@darkbio/crypto 0.1.7 → 0.2.0

package/dist/xdsa.d.ts

@@ -1,3 +1,4 @@
+import { XdsaSecretKey as WasmSecretKey, XdsaPublicKey as WasmPublicKey, XdsaSignature as WasmSignature, XdsaFingerprint as WasmFingerprint } from './wasm/darkbio_crypto_wasm.js';
 import { Params } from './x509.js';
 /** Size of the secret key in bytes (64). */
 export declare const SECRET_KEY_SIZE = 64;
@@ -18,46 +19,49 @@ export declare function sizes(): Promise<{
 }>;
 /**
  * Fingerprint is a 32-byte unique identifier for an xDSA key.
+ * Backed by an opaque WASM handle.
  */
 export declare class Fingerprint {
-    private readonly bytes;
-    private constructor();
-    /** Converts a 32-byte array into a fingerprint. */
-    static fromBytes(bytes: Uint8Array): Fingerprint;
+    /** @internal */
+    readonly _wasm: WasmFingerprint;
+    /** @internal */
+    constructor(inner: WasmFingerprint);
+    /** Creates a fingerprint from a 32-byte array. */
+    static fromBytes(bytes: Uint8Array): Promise<Fingerprint>;
     /** Converts a fingerprint into a 32-byte array. */
     toBytes(): Uint8Array;
 }
 /**
  * Signature is a 3373-byte xDSA signature.
- * Format: ML-DSA (3309 bytes) || Ed25519 (64 bytes)
+ * Backed by an opaque WASM handle.
  */
 export declare class Signature {
-    private readonly bytes;
-    private constructor();
-    /** Converts a 3373-byte array into a signature. */
-    static fromBytes(bytes: Uint8Array): Signature;
+    /** @internal */
+    readonly _wasm: WasmSignature;
+    /** @internal */
+    constructor(inner: WasmSignature);
+    /** Creates a signature from a 3373-byte array. */
+    static fromBytes(bytes: Uint8Array): Promise<Signature>;
     /** Converts a signature into a 3373-byte array. */
     toBytes(): Uint8Array;
 }
 /**
- * PublicKey is an ML-DSA-65 public key paired with an Ed25519 public key for
+ * PublicKey contains a composite ML-DSA-65 + Ed25519 public key for
  * verifying quantum resistant digital signatures.
- * Format: ML-DSA (1952 bytes) || Ed25519 (32 bytes)
+ * Backed by an opaque WASM handle — key material stays in WASM memory.
  */
 export declare class PublicKey {
-    private readonly bytes;
-    private constructor();
-    /** Converts a 1984-byte array into a public key. */
-    static fromBytes(bytes: Uint8Array): PublicKey;
+    /** @internal */
+    readonly _wasm: WasmPublicKey;
+    /** @internal */
+    constructor(inner: WasmPublicKey);
+    /** Creates a public key from a 1984-byte array. */
+    static fromBytes(bytes: Uint8Array): Promise<PublicKey>;
     /** Parses a PEM string into a public key. */
     static fromPem(pem: string): Promise<PublicKey>;
     /**
      * Parses a public key from a PEM-encoded X.509 certificate.
      * Verifies the certificate signature against the provided signer.
-     *
-     * @param pem - PEM-encoded X.509 certificate
-     * @param signer - The xDSA public key that signed this certificate
-     * @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
      */
     static fromCertPem(pem: string, signer: PublicKey): Promise<{
         key: PublicKey;
@@ -67,10 +71,6 @@ export declare class PublicKey {
     /**
      * Parses a public key from a DER-encoded X.509 certificate.
      * Verifies the certificate signature against the provided signer.
-     *
-     * @param der - DER-encoded X.509 certificate
-     * @param signer - The xDSA public key that signed this certificate
-     * @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
      */
     static fromCertDer(der: Uint8Array, signer: PublicKey): Promise<{
         key: PublicKey;
@@ -87,33 +87,27 @@ export declare class PublicKey {
     verify(message: Uint8Array, signature: Signature): Promise<boolean>;
     /**
      * Generates a PEM-encoded X.509 certificate for this public key.
-     *
-     * @param signer - The xDSA secret key to sign the certificate
-     * @param params - Certificate parameters (subject, issuer, validity, etc.)
-     * @returns PEM-encoded X.509 certificate
      */
     toCertPem(signer: SecretKey, params: Params): Promise<string>;
     /**
      * Generates a DER-encoded X.509 certificate for this public key.
-     *
-     * @param signer - The xDSA secret key to sign the certificate
-     * @param params - Certificate parameters (subject, issuer, validity, etc.)
-     * @returns DER-encoded X.509 certificate
      */
     toCertDer(signer: SecretKey, params: Params): Promise<Uint8Array>;
 }
 /**
- * SecretKey is an ML-DSA-65 private key paired with an Ed25519 private key for
+ * SecretKey contains a composite ML-DSA-65 + Ed25519 private key for
  * creating quantum resistant digital signatures.
- * Format: ML-DSA seed (32 bytes) || Ed25519 seed (32 bytes)
+ * Backed by an opaque WASM handle — key material stays in WASM memory.
  */
 export declare class SecretKey {
-    private readonly bytes;
-    private constructor();
+    /** @internal */
+    readonly _wasm: WasmSecretKey;
+    /** @internal */
+    constructor(inner: WasmSecretKey);
     /** Creates a new, random private key. */
     static generate(): Promise<SecretKey>;
     /** Creates a private key from a 64-byte seed. */
-    static fromBytes(bytes: Uint8Array): SecretKey;
+    static fromBytes(bytes: Uint8Array): Promise<SecretKey>;
     /** Parses a PEM string into a private key. */
     static fromPem(pem: string): Promise<SecretKey>;
     /** Converts a secret key into a 64-byte array. */

package/dist/xdsa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"xdsa.d.ts","sourceRoot":"","sources":["../src/xdsa.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,4CAA4C;AAC5C,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW;IAOhD,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,oDAAoD;IACpD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAMzC,mDAAmD;IAC7C,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzE;;;;;;OAMG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAcnE;;;;;;OAMG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAexE;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAM3C,iDAAiD;IACjD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAMrC,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC,kDAAkD;IAC5C,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAKpD"}
+{"version":3,"file":"xdsa.d.ts","sourceRoot":"","sources":["../src/xdsa.ts"],"names":[],"mappings":"AAMA,OAAa,EAKX,aAAa,IAAI,aAAa,EAC9B,aAAa,IAAI,aAAa,EAC9B,aAAa,IAAI,aAAa,EAC9B,eAAe,IAAI,eAAe,EACnC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,4CAA4C;AAC5C,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC,gBAAgB;gBACJ,KAAK,EAAE,eAAe;IAIlC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAK/D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,mDAAmD;WACtC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC,mDAAmD;IAC7C,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzE;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAanE;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAcxE;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAK3C,iDAAiD;WACpC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAKrC,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC,kDAAkD;IAC5C,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAIpD"}

package/dist/xhpke.d.ts

@@ -1,3 +1,4 @@
+import { XhpkeSecretKey as WasmSecretKey, XhpkePublicKey as WasmPublicKey, XhpkeFingerprint as WasmFingerprint, XhpkeSender as WasmSender, XhpkeReceiver as WasmReceiver } from './wasm/darkbio_crypto_wasm.js';
 import { PublicKey as XdsaPublicKey, SecretKey as XdsaSecretKey } from './xdsa.js';
 import { Params } from './x509.js';
 /** Size of the secret key seed in bytes (32). */
@@ -19,39 +20,34 @@ export declare function sizes(): Promise<{
 }>;
 /**
  * Fingerprint is a 32-byte unique identifier for an xHPKE key.
- * It is the SHA256 hash of the raw public key.
+ * Backed by an opaque WASM handle.
  */
 export declare class Fingerprint {
-    private readonly bytes;
-    private constructor();
-    /** Converts a 32-byte array into a fingerprint. */
-    static fromBytes(bytes: Uint8Array): Fingerprint;
+    /** @internal */
+    readonly _wasm: WasmFingerprint;
+    /** @internal */
+    constructor(inner: WasmFingerprint);
+    /** Creates a fingerprint from a 32-byte array. */
+    static fromBytes(bytes: Uint8Array): Promise<Fingerprint>;
     /** Converts a fingerprint into a 32-byte array. */
     toBytes(): Uint8Array;
 }
 /**
  * PublicKey contains an X-Wing public key for hybrid post-quantum encryption.
- * Uses X-Wing KEM (ML-KEM-768 + X25519) with HPKE Base mode.
+ * Backed by an opaque WASM handle — key material stays in WASM memory.
  */
 export declare class PublicKey {
-    private readonly bytes;
-    private constructor();
-    /**
-     * Converts a 1216-byte array into a public key.
-     *
-     * This validates the ML-KEM-768 component by checking that all polynomial
-     * coefficients are in the valid range [0, 3329).
-     */
-    static fromBytes(bytes: Uint8Array): PublicKey;
+    /** @internal */
+    readonly _wasm: WasmPublicKey;
+    /** @internal */
+    constructor(inner: WasmPublicKey);
+    /** Creates a public key from a 1216-byte array. */
+    static fromBytes(bytes: Uint8Array): Promise<PublicKey>;
     /** Parses a PEM string into a public key. */
     static fromPem(pem: string): Promise<PublicKey>;
     /**
      * Parses a public key from a PEM-encoded X.509 certificate.
      * Verifies the certificate signature against the provided xDSA signer.
-     *
-     * @param pem - PEM-encoded X.509 certificate
-     * @param signer - The xDSA public key that signed this certificate
-     * @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
      */
     static fromCertPem(pem: string, signer: XdsaPublicKey): Promise<{
         key: PublicKey;
@@ -61,10 +57,6 @@ export declare class PublicKey {
     /**
      * Parses a public key from a DER-encoded X.509 certificate.
      * Verifies the certificate signature against the provided xDSA signer.
-     *
-     * @param der - DER-encoded X.509 certificate
-     * @param signer - The xDSA public key that signed this certificate
-     * @returns The parsed public key and validity period (notBefore, notAfter as Unix timestamps)
      */
     static fromCertDer(der: Uint8Array, signer: XdsaPublicKey): Promise<{
         key: PublicKey;
@@ -77,11 +69,18 @@ export declare class PublicKey {
     toPem(): Promise<string>;
     /** Returns a 256-bit unique identifier for this key (SHA256 of raw public key). */
     fingerprint(): Promise<Fingerprint>;
+    /**
+     * Creates an HPKE sender context for multi-message encryption to this
+     * public key. Returns a stateful Sender and the 1120-byte encapsulated
+     * key that must be transmitted to the recipient.
+     */
+    newSender(domain: Uint8Array): Promise<{
+        sender: Sender;
+        encapKey: Uint8Array;
+    }>;
     /**
      * Seal (encrypt) a message to this public key.
      *
-     * Uses X-Wing KEM (ML-KEM-768 + X25519) with HPKE Base mode.
-     *
      * @param msgToSeal - The message to encrypt
      * @param msgToAuth - Additional data to authenticate (but not encrypt)
      * @param domain - Application domain for context separation
@@ -91,33 +90,27 @@ export declare class PublicKey {
     /**
      * Generates a PEM-encoded X.509 certificate for this public key.
      * Note: HPKE certificates are always end-entity certificates.
-     *
-     * @param signer - The xDSA secret key to sign the certificate
-     * @param params - Certificate parameters (subject, issuer, validity)
-     * @returns PEM-encoded X.509 certificate
      */
     toCertPem(signer: XdsaSecretKey, params: Params): Promise<string>;
     /**
      * Generates a DER-encoded X.509 certificate for this public key.
      * Note: HPKE certificates are always end-entity certificates.
-     *
-     * @param signer - The xDSA secret key to sign the certificate
-     * @param params - Certificate parameters (subject, issuer, validity)
-     * @returns DER-encoded X.509 certificate
      */
     toCertDer(signer: XdsaSecretKey, params: Params): Promise<Uint8Array>;
 }
 /**
  * SecretKey contains an X-Wing private key for hybrid post-quantum encryption.
- * Uses X-Wing KEM (ML-KEM-768 + X25519) with HPKE Base mode.
+ * Backed by an opaque WASM handle — key material stays in WASM memory.
  */
 export declare class SecretKey {
-    private readonly bytes;
-    private constructor();
+    /** @internal */
+    readonly _wasm: WasmSecretKey;
+    /** @internal */
+    constructor(inner: WasmSecretKey);
     /** Creates a new, random private key. */
     static generate(): Promise<SecretKey>;
-    /** Converts a 32-byte seed into a private key. */
-    static fromBytes(bytes: Uint8Array): SecretKey;
+    /** Creates a private key from a 32-byte seed. */
+    static fromBytes(bytes: Uint8Array): Promise<SecretKey>;
     /** Parses a PEM string into a private key. */
     static fromPem(pem: string): Promise<SecretKey>;
     /** Converts a private key into a 32-byte seed. */
@@ -128,21 +121,40 @@ export declare class SecretKey {
     publicKey(): Promise<PublicKey>;
     /** Returns a 256-bit unique identifier for this key (SHA256 of raw public key). */
     fingerprint(): Promise<Fingerprint>;
+    /**
+     * Creates an HPKE receiver context for multi-message decryption.
+     */
+    newReceiver(encapKey: Uint8Array, domain: Uint8Array): Promise<Receiver>;
     /**
      * Open (decrypt) a sealed message with this secret key.
      *
-     * Deconstructs the encapsulated key and ciphertext, verifying the
-     * authenticity of the (unencrypted) message-to-auth.
-     *
-     * Note: X-Wing uses Base mode (no sender authentication). The sender's
-     * identity cannot be verified from the ciphertext alone.
-     *
      * @param sealed - The sealed data from `seal()`
      * @param msgToAuth - The same additional authenticated data used during sealing
      * @param domain - The same application domain used during sealing
      * @returns The decrypted message
-     * @throws If decryption fails (wrong key, tampered data, or wrong AAD/domain)
      */
     open(sealed: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Promise<Uint8Array>;
 }
+/**
+ * Sender is a stateful HPKE encryption context for multi-message
+ * communication. Created via `PublicKey.newSender()`.
+ */
+export declare class Sender {
+    private readonly inner;
+    /** @internal */
+    constructor(inner: WasmSender);
+    /** Encrypts a message using the next nonce in the sequence. */
+    seal(msgToSeal: Uint8Array, msgToAuth: Uint8Array): Promise<Uint8Array>;
+}
+/**
+ * Receiver is a stateful HPKE decryption context for multi-message
+ * communication. Created via `SecretKey.newReceiver()`.
+ */
+export declare class Receiver {
+    private readonly inner;
+    /** @internal */
+    constructor(inner: WasmReceiver);
+    /** Decrypts a message using the next nonce in the sequence. */
+    open(msgToOpen: Uint8Array, msgToAuth: Uint8Array): Promise<Uint8Array>;
+}
 //# sourceMappingURL=xhpke.d.ts.map

package/dist/xhpke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"xhpke.d.ts","sourceRoot":"","sources":["../src/xhpke.ts"],"names":[],"mappings":"AA0BA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,iDAAiD;AACjD,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,oDAAoD;AACpD,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,mDAAmD;IACnD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW;IAOhD,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP;;;;;OAKG;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE;;;;;;;OAOG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAenE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAMzC;;;;;;;;;OASG;IACG,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;IAKtB;;;;;;;OAOG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYvE;;;;;;;OAOG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAa5E;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,OAAO;IAIP,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAM3C,kDAAkD;IAClD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS;IAO9C,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAMrC,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC;;;;;;;;;;;;;;OAcG;IACG,IAAI,CACR,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;CAIvB"}
+{"version":3,"file":"xhpke.d.ts","sourceRoot":"","sources":["../src/xhpke.ts"],"names":[],"mappings":"AAMA,OAAa,EAKX,cAAc,IAAI,aAAa,EAC/B,cAAc,IAAI,aAAa,EAC/B,gBAAgB,IAAI,eAAe,EACnC,WAAW,IAAI,UAAU,EACzB,aAAa,IAAI,YAAY,EAC9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,iDAAiD;AACjD,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,oDAAoD;AACpD,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC,gBAAgB;gBACJ,KAAK,EAAE,eAAe;IAIlC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAK/D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,mDAAmD;WACtC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC;;;;OAIG;IACG,SAAS,CACb,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,UAAU,CAAA;KAAE,CAAC;IAOpD;;;;;;;OAOG;IACG,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;IAKtB;;;OAGG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWvE;;;OAGG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAY5E;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAK3C,iDAAiD;WACpC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAKrC,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC;;OAEG;IACG,WAAW,CACf,QAAQ,EAAE,UAAU,EACpB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,QAAQ,CAAC;IAKpB;;;;;;;OAOG;IACG,IAAI,CACR,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;CAIvB;AAED;;;GAGG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,gBAAgB;gBACJ,KAAK,EAAE,UAAU;IAI7B,+DAA+D;IACzD,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,UAAU,CAAC;CAIvB;AAED;;;GAGG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IAErC,gBAAgB;gBACJ,KAAK,EAAE,YAAY;IAI/B,+DAA+D;IACzD,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,UAAU,CAAC;CAIvB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkbio/crypto",
-  "version": "0.1.7",
+  "version": "0.2.0",
   "author": "Péter Szilágyi <peter@dark.bio>",
   "description": "Cryptography primitives and wrappers",
   "repository": {