@crossdyne/security 0.2.0-beta.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Crossdyne
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,15 @@
+# @quantropic/security
+
+Security library with SRP authentication and cryptography utilities.
+
+## Features
+
+- SRP (Secure Remote Password) protocol implementation
+- Cryptographic utilities
+- Key derivation functions
+
+## Installation
+
+```bash
+npm install @quantropic/security
+```

package/dist/index.cjs

@@ -0,0 +1,249 @@
+'use strict';
+
+// src/utils/security.utils.ts
+var SecurityUtils = class {
+  /*                          
+      Base64 helpers
+  */
+  static toBase64(bytes) {
+    let binary = "";
+    for (let i = 0; i < bytes.byteLength; i++)
+      binary += String.fromCharCode(bytes[i]);
+    return window.btoa(binary);
+  }
+  static fromBase64(base64) {
+    const cleaned = base64.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
+    const binary = window.atob(cleaned);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+      bytes[i] = binary.charCodeAt(i);
+    return bytes;
+  }
+  static bigIntToFixedBytes(bn, length) {
+    let hex = bn.toString(16);
+    if (hex.length % 2 !== 0)
+      hex = "0" + hex;
+    if (hex.length > length * 2)
+      throw new Error(`\u0417\u043D\u0430\u0447\u0435\u043D\u0438\u0435 \u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0432\u0435\u043B\u0438\u043A\u043E \u0434\u043B\u044F ${length} \u0431\u0430\u0439\u0442`);
+    hex = hex.padStart(length * 2, "0");
+    return this.fromHex(hex);
+  }
+  static fromHex(hex) {
+    const matches = hex.match(/.{1,2}/g);
+    return new Uint8Array(matches ? matches.map((byte) => parseInt(byte, 16)) : []);
+  }
+  /*                          
+      Math
+  */
+  static expMod(base, exp, mod) {
+    let res = BigInt(1);
+    base = base % mod;
+    while (exp > 0) {
+      if (exp % BigInt(2) === BigInt(1)) res = res * base % mod;
+      base = base * base % mod;
+      exp = exp / BigInt(2);
+    }
+    return res;
+  }
+  /*                          
+      SRP helper
+  */
+  static async hashAsPerSrp6a(items) {
+    const buffers = items.map(({ value, length }) => this.bigIntToFixedBytes(value, length));
+    const totalLen = buffers.reduce((sum, buf) => sum + buf.length, 0);
+    const combined = new Uint8Array(totalLen);
+    let offset = 0;
+    for (const buf of buffers) {
+      combined.set(buf, offset);
+      offset += buf.length;
+    }
+    const hash = await crypto.subtle.digest("SHA-256", combined);
+    return this.bytesToBigInt(new Uint8Array(hash));
+  }
+};
+SecurityUtils.MODULUS_SIZE = 384;
+SecurityUtils.NONCE_SIZE = 12;
+SecurityUtils.TAG_SIZE = 16;
+SecurityUtils.KEY_SIZE = 32;
+SecurityUtils.N = BigInt("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
+SecurityUtils.g = BigInt(2);
+SecurityUtils.k = BigInt("0xD55AE1AEC9F9115621E93E16E5DE4517DF8450D0957024D1256AA32B71E4E412");
+/*                          
+    BigInt helpers
+*/
+SecurityUtils.bytesToBigInt = (bytes) => BigInt("0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join(""));
+
+// src/crypto/crypto.service.ts
+var CryptoService = class {
+  constructor() {
+    this.generateRandomBytes = (length = 32) => crypto.getRandomValues(new Uint8Array(length));
+  }
+  async encryptData(dataModel, key) {
+    const encoder = new TextEncoder();
+    let jsonString;
+    if (dataModel instanceof Uint8Array) {
+      jsonString = `"${SecurityUtils.toBase64(dataModel)}"`;
+    } else {
+      jsonString = JSON.stringify(dataModel);
+    }
+    const plainBytes = encoder.encode(jsonString);
+    const nonce = crypto.getRandomValues(new Uint8Array(SecurityUtils.NONCE_SIZE));
+    const cryptoKey = await crypto.subtle.importKey(
+      "raw",
+      key,
+      "AES-GCM",
+      false,
+      ["encrypt"]
+    );
+    const encryptedContent = await crypto.subtle.encrypt(
+      {
+        name: "AES-GCM",
+        iv: nonce,
+        tagLength: SecurityUtils.TAG_SIZE * 8
+      },
+      cryptoKey,
+      plainBytes
+    );
+    const result = new Uint8Array(SecurityUtils.NONCE_SIZE + encryptedContent.byteLength);
+    result.set(nonce, 0);
+    result.set(new Uint8Array(encryptedContent), SecurityUtils.NONCE_SIZE);
+    return SecurityUtils.toBase64(result);
+  }
+  async decryptedData(encryptedBase64, key) {
+    if (!encryptedBase64)
+      return null;
+    const encryptedBytes = SecurityUtils.fromBase64(encryptedBase64);
+    if (encryptedBytes.length < SecurityUtils.NONCE_SIZE + SecurityUtils.TAG_SIZE)
+      throw new Error("\u041D\u0435\u0434\u043E\u043F\u0443\u0441\u0442\u0438\u043C\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043E\u0432\u0430\u043D\u043D\u044B\u0445 \u0434\u0430\u043D\u043D\u044B\u0445");
+    const nonce = encryptedBytes.slice(0, SecurityUtils.NONCE_SIZE);
+    const ciphertextWithTag = encryptedBytes.slice(SecurityUtils.NONCE_SIZE);
+    const cryptoKey = await crypto.subtle.importKey(
+      "raw",
+      key,
+      "AES-GCM",
+      false,
+      ["decrypt"]
+    );
+    try {
+      const decryptedBuffer = await crypto.subtle.decrypt(
+        {
+          name: "AES-GCM",
+          iv: nonce,
+          tagLength: SecurityUtils.TAG_SIZE * 8
+        },
+        cryptoKey,
+        ciphertextWithTag
+      );
+      const decoder = new TextDecoder();
+      const jsonString = decoder.decode(decryptedBuffer);
+      return JSON.parse(jsonString);
+    } catch (e) {
+      console.error("\u041E\u0448\u0438\u0431\u043A\u0430 \u0434\u0435\u0448\u0438\u0444\u0440\u043E\u0432\u0430\u043D\u0438\u044F:", e);
+      return null;
+    }
+  }
+};
+
+// src/crypto/key-derivation.service.ts
+var KeyDerivationService = class {
+  constructor() {
+    this.ITERATIONS = 6e5;
+    this.KEY_SIZE = 32;
+  }
+  async deriveKeysFromPassword(login, password, salt) {
+    const safeSalt = new Uint8Array(salt);
+    const encoder = new TextEncoder();
+    const normalizedLogin = login.trim().toLocaleLowerCase();
+    const combinedPassword = `${normalizedLogin}:${password}`;
+    const passwordBytes = encoder.encode(combinedPassword);
+    const baseKey = await crypto.subtle.importKey("raw", passwordBytes, "PBKDF2", false, ["deriveBits", "deriveKey"]);
+    const masterKeyBits = await crypto.subtle.deriveBits({
+      name: "PBKDF2",
+      salt: safeSalt,
+      iterations: this.ITERATIONS,
+      hash: "SHA-256"
+    }, baseKey, this.KEY_SIZE * 8);
+    const masterKey = await crypto.subtle.importKey("raw", masterKeyBits, "HKDF", false, ["deriveBits"]);
+    const kek = await crypto.subtle.deriveBits(
+      { name: "HKDF", hash: "SHA-256", salt: new Uint8Array(0), info: encoder.encode("AES-GCM-KEK-v1") },
+      masterKey,
+      this.KEY_SIZE * 8
+    );
+    const authBytes = await crypto.subtle.deriveBits(
+      { name: "HKDF", hash: "SHA-256", salt: new Uint8Array(0), info: encoder.encode("SERVER-AUTH-HASH-v1") },
+      masterKey,
+      this.KEY_SIZE * 8
+    );
+    return {
+      kek: new Uint8Array(kek),
+      authHash: SecurityUtils.toBase64(new Uint8Array(authBytes))
+    };
+  }
+};
+
+// src/srp/srp.service.ts
+var SrpService = class {
+  constructor() {
+    this.keyDerivation = new KeyDerivationService();
+  }
+  async generateSrpVerifier(authHash) {
+    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));
+    const v = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);
+    return SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(v, SecurityUtils.MODULUS_SIZE));
+  }
+  async generateSrpProof(login, password, saltBase64, B_base64) {
+    const salt = SecurityUtils.fromBase64(saltBase64);
+    const { authHash } = await this.keyDerivation.deriveKeysFromPassword(login, password, salt);
+    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));
+    const aBytes = crypto.getRandomValues(new Uint8Array(32));
+    const a = SecurityUtils.bytesToBigInt(aBytes);
+    const A = SecurityUtils.expMod(SecurityUtils.g, a, SecurityUtils.N);
+    if (A % SecurityUtils.N === 0n)
+      throw new Error("\u041A\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043A\u0430\u044F \u043E\u0448\u0438\u0431\u043A\u0430: A % N === 0");
+    const B = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(B_base64));
+    if (B % SecurityUtils.N === 0n)
+      throw new Error("\u041A\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043A\u0430\u044F \u043E\u0448\u0438\u0431\u043A\u0430: B % N === 0");
+    const u = await SecurityUtils.hashAsPerSrp6a([
+      { value: A, length: SecurityUtils.MODULUS_SIZE },
+      { value: B, length: SecurityUtils.MODULUS_SIZE }
+    ]);
+    if (u === 0n)
+      throw new Error("\u041D\u0435\u0434\u043E\u043F\u0443\u0441\u0442\u0438\u043C\u043E\u0435 \u0437\u043D\u0430\u0447\u0435\u043D\u0438\u0435 u");
+    const gX = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);
+    const term = SecurityUtils.k * gX % SecurityUtils.N;
+    const base = (B - term + SecurityUtils.N) % SecurityUtils.N;
+    const exponent = a + u * x;
+    const S = SecurityUtils.expMod(base, exponent, SecurityUtils.N);
+    if (S === 0n)
+      throw new Error("\u041A\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043A\u0430\u044F \u043E\u0448\u0438\u0431\u043A\u0430: S === 0");
+    const M1 = await SecurityUtils.hashAsPerSrp6a([
+      { value: A, length: SecurityUtils.MODULUS_SIZE },
+      { value: B, length: SecurityUtils.MODULUS_SIZE },
+      { value: S, length: SecurityUtils.MODULUS_SIZE }
+    ]);
+    return {
+      A: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(A, SecurityUtils.MODULUS_SIZE)),
+      M1: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(M1, 32)),
+      S: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(S, SecurityUtils.MODULUS_SIZE))
+    };
+  }
+  async verifyServerM2(A_b64, M1_b64, S_b64, serverM2_b64) {
+    const A = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(A_b64));
+    const M1 = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(M1_b64));
+    const S = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(S_b64));
+    const computedM2 = await SecurityUtils.hashAsPerSrp6a([
+      { value: A, length: SecurityUtils.MODULUS_SIZE },
+      { value: M1, length: 32 },
+      { value: S, length: SecurityUtils.MODULUS_SIZE }
+    ]);
+    const computedM2_b64 = SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(computedM2, 32));
+    return serverM2_b64 === computedM2_b64;
+  }
+};
+
+exports.CryptoService = CryptoService;
+exports.KeyDerivationService = KeyDerivationService;
+exports.SecurityUtils = SecurityUtils;
+exports.SrpService = SrpService;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/security.utils.ts","../src/crypto/crypto.service.ts","../src/crypto/key-derivation.service.ts","../src/srp/srp.service.ts"],"names":[],"mappings":";;;AAAO,IAAM,gBAAN,MAAoB;AAAA;AAAA;AAAA;AAAA,EAcvB,OAAO,SAAS,KAAA,EAA2B;AACvC,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,UAAA,EAAY,CAAA,EAAA;AAClC,MAAA,MAAA,IAAU,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAC,CAAA;AAE1C,IAAA,OAAO,MAAA,CAAO,KAAK,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,OAAO,WAAW,MAAA,EAA4B;AAC1C,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC9E,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AAE1C,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA;AAC9B,MAAA,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AAEnC,IAAA,OAAO,KAAA;AAAA,EACX;AAAA,EAQA,OAAO,kBAAA,CAAmB,EAAA,EAAY,MAAA,EAA4B;AAC9D,IAAA,IAAI,GAAA,GAAM,EAAA,CAAG,QAAA,CAAS,EAAE,CAAA;AAExB,IAAA,IAAI,GAAA,CAAI,SAAS,CAAA,KAAM,CAAA;AACnB,MAAA,GAAA,GAAM,GAAA,GAAM,GAAA;AAEhB,IAAA,IAAI,GAAA,CAAI,SAAS,MAAA,GAAS,CAAA;AACtB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oJAAA,EAA+B,MAAM,CAAA,yBAAA,CAAO,CAAA;AAEhE,IAAA,GAAA,GAAM,GAAA,CAAI,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG,GAAG,CAAA;AAElC,IAAA,OAAO,IAAA,CAAK,QAAQ,GAAG,CAAA;AAAA,EAC3B;AAAA,EAEA,OAAe,QAAQ,GAAA,EAAyB;AAC5C,IAAA,MAAM,OAAA,GAAU,GAAA,CAAI,KAAA,CAAM,SAAS,CAAA;AACnC,IAAA,OAAO,IAAI,UAAA,CAAW,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,CAAA,IAAA,KAAQ,QAAA,CAAS,IAAA,EAAM,EAAE,CAAC,CAAA,GAAI,EAAE,CAAA;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAMA,OAAO,MAAA,CAAO,IAAA,EAAc,GAAA,EAAa,GAAA,EAAqB;AAC1D,IAAA,IAAI,GAAA,GAAM,OAAO,CAAC,CAAA;AAClB,IAAA,IAAA,GAAO,IAAA,GAAO,GAAA;AAEd,IAAA,OAAO,MAAM,CAAA,EAAG;AAChB,MAAA,IAAI,GAAA,GAAM,OAAO,CAAC,CAAA,KAAM,OAAO,CAAC,CAAA,EAAG,GAAA,GAAO,GAAA,GAAM,IAAA,GAAQ,GAAA;AACxD,MAAA,IAAA,GAAQ,OAAO,IAAA,GAAQ,GAAA;AACvB,MAAA,GAAA,GAAM,GAAA,GAAM,OAAO,CAAC,CAAA;AAAA,IACpB;AAEA,IAAA,OAAO,GAAA;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKD,aAAa,eAAe,KAAA,EAA6D;AACpF,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,CAAC,EAAE,KAAA,EAAO,MAAA,EAAO,KAAM,IAAA,CAAK,kBAAA,CAAmB,KAAA,EAAO,MAAM,CAAC,CAAA;AACvF,IAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,CAAO,CAAC,KAAK,GAAA,KAAQ,GAAA,GAAM,GAAA,CAAI,MAAA,EAAQ,CAAC,CAAA;AACjE,IAAA,MAAM,QAAA,GAAW,IAAI,UAAA,CAAW,QAAQ,CAAA;AAExC,IAAA,IAAI,MAAA,GAAS,CAAA;AAEb,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACvB,MAAA,QAAA,CAAS,GAAA,CAAI,KAAK,MAAM,CAAA;AACxB,MAAA,MAAA,IAAU,GAAA,CAAI,MAAA;AAAA,IAClB;AAEA,IAAA,MAAM,OAAO,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,QAAQ,CAAA;AAE3D,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,IAAI,UAAA,CAAW,IAAI,CAAC,CAAA;AAAA,EAClD;AACJ;AA9Fa,aAAA,CACO,YAAA,GAAwB,GAAA;AAD/B,aAAA,CAEO,UAAA,GAAsB,EAAA;AAF7B,aAAA,CAGO,QAAA,GAAoB,EAAA;AAH3B,aAAA,CAIO,QAAA,GAAoB,EAAA;AAJ3B,aAAA,CAMO,CAAA,GAAa,OAAO,ogBAAogB,CAAA;AAN/hB,aAAA,CAOO,CAAA,GAAa,OAAO,CAAC,CAAA;AAP5B,aAAA,CAQO,CAAA,GAAa,OAAO,oEAAoE,CAAA;AAAA;AAAA;AAAA;AAR/F,aAAA,CAqCF,aAAA,GAAgB,CAAC,KAAA,KAA+B,MAAA,CAAO,OAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA,CAAE,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA;;;ACnCtI,IAAM,gBAAN,MAAoB;AAAA,EAApB,WAAA,GAAA;AA0EL,IAAA,IAAA,CAAA,mBAAA,GAAsB,CAAC,SAAS,EAAA,KAAmB,MAAA,CAAO,gBAAgB,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,EAAA;AAAA,EAxEhG,MAAM,WAAA,CAAe,SAAA,EAAc,GAAA,EAAkC;AACnE,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI,qBAAqB,UAAA,EAAY;AACnC,MAAA,UAAA,GAAa,CAAA,CAAA,EAAI,aAAA,CAAc,QAAA,CAAS,SAAS,CAAC,CAAA,CAAA,CAAA;AAAA,IACpD,CAAA,MAAO;AACL,MAAA,UAAA,GAAa,IAAA,CAAK,UAAU,SAAS,CAAA;AAAA,IACvC;AACA,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,MAAA,CAAO,UAAU,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,aAAA,CAAc,UAAU,CAAC,CAAA;AAE7E,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MACpC,KAAA;AAAA,MACA,GAAA;AAAA,MACA,SAAA;AAAA,MACA,KAAA;AAAA,MACA,CAAC,SAAS;AAAA,KAAC;AAEb,IAAA,MAAM,gBAAA,GAAmB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MAAQ;AAAA,QACjD,IAAA,EAAM,SAAA;AAAA,QACN,EAAA,EAAI,KAAA;AAAA,QACJ,SAAA,EAAW,cAAc,QAAA,GAAW;AAAA,OAAC;AAAA,MACrC,SAAA;AAAA,MACC;AAAA,KACL;AAEA,IAAA,MAAM,SAAS,IAAI,UAAA,CAAW,aAAA,CAAc,UAAA,GAAa,iBAAiB,UAAU,CAAA;AACpF,IAAA,MAAA,CAAO,GAAA,CAAI,OAAO,CAAC,CAAA;AACnB,IAAA,MAAA,CAAO,IAAI,IAAI,UAAA,CAAW,gBAAgB,CAAA,EAAG,cAAc,UAAU,CAAA;AAErE,IAAA,OAAO,aAAA,CAAc,SAAS,MAAM,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,aAAA,CAAiB,eAAA,EAAyB,GAAA,EAAmC;AACjF,IAAA,IAAI,CAAC,eAAA;AACD,MAAA,OAAO,IAAA;AAEX,IAAA,MAAM,cAAA,GAAiB,aAAA,CAAc,UAAA,CAAW,eAAe,CAAA;AAE/D,IAAA,IAAI,cAAA,CAAe,MAAA,GAAS,aAAA,CAAc,UAAA,GAAa,aAAA,CAAc,QAAA;AACjE,MAAA,MAAM,IAAI,MAAM,mOAA0C,CAAA;AAE9D,IAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,KAAA,CAAM,CAAA,EAAG,cAAc,UAAU,CAAA;AAC9D,IAAA,MAAM,iBAAA,GAAoB,cAAA,CAAe,KAAA,CAAM,aAAA,CAAc,UAAU,CAAA;AAEvE,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MAClC,KAAA;AAAA,MACC,GAAA;AAAA,MACA,SAAA;AAAA,MACA,KAAA;AAAA,MACC,CAAC,SAAS;AAAA,KAAC;AAEjB,IAAA,IAAI;AACF,MAAA,MAAM,eAAA,GAAkB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,QAAQ;AAAA,UAClD,IAAA,EAAM,SAAA;AAAA,UACN,EAAA,EAAI,KAAA;AAAA,UACJ,SAAA,EACA,cAAc,QAAA,GAAW;AAAA,SAC5B;AAAA,QACC,SAAA;AAAA,QACA;AAAA,OAAiB;AAEjB,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,MAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,MAAA,CAAO,eAAe,CAAA;AAEjD,MAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAAA,IAC9B,SAAS,CAAA,EAAG;AACV,MAAA,OAAA,CAAQ,KAAA,CAAM,kHAAwB,CAAC,CAAA;AACvC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAGF;;;AC3EO,IAAM,uBAAN,MAA0B;AAAA,EAA1B,WAAA,GAAA;AACL,IAAA,IAAA,CAAS,UAAA,GAAa,GAAA;AACtB,IAAA,IAAA,CAAS,QAAA,GAAW,EAAA;AAAA,EAAA;AAAA,EAEpB,MAAM,sBAAA,CAAuB,KAAA,EAAe,QAAA,EAAkB,IAAA,EAAkE;AAC9H,IAAA,MAAM,QAAA,GAAW,IAAI,UAAA,CAAW,IAAI,CAAA;AAEpC,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,MAAM,eAAA,GAAkB,KAAA,CAAM,IAAA,EAAK,CAAE,iBAAA,EAAkB;AACvD,IAAA,MAAM,gBAAA,GAAmB,CAAA,EAAG,eAAe,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AACvD,IAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA;AACrD,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,aAAA,EAAe,QAAA,EAAU,KAAA,EAAO,CAAC,YAAA,EAAc,WAAW,CAAC,CAAA;AAEhH,IAAA,MAAM,aAAA,GAAgB,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW;AAAA,MACjD,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,QAAA;AAAA,MACN,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,IAAA,EAAM;AAAA,KACV,EAAG,OAAA,EAAS,IAAA,CAAK,QAAA,GAAW,CAAC,CAAA;AAE7B,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,aAAA,EAAe,MAAA,EAAQ,KAAA,EAAO,CAAC,YAAY,CAAC,CAAA;AAEnG,IAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,MAC9B,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,WAAW,IAAA,EAAM,IAAI,UAAA,CAAW,CAAC,CAAA,EAAG,IAAA,EAAM,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA,EAAE;AAAA,MACjG,SAAA;AAAA,MACA,KAAK,QAAA,GAAW;AAAA,KAClB;AAEA,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,MACpC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,WAAW,IAAA,EAAM,IAAI,UAAA,CAAW,CAAC,CAAA,EAAG,IAAA,EAAM,OAAA,CAAQ,MAAA,CAAO,qBAAqB,CAAA,EAAE;AAAA,MACtG,SAAA;AAAA,MACA,KAAK,QAAA,GAAW;AAAA,KAClB;AAEA,IAAA,OAAO;AAAA,MACL,GAAA,EAAK,IAAI,UAAA,CAAW,GAAG,CAAA;AAAA,MACvB,UAAU,aAAA,CAAc,QAAA,CAAS,IAAI,UAAA,CAAW,SAAS,CAAC;AAAA,KAC5D;AAAA,EACF;AACF;;;ACtCO,IAAM,aAAN,MAAiB;AAAA,EAAjB,WAAA,GAAA;AACL,IAAA,IAAA,CAAiB,aAAA,GAAgB,IAAI,oBAAA,EAAqB;AAAA,EAAA;AAAA,EAE1D,MAAM,oBAAoB,QAAA,EAAmC;AAC3D,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,QAAQ,CAAC,CAAA;AACxE,IAAA,MAAM,IAAI,aAAA,CAAc,MAAA,CAAO,cAAc,CAAA,EAAG,CAAA,EAAG,cAAc,CAAC,CAAA;AAClE,IAAA,OAAO,cAAc,QAAA,CAAS,aAAA,CAAc,mBAAmB,CAAA,EAAG,aAAA,CAAc,YAAY,CAAC,CAAA;AAAA,EAC/F;AAAA,EAEA,MAAM,gBAAA,CAAiB,KAAA,EAAe,QAAA,EAAkB,YAAoB,QAAA,EAAiE;AAC3I,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,UAAA,CAAW,UAAU,CAAA;AAChD,IAAA,MAAM,EAAE,UAAS,GAAI,MAAM,KAAK,aAAA,CAAc,sBAAA,CAAuB,KAAA,EAAO,QAAA,EAAU,IAAI,CAAA;AAC1F,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,QAAQ,CAAC,CAAA;AAExE,IAAA,MAAM,SAAS,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AACxD,IAAA,MAAM,CAAA,GAAI,aAAA,CAAc,aAAA,CAAc,MAAM,CAAA;AAE5C,IAAA,MAAM,IAAI,aAAA,CAAc,MAAA,CAAO,cAAc,CAAA,EAAG,CAAA,EAAG,cAAc,CAAC,CAAA;AAClE,IAAA,IAAI,CAAA,GAAI,cAAc,CAAA,KAAM,EAAA;AACxB,MAAA,MAAM,IAAI,MAAM,sHAAiC,CAAA;AAErD,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,QAAQ,CAAC,CAAA;AACxE,IAAA,IAAI,CAAA,GAAI,cAAc,CAAA,KAAM,EAAA;AACxB,MAAA,MAAM,IAAI,MAAM,sHAAiC,CAAA;AAErD,IAAA,MAAM,CAAA,GAAI,MAAM,aAAA,CAAc,cAAA,CAAe;AAAA,MAC3C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA;AAAa,KAChD,CAAA;AACD,IAAA,IAAI,CAAA,KAAM,EAAA;AACN,MAAA,MAAM,IAAI,MAAM,6HAAyB,CAAA;AAE7C,IAAA,MAAM,KAAK,aAAA,CAAc,MAAA,CAAO,cAAc,CAAA,EAAG,CAAA,EAAG,cAAc,CAAC,CAAA;AACnE,IAAA,MAAM,IAAA,GAAQ,aAAA,CAAc,CAAA,GAAI,EAAA,GAAM,aAAA,CAAc,CAAA;AACpD,IAAA,MAAM,IAAA,GAAA,CAAQ,CAAA,GAAI,IAAA,GAAO,aAAA,CAAc,KAAK,aAAA,CAAc,CAAA;AAC1D,IAAA,MAAM,QAAA,GAAW,IAAK,CAAA,GAAI,CAAA;AAC1B,IAAA,MAAM,IAAI,aAAA,CAAc,MAAA,CAAO,IAAA,EAAM,QAAA,EAAU,cAAc,CAAC,CAAA;AAE9D,IAAA,IAAI,CAAA,KAAM,EAAA;AACN,MAAA,MAAM,IAAI,MAAM,kHAA6B,CAAA;AAEjD,IAAA,MAAM,EAAA,GAAK,MAAM,aAAA,CAAc,cAAA,CAAe;AAAA,MAC5C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA;AAAa,KAChD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,CAAA,EAAG,cAAc,QAAA,CAAS,aAAA,CAAc,mBAAmB,CAAA,EAAG,aAAA,CAAc,YAAY,CAAC,CAAA;AAAA,MACzF,IAAI,aAAA,CAAc,QAAA,CAAS,cAAc,kBAAA,CAAmB,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,MACnE,CAAA,EAAG,cAAc,QAAA,CAAS,aAAA,CAAc,mBAAmB,CAAA,EAAG,aAAA,CAAc,YAAY,CAAC;AAAA,KAC3F;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CAAe,KAAA,EAAe,MAAA,EAAgB,OAAe,YAAA,EAAwC;AACzG,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,KAAK,CAAC,CAAA;AACrE,IAAA,MAAM,KAAK,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,MAAM,CAAC,CAAA;AACvE,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,KAAK,CAAC,CAAA;AAErE,IAAA,MAAM,UAAA,GAAa,MAAM,aAAA,CAAc,cAAA,CAAe;AAAA,MACpD,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,EAAA,EAAG;AAAA,MACxB,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA;AAAa,KAChD,CAAA;AACD,IAAA,MAAM,iBAAiB,aAAA,CAAc,QAAA,CAAS,cAAc,kBAAA,CAAmB,UAAA,EAAY,EAAE,CAAC,CAAA;AAE9F,IAAA,OAAO,YAAA,KAAiB,cAAA;AAAA,EAC1B;AACF","file":"index.cjs","sourcesContent":["export class SecurityUtils {\r\n    static readonly MODULUS_SIZE : number = 384;\r\n    static readonly NONCE_SIZE : number = 12;\r\n    static readonly TAG_SIZE : number = 16;\r\n    static readonly KEY_SIZE : number = 32;\r\n\r\n    static readonly N : bigint = BigInt(\"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\");\r\n    static readonly g : bigint = BigInt(2);\r\n    static readonly k : bigint = BigInt(\"0xD55AE1AEC9F9115621E93E16E5DE4517DF8450D0957024D1256AA32B71E4E412\");\r\n\r\n    /*                          \r\n        Base64 helpers\r\n    */\r\n\r\n    static toBase64(bytes: Uint8Array): string {\r\n        let binary = '';\r\n        for (let i = 0; i < bytes.byteLength; i++)\r\n            binary += String.fromCharCode(bytes[i]);\r\n\r\n        return window.btoa(binary);\r\n    }\r\n\r\n    static fromBase64(base64: string): Uint8Array {\r\n        const cleaned = base64.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\r\n        const binary = window.atob(cleaned);\r\n        const bytes = new Uint8Array(binary.length);\r\n\r\n        for (let i = 0; i < binary.length; i++)\r\n             bytes[i] = binary.charCodeAt(i);\r\n\r\n        return bytes;\r\n    }\r\n\r\n    /*                          \r\n        BigInt helpers\r\n    */\r\n\r\n    static bytesToBigInt = (bytes: Uint8Array): bigint =>  BigInt('0x' + Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join(''));\r\n\r\n    static bigIntToFixedBytes(bn: bigint, length: number): Uint8Array {\r\n        let hex = bn.toString(16);\r\n\r\n        if (hex.length % 2 !== 0) \r\n            hex = '0' + hex;\r\n\r\n        if (hex.length > length * 2) \r\n            throw new Error(`Значение слишком велико для ${length} байт`);\r\n        \r\n        hex = hex.padStart(length * 2, '0');\r\n\r\n        return this.fromHex(hex);\r\n    }\r\n\r\n    private static fromHex(hex: string): Uint8Array {\r\n        const matches = hex.match(/.{1,2}/g);\r\n        return new Uint8Array(matches ? matches.map(byte => parseInt(byte, 16)) : []);\r\n    }  \r\n\r\n    /*                          \r\n        Math\r\n    */  \r\n   \r\n    static expMod(base: bigint, exp: bigint, mod: bigint): bigint {\r\n        let res = BigInt(1);\r\n        base = base % mod;\r\n\r\n        while (exp > 0) {\r\n        if (exp % BigInt(2) === BigInt(1)) res = (res * base) % mod;\r\n        base = (base * base) % mod;\r\n        exp = exp / BigInt(2);\r\n        }\r\n\r\n        return res;\r\n    }\r\n\r\n    /*                          \r\n        SRP helper\r\n    */ \r\n   static async hashAsPerSrp6a(items: { value: bigint; length: number }[]): Promise<bigint> {\r\n        const buffers = items.map(({ value, length }) => this.bigIntToFixedBytes(value, length));\r\n        const totalLen = buffers.reduce((sum, buf) => sum + buf.length, 0);\r\n        const combined = new Uint8Array(totalLen);\r\n\r\n        let offset = 0;\r\n\r\n        for (const buf of buffers) {\r\n            combined.set(buf, offset);\r\n            offset += buf.length;\r\n        }\r\n\r\n        const hash = await crypto.subtle.digest('SHA-256', combined);\r\n\r\n        return this.bytesToBigInt(new Uint8Array(hash));\r\n    }\r\n}","import { SecurityUtils } from '../utils/index.js'\r\n\r\nexport class CryptoService {\r\n\r\n  async encryptData<T>(dataModel: T, key: Uint8Array): Promise<string> {\r\n    const encoder = new TextEncoder();\r\n    let jsonString: string;\r\n    if (dataModel instanceof Uint8Array) {\r\n      jsonString = `\"${SecurityUtils.toBase64(dataModel)}\"`;\r\n    } else {\r\n      jsonString = JSON.stringify(dataModel);\r\n    }\r\n    const plainBytes = encoder.encode(jsonString);\r\n    const nonce = crypto.getRandomValues(new Uint8Array(SecurityUtils.NONCE_SIZE));\r\n\r\n    const cryptoKey = await crypto.subtle.importKey(\r\n      'raw', \r\n      key as BufferSource, \r\n      'AES-GCM', \r\n      false, \r\n      ['encrypt']);\r\n\r\n    const encryptedContent = await crypto.subtle.encrypt({ \r\n        name: 'AES-GCM',\r\n        iv: nonce, \r\n        tagLength: SecurityUtils.TAG_SIZE * 8},\r\n        cryptoKey,\r\n         plainBytes\r\n    );\r\n\r\n    const result = new Uint8Array(SecurityUtils.NONCE_SIZE + encryptedContent.byteLength);\r\n    result.set(nonce, 0);\r\n    result.set(new Uint8Array(encryptedContent), SecurityUtils.NONCE_SIZE);\r\n    \r\n    return SecurityUtils.toBase64(result);\r\n  }\r\n\r\n  async decryptedData<T>(encryptedBase64: string, key: Uint8Array): Promise<T | null>{\r\n    if (!encryptedBase64) \r\n        return null;\r\n\r\n    const encryptedBytes = SecurityUtils.fromBase64(encryptedBase64);\r\n\r\n    if (encryptedBytes.length < SecurityUtils.NONCE_SIZE + SecurityUtils.TAG_SIZE)\r\n        throw new Error('Недопустимый формат зашифрованных данных');\r\n\r\n    const nonce = encryptedBytes.slice(0, SecurityUtils.NONCE_SIZE);\r\n    const ciphertextWithTag = encryptedBytes.slice(SecurityUtils.NONCE_SIZE);\r\n\r\n    const cryptoKey = await crypto.subtle.importKey(\r\n        'raw',\r\n         key as BufferSource, \r\n         'AES-GCM', \r\n         false,\r\n          ['decrypt']);\r\n\r\n    try {\r\n      const decryptedBuffer = await crypto.subtle.decrypt({ \r\n        name: 'AES-GCM',\r\n        iv: nonce,\r\n        tagLength: \r\n        SecurityUtils.TAG_SIZE * 8\r\n     },\r\n      cryptoKey,\r\n      ciphertextWithTag);\r\n\r\n      const decoder = new TextDecoder();\r\n      const jsonString = decoder.decode(decryptedBuffer);\r\n\r\n      return JSON.parse(jsonString) as T;\r\n    } catch (e) {\r\n      console.error('Ошибка дешифрования:', e);\r\n      return null;\r\n    }\r\n  }\r\n\r\n  generateRandomBytes = (length = 32): Uint8Array => crypto.getRandomValues(new Uint8Array(length));\r\n}","import { SecurityUtils } from \"../utils/security.utils.js\";\r\n\r\nexport class KeyDerivationService{\r\n  readonly ITERATIONS = 600_000;\r\n  readonly KEY_SIZE = 32;\r\n\r\n  async deriveKeysFromPassword(login: string, password: string, salt: Uint8Array): Promise<{ kek: Uint8Array; authHash: string }> {\r\n    const safeSalt = new Uint8Array(salt);\r\n    \r\n    const encoder = new TextEncoder();\r\n    const normalizedLogin = login.trim().toLocaleLowerCase();\r\n    const combinedPassword = `${normalizedLogin}:${password}`;\r\n    const passwordBytes = encoder.encode(combinedPassword);\r\n    const baseKey = await crypto.subtle.importKey('raw', passwordBytes, 'PBKDF2', false, ['deriveBits', 'deriveKey']);\r\n\r\n    const masterKeyBits = await crypto.subtle.deriveBits({\r\n        name: 'PBKDF2',\r\n        salt: safeSalt, \r\n        iterations: this.ITERATIONS,\r\n        hash: 'SHA-256'\r\n    }, baseKey, this.KEY_SIZE * 8);\r\n\r\n    const masterKey = await crypto.subtle.importKey('raw', masterKeyBits, 'HKDF', false, ['deriveBits']);\r\n\r\n    const kek = await crypto.subtle.deriveBits(\r\n      { name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: encoder.encode('AES-GCM-KEK-v1') },\r\n      masterKey,\r\n      this.KEY_SIZE * 8\r\n    );\r\n\r\n    const authBytes = await crypto.subtle.deriveBits(\r\n      { name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: encoder.encode('SERVER-AUTH-HASH-v1') },\r\n      masterKey,\r\n      this.KEY_SIZE * 8\r\n    );\r\n\r\n    return {\r\n      kek: new Uint8Array(kek),\r\n      authHash: SecurityUtils.toBase64(new Uint8Array(authBytes)),\r\n    };\r\n  }\r\n}","import { KeyDerivationService } from '../crypto/index.js';\r\nimport { SecurityUtils } from '../utils/index.js';\r\n\r\nexport class SrpService {\r\n  private readonly keyDerivation = new KeyDerivationService();\r\n\r\n  async generateSrpVerifier(authHash: string): Promise<string> {\r\n    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));\r\n    const v = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);\r\n    return SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(v, SecurityUtils.MODULUS_SIZE));\r\n  }\r\n\r\n  async generateSrpProof(login: string, password: string, saltBase64: string, B_base64: string): Promise<{ A: string; M1: string; S: string }> {\r\n    const salt = SecurityUtils.fromBase64(saltBase64);\r\n    const { authHash } = await this.keyDerivation.deriveKeysFromPassword(login, password, salt);\r\n    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));\r\n\r\n    const aBytes = crypto.getRandomValues(new Uint8Array(32));\r\n    const a = SecurityUtils.bytesToBigInt(aBytes);\r\n\r\n    const A = SecurityUtils.expMod(SecurityUtils.g, a, SecurityUtils.N);\r\n    if (A % SecurityUtils.N === 0n) \r\n        throw new Error('Критическая ошибка: A % N === 0');\r\n\r\n    const B = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(B_base64));\r\n    if (B % SecurityUtils.N === 0n) \r\n        throw new Error('Критическая ошибка: B % N === 0');\r\n\r\n    const u = await SecurityUtils.hashAsPerSrp6a([\r\n      { value: A, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: B, length: SecurityUtils.MODULUS_SIZE },\r\n    ]);\r\n    if (u === 0n) \r\n        throw new Error('Недопустимое значение u');\r\n\r\n    const gX = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);\r\n    const term = (SecurityUtils.k * gX) % SecurityUtils.N;\r\n    const base = (B - term + SecurityUtils.N) % SecurityUtils.N;\r\n    const exponent = a + (u * x);\r\n    const S = SecurityUtils.expMod(base, exponent, SecurityUtils.N);\r\n\r\n    if (S === 0n) \r\n        throw new Error('Критическая ошибка: S === 0');\r\n\r\n    const M1 = await SecurityUtils.hashAsPerSrp6a([\r\n      { value: A, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: B, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: S, length: SecurityUtils.MODULUS_SIZE },\r\n    ]);\r\n\r\n    return {\r\n      A: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(A, SecurityUtils.MODULUS_SIZE)),\r\n      M1: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(M1, 32)),\r\n      S: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(S, SecurityUtils.MODULUS_SIZE)),\r\n    };\r\n  }\r\n\r\n  async verifyServerM2(A_b64: string, M1_b64: string, S_b64: string, serverM2_b64: string): Promise<boolean> {\r\n    const A = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(A_b64));\r\n    const M1 = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(M1_b64));\r\n    const S = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(S_b64));\r\n\r\n    const computedM2 = await SecurityUtils.hashAsPerSrp6a([\r\n      { value: A, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: M1, length: 32 },\r\n      { value: S, length: SecurityUtils.MODULUS_SIZE },\r\n    ]);\r\n    const computedM2_b64 = SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(computedM2, 32));\r\n\r\n    return serverM2_b64 === computedM2_b64;\r\n  }\r\n}"]}

package/dist/index.d.cts

@@ -0,0 +1,47 @@
+declare class CryptoService {
+    encryptData<T>(dataModel: T, key: Uint8Array): Promise<string>;
+    decryptedData<T>(encryptedBase64: string, key: Uint8Array): Promise<T | null>;
+    generateRandomBytes: (length?: number) => Uint8Array;
+}
+
+declare class KeyDerivationService {
+    readonly ITERATIONS = 600000;
+    readonly KEY_SIZE = 32;
+    deriveKeysFromPassword(login: string, password: string, salt: Uint8Array): Promise<{
+        kek: Uint8Array;
+        authHash: string;
+    }>;
+}
+
+declare class SecurityUtils {
+    static readonly MODULUS_SIZE: number;
+    static readonly NONCE_SIZE: number;
+    static readonly TAG_SIZE: number;
+    static readonly KEY_SIZE: number;
+    static readonly N: bigint;
+    static readonly g: bigint;
+    static readonly k: bigint;
+    static toBase64(bytes: Uint8Array): string;
+    static fromBase64(base64: string): Uint8Array;
+    static bytesToBigInt: (bytes: Uint8Array) => bigint;
+    static bigIntToFixedBytes(bn: bigint, length: number): Uint8Array;
+    private static fromHex;
+    static expMod(base: bigint, exp: bigint, mod: bigint): bigint;
+    static hashAsPerSrp6a(items: {
+        value: bigint;
+        length: number;
+    }[]): Promise<bigint>;
+}
+
+declare class SrpService {
+    private readonly keyDerivation;
+    generateSrpVerifier(authHash: string): Promise<string>;
+    generateSrpProof(login: string, password: string, saltBase64: string, B_base64: string): Promise<{
+        A: string;
+        M1: string;
+        S: string;
+    }>;
+    verifyServerM2(A_b64: string, M1_b64: string, S_b64: string, serverM2_b64: string): Promise<boolean>;
+}
+
+export { CryptoService, KeyDerivationService, SecurityUtils, SrpService };

package/dist/index.d.ts

@@ -0,0 +1,47 @@
+declare class CryptoService {
+    encryptData<T>(dataModel: T, key: Uint8Array): Promise<string>;
+    decryptedData<T>(encryptedBase64: string, key: Uint8Array): Promise<T | null>;
+    generateRandomBytes: (length?: number) => Uint8Array;
+}
+
+declare class KeyDerivationService {
+    readonly ITERATIONS = 600000;
+    readonly KEY_SIZE = 32;
+    deriveKeysFromPassword(login: string, password: string, salt: Uint8Array): Promise<{
+        kek: Uint8Array;
+        authHash: string;
+    }>;
+}
+
+declare class SecurityUtils {
+    static readonly MODULUS_SIZE: number;
+    static readonly NONCE_SIZE: number;
+    static readonly TAG_SIZE: number;
+    static readonly KEY_SIZE: number;
+    static readonly N: bigint;
+    static readonly g: bigint;
+    static readonly k: bigint;
+    static toBase64(bytes: Uint8Array): string;
+    static fromBase64(base64: string): Uint8Array;
+    static bytesToBigInt: (bytes: Uint8Array) => bigint;
+    static bigIntToFixedBytes(bn: bigint, length: number): Uint8Array;
+    private static fromHex;
+    static expMod(base: bigint, exp: bigint, mod: bigint): bigint;
+    static hashAsPerSrp6a(items: {
+        value: bigint;
+        length: number;
+    }[]): Promise<bigint>;
+}
+
+declare class SrpService {
+    private readonly keyDerivation;
+    generateSrpVerifier(authHash: string): Promise<string>;
+    generateSrpProof(login: string, password: string, saltBase64: string, B_base64: string): Promise<{
+        A: string;
+        M1: string;
+        S: string;
+    }>;
+    verifyServerM2(A_b64: string, M1_b64: string, S_b64: string, serverM2_b64: string): Promise<boolean>;
+}
+
+export { CryptoService, KeyDerivationService, SecurityUtils, SrpService };

package/dist/index.js

@@ -0,0 +1,244 @@
+// src/utils/security.utils.ts
+var SecurityUtils = class {
+  /*                          
+      Base64 helpers
+  */
+  static toBase64(bytes) {
+    let binary = "";
+    for (let i = 0; i < bytes.byteLength; i++)
+      binary += String.fromCharCode(bytes[i]);
+    return window.btoa(binary);
+  }
+  static fromBase64(base64) {
+    const cleaned = base64.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
+    const binary = window.atob(cleaned);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+      bytes[i] = binary.charCodeAt(i);
+    return bytes;
+  }
+  static bigIntToFixedBytes(bn, length) {
+    let hex = bn.toString(16);
+    if (hex.length % 2 !== 0)
+      hex = "0" + hex;
+    if (hex.length > length * 2)
+      throw new Error(`\u0417\u043D\u0430\u0447\u0435\u043D\u0438\u0435 \u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0432\u0435\u043B\u0438\u043A\u043E \u0434\u043B\u044F ${length} \u0431\u0430\u0439\u0442`);
+    hex = hex.padStart(length * 2, "0");
+    return this.fromHex(hex);
+  }
+  static fromHex(hex) {
+    const matches = hex.match(/.{1,2}/g);
+    return new Uint8Array(matches ? matches.map((byte) => parseInt(byte, 16)) : []);
+  }
+  /*                          
+      Math
+  */
+  static expMod(base, exp, mod) {
+    let res = BigInt(1);
+    base = base % mod;
+    while (exp > 0) {
+      if (exp % BigInt(2) === BigInt(1)) res = res * base % mod;
+      base = base * base % mod;
+      exp = exp / BigInt(2);
+    }
+    return res;
+  }
+  /*                          
+      SRP helper
+  */
+  static async hashAsPerSrp6a(items) {
+    const buffers = items.map(({ value, length }) => this.bigIntToFixedBytes(value, length));
+    const totalLen = buffers.reduce((sum, buf) => sum + buf.length, 0);
+    const combined = new Uint8Array(totalLen);
+    let offset = 0;
+    for (const buf of buffers) {
+      combined.set(buf, offset);
+      offset += buf.length;
+    }
+    const hash = await crypto.subtle.digest("SHA-256", combined);
+    return this.bytesToBigInt(new Uint8Array(hash));
+  }
+};
+SecurityUtils.MODULUS_SIZE = 384;
+SecurityUtils.NONCE_SIZE = 12;
+SecurityUtils.TAG_SIZE = 16;
+SecurityUtils.KEY_SIZE = 32;
+SecurityUtils.N = BigInt("0xAC6BDB41324A9A9BF166DE5E1F403D434A6E1B3B94A7E62AC1211858E002C75AD4455C9D19C0A3180296917A376205164043E20144FF485719D181A99EB574671AC58054457ED444A67032EA17D03AD43464D2397449CA593630A670D90D95A78E846A3C8AF80862098D80F33C42ED7059E75225E0A52718E2379369F65B79680A6560B080092EE71986066735A96A7D42E7597116742B02D3A154471B6A23D84E0D642C790D597A2BB7F5A48F734898BDD138C69493E723491959C1B4BD40C91C1C7924F88D046467A006507E781220A80C55A927906A7C6C9C227E674686DD5D1B855D28F0D604E24586C608630B9A34C4808381A54F0D9080A5F90B60187F");
+SecurityUtils.g = BigInt(2);
+SecurityUtils.k = BigInt("0xD55AE1AEC9F9115621E93E16E5DE4517DF8450D0957024D1256AA32B71E4E412");
+/*                          
+    BigInt helpers
+*/
+SecurityUtils.bytesToBigInt = (bytes) => BigInt("0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join(""));
+
+// src/crypto/crypto.service.ts
+var CryptoService = class {
+  constructor() {
+    this.generateRandomBytes = (length = 32) => crypto.getRandomValues(new Uint8Array(length));
+  }
+  async encryptData(dataModel, key) {
+    const encoder = new TextEncoder();
+    let jsonString;
+    if (dataModel instanceof Uint8Array) {
+      jsonString = `"${SecurityUtils.toBase64(dataModel)}"`;
+    } else {
+      jsonString = JSON.stringify(dataModel);
+    }
+    const plainBytes = encoder.encode(jsonString);
+    const nonce = crypto.getRandomValues(new Uint8Array(SecurityUtils.NONCE_SIZE));
+    const cryptoKey = await crypto.subtle.importKey(
+      "raw",
+      key,
+      "AES-GCM",
+      false,
+      ["encrypt"]
+    );
+    const encryptedContent = await crypto.subtle.encrypt(
+      {
+        name: "AES-GCM",
+        iv: nonce,
+        tagLength: SecurityUtils.TAG_SIZE * 8
+      },
+      cryptoKey,
+      plainBytes
+    );
+    const result = new Uint8Array(SecurityUtils.NONCE_SIZE + encryptedContent.byteLength);
+    result.set(nonce, 0);
+    result.set(new Uint8Array(encryptedContent), SecurityUtils.NONCE_SIZE);
+    return SecurityUtils.toBase64(result);
+  }
+  async decryptedData(encryptedBase64, key) {
+    if (!encryptedBase64)
+      return null;
+    const encryptedBytes = SecurityUtils.fromBase64(encryptedBase64);
+    if (encryptedBytes.length < SecurityUtils.NONCE_SIZE + SecurityUtils.TAG_SIZE)
+      throw new Error("\u041D\u0435\u0434\u043E\u043F\u0443\u0441\u0442\u0438\u043C\u044B\u0439 \u0444\u043E\u0440\u043C\u0430\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043E\u0432\u0430\u043D\u043D\u044B\u0445 \u0434\u0430\u043D\u043D\u044B\u0445");
+    const nonce = encryptedBytes.slice(0, SecurityUtils.NONCE_SIZE);
+    const ciphertextWithTag = encryptedBytes.slice(SecurityUtils.NONCE_SIZE);
+    const cryptoKey = await crypto.subtle.importKey(
+      "raw",
+      key,
+      "AES-GCM",
+      false,
+      ["decrypt"]
+    );
+    try {
+      const decryptedBuffer = await crypto.subtle.decrypt(
+        {
+          name: "AES-GCM",
+          iv: nonce,
+          tagLength: SecurityUtils.TAG_SIZE * 8
+        },
+        cryptoKey,
+        ciphertextWithTag
+      );
+      const decoder = new TextDecoder();
+      const jsonString = decoder.decode(decryptedBuffer);
+      return JSON.parse(jsonString);
+    } catch (e) {
+      console.error("\u041E\u0448\u0438\u0431\u043A\u0430 \u0434\u0435\u0448\u0438\u0444\u0440\u043E\u0432\u0430\u043D\u0438\u044F:", e);
+      return null;
+    }
+  }
+};
+
+// src/crypto/key-derivation.service.ts
+var KeyDerivationService = class {
+  constructor() {
+    this.ITERATIONS = 6e5;
+    this.KEY_SIZE = 32;
+  }
+  async deriveKeysFromPassword(login, password, salt) {
+    const safeSalt = new Uint8Array(salt);
+    const encoder = new TextEncoder();
+    const normalizedLogin = login.trim().toLocaleLowerCase();
+    const combinedPassword = `${normalizedLogin}:${password}`;
+    const passwordBytes = encoder.encode(combinedPassword);
+    const baseKey = await crypto.subtle.importKey("raw", passwordBytes, "PBKDF2", false, ["deriveBits", "deriveKey"]);
+    const masterKeyBits = await crypto.subtle.deriveBits({
+      name: "PBKDF2",
+      salt: safeSalt,
+      iterations: this.ITERATIONS,
+      hash: "SHA-256"
+    }, baseKey, this.KEY_SIZE * 8);
+    const masterKey = await crypto.subtle.importKey("raw", masterKeyBits, "HKDF", false, ["deriveBits"]);
+    const kek = await crypto.subtle.deriveBits(
+      { name: "HKDF", hash: "SHA-256", salt: new Uint8Array(0), info: encoder.encode("AES-GCM-KEK-v1") },
+      masterKey,
+      this.KEY_SIZE * 8
+    );
+    const authBytes = await crypto.subtle.deriveBits(
+      { name: "HKDF", hash: "SHA-256", salt: new Uint8Array(0), info: encoder.encode("SERVER-AUTH-HASH-v1") },
+      masterKey,
+      this.KEY_SIZE * 8
+    );
+    return {
+      kek: new Uint8Array(kek),
+      authHash: SecurityUtils.toBase64(new Uint8Array(authBytes))
+    };
+  }
+};
+
+// src/srp/srp.service.ts
+var SrpService = class {
+  constructor() {
+    this.keyDerivation = new KeyDerivationService();
+  }
+  async generateSrpVerifier(authHash) {
+    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));
+    const v = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);
+    return SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(v, SecurityUtils.MODULUS_SIZE));
+  }
+  async generateSrpProof(login, password, saltBase64, B_base64) {
+    const salt = SecurityUtils.fromBase64(saltBase64);
+    const { authHash } = await this.keyDerivation.deriveKeysFromPassword(login, password, salt);
+    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));
+    const aBytes = crypto.getRandomValues(new Uint8Array(32));
+    const a = SecurityUtils.bytesToBigInt(aBytes);
+    const A = SecurityUtils.expMod(SecurityUtils.g, a, SecurityUtils.N);
+    if (A % SecurityUtils.N === 0n)
+      throw new Error("\u041A\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043A\u0430\u044F \u043E\u0448\u0438\u0431\u043A\u0430: A % N === 0");
+    const B = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(B_base64));
+    if (B % SecurityUtils.N === 0n)
+      throw new Error("\u041A\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043A\u0430\u044F \u043E\u0448\u0438\u0431\u043A\u0430: B % N === 0");
+    const u = await SecurityUtils.hashAsPerSrp6a([
+      { value: A, length: SecurityUtils.MODULUS_SIZE },
+      { value: B, length: SecurityUtils.MODULUS_SIZE }
+    ]);
+    if (u === 0n)
+      throw new Error("\u041D\u0435\u0434\u043E\u043F\u0443\u0441\u0442\u0438\u043C\u043E\u0435 \u0437\u043D\u0430\u0447\u0435\u043D\u0438\u0435 u");
+    const gX = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);
+    const term = SecurityUtils.k * gX % SecurityUtils.N;
+    const base = (B - term + SecurityUtils.N) % SecurityUtils.N;
+    const exponent = a + u * x;
+    const S = SecurityUtils.expMod(base, exponent, SecurityUtils.N);
+    if (S === 0n)
+      throw new Error("\u041A\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043A\u0430\u044F \u043E\u0448\u0438\u0431\u043A\u0430: S === 0");
+    const M1 = await SecurityUtils.hashAsPerSrp6a([
+      { value: A, length: SecurityUtils.MODULUS_SIZE },
+      { value: B, length: SecurityUtils.MODULUS_SIZE },
+      { value: S, length: SecurityUtils.MODULUS_SIZE }
+    ]);
+    return {
+      A: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(A, SecurityUtils.MODULUS_SIZE)),
+      M1: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(M1, 32)),
+      S: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(S, SecurityUtils.MODULUS_SIZE))
+    };
+  }
+  async verifyServerM2(A_b64, M1_b64, S_b64, serverM2_b64) {
+    const A = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(A_b64));
+    const M1 = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(M1_b64));
+    const S = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(S_b64));
+    const computedM2 = await SecurityUtils.hashAsPerSrp6a([
+      { value: A, length: SecurityUtils.MODULUS_SIZE },
+      { value: M1, length: 32 },
+      { value: S, length: SecurityUtils.MODULUS_SIZE }
+    ]);
+    const computedM2_b64 = SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(computedM2, 32));
+    return serverM2_b64 === computedM2_b64;
+  }
+};
+
+export { CryptoService, KeyDerivationService, SecurityUtils, SrpService };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/security.utils.ts","../src/crypto/crypto.service.ts","../src/crypto/key-derivation.service.ts","../src/srp/srp.service.ts"],"names":[],"mappings":";AAAO,IAAM,gBAAN,MAAoB;AAAA;AAAA;AAAA;AAAA,EAcvB,OAAO,SAAS,KAAA,EAA2B;AACvC,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,UAAA,EAAY,CAAA,EAAA;AAClC,MAAA,MAAA,IAAU,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAC,CAAA;AAE1C,IAAA,OAAO,MAAA,CAAO,KAAK,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,OAAO,WAAW,MAAA,EAA4B;AAC1C,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC9E,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AAE1C,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA;AAC9B,MAAA,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AAEnC,IAAA,OAAO,KAAA;AAAA,EACX;AAAA,EAQA,OAAO,kBAAA,CAAmB,EAAA,EAAY,MAAA,EAA4B;AAC9D,IAAA,IAAI,GAAA,GAAM,EAAA,CAAG,QAAA,CAAS,EAAE,CAAA;AAExB,IAAA,IAAI,GAAA,CAAI,SAAS,CAAA,KAAM,CAAA;AACnB,MAAA,GAAA,GAAM,GAAA,GAAM,GAAA;AAEhB,IAAA,IAAI,GAAA,CAAI,SAAS,MAAA,GAAS,CAAA;AACtB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oJAAA,EAA+B,MAAM,CAAA,yBAAA,CAAO,CAAA;AAEhE,IAAA,GAAA,GAAM,GAAA,CAAI,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG,GAAG,CAAA;AAElC,IAAA,OAAO,IAAA,CAAK,QAAQ,GAAG,CAAA;AAAA,EAC3B;AAAA,EAEA,OAAe,QAAQ,GAAA,EAAyB;AAC5C,IAAA,MAAM,OAAA,GAAU,GAAA,CAAI,KAAA,CAAM,SAAS,CAAA;AACnC,IAAA,OAAO,IAAI,UAAA,CAAW,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,CAAA,IAAA,KAAQ,QAAA,CAAS,IAAA,EAAM,EAAE,CAAC,CAAA,GAAI,EAAE,CAAA;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAMA,OAAO,MAAA,CAAO,IAAA,EAAc,GAAA,EAAa,GAAA,EAAqB;AAC1D,IAAA,IAAI,GAAA,GAAM,OAAO,CAAC,CAAA;AAClB,IAAA,IAAA,GAAO,IAAA,GAAO,GAAA;AAEd,IAAA,OAAO,MAAM,CAAA,EAAG;AAChB,MAAA,IAAI,GAAA,GAAM,OAAO,CAAC,CAAA,KAAM,OAAO,CAAC,CAAA,EAAG,GAAA,GAAO,GAAA,GAAM,IAAA,GAAQ,GAAA;AACxD,MAAA,IAAA,GAAQ,OAAO,IAAA,GAAQ,GAAA;AACvB,MAAA,GAAA,GAAM,GAAA,GAAM,OAAO,CAAC,CAAA;AAAA,IACpB;AAEA,IAAA,OAAO,GAAA;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKD,aAAa,eAAe,KAAA,EAA6D;AACpF,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,CAAC,EAAE,KAAA,EAAO,MAAA,EAAO,KAAM,IAAA,CAAK,kBAAA,CAAmB,KAAA,EAAO,MAAM,CAAC,CAAA;AACvF,IAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,CAAO,CAAC,KAAK,GAAA,KAAQ,GAAA,GAAM,GAAA,CAAI,MAAA,EAAQ,CAAC,CAAA;AACjE,IAAA,MAAM,QAAA,GAAW,IAAI,UAAA,CAAW,QAAQ,CAAA;AAExC,IAAA,IAAI,MAAA,GAAS,CAAA;AAEb,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACvB,MAAA,QAAA,CAAS,GAAA,CAAI,KAAK,MAAM,CAAA;AACxB,MAAA,MAAA,IAAU,GAAA,CAAI,MAAA;AAAA,IAClB;AAEA,IAAA,MAAM,OAAO,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,QAAQ,CAAA;AAE3D,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,IAAI,UAAA,CAAW,IAAI,CAAC,CAAA;AAAA,EAClD;AACJ;AA9Fa,aAAA,CACO,YAAA,GAAwB,GAAA;AAD/B,aAAA,CAEO,UAAA,GAAsB,EAAA;AAF7B,aAAA,CAGO,QAAA,GAAoB,EAAA;AAH3B,aAAA,CAIO,QAAA,GAAoB,EAAA;AAJ3B,aAAA,CAMO,CAAA,GAAa,OAAO,ogBAAogB,CAAA;AAN/hB,aAAA,CAOO,CAAA,GAAa,OAAO,CAAC,CAAA;AAP5B,aAAA,CAQO,CAAA,GAAa,OAAO,oEAAoE,CAAA;AAAA;AAAA;AAAA;AAR/F,aAAA,CAqCF,aAAA,GAAgB,CAAC,KAAA,KAA+B,MAAA,CAAO,OAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA,CAAE,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA;;;ACnCtI,IAAM,gBAAN,MAAoB;AAAA,EAApB,WAAA,GAAA;AA0EL,IAAA,IAAA,CAAA,mBAAA,GAAsB,CAAC,SAAS,EAAA,KAAmB,MAAA,CAAO,gBAAgB,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,EAAA;AAAA,EAxEhG,MAAM,WAAA,CAAe,SAAA,EAAc,GAAA,EAAkC;AACnE,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI,qBAAqB,UAAA,EAAY;AACnC,MAAA,UAAA,GAAa,CAAA,CAAA,EAAI,aAAA,CAAc,QAAA,CAAS,SAAS,CAAC,CAAA,CAAA,CAAA;AAAA,IACpD,CAAA,MAAO;AACL,MAAA,UAAA,GAAa,IAAA,CAAK,UAAU,SAAS,CAAA;AAAA,IACvC;AACA,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,MAAA,CAAO,UAAU,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,aAAA,CAAc,UAAU,CAAC,CAAA;AAE7E,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MACpC,KAAA;AAAA,MACA,GAAA;AAAA,MACA,SAAA;AAAA,MACA,KAAA;AAAA,MACA,CAAC,SAAS;AAAA,KAAC;AAEb,IAAA,MAAM,gBAAA,GAAmB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MAAQ;AAAA,QACjD,IAAA,EAAM,SAAA;AAAA,QACN,EAAA,EAAI,KAAA;AAAA,QACJ,SAAA,EAAW,cAAc,QAAA,GAAW;AAAA,OAAC;AAAA,MACrC,SAAA;AAAA,MACC;AAAA,KACL;AAEA,IAAA,MAAM,SAAS,IAAI,UAAA,CAAW,aAAA,CAAc,UAAA,GAAa,iBAAiB,UAAU,CAAA;AACpF,IAAA,MAAA,CAAO,GAAA,CAAI,OAAO,CAAC,CAAA;AACnB,IAAA,MAAA,CAAO,IAAI,IAAI,UAAA,CAAW,gBAAgB,CAAA,EAAG,cAAc,UAAU,CAAA;AAErE,IAAA,OAAO,aAAA,CAAc,SAAS,MAAM,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,aAAA,CAAiB,eAAA,EAAyB,GAAA,EAAmC;AACjF,IAAA,IAAI,CAAC,eAAA;AACD,MAAA,OAAO,IAAA;AAEX,IAAA,MAAM,cAAA,GAAiB,aAAA,CAAc,UAAA,CAAW,eAAe,CAAA;AAE/D,IAAA,IAAI,cAAA,CAAe,MAAA,GAAS,aAAA,CAAc,UAAA,GAAa,aAAA,CAAc,QAAA;AACjE,MAAA,MAAM,IAAI,MAAM,mOAA0C,CAAA;AAE9D,IAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,KAAA,CAAM,CAAA,EAAG,cAAc,UAAU,CAAA;AAC9D,IAAA,MAAM,iBAAA,GAAoB,cAAA,CAAe,KAAA,CAAM,aAAA,CAAc,UAAU,CAAA;AAEvE,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MAClC,KAAA;AAAA,MACC,GAAA;AAAA,MACA,SAAA;AAAA,MACA,KAAA;AAAA,MACC,CAAC,SAAS;AAAA,KAAC;AAEjB,IAAA,IAAI;AACF,MAAA,MAAM,eAAA,GAAkB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,QAAQ;AAAA,UAClD,IAAA,EAAM,SAAA;AAAA,UACN,EAAA,EAAI,KAAA;AAAA,UACJ,SAAA,EACA,cAAc,QAAA,GAAW;AAAA,SAC5B;AAAA,QACC,SAAA;AAAA,QACA;AAAA,OAAiB;AAEjB,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,MAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,MAAA,CAAO,eAAe,CAAA;AAEjD,MAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAAA,IAC9B,SAAS,CAAA,EAAG;AACV,MAAA,OAAA,CAAQ,KAAA,CAAM,kHAAwB,CAAC,CAAA;AACvC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAGF;;;AC3EO,IAAM,uBAAN,MAA0B;AAAA,EAA1B,WAAA,GAAA;AACL,IAAA,IAAA,CAAS,UAAA,GAAa,GAAA;AACtB,IAAA,IAAA,CAAS,QAAA,GAAW,EAAA;AAAA,EAAA;AAAA,EAEpB,MAAM,sBAAA,CAAuB,KAAA,EAAe,QAAA,EAAkB,IAAA,EAAkE;AAC9H,IAAA,MAAM,QAAA,GAAW,IAAI,UAAA,CAAW,IAAI,CAAA;AAEpC,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,MAAM,eAAA,GAAkB,KAAA,CAAM,IAAA,EAAK,CAAE,iBAAA,EAAkB;AACvD,IAAA,MAAM,gBAAA,GAAmB,CAAA,EAAG,eAAe,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AACvD,IAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA;AACrD,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,aAAA,EAAe,QAAA,EAAU,KAAA,EAAO,CAAC,YAAA,EAAc,WAAW,CAAC,CAAA;AAEhH,IAAA,MAAM,aAAA,GAAgB,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW;AAAA,MACjD,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,QAAA;AAAA,MACN,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,IAAA,EAAM;AAAA,KACV,EAAG,OAAA,EAAS,IAAA,CAAK,QAAA,GAAW,CAAC,CAAA;AAE7B,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,aAAA,EAAe,MAAA,EAAQ,KAAA,EAAO,CAAC,YAAY,CAAC,CAAA;AAEnG,IAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,MAC9B,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,WAAW,IAAA,EAAM,IAAI,UAAA,CAAW,CAAC,CAAA,EAAG,IAAA,EAAM,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA,EAAE;AAAA,MACjG,SAAA;AAAA,MACA,KAAK,QAAA,GAAW;AAAA,KAClB;AAEA,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,MACpC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,WAAW,IAAA,EAAM,IAAI,UAAA,CAAW,CAAC,CAAA,EAAG,IAAA,EAAM,OAAA,CAAQ,MAAA,CAAO,qBAAqB,CAAA,EAAE;AAAA,MACtG,SAAA;AAAA,MACA,KAAK,QAAA,GAAW;AAAA,KAClB;AAEA,IAAA,OAAO;AAAA,MACL,GAAA,EAAK,IAAI,UAAA,CAAW,GAAG,CAAA;AAAA,MACvB,UAAU,aAAA,CAAc,QAAA,CAAS,IAAI,UAAA,CAAW,SAAS,CAAC;AAAA,KAC5D;AAAA,EACF;AACF;;;ACtCO,IAAM,aAAN,MAAiB;AAAA,EAAjB,WAAA,GAAA;AACL,IAAA,IAAA,CAAiB,aAAA,GAAgB,IAAI,oBAAA,EAAqB;AAAA,EAAA;AAAA,EAE1D,MAAM,oBAAoB,QAAA,EAAmC;AAC3D,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,QAAQ,CAAC,CAAA;AACxE,IAAA,MAAM,IAAI,aAAA,CAAc,MAAA,CAAO,cAAc,CAAA,EAAG,CAAA,EAAG,cAAc,CAAC,CAAA;AAClE,IAAA,OAAO,cAAc,QAAA,CAAS,aAAA,CAAc,mBAAmB,CAAA,EAAG,aAAA,CAAc,YAAY,CAAC,CAAA;AAAA,EAC/F;AAAA,EAEA,MAAM,gBAAA,CAAiB,KAAA,EAAe,QAAA,EAAkB,YAAoB,QAAA,EAAiE;AAC3I,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,UAAA,CAAW,UAAU,CAAA;AAChD,IAAA,MAAM,EAAE,UAAS,GAAI,MAAM,KAAK,aAAA,CAAc,sBAAA,CAAuB,KAAA,EAAO,QAAA,EAAU,IAAI,CAAA;AAC1F,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,QAAQ,CAAC,CAAA;AAExE,IAAA,MAAM,SAAS,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AACxD,IAAA,MAAM,CAAA,GAAI,aAAA,CAAc,aAAA,CAAc,MAAM,CAAA;AAE5C,IAAA,MAAM,IAAI,aAAA,CAAc,MAAA,CAAO,cAAc,CAAA,EAAG,CAAA,EAAG,cAAc,CAAC,CAAA;AAClE,IAAA,IAAI,CAAA,GAAI,cAAc,CAAA,KAAM,EAAA;AACxB,MAAA,MAAM,IAAI,MAAM,sHAAiC,CAAA;AAErD,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,QAAQ,CAAC,CAAA;AACxE,IAAA,IAAI,CAAA,GAAI,cAAc,CAAA,KAAM,EAAA;AACxB,MAAA,MAAM,IAAI,MAAM,sHAAiC,CAAA;AAErD,IAAA,MAAM,CAAA,GAAI,MAAM,aAAA,CAAc,cAAA,CAAe;AAAA,MAC3C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA;AAAa,KAChD,CAAA;AACD,IAAA,IAAI,CAAA,KAAM,EAAA;AACN,MAAA,MAAM,IAAI,MAAM,6HAAyB,CAAA;AAE7C,IAAA,MAAM,KAAK,aAAA,CAAc,MAAA,CAAO,cAAc,CAAA,EAAG,CAAA,EAAG,cAAc,CAAC,CAAA;AACnE,IAAA,MAAM,IAAA,GAAQ,aAAA,CAAc,CAAA,GAAI,EAAA,GAAM,aAAA,CAAc,CAAA;AACpD,IAAA,MAAM,IAAA,GAAA,CAAQ,CAAA,GAAI,IAAA,GAAO,aAAA,CAAc,KAAK,aAAA,CAAc,CAAA;AAC1D,IAAA,MAAM,QAAA,GAAW,IAAK,CAAA,GAAI,CAAA;AAC1B,IAAA,MAAM,IAAI,aAAA,CAAc,MAAA,CAAO,IAAA,EAAM,QAAA,EAAU,cAAc,CAAC,CAAA;AAE9D,IAAA,IAAI,CAAA,KAAM,EAAA;AACN,MAAA,MAAM,IAAI,MAAM,kHAA6B,CAAA;AAEjD,IAAA,MAAM,EAAA,GAAK,MAAM,aAAA,CAAc,cAAA,CAAe;AAAA,MAC5C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA;AAAa,KAChD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,CAAA,EAAG,cAAc,QAAA,CAAS,aAAA,CAAc,mBAAmB,CAAA,EAAG,aAAA,CAAc,YAAY,CAAC,CAAA;AAAA,MACzF,IAAI,aAAA,CAAc,QAAA,CAAS,cAAc,kBAAA,CAAmB,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,MACnE,CAAA,EAAG,cAAc,QAAA,CAAS,aAAA,CAAc,mBAAmB,CAAA,EAAG,aAAA,CAAc,YAAY,CAAC;AAAA,KAC3F;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CAAe,KAAA,EAAe,MAAA,EAAgB,OAAe,YAAA,EAAwC;AACzG,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,KAAK,CAAC,CAAA;AACrE,IAAA,MAAM,KAAK,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,MAAM,CAAC,CAAA;AACvE,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,CAAc,aAAA,CAAc,UAAA,CAAW,KAAK,CAAC,CAAA;AAErE,IAAA,MAAM,UAAA,GAAa,MAAM,aAAA,CAAc,cAAA,CAAe;AAAA,MACpD,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA,EAAa;AAAA,MAC/C,EAAE,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,EAAA,EAAG;AAAA,MACxB,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAQ,cAAc,YAAA;AAAa,KAChD,CAAA;AACD,IAAA,MAAM,iBAAiB,aAAA,CAAc,QAAA,CAAS,cAAc,kBAAA,CAAmB,UAAA,EAAY,EAAE,CAAC,CAAA;AAE9F,IAAA,OAAO,YAAA,KAAiB,cAAA;AAAA,EAC1B;AACF","file":"index.js","sourcesContent":["export class SecurityUtils {\r\n    static readonly MODULUS_SIZE : number = 384;\r\n    static readonly NONCE_SIZE : number = 12;\r\n    static readonly TAG_SIZE : number = 16;\r\n    static readonly KEY_SIZE : number = 32;\r\n\r\n    static readonly N : bigint = BigInt(\"0xAC6BDB41324A9A9BF166DE5E1F403D434A6E1B3B94A7E62AC1211858E002C75AD4455C9D19C0A3180296917A376205164043E20144FF485719D181A99EB574671AC58054457ED444A67032EA17D03AD43464D2397449CA593630A670D90D95A78E846A3C8AF80862098D80F33C42ED7059E75225E0A52718E2379369F65B79680A6560B080092EE71986066735A96A7D42E7597116742B02D3A154471B6A23D84E0D642C790D597A2BB7F5A48F734898BDD138C69493E723491959C1B4BD40C91C1C7924F88D046467A006507E781220A80C55A927906A7C6C9C227E674686DD5D1B855D28F0D604E24586C608630B9A34C4808381A54F0D9080A5F90B60187F\");\r\n    static readonly g : bigint = BigInt(2);\r\n    static readonly k : bigint = BigInt(\"0xD55AE1AEC9F9115621E93E16E5DE4517DF8450D0957024D1256AA32B71E4E412\");\r\n\r\n    /*                          \r\n        Base64 helpers\r\n    */\r\n\r\n    static toBase64(bytes: Uint8Array): string {\r\n        let binary = '';\r\n        for (let i = 0; i < bytes.byteLength; i++)\r\n            binary += String.fromCharCode(bytes[i]);\r\n\r\n        return window.btoa(binary);\r\n    }\r\n\r\n    static fromBase64(base64: string): Uint8Array {\r\n        const cleaned = base64.replace(/-/g, '+').replace(/_/g, '/').replace(/\\s/g, '');\r\n        const binary = window.atob(cleaned);\r\n        const bytes = new Uint8Array(binary.length);\r\n\r\n        for (let i = 0; i < binary.length; i++)\r\n             bytes[i] = binary.charCodeAt(i);\r\n\r\n        return bytes;\r\n    }\r\n\r\n    /*                          \r\n        BigInt helpers\r\n    */\r\n\r\n    static bytesToBigInt = (bytes: Uint8Array): bigint =>  BigInt('0x' + Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join(''));\r\n\r\n    static bigIntToFixedBytes(bn: bigint, length: number): Uint8Array {\r\n        let hex = bn.toString(16);\r\n\r\n        if (hex.length % 2 !== 0) \r\n            hex = '0' + hex;\r\n\r\n        if (hex.length > length * 2) \r\n            throw new Error(`Значение слишком велико для ${length} байт`);\r\n        \r\n        hex = hex.padStart(length * 2, '0');\r\n\r\n        return this.fromHex(hex);\r\n    }\r\n\r\n    private static fromHex(hex: string): Uint8Array {\r\n        const matches = hex.match(/.{1,2}/g);\r\n        return new Uint8Array(matches ? matches.map(byte => parseInt(byte, 16)) : []);\r\n    }  \r\n\r\n    /*                          \r\n        Math\r\n    */  \r\n   \r\n    static expMod(base: bigint, exp: bigint, mod: bigint): bigint {\r\n        let res = BigInt(1);\r\n        base = base % mod;\r\n\r\n        while (exp > 0) {\r\n        if (exp % BigInt(2) === BigInt(1)) res = (res * base) % mod;\r\n        base = (base * base) % mod;\r\n        exp = exp / BigInt(2);\r\n        }\r\n\r\n        return res;\r\n    }\r\n\r\n    /*                          \r\n        SRP helper\r\n    */ \r\n   static async hashAsPerSrp6a(items: { value: bigint; length: number }[]): Promise<bigint> {\r\n        const buffers = items.map(({ value, length }) => this.bigIntToFixedBytes(value, length));\r\n        const totalLen = buffers.reduce((sum, buf) => sum + buf.length, 0);\r\n        const combined = new Uint8Array(totalLen);\r\n\r\n        let offset = 0;\r\n\r\n        for (const buf of buffers) {\r\n            combined.set(buf, offset);\r\n            offset += buf.length;\r\n        }\r\n\r\n        const hash = await crypto.subtle.digest('SHA-256', combined);\r\n\r\n        return this.bytesToBigInt(new Uint8Array(hash));\r\n    }\r\n}","import { SecurityUtils } from '../utils/index.js'\r\n\r\nexport class CryptoService {\r\n\r\n  async encryptData<T>(dataModel: T, key: Uint8Array): Promise<string> {\r\n    const encoder = new TextEncoder();\r\n    let jsonString: string;\r\n    if (dataModel instanceof Uint8Array) {\r\n      jsonString = `\"${SecurityUtils.toBase64(dataModel)}\"`;\r\n    } else {\r\n      jsonString = JSON.stringify(dataModel);\r\n    }\r\n    const plainBytes = encoder.encode(jsonString);\r\n    const nonce = crypto.getRandomValues(new Uint8Array(SecurityUtils.NONCE_SIZE));\r\n\r\n    const cryptoKey = await crypto.subtle.importKey(\r\n      'raw', \r\n      key as BufferSource, \r\n      'AES-GCM', \r\n      false, \r\n      ['encrypt']);\r\n\r\n    const encryptedContent = await crypto.subtle.encrypt({ \r\n        name: 'AES-GCM',\r\n        iv: nonce, \r\n        tagLength: SecurityUtils.TAG_SIZE * 8},\r\n        cryptoKey,\r\n         plainBytes\r\n    );\r\n\r\n    const result = new Uint8Array(SecurityUtils.NONCE_SIZE + encryptedContent.byteLength);\r\n    result.set(nonce, 0);\r\n    result.set(new Uint8Array(encryptedContent), SecurityUtils.NONCE_SIZE);\r\n    \r\n    return SecurityUtils.toBase64(result);\r\n  }\r\n\r\n  async decryptedData<T>(encryptedBase64: string, key: Uint8Array): Promise<T | null>{\r\n    if (!encryptedBase64) \r\n        return null;\r\n\r\n    const encryptedBytes = SecurityUtils.fromBase64(encryptedBase64);\r\n\r\n    if (encryptedBytes.length < SecurityUtils.NONCE_SIZE + SecurityUtils.TAG_SIZE)\r\n        throw new Error('Недопустимый формат зашифрованных данных');\r\n\r\n    const nonce = encryptedBytes.slice(0, SecurityUtils.NONCE_SIZE);\r\n    const ciphertextWithTag = encryptedBytes.slice(SecurityUtils.NONCE_SIZE);\r\n\r\n    const cryptoKey = await crypto.subtle.importKey(\r\n        'raw',\r\n         key as BufferSource, \r\n         'AES-GCM', \r\n         false,\r\n          ['decrypt']);\r\n\r\n    try {\r\n      const decryptedBuffer = await crypto.subtle.decrypt({ \r\n        name: 'AES-GCM',\r\n        iv: nonce,\r\n        tagLength: \r\n        SecurityUtils.TAG_SIZE * 8\r\n     },\r\n      cryptoKey,\r\n      ciphertextWithTag);\r\n\r\n      const decoder = new TextDecoder();\r\n      const jsonString = decoder.decode(decryptedBuffer);\r\n\r\n      return JSON.parse(jsonString) as T;\r\n    } catch (e) {\r\n      console.error('Ошибка дешифрования:', e);\r\n      return null;\r\n    }\r\n  }\r\n\r\n  generateRandomBytes = (length = 32): Uint8Array => crypto.getRandomValues(new Uint8Array(length));\r\n}","import { SecurityUtils } from \"../utils/security.utils.js\";\r\n\r\nexport class KeyDerivationService{\r\n  readonly ITERATIONS = 600_000;\r\n  readonly KEY_SIZE = 32;\r\n\r\n  async deriveKeysFromPassword(login: string, password: string, salt: Uint8Array): Promise<{ kek: Uint8Array; authHash: string }> {\r\n    const safeSalt = new Uint8Array(salt);\r\n    \r\n    const encoder = new TextEncoder();\r\n    const normalizedLogin = login.trim().toLocaleLowerCase();\r\n    const combinedPassword = `${normalizedLogin}:${password}`;\r\n    const passwordBytes = encoder.encode(combinedPassword);\r\n    const baseKey = await crypto.subtle.importKey('raw', passwordBytes, 'PBKDF2', false, ['deriveBits', 'deriveKey']);\r\n\r\n    const masterKeyBits = await crypto.subtle.deriveBits({\r\n        name: 'PBKDF2',\r\n        salt: safeSalt, \r\n        iterations: this.ITERATIONS,\r\n        hash: 'SHA-256'\r\n    }, baseKey, this.KEY_SIZE * 8);\r\n\r\n    const masterKey = await crypto.subtle.importKey('raw', masterKeyBits, 'HKDF', false, ['deriveBits']);\r\n\r\n    const kek = await crypto.subtle.deriveBits(\r\n      { name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: encoder.encode('AES-GCM-KEK-v1') },\r\n      masterKey,\r\n      this.KEY_SIZE * 8\r\n    );\r\n\r\n    const authBytes = await crypto.subtle.deriveBits(\r\n      { name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: encoder.encode('SERVER-AUTH-HASH-v1') },\r\n      masterKey,\r\n      this.KEY_SIZE * 8\r\n    );\r\n\r\n    return {\r\n      kek: new Uint8Array(kek),\r\n      authHash: SecurityUtils.toBase64(new Uint8Array(authBytes)),\r\n    };\r\n  }\r\n}","import { KeyDerivationService } from '../crypto/index.js';\r\nimport { SecurityUtils } from '../utils/index.js';\r\n\r\nexport class SrpService {\r\n  private readonly keyDerivation = new KeyDerivationService();\r\n\r\n  async generateSrpVerifier(authHash: string): Promise<string> {\r\n    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));\r\n    const v = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);\r\n    return SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(v, SecurityUtils.MODULUS_SIZE));\r\n  }\r\n\r\n  async generateSrpProof(login: string, password: string, saltBase64: string, B_base64: string): Promise<{ A: string; M1: string; S: string }> {\r\n    const salt = SecurityUtils.fromBase64(saltBase64);\r\n    const { authHash } = await this.keyDerivation.deriveKeysFromPassword(login, password, salt);\r\n    const x = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(authHash));\r\n\r\n    const aBytes = crypto.getRandomValues(new Uint8Array(32));\r\n    const a = SecurityUtils.bytesToBigInt(aBytes);\r\n\r\n    const A = SecurityUtils.expMod(SecurityUtils.g, a, SecurityUtils.N);\r\n    if (A % SecurityUtils.N === 0n) \r\n        throw new Error('Критическая ошибка: A % N === 0');\r\n\r\n    const B = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(B_base64));\r\n    if (B % SecurityUtils.N === 0n) \r\n        throw new Error('Критическая ошибка: B % N === 0');\r\n\r\n    const u = await SecurityUtils.hashAsPerSrp6a([\r\n      { value: A, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: B, length: SecurityUtils.MODULUS_SIZE },\r\n    ]);\r\n    if (u === 0n) \r\n        throw new Error('Недопустимое значение u');\r\n\r\n    const gX = SecurityUtils.expMod(SecurityUtils.g, x, SecurityUtils.N);\r\n    const term = (SecurityUtils.k * gX) % SecurityUtils.N;\r\n    const base = (B - term + SecurityUtils.N) % SecurityUtils.N;\r\n    const exponent = a + (u * x);\r\n    const S = SecurityUtils.expMod(base, exponent, SecurityUtils.N);\r\n\r\n    if (S === 0n) \r\n        throw new Error('Критическая ошибка: S === 0');\r\n\r\n    const M1 = await SecurityUtils.hashAsPerSrp6a([\r\n      { value: A, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: B, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: S, length: SecurityUtils.MODULUS_SIZE },\r\n    ]);\r\n\r\n    return {\r\n      A: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(A, SecurityUtils.MODULUS_SIZE)),\r\n      M1: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(M1, 32)),\r\n      S: SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(S, SecurityUtils.MODULUS_SIZE)),\r\n    };\r\n  }\r\n\r\n  async verifyServerM2(A_b64: string, M1_b64: string, S_b64: string, serverM2_b64: string): Promise<boolean> {\r\n    const A = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(A_b64));\r\n    const M1 = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(M1_b64));\r\n    const S = SecurityUtils.bytesToBigInt(SecurityUtils.fromBase64(S_b64));\r\n\r\n    const computedM2 = await SecurityUtils.hashAsPerSrp6a([\r\n      { value: A, length: SecurityUtils.MODULUS_SIZE },\r\n      { value: M1, length: 32 },\r\n      { value: S, length: SecurityUtils.MODULUS_SIZE },\r\n    ]);\r\n    const computedM2_b64 = SecurityUtils.toBase64(SecurityUtils.bigIntToFixedBytes(computedM2, 32));\r\n\r\n    return serverM2_b64 === computedM2_b64;\r\n  }\r\n}"]}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@crossdyne/security",
+  "version": "0.2.0-beta.1",
+  "description": "Security library with SRP authentication and cryptography",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+    "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest",
+    "test:coverage": "vitest --coverage",
+    "lint": "eslint src/**/*.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "security",
+    "srp",
+    "cryptography",
+    "authentication",
+    "typescript"
+  ],
+  "author": "IgorBoytsov",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/crossdyne/security-typescript.git"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.3.0",
+    "vitest": "^1.0.0"
+  }
+}