@darkbio/crypto 0.1.4 → 0.1.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -3
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1168 -949
- package/dist/index.js.map +1 -1
- package/dist/x509.d.ts +18 -0
- package/dist/x509.d.ts.map +1 -0
- package/dist/xdsa.d.ts +43 -0
- package/dist/xdsa.d.ts.map +1 -1
- package/dist/xhpke.d.ts +46 -0
- package/dist/xhpke.d.ts.map +1 -1
- package/package.json +1 -1
package/dist/x509.d.ts
ADDED
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Parameters for X.509 certificate generation.
|
|
3
|
+
*/
|
|
4
|
+
export interface Params {
|
|
5
|
+
/** The subject's common name (CN) in the certificate. */
|
|
6
|
+
subjectName: string;
|
|
7
|
+
/** The issuer's common name (CN) in the certificate. */
|
|
8
|
+
issuerName: string;
|
|
9
|
+
/** The certificate validity start time (Unix timestamp in seconds). */
|
|
10
|
+
notBefore: bigint;
|
|
11
|
+
/** The certificate validity end time (Unix timestamp in seconds). */
|
|
12
|
+
notAfter: bigint;
|
|
13
|
+
/** Whether this certificate is a CA certificate (ignored for xHPKE). */
|
|
14
|
+
isCa?: boolean;
|
|
15
|
+
/** Maximum number of intermediate CAs allowed below this one (only if isCa is true, ignored for xHPKE). */
|
|
16
|
+
pathLen?: number;
|
|
17
|
+
}
|
|
18
|
+
//# sourceMappingURL=x509.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"x509.d.ts","sourceRoot":"","sources":["../src/x509.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,2GAA2G;IAC3G,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
|
package/dist/xdsa.d.ts
CHANGED
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { Params } from './x509.js';
|
|
1
2
|
/** Size of the secret key in bytes (64). */
|
|
2
3
|
export declare const SECRET_KEY_SIZE = 64;
|
|
3
4
|
/** Size of the public key in bytes (1984). */
|
|
@@ -50,6 +51,32 @@ export declare class PublicKey {
|
|
|
50
51
|
static fromBytes(bytes: Uint8Array): PublicKey;
|
|
51
52
|
/** Parses a PEM string into a public key. */
|
|
52
53
|
static fromPem(pem: string): Promise<PublicKey>;
|
|
54
|
+
/**
|
|
55
|
+
* Parses a public key from a PEM-encoded X.509 certificate.
|
|
56
|
+
* Verifies the certificate signature against the provided signer.
|
|
57
|
+
*
|
|
58
|
+
* @param pem - PEM-encoded X.509 certificate
|
|
59
|
+
* @param signer - The xDSA public key that signed this certificate
|
|
60
|
+
* @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
|
|
61
|
+
*/
|
|
62
|
+
static fromCertPem(pem: string, signer: PublicKey): Promise<{
|
|
63
|
+
key: PublicKey;
|
|
64
|
+
notBefore: bigint;
|
|
65
|
+
notAfter: bigint;
|
|
66
|
+
}>;
|
|
67
|
+
/**
|
|
68
|
+
* Parses a public key from a DER-encoded X.509 certificate.
|
|
69
|
+
* Verifies the certificate signature against the provided signer.
|
|
70
|
+
*
|
|
71
|
+
* @param der - DER-encoded X.509 certificate
|
|
72
|
+
* @param signer - The xDSA public key that signed this certificate
|
|
73
|
+
* @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
|
|
74
|
+
*/
|
|
75
|
+
static fromCertDer(der: Uint8Array, signer: PublicKey): Promise<{
|
|
76
|
+
key: PublicKey;
|
|
77
|
+
notBefore: bigint;
|
|
78
|
+
notAfter: bigint;
|
|
79
|
+
}>;
|
|
53
80
|
/** Converts a public key into a 1984-byte array. */
|
|
54
81
|
toBytes(): Uint8Array;
|
|
55
82
|
/** Serializes a public key into a PEM string. */
|
|
@@ -58,6 +85,22 @@ export declare class PublicKey {
|
|
|
58
85
|
fingerprint(): Promise<Fingerprint>;
|
|
59
86
|
/** Verifies a digital signature of the message. */
|
|
60
87
|
verify(message: Uint8Array, signature: Signature): Promise<boolean>;
|
|
88
|
+
/**
|
|
89
|
+
* Generates a PEM-encoded X.509 certificate for this public key.
|
|
90
|
+
*
|
|
91
|
+
* @param signer - The xDSA secret key to sign the certificate
|
|
92
|
+
* @param params - Certificate parameters (subject, issuer, validity, etc.)
|
|
93
|
+
* @returns PEM-encoded X.509 certificate
|
|
94
|
+
*/
|
|
95
|
+
toCertPem(signer: SecretKey, params: Params): Promise<string>;
|
|
96
|
+
/**
|
|
97
|
+
* Generates a DER-encoded X.509 certificate for this public key.
|
|
98
|
+
*
|
|
99
|
+
* @param signer - The xDSA secret key to sign the certificate
|
|
100
|
+
* @param params - Certificate parameters (subject, issuer, validity, etc.)
|
|
101
|
+
* @returns DER-encoded X.509 certificate
|
|
102
|
+
*/
|
|
103
|
+
toCertDer(signer: SecretKey, params: Params): Promise<Uint8Array>;
|
|
61
104
|
}
|
|
62
105
|
/**
|
|
63
106
|
* SecretKey is an ML-DSA-65 private key paired with an Ed25519 private key for
|
package/dist/xdsa.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"xdsa.d.ts","sourceRoot":"","sources":["../src/xdsa.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"xdsa.d.ts","sourceRoot":"","sources":["../src/xdsa.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,4CAA4C;AAC5C,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW;IAOhD,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,oDAAoD;IACpD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAMzC,mDAAmD;IAC7C,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzE;;;;;;OAMG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAcnE;;;;;;OAMG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAexE;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAM3C,iDAAiD;IACjD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAMrC,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC,kDAAkD;IAC5C,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAKpD"}
|
package/dist/xhpke.d.ts
CHANGED
|
@@ -1,3 +1,5 @@
|
|
|
1
|
+
import { PublicKey as XdsaPublicKey, SecretKey as XdsaSecretKey } from './xdsa.js';
|
|
2
|
+
import { Params } from './x509.js';
|
|
1
3
|
/** Size of the secret key seed in bytes (32). */
|
|
2
4
|
export declare const SECRET_KEY_SIZE = 32;
|
|
3
5
|
/** Size of the public key in bytes (1216). */
|
|
@@ -43,6 +45,32 @@ export declare class PublicKey {
|
|
|
43
45
|
static fromBytes(bytes: Uint8Array): PublicKey;
|
|
44
46
|
/** Parses a PEM string into a public key. */
|
|
45
47
|
static fromPem(pem: string): Promise<PublicKey>;
|
|
48
|
+
/**
|
|
49
|
+
* Parses a public key from a PEM-encoded X.509 certificate.
|
|
50
|
+
* Verifies the certificate signature against the provided xDSA signer.
|
|
51
|
+
*
|
|
52
|
+
* @param pem - PEM-encoded X.509 certificate
|
|
53
|
+
* @param signer - The xDSA public key that signed this certificate
|
|
54
|
+
* @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
|
|
55
|
+
*/
|
|
56
|
+
static fromCertPem(pem: string, signer: XdsaPublicKey): Promise<{
|
|
57
|
+
key: PublicKey;
|
|
58
|
+
notBefore: bigint;
|
|
59
|
+
notAfter: bigint;
|
|
60
|
+
}>;
|
|
61
|
+
/**
|
|
62
|
+
* Parses a public key from a DER-encoded X.509 certificate.
|
|
63
|
+
* Verifies the certificate signature against the provided xDSA signer.
|
|
64
|
+
*
|
|
65
|
+
* @param der - DER-encoded X.509 certificate
|
|
66
|
+
* @param signer - The xDSA public key that signed this certificate
|
|
67
|
+
* @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
|
|
68
|
+
*/
|
|
69
|
+
static fromCertDer(der: Uint8Array, signer: XdsaPublicKey): Promise<{
|
|
70
|
+
key: PublicKey;
|
|
71
|
+
notBefore: bigint;
|
|
72
|
+
notAfter: bigint;
|
|
73
|
+
}>;
|
|
46
74
|
/** Converts a public key into a 1216-byte array. */
|
|
47
75
|
toBytes(): Uint8Array;
|
|
48
76
|
/** Serializes a public key into a PEM string. */
|
|
@@ -60,6 +88,24 @@ export declare class PublicKey {
|
|
|
60
88
|
* @returns Sealed data (encapsulated key + ciphertext)
|
|
61
89
|
*/
|
|
62
90
|
seal(msgToSeal: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Promise<Uint8Array>;
|
|
91
|
+
/**
|
|
92
|
+
* Generates a PEM-encoded X.509 certificate for this public key.
|
|
93
|
+
* Note: HPKE certificates are always end-entity certificates.
|
|
94
|
+
*
|
|
95
|
+
* @param signer - The xDSA secret key to sign the certificate
|
|
96
|
+
* @param params - Certificate parameters (subject, issuer, validity)
|
|
97
|
+
* @returns PEM-encoded X.509 certificate
|
|
98
|
+
*/
|
|
99
|
+
toCertPem(signer: XdsaSecretKey, params: Params): Promise<string>;
|
|
100
|
+
/**
|
|
101
|
+
* Generates a DER-encoded X.509 certificate for this public key.
|
|
102
|
+
* Note: HPKE certificates are always end-entity certificates.
|
|
103
|
+
*
|
|
104
|
+
* @param signer - The xDSA secret key to sign the certificate
|
|
105
|
+
* @param params - Certificate parameters (subject, issuer, validity)
|
|
106
|
+
* @returns DER-encoded X.509 certificate
|
|
107
|
+
*/
|
|
108
|
+
toCertDer(signer: XdsaSecretKey, params: Params): Promise<Uint8Array>;
|
|
63
109
|
}
|
|
64
110
|
/**
|
|
65
111
|
* SecretKey contains an X-Wing private key for hybrid post-quantum encryption.
|
package/dist/xhpke.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"xhpke.d.ts","sourceRoot":"","sources":["../src/xhpke.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"xhpke.d.ts","sourceRoot":"","sources":["../src/xhpke.ts"],"names":[],"mappings":"AA0BA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,iDAAiD;AACjD,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,oDAAoD;AACpD,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW;IAOhD,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP;;;;;OAKG;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAMzC;;;;;;;;;OASG;IACG,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;IAKtB;;;;;;;OAOG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYvE;;;;;;;OAOG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAa5E;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAM3C,kDAAkD;IAClD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAMrC,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC;;;;;;;;;;;;;;OAcG;IACG,IAAI,CACR,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;CAIvB"}
|