@digitaldefiance/ecies-lib 1.1.24 → 1.1.26

package/src/secure-buffer.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecureBuffer = void 0;
+const secure_storage_error_type_1 = require("./enumerations/secure-storage-error-type");
+const disposed_1 = require("./errors/disposed");
+const secure_storage_1 = require("./errors/secure-storage");
+const guid_1 = require("./guid");
+const i18n_setup_1 = require("./i18n-setup");
+const xor_1 = require("./services/xor");
+const utils_1 = require("./utils");
+/**
+ * A secure string buffer is a buffer whose intent is to prevent the raw password from being stored in memory.
+ * The buffer is encrypted with a key derived from a GUID.
+ * The GUID is stored in the clear, but the buffer is encrypted with a key derived from the GUID.
+ * This allows the buffer to be decrypted, but only if the GUID and salt are known.
+ */
+class SecureBuffer {
+    _disposed = false;
+    _id;
+    _length;
+    _obfuscatedValue;
+    _key;
+    _obfuscatedChecksum;
+    _disposedAt;
+    constructor(data) {
+        this._id = guid_1.GuidV4.new();
+        // don't bother encrypting an empty buffer
+        if (data === undefined || data.length === 0) {
+            this._length = 0;
+            this._obfuscatedValue = new Uint8Array(0);
+            this._key = new Uint8Array(0);
+            this._obfuscatedChecksum = new Uint8Array(0);
+            return;
+        }
+        this._length = data.length;
+        this._key = this.idUint8Array;
+        this._obfuscatedValue = this.obfuscateData(data);
+        // Create a simple checksum without crypto for synchronous operation
+        this._obfuscatedChecksum = this.createSimpleObfuscatedChecksum(data);
+    }
+    dispose() {
+        const err = new disposed_1.DisposedError();
+        if (typeof Error.captureStackTrace === 'function') {
+            Error.captureStackTrace(err, this.dispose);
+        }
+        this._disposedAt = err.stack ?? 'stack unavailable';
+        this._obfuscatedValue.fill(0);
+        this._key.fill(0);
+        this._obfuscatedChecksum.fill(0);
+        this._disposed = true;
+    }
+    assertNotDisposed() {
+        if (this._disposed) {
+            const e = new disposed_1.DisposedError();
+            try {
+                e.disposedAt = this._disposedAt;
+            }
+            catch {
+                // ignore if Error object is sealed/frozen
+            }
+            throw e;
+        }
+    }
+    static fromString(data) {
+        return new SecureBuffer(new TextEncoder().encode(data));
+    }
+    get disposedAtStack() {
+        return this._disposedAt;
+    }
+    get id() {
+        this.assertNotDisposed();
+        return this._id.asFullHexGuid;
+    }
+    get idUint8Array() {
+        this.assertNotDisposed();
+        return this._id.asRawGuidUint8Array;
+    }
+    get originalLength() {
+        this.assertNotDisposed();
+        return this._length;
+    }
+    get value() {
+        this.assertNotDisposed();
+        if (this._length === 0) {
+            return new Uint8Array(0);
+        }
+        try {
+            const deobfuscatedResult = this.deobfuscateData(this._obfuscatedValue);
+            if (deobfuscatedResult.length !== this._length) {
+                throw new secure_storage_1.SecureStorageError(secure_storage_error_type_1.SecureStorageErrorType.DecryptedValueLengthMismatch, (0, i18n_setup_1.getEciesI18nEngine)());
+            }
+            if (!this.validateObfuscatedChecksum(deobfuscatedResult)) {
+                throw new secure_storage_1.SecureStorageError(secure_storage_error_type_1.SecureStorageErrorType.DecryptedValueChecksumMismatch, (0, i18n_setup_1.getEciesI18nEngine)());
+            }
+            return deobfuscatedResult;
+        }
+        catch (error) {
+            // If it's already a SecureStorageError, re-throw it
+            if (error instanceof secure_storage_1.SecureStorageError) {
+                throw error;
+            }
+            // Convert any other error (including AES-GCM authentication errors) to SecureStorageError
+            throw new secure_storage_1.SecureStorageError(secure_storage_error_type_1.SecureStorageErrorType.DecryptedValueChecksumMismatch, (0, i18n_setup_1.getEciesI18nEngine)());
+        }
+    }
+    get valueAsString() {
+        this.assertNotDisposed();
+        return new TextDecoder().decode(this.value);
+    }
+    get valueAsHexString() {
+        this.assertNotDisposed();
+        return (0, utils_1.uint8ArrayToHex)(this.value);
+    }
+    get valueAsBase64String() {
+        this.assertNotDisposed();
+        return btoa(String.fromCharCode(...this.value));
+    }
+    get checksum() {
+        this.assertNotDisposed();
+        const deobfuscatedChecksum = new TextDecoder().decode(this.deobfuscateData(this._obfuscatedChecksum));
+        return deobfuscatedChecksum;
+    }
+    generateSimpleChecksum(data) {
+        const dataBytes = typeof data === 'string' ? new TextEncoder().encode(data) : data;
+        let hash = 0;
+        for (let i = 0; i < dataBytes.length; i++) {
+            hash = ((hash << 5) - hash + dataBytes[i]) & 0xffffffff;
+        }
+        return hash.toString(16);
+    }
+    createSimpleObfuscatedChecksum(data) {
+        const checksum = this.generateSimpleChecksum(data);
+        const result = this.obfuscateData(new TextEncoder().encode(checksum));
+        return result;
+    }
+    validateSimpleChecksum(data, checksum) {
+        const generatedChecksum = this.generateSimpleChecksum(data);
+        const a = new TextEncoder().encode(generatedChecksum);
+        const b = new TextEncoder().encode(checksum);
+        return this.timingSafeEqual(a, b);
+    }
+    timingSafeEqual(a, b) {
+        if (a.length !== b.length) {
+            return false;
+        }
+        let result = 0;
+        for (let i = 0; i < a.length; i++) {
+            result |= a[i] ^ b[i];
+        }
+        return result === 0;
+    }
+    validateObfuscatedChecksum(data) {
+        const deobfuscatedChecksum = new TextDecoder().decode(this.deobfuscateData(this._obfuscatedChecksum));
+        return this.validateSimpleChecksum(data, deobfuscatedChecksum);
+    }
+    obfuscateData(data) {
+        return xor_1.XorService.xor(data, this._key);
+    }
+    deobfuscateData(data) {
+        return xor_1.XorService.xor(data, this._key);
+    }
+    get length() {
+        this.assertNotDisposed();
+        return this._length;
+    }
+}
+exports.SecureBuffer = SecureBuffer;
+//# sourceMappingURL=secure-buffer.js.map

package/src/secure-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-buffer.js","sourceRoot":"","sources":["../../../../packages/digitaldefiance-ecies-lib/src/secure-buffer.ts"],"names":[],"mappings":";;;AAAA,wFAAkF;AAClF,gDAAkD;AAClD,4DAA6D;AAC7D,iCAAgC;AAChC,6CAAkD;AAClD,wCAA4C;AAE5C,mCAA0C;AAE1C;;;;;GAKG;AACH,MAAa,YAAY;IACf,SAAS,GAAY,KAAK,CAAC;IAClB,GAAG,CAAS;IACZ,OAAO,CAAS;IAChB,gBAAgB,CAAa;IAC7B,IAAI,CAAa;IACjB,mBAAmB,CAAa;IACzC,WAAW,CAAU;IAC7B,YAAY,IAAiB;QAC3B,IAAI,CAAC,GAAG,GAAG,aAAM,CAAC,GAAG,EAAE,CAAC;QACxB,0CAA0C;QAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,gBAAgB,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,mBAAmB,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACjD,oEAAoE;QACpE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IACM,OAAO;QACZ,MAAM,GAAG,GAAG,IAAI,wBAAa,EAAE,CAAC;QAChC,IAAI,OAAQ,KAAa,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;YAC1D,KAAa,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,IAAI,mBAAmB,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IACO,iBAAiB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,wBAAa,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACF,CAAS,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACM,MAAM,CAAC,UAAU,CAAC,IAAY;QACnC,OAAO,IAAI,YAAY,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IACD,IAAW,EAAE;QACX,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;IAChC,CAAC;IACD,IAAW,YAAY;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACtC,CAAC;IACD,IAAW,cAAc;QACvB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACD,IAAW,KAAK;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACvE,IAAI,kBAAkB,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,IAAI,mCAAkB,CAC1B,kDAAsB,CAAC,4BAA4B,EACnD,IAAA,+BAAkB,GAAS,CAC5B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,mCAAkB,CAC1B,kDAAsB,CAAC,8BAA8B,EACrD,IAAA,+BAAkB,GAAS,CAC5B,CAAC;YACJ,CAAC;YACD,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oDAAoD;YACpD,IAAI,KAAK,YAAY,mCAAkB,EAAE,CAAC;gBACxC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0FAA0F;YAC1F,MAAM,IAAI,mCAAkB,CAC1B,kDAAsB,CAAC,8BAA8B,EACrD,IAAA,+BAAkB,GAAS,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAW,aAAa;QACtB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,IAAW,gBAAgB;QACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAA,uBAAe,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,IAAW,mBAAmB;QAC5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAW,QAAQ;QACjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;QACF,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACO,sBAAsB,CAAC,IAAyB;QACtD,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IACO,8BAA8B,CACpC,IAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,sBAAsB,CAC5B,IAAyB,EACzB,QAAgB;QAEhB,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,eAAe,CAAC,CAAa,EAAE,CAAa;QAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,MAAM,KAAK,CAAC,CAAC;IACtB,CAAC;IACO,0BAA0B,CAAC,IAAyB;QAC1D,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACjE,CAAC;IACO,aAAa,CAAC,IAAgB;QACpC,OAAO,gBAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACO,eAAe,CAAC,IAAgB;QACtC,OAAO,gBAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,IAAW,MAAM;QACf,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAvKD,oCAuKC"}

package/src/secure-string.d.ts

@@ -0,0 +1,39 @@
+import { FullHexGuid, RawGuidUint8Array } from './types';
+/**
+ * A secure string buffer is a buffer whose intent is to prevent the raw password from being stored in memory.
+ */
+export declare class SecureString {
+    private _disposed;
+    private readonly _isNull;
+    private readonly _id;
+    private readonly _length;
+    private readonly _obfuscatedValue;
+    private readonly _key;
+    private readonly _obfuscatedChecksum;
+    private _disposedAt?;
+    constructor(data?: string | Uint8Array | null);
+    private assertNotDisposed;
+    dispose(): void;
+    get disposedAtStack(): string | undefined;
+    get id(): FullHexGuid;
+    get idUint8Array(): RawGuidUint8Array;
+    get originalLength(): number;
+    get valueAsUint8Array(): Uint8Array;
+    get value(): string | null;
+    get notNullValue(): string;
+    get valueAsHexString(): string;
+    get valueAsBase64String(): string;
+    get hasValue(): boolean;
+    get checksum(): string;
+    get length(): number;
+    private generateChecksum;
+    private createSimpleChecksum;
+    private createSimpleObfuscatedChecksum;
+    private createObfuscatedChecksum;
+    private validateChecksum;
+    private timingSafeEqual;
+    private validateObfuscatedChecksum;
+    private obfuscateData;
+    private deobfuscateData;
+}
+//# sourceMappingURL=secure-string.d.ts.map

package/src/secure-string.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-string.d.ts","sourceRoot":"","sources":["../../../../packages/digitaldefiance-ecies-lib/src/secure-string.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGzD;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAa;IAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAa;IACjD,OAAO,CAAC,WAAW,CAAC,CAAS;gBACjB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAuB7C,OAAO,CAAC,iBAAiB;IAWlB,OAAO,IAAI,IAAI;IAWtB,IAAW,eAAe,IAAI,MAAM,GAAG,SAAS,CAE/C;IACD,IAAW,EAAE,IAAI,WAAW,CAG3B;IACD,IAAW,YAAY,IAAI,iBAAiB,CAG3C;IACD,IAAW,cAAc,IAAI,MAAM,CAGlC;IACD,IAAW,iBAAiB,IAAI,UAAU,CAyCzC;IACD,IAAW,KAAK,IAAI,MAAM,GAAG,IAAI,CAMhC;IACD,IAAW,YAAY,IAAI,MAAM,CAShC;IACD,IAAW,gBAAgB,IAAI,MAAM,CAGpC;IACD,IAAW,mBAAmB,IAAI,MAAM,CAGvC;IACD,IAAW,QAAQ,IAAI,OAAO,CAG7B;IACD,IAAW,QAAQ,IAAI,MAAM,CAM5B;IACD,IAAW,MAAM,IAAI,MAAM,CAG1B;YACa,gBAAgB;IAS9B,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,8BAA8B;YASxB,wBAAwB;YAOxB,gBAAgB;IAQ9B,OAAO,CAAC,eAAe;YAUT,0BAA0B;IAQxC,OAAO,CAAC,aAAa;IAGrB,OAAO,CAAC,eAAe;CAGxB"}

package/src/secure-string.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecureString = void 0;
+const secure_storage_error_type_1 = require("./enumerations/secure-storage-error-type");
+const disposed_1 = require("./errors/disposed");
+const secure_storage_1 = require("./errors/secure-storage");
+const guid_1 = require("./guid");
+const i18n_setup_1 = require("./i18n-setup");
+const xor_1 = require("./services/xor");
+const utils_1 = require("./utils");
+/**
+ * A secure string buffer is a buffer whose intent is to prevent the raw password from being stored in memory.
+ */
+class SecureString {
+    _disposed = false;
+    _isNull;
+    _id;
+    _length;
+    _obfuscatedValue;
+    _key;
+    _obfuscatedChecksum;
+    _disposedAt;
+    constructor(data) {
+        this._id = guid_1.GuidV4.new();
+        // only treat null/undefined as null, empty strings/arrays are valid empty data
+        if (data === null || data === undefined) {
+            this._isNull = true;
+            this._length = 0;
+            this._obfuscatedValue = new Uint8Array(0);
+            this._key = new Uint8Array(0);
+            this._obfuscatedChecksum = new Uint8Array(0);
+            return;
+        }
+        this._isNull = false;
+        this._key = this.idUint8Array;
+        const dataAsUint8Array = typeof data === 'string'
+            ? new TextEncoder().encode(data)
+            : data;
+        // Store the byte length, not the character length
+        this._length = dataAsUint8Array.length;
+        this._obfuscatedValue = this.obfuscateData(dataAsUint8Array);
+        this._obfuscatedChecksum =
+            this.createSimpleObfuscatedChecksum(dataAsUint8Array);
+    }
+    assertNotDisposed() {
+        if (this._disposed) {
+            const e = new disposed_1.DisposedError();
+            try {
+                e.disposedAt = this._disposedAt;
+            }
+            catch {
+                // ignore if Error object is sealed/frozen
+            }
+            throw e;
+        }
+    }
+    dispose() {
+        const err = new disposed_1.DisposedError();
+        if (typeof Error.captureStackTrace === 'function') {
+            Error.captureStackTrace(err, this.dispose);
+        }
+        this._disposedAt = err.stack ?? 'stack unavailable';
+        this._obfuscatedValue.fill(0);
+        this._key.fill(0);
+        this._obfuscatedChecksum.fill(0);
+        this._disposed = true;
+    }
+    get disposedAtStack() {
+        return this._disposedAt;
+    }
+    get id() {
+        this.assertNotDisposed();
+        return this._id.asFullHexGuid;
+    }
+    get idUint8Array() {
+        this.assertNotDisposed();
+        return this._id.asRawGuidUint8Array;
+    }
+    get originalLength() {
+        this.assertNotDisposed();
+        return this._length;
+    }
+    get valueAsUint8Array() {
+        this.assertNotDisposed();
+        if (this._isNull) {
+            return new Uint8Array(0);
+        }
+        try {
+            const deobfuscatedResult = this.deobfuscateData(this._obfuscatedValue);
+            if (deobfuscatedResult.length !== this._length) {
+                throw new secure_storage_1.SecureStorageError(secure_storage_error_type_1.SecureStorageErrorType.DecryptedValueLengthMismatch, (0, i18n_setup_1.getEciesI18nEngine)());
+            }
+            // Validate checksum
+            const expectedChecksum = this.createSimpleChecksum(deobfuscatedResult);
+            const storedChecksum = new TextDecoder().decode(this.deobfuscateData(this._obfuscatedChecksum));
+            const expectedBytes = new TextEncoder().encode(expectedChecksum);
+            const storedBytes = new TextEncoder().encode(storedChecksum);
+            if (!this.timingSafeEqual(expectedBytes, storedBytes)) {
+                throw new secure_storage_1.SecureStorageError(secure_storage_error_type_1.SecureStorageErrorType.DecryptedValueChecksumMismatch, (0, i18n_setup_1.getEciesI18nEngine)());
+            }
+            return deobfuscatedResult;
+        }
+        catch (error) {
+            // If it's already a SecureStorageError, re-throw it
+            if (error instanceof secure_storage_1.SecureStorageError) {
+                throw error;
+            }
+            // Convert any other error to SecureStorageError
+            throw new secure_storage_1.SecureStorageError(secure_storage_error_type_1.SecureStorageErrorType.DecryptedValueChecksumMismatch, (0, i18n_setup_1.getEciesI18nEngine)());
+        }
+    }
+    get value() {
+        this.assertNotDisposed();
+        if (this._isNull) {
+            return null;
+        }
+        return new TextDecoder().decode(this.valueAsUint8Array);
+    }
+    get notNullValue() {
+        this.assertNotDisposed();
+        if (this._isNull) {
+            throw new secure_storage_1.SecureStorageError(secure_storage_error_type_1.SecureStorageErrorType.ValueIsNull, (0, i18n_setup_1.getEciesI18nEngine)());
+        }
+        return new TextDecoder().decode(this.valueAsUint8Array);
+    }
+    get valueAsHexString() {
+        this.assertNotDisposed();
+        return (0, utils_1.uint8ArrayToHex)(this.valueAsUint8Array);
+    }
+    get valueAsBase64String() {
+        this.assertNotDisposed();
+        return btoa(String.fromCharCode(...this.valueAsUint8Array));
+    }
+    get hasValue() {
+        this.assertNotDisposed();
+        return !this._isNull && this._length > 0;
+    }
+    get checksum() {
+        this.assertNotDisposed();
+        const deobfuscatedChecksum = new TextDecoder().decode(this.deobfuscateData(this._obfuscatedChecksum));
+        return deobfuscatedChecksum;
+    }
+    get length() {
+        this.assertNotDisposed();
+        return this._length;
+    }
+    async generateChecksum(data) {
+        const dataBytes = typeof data === 'string' ? new TextEncoder().encode(data) : data;
+        const hashArray = await crypto.subtle.digest('SHA-256', new Uint8Array(dataBytes));
+        return (0, utils_1.uint8ArrayToHex)(new Uint8Array(hashArray));
+    }
+    createSimpleChecksum(data) {
+        let hash = 0;
+        for (let i = 0; i < data.length; i++) {
+            hash = ((hash << 5) - hash + data[i]) & 0xffffffff;
+        }
+        return hash.toString(16);
+    }
+    createSimpleObfuscatedChecksum(data) {
+        const dataBytes = typeof data === 'string' ? new TextEncoder().encode(data) : data;
+        const checksum = this.createSimpleChecksum(dataBytes);
+        return this.obfuscateData(new TextEncoder().encode(checksum));
+    }
+    async createObfuscatedChecksum(data) {
+        const checksum = await this.generateChecksum(data);
+        const result = this.obfuscateData(new TextEncoder().encode(checksum));
+        return result;
+    }
+    async validateChecksum(data, checksum) {
+        const generatedChecksum = await this.generateChecksum(data);
+        return generatedChecksum === checksum;
+    }
+    timingSafeEqual(a, b) {
+        if (a.length !== b.length) {
+            return false;
+        }
+        let result = 0;
+        for (let i = 0; i < a.length; i++) {
+            result |= a[i] ^ b[i];
+        }
+        return result === 0;
+    }
+    async validateObfuscatedChecksum(data) {
+        const deobfuscatedChecksum = new TextDecoder().decode(this.deobfuscateData(this._obfuscatedChecksum));
+        return this.validateChecksum(data, deobfuscatedChecksum);
+    }
+    obfuscateData(data) {
+        return xor_1.XorService.xor(data, this._key);
+    }
+    deobfuscateData(data) {
+        return xor_1.XorService.xor(data, this._key);
+    }
+}
+exports.SecureString = SecureString;
+//# sourceMappingURL=secure-string.js.map

package/src/secure-string.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-string.js","sourceRoot":"","sources":["../../../../packages/digitaldefiance-ecies-lib/src/secure-string.ts"],"names":[],"mappings":";;;AAAA,wFAAkF;AAClF,gDAAkD;AAClD,4DAA6D;AAC7D,iCAAgC;AAChC,6CAAkD;AAClD,wCAA4C;AAE5C,mCAA0C;AAE1C;;GAEG;AACH,MAAa,YAAY;IACf,SAAS,GAAY,KAAK,CAAC;IAClB,OAAO,CAAU;IACjB,GAAG,CAAS;IACZ,OAAO,CAAS;IAChB,gBAAgB,CAAa;IAC7B,IAAI,CAAa;IACjB,mBAAmB,CAAa;IACzC,WAAW,CAAU;IAC7B,YAAY,IAAiC;QAC3C,IAAI,CAAC,GAAG,GAAG,aAAM,CAAC,GAAG,EAAE,CAAC;QACxB,+EAA+E;QAC/E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,gBAAgB,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,mBAAmB,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9B,MAAM,gBAAgB,GACpB,OAAO,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YAChC,CAAC,CAAE,IAAmB,CAAC;QAC3B,kDAAkD;QAClD,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC7D,IAAI,CAAC,mBAAmB;YACtB,IAAI,CAAC,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IACO,iBAAiB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,wBAAa,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACF,CAAS,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACM,OAAO;QACZ,MAAM,GAAG,GAAG,IAAI,wBAAa,EAAE,CAAC;QAChC,IAAI,OAAQ,KAAa,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;YAC1D,KAAa,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,IAAI,mBAAmB,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IACD,IAAW,EAAE;QACX,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;IAChC,CAAC;IACD,IAAW,YAAY;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACtC,CAAC;IACD,IAAW,cAAc;QACvB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACD,IAAW,iBAAiB;QAC1B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACvE,IAAI,kBAAkB,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,IAAI,mCAAkB,CAC1B,kDAAsB,CAAC,4BAA4B,EACnD,IAAA,+BAAkB,GAAS,CAC5B,CAAC;YACJ,CAAC;YAED,oBAAoB;YACpB,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;YACvE,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;YAEF,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACjE,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,mCAAkB,CAC1B,kDAAsB,CAAC,8BAA8B,EACrD,IAAA,+BAAkB,GAAS,CAC5B,CAAC;YACJ,CAAC;YAED,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oDAAoD;YACpD,IAAI,KAAK,YAAY,mCAAkB,EAAE,CAAC;gBACxC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,gDAAgD;YAChD,MAAM,IAAI,mCAAkB,CAC1B,kDAAsB,CAAC,8BAA8B,EACrD,IAAA,+BAAkB,GAAS,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAW,KAAK;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAW,YAAY;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,mCAAkB,CAC1B,kDAAsB,CAAC,WAAW,EAClC,IAAA,+BAAkB,GAAS,CAC5B,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAW,gBAAgB;QACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAA,uBAAe,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC;IACD,IAAW,mBAAmB;QAC5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAW,QAAQ;QACjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,IAAW,QAAQ;QACjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;QACF,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,IAAW,MAAM;QACf,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACO,KAAK,CAAC,gBAAgB,CAAC,IAAyB;QACtD,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC1C,SAAS,EACT,IAAI,UAAU,CAAC,SAAS,CAAC,CAC1B,CAAC;QACF,OAAO,IAAA,uBAAe,EAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,CAAC;IACO,oBAAoB,CAAC,IAAgB;QAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAEO,8BAA8B,CACpC,IAAyB;QAEzB,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,IAAyB;QAEzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,KAAK,CAAC,gBAAgB,CAC5B,IAAyB,EACzB,QAAgB;QAEhB,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,iBAAiB,KAAK,QAAQ,CAAC;IACxC,CAAC;IAEO,eAAe,CAAC,CAAa,EAAE,CAAa;QAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,MAAM,KAAK,CAAC,CAAC;IACtB,CAAC;IACO,KAAK,CAAC,0BAA0B,CACtC,IAAyB;QAEzB,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC3D,CAAC;IACO,aAAa,CAAC,IAAgB;QACpC,OAAO,gBAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACO,eAAe,CAAC,IAAgB;QACtC,OAAO,gBAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;CACF;AAxND,oCAwNC"}

package/src/services/aes-gcm.d.ts

@@ -0,0 +1,57 @@
+import { IECIESConstants } from '../interfaces/ecies-consts';
+export declare abstract class AESGCMService {
+    static readonly ALGORITHM_NAME = "AES-GCM";
+    /**
+     * Encrypt data using AES-GCM
+     * @param data Data to encrypt
+     * @param key Key to use for encryption (must be 16, 24 or 32 bytes for AES)
+     * @returns Encrypted data
+     */
+    static encrypt(data: Uint8Array, key: Uint8Array, authTag?: boolean, eciesParams?: IECIESConstants): Promise<{
+        encrypted: Uint8Array;
+        iv: Uint8Array;
+        tag?: Uint8Array;
+    }>;
+    /**
+     * Combine encrypted data and auth tag into a single Uint8Array
+     * @param encryptedData The encrypted data
+     * @param authTag The authentication tag
+     * @returns The combined Uint8Array
+     */
+    static combineEncryptedDataAndTag(encryptedData: Uint8Array, authTag: Uint8Array): Uint8Array;
+    /**
+     * Combine IV and encrypted data (with optional auth tag) into a single Uint8Array
+     * @param iv The initialization vector
+     * @param encryptedDataWithTag The encrypted data with auth tag already appended (if applicable)
+     * @returns The combined Uint8Array
+     */
+    static combineIvAndEncryptedData(iv: Uint8Array, encryptedDataWithTag: Uint8Array): Uint8Array;
+    /**
+     * Combine IV, encrypted data and auth tag into a single Uint8Array
+     * @param iv The initialization vector
+     * @param encryptedData The encrypted data
+     * @param authTag The authentication tag
+     * @returns The combined Uint8Array
+     */
+    static combineIvTagAndEncryptedData(iv: Uint8Array, encryptedData: Uint8Array, authTag: Uint8Array): Uint8Array;
+    /**
+     * Split combined encrypted data back into its components
+     * @param combinedData The combined data containing IV, encrypted data, and optionally auth tag
+     * @param hasAuthTag Whether the combined data includes an authentication tag
+     * @returns Object containing the split components
+     */
+    static splitEncryptedData(combinedData: Uint8Array, hasAuthTag?: boolean, eciesParams?: IECIESConstants): {
+        iv: Uint8Array;
+        encryptedDataWithTag: Uint8Array;
+    };
+    /**
+     * Decrypt data using AES-GCM
+     * @param iv The initialization vector
+     * @param encryptedData Data to decrypt (with auth tag appended if authTag is true)
+     * @param key Key to use for decryption (must be 16, 24 or 32 bytes for AES)
+     * @param authTag Whether the encrypted data includes an authentication tag
+     * @returns Decrypted data
+     */
+    static decrypt(iv: Uint8Array, encryptedData: Uint8Array, key: Uint8Array, authTag?: boolean, eciesParams?: IECIESConstants): Promise<Uint8Array>;
+}
+//# sourceMappingURL=aes-gcm.d.ts.map

package/src/services/aes-gcm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes-gcm.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/aes-gcm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAK7D,8BAAsB,aAAa;IACjC,gBAAuB,cAAc,aAAa;IAClD;;;;;OAKG;WACiB,OAAO,CACzB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,OAAO,GAAE,OAAe,EACxB,WAAW,GAAE,eAAiC,GAC7C,OAAO,CAAC;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,GAAG,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC;IAgCvE;;;;;OAKG;WACW,0BAA0B,CACtC,aAAa,EAAE,UAAU,EACzB,OAAO,EAAE,UAAU,GAClB,UAAU;IAOb;;;;;OAKG;WACW,yBAAyB,CACrC,EAAE,EAAE,UAAU,EACd,oBAAoB,EAAE,UAAU,GAC/B,UAAU;IAOb;;;;;;OAMG;WACW,4BAA4B,CACxC,EAAE,EAAE,UAAU,EACd,aAAa,EAAE,UAAU,EACzB,OAAO,EAAE,UAAU,GAClB,UAAU;IAQb;;;;;OAKG;WACW,kBAAkB,CAC9B,YAAY,EAAE,UAAU,EACxB,UAAU,GAAE,OAAc,EAC1B,WAAW,GAAE,eAAiC,GAC7C;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,oBAAoB,EAAE,UAAU,CAAA;KAAE;IAkBvD;;;;;;;OAOG;WACiB,OAAO,CACzB,EAAE,EAAE,UAAU,EACd,aAAa,EAAE,UAAU,EACzB,GAAG,EAAE,UAAU,EACf,OAAO,GAAE,OAAe,EACxB,WAAW,GAAE,eAAiC,GAC7C,OAAO,CAAC,UAAU,CAAC;CAiCvB"}

package/src/services/aes-gcm.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AESGCMService = void 0;
+const constants_1 = require("../constants");
+const i18n_setup_1 = require("../i18n-setup");
+const enumerations_1 = require("../enumerations");
+class AESGCMService {
+    static ALGORITHM_NAME = 'AES-GCM';
+    /**
+     * Encrypt data using AES-GCM
+     * @param data Data to encrypt
+     * @param key Key to use for encryption (must be 16, 24 or 32 bytes for AES)
+     * @returns Encrypted data
+     */
+    static async encrypt(data, key, authTag = false, eciesParams = constants_1.Constants.ECIES) {
+        const cryptoKey = await crypto.subtle.importKey('raw', new Uint8Array(key), { name: AESGCMService.ALGORITHM_NAME }, false, ['encrypt']);
+        const eciesConsts = eciesParams;
+        const iv = crypto.getRandomValues(new Uint8Array(eciesConsts.IV_SIZE));
+        const encryptedResult = await crypto.subtle.encrypt({
+            name: AESGCMService.ALGORITHM_NAME,
+            iv,
+            ...(authTag && { tagLength: eciesConsts.AUTH_TAG_SIZE * 8 }),
+        }, cryptoKey, new Uint8Array(data));
+        const encryptedArray = new Uint8Array(encryptedResult);
+        if (!authTag) {
+            return { encrypted: encryptedArray, iv };
+        }
+        const authTagLengthBytes = eciesConsts.AUTH_TAG_SIZE;
+        const encryptedBytes = encryptedArray.slice(0, -authTagLengthBytes); // Remove auth tag
+        const authTagBytes = encryptedArray.slice(-authTagLengthBytes); // Last 16 bytes are auth tag
+        return { encrypted: encryptedBytes, iv, tag: authTagBytes };
+    }
+    /**
+     * Combine encrypted data and auth tag into a single Uint8Array
+     * @param encryptedData The encrypted data
+     * @param authTag The authentication tag
+     * @returns The combined Uint8Array
+     */
+    static combineEncryptedDataAndTag(encryptedData, authTag) {
+        const combined = new Uint8Array(encryptedData.length + authTag.length);
+        combined.set(encryptedData);
+        combined.set(authTag, encryptedData.length);
+        return combined;
+    }
+    /**
+     * Combine IV and encrypted data (with optional auth tag) into a single Uint8Array
+     * @param iv The initialization vector
+     * @param encryptedDataWithTag The encrypted data with auth tag already appended (if applicable)
+     * @returns The combined Uint8Array
+     */
+    static combineIvAndEncryptedData(iv, encryptedDataWithTag) {
+        const combined = new Uint8Array(iv.length + encryptedDataWithTag.length);
+        combined.set(iv);
+        combined.set(encryptedDataWithTag, iv.length);
+        return combined;
+    }
+    /**
+     * Combine IV, encrypted data and auth tag into a single Uint8Array
+     * @param iv The initialization vector
+     * @param encryptedData The encrypted data
+     * @param authTag The authentication tag
+     * @returns The combined Uint8Array
+     */
+    static combineIvTagAndEncryptedData(iv, encryptedData, authTag) {
+        const encryptedWithTag = AESGCMService.combineEncryptedDataAndTag(encryptedData, authTag);
+        return AESGCMService.combineIvAndEncryptedData(iv, encryptedWithTag);
+    }
+    /**
+     * Split combined encrypted data back into its components
+     * @param combinedData The combined data containing IV, encrypted data, and optionally auth tag
+     * @param hasAuthTag Whether the combined data includes an authentication tag
+     * @returns Object containing the split components
+     */
+    static splitEncryptedData(combinedData, hasAuthTag = true, eciesParams = constants_1.Constants.ECIES) {
+        const eciesConsts = eciesParams;
+        const ivLength = eciesConsts.IV_SIZE;
+        const tagLength = hasAuthTag ? eciesConsts.AUTH_TAG_SIZE : 0;
+        if (combinedData.length < ivLength + tagLength) {
+            const engine = (0, i18n_setup_1.getEciesI18nEngine)();
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_ECIESError_CombinedDataTooShortForComponents));
+        }
+        const iv = combinedData.slice(0, ivLength);
+        const encryptedDataWithTag = combinedData.slice(ivLength);
+        return { iv, encryptedDataWithTag };
+    }
+    /**
+     * Decrypt data using AES-GCM
+     * @param iv The initialization vector
+     * @param encryptedData Data to decrypt (with auth tag appended if authTag is true)
+     * @param key Key to use for decryption (must be 16, 24 or 32 bytes for AES)
+     * @param authTag Whether the encrypted data includes an authentication tag
+     * @returns Decrypted data
+     */
+    static async decrypt(iv, encryptedData, key, authTag = false, eciesParams = constants_1.Constants.ECIES) {
+        const eciesConsts = eciesParams;
+        const cryptoKey = await crypto.subtle.importKey('raw', new Uint8Array(key), { name: AESGCMService.ALGORITHM_NAME }, false, ['decrypt']);
+        if (!authTag) {
+            const decrypted = await crypto.subtle.decrypt({ name: AESGCMService.ALGORITHM_NAME, iv: new Uint8Array(iv) }, cryptoKey, new Uint8Array(encryptedData));
+            return new Uint8Array(decrypted);
+        }
+        // Decrypt with auth tag (already appended to encryptedData)
+        const decryptedResult = await crypto.subtle.decrypt({
+            name: AESGCMService.ALGORITHM_NAME,
+            iv: new Uint8Array(iv),
+            tagLength: eciesConsts.AUTH_TAG_SIZE * 8,
+        }, cryptoKey, new Uint8Array(encryptedData));
+        return new Uint8Array(decryptedResult);
+    }
+}
+exports.AESGCMService = AESGCMService;
+//# sourceMappingURL=aes-gcm.js.map

package/src/services/aes-gcm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes-gcm.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/aes-gcm.ts"],"names":[],"mappings":";;;AACA,4CAAyC;AACzC,8CAAqE;AACrE,kDAAiD;AAEjD,MAAsB,aAAa;IAC1B,MAAM,CAAU,cAAc,GAAG,SAAS,CAAC;IAClD;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,OAAO,CACzB,IAAgB,EAChB,GAAe,EACf,UAAmB,KAAK,EACxB,cAA+B,qBAAS,CAAC,KAAK;QAE9C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,IAAI,UAAU,CAAC,GAAG,CAAC,EACnB,EAAE,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE,EACtC,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,MAAM,WAAW,GAAG,WAAW,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACjD;YACE,IAAI,EAAE,aAAa,CAAC,cAAc;YAClC,EAAE;YACF,GAAG,CAAC,OAAO,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;SAC7D,EACD,SAAS,EACT,IAAI,UAAU,CAAC,IAAI,CAAC,CACrB,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,kBAAkB,GAAG,WAAW,CAAC,aAAa,CAAC;QACrD,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB;QACvF,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,6BAA6B;QAE7F,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IAC9D,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,0BAA0B,CACtC,aAAyB,EACzB,OAAmB;QAEnB,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACvE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,yBAAyB,CACrC,EAAc,EACd,oBAAgC;QAEhC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjB,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,4BAA4B,CACxC,EAAc,EACd,aAAyB,EACzB,OAAmB;QAEnB,MAAM,gBAAgB,GAAG,aAAa,CAAC,0BAA0B,CAC/D,aAAa,EACb,OAAO,CACR,CAAC;QACF,OAAO,aAAa,CAAC,yBAAyB,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,kBAAkB,CAC9B,YAAwB,EACxB,aAAsB,IAAI,EAC1B,cAA+B,qBAAS,CAAC,KAAK;QAE9C,MAAM,WAAW,GAAG,WAAW,CAAC;QAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,GAAG,QAAQ,GAAG,SAAS,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAA,+BAAkB,GAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,kDAAkD,CAAC,CACtG,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,oBAAoB,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE1D,OAAO,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,KAAK,CAAC,OAAO,CACzB,EAAc,EACd,aAAyB,EACzB,GAAe,EACf,UAAmB,KAAK,EACxB,cAA+B,qBAAS,CAAC,KAAK;QAE9C,MAAM,WAAW,GAAG,WAAW,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,IAAI,UAAU,CAAC,GAAG,CAAC,EACnB,EAAE,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE,EACtC,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAC9D,SAAS,EACT,IAAI,UAAU,CAAC,aAAa,CAAC,CAC9B,CAAC;YAEF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,4DAA4D;QAC5D,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACjD;YACE,IAAI,EAAE,aAAa,CAAC,cAAc;YAClC,EAAE,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;YACtB,SAAS,EAAE,WAAW,CAAC,aAAa,GAAG,CAAC;SACzC,EACD,SAAS,EACT,IAAI,UAAU,CAAC,aAAa,CAAC,CAC9B,CAAC;QAEF,OAAO,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;;AA1KH,sCA2KC"}

package/src/services/ecies/crypto-core.d.ts

@@ -0,0 +1,51 @@
+import { IECIESConfig } from '../../interfaces/ecies-config';
+import { SecureString } from '../../secure-string';
+import { ISimpleKeyPair, IWalletSeed } from './interfaces';
+import { IECIESConstants } from '../../interfaces/ecies-consts';
+/**
+ * Browser-compatible crypto core for ECIES operations
+ * Uses @scure libraries for browser compatibility
+ */
+export declare class EciesCryptoCore {
+    protected readonly _config: IECIESConfig;
+    protected readonly _eciesConsts: IECIESConstants;
+    constructor(config: IECIESConfig, eciesParams?: IECIESConstants);
+    get config(): IECIESConfig;
+    /**
+     * Validates and normalizes a public key for ECIES operations
+     */
+    normalizePublicKey(publicKey: Uint8Array): Uint8Array;
+    /**
+     * Generate a new mnemonic
+     */
+    generateNewMnemonic(): SecureString;
+    /**
+     * Generate wallet and seed from mnemonic
+     */
+    walletAndSeedFromMnemonic(mnemonic: SecureString): IWalletSeed;
+    /**
+     * Create a simple key pair from a seed
+     */
+    seedToSimpleKeyPair(seed: Uint8Array): ISimpleKeyPair;
+    /**
+     * Create a simple key pair from a mnemonic
+     */
+    mnemonicToSimpleKeyPair(mnemonic: SecureString): ISimpleKeyPair;
+    /**
+     * Generate a random private key
+     */
+    generatePrivateKey(): Uint8Array;
+    /**
+     * Get public key from private key
+     */
+    getPublicKey(privateKey: Uint8Array): Uint8Array;
+    /**
+     * Generate ephemeral key pair for ECIES
+     */
+    generateEphemeralKeyPair(): Promise<ISimpleKeyPair>;
+    /**
+     * Compute ECDH shared secret
+     */
+    computeSharedSecret(privateKey: Uint8Array, publicKey: Uint8Array): Uint8Array;
+}
+//# sourceMappingURL=crypto-core.d.ts.map