@coinbase/cdp-sdk 1.14.0 → 1.15.0

package/utils/export.ts

@@ -0,0 +1,89 @@
+import { generateKeyPair, privateDecrypt, constants, createPrivateKey } from "crypto";
+
+import { Keypair } from "@solana/web3.js";
+import bs58 from "bs58";
+
+/**
+ * Generates a new RSA key pair with 4096-bit private key.
+ * - Private key in PKCS1 DER format
+ * - Public key in PKIX/SPKI DER format
+ *
+ * @returns A promise that resolves to the generated key pair, or rejects with an error.
+ */
+export const generateExportEncryptionKeyPair = async () => {
+  return await new Promise<{
+    publicKey: string;
+    privateKey: string;
+  }>((resolve, reject) => {
+    generateKeyPair(
+      "rsa",
+      {
+        modulusLength: 4096,
+        publicKeyEncoding: {
+          type: "spki",
+          format: "der",
+        },
+        privateKeyEncoding: {
+          type: "pkcs1",
+          format: "der",
+        },
+      },
+      (err, publicKey, privateKey) => {
+        if (err) {
+          reject(err);
+        }
+        resolve({
+          publicKey: publicKey.toString("base64"),
+          privateKey: privateKey.toString("base64"),
+        });
+      },
+    );
+  });
+};
+
+/**
+ * Decrypts a ciphertext using RSA-OAEP-SHA256.
+ * - Parses PKCS1 private key
+ * - Uses RSA-OAEP-SHA256 for decryption
+ * - Returns hex-encoded result
+ *
+ * @param b64PrivateKey - The base64-encoded private key in PKCS1 DER format.
+ * @param b64Cipher - The base64-encoded ciphertext.
+ * @returns The decrypted key hex string, or throws an error if decryption fails.
+ */
+export const decryptWithPrivateKey = (b64PrivateKey: string, b64Cipher: string): string => {
+  try {
+    // Create a private key object from the PKCS1 DER format
+    const privateKey = createPrivateKey({
+      key: Buffer.from(b64PrivateKey, "base64"),
+      format: "der",
+      type: "pkcs1",
+    });
+
+    const decryptedBuffer = privateDecrypt(
+      {
+        key: privateKey,
+        padding: constants.RSA_PKCS1_OAEP_PADDING,
+        oaepHash: "sha256",
+      },
+      Buffer.from(b64Cipher, "base64"),
+    );
+
+    return decryptedBuffer.toString("hex");
+  } catch (error) {
+    throw new Error(`Decryption failed: ${String(error)}`);
+  }
+};
+
+/**
+ * Format a private key to a base58 string for easy import into Solana wallet apps.
+ *
+ * @param privateKey - The private key as a hex string
+ * @returns The formatted private key as a base58 string
+ */
+export const formatSolanaPrivateKey = (privateKey: string): string => {
+  const privateKeyBytes = Buffer.from(privateKey, "hex");
+  const keypair = Keypair.fromSeed(privateKeyBytes);
+  const fullKey = Buffer.concat([keypair.secretKey.subarray(0, 32), keypair.publicKey.toBytes()]);
+  return bs58.encode(fullKey);
+};

package/version.ts

@@ -1 +1 @@
-export const version = "1.14.0";
+export const version = "1.15.0";