@de-otio/trellis 0.4.0

package/dist/lib/crypto/versioning.js

@@ -0,0 +1,148 @@
+"use strict";
+/**
+ * Parameter Versioning
+ *
+ * Manages versioning of cryptographic parameters to enable safe upgrades
+ * and maintain backward compatibility.
+ *
+ * Version Format: Semantic versioning (MAJOR.MINOR.PATCH)
+ * - Major: Breaking changes (algorithm change)
+ * - Minor: Parameter changes (iteration count increase)
+ * - Patch: Bug fixes
+ *
+ * @see doc/02-technical/architecture/cryptography/08-implementation-recommendations.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParameterVersionManager = exports.MINIMUM_VERSION = exports.CURRENT_VERSION = exports.SUPPORTED_VERSIONS = void 0;
+/**
+ * Supported parameter versions
+ */
+exports.SUPPORTED_VERSIONS = {
+    "1.0.0": {
+        version: "1.0.0",
+        deprecated: false,
+    },
+};
+/**
+ * Current default version
+ */
+exports.CURRENT_VERSION = "1.0.0";
+/**
+ * Minimum supported version (for backward compatibility)
+ */
+exports.MINIMUM_VERSION = "1.0.0";
+/**
+ * Parameter version manager
+ */
+class ParameterVersionManager {
+    /**
+     * Validate version format
+     *
+     * @param version - Version string to validate
+     * @returns true if valid semantic version format
+     */
+    static isValidVersion(version) {
+        // Semantic versioning: MAJOR.MINOR.PATCH
+        const versionRegex = /^\d+\.\d+\.\d+$/;
+        return versionRegex.test(version);
+    }
+    /**
+     * Compare two versions
+     *
+     * @param version1 - First version
+     * @param version2 - Second version
+     * @returns -1 if version1 < version2, 0 if equal, 1 if version1 > version2
+     */
+    static compareVersions(version1, version2) {
+        if (!this.isValidVersion(version1) || !this.isValidVersion(version2)) {
+            throw new Error("Invalid version format");
+        }
+        const v1Parts = version1.split(".").map(Number);
+        const v2Parts = version2.split(".").map(Number);
+        for (let i = 0; i < 3; i++) {
+            if (v1Parts[i] < v2Parts[i])
+                return -1;
+            if (v1Parts[i] > v2Parts[i])
+                return 1;
+        }
+        return 0;
+    }
+    /**
+     * Check if version is supported
+     *
+     * @param version - Version to check
+     * @returns true if version is supported
+     */
+    static isSupported(version) {
+        if (!this.isValidVersion(version)) {
+            return false;
+        }
+        // Check if version is in supported versions
+        if (exports.SUPPORTED_VERSIONS[version]) {
+            return !exports.SUPPORTED_VERSIONS[version].deprecated;
+        }
+        // Check if version is between minimum and current
+        const minCompare = this.compareVersions(version, exports.MINIMUM_VERSION);
+        const currentCompare = this.compareVersions(version, exports.CURRENT_VERSION);
+        return minCompare >= 0 && currentCompare <= 0;
+    }
+    /**
+     * Check if version is deprecated
+     *
+     * @param version - Version to check
+     * @returns true if version is deprecated
+     */
+    static isDeprecated(version) {
+        const versionInfo = exports.SUPPORTED_VERSIONS[version];
+        return versionInfo?.deprecated === true;
+    }
+    /**
+     * Get version information
+     *
+     * @param version - Version string
+     * @returns Version information or null if not found
+     */
+    static getVersionInfo(version) {
+        return exports.SUPPORTED_VERSIONS[version] || null;
+    }
+    /**
+     * Get current default version
+     *
+     * @returns Current version string
+     */
+    static getCurrentVersion() {
+        return exports.CURRENT_VERSION;
+    }
+    /**
+     * Get minimum supported version
+     *
+     * @returns Minimum version string
+     */
+    static getMinimumVersion() {
+        return exports.MINIMUM_VERSION;
+    }
+    /**
+     * Validate and normalize version
+     *
+     * If version is not provided, returns current version.
+     * If version is invalid, throws error.
+     *
+     * @param version - Optional version string
+     * @returns Validated version string
+     * @throws Error if version is invalid
+     */
+    static validateAndNormalize(version) {
+        if (!version) {
+            return exports.CURRENT_VERSION;
+        }
+        if (!this.isValidVersion(version)) {
+            throw new Error(`Invalid version format: ${version}. Expected MAJOR.MINOR.PATCH`);
+        }
+        if (!this.isSupported(version)) {
+            throw new Error(`Unsupported version: ${version}. Minimum: ${exports.MINIMUM_VERSION}, Current: ${exports.CURRENT_VERSION}`);
+        }
+        return version;
+    }
+}
+exports.ParameterVersionManager = ParameterVersionManager;
+//# sourceMappingURL=versioning.js.map

package/dist/lib/crypto/versioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versioning.js","sourceRoot":"","sources":["../../../src/lib/crypto/versioning.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AA4BH;;GAEG;AACU,QAAA,kBAAkB,GAAqC;IAClE,OAAO,EAAE;QACP,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,KAAK;KAClB;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACH,MAAa,uBAAuB;IAClC;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,OAAe;QACnC,yCAAyC;QACzC,MAAM,YAAY,GAAG,iBAAiB,CAAC;QACvC,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAAC,QAAgB,EAAE,QAAgB;QACvD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CAAC,OAAe;QAChC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,4CAA4C;QAC5C,IAAI,0BAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,0BAAkB,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;QACjD,CAAC;QAED,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,uBAAe,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,uBAAe,CAAC,CAAC;QAEtE,OAAO,UAAU,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,OAAe;QACjC,MAAM,WAAW,GAAG,0BAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,OAAe;QACnC,OAAO,0BAAkB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,iBAAiB;QACtB,OAAO,uBAAe,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,iBAAiB;QACtB,OAAO,uBAAe,CAAC;IACzB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,oBAAoB,CAAC,OAAgB;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,uBAAe,CAAC;QACzB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,2BAA2B,OAAO,8BAA8B,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,cAAc,uBAAe,cAAc,uBAAe,EAAE,CAC5F,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AA/HD,0DA+HC"}

package/dist/lib/crypto/voting/elgamal-encryption.d.ts

@@ -0,0 +1,156 @@
+/**
+ * ElGamal Encryption Implementation
+ *
+ * Implements ElGamal encryption scheme for Secure Voting System.
+ * Provides homomorphic encryption for vote aggregation.
+ *
+ * Part of: Cryptographic Design Comparison
+ * Status: Implementation (requires cryptographic library)
+ * Last Updated: January 2025
+ *
+ * Note: This is a design/stub implementation. Full implementation requires:
+ * - Big integer arithmetic library (e.g., bigint-crypto-utils)
+ * - Secure random number generation
+ * - Modular exponentiation
+ * - Prime number generation
+ */
+import type { EncryptionScheme, PublicKey, PrivateKey, EncryptedData } from "./encryption-scheme.js";
+/**
+ * ElGamal public key structure
+ */
+export interface ElGamalPublicKey {
+    /**
+     * Large prime p (e.g., 4096-bit)
+     */
+    p: bigint;
+    /**
+     * Generator g of multiplicative group modulo p
+     */
+    g: bigint;
+    /**
+     * Public key h = g^x mod p where x is private key
+     */
+    h: bigint;
+}
+/**
+ * ElGamal private key structure
+ */
+export interface ElGamalPrivateKey {
+    /**
+     * Large prime p (same as public key)
+     */
+    p: bigint;
+    /**
+     * Generator g (same as public key)
+     */
+    g: bigint;
+    /**
+     * Private key x
+     */
+    x: bigint;
+}
+/**
+ * ElGamal encrypted data structure
+ */
+export interface ElGamalEncryptedData {
+    /**
+     * First component: alpha = g^r mod p
+     */
+    alpha: bigint;
+    /**
+     * Second component: beta = h^r * g^m mod p
+     */
+    beta: bigint;
+}
+/**
+ * ElGamal encryption parameters
+ */
+export interface ElGamalParams {
+    /**
+     * Prime p size in bits (e.g., 4096)
+     */
+    primeSize?: number;
+    /**
+     * Safe prime p = 2q + 1 where q is prime
+     */
+    safePrime?: boolean;
+}
+/**
+ * ElGamal Encryption Class
+ *
+ * Implements ElGamal encryption scheme with homomorphic properties.
+ * Used for vote encryption in Secure Voting System.
+ */
+export declare class ElGamalEncryption implements EncryptionScheme {
+    /**
+     * Algorithm identifier
+     */
+    private readonly algorithmName;
+    /**
+     * Encrypt a message using ElGamal encryption
+     *
+     * ElGamal encryption:
+     * - Choose random r
+     * - Compute alpha = g^r mod p
+     * - Compute beta = h^r * g^m mod p
+     * - Return (alpha, beta)
+     *
+     * @param message - Message to encrypt (typically 0 or 1 for votes)
+     * @param publicKey - ElGamal public key
+     * @returns Encrypted data
+     */
+    encrypt(message: unknown, publicKey: PublicKey): Promise<EncryptedData>;
+    /**
+     * Decrypt encrypted data using ElGamal decryption
+     *
+     * ElGamal decryption:
+     * - Compute s = alpha^x mod p
+     * - Compute m = beta * s^(-1) mod p
+     * - Extract message from m
+     *
+     * @param encryptedData - Encrypted data to decrypt
+     * @param privateKey - ElGamal private key
+     * @returns Decrypted message
+     */
+    decrypt(encryptedData: EncryptedData, privateKey: PrivateKey): Promise<unknown>;
+    /**
+     * Check if ElGamal is quantum-resistant
+     *
+     * @returns false (ElGamal is vulnerable to quantum computers via Shor's algorithm)
+     */
+    isQuantumResistant(): boolean;
+    /**
+     * Get algorithm name
+     *
+     * @returns 'elgamal'
+     */
+    getAlgorithmName(): string;
+    /**
+     * Check if ElGamal supports homomorphic operations
+     *
+     * @returns true (ElGamal is homomorphic)
+     */
+    isHomomorphic(): boolean;
+    /**
+     * Perform homomorphic addition
+     *
+     * ElGamal homomorphic property:
+     * E(m1) * E(m2) = E(m1 + m2)
+     *
+     * @param encrypted1 - First encrypted value
+     * @param encrypted2 - Second encrypted value
+     * @returns Sum of encrypted values (encrypted)
+     */
+    homomorphicAdd(encrypted1: EncryptedData, encrypted2: EncryptedData): Promise<EncryptedData>;
+    /**
+     * Generate ElGamal key pair
+     *
+     * @param params - Key generation parameters
+     * @returns Public and private key pair
+     */
+    generateKeyPair(params?: ElGamalParams): Promise<{
+        publicKey: PublicKey;
+        privateKey: PrivateKey;
+    }>;
+}
+//# sourceMappingURL=elgamal-encryption.d.ts.map

package/dist/lib/crypto/voting/elgamal-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elgamal-encryption.d.ts","sourceRoot":"","sources":["../../../../src/lib/crypto/voting/elgamal-encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,aAAa,EACd,MAAM,wBAAwB,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,CAAC,EAAE,MAAM,CAAC;IAEV;;OAEG;IACH,CAAC,EAAE,MAAM,CAAC;IAEV;;OAEG;IACH,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,CAAC,EAAE,MAAM,CAAC;IAEV;;OAEG;IACH,CAAC,EAAE,MAAM,CAAC;IAEV;;OAEG;IACH,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,gBAAgB;IACxD;;OAEG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAa;IAE3C;;;;;;;;;;;;OAYG;IACG,OAAO,CACX,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,aAAa,CAAC;IA6BzB;;;;;;;;;;;OAWG;IACG,OAAO,CACX,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,OAAO,CAAC;IAsCnB;;;;OAIG;IACH,kBAAkB,IAAI,OAAO;IAI7B;;;;OAIG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;;;OAIG;IACH,aAAa,IAAI,OAAO;IAIxB;;;;;;;;;OASG;IACG,cAAc,CAClB,UAAU,EAAE,aAAa,EACzB,UAAU,EAAE,aAAa,GACxB,OAAO,CAAC,aAAa,CAAC;IAyBzB;;;;;OAKG;IACG,eAAe,CACnB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC;CAc7D"}

package/dist/lib/crypto/voting/elgamal-encryption.js

@@ -0,0 +1,172 @@
+"use strict";
+/**
+ * ElGamal Encryption Implementation
+ *
+ * Implements ElGamal encryption scheme for Secure Voting System.
+ * Provides homomorphic encryption for vote aggregation.
+ *
+ * Part of: Cryptographic Design Comparison
+ * Status: Implementation (requires cryptographic library)
+ * Last Updated: January 2025
+ *
+ * Note: This is a design/stub implementation. Full implementation requires:
+ * - Big integer arithmetic library (e.g., bigint-crypto-utils)
+ * - Secure random number generation
+ * - Modular exponentiation
+ * - Prime number generation
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ElGamalEncryption = void 0;
+/**
+ * ElGamal Encryption Class
+ *
+ * Implements ElGamal encryption scheme with homomorphic properties.
+ * Used for vote encryption in Secure Voting System.
+ */
+class ElGamalEncryption {
+    /**
+     * Algorithm identifier
+     */
+    algorithmName = "elgamal";
+    /**
+     * Encrypt a message using ElGamal encryption
+     *
+     * ElGamal encryption:
+     * - Choose random r
+     * - Compute alpha = g^r mod p
+     * - Compute beta = h^r * g^m mod p
+     * - Return (alpha, beta)
+     *
+     * @param message - Message to encrypt (typically 0 or 1 for votes)
+     * @param publicKey - ElGamal public key
+     * @returns Encrypted data
+     */
+    async encrypt(message, publicKey) {
+        // Validate public key
+        if (publicKey.algorithm !== this.algorithmName) {
+            throw new Error(`Invalid algorithm: expected ${this.algorithmName}, got ${publicKey.algorithm}`);
+        }
+        const elGamalKey = publicKey.keyMaterial;
+        if (!elGamalKey.p || !elGamalKey.g || !elGamalKey.h) {
+            throw new Error("Invalid ElGamal public key structure");
+        }
+        // Convert message to bigint (typically 0 or 1 for votes)
+        const m = typeof message === "number" ? BigInt(message) : BigInt(0);
+        // TODO: Implement actual ElGamal encryption
+        // This requires:
+        // 1. Generate random r (cryptographically secure)
+        // 2. Compute alpha = g^r mod p (modular exponentiation)
+        // 3. Compute beta = h^r * g^m mod p (modular exponentiation)
+        // 4. Return { alpha, beta }
+        // Stub implementation - replace with actual crypto library
+        throw new Error("ElGamal encryption not yet implemented. Requires cryptographic library (e.g., bigint-crypto-utils)");
+    }
+    /**
+     * Decrypt encrypted data using ElGamal decryption
+     *
+     * ElGamal decryption:
+     * - Compute s = alpha^x mod p
+     * - Compute m = beta * s^(-1) mod p
+     * - Extract message from m
+     *
+     * @param encryptedData - Encrypted data to decrypt
+     * @param privateKey - ElGamal private key
+     * @returns Decrypted message
+     */
+    async decrypt(encryptedData, privateKey) {
+        // Validate encrypted data
+        if (encryptedData.algorithm !== this.algorithmName) {
+            throw new Error(`Invalid algorithm: expected ${this.algorithmName}, got ${encryptedData.algorithm}`);
+        }
+        // Validate private key
+        if (privateKey.algorithm !== this.algorithmName) {
+            throw new Error(`Invalid algorithm: expected ${this.algorithmName}, got ${privateKey.algorithm}`);
+        }
+        const elGamalKey = privateKey.keyMaterial;
+        if (!elGamalKey.p || !elGamalKey.g || !elGamalKey.x) {
+            throw new Error("Invalid ElGamal private key structure");
+        }
+        const encrypted = encryptedData.data;
+        if (!encrypted.alpha || !encrypted.beta) {
+            throw new Error("Invalid ElGamal encrypted data structure");
+        }
+        // TODO: Implement actual ElGamal decryption
+        // This requires:
+        // 1. Compute s = alpha^x mod p (modular exponentiation)
+        // 2. Compute s_inv = modular inverse of s mod p
+        // 3. Compute m = beta * s_inv mod p
+        // 4. Extract message from m (typically discrete log to find 0 or 1)
+        // Stub implementation - replace with actual crypto library
+        throw new Error("ElGamal decryption not yet implemented. Requires cryptographic library (e.g., bigint-crypto-utils)");
+    }
+    /**
+     * Check if ElGamal is quantum-resistant
+     *
+     * @returns false (ElGamal is vulnerable to quantum computers via Shor's algorithm)
+     */
+    isQuantumResistant() {
+        return false;
+    }
+    /**
+     * Get algorithm name
+     *
+     * @returns 'elgamal'
+     */
+    getAlgorithmName() {
+        return this.algorithmName;
+    }
+    /**
+     * Check if ElGamal supports homomorphic operations
+     *
+     * @returns true (ElGamal is homomorphic)
+     */
+    isHomomorphic() {
+        return true;
+    }
+    /**
+     * Perform homomorphic addition
+     *
+     * ElGamal homomorphic property:
+     * E(m1) * E(m2) = E(m1 + m2)
+     *
+     * @param encrypted1 - First encrypted value
+     * @param encrypted2 - Second encrypted value
+     * @returns Sum of encrypted values (encrypted)
+     */
+    async homomorphicAdd(encrypted1, encrypted2) {
+        // Validate inputs
+        if (encrypted1.algorithm !== this.algorithmName ||
+            encrypted2.algorithm !== this.algorithmName) {
+            throw new Error("Both encrypted values must use ElGamal");
+        }
+        const e1 = encrypted1.data;
+        const e2 = encrypted2.data;
+        // TODO: Implement homomorphic addition
+        // This requires:
+        // 1. Validate that both encryptions use the same public key (same p, g)
+        // 2. Compute alpha = e1.alpha * e2.alpha mod p
+        // 3. Compute beta = e1.beta * e2.beta mod p
+        // 4. Return { alpha, beta }
+        // Stub implementation - replace with actual crypto library
+        throw new Error("ElGamal homomorphic addition not yet implemented. Requires cryptographic library");
+    }
+    /**
+     * Generate ElGamal key pair
+     *
+     * @param params - Key generation parameters
+     * @returns Public and private key pair
+     */
+    async generateKeyPair(params) {
+        // TODO: Implement key generation
+        // This requires:
+        // 1. Generate large prime p (safe prime: p = 2q + 1 where q is prime)
+        // 2. Find generator g of multiplicative group modulo p
+        // 3. Generate random private key x (1 < x < p-1)
+        // 4. Compute public key h = g^x mod p
+        // 5. Return { publicKey: { p, g, h }, privateKey: { p, g, x } }
+        // Stub implementation - replace with actual crypto library
+        throw new Error("ElGamal key generation not yet implemented. Requires cryptographic library (e.g., bigint-crypto-utils)");
+    }
+}
+exports.ElGamalEncryption = ElGamalEncryption;
+//# sourceMappingURL=elgamal-encryption.js.map

package/dist/lib/crypto/voting/elgamal-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elgamal-encryption.js","sourceRoot":"","sources":["../../../../src/lib/crypto/voting/elgamal-encryption.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA+EH;;;;;GAKG;AACH,MAAa,iBAAiB;IAC5B;;OAEG;IACc,aAAa,GAAG,SAAS,CAAC;IAE3C;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,SAAoB;QAEpB,sBAAsB;QACtB,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,aAAa,SAAS,SAAS,CAAC,SAAS,EAAE,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,CAAC,WAA+B,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,yDAAyD;QACzD,MAAM,CAAC,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEpE,4CAA4C;QAC5C,iBAAiB;QACjB,kDAAkD;QAClD,wDAAwD;QACxD,6DAA6D;QAC7D,4BAA4B;QAE5B,2DAA2D;QAC3D,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,OAAO,CACX,aAA4B,EAC5B,UAAsB;QAEtB,0BAA0B;QAC1B,IAAI,aAAa,CAAC,SAAS,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,aAAa,SAAS,aAAa,CAAC,SAAS,EAAE,CACpF,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,aAAa,SAAS,UAAU,CAAC,SAAS,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,CAAC,WAAgC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,CAAC,IAA4B,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,4CAA4C;QAC5C,iBAAiB;QACjB,wDAAwD;QACxD,gDAAgD;QAChD,oCAAoC;QACpC,oEAAoE;QAEpE,2DAA2D;QAC3D,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,cAAc,CAClB,UAAyB,EACzB,UAAyB;QAEzB,kBAAkB;QAClB,IACE,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,aAAa;YAC3C,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,aAAa,EAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,EAAE,GAAG,UAAU,CAAC,IAA4B,CAAC;QACnD,MAAM,EAAE,GAAG,UAAU,CAAC,IAA4B,CAAC;QAEnD,uCAAuC;QACvC,iBAAiB;QACjB,wEAAwE;QACxE,+CAA+C;QAC/C,4CAA4C;QAC5C,4BAA4B;QAE5B,2DAA2D;QAC3D,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CACnB,MAAsB;QAEtB,iCAAiC;QACjC,iBAAiB;QACjB,sEAAsE;QACtE,uDAAuD;QACvD,iDAAiD;QACjD,sCAAsC;QACtC,gEAAgE;QAEhE,2DAA2D;QAC3D,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;CACF;AA/LD,8CA+LC"}

package/dist/lib/crypto/voting/encryption-scheme.d.ts

@@ -0,0 +1,138 @@
+/**
+ * EncryptionScheme Interface
+ *
+ * Abstract interface for encryption schemes used in Secure Voting System.
+ * This interface enables algorithm swapping and post-quantum migration.
+ *
+ * Part of: Cryptographic Design Comparison
+ * Status: Interface Definition
+ * Last Updated: January 2025
+ */
+/**
+ * Public key for encryption schemes
+ * Format depends on the specific algorithm
+ */
+export interface PublicKey {
+    /**
+     * Algorithm identifier (e.g., 'elgamal', 'kyber', 'ntru')
+     */
+    algorithm: string;
+    /**
+     * Key material (format depends on algorithm)
+     * For ElGamal: { p: bigint, g: bigint, h: bigint }
+     * For post-quantum KEM: byte array
+     */
+    keyMaterial: unknown;
+    /**
+     * Key version for parameter versioning
+     */
+    version?: string;
+}
+/**
+ * Private key for encryption schemes
+ * Format depends on the specific algorithm
+ */
+export interface PrivateKey {
+    /**
+     * Algorithm identifier (e.g., 'elgamal', 'kyber', 'ntru')
+     */
+    algorithm: string;
+    /**
+     * Key material (format depends on algorithm)
+     * For ElGamal: { p: bigint, g: bigint, x: bigint }
+     * For post-quantum KEM: byte array
+     */
+    keyMaterial: unknown;
+    /**
+     * Key version for parameter versioning
+     */
+    version?: string;
+}
+/**
+ * Encrypted data structure
+ * Format depends on the specific algorithm
+ */
+export interface EncryptedData {
+    /**
+     * Algorithm identifier
+     */
+    algorithm: string;
+    /**
+     * Encrypted data (format depends on algorithm)
+     * For ElGamal: { alpha: bigint, beta: bigint }
+     * For post-quantum KEM: { ciphertext: Uint8Array, sharedSecret: Uint8Array }
+     */
+    data: unknown;
+    /**
+     * Encryption version for parameter versioning
+     */
+    version?: string;
+}
+/**
+ * Abstract interface for encryption schemes
+ *
+ * This interface enables:
+ * - Algorithm swapping (ElGamal → post-quantum)
+ * - Hybrid schemes (dual encryption)
+ * - Backward compatibility
+ * - Post-quantum migration
+ */
+export interface EncryptionScheme {
+    /**
+     * Encrypt data using public key
+     *
+     * @param data - Data to encrypt (format depends on algorithm)
+     * @param publicKey - Public key for encryption
+     * @returns Encrypted data
+     * @throws Error if encryption fails
+     */
+    encrypt(data: unknown, publicKey: PublicKey): Promise<EncryptedData>;
+    /**
+     * Decrypt data using private key
+     *
+     * @param encryptedData - Encrypted data to decrypt
+     * @param privateKey - Private key for decryption
+     * @returns Decrypted data
+     * @throws Error if decryption fails
+     */
+    decrypt(encryptedData: EncryptedData, privateKey: PrivateKey): Promise<unknown>;
+    /**
+     * Check if this encryption scheme is quantum-resistant
+     *
+     * @returns true if quantum-resistant, false otherwise
+     */
+    isQuantumResistant(): boolean;
+    /**
+     * Get the algorithm name
+     *
+     * @returns Algorithm identifier (e.g., 'elgamal', 'kyber', 'ntru')
+     */
+    getAlgorithmName(): string;
+    /**
+     * Check if this scheme supports homomorphic operations
+     *
+     * @returns true if homomorphic, false otherwise
+     */
+    isHomomorphic(): boolean;
+    /**
+     * Perform homomorphic addition (if supported)
+     *
+     * @param encrypted1 - First encrypted value
+     * @param encrypted2 - Second encrypted value
+     * @returns Sum of encrypted values (encrypted)
+     * @throws Error if homomorphic operations not supported
+     */
+    homomorphicAdd?(encrypted1: EncryptedData, encrypted2: EncryptedData): Promise<EncryptedData>;
+    /**
+     * Generate key pair
+     *
+     * @param params - Key generation parameters (algorithm-specific)
+     * @returns Public and private key pair
+     * @throws Error if key generation fails
+     */
+    generateKeyPair?(params?: unknown): Promise<{
+        publicKey: PublicKey;
+        privateKey: PrivateKey;
+    }>;
+}
+//# sourceMappingURL=encryption-scheme.d.ts.map

package/dist/lib/crypto/voting/encryption-scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-scheme.d.ts","sourceRoot":"","sources":["../../../../src/lib/crypto/voting/encryption-scheme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAC;IAErB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAC;IAErB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,IAAI,EAAE,OAAO,CAAC;IAEd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAErE;;;;;;;OAOG;IACH,OAAO,CACL,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;OAIG;IACH,kBAAkB,IAAI,OAAO,CAAC;IAE9B;;;;OAIG;IACH,gBAAgB,IAAI,MAAM,CAAC;IAE3B;;;;OAIG;IACH,aAAa,IAAI,OAAO,CAAC;IAEzB;;;;;;;OAOG;IACH,cAAc,CAAC,CACb,UAAU,EAAE,aAAa,EACzB,UAAU,EAAE,aAAa,GACxB,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B;;;;;;OAMG;IACH,eAAe,CAAC,CACd,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CAC9D"}

package/dist/lib/crypto/voting/encryption-scheme.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * EncryptionScheme Interface
+ *
+ * Abstract interface for encryption schemes used in Secure Voting System.
+ * This interface enables algorithm swapping and post-quantum migration.
+ *
+ * Part of: Cryptographic Design Comparison
+ * Status: Interface Definition
+ * Last Updated: January 2025
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=encryption-scheme.js.map

package/dist/lib/crypto/voting/encryption-scheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-scheme.js","sourceRoot":"","sources":["../../../../src/lib/crypto/voting/encryption-scheme.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG"}