@digitaldefiance/node-ecies-lib 4.4.8 → 4.4.10

package/src/services/aes-gcm.js

@@ -0,0 +1,158 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AESGCMService = void 0;
+const crypto_1 = require("crypto");
+const i18n_1 = require("../i18n");
+const constants_1 = require("../constants");
+class AESGCMService {
+    algorithmName;
+    mode;
+    keyBits;
+    ivSize;
+    keyringAlgorithmConfiguration;
+    constructor(constants = constants_1.Constants) {
+        this.algorithmName = constants.KEYRING.ALGORITHM;
+        this.mode = constants.KEYRING.MODE;
+        this.keyBits = constants.KEYRING.KEY_BITS;
+        this.ivSize = constants.WRAPPED_KEY.IV_SIZE;
+        this.keyringAlgorithmConfiguration =
+            constants.KEYRING_ALGORITHM_CONFIGURATION;
+    }
+    get ALGORITHM_NAME() {
+        return this.algorithmName;
+    }
+    get MODE() {
+        return this.mode;
+    }
+    get KEY_BITS() {
+        return this.keyBits;
+    }
+    /**
+     * Encrypt data using AES-GCM
+     * @param data Data to encrypt
+     * @param key Key to use for encryption (must be 16, 24 or 32 bytes for AES)
+     * @param authTag Whether to return separate auth tag
+     * @returns Encrypted data with IV and optional separate auth tag
+     */
+    encrypt(data, key, authTag = false, aad) {
+        // Security fix 9: Key length validation - must match algorithm requirements
+        const requiredKeyLength = this.keyBits / 8;
+        if (key.length !== requiredKeyLength) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_InvalidAESKeyLength));
+        }
+        // Security fix 11: Data null/undefined check
+        if (data === null || data === undefined) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_CannotEncryptEmptyData));
+        }
+        // Security fix 12: Data size validation (max 2GB)
+        if (data.length > 0x7FFFFFFF) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_MessageTooLarge));
+        }
+        const iv = (0, crypto_1.randomBytes)(this.ivSize);
+        const cipher = (0, crypto_1.createCipheriv)(this.keyringAlgorithmConfiguration, key, iv);
+        if (aad) {
+            cipher.setAAD(aad);
+        }
+        const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        if (!authTag) {
+            const encryptedWithTag = Buffer.concat([encrypted, tag]);
+            return { encrypted: encryptedWithTag, iv: iv };
+        }
+        return {
+            encrypted: encrypted,
+            iv: iv,
+            tag: tag,
+        };
+    }
+    /**
+     * Combine encrypted data and auth tag into a single Buffer
+     * @param encryptedData The encrypted data
+     * @param authTag The authentication tag
+     * @returns The combined Buffer
+     */
+    combineEncryptedDataAndTag(encryptedData, authTag) {
+        return Buffer.concat([encryptedData, authTag]);
+    }
+    /**
+     * Combine IV and encrypted data (with optional auth tag) into a single Buffer
+     * @param iv The initialization vector
+     * @param encryptedDataWithTag The encrypted data with auth tag already appended (if applicable)
+     * @returns The combined Buffer
+     */
+    combineIvAndEncryptedData(iv, encryptedDataWithTag) {
+        return Buffer.concat([iv, encryptedDataWithTag]);
+    }
+    /**
+     * Combine IV, encrypted data and auth tag into a single Buffer
+     * @param iv The initialization vector
+     * @param encryptedData The encrypted data
+     * @param authTag The authentication tag
+     * @returns The combined Buffer
+     */
+    combineIvTagAndEncryptedData(iv, encryptedData, authTag) {
+        const encryptedWithTag = this.combineEncryptedDataAndTag(encryptedData, authTag);
+        return this.combineIvAndEncryptedData(iv, encryptedWithTag);
+    }
+    /**
+     * Split combined encrypted data back into its components
+     * @param combinedData The combined data containing IV, encrypted data, and optionally auth tag
+     * @param hasAuthTag Whether the combined data includes an authentication tag
+     * @returns Object containing the split components
+     */
+    splitEncryptedData(combinedData, hasAuthTag = true) {
+        const ivLength = this.ivSize;
+        const minLength = ivLength + (hasAuthTag ? 16 : 0);
+        if (combinedData.length < minLength) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_CombinedDataTooShort));
+        }
+        const iv = combinedData.subarray(0, ivLength);
+        const encryptedDataWithTag = combinedData.subarray(ivLength);
+        return { iv, encryptedDataWithTag };
+    }
+    /**
+     * Decrypt data using AES-GCM
+     * @param iv The initialization vector
+     * @param encryptedData Data to decrypt (with auth tag appended)
+     * @param key Key to use for decryption (must be 16, 24 or 32 bytes for AES)
+     * @param authTag Whether the encrypted data includes an authentication tag
+     * @returns Decrypted data
+     */
+    decrypt(iv, encryptedData, key, authTag = false, aad) {
+        // Security fix 9: Key length validation - must match algorithm requirements
+        const requiredKeyLength = this.keyBits / 8;
+        if (key.length !== requiredKeyLength) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_InvalidAESKeyLength));
+        }
+        // Security fix 10: IV length validation
+        if (iv.length !== 16) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_InvalidIVLength));
+        }
+        // Security fix 13: Decrypt input validation
+        if (encryptedData === null || encryptedData === undefined) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_CannotDecryptEmptyData));
+        }
+        if (encryptedData.length > 0x7FFFFFFF) {
+            const pluginEngine = (0, i18n_1.getEciesPluginI18nEngine)();
+            throw new Error(pluginEngine.translate(i18n_1.NodeEciesComponentId, i18n_1.NodeEciesStringKey.Error_MessageTooLarge));
+        }
+        const decipher = (0, crypto_1.createDecipheriv)(this.keyringAlgorithmConfiguration, key, iv);
+        if (aad) {
+            decipher.setAAD(aad);
+        }
+        const tagLength = 16;
+        const tag = encryptedData.subarray(-tagLength);
+        const ciphertext = encryptedData.subarray(0, -tagLength);
+        decipher.setAuthTag(tag);
+        return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    }
+}
+exports.AESGCMService = AESGCMService;
+//# sourceMappingURL=aes-gcm.js.map

package/src/services/aes-gcm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes-gcm.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-ecies-lib/src/services/aes-gcm.ts"],"names":[],"mappings":";;;AAAA,mCAAuE;AAGvE,kCAIiB;AACjB,4CAAyC;AAEzC,MAAa,aAAa;IACP,aAAa,CAAS;IACtB,IAAI,CAAS;IACb,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,6BAA6B,CAAiB;IAE/D,YAAY,YAAwB,qBAAS;QAC3C,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC;QAC5C,IAAI,CAAC,6BAA6B;YAChC,SAAS,CAAC,+BAA+B,CAAC;IAC9C,CAAC;IAED,IAAW,cAAc;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACI,OAAO,CACZ,IAAY,EACZ,GAAW,EACX,UAAmB,KAAK,EACxB,GAAY;QAEZ,4EAA4E;QAC5E,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,yBAAyB,CAC7C,CACF,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,4BAA4B,CAChD,CACF,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,qBAAqB,CACzC,CACF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAE3E,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,EAAE;YACN,GAAG,EAAE,GAAG;SACT,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,0BAA0B,CAC/B,aAAqB,EACrB,OAAe;QAEf,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACI,yBAAyB,CAC9B,EAAU,EACV,oBAA4B;QAE5B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;OAMG;IACI,4BAA4B,CACjC,EAAU,EACV,aAAqB,EACrB,OAAe;QAEf,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CACtD,aAAa,EACb,OAAO,CACR,CAAC;QACF,OAAO,IAAI,CAAC,yBAAyB,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;OAKG;IACI,kBAAkB,CACvB,YAAoB,EACpB,aAAsB,IAAI;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7B,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnD,IAAI,YAAY,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAEhD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,0BAA0B,CAC9C,CACF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,oBAAoB,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE7D,OAAO,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACI,OAAO,CACZ,EAAU,EACV,aAAqB,EACrB,GAAW,EACX,UAAmB,KAAK,EACxB,GAAY;QAEZ,4EAA4E;QAC5E,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,yBAAyB,CAC7C,CACF,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,qBAAqB,CACzC,CACF,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,4BAA4B,CAChD,CACF,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACtC,MAAM,YAAY,GAAG,IAAA,+BAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,SAAS,CACpB,2BAAoB,EACpB,yBAAkB,CAAC,qBAAqB,CACzC,CACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAC/B,IAAI,CAAC,6BAA6B,EAClC,GAAG,EACH,EAAE,CACH,CAAC;QAEF,IAAI,GAAG,EAAE,CAAC;YACR,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QAEzD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AAzPD,sCAyPC"}

package/src/services/chunk-processor.d.ts

@@ -0,0 +1,15 @@
+import { IEncryptedChunk } from '../interfaces/encrypted-chunk';
+import { ECIESService } from './ecies/service';
+export declare class ChunkProcessor {
+    private readonly ecies;
+    constructor(ecies: ECIESService);
+    encryptChunk(data: Buffer, publicKey: Buffer, chunkIndex: number, isLast: boolean, includeChecksums?: boolean): Promise<IEncryptedChunk>;
+    decryptChunk(chunkData: Buffer, privateKey: Buffer): Promise<{
+        data: Buffer;
+        header: {
+            index: number;
+            flags: number;
+        };
+    }>;
+}
+//# sourceMappingURL=chunk-processor.d.ts.map

package/src/services/chunk-processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-processor.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-ecies-lib/src/services/chunk-processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAEnC,YAAY,CACvB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,OAAO,EACf,gBAAgB,GAAE,OAAe,GAChC,OAAO,CAAC,eAAe,CAAC;IAkBd,YAAY,CACvB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAavE"}

package/src/services/chunk-processor.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChunkProcessor = void 0;
+class ChunkProcessor {
+    ecies;
+    constructor(ecies) {
+        this.ecies = ecies;
+    }
+    async encryptChunk(data, publicKey, chunkIndex, isLast, includeChecksums = false) {
+        const encrypted = this.ecies.encryptSimpleOrSingle(false, publicKey, data);
+        // Prepend chunk header: 4 bytes index + 1 byte flags
+        const header = Buffer.alloc(5);
+        header.writeUInt32BE(chunkIndex, 0);
+        header.writeUInt8(isLast ? 1 : 0, 4);
+        const dataWithHeader = Buffer.concat([header, encrypted]);
+        return {
+            index: chunkIndex,
+            data: dataWithHeader,
+            isLast,
+            metadata: includeChecksums ? { totalChunks: chunkIndex + 1 } : undefined,
+        };
+    }
+    async decryptChunk(chunkData, privateKey) {
+        // Extract chunk header: 4 bytes index + 1 byte flags
+        const index = chunkData.readUInt32BE(0);
+        const flags = chunkData.readUInt8(4);
+        const encrypted = chunkData.subarray(5);
+        const decrypted = this.ecies.decryptSimpleOrSingleWithHeader(false, privateKey, encrypted);
+        return {
+            data: decrypted,
+            header: { index, flags },
+        };
+    }
+}
+exports.ChunkProcessor = ChunkProcessor;
+//# sourceMappingURL=chunk-processor.js.map

package/src/services/chunk-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-processor.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-ecies-lib/src/services/chunk-processor.ts"],"names":[],"mappings":";;;AAGA,MAAa,cAAc;IACI;IAA7B,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAE7C,KAAK,CAAC,YAAY,CACvB,IAAY,EACZ,SAAiB,EACjB,UAAkB,EAClB,MAAe,EACf,mBAA4B,KAAK;QAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAE3E,qDAAqD;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAErC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAE1D,OAAO;YACL,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,SAAiB,EACjB,UAAkB;QAElB,qDAAqD;QACrD,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAE3F,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;SACzB,CAAC;IACJ,CAAC;CACF;AA3CD,wCA2CC"}

package/src/services/ecies/crypto-core.d.ts

@@ -0,0 +1,104 @@
+import { IECIESConfig, IECIESConstants, SecureString } from '@digitaldefiance/ecies-lib';
+import { Wallet } from '@ethereumjs/wallet';
+import { ISimpleKeyPairBuffer } from '../../interfaces/simple-keypair-buffer';
+import { IWalletSeed } from '../../interfaces/wallet-seed';
+/**
+ * Core encryption and decryption functions for ECIES
+ * Includes coverage for simple and single modes, does not cover multiple mode which is in a separate module
+ */
+export declare class EciesCryptoCore {
+    protected readonly _config: IECIESConfig;
+    protected readonly _consts: IECIESConstants;
+    get config(): IECIESConfig;
+    get consts(): IECIESConstants;
+    constructor(config: IECIESConfig, eciesParams?: IECIESConstants);
+    /**
+     * Validates and normalizes a public key for ECIES operations
+     * @param publicKey The public key to normalize
+     * @returns Properly formatted public key
+     */
+    normalizePublicKey(publicKey: Buffer): Buffer;
+    /**
+     * Generate a new mnemonic
+     * @returns {SecureString} The new mnemonic
+     */
+    generateNewMnemonic(): SecureString;
+    /**
+     * Generate a new wallet from a seed
+     * @param seed {Buffer} The seed to generate the wallet from
+     * @returns {Wallet} The new wallet
+     */
+    walletFromSeed(seed: Buffer): Wallet;
+    /**
+     * Generate a new wallet and seed from a mnemonic
+     * @param mnemonic {SecureString} The mnemonic to generate the wallet and seed from
+     * @returns {IWalletSeed} The new wallet and seed
+     */
+    walletAndSeedFromMnemonic(mnemonic: SecureString): IWalletSeed;
+    /**
+     * Generate a new wallet and seed from a mnemonic
+     * @param wallet {Wallet} The wallet to generate the key pair from
+     * @returns {ISimpleKeyPairBuffer} The new key pair
+     */
+    walletToSimpleKeyPairBuffer(wallet: Wallet): ISimpleKeyPairBuffer;
+    /**
+     * Create a simple key pair from a seed
+     * @param seed {Buffer} The seed to generate the key pair from
+     * @returns {ISimpleKeyPairBuffer} The new key pair
+     */
+    seedToSimpleKeyPairBuffer(seed: Buffer): ISimpleKeyPairBuffer;
+    /**
+     * Create a simple key pair from a mnemonic
+     * @param mnemonic {SecureString} The mnemonic to generate the key pair from
+     * @returns {ISimpleKeyPairBuffer} The new key pair
+     */
+    mnemonicToSimpleKeyPairBuffer(mnemonic: SecureString): ISimpleKeyPairBuffer;
+    /**
+     * Generate a random private key
+     * @returns {Buffer} The new private key
+     */
+    generatePrivateKey(): Buffer;
+    /**
+     * Get public key from private key
+     * @param privateKey {Buffer} The private key
+     * @returns {Buffer} The public key
+     */
+    getPublicKey(privateKey: Buffer): Buffer;
+    /**
+     * Generate ephemeral key pair for ECIES
+     * @returns {Promise<ISimpleKeyPairBuffer>} The key pair
+     */
+    generateEphemeralKeyPair(): Promise<{
+        privateKey: Buffer;
+        publicKey: Buffer;
+    }>;
+    /**
+     * Compute ECDH shared secret
+     * @param privateKey {Buffer} The private key
+     * @param publicKey {Buffer} The public key
+     * @returns {Buffer} The shared secret
+     */
+    computeSharedSecret(privateKey: Buffer, publicKey: Buffer): Buffer;
+    /**
+     * Derive a symmetric key from a shared secret using HKDF
+     * @param sharedSecret The shared secret (ECDH output)
+     * @param salt Optional salt
+     * @param info Optional context info
+     * @param length Length of the output key (default 32 for AES-256)
+     */
+    deriveSharedKey(sharedSecret: Buffer, salt?: Buffer, info?: Buffer, length?: number): Buffer;
+    /**
+     * Sign a message using ECDSA
+     * @param privateKey The private key to sign with
+     * @param message The message to sign
+     */
+    sign(privateKey: Buffer, message: Buffer): Buffer;
+    /**
+     * Verify a signature using ECDSA
+     * @param publicKey The public key to verify with
+     * @param message The message that was signed
+     * @param signature The signature to verify
+     */
+    verify(publicKey: Buffer, message: Buffer, signature: Buffer): boolean;
+}
+//# sourceMappingURL=crypto-core.d.ts.map

package/src/services/ecies/crypto-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-core.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-node-ecies-lib/src/services/ecies/crypto-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,YAAY,EACZ,eAAe,EAEf,YAAY,EACb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAS,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAUnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAG3D;;;GAGG;AACH,qBAAa,eAAe;IAC1B,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACzC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAC5C,IAAW,MAAM,IAAI,YAAY,CAEhC;IAED,IAAW,MAAM,IAAI,eAAe,CAEnC;gBAGC,MAAM,EAAE,YAAY,EACpB,WAAW,GAAE,eAAiC;IAMhD;;;;OAIG;IACI,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IA+EpD;;;OAGG;IACI,mBAAmB,IAAI,YAAY;IAI1C;;;;OAIG;IACI,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAO3C;;;;OAIG;IACI,yBAAyB,CAAC,QAAQ,EAAE,YAAY,GAAG,WAAW;IAiBrE;;;;OAIG;IACI,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB;IAUxE;;;;OAIG;IACI,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB;IAKpE;;;;OAIG;IACI,6BAA6B,CAClC,QAAQ,EAAE,YAAY,GACrB,oBAAoB;IAKvB;;;OAGG;IACI,kBAAkB,IAAI,MAAM;IAInC;;;;OAIG;IACI,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAY/C;;;OAGG;IACU,wBAAwB,IAAI,OAAO,CAAC;QAC/C,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAMF;;;;;OAKG;IACI,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAyBzE;;;;;;OAMG;IACI,eAAe,CACpB,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE,MAAwB,EAC9B,IAAI,GAAE,MAAwB,EAC9B,MAAM,GAAE,MAAW,GAClB,MAAM;IAIT;;;;OAIG;IACI,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAMxD;;;;;OAKG;IACI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;CAQ9E"}

package/src/services/ecies/crypto-core.js

@@ -0,0 +1,237 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EciesCryptoCore = void 0;
+const ecies_lib_1 = require("@digitaldefiance/ecies-lib");
+const wallet_1 = require("@ethereumjs/wallet");
+const bip39_1 = require("bip39");
+const secp256k1_js_1 = require("ethereum-cryptography/secp256k1.js");
+const crypto_1 = require("crypto");
+const ecies_i18n_factory_1 = require("../../i18n/ecies-i18n-factory");
+const constants_1 = require("../../constants");
+/**
+ * Core encryption and decryption functions for ECIES
+ * Includes coverage for simple and single modes, does not cover multiple mode which is in a separate module
+ */
+class EciesCryptoCore {
+    _config;
+    _consts;
+    get config() {
+        return this._config;
+    }
+    get consts() {
+        return this._consts;
+    }
+    constructor(config, eciesParams = constants_1.Constants.ECIES) {
+        this._config = config;
+        this._consts = eciesParams;
+    }
+    /**
+     * Validates and normalizes a public key for ECIES operations
+     * @param publicKey The public key to normalize
+     * @returns Properly formatted public key
+     */
+    normalizePublicKey(publicKey) {
+        if (!publicKey) {
+            const pluginEngine = (0, ecies_i18n_factory_1.getEciesPluginI18nEngine)();
+            throw new ecies_lib_1.ECIESError(ecies_lib_1.ECIESErrorTypeEnum.InvalidEphemeralPublicKey, undefined, undefined, {
+                error: pluginEngine.translate(ecies_i18n_factory_1.NodeEciesComponentId, ecies_i18n_factory_1.NodeEciesStringKey.Error_InvalidPublicKey),
+            });
+        }
+        const keyLength = publicKey.length;
+        // console.log('[normalizePublicKey] Magic:', this._consts.PUBLIC_KEY_MAGIC);
+        // Check for compressed key (33 bytes, starts with 0x02 or 0x03)
+        if (keyLength === 33 &&
+            (publicKey[0] === 0x02 || publicKey[0] === 0x03)) {
+            return publicKey;
+        }
+        // Check for uncompressed key (65 bytes, starts with 0x04)
+        if (keyLength === 65 &&
+            publicKey[0] === 0x04) {
+            return publicKey;
+        }
+        // Raw key without prefix (64 bytes) - add the 0x04 prefix
+        if (keyLength === 64) {
+            return Buffer.concat([
+                Buffer.from([0x04]),
+                publicKey,
+            ]);
+        }
+        // Raw key without prefix (32 bytes) - add the 0x02 prefix (assuming even Y)
+        // Note: This is ambiguous for compressed keys as we don't know Y parity.
+        // But if we assume it's a raw X coordinate, we might default to 0x02?
+        // Actually, RAW_PUBLIC_KEY_LENGTH is 32.
+        if (keyLength === this._consts.RAW_PUBLIC_KEY_LENGTH) {
+            // If we only have X, we can't fully reconstruct without knowing Y parity.
+            // But maybe the intention of RAW_PUBLIC_KEY_LENGTH was for uncompressed without prefix (64 bytes)?
+            // The constants say RAW_PUBLIC_KEY_LENGTH = 32.
+            // So it expects X coordinate only.
+            // We can try to prepend 0x02.
+            return Buffer.concat([
+                Buffer.from([this._consts.PUBLIC_KEY_MAGIC]),
+                publicKey,
+            ]);
+        }
+        const pluginEngine = (0, ecies_i18n_factory_1.getEciesPluginI18nEngine)();
+        // Invalid format
+        throw new ecies_lib_1.ECIESError(ecies_lib_1.ECIESErrorTypeEnum.InvalidEphemeralPublicKey, undefined, undefined, {
+            error: pluginEngine.translate(ecies_i18n_factory_1.NodeEciesComponentId, ecies_i18n_factory_1.NodeEciesStringKey.Error_InvalidPublicKeyFormat),
+            keyLength: String(keyLength),
+            expectedLength64: String(this._consts.RAW_PUBLIC_KEY_LENGTH),
+            expectedLength65: String(this._consts.PUBLIC_KEY_LENGTH),
+            keyPrefix: keyLength > 0 ? String(publicKey[0]) : 'N/A',
+            expectedPrefix: String(this._consts.PUBLIC_KEY_MAGIC),
+        });
+    }
+    /**
+     * Generate a new mnemonic
+     * @returns {SecureString} The new mnemonic
+     */
+    generateNewMnemonic() {
+        return new ecies_lib_1.SecureString((0, bip39_1.generateMnemonic)(this._config.mnemonicStrength));
+    }
+    /**
+     * Generate a new wallet from a seed
+     * @param seed {Buffer} The seed to generate the wallet from
+     * @returns {Wallet} The new wallet
+     */
+    walletFromSeed(seed) {
+        const hdWallet = wallet_1.hdkey.EthereumHDKey.fromMasterSeed(seed);
+        return hdWallet
+            .derivePath(this._config.primaryKeyDerivationPath)
+            .getWallet();
+    }
+    /**
+     * Generate a new wallet and seed from a mnemonic
+     * @param mnemonic {SecureString} The mnemonic to generate the wallet and seed from
+     * @returns {IWalletSeed} The new wallet and seed
+     */
+    walletAndSeedFromMnemonic(mnemonic) {
+        if (!mnemonic.value || !(0, bip39_1.validateMnemonic)(mnemonic.value)) {
+            throw new ecies_lib_1.ECIESError(ecies_lib_1.ECIESErrorTypeEnum.InvalidMnemonic, (0, ecies_i18n_factory_1.createEciesTranslationEngine)());
+        }
+        const seed = (0, bip39_1.mnemonicToSeedSync)(mnemonic.value);
+        const wallet = this.walletFromSeed(seed);
+        return {
+            seed: new ecies_lib_1.SecureBuffer(seed),
+            wallet,
+        };
+    }
+    /**
+     * Generate a new wallet and seed from a mnemonic
+     * @param wallet {Wallet} The wallet to generate the key pair from
+     * @returns {ISimpleKeyPairBuffer} The new key pair
+     */
+    walletToSimpleKeyPairBuffer(wallet) {
+        const privateKey = Buffer.from(wallet.getPrivateKey());
+        const publicKey = this.getPublicKey(privateKey);
+        return {
+            privateKey,
+            publicKey,
+        };
+    }
+    /**
+     * Create a simple key pair from a seed
+     * @param seed {Buffer} The seed to generate the key pair from
+     * @returns {ISimpleKeyPairBuffer} The new key pair
+     */
+    seedToSimpleKeyPairBuffer(seed) {
+        const wallet = this.walletFromSeed(seed);
+        return this.walletToSimpleKeyPairBuffer(wallet);
+    }
+    /**
+     * Create a simple key pair from a mnemonic
+     * @param mnemonic {SecureString} The mnemonic to generate the key pair from
+     * @returns {ISimpleKeyPairBuffer} The new key pair
+     */
+    mnemonicToSimpleKeyPairBuffer(mnemonic) {
+        const { seed } = this.walletAndSeedFromMnemonic(mnemonic);
+        return this.seedToSimpleKeyPairBuffer(Buffer.from(seed.value));
+    }
+    /**
+     * Generate a random private key
+     * @returns {Buffer} The new private key
+     */
+    generatePrivateKey() {
+        return Buffer.from(secp256k1_js_1.secp256k1.utils.randomPrivateKey());
+    }
+    /**
+     * Get public key from private key
+     * @param privateKey {Buffer} The private key
+     * @returns {Buffer} The public key
+     */
+    getPublicKey(privateKey) {
+        // Security fix 2: Private key validation
+        if (privateKey.every(byte => byte === 0)) {
+            throw new ecies_lib_1.ECIESError(ecies_lib_1.ECIESErrorTypeEnum.PrivateKeyNotLoaded, (0, ecies_i18n_factory_1.createEciesTranslationEngine)());
+        }
+        const publicKey = secp256k1_js_1.secp256k1.getPublicKey(privateKey, true);
+        return Buffer.from(publicKey);
+    }
+    /**
+     * Generate ephemeral key pair for ECIES
+     * @returns {Promise<ISimpleKeyPairBuffer>} The key pair
+     */
+    async generateEphemeralKeyPair() {
+        const privateKey = this.generatePrivateKey();
+        const publicKey = this.getPublicKey(privateKey);
+        return { privateKey, publicKey };
+    }
+    /**
+     * Compute ECDH shared secret
+     * @param privateKey {Buffer} The private key
+     * @param publicKey {Buffer} The public key
+     * @returns {Buffer} The shared secret
+     */
+    computeSharedSecret(privateKey, publicKey) {
+        // Security fix 1: Public key validation (check normalized key)
+        const normalizedKey = this.normalizePublicKey(publicKey);
+        const isAllZeros = normalizedKey.slice(1).every(byte => byte === 0);
+        if (isAllZeros) {
+            throw new ecies_lib_1.ECIESError(ecies_lib_1.ECIESErrorTypeEnum.InvalidRecipientPublicKey, (0, ecies_i18n_factory_1.createEciesTranslationEngine)());
+        }
+        const sharedSecret = secp256k1_js_1.secp256k1.getSharedSecret(privateKey, normalizedKey, true);
+        const secret = Buffer.from(sharedSecret.slice(1)); // Remove the 0x02/0x03 prefix
+        // Security fix 3: Shared secret validation
+        if (secret.every(byte => byte === 0)) {
+            throw new ecies_lib_1.ECIESError(ecies_lib_1.ECIESErrorTypeEnum.SecretComputationFailed, (0, ecies_i18n_factory_1.createEciesTranslationEngine)());
+        }
+        return secret;
+    }
+    /**
+     * Derive a symmetric key from a shared secret using HKDF
+     * @param sharedSecret The shared secret (ECDH output)
+     * @param salt Optional salt
+     * @param info Optional context info
+     * @param length Length of the output key (default 32 for AES-256)
+     */
+    deriveSharedKey(sharedSecret, salt = Buffer.alloc(0), info = Buffer.alloc(0), length = 32) {
+        return Buffer.from((0, crypto_1.hkdfSync)('sha256', sharedSecret, salt, info, length));
+    }
+    /**
+     * Sign a message using ECDSA
+     * @param privateKey The private key to sign with
+     * @param message The message to sign
+     */
+    sign(privateKey, message) {
+        const hash = (0, crypto_1.createHash)('sha256').update(message).digest();
+        const signature = secp256k1_js_1.secp256k1.sign(hash, privateKey);
+        return Buffer.from(signature.toCompactRawBytes());
+    }
+    /**
+     * Verify a signature using ECDSA
+     * @param publicKey The public key to verify with
+     * @param message The message that was signed
+     * @param signature The signature to verify
+     */
+    verify(publicKey, message, signature) {
+        const hash = (0, crypto_1.createHash)('sha256').update(message).digest();
+        try {
+            return secp256k1_js_1.secp256k1.verify(signature, hash, publicKey);
+        }
+        catch (e) {
+            return false;
+        }
+    }
+}
+exports.EciesCryptoCore = EciesCryptoCore;
+//# sourceMappingURL=crypto-core.js.map

package/src/services/ecies/crypto-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-core.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-node-ecies-lib/src/services/ecies/crypto-core.ts"],"names":[],"mappings":";;;AAAA,0DAOoC;AACpC,+CAAmD;AACnD,iCAA+E;AAC/E,qEAA+D;AAC/D,mCAA8C;AAC9C,sEAKuC;AAGvC,+CAA4C;AAE5C;;;GAGG;AACH,MAAa,eAAe;IACP,OAAO,CAAe;IACtB,OAAO,CAAkB;IAC5C,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,YACE,MAAoB,EACpB,cAA+B,qBAAS,CAAC,KAAK;QAE9C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACI,kBAAkB,CAAC,SAAiB;QACzC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,IAAA,6CAAwB,GAAE,CAAC;YAChD,MAAM,IAAI,sBAAU,CAClB,8BAAkB,CAAC,yBAAyB,EAC5C,SAAS,EACT,SAAS,EACT;gBACE,KAAK,EAAE,YAAY,CAAC,SAAS,CAC3B,yCAAoB,EACpB,uCAAkB,CAAC,sBAAsB,CAC1C;aACF,CACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC;QACnC,6EAA6E;QAE7E,gEAAgE;QAChE,IACE,SAAS,KAAK,EAAE;YAChB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAChD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,0DAA0D;QAC1D,IACE,SAAS,KAAK,EAAE;YAChB,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EACrB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,0DAA0D;QAC1D,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAC5E,yEAAyE;QACzE,sEAAsE;QACtE,yCAAyC;QACzC,IAAI,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpD,0EAA0E;YAC1E,mGAAmG;YACnG,gDAAgD;YAChD,mCAAmC;YACnC,8BAA8B;YAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC5C,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,6CAAwB,GAAE,CAAC;QAChD,iBAAiB;QACjB,MAAM,IAAI,sBAAU,CAClB,8BAAkB,CAAC,yBAAyB,EAC5C,SAAS,EACT,SAAS,EACT;YACE,KAAK,EAAE,YAAY,CAAC,SAAS,CAC3B,yCAAoB,EACpB,uCAAkB,CAAC,4BAA4B,CAChD;YACD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;YAC5B,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC;YAC5D,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACxD,SAAS,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;YACvD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;SACtD,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,mBAAmB;QACxB,OAAO,IAAI,wBAAY,CAAC,IAAA,wBAAgB,EAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,IAAY;QAChC,MAAM,QAAQ,GAAG,cAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,QAAQ;aACZ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;aACjD,SAAS,EAAE,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACI,yBAAyB,CAAC,QAAsB;QACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAA,wBAAgB,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,sBAAU,CAClB,8BAAkB,CAAC,eAAe,EAClC,IAAA,iDAA4B,GAAE,CAC/B,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,0BAAkB,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEzC,OAAO;YACL,IAAI,EAAE,IAAI,wBAAY,CAAC,IAAI,CAAC;YAC5B,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,MAAc;QAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAEhD,OAAO;YACL,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,yBAAyB,CAAC,IAAY;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACI,6BAA6B,CAClC,QAAsB;QAEtB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACI,kBAAkB;QACvB,OAAO,MAAM,CAAC,IAAI,CAAC,wBAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,UAAkB;QACpC,yCAAyC;QACzC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,sBAAU,CAClB,8BAAkB,CAAC,mBAAmB,EACtC,IAAA,iDAA4B,GAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,wBAAS,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,wBAAwB;QAInC,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACI,mBAAmB,CAAC,UAAkB,EAAE,SAAiB;QAC9D,+DAA+D;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,sBAAU,CAClB,8BAAkB,CAAC,yBAAyB,EAC5C,IAAA,iDAA4B,GAAE,CAC/B,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,wBAAS,CAAC,eAAe,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B;QAEjF,2CAA2C;QAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,sBAAU,CAClB,8BAAkB,CAAC,uBAAuB,EAC1C,IAAA,iDAA4B,GAAE,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACI,eAAe,CACpB,YAAoB,EACpB,OAAe,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAC9B,OAAe,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAC9B,SAAiB,EAAE;QAEnB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAA,iBAAQ,EAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED;;;;OAIG;IACI,IAAI,CAAC,UAAkB,EAAE,OAAe;QAC7C,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,wBAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,SAAiB,EAAE,OAAe,EAAE,SAAiB;QACjE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,wBAAS,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AApSD,0CAoSC"}

package/src/services/ecies/file.d.ts

@@ -0,0 +1,30 @@
+import { ECIESService } from './service';
+interface ChunkedFileHeader {
+    version: number;
+    chunkSize: number;
+    totalChunks: number;
+    originalSize: number;
+}
+export declare class EciesFileService {
+    protected readonly eciesService: ECIESService;
+    protected readonly userPrivateKey: Buffer;
+    protected readonly config: {
+        chunkSize: number;
+        headerSize: number;
+    };
+    constructor(eciesService: ECIESService, userPrivateKey: Buffer, config?: {
+        chunkSize: number;
+        headerSize: number;
+    });
+    decryptFile(encryptedData: Buffer): Buffer;
+    encryptFileFromPath(filePath: string, recipientPublicKey: Buffer): Buffer;
+    decryptFileToPath(encryptedData: Buffer, outputPath: string): void;
+    protected serializeHeader(header: ChunkedFileHeader): Buffer;
+    protected deserializeHeader(data: Buffer): ChunkedFileHeader;
+    protected parseEncryptedFile(encryptedData: Buffer): {
+        header: ChunkedFileHeader;
+        chunks: Buffer[];
+    };
+}
+export {};
+//# sourceMappingURL=file.d.ts.map

package/src/services/ecies/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-node-ecies-lib/src/services/ecies/file.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,UAAU,iBAAiB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,gBAAgB;IAC3B,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAC1C,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;gBAGnE,YAAY,EAAE,YAAY,EAC1B,cAAc,EAAE,MAAM,EACtB,MAAM,GAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAG9C;IAOH,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;IAuB1C,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM;IAyCzE,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAwBlE,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM;IAS5D,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB;IAS5D,SAAS,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG;QACnD,MAAM,EAAE,iBAAiB,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB;CAiCF"}