@darkbio/crypto 0.3.0 → 0.17.1

package/dist/init.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Ensures the WASM module is instantiated exactly once. Concurrent callers
+ * share the single in-flight initialization; a failed attempt is cleared so
+ * the next call can retry.
+ *
+ * @internal
+ */
+export declare function ensureInit(): Promise<unknown>;
+//# sourceMappingURL=init.d.ts.map

package/dist/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAUA;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAQ7C"}

package/dist/rand.d.ts

@@ -1,7 +1,7 @@
 /**
  * Generate cryptographically secure random bytes.
  *
- * @param bytes - Number of random bytes to generate
+ * @param bytes - Number of random bytes to generate (max 64 MiB)
  * @returns A Uint8Array containing the random bytes
  */
 export declare function generate(bytes: number): Promise<Uint8Array>;

package/dist/rand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rand.d.ts","sourceRoot":"","sources":["../src/rand.ts"],"names":[],"mappings":"AAiBA;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAGjE"}
+{"version":3,"file":"rand.d.ts","sourceRoot":"","sources":["../src/rand.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAGjE"}

package/dist/xdsa.d.ts

@@ -1,5 +1,4 @@
 import { XdsaSecretKey as WasmSecretKey, XdsaPublicKey as WasmPublicKey, XdsaSignature as WasmSignature, XdsaFingerprint as WasmFingerprint } from './wasm/darkbio_crypto_wasm.js';
-import { Params } from './x509.js';
 /** Size of the secret key in bytes (64). */
 export declare const SECRET_KEY_SIZE = 64;
 /** Size of the public key in bytes (1984). */
@@ -59,40 +58,18 @@ export declare class PublicKey {
     static fromBytes(bytes: Uint8Array): Promise<PublicKey>;
     /** Parses a PEM string into a public key. */
     static fromPem(pem: string): Promise<PublicKey>;
-    /**
-     * Parses a public key from a PEM-encoded X.509 certificate.
-     * Verifies the certificate signature against the provided signer.
-     */
-    static fromCertPem(pem: string, signer: PublicKey): Promise<{
-        key: PublicKey;
-        notBefore: bigint;
-        notAfter: bigint;
-    }>;
-    /**
-     * Parses a public key from a DER-encoded X.509 certificate.
-     * Verifies the certificate signature against the provided signer.
-     */
-    static fromCertDer(der: Uint8Array, signer: PublicKey): Promise<{
-        key: PublicKey;
-        notBefore: bigint;
-        notAfter: bigint;
-    }>;
     /** Converts a public key into a 1984-byte array. */
     toBytes(): Uint8Array;
     /** Serializes a public key into a PEM string. */
-    toPem(): Promise<string>;
+    toPem(): string;
     /** Returns a 256-bit unique identifier for this key. */
-    fingerprint(): Promise<Fingerprint>;
-    /** Verifies a digital signature of the message. */
-    verify(message: Uint8Array, signature: Signature): Promise<boolean>;
-    /**
-     * Generates a PEM-encoded X.509 certificate for this public key.
-     */
-    toCertPem(signer: SecretKey, params: Params): Promise<string>;
+    fingerprint(): Fingerprint;
     /**
-     * Generates a DER-encoded X.509 certificate for this public key.
+     * Verifies a digital signature of the message.
+     *
+     * @returns true if the signature is valid, false otherwise (never throws)
      */
-    toCertDer(signer: SecretKey, params: Params): Promise<Uint8Array>;
+    verify(message: Uint8Array, signature: Signature): boolean;
 }
 /**
  * SecretKey contains a composite ML-DSA-65 + Ed25519 private key for
@@ -113,12 +90,12 @@ export declare class SecretKey {
     /** Converts a secret key into a 64-byte array. */
     toBytes(): Uint8Array;
     /** Serializes a private key into a PEM string. */
-    toPem(): Promise<string>;
+    toPem(): string;
     /** Retrieves the public counterpart of the secret key. */
-    publicKey(): Promise<PublicKey>;
+    publicKey(): PublicKey;
     /** Returns a 256-bit unique identifier for this key. */
-    fingerprint(): Promise<Fingerprint>;
+    fingerprint(): Fingerprint;
     /** Creates a digital signature of the message. */
-    sign(message: Uint8Array): Promise<Signature>;
+    sign(message: Uint8Array): Signature;
 }
 //# sourceMappingURL=xdsa.d.ts.map

package/dist/xdsa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"xdsa.d.ts","sourceRoot":"","sources":["../src/xdsa.ts"],"names":[],"mappings":"AAMA,OAAa,EAKX,aAAa,IAAI,aAAa,EAC9B,aAAa,IAAI,aAAa,EAC9B,aAAa,IAAI,aAAa,EAC9B,eAAe,IAAI,eAAe,EACnC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,4CAA4C;AAC5C,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC,gBAAgB;gBACJ,KAAK,EAAE,eAAe;IAIlC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAK/D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,mDAAmD;WACtC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC,mDAAmD;IAC7C,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzE;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAanE;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAcxE;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAK3C,iDAAiD;WACpC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAKrC,wDAAwD;IAClD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC,kDAAkD;IAC5C,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAIpD"}
+{"version":3,"file":"xdsa.d.ts","sourceRoot":"","sources":["../src/xdsa.ts"],"names":[],"mappings":"AAMA,OAAO,EAKL,aAAa,IAAI,aAAa,EAC9B,aAAa,IAAI,aAAa,EAC9B,aAAa,IAAI,aAAa,EAC9B,eAAe,IAAI,eAAe,EACnC,MAAM,+BAA+B,CAAC;AAGvC,4CAA4C;AAC5C,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,2CAA2C;AAC3C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC,gBAAgB;gBACJ,KAAK,EAAE,eAAe;IAIlC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAK/D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,mDAAmD;WACtC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IACjD,KAAK,IAAI,MAAM;IAIf,wDAAwD;IACxD,WAAW,IAAI,WAAW;IAI1B;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO;CAG3D;AAED;;;;GAIG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAK3C,iDAAiD;WACpC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAClD,KAAK,IAAI,MAAM;IAIf,0DAA0D;IAC1D,SAAS,IAAI,SAAS;IAItB,wDAAwD;IACxD,WAAW,IAAI,WAAW;IAI1B,kDAAkD;IAClD,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS;CAGrC"}

package/dist/xhpke.d.ts

@@ -1,6 +1,4 @@
 import { XhpkeSecretKey as WasmSecretKey, XhpkePublicKey as WasmPublicKey, XhpkeFingerprint as WasmFingerprint, XhpkeSender as WasmSender, XhpkeReceiver as WasmReceiver } from './wasm/darkbio_crypto_wasm.js';
-import { PublicKey as XdsaPublicKey, SecretKey as XdsaSecretKey } from './xdsa.js';
-import { Params } from './x509.js';
 /** Size of the secret key seed in bytes (32). */
 export declare const SECRET_KEY_SIZE = 32;
 /** Size of the public key in bytes (1216). */
@@ -45,39 +43,21 @@ export declare class PublicKey {
     static fromBytes(bytes: Uint8Array): Promise<PublicKey>;
     /** Parses a PEM string into a public key. */
     static fromPem(pem: string): Promise<PublicKey>;
-    /**
-     * Parses a public key from a PEM-encoded X.509 certificate.
-     * Verifies the certificate signature against the provided xDSA signer.
-     */
-    static fromCertPem(pem: string, signer: XdsaPublicKey): Promise<{
-        key: PublicKey;
-        notBefore: bigint;
-        notAfter: bigint;
-    }>;
-    /**
-     * Parses a public key from a DER-encoded X.509 certificate.
-     * Verifies the certificate signature against the provided xDSA signer.
-     */
-    static fromCertDer(der: Uint8Array, signer: XdsaPublicKey): Promise<{
-        key: PublicKey;
-        notBefore: bigint;
-        notAfter: bigint;
-    }>;
     /** Converts a public key into a 1216-byte array. */
     toBytes(): Uint8Array;
     /** Serializes a public key into a PEM string. */
-    toPem(): Promise<string>;
+    toPem(): string;
     /** Returns a 256-bit unique identifier for this key (SHA256 of raw public key). */
-    fingerprint(): Promise<Fingerprint>;
+    fingerprint(): Fingerprint;
     /**
      * Creates an HPKE sender context for multi-message encryption to this
      * public key. Returns a stateful Sender and the 1120-byte encapsulated
      * key that must be transmitted to the recipient.
      */
-    newSender(domain: Uint8Array): Promise<{
+    newSender(domain: Uint8Array): {
         sender: Sender;
         encapKey: Uint8Array;
-    }>;
+    };
     /**
      * Seal (encrypt) a message to this public key.
      *
@@ -86,17 +66,7 @@ export declare class PublicKey {
      * @param domain - Application domain for context separation
      * @returns Sealed data (encapsulated key + ciphertext)
      */
-    seal(msgToSeal: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Promise<Uint8Array>;
-    /**
-     * Generates a PEM-encoded X.509 certificate for this public key.
-     * Note: HPKE certificates are always end-entity certificates.
-     */
-    toCertPem(signer: XdsaSecretKey, params: Params): Promise<string>;
-    /**
-     * Generates a DER-encoded X.509 certificate for this public key.
-     * Note: HPKE certificates are always end-entity certificates.
-     */
-    toCertDer(signer: XdsaSecretKey, params: Params): Promise<Uint8Array>;
+    seal(msgToSeal: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Uint8Array;
 }
 /**
  * SecretKey contains an X-Wing private key for hybrid post-quantum encryption.
@@ -116,15 +86,15 @@ export declare class SecretKey {
     /** Converts a private key into a 32-byte seed. */
     toBytes(): Uint8Array;
     /** Serializes a private key into a PEM string. */
-    toPem(): Promise<string>;
+    toPem(): string;
     /** Retrieves the public counterpart of the secret key. */
-    publicKey(): Promise<PublicKey>;
+    publicKey(): PublicKey;
     /** Returns a 256-bit unique identifier for this key (SHA256 of raw public key). */
-    fingerprint(): Promise<Fingerprint>;
+    fingerprint(): Fingerprint;
     /**
      * Creates an HPKE receiver context for multi-message decryption.
      */
-    newReceiver(encapKey: Uint8Array, domain: Uint8Array): Promise<Receiver>;
+    newReceiver(encapKey: Uint8Array, domain: Uint8Array): Receiver;
     /**
      * Open (decrypt) a sealed message with this secret key.
      *
@@ -133,7 +103,7 @@ export declare class SecretKey {
      * @param domain - The same application domain used during sealing
      * @returns The decrypted message
      */
-    open(sealed: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Promise<Uint8Array>;
+    open(sealed: Uint8Array, msgToAuth: Uint8Array, domain: Uint8Array): Uint8Array;
 }
 /**
  * Sender is a stateful HPKE encryption context for multi-message
@@ -144,7 +114,7 @@ export declare class Sender {
     /** @internal */
     constructor(inner: WasmSender);
     /** Encrypts a message using the next nonce in the sequence. */
-    seal(msgToSeal: Uint8Array, msgToAuth: Uint8Array): Promise<Uint8Array>;
+    seal(msgToSeal: Uint8Array, msgToAuth: Uint8Array): Uint8Array;
 }
 /**
  * Receiver is a stateful HPKE decryption context for multi-message
@@ -155,6 +125,6 @@ export declare class Receiver {
     /** @internal */
     constructor(inner: WasmReceiver);
     /** Decrypts a message using the next nonce in the sequence. */
-    open(msgToOpen: Uint8Array, msgToAuth: Uint8Array): Promise<Uint8Array>;
+    open(msgToOpen: Uint8Array, msgToAuth: Uint8Array): Uint8Array;
 }
 //# sourceMappingURL=xhpke.d.ts.map

package/dist/xhpke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"xhpke.d.ts","sourceRoot":"","sources":["../src/xhpke.ts"],"names":[],"mappings":"AAMA,OAAa,EAKX,cAAc,IAAI,aAAa,EAC/B,cAAc,IAAI,aAAa,EAC/B,gBAAgB,IAAI,eAAe,EACnC,WAAW,IAAI,UAAU,EACzB,aAAa,IAAI,YAAY,EAC9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,SAAS,IAAI,aAAa,EAC1B,SAAS,IAAI,aAAa,EAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,iDAAiD;AACjD,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,oDAAoD;AACpD,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC,gBAAgB;gBACJ,KAAK,EAAE,eAAe;IAIlC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAK/D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,mDAAmD;WACtC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE;;;OAGG;WACU,WAAW,CACtB,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IASnE,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IAC3C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC;;;;OAIG;IACG,SAAS,CACb,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,UAAU,CAAA;KAAE,CAAC;IAOpD;;;;;;;OAOG;IACG,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;IAKtB;;;OAGG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWvE;;;OAGG;IACG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAY5E;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAK3C,iDAAiD;WACpC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAC5C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,0DAA0D;IACpD,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAKrC,mFAAmF;IAC7E,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKzC;;OAEG;IACG,WAAW,CACf,QAAQ,EAAE,UAAU,EACpB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,QAAQ,CAAC;IAKpB;;;;;;;OAOG;IACG,IAAI,CACR,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC;CAIvB;AAED;;;GAGG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,gBAAgB;gBACJ,KAAK,EAAE,UAAU;IAI7B,+DAA+D;IACzD,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,UAAU,CAAC;CAIvB;AAED;;;GAGG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IAErC,gBAAgB;gBACJ,KAAK,EAAE,YAAY;IAI/B,+DAA+D;IACzD,IAAI,CACR,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,UAAU,CAAC;CAIvB"}
+{"version":3,"file":"xhpke.d.ts","sourceRoot":"","sources":["../src/xhpke.ts"],"names":[],"mappings":"AAMA,OAAO,EAKL,cAAc,IAAI,aAAa,EAC/B,cAAc,IAAI,aAAa,EAC/B,gBAAgB,IAAI,eAAe,EACnC,WAAW,IAAI,UAAU,EACzB,aAAa,IAAI,YAAY,EAC9B,MAAM,+BAA+B,CAAC;AAGvC,iDAAiD;AACjD,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,8CAA8C;AAC9C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,oDAAoD;AACpD,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;GAEG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC,gBAAgB;gBACJ,KAAK,EAAE,eAAe;IAIlC,kDAAkD;WACrC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAK/D,mDAAmD;IACnD,OAAO,IAAI,UAAU;CAGtB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,mDAAmD;WACtC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,6CAA6C;WAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,oDAAoD;IACpD,OAAO,IAAI,UAAU;IAIrB,iDAAiD;IACjD,KAAK,IAAI,MAAM;IAIf,mFAAmF;IACnF,WAAW,IAAI,WAAW;IAI1B;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,UAAU,CAAA;KAAE;IAMvE;;;;;;;OAOG;IACH,IAAI,CACF,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,UAAU;CAGd;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,gBAAgB;gBACJ,KAAK,EAAE,aAAa;IAIhC,yCAAyC;WAC5B,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAK3C,iDAAiD;WACpC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAK7D,8CAA8C;WACjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAKrD,kDAAkD;IAClD,OAAO,IAAI,UAAU;IAIrB,kDAAkD;IAClD,KAAK,IAAI,MAAM;IAIf,0DAA0D;IAC1D,SAAS,IAAI,SAAS;IAItB,mFAAmF;IACnF,WAAW,IAAI,WAAW;IAI1B;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ;IAI/D;;;;;;;OAOG;IACH,IAAI,CACF,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,UAAU,GACjB,UAAU;CAGd;AAED;;;GAGG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,gBAAgB;gBACJ,KAAK,EAAE,UAAU;IAI7B,+DAA+D;IAC/D,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU;CAG/D;AAED;;;GAGG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IAErC,gBAAgB;gBACJ,KAAK,EAAE,YAAY;IAI/B,+DAA+D;IAC/D,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU;CAG/D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkbio/crypto",
-  "version": "0.3.0",
+  "version": "0.17.1",
   "author": "Péter Szilágyi <peter@dark.bio>",
   "description": "Cryptography primitives and wrappers",
   "repository": {

package/dist/x509.d.ts

@@ -1,18 +0,0 @@
-/**
- * Parameters for X.509 certificate generation.
- */
-export interface Params {
-    /** The subject's common name (CN) in the certificate. */
-    subjectName: string;
-    /** The issuer's common name (CN) in the certificate. */
-    issuerName: string;
-    /** The certificate validity start time (Unix timestamp in seconds). */
-    notBefore: bigint;
-    /** The certificate validity end time (Unix timestamp in seconds). */
-    notAfter: bigint;
-    /** Whether this certificate is a CA certificate (ignored for xHPKE). */
-    isCa?: boolean;
-    /** Maximum number of intermediate CAs allowed below this one (only if isCa is true, ignored for xHPKE). */
-    pathLen?: number;
-}
-//# sourceMappingURL=x509.d.ts.map

package/dist/x509.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"x509.d.ts","sourceRoot":"","sources":["../src/x509.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,2GAA2G;IAC3G,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}