@enclave-technologies/pqc-primitives 0.1.0

package/dist/nodejs/enclave_pqc_primitives_wasm.cjs

@@ -0,0 +1,873 @@
+/* @ts-self-types="./enclave_pqc_primitives_wasm.d.ts" */
+
+/**
+ * Canonical suite identifier matching the Rust crate (Category 5 algorithms).
+ * @returns {string}
+ */
+function ENCLAVE_PQ_SUITE_ID() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const ret = wasm.ENCLAVE_PQ_SUITE_ID();
+        deferred1_0 = ret[0];
+        deferred1_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+}
+exports.ENCLAVE_PQ_SUITE_ID = ENCLAVE_PQ_SUITE_ID;
+
+/**
+ * Domain-separation prefix for the Enclave labeled KDF.
+ * @returns {string}
+ */
+function KDF_LABEL_PREFIX() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const ret = wasm.KDF_LABEL_PREFIX();
+        deferred1_0 = ret[0];
+        deferred1_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+}
+exports.KDF_LABEL_PREFIX = KDF_LABEL_PREFIX;
+
+/**
+ * Algorithm identifier (`"Argon2id"`).
+ * @returns {string}
+ */
+function PWHASH_ALGORITHM() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const ret = wasm.PWHASH_ALGORITHM();
+        deferred1_0 = ret[0];
+        deferred1_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+}
+exports.PWHASH_ALGORITHM = PWHASH_ALGORITHM;
+
+/**
+ * Derived key length in bytes (matches AES-256-GCM key size).
+ * @returns {number}
+ */
+function PWHASH_OUTPUT_BYTES() {
+    const ret = wasm.PWHASH_OUTPUT_BYTES();
+    return ret >>> 0;
+}
+exports.PWHASH_OUTPUT_BYTES = PWHASH_OUTPUT_BYTES;
+
+/**
+ * Salt length in bytes produced by [`generate_salt`].
+ * @returns {number}
+ */
+function PWHASH_SALT_BYTES() {
+    const ret = wasm.PWHASH_SALT_BYTES();
+    return ret >>> 0;
+}
+exports.PWHASH_SALT_BYTES = PWHASH_SALT_BYTES;
+
+/**
+ * OWASP baseline Argon2id params: `{ memoryCostKib, iterations, parallelism }`.
+ *
+ * Sourced from the OWASP Password Storage Cheat Sheet (19 MiB / t=2 / p=1).
+ * Slow and memory-hard by design — lowering these for login latency is a
+ * security tradeoff, not a free optimization.
+ * @returns {any}
+ */
+function RECOMMENDED_PARAMS() {
+    const ret = wasm.RECOMMENDED_PARAMS();
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.RECOMMENDED_PARAMS = RECOMMENDED_PARAMS;
+
+/**
+ * Decrypt AES-256-GCM ciphertext (including trailing tag).
+ *
+ * Throws on authentication failure (`AeadFailure: ...`).
+ * @param {Uint8Array} key
+ * @param {Uint8Array} nonce
+ * @param {Uint8Array} ciphertext
+ * @param {Uint8Array} aad
+ * @returns {Uint8Array}
+ */
+function aeadDecrypt(key, nonce, ciphertext, aad) {
+    const ptr0 = passArray8ToWasm0(key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(nonce, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passArray8ToWasm0(ciphertext, wasm.__wbindgen_malloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ptr3 = passArray8ToWasm0(aad, wasm.__wbindgen_malloc);
+    const len3 = WASM_VECTOR_LEN;
+    const ret = wasm.aeadDecrypt(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v5 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v5;
+}
+exports.aeadDecrypt = aeadDecrypt;
+
+/**
+ * Encrypt with AES-256-GCM under an explicit key and nonce.
+ *
+ * Returns `ciphertext || tag` (16-byte tag suffix). Callers must ensure
+ * `(key, nonce)` uniqueness.
+ * @param {Uint8Array} key
+ * @param {Uint8Array} nonce
+ * @param {Uint8Array} plaintext
+ * @param {Uint8Array} aad
+ * @returns {Uint8Array}
+ */
+function aeadEncrypt(key, nonce, plaintext, aad) {
+    const ptr0 = passArray8ToWasm0(key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(nonce, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passArray8ToWasm0(plaintext, wasm.__wbindgen_malloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ptr3 = passArray8ToWasm0(aad, wasm.__wbindgen_malloc);
+    const len3 = WASM_VECTOR_LEN;
+    const ret = wasm.aeadEncrypt(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v5 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v5;
+}
+exports.aeadEncrypt = aeadEncrypt;
+
+/**
+ * Cryptographically random 16-byte salt for Argon2id.
+ * @returns {Uint8Array}
+ */
+function generateSalt() {
+    const ret = wasm.generateSalt();
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v1;
+}
+exports.generateSalt = generateSalt;
+
+/**
+ * Return the [`CryptoUsageRecord`] from the last WASM primitive call.
+ *
+ * Shape: `{ algorithm, suiteId, operation, crateVersion }`.
+ * Returns `undefined` if no operation has run yet in this WASM instance.
+ *
+ * This is the CBOM attach point for product layers (Encrypt, etc.). This
+ * binding does not persist or transmit the record.
+ * @returns {any}
+ */
+function getLastUsageRecord() {
+    const ret = wasm.getLastUsageRecord();
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.getLastUsageRecord = getLastUsageRecord;
+
+/**
+ * SHAKE256 over UTF-8 string bytes.
+ * @param {string} value
+ * @param {number} output_len
+ * @returns {Uint8Array}
+ */
+function hashUtf8(value, output_len) {
+    const ptr0 = passStringToWasm0(value, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.hashUtf8(ptr0, len0, output_len);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v2 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v2;
+}
+exports.hashUtf8 = hashUtf8;
+
+/**
+ * Decapsulate an ML-KEM-1024 ciphertext.
+ *
+ * `secret_key` may be a 64-byte seed or a 3168-byte expanded key.
+ * @param {Uint8Array} ciphertext
+ * @param {Uint8Array} secret_key
+ * @returns {Uint8Array}
+ */
+function kemDecapsulate(ciphertext, secret_key) {
+    const ptr0 = passArray8ToWasm0(ciphertext, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(secret_key, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.kemDecapsulate(ptr0, len0, ptr1, len1);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v3 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v3;
+}
+exports.kemDecapsulate = kemDecapsulate;
+
+/**
+ * Encapsulate a shared secret to an ML-KEM-1024 public key.
+ *
+ * Returns `{ ciphertext, sharedSecret }` (1568 / 32 bytes).
+ * @param {Uint8Array} public_key
+ * @returns {any}
+ */
+function kemEncapsulate(public_key) {
+    const ptr0 = passArray8ToWasm0(public_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.kemEncapsulate(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.kemEncapsulate = kemEncapsulate;
+
+/**
+ * Deterministic encapsulation for known-answer / KAT compliance.
+ *
+ * # Hazmat
+ *
+ * **KATs only.** Production code must call [`kem_encapsulate`].
+ * @param {Uint8Array} public_key
+ * @param {Uint8Array} m
+ * @returns {any}
+ */
+function kemEncapsulateDeterministic(public_key, m) {
+    const ptr0 = passArray8ToWasm0(public_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(m, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.kemEncapsulateDeterministic(ptr0, len0, ptr1, len1);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.kemEncapsulateDeterministic = kemEncapsulateDeterministic;
+
+/**
+ * Expand a 64-byte seed-form secret key to the FIPS expanded encoding
+ * ([`kem::SECRET_KEY_BYTES`] bytes).
+ * @param {Uint8Array} secret_key
+ * @returns {Uint8Array}
+ */
+function kemExpandedSecretKey(secret_key) {
+    const ptr0 = passArray8ToWasm0(secret_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.kemExpandedSecretKey(ptr0, len0);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v2 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v2;
+}
+exports.kemExpandedSecretKey = kemExpandedSecretKey;
+
+/**
+ * Generate a fresh ML-KEM-1024 keypair (includes PCT).
+ *
+ * Returns `{ publicKey, secretKey }` where `secretKey` is the preferred
+ * seed form ([`kem::SECRET_KEY_SEED_BYTES`] = 64). Expanded size is
+ * [`kem::SECRET_KEY_BYTES`] = 3168 — use [`kem_expanded_secret_key`].
+ *
+ * Throws `PairwiseConsistencyFailureError` if the PCT fails.
+ * @returns {any}
+ */
+function kemGenerateKeypair() {
+    const ret = wasm.kemGenerateKeypair();
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.kemGenerateKeypair = kemGenerateKeypair;
+
+/**
+ * Derive an ML-KEM-1024 keypair from a 64-byte seed (`d || z`). Includes PCT.
+ * @param {Uint8Array} seed
+ * @returns {any}
+ */
+function kemKeypairFromSeed(seed) {
+    const ptr0 = passArray8ToWasm0(seed, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.kemKeypairFromSeed(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.kemKeypairFromSeed = kemKeypairFromSeed;
+
+/**
+ * Derive key material with `enclave-kdf-v1` labeled SHAKE256.
+ *
+ * Throws `InvalidParameter` on empty `label` or `length == 0`.
+ * @param {string} label
+ * @param {Uint8Array} ikm
+ * @param {number} length
+ * @returns {Uint8Array}
+ */
+function labeledKdf(label, ikm, length) {
+    const ptr0 = passStringToWasm0(label, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(ikm, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.labeledKdf(ptr0, len0, ptr1, len1, length);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v3 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v3;
+}
+exports.labeledKdf = labeledKdf;
+
+/**
+ * [`labeled_kdf`] with a 32-byte output.
+ * @param {string} label
+ * @param {Uint8Array} ikm
+ * @returns {Uint8Array}
+ */
+function labeledKdf32(label, ikm) {
+    const ptr0 = passStringToWasm0(label, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(ikm, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.labeledKdf32(ptr0, len0, ptr1, len1);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v3 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v3;
+}
+exports.labeledKdf32 = labeledKdf32;
+
+/**
+ * Derive a 32-byte key from a password + salt with Argon2id.
+ *
+ * `params` must be `{ memoryCostKib, iterations, parallelism }` (see
+ * [`recommended_params`]). Throws on empty password / wrong salt length /
+ * invalid costs.
+ *
+ * This call is intentionally slow (~tens–hundreds of ms depending on host).
+ * That cost is the offline brute-force defense — do not lower params casually.
+ * @param {Uint8Array} password
+ * @param {Uint8Array} salt
+ * @param {any} params
+ * @returns {Uint8Array}
+ */
+function pwhashDeriveKey(password, salt, params) {
+    const ptr0 = passArray8ToWasm0(password, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(salt, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.pwhashDeriveKey(ptr0, len0, ptr1, len1, params);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v3 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v3;
+}
+exports.pwhashDeriveKey = pwhashDeriveKey;
+
+/**
+ * Run known-answer CASTs for ML-KEM-1024, ML-DSA-87, and Argon2id.
+ *
+ * Throws `SelfTestFailureError` if any CAST fails. Pair-wise consistency is
+ * already enforced inside key generation — this is the power-on / module-entry
+ * known-answer path. The Argon2id CAST is slower (memory-hard by design).
+ */
+function runSelfTests() {
+    const ret = wasm.runSelfTests();
+    if (ret[1]) {
+        throw takeFromExternrefTable0(ret[0]);
+    }
+}
+exports.runSelfTests = runSelfTests;
+
+/**
+ * One-shot SHAKE256 hash of `input` into `output_len` bytes.
+ * @param {Uint8Array} input
+ * @param {number} output_len
+ * @returns {Uint8Array}
+ */
+function shake256(input, output_len) {
+    const ptr0 = passArray8ToWasm0(input, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.shake256(ptr0, len0, output_len);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v2 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v2;
+}
+exports.shake256 = shake256;
+
+/**
+ * Expand a 32-byte seed-form secret key to the FIPS expanded encoding
+ * ([`sig::SECRET_KEY_BYTES`] bytes).
+ * @param {Uint8Array} secret_key
+ * @returns {Uint8Array}
+ */
+function sigExpandedSecretKey(secret_key) {
+    const ptr0 = passArray8ToWasm0(secret_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.sigExpandedSecretKey(ptr0, len0);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v2 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v2;
+}
+exports.sigExpandedSecretKey = sigExpandedSecretKey;
+
+/**
+ * Generate a fresh ML-DSA-87 keypair (includes PCT).
+ *
+ * Returns `{ publicKey, secretKey }` where `secretKey` is the preferred
+ * seed form ([`sig::SECRET_KEY_SEED_BYTES`] = 32). Expanded size is
+ * [`sig::SECRET_KEY_BYTES`] = 4896.
+ *
+ * Throws `PairwiseConsistencyFailureError` if the PCT fails.
+ * @returns {any}
+ */
+function sigGenerateKeypair() {
+    const ret = wasm.sigGenerateKeypair();
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.sigGenerateKeypair = sigGenerateKeypair;
+
+/**
+ * Derive an ML-DSA-87 keypair from a 32-byte seed. Includes PCT.
+ * @param {Uint8Array} seed
+ * @returns {any}
+ */
+function sigKeypairFromSeed(seed) {
+    const ptr0 = passArray8ToWasm0(seed, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.sigKeypairFromSeed(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.sigKeypairFromSeed = sigKeypairFromSeed;
+
+/**
+ * Sign a message with empty context (deterministic ML-DSA-87).
+ *
+ * Empty `message` throws `InvalidLength` (matches Rust).
+ * @param {Uint8Array} secret_key
+ * @param {Uint8Array} message
+ * @returns {Uint8Array}
+ */
+function sigSign(secret_key, message) {
+    const ptr0 = passArray8ToWasm0(secret_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(message, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.sigSign(ptr0, len0, ptr1, len1);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v3 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v3;
+}
+exports.sigSign = sigSign;
+
+/**
+ * Deterministic ML-DSA.Sign with an explicit context (`context.len() <= 255`).
+ *
+ * Empty `message` or `context.len() > 255` throws (matches Rust).
+ * @param {Uint8Array} secret_key
+ * @param {Uint8Array} message
+ * @param {Uint8Array} context
+ * @returns {Uint8Array}
+ */
+function sigSignWithContext(secret_key, message, context) {
+    const ptr0 = passArray8ToWasm0(secret_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(message, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passArray8ToWasm0(context, wasm.__wbindgen_malloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.sigSignWithContext(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
+    }
+    var v4 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v4;
+}
+exports.sigSignWithContext = sigSignWithContext;
+
+/**
+ * Verify an ML-DSA-87 signature (empty context).
+ *
+ * Returns `false` on a cryptographically invalid signature. Throws only for
+ * malformed input lengths / encodings.
+ * @param {Uint8Array} public_key
+ * @param {Uint8Array} message
+ * @param {Uint8Array} signature
+ * @returns {boolean}
+ */
+function sigVerify(public_key, message, signature) {
+    const ptr0 = passArray8ToWasm0(public_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(message, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passArray8ToWasm0(signature, wasm.__wbindgen_malloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.sigVerify(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] !== 0;
+}
+exports.sigVerify = sigVerify;
+
+/**
+ * Verify an ML-DSA-87 signature with an explicit context.
+ *
+ * Returns `false` on cryptographic failure; throws on malformed lengths.
+ * @param {Uint8Array} public_key
+ * @param {Uint8Array} message
+ * @param {Uint8Array} signature
+ * @param {Uint8Array} context
+ * @returns {boolean}
+ */
+function sigVerifyWithContext(public_key, message, signature, context) {
+    const ptr0 = passArray8ToWasm0(public_key, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passArray8ToWasm0(message, wasm.__wbindgen_malloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passArray8ToWasm0(signature, wasm.__wbindgen_malloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ptr3 = passArray8ToWasm0(context, wasm.__wbindgen_malloc);
+    const len3 = WASM_VECTOR_LEN;
+    const ret = wasm.sigVerifyWithContext(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] !== 0;
+}
+exports.sigVerifyWithContext = sigVerifyWithContext;
+
+/**
+ * Overwrite a JS `Uint8Array` in place with zeros.
+ *
+ * # Security note
+ *
+ * Rust-side secret keys are zeroized on `Drop`, but that guarantee **does not**
+ * cross the WASM boundary. Once secret material lives in a JS `Uint8Array`, the
+ * JS garbage collector will not zero it. Call this when you are finished with
+ * long-lived secret buffers.
+ * @param {Uint8Array} buf
+ */
+function zeroize(buf) {
+    wasm.zeroize(buf);
+}
+exports.zeroize = zeroize;
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg___wbindgen_is_function_1ff95bcc5517c252: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_object_a27215656b807791: function(arg0) {
+            const val = arg0;
+            const ret = typeof(val) === 'object' && val !== null;
+            return ret;
+        },
+        __wbg___wbindgen_is_string_ea5e6cc2e4141dfe: function(arg0) {
+            const ret = typeof(arg0) === 'string';
+            return ret;
+        },
+        __wbg___wbindgen_is_undefined_c05833b95a3cf397: function(arg0) {
+            const ret = arg0 === undefined;
+            return ret;
+        },
+        __wbg___wbindgen_number_get_394265ed1e1b84ee: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'number' ? obj : undefined;
+            getDataViewMemory0().setFloat64(arg0 + 8 * 1, isLikeNone(ret) ? 0 : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
+        __wbg___wbindgen_throw_344f42d3211c4765: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_call_a6e5c5dce5018821: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = arg0.call(arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_crypto_38df2bab126b63dc: function(arg0) {
+            const ret = arg0.crypto;
+            return ret;
+        },
+        __wbg_getRandomValues_c44a50d8cfdaebeb: function() { return handleError(function (arg0, arg1) {
+            arg0.getRandomValues(arg1);
+        }, arguments); },
+        __wbg_getRandomValues_cc7f052a444bb2ce: function() { return handleError(function (arg0, arg1) {
+            globalThis.crypto.getRandomValues(getArrayU8FromWasm0(arg0, arg1));
+        }, arguments); },
+        __wbg_get_78f252d074a84d0b: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
+        __wbg_length_1f0964f4a5e2c6d8: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_msCrypto_bd5a034af96bcba6: function(arg0) {
+            const ret = arg0.msCrypto;
+            return ret;
+        },
+        __wbg_new_b667d279fd5aa943: function(arg0, arg1) {
+            const ret = new Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_da52cf8fe3429cb2: function() {
+            const ret = new Object();
+            return ret;
+        },
+        __wbg_new_from_slice_77cdfb7977362f3c: function(arg0, arg1) {
+            const ret = new Uint8Array(getArrayU8FromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_with_length_e6785c33c8e4cce8: function(arg0) {
+            const ret = new Uint8Array(arg0 >>> 0);
+            return ret;
+        },
+        __wbg_node_84ea875411254db1: function(arg0) {
+            const ret = arg0.node;
+            return ret;
+        },
+        __wbg_process_44c7a14e11e9f69e: function(arg0) {
+            const ret = arg0.process;
+            return ret;
+        },
+        __wbg_prototypesetcall_4770620bbe4688a0: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_randomFillSync_6c25eac9869eb53c: function() { return handleError(function (arg0, arg1) {
+            arg0.randomFillSync(arg1);
+        }, arguments); },
+        __wbg_require_b4edbdcf3e2a1ef0: function() { return handleError(function () {
+            const ret = module.require;
+            return ret;
+        }, arguments); },
+        __wbg_set_8535240470bf2500: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = Reflect.set(arg0, arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_set_index_0a2d916cd3658df4: function(arg0, arg1, arg2) {
+            arg0[arg1 >>> 0] = arg2;
+        },
+        __wbg_static_accessor_GLOBAL_4ef717fb391d88b7: function() {
+            const ret = typeof global === 'undefined' ? null : global;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_GLOBAL_THIS_8d1badc68b5a74f4: function() {
+            const ret = typeof globalThis === 'undefined' ? null : globalThis;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_SELF_146583524fe1469b: function() {
+            const ret = typeof self === 'undefined' ? null : self;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_WINDOW_f2829a2234d7819e: function() {
+            const ret = typeof window === 'undefined' ? null : window;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_subarray_3ed232c8a6baee09: function(arg0, arg1, arg2) {
+            const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
+            return ret;
+        },
+        __wbg_versions_276b2795b1c6a219: function(arg0) {
+            const ret = arg0.versions;
+            return ret;
+        },
+        __wbindgen_cast_0000000000000001: function(arg0) {
+            // Cast intrinsic for `F64 -> Externref`.
+            const ret = arg0;
+            return ret;
+        },
+        __wbindgen_cast_0000000000000002: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(Slice(U8)) -> NamedExternref("Uint8Array")`.
+            const ret = getArrayU8FromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000003: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./enclave_pqc_primitives_wasm_bg.js": import0,
+    };
+}
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+const wasmPath = `${__dirname}/enclave_pqc_primitives_wasm_bg.wasm`;
+const wasmBytes = require('fs').readFileSync(wasmPath);
+const wasmModule = new WebAssembly.Module(wasmBytes);
+let wasmInstance = new WebAssembly.Instance(wasmModule, __wbg_get_imports());
+let wasm = wasmInstance.exports;
+wasm.__wbindgen_start();