@darkbio/crypto 0.17.2 → 0.17.3

package/README.md

@@ -32,7 +32,7 @@ The library is opinionated. Parameters and primitives were selected to provide m
 
 *¹ Whilst RSA is used in the Dark Bio project for secure boot signatures on pre-quantum hardware, there was no reason to expose that in the TypeScript wrappers. It's available in Rust so anyone needing it can expose it easily themselves.*
 
-*² As CBOR encoding/decoding would require a full reimplementation in TypeScript, that is delegated to any preferred 3rd party library. To ensure correctness, this package provides a `cbor.verify`, which it also implicitly enforces that when crossing through `cose`.*
+*² CBOR encoding and decoding is delegated to [cborg](https://github.com/rvagg/cborg), a full reimplementation in TypeScript being out of scope. To ensure correctness, this package provides a type system. `cbor` codecs declare the shape of a value the way a Rust type deriving `Cbor` does, `cose` and `cwt` functions take values bound to their codec, and the canonical form of every byte crossing the WASM boundary is checked by the Rust validator, which `cbor.verify` also exposes.*
 
 ## Native packages
 

package/dist/argon2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"argon2.d.ts","sourceRoot":"","sources":["../src/argon2.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;GAaG;AACH,wBAAsB,GAAG,CACvB,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAKrB"}
+{"version":3,"file":"argon2.d.ts","sourceRoot":"","sources":["../src/argon2.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;GAaG;AACH,wBAAsB,GAAG,CACvB,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAYrB"}

package/dist/cbor.d.ts

@@ -1,11 +1,138 @@
+/** A value bound to the codec that encodes it. */
+export interface Encodable<T> {
+    readonly codec: Codec<T>;
+    readonly value: T;
+}
+/** Bytes bound to the codec that decodes them. */
+export interface Decodable<T> {
+    readonly codec: Codec<T>;
+    readonly bytes: Uint8Array;
+}
+/**
+ * A codec between a value of type T and the representation cborg encodes and
+ * decodes. Both directions throw a {@link CodecError} on a value of the wrong
+ * shape.
+ */
+export interface Codec<T> {
+    /** Converts a value into what cborg encodes, checking its shape. */
+    encode(value: T): unknown;
+    /** Converts what cborg decoded into a value, checking its shape. */
+    decode(value: unknown): T;
+    /** Binds a value to this codec for encoding. */
+    value(value: T): Encodable<T>;
+    /** Binds bytes to this codec for decoding. */
+    bytes(data: Uint8Array): Decodable<T>;
+}
+/** A required field of a map, a codec at an integer key. */
+export interface Field<T> {
+    readonly key: number;
+    readonly codec: Codec<T>;
+    readonly required: true;
+}
+/** An optional field of a map, absent from the map when undefined. */
+export interface OptionalField<T> {
+    readonly key: number;
+    readonly codec: Codec<T>;
+    readonly required: false;
+}
+/** The fields of a map codec, by name. */
+export type Fields = Record<string, Field<unknown> | OptionalField<unknown>>;
+/** The value type of a map codec, required fields present and optional ones optional. */
+export type Values<F extends Fields> = {
+    [K in keyof F as F[K] extends Field<unknown> ? K : never]: F[K] extends Field<infer T> ? T : never;
+} & {
+    [K in keyof F as F[K] extends OptionalField<unknown> ? K : never]?: F[K] extends OptionalField<infer T> ? T : never;
+};
+/** The value types of a tuple codec's items. */
+export type Codecs<T extends unknown[]> = {
+    [I in keyof T]: Codec<T[I]>;
+};
+/**
+ * A value of the wrong shape for a codec. The path names where in the value
+ * the mismatch is, array items as `[i]` and map fields as `.name`, empty at
+ * the top.
+ */
+export declare class CodecError extends Error {
+    readonly reason: string;
+    readonly path: string;
+    constructor(reason: string, path?: string);
+}
+/**
+ * Builds a codec from its two directions, the bindings coming for free.
+ *
+ * @param encode - Converts a value into what cborg encodes
+ * @param decode - Converts what cborg decoded into a value
+ */
+export declare function codec<T>(encode: (value: T) => unknown, decode: (value: unknown) => T): Codec<T>;
+/** A boolean. */
+export declare const bool: Codec<boolean>;
+/** Null, the value of `Option<T>::None` and of a CWT's authenticated data. */
+export declare const nil: Codec<null>;
+/** A UTF-8 text string. */
+export declare const text: Codec<string>;
+/** A byte string. */
+export declare const bytes: Codec<Uint8Array>;
+/** Anything, passed through as cborg decoded it, the counterpart of `cbor::Raw`. */
+export declare const raw: Codec<unknown>;
+/** An unsigned 64 bit integer. */
+export declare const uint: Codec<bigint>;
+/** A signed 64 bit integer. */
+export declare const int: Codec<bigint>;
+/**
+ * A value or null, the counterpart of `Option<T>` in an array or as a
+ * nullable map field.
+ */
+export declare function nullable<T>(item: Codec<T>): Codec<T | null>;
+/**
+ * A member of a set of small integers, the counterpart of a Rust enum encoded
+ * as its discriminant.
+ */
+export declare function enumeration<E extends number>(values: readonly E[]): Codec<E>;
+/** An array of any length of one kind of item, the counterpart of `Array<T>`. */
+export declare function array<T>(item: Codec<T>): Codec<T[]>;
+/**
+ * An array of a fixed length with an item codec per position, the counterpart
+ * of a tuple or a struct with `#[cbor(array)]`.
+ */
+export declare function tuple<T extends unknown[]>(...items: Codecs<T>): Codec<T>;
+/** Declares a required map field. */
+export declare function field<T>(key: number, codec: Codec<T>): Field<T>;
+/**
+ * Declares a map field that may be absent, the counterpart of an
+ * `Option<T>` field, absent when undefined.
+ */
+export declare function optional<T>(field: Field<T>): OptionalField<T>;
+/**
+ * An integer keyed map with exactly the declared fields, the counterpart of
+ * a struct with `#[cbor(key = N)]` fields. Both ways, a field the map does
+ * not declare and a required field missing are refused, as is a key that is
+ * not an integer. Only own properties of a value count as its fields.
+ */
+export declare function map<F extends Fields>(fields: F): Codec<Values<F>>;
+/**
+ * Encodes a value bound to its codec into canonical CBOR, the bytes checked
+ * by the Rust validator before they are returned.
+ *
+ * @param item - The value and the codec to encode it with
+ * @throws CodecError on a value of the wrong shape
+ */
+export declare function encode<T>(item: Encodable<T>): Promise<Uint8Array>;
+/**
+ * Decodes canonical CBOR bound to its codec, the bytes checked by the Rust
+ * validator before anything is decoded.
+ *
+ * @param item - The bytes and the codec to decode them with
+ * @throws CodecError on bytes of the wrong shape
+ */
+export declare function decode<T>(item: Decodable<T>): Promise<T>;
 /**
  * Verify that data is valid CBOR under the restricted deterministic type
  * system used across the darkbio ecosystem (booleans, null, 64-bit integers,
  * text strings, byte strings, arrays, and integer-keyed maps).
  *
  * The COSE and CWT functions run this check internally on every payload they
- * sign or embed; use it directly to pre-check hand-rolled encodings such as
- * custom claim values.
+ * sign, embed or hand back; use it directly to pre-check hand-rolled
+ * encodings.
  *
  * @param data - The CBOR bytes to validate
  * @throws If the data is not valid restricted CBOR

package/dist/cbor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cbor.d.ts","sourceRoot":"","sources":["../src/cbor.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;GAWG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5D"}
+{"version":3,"file":"cbor.d.ts","sourceRoot":"","sources":["../src/cbor.ts"],"names":[],"mappings":"AA6BA,kDAAkD;AAClD,MAAM,WAAW,SAAS,CAAC,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;CACnB;AAED,kDAAkD;AAClD,MAAM,WAAW,SAAS,CAAC,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,KAAK,CAAC,CAAC;IACtB,oEAAoE;IACpE,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC;IAC1B,oEAAoE;IACpE,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC;IAC1B,gDAAgD;IAChD,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,8CAA8C;IAC9C,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;CACvC;AAED,4DAA4D;AAC5D,MAAM,WAAW,KAAK,CAAC,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB;AAED,sEAAsE;AACtE,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;CAC1B;AAED,0CAA0C;AAC1C,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;AAE7E,yFAAyF;AACzF,MAAM,MAAM,MAAM,CAAC,CAAC,SAAS,MAAM,IAAI;KACpC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAC3E,MAAM,CAAC,CACR,GACG,CAAC,GACD,KAAK;CACV,GAAG;KAEA,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAChE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CACpD,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,MAAM,CAAC,CAAC,SAAS,OAAO,EAAE,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC;AAE1E;;;;GAIG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,MAAM,EAAE,MAAM,EAAE,IAAI,SAAK;CAMtC;AAcD;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,CAAC,EACrB,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,EAC7B,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC,GAC5B,KAAK,CAAC,CAAC,CAAC,CAQV;AA8BD,iBAAiB;AACjB,eAAO,MAAM,IAAI,EAAE,KAAK,CAAC,OAAO,CAG/B,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,GAAG,EAAE,KAAK,CAAC,IAAI,CAG3B,CAAC;AAEF,2BAA2B;AAC3B,eAAO,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,CAG9B,CAAC;AAEF,qBAAqB;AACrB,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,UAAU,CAGnC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,GAAG,EAAE,KAAK,CAAC,OAAO,CAG9B,CAAC;AAEF,kCAAkC;AAClC,eAAO,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,CAc9B,CAAC;AAEF,+BAA+B;AAC/B,eAAO,MAAM,GAAG,EAAE,KAAK,CAAC,MAAM,CAc7B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAK3D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAS5E;AAED,iFAAiF;AACjF,wBAAgB,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAmBnD;AAED;;;GAGG;AACH,wBAAgB,KAAK,CAAC,CAAC,SAAS,OAAO,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAoBxE;AAED,qCAAqC;AACrC,wBAAgB,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAK/D;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,GAAG,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAqEjE;AAED;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAKvE;AAED;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAI9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5D"}

package/dist/cose.d.ts

@@ -1,24 +1,22 @@
+import { Decodable, Encodable } from './cbor.js';
 import { SecretKey as XdsaSecretKey, PublicKey as XdsaPublicKey, Fingerprint as XdsaFingerprint } from './xdsa.js';
 import { SecretKey as XhpkeSecretKey, PublicKey as XhpkePublicKey, Fingerprint as XhpkeFingerprint } from './xhpke.js';
 /**
  * Create a COSE_Sign1 signature with an embedded payload.
  */
-export declare function sign<E, A>(msgToEmbed: E, msgToAuth: A, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+export declare function sign<E, A>(msgToEmbed: Encodable<E>, msgToAuth: Encodable<A>, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Create a COSE_Sign1 signature without an embedded payload (detached mode).
  */
-export declare function signDetached<A>(msgToAuth: A, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+export declare function signDetached<A>(msgToAuth: Encodable<A>, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Verify a COSE_Sign1 signature and return the embedded payload.
- *
- * CBOR maps in the payload decode as `Map` objects, not plain objects, so a
- * payload signed from a plain object comes back as a `Map`.
  */
-export declare function verify<T, A>(msgToCheck: Uint8Array, msgToAuth: A, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
+export declare function verify<T, A>(msgToCheck: Decodable<T>, msgToAuth: Encodable<A>, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
 /**
  * Verify a COSE_Sign1 signature with a detached payload.
  */
-export declare function verifyDetached<A>(msgToCheck: Uint8Array, msgToAuth: A, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<void>;
+export declare function verifyDetached<A>(msgToCheck: Uint8Array, msgToAuth: Encodable<A>, verifier: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<void>;
 /**
  * Extract the signer's fingerprint from a COSE_Sign1 without verifying.
  */
@@ -28,10 +26,8 @@ export declare function signer(signature: Uint8Array): Promise<XdsaFingerprint>;
  *
  * Warning: The returned payload is unauthenticated and should not be
  * trusted until verified with `verify`.
- *
- * CBOR maps in the payload decode as `Map` objects, not plain objects.
  */
-export declare function peek<T>(signature: Uint8Array): Promise<T>;
+export declare function peek<T>(signature: Decodable<T>): Promise<T>;
 /**
  * Extract the recipient's fingerprint from a COSE_Encrypt0 without decrypting.
  */
@@ -39,20 +35,17 @@ export declare function recipient(ciphertext: Uint8Array): Promise<XhpkeFingerpr
 /**
  * Sign a message then encrypt it to a recipient (sign-then-encrypt).
  */
-export declare function seal<S, A>(msgToSeal: S, msgToAuth: A, signerKey: XdsaSecretKey, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
+export declare function seal<S, A>(msgToSeal: Encodable<S>, msgToAuth: Encodable<A>, signerKey: XdsaSecretKey, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Decrypt and verify a sealed message.
- *
- * CBOR maps in the payload decode as `Map` objects, not plain objects, so a
- * payload sealed from a plain object comes back as a `Map`.
  */
-export declare function open<T, A>(msgToOpen: Uint8Array, msgToAuth: A, recipientKey: XhpkeSecretKey, senderKey: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
+export declare function open<T, A>(msgToOpen: Decodable<T>, msgToAuth: Encodable<A>, recipientKey: XhpkeSecretKey, senderKey: XdsaPublicKey, domain: Uint8Array, maxDriftSecs?: number): Promise<T>;
 /**
  * Encrypt an already-signed COSE_Sign1 to a recipient.
  */
-export declare function encrypt<A>(sign1: Uint8Array, msgToAuth: A, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
+export declare function encrypt<A>(sign1: Uint8Array, msgToAuth: Encodable<A>, recipientKey: XhpkePublicKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Decrypt a sealed message without verifying the signature.
  */
-export declare function decrypt<A>(msgToOpen: Uint8Array, msgToAuth: A, recipientKey: XhpkeSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+export declare function decrypt<A>(msgToOpen: Uint8Array, msgToAuth: Encodable<A>, recipientKey: XhpkeSecretKey, domain: Uint8Array): Promise<Uint8Array>;
 //# sourceMappingURL=cose.d.ts.map

package/dist/cose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cose.d.ts","sourceRoot":"","sources":["../src/cose.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC1B,WAAW,IAAI,eAAe,EAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,IAAI,cAAc,EAC3B,SAAS,IAAI,cAAc,EAC3B,WAAW,IAAI,gBAAgB,EAChC,MAAM,YAAY,CAAC;AA6BpB;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,UAAU,EAAE,CAAC,EACb,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,SAAS,EAAE,CAAC,EACZ,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAIrB;AAED;;;;;GAKG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,CAAC,EAC/B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,CAAC,EACZ,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAG5E;AAED;;;;;;;GAOG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAI/D;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAG3B;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,CAAC,EACZ,SAAS,EAAE,aAAa,EACxB,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAarB;AAED;;;;;GAKG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,CAAC,EACZ,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAMrB"}
+{"version":3,"file":"cose.d.ts","sourceRoot":"","sources":["../src/cose.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAiBtD,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC1B,WAAW,IAAI,eAAe,EAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,IAAI,cAAc,EAC3B,SAAS,IAAI,cAAc,EAC3B,WAAW,IAAI,gBAAgB,EAChC,MAAM,YAAY,CAAC;AAqBpB;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,EACxB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAUrB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,CAAC,EAC/B,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,EACxB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAG5E;AAED;;;;;GAKG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAKjE;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAG3B;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,SAAS,EAAE,aAAa,EACxB,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAWrB;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,CAAC,EAC7B,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,YAAY,EAAE,cAAc,EAC5B,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAKrB"}

package/dist/cwt.d.ts

@@ -1,5 +1,6 @@
-import { SecretKey as XdsaSecretKey, PublicKey as XdsaPublicKey, Fingerprint as XdsaFingerprint } from './xdsa.js';
-import { PublicKey as XhpkePublicKey } from './xhpke.js';
+import { Codec, Decodable, Encodable } from './cbor.js';
+import * as xdsa from "./xdsa.js";
+import * as xhpke from "./xhpke.js";
 /**
  * Debug port state per RFC 9711 Section 4.2.9.
  */
@@ -31,130 +32,83 @@ export declare enum IntendedUse {
     ProofOfPossession = 5
 }
 /**
- * A CWT claims set with typed accessors for standard CWT (RFC 8392) and
- * EAT (RFC 9711) claims.
+ * An OEM identifier in one of the three forms RFC 9711 allows, an IANA
+ * private enterprise number, a 3 byte IEEE organisationally unique identifier
+ * or a 16 byte random identifier.
+ */
+export type Oemid = {
+    pen: bigint;
+} | {
+    ieee: Uint8Array;
+} | {
+    random: Uint8Array;
+};
+/** Codec of an OEM identifier, an unsigned integer or 3 or 16 bytes. */
+export declare const oemid: Codec<Oemid>;
+/**
+ * Codec of a version, the text wrapped in a one element array as RFC 9711
+ * has it. The optional scheme element is not supported.
+ */
+export declare const version: Codec<string>;
+/**
+ * Codec of a confirmation, a public key the token's subject holds, wrapped in
+ * a COSE_Key of exactly the key type and the key bytes (RFC 8747).
  *
- * Standard claims are exposed as typed properties. Custom or application-
- * specific claims can be accessed via `get()` / `set()` using their integer key.
+ * @param algorithm - The COSE algorithm identifier of the key type
+ * @param key - The codec of the key
  */
-export declare class Claims {
-    private readonly map;
-    /** Creates an empty claims set. */
-    constructor();
-    private static fromMap;
-    /** Issuer: identifies the principal that issued the token (key 1). */
-    get issuer(): string | undefined;
-    set issuer(value: string | undefined);
-    /** Subject: identifies the principal that is the subject of the token (key 2). */
-    get subject(): string | undefined;
-    set subject(value: string | undefined);
-    /** Audience: identifies the recipients the token is intended for (key 3). */
-    get audience(): string | undefined;
-    set audience(value: string | undefined);
-    /**
-     * Expiration: the time on or after which the token must not be accepted
-     * (key 4, Unix timestamp in seconds).
-     */
-    get expiration(): number | undefined;
-    set expiration(value: number | undefined);
-    /**
-     * NotBefore: the time before which the token must not be accepted
-     * (key 5, Unix timestamp in seconds).
-     */
-    get notBefore(): number | undefined;
-    set notBefore(value: number | undefined);
-    /**
-     * IssuedAt: the time at which the token was issued
-     * (key 6, Unix timestamp in seconds).
-     */
-    get issuedAt(): number | undefined;
-    set issuedAt(value: number | undefined);
-    /** TokenID: a unique identifier for the token (key 7). */
-    get tokenId(): Uint8Array | undefined;
-    set tokenId(value: Uint8Array | undefined);
-    /**
-     * Sets the Confirm claim to bind an xDSA public key to this token.
-     * Encoded as: `{8: {1: {1: -70000, -2: <key_bytes>}}}`
-     */
-    setConfirmXdsa(key: XdsaPublicKey): void;
-    /**
-     * Sets the Confirm claim to bind an xHPKE public key to this token.
-     * Encoded as: `{8: {1: {1: -70001, -2: <key_bytes>}}}`
-     */
-    setConfirmXhpke(key: XhpkePublicKey): void;
-    /**
-     * Extracts the bound xDSA public key from the Confirm claim, or undefined
-     * if absent or a different key type.
-     */
-    getConfirmXdsa(): Promise<XdsaPublicKey | undefined>;
-    /**
-     * Extracts the bound xHPKE public key from the Confirm claim, or undefined
-     * if absent or a different key type.
-     */
-    getConfirmXhpke(): Promise<XhpkePublicKey | undefined>;
-    private readConfirm;
-    /** UEID: a globally unique device identifier (key 256). */
-    get ueid(): Uint8Array | undefined;
-    set ueid(value: Uint8Array | undefined);
-    /**
-     * OEMID: hardware manufacturer identifier (key 258).
-     *
-     * Use {@link setOemidRandom}, {@link setOemidIeee}, or {@link setOemidPen} to set.
-     * The getter returns the raw CBOR value (Uint8Array or number).
-     */
-    get oemid(): Uint8Array | number | undefined;
-    /** Sets OEMID to a 16-byte random manufacturer identifier. */
-    setOemidRandom(id: Uint8Array): void;
-    /** Sets OEMID to a 3-byte IEEE OUI/MA-L. */
-    setOemidIeee(id: Uint8Array): void;
-    /** Sets OEMID to an IANA Private Enterprise Number. */
-    setOemidPen(pen: number): void;
-    /** HwModel: product or board model identifier (key 259). */
-    get hwModel(): Uint8Array | undefined;
-    set hwModel(value: Uint8Array | undefined);
-    /**
-     * HwVersion: hardware revision identifier (key 260).
-     * Stored as a 1-element CBOR array per RFC 9711 Section 4.2.5.
-     */
-    get hwVersion(): string | undefined;
-    set hwVersion(value: string | undefined);
-    /** Uptime: seconds since last boot (key 261). */
-    get uptime(): number | undefined;
-    set uptime(value: number | undefined);
-    /** OemBoot: whether the boot chain is OEM-authorized (key 262). */
-    get oemBoot(): boolean | undefined;
-    set oemBoot(value: boolean | undefined);
-    /** DebugStatus: debug port state (key 263). */
-    get debugStatus(): DebugState | undefined;
-    set debugStatus(value: DebugState | undefined);
-    /** BootCount: number of times the device has booted (key 267). */
-    get bootCount(): number | undefined;
-    set bootCount(value: number | undefined);
-    /** BootSeed: random value unique to the current boot cycle (key 268). */
-    get bootSeed(): Uint8Array | undefined;
-    set bootSeed(value: Uint8Array | undefined);
-    /** SwName: name of the firmware or software (key 270). */
-    get swName(): string | undefined;
-    set swName(value: string | undefined);
-    /**
-     * SwVersion: software version identifier (key 271).
-     * Stored as a 1-element CBOR array per RFC 9711 Section 4.2.7.
-     */
-    get swVersion(): string | undefined;
-    set swVersion(value: string | undefined);
-    /** IntendedUse: the token's purpose (key 275). */
-    get intendedUse(): IntendedUse | undefined;
-    set intendedUse(value: IntendedUse | undefined);
-    /** Gets a custom claim by its integer key. */
-    get(key: number): unknown;
-    /** Sets a custom claim by its integer key. */
-    set(key: number, value: unknown): void;
-    private setOrDelete;
-    /** Encodes the claims to CBOR bytes. @internal */
-    encode(): Uint8Array;
-    /** Decodes claims from CBOR bytes. @internal */
-    static decode(bytes: Uint8Array): Claims;
-}
+export declare function confirmation<K>(algorithm: number, key: Codec<K>): Codec<K>;
+/**
+ * The registered claims, RFC 8392 for the token ones and RFC 9711 for the
+ * attestation ones under `eat`. A claim set is a `cbor.map` of these.
+ */
+export declare const claims: {
+    /** The issuer, the principal that issued the token (key 1). */
+    issuer: import('./cbor.js').Field<string>;
+    /** The subject, the principal the token is about (key 2). */
+    subject: import('./cbor.js').Field<string>;
+    /** The audience, the recipients the token is meant for (key 3). */
+    audience: import('./cbor.js').Field<string>;
+    /** The expiration, Unix seconds the token is valid until, exclusive (key 4). */
+    expiration: import('./cbor.js').Field<bigint>;
+    /** The not before time, Unix seconds the token is valid from (key 5). */
+    notBefore: import('./cbor.js').Field<bigint>;
+    /** The issue time, Unix seconds the token was issued (key 6). */
+    issuedAt: import('./cbor.js').Field<bigint>;
+    /** The token identifier, unique to the token (key 7). */
+    tokenId: import('./cbor.js').Field<Uint8Array<ArrayBufferLike>>;
+    /** The confirmation, an xDSA public key the subject holds (key 8). */
+    confirmXdsa: import('./cbor.js').Field<xdsa.PublicKey>;
+    /** The confirmation, an xHPKE public key the subject holds (key 8). */
+    confirmXhpke: import('./cbor.js').Field<xhpke.PublicKey>;
+    /** The Entity Attestation Token claims of RFC 9711. */
+    eat: {
+        /** Universal entity identifier (key 256). */
+        ueid: import('./cbor.js').Field<Uint8Array<ArrayBufferLike>>;
+        /** OEM identifier (key 258). */
+        oemid: import('./cbor.js').Field<Oemid>;
+        /** Hardware model (key 259). */
+        hwModel: import('./cbor.js').Field<Uint8Array<ArrayBufferLike>>;
+        /** Hardware version (key 260). */
+        hwVersion: import('./cbor.js').Field<string>;
+        /** Seconds since boot (key 261). */
+        uptime: import('./cbor.js').Field<bigint>;
+        /** Whether the entity booted OEM authorised software (key 262). */
+        oemBoot: import('./cbor.js').Field<boolean>;
+        /** Debug state of the entity (key 263). */
+        debugStatus: import('./cbor.js').Field<DebugState>;
+        /** Number of boots (key 267). */
+        bootCount: import('./cbor.js').Field<bigint>;
+        /** Random seed of the boot (key 268). */
+        bootSeed: import('./cbor.js').Field<Uint8Array<ArrayBufferLike>>;
+        /** Software name (key 270). */
+        swName: import('./cbor.js').Field<string>;
+        /** Software version (key 271). */
+        swVersion: import('./cbor.js').Field<string>;
+        /** Intended use of the token (key 275). */
+        intendedUse: import('./cbor.js').Field<IntendedUse>;
+    };
+};
 /**
  * Issues a CWT by signing the claims with COSE Sign1.
  *
@@ -165,7 +119,7 @@ export declare class Claims {
  * @param domain - Application-specific domain separator
  * @returns The serialized CWT
  */
-export declare function issue(claims: Claims, signer: XdsaSecretKey, domain: Uint8Array): Promise<Uint8Array>;
+export declare function issue<C>(claims: Encodable<C>, signer: xdsa.SecretKey, domain: Uint8Array): Promise<Uint8Array>;
 /**
  * Verifies a CWT's COSE signature and temporal validity, then returns the
  * decoded claims.
@@ -180,7 +134,7 @@ export declare function issue(claims: Claims, signer: XdsaSecretKey, domain: Uin
  * @param now - Current Unix timestamp for temporal validation (undefined to skip)
  * @returns The decoded claims
  */
-export declare function verify(token: Uint8Array, verifier: XdsaPublicKey, domain: Uint8Array, now?: number): Promise<Claims>;
+export declare function verify<C>(token: Decodable<C>, verifier: xdsa.PublicKey, domain: Uint8Array, now?: number | bigint): Promise<C>;
 /**
  * Extracts the signer's fingerprint from a CWT without verifying.
  *
@@ -190,7 +144,7 @@ export declare function verify(token: Uint8Array, verifier: XdsaPublicKey, domai
  * @param token - The serialized CWT
  * @returns The signer fingerprint
  */
-export declare function signer(token: Uint8Array): Promise<XdsaFingerprint>;
+export declare function signer(token: Uint8Array): Promise<xdsa.Fingerprint>;
 /**
  * Extracts claims from a CWT without verifying the signature.
  *
@@ -201,5 +155,5 @@ export declare function signer(token: Uint8Array): Promise<XdsaFingerprint>;
  * @param token - The serialized CWT
  * @returns The decoded (but unverified) claims
  */
-export declare function peek(token: Uint8Array): Promise<Claims>;
+export declare function peek<C>(token: Decodable<C>): Promise<C>;
 //# sourceMappingURL=cwt.d.ts.map

package/dist/cwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cwt.d.ts","sourceRoot":"","sources":["../src/cwt.ts"],"names":[],"mappings":"AAgDA,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC1B,WAAW,IAAI,eAAe,EAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,SAAS,IAAI,cAAc,EAAE,MAAM,YAAY,CAAC;AAMzD;;GAEG;AACH,oBAAY,UAAU;IACpB,kCAAkC;IAClC,OAAO,IAAI;IACX,mCAAmC;IACnC,QAAQ,IAAI;IACZ,iEAAiE;IACjE,iBAAiB,IAAI;IACrB,kDAAkD;IAClD,mBAAmB,IAAI;IACvB,+DAA+D;IAC/D,wBAAwB,IAAI;CAC7B;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,mCAAmC;IACnC,OAAO,IAAI;IACX,4CAA4C;IAC5C,YAAY,IAAI;IAChB,oDAAoD;IACpD,YAAY,IAAI;IAChB,oDAAoD;IACpD,YAAY,IAAI;IAChB,sDAAsD;IACtD,iBAAiB,IAAI;CACtB;AAED;;;;;;GAMG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAuB;IAE3C,mCAAmC;;IAKnC,OAAO,CAAC,MAAM,CAAC,OAAO;IAQtB,sEAAsE;IACtE,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEnC;IAED,kFAAkF;IAClF,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEpC;IAED,6EAA6E;IAC7E,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAErC;IAED;;;OAGG;IACH,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IACD,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEvC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED;;;OAGG;IACH,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAErC;IAED,0DAA0D;IAC1D,IAAI,OAAO,IAAI,UAAU,GAAG,SAAS,CAEpC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAExC;IAED;;;OAGG;IACH,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAexC;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI;IAe1C;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAM1D;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAM5D,OAAO,CAAC,WAAW;IAiBnB,2DAA2D;IAC3D,IAAI,IAAI,IAAI,UAAU,GAAG,SAAS,CAEjC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAErC;IAED;;;;;OAKG;IACH,IAAI,KAAK,IAAI,UAAU,GAAG,MAAM,GAAG,SAAS,CAE3C;IAED,8DAA8D;IAC9D,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAOpC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAOlC,uDAAuD;IACvD,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI9B,4DAA4D;IAC5D,IAAI,OAAO,IAAI,UAAU,GAAG,SAAS,CAEpC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAExC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAIlC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED,iDAAiD;IACjD,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEnC;IAED,mEAAmE;IACnE,IAAI,OAAO,IAAI,OAAO,GAAG,SAAS,CAEjC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,EAErC;IAED,+CAA+C;IAC/C,IAAI,WAAW,IAAI,UAAU,GAAG,SAAS,CAIxC;IACD,IAAI,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAE5C;IAED,kEAAkE;IAClE,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED,yEAAyE;IACzE,IAAI,QAAQ,IAAI,UAAU,GAAG,SAAS,CAErC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAEzC;IAED,0DAA0D;IAC1D,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEnC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAIlC;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAEtC;IAED,kDAAkD;IAClD,IAAI,WAAW,IAAI,WAAW,GAAG,SAAS,CAIzC;IACD,IAAI,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,EAE7C;IAED,8CAA8C;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,8CAA8C;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAItC,OAAO,CAAC,WAAW;IAQnB,kDAAkD;IAClD,MAAM,IAAI,UAAU;IAIpB,gDAAgD;IAChD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM;CAczC;AAED;;;;;;;;;GASG;AACH,wBAAsB,KAAK,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAIrB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,MAAM,CAC1B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,UAAU,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAGxE;AAED;;;;;;;;;GASG;AACH,wBAAsB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAI7D"}
+{"version":3,"file":"cwt.d.ts","sourceRoot":"","sources":["../src/cwt.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAUL,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,WAAW,CAAC;AAUnB,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC;;GAEG;AACH,oBAAY,UAAU;IACpB,kCAAkC;IAClC,OAAO,IAAI;IACX,mCAAmC;IACnC,QAAQ,IAAI;IACZ,iEAAiE;IACjE,iBAAiB,IAAI;IACrB,kDAAkD;IAClD,mBAAmB,IAAI;IACvB,+DAA+D;IAC/D,wBAAwB,IAAI;CAC7B;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,mCAAmC;IACnC,OAAO,IAAI;IACX,4CAA4C;IAC5C,YAAY,IAAI;IAChB,oDAAoD;IACpD,YAAY,IAAI;IAChB,oDAAoD;IACpD,YAAY,IAAI;IAChB,sDAAsD;IACtD,iBAAiB,IAAI;CACtB;AAED;;;;GAIG;AACH,MAAM,MAAM,KAAK,GACf;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AAElE,wEAAwE;AACxE,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CA2C9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,OAAO,EAAE,KAAK,CAAC,MAAM,CAYjC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAU1E;AASD;;;GAGG;AACH,eAAO,MAAM,MAAM;IACjB,+DAA+D;;IAE/D,6DAA6D;;IAE7D,mEAAmE;;IAEnE,gFAAgF;;IAEhF,yEAAyE;;IAEzE,iEAAiE;;IAEjE,yDAAyD;;IAEzD,sEAAsE;;IAEtE,uEAAuE;;IAEvE,uDAAuD;;QAErD,6CAA6C;;QAE7C,gCAAgC;;QAEhC,gCAAgC;;QAEhC,kCAAkC;;QAElC,oCAAoC;;QAEpC,mEAAmE;;QAEnE,2CAA2C;;QAE3C,iCAAiC;;QAEjC,yCAAyC;;QAEzC,+BAA+B;;QAE/B,kCAAkC;;QAElC,2CAA2C;;;CAG9C,CAAC;AAkBF;;;;;;;;;GASG;AACH,wBAAsB,KAAK,CAAC,CAAC,EAC3B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EACpB,MAAM,EAAE,IAAI,CAAC,SAAS,EACtB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAC5B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EACnB,QAAQ,EAAE,IAAI,CAAC,SAAS,EACxB,MAAM,EAAE,UAAU,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CASZ;AAED;;;;;;;;GAQG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAGzE;AAED;;;;;;;;;GASG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAG7D"}

package/dist/hkdf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../src/hkdf.ts"],"names":[],"mappings":"AAaA;;;;;;;;GAQG;AACH,wBAAsB,GAAG,CACvB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,MAAM,CAC1B,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAGrB"}
+{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../src/hkdf.ts"],"names":[],"mappings":"AAcA;;;;;;;;GAQG;AACH,wBAAsB,GAAG,CACvB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,MAAM,CAC1B,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAGrB"}