadKey(args: {
+    cek: Uint8Array;
+    nonce: Uint8Array;
+}): Uint8Array;
+declare function x25519KekSalt(args: {
+    nonce: Uint8Array;
+    epk: Uint8Array;
+    pubR: Uint8Array;
+}): Uint8Array;
+declare function xwingKekSalt(args: {
+    nonce: Uint8Array;
+    kemCt: Uint8Array;
+    pubR: Uint8Array;
+}): Uint8Array;
 
 type SealedKem = 'x25519' | 'mlkem768x25519';
-declare function chunkKemCt(value: Uint8Array): Uint8Array[];
-declare function joinKemCt(chunks: ReadonlyArray<Uint8Array>): Uint8Array;
-declare function canonicalizeSlots(slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>, kem: SealedKem): CanonicalCborValue;
-
+declare const SEALED_POE_AEAD: "chacha20-poly1305-stream64k";
 declare const CARDANO_POE_HKDF_INFO_KEK: Uint8Array;
 declare const CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519: Uint8Array;
-declare const CARDANO_POE_HKDF_INFO_SLOTS_MAC: Uint8Array;
 interface X25519Slot {
     readonly epk: Uint8Array;
     readonly wrap: Uint8Array;
 }
 interface Mlkem768X25519Slot {
-    readonly kem_ct: ReadonlyArray<Uint8Array>;
+    readonly kem_ct: Uint8Array;
     readonly wrap: Uint8Array;
 }
 type SealedEnvelope = {
     readonly scheme: 1;
-    readonly aead: 'xchacha20-poly1305';
+    readonly aead: typeof SEALED_POE_AEAD;
     readonly kem: 'x25519';
     readonly nonce: Uint8Array;
     readonly slots: ReadonlyArray<X25519Slot>;
     readonly slots_mac: Uint8Array;
 } | {
     readonly scheme: 1;
-    readonly aead: 'xchacha20-poly1305';
+    readonly aead: typeof SEALED_POE_AEAD;
     readonly kem: 'mlkem768x25519';
     readonly nonce: Uint8Array;
     readonly slots: ReadonlyArray<Mlkem768X25519Slot>;
@@ -37,6 +90,7 @@ interface SealedPoeOutput {
 }
 interface WrapArgs {
     readonly plaintext: Uint8Array;
+    readonly hashes: ItemHashes;
     readonly recipientPublicKeys: ReadonlyArray<Uint8Array>;
     readonly kem?: SealedKem;
     readonly cek?: Uint8Array;
@@ -63,7 +117,7 @@ interface RecipientKeyBundle {
 interface UnwrapArgsCommon {
     readonly envelope: SealedEnvelope;
     readonly ciphertext: Uint8Array;
-    readonly constantTimeN?: boolean;
+    readonly hashes: ItemHashes;
     readonly _slotsAttemptedOut?: {
         count: number;
         perPrivCounts?: number[];
@@ -84,7 +138,7 @@ interface UnwrapArgsBundle extends UnwrapArgsCommon {
 type UnwrapArgs = UnwrapArgsSinglePriv | UnwrapArgsMultiPriv | UnwrapArgsBundle;
 interface TrialDecryptOnlyArgsCommon {
     readonly envelope: SealedEnvelope;
-    readonly constantTimeN?: boolean;
+    readonly hashes: ItemHashes;
     readonly _slotsAttemptedOut?: {
         count: number;
         perPrivCounts?: number[];
@@ -103,14 +157,12 @@ type TrialDecryptOnlyResult = {
     readonly slotIdx: number;
     readonly cek: Uint8Array;
 } | {
-    readonly kind: 'no_aead_pass';
-} | {
-    readonly kind: 'aead_pass_no_mac_match';
+    readonly kind: 'no_match';
 };
 declare function eciesSealedPoeUnwrap(args: UnwrapArgs): UnwrapResult;
 declare function eciesSealedPoeTrialDecrypt(args: TrialDecryptOnlyArgs): TrialDecryptOnlyResult;
 
-type EciesSealedPoeErrorCode = 'ENC_SLOTS_EMPTY' | 'ENC_SLOTS_REQUIRED' | 'ENC_SLOTS_MAC_REQUIRED' | 'ENC_SLOTS_MAC_INVALID_LENGTH' | 'ENC_SLOTS_DUPLICATE_KEM_MATERIAL' | 'ENC_SLOTS_TOO_MANY' | 'ENC_ENVELOPE_TOO_LARGE' | 'KEM_EPK_LENGTH_MISMATCH' | 'KEM_CT_LENGTH_MISMATCH' | 'INVALID_CEK_LENGTH' | 'NONCE_LENGTH_MISMATCH' | 'INVALID_EPHEMERAL_SECRET_LENGTH' | 'EPHEMERAL_SECRETS_COUNT_MISMATCH' | 'UNSUPPORTED_ENC_VERSION' | 'UNSUPPORTED_AEAD_ALG' | 'UNSUPPORTED_KEM_ALG' | 'INVALID_ENVELOPE_SHAPE' | 'INVALID_RECIPIENT_KEY' | 'WRAP_LENGTH_MISMATCH';
+type EciesSealedPoeErrorCode = 'ENC_SLOTS_EMPTY' | 'ENC_SLOTS_MAC_INVALID_LENGTH' | 'ENC_SLOTS_DUPLICATE_KEM_MATERIAL' | 'ENC_SLOTS_TOO_MANY' | 'ENC_ENVELOPE_TOO_LARGE' | 'ENC_REQUIRES_CONTENT_HASH' | 'ENC_PASSPHRASE_EMPTY' | 'ENC_PASSPHRASE_UNNORMALIZABLE' | 'ENC_PASSPHRASE_ALG_UNSUPPORTED' | 'ENC_PASSPHRASE_SALT_TOO_SHORT' | 'ENC_PASSPHRASE_SALT_TOO_LONG' | 'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW' | 'KEM_EPK_LENGTH_MISMATCH' | 'KEM_CT_LENGTH_MISMATCH' | 'NONCE_LENGTH_MISMATCH' | 'WRAP_LENGTH_MISMATCH' | 'UNSUPPORTED_ENVELOPE_SCHEME' | 'UNSUPPORTED_AEAD_ALG' | 'UNSUPPORTED_KEM_ALG' | 'KDF_DERIVATION_FAILED' | 'INVALID_CEK_LENGTH' | 'INVALID_EPHEMERAL_SECRET_LENGTH' | 'EPHEMERAL_SECRETS_COUNT_MISMATCH' | 'INVALID_RECIPIENT_KEY' | 'INVALID_PASSPHRASE_PARAMS' | 'PASSPHRASE_INPUT_TOO_LONG';
 declare class EciesSealedPoeError extends Error {
     readonly code: EciesSealedPoeErrorCode;
     constructor(code: EciesSealedPoeErrorCode, message: string, options?: {
@@ -118,59 +170,86 @@ declare class EciesSealedPoeError extends Error {
     });
 }
 
-declare const CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX: Uint8Array;
-declare const CARDANO_POE_HKDF_INFO_PAYLOAD: Uint8Array;
-declare const CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE: Uint8Array;
-declare const CARDANO_POE_XWING_KEK_SALT_PREFIX: Uint8Array;
-declare const CARDANO_POE_PW_NORM_PROFILE: "cardano-poe-pw-norm-v1";
-declare const MAX_SLOTS = 1024;
-declare const MAX_DECODED_ENVELOPE_BYTES = 65536;
-declare const MAX_SEALED_PLAINTEXT = 274877906880;
-declare const MAX_SEALED_CIPHERTEXT: number;
-declare function assertPlaintextWithinBound(plaintextLength: number): void;
-declare function assertCiphertextWithinBound(ciphertextLength: number): void;
-declare class SealedPayloadTooLargeError extends Error {
-    constructor(message: string);
+declare const CHUNK_SIZE = 65536;
+declare const TAG_SIZE = 16;
+declare class StreamTamperedError extends Error {
+    readonly code: "TAMPERED_CIPHERTEXT";
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
 }
-declare function computeSlotsHash(args: {
-    kem: SealedKem;
-    nonce: Uint8Array;
-    slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>;
+declare class StreamSealer {
+    private readonly payloadKey;
+    private readonly nonce;
+    private chunkIndex;
+    constructor(payloadKey: Uint8Array);
+    sealChunk(plaintext: Uint8Array, final: boolean): Uint8Array;
+}
+declare class StreamOpener {
+    private readonly payloadKey;
+    private readonly nonce;
+    private chunkIndex;
+    constructor(payloadKey: Uint8Array);
+    openChunk(sealedChunk: Uint8Array, final: boolean): Uint8Array;
+}
+declare function streamSeal(args: {
+    payloadKey: Uint8Array;
+    plaintext: Uint8Array;
 }): Uint8Array;
-declare function adContentSlots(args: {
-    kem: SealedKem;
-    nonce: Uint8Array;
-    slotsHash: Uint8Array;
-    slotsMac: Uint8Array;
+declare function streamOpen(args: {
+    payloadKey: Uint8Array;
+    ciphertext: Uint8Array;
 }): Uint8Array;
-declare function adContentPassphrase(args: {
-    nonce: Uint8Array;
-    passphrase: {
-        alg: string;
-        salt: Uint8Array;
-        params: {
-            m: number;
-            t: number;
-            p: number;
-        };
+
+interface PassphraseParams {
+    readonly m: number;
+    readonly t: number;
+    readonly p: number;
+}
+interface PassphraseSealedEnvelope {
+    readonly scheme: 1;
+    readonly aead: typeof SEALED_POE_AEAD;
+    readonly nonce: Uint8Array;
+    readonly passphrase: {
+        readonly alg: 'argon2id';
+        readonly salt: Uint8Array;
+        readonly params: PassphraseParams;
     };
-}): Uint8Array;
-declare function slotsPayloadKey(args: {
-    cek: Uint8Array;
-    nonce: Uint8Array;
-}): Uint8Array;
-declare function passphrasePayloadKey(args: {
-    cek: Uint8Array;
-    nonce: Uint8Array;
-}): Uint8Array;
-declare function xwingKekSalt(args: {
-    kemCt: Uint8Array;
-    pubR: Uint8Array;
-}): Uint8Array;
+}
+interface PassphraseSealArgs {
+    readonly plaintext: Uint8Array;
+    readonly hashes: ItemHashes;
+    readonly passphrase: string;
+    readonly salt?: Uint8Array;
+    readonly params?: PassphraseParams;
+    readonly nonce?: Uint8Array;
+}
+interface PassphraseSealedPoeOutput {
+    readonly envelope: PassphraseSealedEnvelope;
+    readonly blob: Uint8Array;
+}
+interface PassphraseOpenArgs {
+    readonly envelope: PassphraseSealedEnvelope;
+    readonly blob: Uint8Array;
+    readonly passphrase: string;
+    readonly hashes: ItemHashes;
+}
+type PassphraseOpenResult = {
+    readonly matched: true;
+    readonly plaintext: Uint8Array;
+} | {
+    readonly matched: false;
+    readonly reason: 'TAMPERED_CIPHERTEXT';
+};
+declare function passphraseSealedPoeSeal(args: PassphraseSealArgs): Promise<PassphraseSealedPoeOutput>;
+declare function passphraseSealedPoeOpen(args: PassphraseOpenArgs): Promise<PassphraseOpenResult>;
+
+declare const MAX_PASSPHRASE_INPUT_BYTES = 4096;
+declare function normalizePassphrase(passphrase: string): Uint8Array;
 
 interface ParsedSlotShape {
     readonly epk?: Uint8Array | undefined;
-    readonly kem_ct?: ReadonlyArray<Uint8Array> | undefined;
+    readonly kem_ct?: Uint8Array | undefined;
     readonly wrap?: Uint8Array | undefined;
 }
 interface ParsedEnvelopeShape {
@@ -183,4 +262,4 @@ interface ParsedEnvelopeShape {
 }
 declare function sealedEnvelopeFromParsed(enc: ParsedEnvelopeShape): SealedEnvelope | null;
 
-export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, EciesSealedPoeError, type EciesSealedPoeErrorCode, MAX_DECODED_ENVELOPE_BYTES, MAX_SEALED_CIPHERTEXT, MAX_SEALED_PLAINTEXT, MAX_SLOTS, type Mlkem768X25519Slot, type ParsedEnvelopeShape, type ParsedSlotShape, type RecipientKeyBundle, type SealedEnvelope, type SealedKem, SealedPayloadTooLargeError, type SealedPoeOutput, type TrialDecryptOnlyArgs, type TrialDecryptOnlyResult, type UnwrapArgs, type UnwrapArgsBundle, type UnwrapArgsMultiPriv, type UnwrapArgsSinglePriv, type UnwrapFailureReason, type UnwrapResult, type WrapArgs, type X25519Slot, adContentPassphrase, adContentSlots, assertCiphertextWithinBound, assertPlaintextWithinBound, canonicalizeSlots, chunkKemCt, computeSlotsHash, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, joinKemCt, passphrasePayloadKey, sealedEnvelopeFromParsed, slotsPayloadKey, uniformIndexBelow, xwingKekSalt };
+export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, EciesSealedPoeError, type EciesSealedPoeErrorCode, type ItemHashes, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, type Mlkem768X25519Slot, type ParsedEnvelopeShape, type ParsedSlotShape, type PassphraseOpenArgs, type PassphraseOpenResult, type PassphraseParams, type PassphraseSealArgs, type PassphraseSealedEnvelope, type PassphraseSealedPoeOutput, type RecipientKeyBundle, SEALED_POE_AEAD, type SealedEnvelope, type SealedKem, type SealedPoeOutput, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, type TrialDecryptOnlyArgs, type TrialDecryptOnlyResult, type UnwrapArgs, type UnwrapArgsBundle, type UnwrapArgsMultiPriv, type UnwrapArgsSinglePriv, type UnwrapFailureReason, type UnwrapResult, type WrapArgs, type X25519Slot, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, itemHashesHash, normalizePassphrase, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, slotsPayloadKey, streamOpen, streamSeal, uniformIndexBelow, x25519KekSalt, xwingKekSalt };

package/dist/sealed-poe.d.ts

@@ -1,31 +1,84 @@
-import { C as CanonicalCborValue } from './canonical-DHeJLYDR.js';
+declare const CARDANO_POE_ITEM_HASHES_PREFIX: Uint8Array;
+declare const CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX: Uint8Array;
+declare const CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_SLOTS_MAC: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PAYLOAD: Uint8Array;
+declare const CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE: Uint8Array;
+declare const CARDANO_POE_X25519_KEK_SALT_PREFIX: Uint8Array;
+declare const CARDANO_POE_XWING_KEK_SALT_PREFIX: Uint8Array;
+declare const CARDANO_POE_PW_NORM_PROFILE: "cardano-poe-pw-norm-v1";
+declare const MAX_SLOTS = 1024;
+declare const MAX_DECODED_ENVELOPE_BYTES = 65536;
+type ItemHashes = Readonly<Record<string, Uint8Array>>;
+declare function itemHashesHash(hashes: ItemHashes): Uint8Array;
+declare function computeSlotsHash(args: {
+    aead: string;
+    kem: SealedKem;
+    nonce: Uint8Array;
+    slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>;
+    hashesHash: Uint8Array;
+}): Uint8Array;
+declare function computePassphraseHash(args: {
+    aead: string;
+    nonce: Uint8Array;
+    hashesHash: Uint8Array;
+    salt: Uint8Array;
+    params: {
+        m: number;
+        t: number;
+        p: number;
+    };
+}): Uint8Array;
+declare function computeSlotsMac(args: {
+    cek: Uint8Array;
+    slotsHash: Uint8Array;
+}): Uint8Array;
+declare function computePassphraseCommitment(args: {
+    cek: Uint8Array;
+    pwHash: Uint8Array;
+}): Uint8Array;
+declare function slotsPayloadKey(args: {
+    cek: Uint8Array;
+    nonce: Uint8Array;
+}): Uint8Array;
+declare function passphrasePayloadKey(args: {
+    cek: Uint8Array;
+    nonce: Uint8Array;
+}): Uint8Array;
+declare function x25519KekSalt(args: {
+    nonce: Uint8Array;
+    epk: Uint8Array;
+    pubR: Uint8Array;
+}): Uint8Array;
+declare function xwingKekSalt(args: {
+    nonce: Uint8Array;
+    kemCt: Uint8Array;
+    pubR: Uint8Array;
+}): Uint8Array;
 
 type SealedKem = 'x25519' | 'mlkem768x25519';
-declare function chunkKemCt(value: Uint8Array): Uint8Array[];
-declare function joinKemCt(chunks: ReadonlyArray<Uint8Array>): Uint8Array;
-declare function canonicalizeSlots(slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>, kem: SealedKem): CanonicalCborValue;
-
+declare const SEALED_POE_AEAD: "chacha20-poly1305-stream64k";
 declare const CARDANO_POE_HKDF_INFO_KEK: Uint8Array;
 declare const CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519: Uint8Array;
-declare const CARDANO_POE_HKDF_INFO_SLOTS_MAC: Uint8Array;
 interface X25519Slot {
     readonly epk: Uint8Array;
     readonly wrap: Uint8Array;
 }
 interface Mlkem768X25519Slot {
-    readonly kem_ct: ReadonlyArray<Uint8Array>;
+    readonly kem_ct: Uint8Array;
     readonly wrap: Uint8Array;
 }
 type SealedEnvelope = {
     readonly scheme: 1;
-    readonly aead: 'xchacha20-poly1305';
+    readonly aead: typeof SEALED_POE_AEAD;
     readonly kem: 'x25519';
     readonly nonce: Uint8Array;
     readonly slots: ReadonlyArray<X25519Slot>;
     readonly slots_mac: Uint8Array;
 } | {
     readonly scheme: 1;
-    readonly aead: 'xchacha20-poly1305';
+    readonly aead: typeof SEALED_POE_AEAD;
     readonly kem: 'mlkem768x25519';
     readonly nonce: Uint8Array;
     readonly slots: ReadonlyArray<Mlkem768X25519Slot>;
@@ -37,6 +90,7 @@ interface SealedPoeOutput {
 }
 interface WrapArgs {
     readonly plaintext: Uint8Array;
+    readonly hashes: ItemHashes;
     readonly recipientPublicKeys: ReadonlyArray<Uint8Array>;
     readonly kem?: SealedKem;
     readonly cek?: Uint8Array;
@@ -63,7 +117,7 @@ interface RecipientKeyBundle {
 interface UnwrapArgsCommon {
     readonly envelope: SealedEnvelope;
     readonly ciphertext: Uint8Array;
-    readonly constantTimeN?: boolean;
+    readonly hashes: ItemHashes;
     readonly _slotsAttemptedOut?: {
         count: number;
         perPrivCounts?: number[];
@@ -84,7 +138,7 @@ interface UnwrapArgsBundle extends UnwrapArgsCommon {
 type UnwrapArgs = UnwrapArgsSinglePriv | UnwrapArgsMultiPriv | UnwrapArgsBundle;
 interface TrialDecryptOnlyArgsCommon {
     readonly envelope: SealedEnvelope;
-    readonly constantTimeN?: boolean;
+    readonly hashes: ItemHashes;
     readonly _slotsAttemptedOut?: {
         count: number;
         perPrivCounts?: number[];
@@ -103,14 +157,12 @@ type TrialDecryptOnlyResult = {
     readonly slotIdx: number;
     readonly cek: Uint8Array;
 } | {
-    readonly kind: 'no_aead_pass';
-} | {
-    readonly kind: 'aead_pass_no_mac_match';
+    readonly kind: 'no_match';
 };
 declare function eciesSealedPoeUnwrap(args: UnwrapArgs): UnwrapResult;
 declare function eciesSealedPoeTrialDecrypt(args: TrialDecryptOnlyArgs): TrialDecryptOnlyResult;
 
-type EciesSealedPoeErrorCode = 'ENC_SLOTS_EMPTY' | 'ENC_SLOTS_REQUIRED' | 'ENC_SLOTS_MAC_REQUIRED' | 'ENC_SLOTS_MAC_INVALID_LENGTH' | 'ENC_SLOTS_DUPLICATE_KEM_MATERIAL' | 'ENC_SLOTS_TOO_MANY' | 'ENC_ENVELOPE_TOO_LARGE' | 'KEM_EPK_LENGTH_MISMATCH' | 'KEM_CT_LENGTH_MISMATCH' | 'INVALID_CEK_LENGTH' | 'NONCE_LENGTH_MISMATCH' | 'INVALID_EPHEMERAL_SECRET_LENGTH' | 'EPHEMERAL_SECRETS_COUNT_MISMATCH' | 'UNSUPPORTED_ENC_VERSION' | 'UNSUPPORTED_AEAD_ALG' | 'UNSUPPORTED_KEM_ALG' | 'INVALID_ENVELOPE_SHAPE' | 'INVALID_RECIPIENT_KEY' | 'WRAP_LENGTH_MISMATCH';
+type EciesSealedPoeErrorCode = 'ENC_SLOTS_EMPTY' | 'ENC_SLOTS_MAC_INVALID_LENGTH' | 'ENC_SLOTS_DUPLICATE_KEM_MATERIAL' | 'ENC_SLOTS_TOO_MANY' | 'ENC_ENVELOPE_TOO_LARGE' | 'ENC_REQUIRES_CONTENT_HASH' | 'ENC_PASSPHRASE_EMPTY' | 'ENC_PASSPHRASE_UNNORMALIZABLE' | 'ENC_PASSPHRASE_ALG_UNSUPPORTED' | 'ENC_PASSPHRASE_SALT_TOO_SHORT' | 'ENC_PASSPHRASE_SALT_TOO_LONG' | 'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW' | 'KEM_EPK_LENGTH_MISMATCH' | 'KEM_CT_LENGTH_MISMATCH' | 'NONCE_LENGTH_MISMATCH' | 'WRAP_LENGTH_MISMATCH' | 'UNSUPPORTED_ENVELOPE_SCHEME' | 'UNSUPPORTED_AEAD_ALG' | 'UNSUPPORTED_KEM_ALG' | 'KDF_DERIVATION_FAILED' | 'INVALID_CEK_LENGTH' | 'INVALID_EPHEMERAL_SECRET_LENGTH' | 'EPHEMERAL_SECRETS_COUNT_MISMATCH' | 'INVALID_RECIPIENT_KEY' | 'INVALID_PASSPHRASE_PARAMS' | 'PASSPHRASE_INPUT_TOO_LONG';
 declare class EciesSealedPoeError extends Error {
     readonly code: EciesSealedPoeErrorCode;
     constructor(code: EciesSealedPoeErrorCode, message: string, options?: {
@@ -118,59 +170,86 @@ declare class EciesSealedPoeError extends Error {
     });
 }
 
-declare const CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX: Uint8Array;
-declare const CARDANO_POE_HKDF_INFO_PAYLOAD: Uint8Array;
-declare const CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE: Uint8Array;
-declare const CARDANO_POE_XWING_KEK_SALT_PREFIX: Uint8Array;
-declare const CARDANO_POE_PW_NORM_PROFILE: "cardano-poe-pw-norm-v1";
-declare const MAX_SLOTS = 1024;
-declare const MAX_DECODED_ENVELOPE_BYTES = 65536;
-declare const MAX_SEALED_PLAINTEXT = 274877906880;
-declare const MAX_SEALED_CIPHERTEXT: number;
-declare function assertPlaintextWithinBound(plaintextLength: number): void;
-declare function assertCiphertextWithinBound(ciphertextLength: number): void;
-declare class SealedPayloadTooLargeError extends Error {
-    constructor(message: string);
+declare const CHUNK_SIZE = 65536;
+declare const TAG_SIZE = 16;
+declare class StreamTamperedError extends Error {
+    readonly code: "TAMPERED_CIPHERTEXT";
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
 }
-declare function computeSlotsHash(args: {
-    kem: SealedKem;
-    nonce: Uint8Array;
-    slots: ReadonlyArray<X25519Slot | Mlkem768X25519Slot>;
+declare class StreamSealer {
+    private readonly payloadKey;
+    private readonly nonce;
+    private chunkIndex;
+    constructor(payloadKey: Uint8Array);
+    sealChunk(plaintext: Uint8Array, final: boolean): Uint8Array;
+}
+declare class StreamOpener {
+    private readonly payloadKey;
+    private readonly nonce;
+    private chunkIndex;
+    constructor(payloadKey: Uint8Array);
+    openChunk(sealedChunk: Uint8Array, final: boolean): Uint8Array;
+}
+declare function streamSeal(args: {
+    payloadKey: Uint8Array;
+    plaintext: Uint8Array;
 }): Uint8Array;
-declare function adContentSlots(args: {
-    kem: SealedKem;
-    nonce: Uint8Array;
-    slotsHash: Uint8Array;
-    slotsMac: Uint8Array;
+declare function streamOpen(args: {
+    payloadKey: Uint8Array;
+    ciphertext: Uint8Array;
 }): Uint8Array;
-declare function adContentPassphrase(args: {
-    nonce: Uint8Array;
-    passphrase: {
-        alg: string;
-        salt: Uint8Array;
-        params: {
-            m: number;
-            t: number;
-            p: number;
-        };
+
+interface PassphraseParams {
+    readonly m: number;
+    readonly t: number;
+    readonly p: number;
+}
+interface PassphraseSealedEnvelope {
+    readonly scheme: 1;
+    readonly aead: typeof SEALED_POE_AEAD;
+    readonly nonce: Uint8Array;
+    readonly passphrase: {
+        readonly alg: 'argon2id';
+        readonly salt: Uint8Array;
+        readonly params: PassphraseParams;
     };
-}): Uint8Array;
-declare function slotsPayloadKey(args: {
-    cek: Uint8Array;
-    nonce: Uint8Array;
-}): Uint8Array;
-declare function passphrasePayloadKey(args: {
-    cek: Uint8Array;
-    nonce: Uint8Array;
-}): Uint8Array;
-declare function xwingKekSalt(args: {
-    kemCt: Uint8Array;
-    pubR: Uint8Array;
-}): Uint8Array;
+}
+interface PassphraseSealArgs {
+    readonly plaintext: Uint8Array;
+    readonly hashes: ItemHashes;
+    readonly passphrase: string;
+    readonly salt?: Uint8Array;
+    readonly params?: PassphraseParams;
+    readonly nonce?: Uint8Array;
+}
+interface PassphraseSealedPoeOutput {
+    readonly envelope: PassphraseSealedEnvelope;
+    readonly blob: Uint8Array;
+}
+interface PassphraseOpenArgs {
+    readonly envelope: PassphraseSealedEnvelope;
+    readonly blob: Uint8Array;
+    readonly passphrase: string;
+    readonly hashes: ItemHashes;
+}
+type PassphraseOpenResult = {
+    readonly matched: true;
+    readonly plaintext: Uint8Array;
+} | {
+    readonly matched: false;
+    readonly reason: 'TAMPERED_CIPHERTEXT';
+};
+declare function passphraseSealedPoeSeal(args: PassphraseSealArgs): Promise<PassphraseSealedPoeOutput>;
+declare function passphraseSealedPoeOpen(args: PassphraseOpenArgs): Promise<PassphraseOpenResult>;
+
+declare const MAX_PASSPHRASE_INPUT_BYTES = 4096;
+declare function normalizePassphrase(passphrase: string): Uint8Array;
 
 interface ParsedSlotShape {
     readonly epk?: Uint8Array | undefined;
-    readonly kem_ct?: ReadonlyArray<Uint8Array> | undefined;
+    readonly kem_ct?: Uint8Array | undefined;
     readonly wrap?: Uint8Array | undefined;
 }
 interface ParsedEnvelopeShape {
@@ -183,4 +262,4 @@ interface ParsedEnvelopeShape {
 }
 declare function sealedEnvelopeFromParsed(enc: ParsedEnvelopeShape): SealedEnvelope | null;
 
-export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, EciesSealedPoeError, type EciesSealedPoeErrorCode, MAX_DECODED_ENVELOPE_BYTES, MAX_SEALED_CIPHERTEXT, MAX_SEALED_PLAINTEXT, MAX_SLOTS, type Mlkem768X25519Slot, type ParsedEnvelopeShape, type ParsedSlotShape, type RecipientKeyBundle, type SealedEnvelope, type SealedKem, SealedPayloadTooLargeError, type SealedPoeOutput, type TrialDecryptOnlyArgs, type TrialDecryptOnlyResult, type UnwrapArgs, type UnwrapArgsBundle, type UnwrapArgsMultiPriv, type UnwrapArgsSinglePriv, type UnwrapFailureReason, type UnwrapResult, type WrapArgs, type X25519Slot, adContentPassphrase, adContentSlots, assertCiphertextWithinBound, assertPlaintextWithinBound, canonicalizeSlots, chunkKemCt, computeSlotsHash, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, joinKemCt, passphrasePayloadKey, sealedEnvelopeFromParsed, slotsPayloadKey, uniformIndexBelow, xwingKekSalt };
+export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, EciesSealedPoeError, type EciesSealedPoeErrorCode, type ItemHashes, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, type Mlkem768X25519Slot, type ParsedEnvelopeShape, type ParsedSlotShape, type PassphraseOpenArgs, type PassphraseOpenResult, type PassphraseParams, type PassphraseSealArgs, type PassphraseSealedEnvelope, type PassphraseSealedPoeOutput, type RecipientKeyBundle, SEALED_POE_AEAD, type SealedEnvelope, type SealedKem, type SealedPoeOutput, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, type TrialDecryptOnlyArgs, type TrialDecryptOnlyResult, type UnwrapArgs, type UnwrapArgsBundle, type UnwrapArgsMultiPriv, type UnwrapArgsSinglePriv, type UnwrapFailureReason, type UnwrapResult, type WrapArgs, type X25519Slot, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, itemHashesHash, normalizePassphrase, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, slotsPayloadKey, streamOpen, streamSeal, uniformIndexBelow, x25519KekSalt, xwingKekSalt };