@darkbio/crypto 0.1.1 → 0.1.4

package/dist/rand.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generate cryptographically secure random bytes.
+ *
+ * @param bytes - Number of random bytes to generate
+ * @returns A Uint8Array containing the random bytes
+ */
+export declare function generate(bytes: number): Promise<Uint8Array>;
+//# sourceMappingURL=rand.d.ts.map

package/dist/rand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rand.d.ts","sourceRoot":"","sources":["../src/rand.ts"],"names":[],"mappings":"AAiBA;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAGjE"}

package/dist/xdsa.d.ts

@@ -0,0 +1,87 @@
+/** Size of the secret key in bytes (64). */
+export declare const SECRET_KEY_SIZE = 64;
+/** Size of the public key in bytes (1984). */
+export declare const PUBLIC_KEY_SIZE = 1984;
+/** Size of a signature in bytes (3373). */
+export declare const SIGNATURE_SIZE = 3373;
+/** Size of a fingerprint in bytes (32). */
+export declare const FINGERPRINT_SIZE = 32;
+/**
+ * Get the size constants (requires WASM initialization).
+ */
+export declare function sizes(): Promise<{
+    secretKey: number;
+    publicKey: number;
+    signature: number;
+    fingerprint: number;
+}>;
+/**
+ * Fingerprint is a 32-byte unique identifier for an xDSA key.
+ */
+export declare class Fingerprint {
+    private readonly bytes;
+    private constructor();
+    /** Converts a 32-byte array into a fingerprint. */
+    static fromBytes(bytes: Uint8Array): Fingerprint;
+    /** Converts a fingerprint into a 32-byte array. */
+    toBytes(): Uint8Array;
+}
+/**
+ * Signature is a 3373-byte xDSA signature.
+ * Format: ML-DSA (3309 bytes) || Ed25519 (64 bytes)
+ */
+export declare class Signature {
+    private readonly bytes;
+    private constructor();
+    /** Converts a 3373-byte array into a signature. */
+    static fromBytes(bytes: Uint8Array): Signature;
+    /** Converts a signature into a 3373-byte array. */
+    toBytes(): Uint8Array;
+}
+/**
+ * PublicKey is an ML-DSA-65 public key paired with an Ed25519 public key for
+ * verifying quantum resistant digital signatures.
+ * Format: ML-DSA (1952 bytes) || Ed25519 (32 bytes)
+ */
+export declare class PublicKey {
+    private readonly bytes;
+    private constructor();
+    /** Converts a 1984-byte array into a public key. */
+    static fromBytes(bytes: Uint8Array): PublicKey;
+    /** Parses a PEM string into a public key. */
+    static fromPem(pem: string): Promise<PublicKey>;
+    /** Converts a public key into a 1984-byte array. */
+    toBytes(): Uint8Array;
+    /** Serializes a public key into a PEM string. */
+    toPem(): Promise<string>;
+    /** Returns a 256-bit unique identifier for this key. */
+    fingerprint(): Promise<Fingerprint>;
+    /** Verifies a digital signature of the message. */
+    verify(message: Uint8Array, signature: Signature): Promise<boolean>;
+}
+/**
+ * SecretKey is an ML-DSA-65 private key paired with an Ed25519 private key for
+ * creating quantum resistant digital signatures.
+ * Format: ML-DSA seed (32 bytes) || Ed25519 seed (32 bytes)
+ */
+export declare class SecretKey {
+    private readonly bytes;
+    private constructor();
+    /** Creates a new, random private key. */
+    static generate(): Promise<SecretKey>;
+    /** Creates a private key from a 64-byte seed. */
+    static fromBytes(bytes: Uint8Array): SecretKey;
+    /** Parses a PEM string into a private key. */
+    static fromPem(pem: string): Promise<SecretKey>;
+    /** Converts a secret key into a 64-byte array. */
+    toBytes(): Uint8Array;
+    /** Serializes a private key into a PEM string. */
+    toPem(): Promise<string>;
+    /** Retrieves the public counterpart of the secret key. */
+    publicKey(): Promise<PublicKey>;
+    /** Returns a 256-bit unique identifier for this key. */
+    fingerprint(): Promise<Fingerprint>;
+    /** Creates a digital signature of the message. */
+    sign(message: Uint8Array): Promise<Signature>;
+}
+//# sourceMappingURL=xdsa.d.ts.map

package/dist/xdsa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xdsa.d.ts","sourceRoot":"","sources":["../src/xdsa.ts"],"names":[],"mappings":"AA+BA,4CAA4C;AAC5C,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW;IAOhD,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,oDAAoD;IACpD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAMzC,mDAAmD;IAC7C,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;CAI1E;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAM3C,iDAAiD;IACjD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAMrC,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC,kDAAkD;IAC5C,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAKpD"}

package/dist/xhpke.d.ts

@@ -0,0 +1,102 @@
+/** Size of the secret key seed in bytes (32). */
+export declare const SECRET_KEY_SIZE = 32;
+/** Size of the public key in bytes (1216). */
+export declare const PUBLIC_KEY_SIZE = 1216;
+/** Size of the encapsulated key in bytes (1120). */
+export declare const ENCAP_KEY_SIZE = 1120;
+/** Size of a fingerprint in bytes (32). */
+export declare const FINGERPRINT_SIZE = 32;
+/**
+ * Get the size constants (requires WASM initialization).
+ */
+export declare function sizes(): Promise<{
+    secretKey: number;
+    publicKey: number;
+    encapKey: number;
+    fingerprint: number;
+}>;
+/**
+ * Fingerprint is a 32-byte unique identifier for an xHPKE key.
+ * It is the SHA256 hash of the raw public key.
+ */
+export declare class Fingerprint {
+    private readonly bytes;
+    private constructor();
+    /** Converts a 32-byte array into a fingerprint. */
+    static fromBytes(bytes: Uint8Array): Fingerprint;
+    /** Converts a fingerprint into a 32-byte array. */
+    toBytes(): Uint8Array;
+}
+/**
+ * PublicKey contains an X-Wing public key for hybrid post-quantum encryption.
+ * Uses X-Wing KEM (ML-KEM-768 + X25519) with HPKE Base mode.
+ */
+export declare class PublicKey {
+    private readonly bytes;
+    private constructor();
+    /**
+     * Converts a 1216-byte array into a public key.
+     *
+     * This validates the ML-KEM-768 component by checking that all polynomial
+     * coefficients are in the valid range [0, 3329).
+     */
+    static fromBytes(bytes: Uint8Array): PublicKey;
+    /** Parses a PEM string into a public key. */
+    static fromPem(pem: string): Promise<PublicKey>;
+    /** Converts a public key into a 1216-byte array. */
+    toBytes(): Uint8Array;
+    /** Serializes a public key into a PEM string. */
+    toPem(): Promise<string>;
+    /** Returns a 256-bit unique identifier for this key (SHA256 of raw public key). */
+    fingerprint(): Promise<Fingerprint>;
+    /**
+     * Seal (encrypt) a message to this public key.
+     *
+     * Uses X-Wing KEM (ML-KEM-768 + X25519) with HPKE Base mode.
+     *
+     * @param msgToSeal - The message to encrypt
+     * @param msgToAuth - Additional data to authenticate (but not encrypt)
+     * @param domain - Application domain for context separation
+     * @returns Sealed data (encapsulated key + ciphertext)
+     */
+    seal(msgToSeal: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Promise<Uint8Array>;
+}
+/**
+ * SecretKey contains an X-Wing private key for hybrid post-quantum encryption.
+ * Uses X-Wing KEM (ML-KEM-768 + X25519) with HPKE Base mode.
+ */
+export declare class SecretKey {
+    private readonly bytes;
+    private constructor();
+    /** Creates a new, random private key. */
+    static generate(): Promise<SecretKey>;
+    /** Converts a 32-byte seed into a private key. */
+    static fromBytes(bytes: Uint8Array): SecretKey;
+    /** Parses a PEM string into a private key. */
+    static fromPem(pem: string): Promise<SecretKey>;
+    /** Converts a private key into a 32-byte seed. */
+    toBytes(): Uint8Array;
+    /** Serializes a private key into a PEM string. */
+    toPem(): Promise<string>;
+    /** Retrieves the public counterpart of the secret key. */
+    publicKey(): Promise<PublicKey>;
+    /** Returns a 256-bit unique identifier for this key (SHA256 of raw public key). */
+    fingerprint(): Promise<Fingerprint>;
+    /**
+     * Open (decrypt) a sealed message with this secret key.
+     *
+     * Deconstructs the encapsulated key and ciphertext, verifying the
+     * authenticity of the (unencrypted) message-to-auth.
+     *
+     * Note: X-Wing uses Base mode (no sender authentication). The sender's
+     * identity cannot be verified from the ciphertext alone.
+     *
+     * @param sealed - The sealed data from `seal()`
+     * @param msgToAuth - The same additional authenticated data used during sealing
+     * @param domain - The same application domain used during sealing
+     * @returns The decrypted message
+     * @throws If decryption fails (wrong key, tampered data, or wrong AAD/domain)
+     */
+    open(sealed: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Promise<Uint8Array>;
+}
+//# sourceMappingURL=xhpke.d.ts.map

package/dist/xhpke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xhpke.d.ts","sourceRoot":"","sources":["../src/xhpke.ts"],"names":[],"mappings":"AA+BA,iDAAiD;AACjD,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,oDAAoD;AACpD,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW;IAOhD,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP;;;;;OAKG;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAMzC;;;;;;;;;OASG;IACG,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;CAIvB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAM3C,kDAAkD;IAClD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAMrC,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC;;;;;;;;;;;;;;OAcG;IACG,IAAI,CACR,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;CAIvB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkbio/crypto",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "author": "Péter Szilágyi <peter@dark.bio>",
   "description": "Cryptography primitives and wrappers",
   "repository": {
@@ -36,6 +36,7 @@
     "playwright": "^1.50.0",
     "typescript": "^5.7.0",
     "vite": "^6.0.0",
+    "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.0.0"
   },
   "keywords": [