@f0rest8/metamorphic-crypto 0.9.0 → 0.10.1

package/metamorphic_crypto.d.ts

@@ -173,6 +173,21 @@ export function generateSigningKeyPair(level: string): any;
  */
 export function generateSigningKeyPairSuite(suite: string, level: string): any;
 
+/**
+ * HKDF-SHA512 (RFC 5869) extract-then-expand over base64-encoded inputs.
+ *
+ * Derives `length` bytes of output keying material and returns it as base64.
+ * `salt_b64` and `ikm_b64` are base64; `info` is a UTF-8 context label (bound
+ * into Expand for domain separation). An empty `salt_b64` means "not provided"
+ * (HashLen zero bytes, RFC 5869 §2.2).
+ *
+ * Byte-for-byte identical to `metamorphic_crypto::hkdf::hkdf_sha512` (native /
+ * Elixir NIF) and to `@noble/hashes` / WebCrypto HKDF-SHA-512 for the same
+ * inputs — the guarantee that a wrapping key derived in the browser matches
+ * one derived anywhere else.
+ */
+export function hkdfSha512(salt_b64: string, ikm_b64: string, info: string, length: number): string;
+
 /**
  * HMAC-SHA256 of base64 `msg` under base64 `key`. Returns the 32-byte tag as
  * base64. Any key length is accepted (RFC 2104).
@@ -315,6 +330,7 @@ export interface InitOutput {
     readonly parseSaltFromKeyHash: (a: number, b: number, c: number) => void;
     readonly sha3_512: (a: number, b: number, c: number) => void;
     readonly sha3_512WithContext: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly hkdfSha512: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => void;
     readonly sha3_256: (a: number, b: number, c: number) => void;
     readonly sha256: (a: number, b: number, c: number) => void;
     readonly sha512: (a: number, b: number, c: number) => void;
@@ -334,10 +350,10 @@ export interface InitOutput {
     readonly ecvrfP256Prove: (a: number, b: number, c: number, d: number, e: number) => void;
     readonly ecvrfP256Verify: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
     readonly ecvrfP256ProofToHash: (a: number, b: number, c: number) => void;
-    readonly decryptPrivateKeyWithRecovery: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly encryptPrivateKeyForRecovery: (a: number, b: number, c: number, d: number, e: number) => void;
     readonly decryptSecretboxToString: (a: number, b: number, c: number, d: number, e: number) => void;
     readonly encryptSecretboxString: (a: number, b: number, c: number, d: number, e: number) => void;
-    readonly encryptPrivateKeyForRecovery: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly decryptPrivateKeyWithRecovery: (a: number, b: number, c: number, d: number, e: number) => void;
     readonly __wbindgen_export: (a: number, b: number) => number;
     readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_export3: (a: number) => void;

package/metamorphic_crypto.js

@@ -891,6 +891,55 @@ export function generateSigningKeyPairSuite(suite, level) {
     }
 }
 
+/**
+ * HKDF-SHA512 (RFC 5869) extract-then-expand over base64-encoded inputs.
+ *
+ * Derives `length` bytes of output keying material and returns it as base64.
+ * `salt_b64` and `ikm_b64` are base64; `info` is a UTF-8 context label (bound
+ * into Expand for domain separation). An empty `salt_b64` means "not provided"
+ * (HashLen zero bytes, RFC 5869 §2.2).
+ *
+ * Byte-for-byte identical to `metamorphic_crypto::hkdf::hkdf_sha512` (native /
+ * Elixir NIF) and to `@noble/hashes` / WebCrypto HKDF-SHA-512 for the same
+ * inputs — the guarantee that a wrapping key derived in the browser matches
+ * one derived anywhere else.
+ * @param {string} salt_b64
+ * @param {string} ikm_b64
+ * @param {string} info
+ * @param {number} length
+ * @returns {string}
+ */
+export function hkdfSha512(salt_b64, ikm_b64, info, length) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(salt_b64, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(ikm_b64, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(info, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len2 = WASM_VECTOR_LEN;
+        wasm.hkdfSha512(retptr, ptr0, len0, ptr1, len1, ptr2, len2, length);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        var ptr4 = r0;
+        var len4 = r1;
+        if (r3) {
+            ptr4 = 0; len4 = 0;
+            throw takeObject(r2);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export4(deferred5_0, deferred5_1, 1);
+    }
+}
+
 /**
  * HMAC-SHA256 of base64 `msg` under base64 `key`. Returns the 32-byte tag as
  * base64. Any key length is accepted (RFC 2104).

package/package.json

@@ -2,7 +2,7 @@
   "name": "@f0rest8/metamorphic-crypto",
   "type": "module",
   "description": "Zero-knowledge end-to-end encryption with post-quantum hybrid KEM (ML-KEM + X25519) and an opt-in CNSA 2.0 suite axis (matched-strength hybrid + pure ML-KEM-1024 / ML-DSA-87 / AES-256-GCM)",
-  "version": "0.9.0",
+  "version": "0.10.1",
   "license": "MIT OR Apache-2.0",
   "repository": {
     "type": "git",