@darkbio/crypto 0.1.1 → 0.1.4

package/dist/argon2.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Derive a key from password, salt, and cost parameters using Argon2id.
+ *
+ * RFC 9106 Section 7.4 recommends time=1, memory=2048*1024 (2GB) as sensible
+ * defaults. If that much memory isn't available, increase time to compensate.
+ *
+ * @param password - The password to derive from
+ * @param salt - A random salt (should be at least 16 bytes)
+ * @param time - Number of passes over memory (iterations)
+ * @param memory - Memory size in KiB
+ * @param threads - Degree of parallelism
+ * @param outLen - Desired output length in bytes
+ * @returns The derived key
+ */
+export declare function key(password: Uint8Array, salt: Uint8Array, time: number, memory: number, threads: number, outLen: number): Promise<Uint8Array>;
+//# sourceMappingURL=argon2.d.ts.map

package/dist/argon2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"argon2.d.ts","sourceRoot":"","sources":["../src/argon2.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;;;;GAaG;AACH,wBAAsB,GAAG,CACvB,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAKrB"}

package/dist/cose.d.ts

@@ -0,0 +1,117 @@
+import { SecretKey as XdsaSecretKey, PublicKey as XdsaPublicKey, Fingerprint as XdsaFingerprint } from './xdsa.js';
+import { SecretKey as XhpkeSecretKey, PublicKey as XhpkePublicKey, Fingerprint as XhpkeFingerprint } from './xhpke.js';
+/**
+ * Create a COSE_Sign1 signature with an embedded payload.
+ *
+ * @param msgToEmbed - The payload to embed and sign (will be CBOR encoded)
+ * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
+ * @param signer - The xDSA secret key
+ * @param domain - Application-specific domain separator
+ * @returns The serialized COSE_Sign1 structure
+ */
+export declare function sign<E, A>(msgToEmbed: E, msgToAuth: A, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+/**
+ * Create a COSE_Sign1 signature without an embedded payload (detached mode).
+ *
+ * @param msgToAuth - The message to authenticate (will be CBOR encoded)
+ * @param signer - The xDSA secret key
+ * @param domain - Application-specific domain separator
+ * @returns The serialized COSE_Sign1 structure (with null payload)
+ */
+export declare function signDetached<A>(msgToAuth: A, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+/**
+ * Verify a COSE_Sign1 signature and return the embedded payload.
+ *
+ * @param msgToCheck - The COSE_Sign1 structure to verify
+ * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
+ * @param verifier - The xDSA public key
+ * @param domain - Application-specific domain separator
+ * @param maxDriftSecs - Maximum allowed clock drift (undefined for no time check)
+ * @returns The decoded embedded payload
+ */
+export declare function verify<T, A>(msgToCheck: Uint8Array, msgToAuth: A, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
+/**
+ * Verify a COSE_Sign1 signature with a detached payload.
+ *
+ * @param msgToCheck - The COSE_Sign1 structure to verify
+ * @param msgToAuth - The detached message to authenticate (will be CBOR encoded)
+ * @param verifier - The xDSA public key
+ * @param domain - Application-specific domain separator
+ * @param maxDriftSecs - Maximum allowed clock drift (undefined for no time check)
+ */
+export declare function verifyDetached<A>(msgToCheck: Uint8Array, msgToAuth: A, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<void>;
+/**
+ * Extract the signer's fingerprint from a COSE_Sign1 without verifying.
+ *
+ * @param signature - The COSE_Sign1 structure
+ * @returns The signer fingerprint
+ */
+export declare function signer(signature: Uint8Array): Promise<XdsaFingerprint>;
+/**
+ * Extract the embedded payload from a COSE_Sign1 without verifying.
+ *
+ * Warning: The returned payload is unauthenticated and should not be
+ * trusted until verified with `verify`.
+ *
+ * @param signature - The COSE_Sign1 structure
+ * @returns The decoded (but unverified) payload
+ */
+export declare function peek<T>(signature: Uint8Array): Promise<T>;
+/**
+ * Extract the recipient's fingerprint from a COSE_Encrypt0 without decrypting.
+ *
+ * @param ciphertext - The COSE_Encrypt0 structure
+ * @returns The recipient fingerprint
+ */
+export declare function recipient(ciphertext: Uint8Array): Promise<XhpkeFingerprint>;
+/**
+ * Sign a message then encrypt it to a recipient (sign-then-encrypt).
+ *
+ * @param msgToSeal - The payload to sign and encrypt (will be CBOR encoded)
+ * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
+ * @param signerKey - The xDSA secret key to sign with
+ * @param recipientKey - The xHPKE public key to encrypt to
+ * @param domain - Application-specific domain separator
+ * @returns The sealed COSE structure
+ */
+export declare function seal<S, A>(msgToSeal: S, msgToAuth: A, signerKey: XdsaSecretKey, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
+/**
+ * Decrypt and verify a sealed message.
+ *
+ * @param msgToOpen - The sealed COSE structure
+ * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
+ * @param recipientKey - The xHPKE secret key to decrypt with
+ * @param senderKey - The xDSA public key to verify against
+ * @param domain - Application-specific domain separator
+ * @param maxDriftSecs - Maximum allowed clock drift (undefined for no time check)
+ * @returns The decoded payload
+ */
+export declare function open<T, A>(msgToOpen: Uint8Array, msgToAuth: A, recipientKey: XhpkeSecretKey, senderKey: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
+/**
+ * Encrypt an already-signed COSE_Sign1 to a recipient.
+ *
+ * For most use cases, prefer `seal` which signs and encrypts in one step.
+ * Use this only when re-encrypting a message to a different recipient
+ * without access to the original signer's key.
+ *
+ * @param sign1 - The COSE_Sign1 structure to encrypt
+ * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
+ * @param recipientKey - The xHPKE public key to encrypt to
+ * @param domain - Application-specific domain separator
+ * @returns The COSE_Encrypt0 structure
+ */
+export declare function encrypt<A>(sign1: Uint8Array, msgToAuth: A, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
+/**
+ * Decrypt a sealed message without verifying the signature.
+ *
+ * This allows inspecting the signer before verification. Use `signer` to
+ * extract the signer's fingerprint, then verify with `verify`.
+ *
+ * @param msgToOpen - The COSE_Encrypt0 structure
+ * @param msgToAuth - Additional authenticated data (will be CBOR encoded)
+ * @param recipientKey - The xHPKE secret key to decrypt with
+ * @param domain - Application-specific domain separator
+ * @returns The decrypted COSE_Sign1 structure (not yet verified)
+ */
+export declare function decrypt<A>(msgToOpen: Uint8Array, msgToAuth: A, recipientKey: XhpkeSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+//# sourceMappingURL=cose.d.ts.map

package/dist/cose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cose.d.ts","sourceRoot":"","sources":["../src/cose.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC1B,WAAW,IAAI,eAAe,EAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,IAAI,cAAc,EAC3B,SAAS,IAAI,cAAc,EAC3B,WAAW,IAAI,gBAAgB,EAChC,MAAM,YAAY,CAAC;AA6BpB;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,UAAU,EAAE,CAAC,EACb,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,CAAC,EAC/B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;GAKG;AACH,wBAAsB,MAAM,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAI5E;AAED;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAI/D;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,aAAa,EACxB,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAarB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB"}

package/dist/hkdf.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Derive a key from secret, salt, and info using HKDF-SHA256.
+ *
+ * @param secret - The input keying material
+ * @param salt - Optional salt value (can be empty)
+ * @param info - Optional context/application-specific info (can be empty)
+ * @param outLen - Desired output length in bytes (max 8160)
+ * @returns The derived key
+ */
+export declare function key(secret: Uint8Array, salt: Uint8Array, info: Uint8Array, outLen: number): Promise<Uint8Array>;
+/**
+ * Extract a pseudorandom key from secret and salt using HKDF-SHA256.
+ *
+ * Only use this if you need to reuse the extracted key with multiple
+ * expand invocations. Most scenarios should use `key` instead.
+ *
+ * @param secret - The input keying material
+ * @param salt - Optional salt value (can be empty)
+ * @returns A 32-byte pseudorandom key
+ */
+export declare function extract(secret: Uint8Array, salt: Uint8Array): Promise<Uint8Array>;
+/**
+ * Expand a pseudorandom key with info using HKDF-SHA256.
+ *
+ * The prk should have been generated by `extract` or be a uniformly
+ * random 32-byte key.
+ *
+ * @param prk - A 32-byte pseudorandom key
+ * @param info - Optional context/application-specific info (can be empty)
+ * @param outLen - Desired output length in bytes (max 8160)
+ * @returns The derived key
+ */
+export declare function expand(prk: Uint8Array, info: Uint8Array, outLen: number): Promise<Uint8Array>;
+//# sourceMappingURL=hkdf.d.ts.map

package/dist/hkdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../src/hkdf.ts"],"names":[],"mappings":"AAqBA;;;;;;;;GAQG;AACH,wBAAsB,GAAG,CACvB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,MAAM,CAC1B,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAGrB"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * as rand from './rand.js';
+export * as hkdf from './hkdf.js';
+export * as argon2 from './argon2.js';
+export * as xdsa from './xdsa.js';
+export * as xhpke from './xhpke.js';
+export * as cose from './cose.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC"}