@cardanowall/crypto-core 0.4.0 → 0.6.0

package/dist/index.d.cts

@@ -7,6 +7,6 @@ export { compareCt, hexToBytes } from './util.cjs';
 export { CanonicalCborError, CanonicalCborErrorCode, CanonicalCborValue, decodeCanonicalCbor, decodeCbor, encodeCanonicalCbor } from './cbor.cjs';
 export { BuildLabel309SigStructureArgs, BuildSigStructureArgs, CARDANO_POE_SIG_DOMAIN_PREFIX, CARDANO_POE_SIG_DOMAIN_PREFIX_BYTES, CoseHeader, CoseSign1BuildError, CoseSign1BuildErrorCode, CoseSign1Decoded, CoseSign1Label309BuildArgs, CoseSign1Label309VerifyArgs, CoseVerifyError, CoseVerifyErrorCode, CoseVerifyResult, EncodeCoseSign1Args, buildLabel309SigStructure, buildSigStructure, coseSign1Label309Build, coseSign1Label309Verify, decodeCoseSign1, encodeCoseSign1, parseCoseKeyEd25519 } from './cose.cjs';
 export { DerivedEd25519KeyPair, DerivedMlKem768X25519KeyPair, DerivedX25519KeyPair, IDENTITY_SEED_HRP, INFO_ED25519, INFO_MLKEM768X25519, INFO_X25519, SeedDeriveError, SeedDeriveErrorCode, SeedEncodingError, SeedEncodingErrorCode, deriveEd25519KeypairFromSeed, deriveMlKem768X25519KeypairFromSeed, deriveX25519KeypairFromSeed, encodeIdentitySeed, parseIdentitySeed } from './seed-derive.cjs';
-export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, EciesSealedPoeError, EciesSealedPoeErrorCode, ItemHashes, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, Mlkem768X25519Slot, ParsedEnvelopeShape, ParsedSlotShape, PassphraseOpenArgs, PassphraseOpenResult, PassphraseParams, PassphraseSealArgs, PassphraseSealedEnvelope, PassphraseSealedPoeOutput, RecipientKeyBundle, SEALED_POE_AEAD, SealedEnvelope, SealedKem, SealedPoeOutput, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, TrialDecryptOnlyArgs, TrialDecryptOnlyResult, UnwrapArgs, UnwrapArgsBundle, UnwrapArgsMultiPriv, UnwrapArgsSinglePriv, UnwrapFailureReason, UnwrapResult, WrapArgs, X25519Slot, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, itemHashesHash, normalizePassphrase, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, slotsPayloadKey, streamOpen, streamSeal, uniformIndexBelow, x25519KekSalt, xwingKekSalt } from './sealed-poe.cjs';
+export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, EciesSealedPoeError, EciesSealedPoeErrorCode, ItemHashes, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, Mlkem768X25519Slot, ParsedEnvelopeShape, ParsedSlotShape, PassphraseOpenArgs, PassphraseOpenResult, PassphraseParams, PassphraseSealArgs, PassphraseSealedEnvelope, PassphraseSealedPoeOutput, RecipientKeyBundle, SEALED_POE_AEAD, SealedEnvelope, SealedKem, SealedPoeOutput, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, TrialDecryptOnlyArgs, TrialDecryptOnlyResult, UnwrapArgs, UnwrapArgsBundle, UnwrapArgsMultiPriv, UnwrapArgsSinglePriv, UnwrapFailureReason, UnwrapResult, WrapArgs, X25519Slot, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, itemHashesHash, normalizePassphrase, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, slotsPayloadKey, streamOpen, streamSeal, streamSealedLength, uniformIndexBelow, x25519KekSalt, xwingKekSalt } from './sealed-poe.cjs';
 export { DecodedLeavesList, EncodeLeavesListArgs, LEAVES_LIST_FORMAT_V1, MerkleLeavesListError, MerkleLeavesListErrorCode, decodeLeavesList, encodeLeavesList } from './merkle.cjs';
 export { ParsedAgeRecipient, RecipientKem, bech32DecodeNoLimit, bech32EncodeNoLimit, encodeAgeX25519Recipient, encodeAgeXWingRecipient, parseAgeRecipient } from './recipient.cjs';

package/dist/index.d.ts

@@ -7,6 +7,6 @@ export { compareCt, hexToBytes } from './util.js';
 export { CanonicalCborError, CanonicalCborErrorCode, CanonicalCborValue, decodeCanonicalCbor, decodeCbor, encodeCanonicalCbor } from './cbor.js';
 export { BuildLabel309SigStructureArgs, BuildSigStructureArgs, CARDANO_POE_SIG_DOMAIN_PREFIX, CARDANO_POE_SIG_DOMAIN_PREFIX_BYTES, CoseHeader, CoseSign1BuildError, CoseSign1BuildErrorCode, CoseSign1Decoded, CoseSign1Label309BuildArgs, CoseSign1Label309VerifyArgs, CoseVerifyError, CoseVerifyErrorCode, CoseVerifyResult, EncodeCoseSign1Args, buildLabel309SigStructure, buildSigStructure, coseSign1Label309Build, coseSign1Label309Verify, decodeCoseSign1, encodeCoseSign1, parseCoseKeyEd25519 } from './cose.js';
 export { DerivedEd25519KeyPair, DerivedMlKem768X25519KeyPair, DerivedX25519KeyPair, IDENTITY_SEED_HRP, INFO_ED25519, INFO_MLKEM768X25519, INFO_X25519, SeedDeriveError, SeedDeriveErrorCode, SeedEncodingError, SeedEncodingErrorCode, deriveEd25519KeypairFromSeed, deriveMlKem768X25519KeypairFromSeed, deriveX25519KeypairFromSeed, encodeIdentitySeed, parseIdentitySeed } from './seed-derive.js';
-export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, EciesSealedPoeError, EciesSealedPoeErrorCode, ItemHashes, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, Mlkem768X25519Slot, ParsedEnvelopeShape, ParsedSlotShape, PassphraseOpenArgs, PassphraseOpenResult, PassphraseParams, PassphraseSealArgs, PassphraseSealedEnvelope, PassphraseSealedPoeOutput, RecipientKeyBundle, SEALED_POE_AEAD, SealedEnvelope, SealedKem, SealedPoeOutput, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, TrialDecryptOnlyArgs, TrialDecryptOnlyResult, UnwrapArgs, UnwrapArgsBundle, UnwrapArgsMultiPriv, UnwrapArgsSinglePriv, UnwrapFailureReason, UnwrapResult, WrapArgs, X25519Slot, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, itemHashesHash, normalizePassphrase, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, slotsPayloadKey, streamOpen, streamSeal, uniformIndexBelow, x25519KekSalt, xwingKekSalt } from './sealed-poe.js';
+export { CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, EciesSealedPoeError, EciesSealedPoeErrorCode, ItemHashes, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, Mlkem768X25519Slot, ParsedEnvelopeShape, ParsedSlotShape, PassphraseOpenArgs, PassphraseOpenResult, PassphraseParams, PassphraseSealArgs, PassphraseSealedEnvelope, PassphraseSealedPoeOutput, RecipientKeyBundle, SEALED_POE_AEAD, SealedEnvelope, SealedKem, SealedPoeOutput, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, TrialDecryptOnlyArgs, TrialDecryptOnlyResult, UnwrapArgs, UnwrapArgsBundle, UnwrapArgsMultiPriv, UnwrapArgsSinglePriv, UnwrapFailureReason, UnwrapResult, WrapArgs, X25519Slot, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, itemHashesHash, normalizePassphrase, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, slotsPayloadKey, streamOpen, streamSeal, streamSealedLength, uniformIndexBelow, x25519KekSalt, xwingKekSalt } from './sealed-poe.js';
 export { DecodedLeavesList, EncodeLeavesListArgs, LEAVES_LIST_FORMAT_V1, MerkleLeavesListError, MerkleLeavesListErrorCode, decodeLeavesList, encodeLeavesList } from './merkle.js';
 export { ParsedAgeRecipient, RecipientKem, bech32DecodeNoLimit, bech32EncodeNoLimit, encodeAgeX25519Recipient, encodeAgeXWingRecipient, parseAgeRecipient } from './recipient.js';

package/dist/index.js

@@ -971,6 +971,15 @@ var ChunkNonce = class {
     throw new Error("STREAM: chunk counter overflow");
   }
 };
+function streamSealedLength(plaintextLength) {
+  if (!Number.isInteger(plaintextLength) || plaintextLength < 0) {
+    throw new Error(
+      `STREAM: plaintextLength MUST be a non-negative integer, got ${plaintextLength}`
+    );
+  }
+  const chunkCount = Math.max(1, Math.ceil(plaintextLength / CHUNK_SIZE));
+  return plaintextLength + chunkCount * TAG_SIZE;
+}
 function assertPayloadKey(payloadKey) {
   if (payloadKey.length !== PAYLOAD_KEY_LENGTH) {
     throw new Error(
@@ -3604,6 +3613,6 @@ function parseAgeRecipient(recipient) {
   throw new Error(`parseAgeRecipient: unrecognized recipient prefix "${hrp}"`);
 }
 
-export { AeadVerificationError, CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SIG_DOMAIN_PREFIX, CARDANO_POE_SIG_DOMAIN_PREFIX_BYTES, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, CanonicalCborError, CoseSign1BuildError, CoseVerifyError, EciesSealedPoeError, IDENTITY_SEED_HRP, INFO_ED25519, INFO_MLKEM768X25519, INFO_X25519, LEAVES_LIST_FORMAT_V1, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, MERKLE_ALG_ID, MLKEM768X25519_ENC_LENGTH, MLKEM768X25519_ESEED_LENGTH, MLKEM768X25519_PUBLIC_KEY_LENGTH, MLKEM768X25519_SEED_LENGTH, MLKEM768X25519_SHARED_SECRET_LENGTH, MerkleLeavesListError, SEALED_POE_AEAD, SeedDeriveError, SeedEncodingError, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, X25519LowOrderPointError, argon2idV13, bech32DecodeNoLimit, bech32EncodeNoLimit, blake2b224, blake2b256, buildLabel309SigStructure, buildSigStructure, chacha20Poly1305Decrypt, chacha20Poly1305Encrypt, compareCt, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, coseSign1Label309Build, coseSign1Label309Verify, decodeCanonicalCbor, decodeCbor, decodeCoseSign1, decodeLeavesList, deriveEd25519KeypairFromSeed, deriveMlKem768X25519KeypairFromSeed, deriveX25519KeypairFromSeed, dualHash, dualHashStream, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, encodeAgeX25519Recipient, encodeAgeXWingRecipient, encodeCanonicalCbor, encodeCoseSign1, encodeIdentitySeed, encodeLeavesList, getPublicKeyEd25519, hexToBytes, hkdfSha256, itemHashesHash, merkleSha2256InclusionProof, merkleSha2256Root, merkleSha2256VerifyInclusion, mlkem768x25519Decapsulate, mlkem768x25519Encapsulate, mlkem768x25519Keygen, normalizePassphrase, parseAgeRecipient, parseCoseKeyEd25519, parseIdentitySeed, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, sha256, sha256Stream, signEd25519, slotsPayloadKey, streamOpen, streamSeal, uniformIndexBelow, verifyEd25519, x25519Ecdh, x25519KekSalt, x25519Keygen, x25519PublicKey, xchacha20Poly1305Decrypt, xchacha20Poly1305Encrypt, xwingKekSalt };
+export { AeadVerificationError, CARDANO_POE_HKDF_INFO_KEK, CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519, CARDANO_POE_HKDF_INFO_PASSPHRASE_MAC, CARDANO_POE_HKDF_INFO_PAYLOAD, CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE, CARDANO_POE_HKDF_INFO_SLOTS_MAC, CARDANO_POE_ITEM_HASHES_PREFIX, CARDANO_POE_PASSPHRASE_TRANSCRIPT_PREFIX, CARDANO_POE_PW_NORM_PROFILE, CARDANO_POE_SIG_DOMAIN_PREFIX, CARDANO_POE_SIG_DOMAIN_PREFIX_BYTES, CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX, CARDANO_POE_X25519_KEK_SALT_PREFIX, CARDANO_POE_XWING_KEK_SALT_PREFIX, CHUNK_SIZE, CanonicalCborError, CoseSign1BuildError, CoseVerifyError, EciesSealedPoeError, IDENTITY_SEED_HRP, INFO_ED25519, INFO_MLKEM768X25519, INFO_X25519, LEAVES_LIST_FORMAT_V1, MAX_DECODED_ENVELOPE_BYTES, MAX_PASSPHRASE_INPUT_BYTES, MAX_SLOTS, MERKLE_ALG_ID, MLKEM768X25519_ENC_LENGTH, MLKEM768X25519_ESEED_LENGTH, MLKEM768X25519_PUBLIC_KEY_LENGTH, MLKEM768X25519_SEED_LENGTH, MLKEM768X25519_SHARED_SECRET_LENGTH, MerkleLeavesListError, SEALED_POE_AEAD, SeedDeriveError, SeedEncodingError, StreamOpener, StreamSealer, StreamTamperedError, TAG_SIZE, X25519LowOrderPointError, argon2idV13, bech32DecodeNoLimit, bech32EncodeNoLimit, blake2b224, blake2b256, buildLabel309SigStructure, buildSigStructure, chacha20Poly1305Decrypt, chacha20Poly1305Encrypt, compareCt, computePassphraseCommitment, computePassphraseHash, computeSlotsHash, computeSlotsMac, coseSign1Label309Build, coseSign1Label309Verify, decodeCanonicalCbor, decodeCbor, decodeCoseSign1, decodeLeavesList, deriveEd25519KeypairFromSeed, deriveMlKem768X25519KeypairFromSeed, deriveX25519KeypairFromSeed, dualHash, dualHashStream, eciesSealedPoeTrialDecrypt, eciesSealedPoeUnwrap, eciesSealedPoeWrap, encodeAgeX25519Recipient, encodeAgeXWingRecipient, encodeCanonicalCbor, encodeCoseSign1, encodeIdentitySeed, encodeLeavesList, getPublicKeyEd25519, hexToBytes, hkdfSha256, itemHashesHash, merkleSha2256InclusionProof, merkleSha2256Root, merkleSha2256VerifyInclusion, mlkem768x25519Decapsulate, mlkem768x25519Encapsulate, mlkem768x25519Keygen, normalizePassphrase, parseAgeRecipient, parseCoseKeyEd25519, parseIdentitySeed, passphrasePayloadKey, passphraseSealedPoeOpen, passphraseSealedPoeSeal, sealedEnvelopeFromParsed, sha256, sha256Stream, signEd25519, slotsPayloadKey, streamOpen, streamSeal, streamSealedLength, uniformIndexBelow, verifyEd25519, x25519Ecdh, x25519KekSalt, x25519Keygen, x25519PublicKey, xchacha20Poly1305Decrypt, xchacha20Poly1305Encrypt, xwingKekSalt };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map