@digitaldefiance/ecies-lib 4.4.13 → 4.4.15

package/src/services/multi-recipient-processor.js

@@ -0,0 +1,293 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MultiRecipientProcessor = void 0;
+const multi_recipient_chunk_1 = require("../interfaces/multi-recipient-chunk");
+const i18n_setup_1 = require("../i18n-setup");
+const enumerations_1 = require("../enumerations");
+const constants_1 = require("../constants");
+const aes_gcm_1 = require("./aes-gcm");
+const utils_1 = require("../utils");
+/**
+ * Processes multi-recipient chunks using symmetric encryption.
+ * Supports dynamic recipient ID sizes based on the configured ID provider.
+ */
+class MultiRecipientProcessor {
+    ecies;
+    config;
+    recipientIdSize;
+    constants;
+    /**
+     * Create a new multi-recipient processor.
+     * @param ecies - ECIES service for key encryption
+     * @param config - Configuration containing ID provider (defaults to global Constants)
+     */
+    constructor(ecies, config = constants_1.Constants) {
+        this.ecies = ecies;
+        this.config = config;
+        this.recipientIdSize = config.idProvider.byteLength;
+        this.constants = (0, multi_recipient_chunk_1.getMultiRecipientConstants)(this.recipientIdSize);
+    }
+    /**
+     * Encrypt chunk for multiple recipients
+     */
+    async encryptChunk(data, recipients, chunkIndex, isLast, symmetricKey, senderPrivateKey) {
+        // Validate inputs
+        const engine = (0, i18n_setup_1.getEciesI18nEngine)();
+        if (recipients.length === 0 || recipients.length > this.constants.MAX_RECIPIENTS) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_InvalidRecipientCountTemplate, { count: recipients.length }));
+        }
+        if (symmetricKey.length !== 32) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_SymmetricKeyMust32Bytes));
+        }
+        if (chunkIndex < 0 || chunkIndex > 0xFFFFFFFF) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_InvalidChunkIndexTemplate, { index: chunkIndex }));
+        }
+        // Sign-then-Encrypt
+        let dataToEncrypt = data;
+        if (senderPrivateKey) {
+            const signature = this.ecies.core.sign(senderPrivateKey, data);
+            dataToEncrypt = (0, utils_1.concatUint8Arrays)(signature, data);
+        }
+        if (dataToEncrypt.length > 0x7FFFFFFF) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_DataSizeExceedsMaximumTemplate, { size: dataToEncrypt.length }));
+        }
+        // Check for duplicate recipient IDs
+        const seenIds = new Set();
+        for (const recipient of recipients) {
+            const idStr = Buffer.from(recipient.id).toString('hex');
+            if (seenIds.has(idStr)) {
+                throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_DuplicateRecipientId));
+            }
+            seenIds.add(idStr);
+        }
+        // Generate ONE ephemeral key pair for all recipients
+        const ephemeralKeyPair = await this.ecies.core.generateEphemeralKeyPair();
+        // Build recipient headers
+        const recipientHeaders = [];
+        for (const recipient of recipients) {
+            if (recipient.id.length !== this.recipientIdSize) {
+                throw new Error(`Recipient ID must be ${this.recipientIdSize} bytes (configured by ID provider), got ${recipient.id.length} bytes`);
+            }
+            // Use Recipient ID as AAD for key encryption
+            const encryptedKey = await this.ecies.encryptKey(recipient.publicKey, symmetricKey, ephemeralKeyPair.privateKey, recipient.id);
+            recipientHeaders.push({
+                id: recipient.id,
+                keySize: encryptedKey.length,
+                encryptedKey,
+            });
+        }
+        // Calculate sizes with overflow check
+        let recipientHeadersSize = 0;
+        for (const h of recipientHeaders) {
+            const headerSize = this.recipientIdSize +
+                this.constants.KEY_SIZE_BYTES + h.keySize;
+            if (recipientHeadersSize + headerSize < recipientHeadersSize) {
+                throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_RecipientHeadersSizeOverflow));
+            }
+            recipientHeadersSize += headerSize;
+        }
+        // Calculate encrypted size (Data + Tag)
+        // AES-GCM tag is 16 bytes
+        const encryptedSize = dataToEncrypt.length + 16;
+        const totalSize = this.constants.HEADER_SIZE +
+            recipientHeadersSize +
+            constants_1.Constants.ECIES.IV_SIZE + // IV
+            encryptedSize;
+        // Check for integer overflow (max safe: 2^31 - 1 for Uint8Array)
+        if (totalSize > 0x7FFFFFFF || totalSize < 0) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkSizeOverflow));
+        }
+        // Build chunk buffer
+        const chunk = new Uint8Array(totalSize);
+        const view = new DataView(chunk.buffer);
+        let offset = 0;
+        // Write header
+        view.setUint32(offset, this.constants.MAGIC, false);
+        offset += 4;
+        view.setUint16(offset, this.constants.VERSION, false);
+        offset += 2;
+        view.setUint16(offset, recipients.length, false);
+        offset += 2;
+        view.setUint32(offset, chunkIndex, false);
+        offset += 4;
+        view.setUint32(offset, dataToEncrypt.length, false); // Original Size (includes signature if present)
+        offset += 4;
+        view.setUint32(offset, encryptedSize, false);
+        offset += 4;
+        view.setUint8(offset, isLast ? this.constants.FLAG_IS_LAST : 0);
+        offset += 1;
+        // Write Ephemeral Public Key (33 bytes)
+        chunk.set(ephemeralKeyPair.publicKey, offset);
+        offset += 33;
+        // Padding to HEADER_SIZE (64 bytes)
+        offset = this.constants.HEADER_SIZE;
+        // Write recipient headers
+        for (const header of recipientHeaders) {
+            chunk.set(header.id, offset);
+            offset += this.recipientIdSize;
+            view.setUint16(offset, header.keySize, false);
+            offset += this.constants.KEY_SIZE_BYTES;
+            chunk.set(header.encryptedKey, offset);
+            offset += header.keySize;
+        }
+        // Extract the full header (including recipient headers) to use as AAD
+        const headerBytes = chunk.slice(0, offset);
+        // Encrypt data with AES-256-GCM using Header as AAD
+        const encryptResult = await aes_gcm_1.AESGCMService.encrypt(dataToEncrypt, symmetricKey, true, // Return tag separately
+        constants_1.Constants.ECIES, headerBytes // AAD
+        );
+        // Write IV
+        chunk.set(encryptResult.iv, offset);
+        offset += constants_1.Constants.ECIES.IV_SIZE;
+        // Write encrypted data
+        chunk.set(encryptResult.encrypted, offset);
+        offset += encryptResult.encrypted.length;
+        // Write auth tag
+        if (encryptResult.tag) {
+            chunk.set(encryptResult.tag, offset);
+        }
+        return {
+            index: chunkIndex,
+            data: chunk,
+            isLast,
+            recipientCount: recipients.length,
+        };
+    }
+    /**
+     * Decrypt chunk for specific recipient
+     */
+    async decryptChunk(chunkData, recipientId, privateKey, senderPublicKey) {
+        const engine = (0, i18n_setup_1.getEciesI18nEngine)();
+        if (chunkData.length < this.constants.HEADER_SIZE) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkTooSmall));
+        }
+        const view = new DataView(chunkData.buffer, chunkData.byteOffset);
+        let offset = 0;
+        // Parse header
+        const magic = view.getUint32(offset, false);
+        offset += 4;
+        if (magic !== this.constants.MAGIC) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_InvalidChunkMagic));
+        }
+        const version = view.getUint16(offset, false);
+        offset += 2;
+        if (version !== this.constants.VERSION) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_UnsupportedVersionTemplate, { version }));
+        }
+        const recipientCount = view.getUint16(offset, false);
+        offset += 2;
+        if (recipientCount === 0 || recipientCount > this.constants.MAX_RECIPIENTS) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_InvalidRecipientCountTemplate, { count: recipientCount }));
+        }
+        const chunkIndex = view.getUint32(offset, false);
+        offset += 4;
+        const originalSize = view.getUint32(offset, false);
+        offset += 4;
+        const encryptedSize = view.getUint32(offset, false);
+        offset += 4;
+        const flags = view.getUint8(offset);
+        offset += 1;
+        // Read Ephemeral Public Key (33 bytes)
+        const ephemeralPublicKey = chunkData.slice(offset, offset + 33);
+        offset += 33;
+        offset = this.constants.HEADER_SIZE;
+        // Validate encryptedSize against chunk size
+        // We know it must be at least HEADER + IV + EncryptedSize (which includes tag)
+        const minChunkSize = this.constants.HEADER_SIZE + constants_1.Constants.ECIES.IV_SIZE + encryptedSize;
+        if (chunkData.length < minChunkSize) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkTooSmallForEncryptedSize));
+        }
+        // Find recipient header and decrypt symmetric key
+        let symmetricKey = null;
+        let tempOffset = offset;
+        for (let i = 0; i < recipientCount; i++) {
+            // Check if we have enough data for recipient ID
+            if (tempOffset + this.recipientIdSize > chunkData.length) {
+                throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkTruncatedRecipientId));
+            }
+            const id = chunkData.slice(tempOffset, tempOffset + this.recipientIdSize);
+            tempOffset += this.recipientIdSize;
+            // Check if we have enough data for keySize field
+            if (tempOffset + this.constants.KEY_SIZE_BYTES > chunkData.length) {
+                throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkTruncatedKeySize));
+            }
+            const keySize = view.getUint16(tempOffset, false);
+            tempOffset += this.constants.KEY_SIZE_BYTES;
+            // Validate keySize (typical ECIES: 100-400 bytes)
+            if (keySize === 0 || keySize > 1000) {
+                throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_InvalidKeySizeTemplate, { size: keySize }));
+            }
+            // Check if we have enough data for the encrypted key
+            if (tempOffset + keySize > chunkData.length) {
+                throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkTruncatedEncryptedKey));
+            }
+            const encryptedKey = chunkData.slice(tempOffset, tempOffset + keySize);
+            tempOffset += keySize;
+            // Check if this is our recipient
+            if (this.arraysEqual(id, recipientId)) {
+                // Use Recipient ID as AAD for key decryption
+                symmetricKey = await this.ecies.decryptKey(privateKey, encryptedKey, ephemeralPublicKey, id);
+                // Don't break - need to skip all recipient headers
+            }
+        }
+        if (!symmetricKey) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_RecipientNotFoundInChunk));
+        }
+        // Update offset to after all recipient headers
+        offset = tempOffset;
+        // Extract header bytes for AAD
+        const headerBytes = chunkData.slice(0, offset);
+        // Read IV
+        if (offset + constants_1.Constants.ECIES.IV_SIZE > chunkData.length) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkTooSmall));
+        }
+        const iv = chunkData.slice(offset, offset + constants_1.Constants.ECIES.IV_SIZE);
+        offset += constants_1.Constants.ECIES.IV_SIZE;
+        // Read encrypted data (includes auth tag)
+        if (offset + encryptedSize > chunkData.length) {
+            throw new Error(engine.translate(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_MultiRecipient_ChunkTooSmall));
+        }
+        const encryptedWithTag = chunkData.slice(offset, offset + encryptedSize);
+        offset += encryptedSize;
+        // Decrypt with AAD
+        const decrypted = await aes_gcm_1.AESGCMService.decrypt(iv, encryptedWithTag, symmetricKey, true, constants_1.Constants.ECIES, headerBytes);
+        // Verify signature if sender public key provided
+        let finalData = decrypted;
+        if (senderPublicKey) {
+            if (decrypted.length < 64) {
+                throw new Error('Decrypted chunk too short to contain signature');
+            }
+            const signature = decrypted.slice(0, 64);
+            const message = decrypted.slice(64);
+            const isValid = this.ecies.core.verify(senderPublicKey, message, signature);
+            if (!isValid) {
+                throw new Error('Invalid sender signature in chunk');
+            }
+            finalData = message;
+        }
+        return {
+            data: finalData,
+            header: {
+                magic,
+                version,
+                recipientCount,
+                chunkIndex,
+                originalSize,
+                encryptedSize,
+                flags,
+            },
+        };
+    }
+    arraysEqual(a, b) {
+        if (a.length !== b.length)
+            return false;
+        // Constant-time comparison to prevent timing attacks
+        let diff = 0;
+        for (let i = 0; i < a.length; i++) {
+            diff |= a[i] ^ b[i];
+        }
+        return diff === 0;
+    }
+}
+exports.MultiRecipientProcessor = MultiRecipientProcessor;
+//# sourceMappingURL=multi-recipient-processor.js.map

package/src/services/multi-recipient-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-recipient-processor.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/multi-recipient-processor.ts"],"names":[],"mappings":";;;AACA,+EAM6C;AAC7C,8CAAqE;AACrE,kDAAiD;AACjD,4CAAyC;AAEzC,uCAA0C;AAC1C,oCAA6C;AAE7C;;;GAGG;AACH,MAAa,uBAAuB;IAUf;IACA;IAVF,eAAe,CAAS;IACxB,SAAS,CAA2B;IAErD;;;;OAIG;IACH,YACmB,KAAmB,EACnB,SAAqB,qBAAS;QAD9B,UAAK,GAAL,KAAK,CAAc;QACnB,WAAM,GAAN,MAAM,CAAwB;QAE/C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,IAAA,kDAA0B,EAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,IAAgB,EAChB,UAA4D,EAC5D,UAAkB,EAClB,MAAe,EACf,YAAwB,EACxB,gBAA6B;QAE7B,kBAAkB;QAClB,MAAM,MAAM,GAAG,IAAA,+BAAkB,GAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvJ,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,UAAU,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5I,CAAC;QAED,oBAAoB;QACpB,IAAI,aAAa,GAAG,IAAI,CAAC;QACzB,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YAC/D,aAAa,GAAG,IAAA,yBAAiB,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,mDAAmD,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1J,CAAC;QAED,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAChH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,qDAAqD;QACrD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAE1E,0BAA0B;QAC1B,MAAM,gBAAgB,GAAuB,EAAE,CAAC;QAChD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,eAAe,2CAA2C,SAAS,CAAC,EAAE,CAAC,MAAM,QAAQ,CACnH,CAAC;YACJ,CAAC;YAED,6CAA6C;YAC7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAC9C,SAAS,CAAC,SAAS,EACnB,YAAY,EACZ,gBAAgB,CAAC,UAAU,EAC3B,SAAS,CAAC,EAAE,CACb,CAAC;YAEF,gBAAgB,CAAC,IAAI,CAAC;gBACpB,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,OAAO,EAAE,YAAY,CAAC,MAAM;gBAC5B,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe;gBACrB,IAAI,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC;YAC5D,IAAI,oBAAoB,GAAG,UAAU,GAAG,oBAAoB,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,iDAAiD,CAAC,CAAC,CAAC;YACxH,CAAC;YACD,oBAAoB,IAAI,UAAU,CAAC;QACrC,CAAC;QAED,wCAAwC;QACxC,0BAA0B;QAC1B,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,GAAG,EAAE,CAAC;QAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW;YAC3B,oBAAoB;YACpB,qBAAS,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK;YAC/B,aAAa,CAAC;QAE/B,iEAAiE;QACjE,IAAI,SAAS,GAAG,UAAU,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC7G,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,eAAe;QACf,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,gDAAgD;QACrG,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,CAAC;QAEZ,wCAAwC;QACxC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,EAAE,CAAC;QAEb,oCAAoC;QACpC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAEpC,0BAA0B;QAC1B,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YACxC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC;QAC3B,CAAC;QAED,sEAAsE;QACtE,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAE3C,oDAAoD;QACpD,MAAM,aAAa,GAAG,MAAM,uBAAa,CAAC,OAAO,CAC/C,aAAa,EACb,YAAY,EACZ,IAAI,EAAE,wBAAwB;QAC9B,qBAAS,CAAC,KAAK,EACf,WAAW,CAAC,MAAM;SACnB,CAAC;QAEF,WAAW;QACX,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,qBAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAElC,uBAAuB;QACvB,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC;QAEzC,iBAAiB;QACjB,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;YACtB,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACL,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,KAAK;YACX,MAAM;YACN,cAAc,EAAE,UAAU,CAAC,MAAM;SAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,SAAqB,EACrB,WAAuB,EACvB,UAAsB,EACtB,eAA4B;QAE5B,MAAM,MAAM,GAAG,IAAA,+BAAkB,GAAE,CAAC;QACpC,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,eAAe;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC7G,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,+CAA+C,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACnI,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,cAAc,KAAK,CAAC,IAAI,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACpJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,CAAC;QAEZ,uCAAuC;QACvC,MAAM,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAEpC,4CAA4C;QAC5C,+EAA+E;QAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,qBAAS,CAAC,KAAK,CAAC,OAAO,GAAG,aAAa,CAAC;QAC1F,IAAI,SAAS,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,kDAAkD,CAAC,CAAC,CAAC;QACzH,CAAC;QAED,kDAAkD;QAClD,IAAI,YAAY,GAAsB,IAAI,CAAC;QAC3C,IAAI,UAAU,GAAG,MAAM,CAAC;QAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,gDAAgD;YAChD,IAAI,UAAU,GAAG,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,8CAA8C,CAAC,CAAC,CAAC;YACrH,CAAC;YAED,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;YAC1E,UAAU,IAAI,IAAI,CAAC,eAAe,CAAC;YAEnC,iDAAiD;YACjD,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,0CAA0C,CAAC,CAAC,CAAC;YACjH,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAClD,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YAE5C,kDAAkD;YAClD,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,GAAG,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACrI,CAAC;YAED,qDAAqD;YACrD,IAAI,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,+CAA+C,CAAC,CAAC,CAAC;YACtH,CAAC;YAED,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC;YACvE,UAAU,IAAI,OAAO,CAAC;YAEtB,iCAAiC;YACjC,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC;gBACtC,6CAA6C;gBAC7C,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,YAAY,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;gBAC7F,mDAAmD;YACrD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACpH,CAAC;QAED,+CAA+C;QAC/C,MAAM,GAAG,UAAU,CAAC;QAEpB,+BAA+B;QAC/B,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAE/C,UAAU;QACV,IAAI,MAAM,GAAG,qBAAS,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,IAAI,qBAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAElC,0CAA0C;QAC1C,IAAI,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,6BAAgB,EAAE,6BAAc,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC;QACzE,MAAM,IAAI,aAAa,CAAC;QAExB,mBAAmB;QACnB,MAAM,SAAS,GAAG,MAAM,uBAAa,CAAC,OAAO,CAC3C,EAAE,EACF,gBAAgB,EAChB,YAAY,EACZ,IAAI,EACJ,qBAAS,CAAC,KAAK,EACf,WAAW,CACZ,CAAC;QAEF,iDAAiD;QACjD,IAAI,SAAS,GAAG,SAAS,CAAC;QAC1B,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,SAAS,GAAG,OAAO,CAAC;QACtB,CAAC;QAED,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE;gBACN,KAAK;gBACL,OAAO;gBACP,cAAc;gBACd,UAAU;gBACV,YAAY;gBACZ,aAAa;gBACb,KAAK;aACN;SACF,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,CAAa,EAAE,CAAa;QAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAExC,qDAAqD;QACrD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,CAAC;IACpB,CAAC;CACF;AArWD,0DAqWC"}

package/src/services/password-login.d.ts

@@ -0,0 +1,47 @@
+import { Wallet } from '@ethereumjs/wallet';
+import { Pbkdf2ProfileEnum } from '../enumerations/pbkdf2-profile';
+import { SecureString } from '../secure-string';
+import { ECIESService } from './ecies/service';
+import { Pbkdf2Service } from './pbkdf2';
+import { IECIESConstants } from '../interfaces/ecies-consts';
+export declare class PasswordLoginService {
+    protected readonly eciesService: ECIESService;
+    protected readonly pbkdf2Service: Pbkdf2Service;
+    protected readonly eciesConsts: IECIESConstants;
+    static readonly privateKeyStorageKey = "encryptedPrivateKey";
+    static readonly saltStorageKey = "passwordLoginSalt";
+    static readonly encryptedMnemonicStorageKey = "encryptedMnemonic";
+    static readonly profileStorageKey = "pbkdf2Profile";
+    constructor(eciesService: ECIESService, pbkdf2Service: Pbkdf2Service, eciesParams?: IECIESConstants);
+    createPasswordLoginBundle(mnemonic: SecureString, password: SecureString, profile?: Pbkdf2ProfileEnum): Promise<{
+        salt: Uint8Array;
+        encryptedPrivateKey: Uint8Array;
+        encryptedMnemonic: Uint8Array;
+        wallet: Wallet;
+    }>;
+    /**
+     * Set up password login by deriving a key from the password and using it to encrypt
+     * @param mnemonic The user's mnemonic
+     * @param password The user's password
+     */
+    setupPasswordLoginLocalStorageBundle(mnemonic: SecureString, password: SecureString, profile?: Pbkdf2ProfileEnum): Promise<Wallet>;
+    getWalletAndMnemonicFromEncryptedPasswordBundle(salt: Uint8Array, encryptedPrivateKey: Uint8Array, encryptedMnemonic: Uint8Array, password: SecureString, profile?: Pbkdf2ProfileEnum): Promise<{
+        wallet: Wallet;
+        mnemonic: SecureString;
+    }>;
+    /**
+     * Recover wallet and mnemonic from password
+     * @param password The user's password
+     * @returns The user's wallet and mnemonic
+     */
+    getWalletAndMnemonicFromLocalStorageBundle(password: SecureString): Promise<{
+        wallet: Wallet;
+        mnemonic: SecureString;
+    }>;
+    /**
+     *
+     * @returns True if password login is set up (i.e. salt and encrypted private key are in local storage)
+     */
+    static isPasswordLoginSetup(): boolean;
+}
+//# sourceMappingURL=password-login.d.ts.map

package/src/services/password-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-login.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/password-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAK7D,qBAAa,oBAAoB;IAC/B,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAChD,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IAChD,gBAAuB,oBAAoB,yBAAyB;IACpE,gBAAuB,cAAc,uBAAuB;IAC5D,gBAAuB,2BAA2B,uBAAuB;IACzE,gBAAuB,iBAAiB,mBAAmB;gBAE/C,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,GAAE,eAAiC;IAMvG,yBAAyB,CACpC,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE,iBAAsD,GAC9D,OAAO,CAAC;QACT,IAAI,EAAE,UAAU,CAAC;QACjB,mBAAmB,EAAE,UAAU,CAAC;QAChC,iBAAiB,EAAE,UAAU,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAwCF;;;;OAIG;IACU,oCAAoC,CAC/C,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE,iBAAsD,GAC9D,OAAO,CAAC,MAAM,CAAC;IA4BL,+CAA+C,CAC1D,IAAI,EAAE,UAAU,EAChB,mBAAmB,EAAE,UAAU,EAC/B,iBAAiB,EAAE,UAAU,EAC7B,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE,iBAAsD,GAC9D,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;IAuCtD;;;;OAIG;IACU,0CAA0C,CACrD,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;IAmCtD;;;OAGG;WACW,oBAAoB,IAAI,OAAO;CAkB9C"}

package/src/services/password-login.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordLoginService = void 0;
+const wallet_1 = require("@ethereumjs/wallet");
+const ecies_encryption_type_1 = require("../enumerations/ecies-encryption-type");
+const pbkdf2_profile_1 = require("../enumerations/pbkdf2-profile");
+const secure_string_1 = require("../secure-string");
+const utils_1 = require("../utils");
+const aes_gcm_1 = require("./aes-gcm");
+const enumerations_1 = require("../enumerations");
+const i18n_lib_1 = require("@digitaldefiance/i18n-lib");
+const constants_1 = require("../constants");
+const i18n_setup_1 = require("../i18n-setup");
+class PasswordLoginService {
+    eciesService;
+    pbkdf2Service;
+    eciesConsts;
+    static privateKeyStorageKey = 'encryptedPrivateKey';
+    static saltStorageKey = 'passwordLoginSalt';
+    static encryptedMnemonicStorageKey = 'encryptedMnemonic';
+    static profileStorageKey = 'pbkdf2Profile';
+    constructor(eciesService, pbkdf2Service, eciesParams = constants_1.Constants.ECIES) {
+        this.eciesService = eciesService;
+        this.pbkdf2Service = pbkdf2Service;
+        this.eciesConsts = eciesParams;
+    }
+    async createPasswordLoginBundle(mnemonic, password, profile = pbkdf2_profile_1.Pbkdf2ProfileEnum.BROWSER_PASSWORD) {
+        const { wallet } = this.eciesService.walletAndSeedFromMnemonic(mnemonic);
+        const derivedKey = await this.pbkdf2Service.deriveKeyFromPasswordWithProfileAsync(password.valueAsUint8Array, profile);
+        // Encrypt private key with derived key
+        const privateKeyBytes = wallet.getPrivateKey();
+        const { encrypted, iv, tag } = await aes_gcm_1.AESGCMService.encrypt(privateKeyBytes, derivedKey.hash, true);
+        if (!tag) {
+            throw new i18n_lib_1.TranslatableGenericError(i18n_setup_1.EciesComponentId, enumerations_1.EciesStringKey.Error_Utils_EncryptionFailedNoAuthTag);
+        }
+        const encryptedPrivateKey = aes_gcm_1.AESGCMService.combineIvTagAndEncryptedData(iv, encrypted, tag);
+        // now use the public key to encrypt the mnemonic and store it
+        const encryptedMnemonic = await this.eciesService.encrypt(ecies_encryption_type_1.EciesEncryptionTypeEnum.Simple, wallet.getPublicKey(), mnemonic.valueAsUint8Array);
+        return {
+            salt: derivedKey.salt,
+            encryptedPrivateKey: encryptedPrivateKey,
+            encryptedMnemonic: encryptedMnemonic,
+            wallet,
+        };
+    }
+    /**
+     * Set up password login by deriving a key from the password and using it to encrypt
+     * @param mnemonic The user's mnemonic
+     * @param password The user's password
+     */
+    async setupPasswordLoginLocalStorageBundle(mnemonic, password, profile = pbkdf2_profile_1.Pbkdf2ProfileEnum.BROWSER_PASSWORD) {
+        const { salt, encryptedPrivateKey, encryptedMnemonic, wallet } = await this.createPasswordLoginBundle(mnemonic, password, profile);
+        // store the salt and encrypted private key in local storage
+        try {
+            localStorage.setItem(PasswordLoginService.saltStorageKey, (0, utils_1.uint8ArrayToHex)(salt));
+            localStorage.setItem(PasswordLoginService.privateKeyStorageKey, (0, utils_1.uint8ArrayToHex)(encryptedPrivateKey));
+            localStorage.setItem(PasswordLoginService.encryptedMnemonicStorageKey, (0, utils_1.uint8ArrayToHex)(encryptedMnemonic));
+            localStorage.setItem(PasswordLoginService.profileStorageKey, profile);
+        }
+        catch (error) {
+            throw new i18n_lib_1.TypedHandleableError(i18n_setup_1.EciesComponentId, enumerations_1.PasswordLoginErrorTypeEnum.FailedToStoreLoginData, (0, i18n_lib_1.buildReasonMap)(enumerations_1.PasswordLoginErrorTypeEnum, ['Error', 'PasswordLoginError']), new Error(), { cause: error instanceof Error ? error : undefined });
+        }
+        return wallet;
+    }
+    async getWalletAndMnemonicFromEncryptedPasswordBundle(salt, encryptedPrivateKey, encryptedMnemonic, password, profile = pbkdf2_profile_1.Pbkdf2ProfileEnum.BROWSER_PASSWORD) {
+        if (!salt || !encryptedPrivateKey || !encryptedMnemonic) {
+            throw new i18n_lib_1.TypedHandleableError(i18n_setup_1.EciesComponentId, enumerations_1.PasswordLoginErrorTypeEnum.PasswordLoginNotSetUp, (0, i18n_lib_1.buildReasonMap)(enumerations_1.PasswordLoginErrorTypeEnum, ['Error', 'PasswordLoginError']), new Error());
+        }
+        const derivedKey = await this.pbkdf2Service.deriveKeyFromPasswordWithProfileAsync(password.valueAsUint8Array, profile, salt);
+        // Decrypt private key with derived key
+        const { iv, encryptedDataWithTag } = aes_gcm_1.AESGCMService.splitEncryptedData(encryptedPrivateKey, true, this.eciesConsts);
+        const privateKeyBytes = await aes_gcm_1.AESGCMService.decrypt(iv, encryptedDataWithTag, derivedKey.hash, true, this.eciesConsts);
+        const wallet = wallet_1.Wallet.fromPrivateKey(privateKeyBytes);
+        // now decrypt the mnemonic
+        const decryptedMnemonic = await this.eciesService.decryptSimpleOrSingleWithHeader(true, wallet.getPrivateKey(), encryptedMnemonic);
+        return { wallet, mnemonic: new secure_string_1.SecureString(decryptedMnemonic) };
+    }
+    /**
+     * Recover wallet and mnemonic from password
+     * @param password The user's password
+     * @returns The user's wallet and mnemonic
+     */
+    async getWalletAndMnemonicFromLocalStorageBundle(password) {
+        const saltHex = localStorage.getItem(PasswordLoginService.saltStorageKey);
+        const encryptedPrivateKeyHex = localStorage.getItem(PasswordLoginService.privateKeyStorageKey);
+        const encryptedMnemonicHex = localStorage.getItem(PasswordLoginService.encryptedMnemonicStorageKey);
+        const profileStr = localStorage.getItem(PasswordLoginService.profileStorageKey);
+        if (!saltHex ||
+            !encryptedPrivateKeyHex ||
+            !encryptedMnemonicHex ||
+            saltHex === '' ||
+            encryptedPrivateKeyHex === '' ||
+            encryptedMnemonicHex === '') {
+            throw new i18n_lib_1.TypedHandleableError(i18n_setup_1.EciesComponentId, enumerations_1.PasswordLoginErrorTypeEnum.PasswordLoginNotSetUp, (0, i18n_lib_1.buildReasonMap)(enumerations_1.PasswordLoginErrorTypeEnum, ['Error', 'PasswordLoginError']), new Error());
+        }
+        const salt = (0, utils_1.hexToUint8Array)(saltHex);
+        const encryptedPrivateKey = (0, utils_1.hexToUint8Array)(encryptedPrivateKeyHex);
+        const encryptedMnemonic = (0, utils_1.hexToUint8Array)(encryptedMnemonicHex);
+        const profile = profileStr || pbkdf2_profile_1.Pbkdf2ProfileEnum.BROWSER_PASSWORD;
+        return await this.getWalletAndMnemonicFromEncryptedPasswordBundle(salt, encryptedPrivateKey, encryptedMnemonic, password, profile);
+    }
+    /**
+     *
+     * @returns True if password login is set up (i.e. salt and encrypted private key are in local storage)
+     */
+    static isPasswordLoginSetup() {
+        const saltHex = localStorage.getItem(PasswordLoginService.saltStorageKey);
+        const encryptedPrivateKeyHex = localStorage.getItem(PasswordLoginService.privateKeyStorageKey);
+        const encryptedMnemonicHex = localStorage.getItem(PasswordLoginService.encryptedMnemonicStorageKey);
+        return !!(saltHex &&
+            encryptedPrivateKeyHex &&
+            encryptedMnemonicHex &&
+            saltHex !== '' &&
+            encryptedPrivateKeyHex !== '' &&
+            encryptedMnemonicHex !== '');
+    }
+}
+exports.PasswordLoginService = PasswordLoginService;
+//# sourceMappingURL=password-login.js.map

package/src/services/password-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-login.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/password-login.ts"],"names":[],"mappings":";;;AAAA,+CAA4C;AAC5C,iFAAgF;AAChF,mEAAmE;AACnE,oDAAgD;AAChD,oCAA4D;AAC5D,uCAA0C;AAG1C,kDAA6E;AAC7E,wDAA2G;AAE3G,4CAAyC;AACzC,8CAAiD;AAGjD,MAAa,oBAAoB;IACZ,YAAY,CAAe;IAC3B,aAAa,CAAgB;IAC7B,WAAW,CAAkB;IACzC,MAAM,CAAU,oBAAoB,GAAG,qBAAqB,CAAC;IAC7D,MAAM,CAAU,cAAc,GAAG,mBAAmB,CAAC;IACrD,MAAM,CAAU,2BAA2B,GAAG,mBAAmB,CAAC;IAClE,MAAM,CAAU,iBAAiB,GAAG,eAAe,CAAC;IAE3D,YAAY,YAA0B,EAAE,aAA4B,EAAE,cAA+B,qBAAS,CAAC,KAAK;QAClH,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAEM,KAAK,CAAC,yBAAyB,CACpC,QAAsB,EACtB,QAAsB,EACtB,UAA6B,kCAAiB,CAAC,gBAAgB;QAO/D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAEzE,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,aAAa,CAAC,qCAAqC,CAC5D,QAAQ,CAAC,iBAAiB,EAC1B,OAAO,CACR,CAAC;QAEJ,uCAAuC;QACvC,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QAC/C,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,uBAAa,CAAC,OAAO,CACxD,eAAe,EACf,UAAU,CAAC,IAAI,EACf,IAAI,CACL,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,mCAAwB,CAAC,6BAAgB,EAAE,6BAAc,CAAC,qCAAqC,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,mBAAmB,GAAG,uBAAa,CAAC,4BAA4B,CACpE,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAC;QAEF,8DAA8D;QAC9D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CACvD,+CAAuB,CAAC,MAAM,EAC9B,MAAM,CAAC,YAAY,EAAE,EACrB,QAAQ,CAAC,iBAAiB,CAC3B,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,mBAAmB,EAAE,mBAAmB;YACxC,iBAAiB,EAAE,iBAAiB;YACpC,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,oCAAoC,CAC/C,QAAsB,EACtB,QAAsB,EACtB,UAA6B,kCAAiB,CAAC,gBAAgB;QAE/D,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAC5D,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEpE,4DAA4D;QAC5D,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,CAClB,oBAAoB,CAAC,cAAc,EACnC,IAAA,uBAAe,EAAC,IAAI,CAAC,CACtB,CAAC;YACF,YAAY,CAAC,OAAO,CAClB,oBAAoB,CAAC,oBAAoB,EACzC,IAAA,uBAAe,EAAC,mBAAmB,CAAC,CACrC,CAAC;YACF,YAAY,CAAC,OAAO,CAClB,oBAAoB,CAAC,2BAA2B,EAChD,IAAA,uBAAe,EAAC,iBAAiB,CAAC,CACnC,CAAC;YACF,YAAY,CAAC,OAAO,CAClB,oBAAoB,CAAC,iBAAiB,EACtC,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,+BAAoB,CAAoD,6BAAgB,EAAE,yCAA0B,CAAC,sBAAsB,EAAE,IAAA,yBAAc,EAAoD,yCAA0B,EAAE,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,EAAE,IAAI,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7V,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,+CAA+C,CAC1D,IAAgB,EAChB,mBAA+B,EAC/B,iBAA6B,EAC7B,QAAsB,EACtB,UAA6B,kCAAiB,CAAC,gBAAgB;QAE/D,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzD,MAAM,IAAI,+BAAoB,CAAoD,6BAAgB,EAAE,yCAA0B,CAAC,qBAAqB,EAAE,IAAA,yBAAc,EAAoD,yCAA0B,EAAE,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;QACpS,CAAC;QAED,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,aAAa,CAAC,qCAAqC,CAC5D,QAAQ,CAAC,iBAAiB,EAC1B,OAAO,EACP,IAAI,CACL,CAAC;QAEJ,uCAAuC;QACvC,MAAM,EAAE,EAAE,EAAE,oBAAoB,EAAE,GAAG,uBAAa,CAAC,kBAAkB,CACnE,mBAAmB,EACnB,IAAI,EACJ,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,uBAAa,CAAC,OAAO,CACjD,EAAE,EACF,oBAAoB,EACpB,UAAU,CAAC,IAAI,EACf,IAAI,EACJ,IAAI,CAAC,WAAW,CACjB,CAAC;QAEF,MAAM,MAAM,GAAG,eAAM,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAEtD,2BAA2B;QAC3B,MAAM,iBAAiB,GACrB,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CACrD,IAAI,EACJ,MAAM,CAAC,aAAa,EAAE,EACtB,iBAAiB,CAClB,CAAC;QAEJ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,4BAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,0CAA0C,CACrD,QAAsB;QAEtB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAC1E,MAAM,sBAAsB,GAAG,YAAY,CAAC,OAAO,CACjD,oBAAoB,CAAC,oBAAoB,CAC1C,CAAC;QACF,MAAM,oBAAoB,GAAG,YAAY,CAAC,OAAO,CAC/C,oBAAoB,CAAC,2BAA2B,CACjD,CAAC;QACF,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;QAEhF,IACE,CAAC,OAAO;YACR,CAAC,sBAAsB;YACvB,CAAC,oBAAoB;YACrB,OAAO,KAAK,EAAE;YACd,sBAAsB,KAAK,EAAE;YAC7B,oBAAoB,KAAK,EAAE,EAC3B,CAAC;YACD,MAAM,IAAI,+BAAoB,CAAoD,6BAAgB,EAAE,yCAA0B,CAAC,qBAAqB,EAAE,IAAA,yBAAc,EAAoD,yCAA0B,EAAE,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;QACrS,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QACtC,MAAM,mBAAmB,GAAG,IAAA,uBAAe,EAAC,sBAAsB,CAAC,CAAC;QACpE,MAAM,iBAAiB,GAAG,IAAA,uBAAe,EAAC,oBAAoB,CAAC,CAAC;QAChE,MAAM,OAAO,GAAI,UAAgC,IAAI,kCAAiB,CAAC,gBAAgB,CAAC;QAExF,OAAO,MAAM,IAAI,CAAC,+CAA+C,CAC/D,IAAI,EACJ,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,oBAAoB;QAChC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAC1E,MAAM,sBAAsB,GAAG,YAAY,CAAC,OAAO,CACjD,oBAAoB,CAAC,oBAAoB,CAC1C,CAAC;QACF,MAAM,oBAAoB,GAAG,YAAY,CAAC,OAAO,CAC/C,oBAAoB,CAAC,2BAA2B,CACjD,CAAC;QAEF,OAAO,CAAC,CAAC,CACP,OAAO;YACP,sBAAsB;YACtB,oBAAoB;YACpB,OAAO,KAAK,EAAE;YACd,sBAAsB,KAAK,EAAE;YAC7B,oBAAoB,KAAK,EAAE,CAC5B,CAAC;IACJ,CAAC;;AAjNH,oDAkNC"}

package/src/services/pbkdf2.d.ts

@@ -0,0 +1,54 @@
+import { Pbkdf2ProfileEnum } from '../enumerations/pbkdf2-profile';
+import { IPbkdf2Config } from '../interfaces/pbkdf2-config';
+import { IPbkdf2Result } from '../interfaces/pbkdf2-result';
+import { IECIESConstants } from '../interfaces/ecies-consts';
+import { IPBkdf2Consts } from '../interfaces/pbkdf2-consts';
+/**
+ * Service for handling PBKDF2 (Password-Based Key Derivation Function 2) operations.
+ * This service provides functionality for:
+ * - Generating secure key derivation configurations
+ * - Deriving cryptographic keys from passwords
+ * - Managing salt and iteration parameters
+ * - Both synchronous and asynchronous key derivation
+ */
+export declare class Pbkdf2Service {
+    protected readonly profiles: Record<string, IPbkdf2Config>;
+    protected readonly eciesConsts: IECIESConstants;
+    protected readonly pbkdf2Consts: IPBkdf2Consts;
+    constructor(profiles?: Record<string, IPbkdf2Config>, eciesParams?: IECIESConstants, pbkdf2Params?: IPBkdf2Consts);
+    /**
+     * Get a predefined configuration profile for common use cases
+     * @param profile The name of the profile to use
+     * @returns Configuration object for the specified profile
+     */
+    getProfileConfig(profile: string): IPbkdf2Config;
+    /**
+     * Generate an options object for pbkdf2
+     * @param iterations Optional number of iterations (defaults to Pbkdf2IterationsPerSecond)
+     * @param saltBytes Optional salt size in bytes (defaults to PBKDF2.SALT_BYTES)
+     * @param hashBytes Optional hash size in bytes (defaults to ECIES.SYMMETRIC.KEY_SIZE)
+     * @param algorithm Optional hash algorithm (defaults to PBKDF2.ALGORITHM)
+     * @returns Configuration object for PBKDF2
+     */
+    getConfig(iterations?: number, saltBytes?: number, hashBytes?: number, algorithm?: string): IPbkdf2Config;
+    /**
+     * Given a password, use pbkdf2 to generate an appropriately sized key for AES encryption
+     * @param password The password to derive a key from
+     * @param salt Optional salt (will be randomly generated if not provided)
+     * @param iterations Optional number of iterations
+     * @param saltBytes Optional salt size in bytes
+     * @param keySize Optional key size in bytes
+     * @param algorithm Optional hash algorithm
+     * @returns Object containing the derived key, salt, and iteration count
+     */
+    deriveKeyFromPasswordAsync(password: Uint8Array, salt?: Uint8Array, iterations?: number, saltBytes?: number, keySize?: number, algorithm?: string): Promise<IPbkdf2Result>;
+    /**
+     * Derive a key using a predefined configuration profile
+     * @param password The password to derive a key from
+     * @param profile The configuration profile to use
+     * @param salt Optional salt (will be randomly generated if not provided)
+     * @returns Object containing the derived key, salt, and iteration count
+     */
+    deriveKeyFromPasswordWithProfileAsync(password: Uint8Array, profile: Pbkdf2ProfileEnum, salt?: Uint8Array): Promise<IPbkdf2Result>;
+}
+//# sourceMappingURL=pbkdf2.d.ts.map

package/src/services/pbkdf2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/pbkdf2.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D;;;;;;;GAOG;AACH,qBAAa,aAAa;IACxB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3D,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IAChD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;gBAG7C,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAA6B,EACnE,WAAW,GAAE,eAAiC,EAC9C,YAAY,GAAE,aAAgC;IAMhD;;;;OAIG;IACI,gBAAgB,CACrB,OAAO,EAAE,MAAM,GACd,aAAa;IAahB;;;;;;;OAOG;IACI,SAAS,CACd,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,aAAa;IAkBhB;;;;;;;;;OASG;IACU,0BAA0B,CACrC,QAAQ,EAAE,UAAU,EACpB,IAAI,CAAC,EAAE,UAAU,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;IA8CzB;;;;;;OAMG;IACU,qCAAqC,CAChD,QAAQ,EAAE,UAAU,EACpB,OAAO,EAAE,iBAAiB,EAC1B,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,aAAa,CAAC;CAW1B"}