@gjsify/crypto 0.3.16 → 0.3.17

package/lib/esm/hash.js

@@ -1,111 +1 @@
-import { normalizeAlgorithm } from "./crypto-utils.js";
-import { Buffer } from "node:buffer";
-import GLib from "@girs/glib-2.0";
-import { Transform } from "node:stream";
-import { normalizeEncoding } from "@gjsify/utils";
-
-//#region src/hash.ts
-const CHECKSUM_TYPES = {
-	md5: GLib.ChecksumType.MD5,
-	sha1: GLib.ChecksumType.SHA1,
-	sha256: GLib.ChecksumType.SHA256,
-	sha384: GLib.ChecksumType.SHA384,
-	sha512: GLib.ChecksumType.SHA512
-};
-function getChecksumType(algorithm) {
-	const normalized = normalizeAlgorithm(algorithm);
-	const type = CHECKSUM_TYPES[normalized];
-	if (type === undefined) {
-		const err = new Error(`Unknown message digest: ${algorithm}`);
-		err.code = "ERR_CRYPTO_HASH_UNKNOWN";
-		throw err;
-	}
-	return type;
-}
-/**
-* Creates and returns a Hash object that can be used to generate hash digests
-* using the given algorithm.
-*/
-var Hash = class Hash extends Transform {
-	_algorithm;
-	_checksum;
-	_finalized = false;
-	constructor(algorithm) {
-		super();
-		const normalized = normalizeAlgorithm(algorithm);
-		const type = getChecksumType(normalized);
-		this._algorithm = normalized;
-		this._checksum = new GLib.Checksum(type);
-	}
-	/** Update the hash with data. */
-	update(data, inputEncoding) {
-		if (this._finalized) {
-			throw new Error("Digest already called");
-		}
-		let bytes;
-		if (typeof data === "string") {
-			const enc = normalizeEncoding(inputEncoding);
-			bytes = Buffer.from(data, enc);
-		} else {
-			bytes = data instanceof Uint8Array ? data : Buffer.from(data);
-		}
-		this._checksum.update(bytes);
-		return this;
-	}
-	/** Calculate the digest of all data passed to update(). */
-	digest(encoding) {
-		if (this._finalized) {
-			throw new Error("Digest already called");
-		}
-		this._finalized = true;
-		const hexStr = this._checksum.get_string();
-		const buf = Buffer.from(hexStr, "hex");
-		if (encoding) return buf.toString(encoding);
-		return buf;
-	}
-	/** Copy this hash to a new Hash object. */
-	copy() {
-		if (this._finalized) {
-			throw new Error("Digest already called");
-		}
-		const copy = Object.create(Hash.prototype);
-		Transform.call(copy);
-		copy._algorithm = this._algorithm;
-		copy._finalized = false;
-		copy._checksum = this._checksum.copy();
-		return copy;
-	}
-	_transform(chunk, encoding, callback) {
-		try {
-			this.update(chunk, encoding);
-			callback();
-		} catch (err) {
-			callback(err);
-		}
-	}
-	_flush(callback) {
-		try {
-			this.push(this.digest());
-			callback();
-		} catch (err) {
-			callback(err);
-		}
-	}
-};
-/** Get the list of supported hash algorithms. */
-function getHashes() {
-	return [
-		"md5",
-		"sha1",
-		"sha256",
-		"sha384",
-		"sha512"
-	];
-}
-/** Convenience: one-shot hash (Node 21+). */
-function hash(algorithm, data, encoding) {
-	return new Hash(algorithm).update(data).digest(encoding);
-}
-
-//#endregion
-export { Hash, getHashes, hash };
+import{normalizeAlgorithm as e}from"./crypto-utils.js";import{Buffer as t}from"node:buffer";import n from"@girs/glib-2.0";import{Transform as r}from"node:stream";import{normalizeEncoding as i}from"@gjsify/utils";const a={md5:n.ChecksumType.MD5,sha1:n.ChecksumType.SHA1,sha256:n.ChecksumType.SHA256,sha384:n.ChecksumType.SHA384,sha512:n.ChecksumType.SHA512};function o(t){let n=a[e(t)];if(n===void 0){let e=Error(`Unknown message digest: ${t}`);throw e.code=`ERR_CRYPTO_HASH_UNKNOWN`,e}return n}var s=class a extends r{_algorithm;_checksum;_finalized=!1;constructor(t){super();let r=e(t),i=o(r);this._algorithm=r,this._checksum=new n.Checksum(i)}update(e,n){if(this._finalized)throw Error(`Digest already called`);let r;if(typeof e==`string`){let a=i(n);r=t.from(e,a)}else r=e instanceof Uint8Array?e:t.from(e);return this._checksum.update(r),this}digest(e){if(this._finalized)throw Error(`Digest already called`);this._finalized=!0;let n=this._checksum.get_string(),r=t.from(n,`hex`);return e?r.toString(e):r}copy(){if(this._finalized)throw Error(`Digest already called`);let e=Object.create(a.prototype);return r.call(e),e._algorithm=this._algorithm,e._finalized=!1,e._checksum=this._checksum.copy(),e}_transform(e,t,n){try{this.update(e,t),n()}catch(e){n(e)}}_flush(e){try{this.push(this.digest()),e()}catch(t){e(t)}}};function c(){return[`md5`,`sha1`,`sha256`,`sha384`,`sha512`]}function l(e,t,n){return new s(e).update(t).digest(n)}export{s as Hash,c as getHashes,l as hash};

package/lib/esm/hkdf.js

@@ -1,76 +1 @@
-import { DIGEST_SIZES, SUPPORTED_ALGORITHMS, normalizeAlgorithm, toBuffer } from "./crypto-utils.js";
-import { Hmac } from "./hmac.js";
-import { Buffer } from "node:buffer";
-
-//#region src/hkdf.ts
-function hmacDigest(algo, key, data) {
-	const hmac = new Hmac(algo, key);
-	hmac.update(data);
-	return hmac.digest();
-}
-/**
-* HKDF-Extract: PRK = HMAC-Hash(salt, IKM)
-*/
-function hkdfExtract(algo, ikm, salt) {
-	return hmacDigest(algo, salt, ikm);
-}
-/**
-* HKDF-Expand: OKM = T(1) || T(2) || ... || T(N)
-*   T(i) = HMAC-Hash(PRK, T(i-1) || info || i)
-*/
-function hkdfExpand(algo, prk, info, length, hashLen) {
-	const n = Math.ceil(length / hashLen);
-	if (n > 255) {
-		throw new Error("HKDF cannot generate more than 255 * HashLen bytes");
-	}
-	const okm = Buffer.allocUnsafe(n * hashLen);
-	let prev = Buffer.alloc(0);
-	for (let i = 1; i <= n; i++) {
-		const input = Buffer.concat([
-			prev,
-			info,
-			Buffer.from([i])
-		]);
-		prev = hmacDigest(algo, prk, input);
-		prev.copy(okm, (i - 1) * hashLen);
-	}
-	return Buffer.from(okm.buffer, okm.byteOffset, length);
-}
-/**
-* Synchronous HKDF key derivation.
-*/
-function hkdfSync(digest, ikm, salt, info, keylen) {
-	const algo = normalizeAlgorithm(digest);
-	const hashLen = DIGEST_SIZES[algo];
-	if (!SUPPORTED_ALGORITHMS.has(algo) || hashLen === undefined) {
-		throw new TypeError(`Unknown message digest: ${digest}`);
-	}
-	if (typeof keylen !== "number" || keylen < 0) {
-		throw new TypeError("keylen must be a non-negative number");
-	}
-	const ikmBuf = toBuffer(ikm);
-	const saltBuf = toBuffer(salt);
-	const infoBuf = toBuffer(info);
-	const effectiveSalt = saltBuf.length === 0 ? Buffer.alloc(hashLen, 0) : saltBuf;
-	const prk = hkdfExtract(algo, ikmBuf, effectiveSalt);
-	const okm = hkdfExpand(algo, prk, infoBuf, keylen, hashLen);
-	const result = new ArrayBuffer(okm.length);
-	new Uint8Array(result).set(okm);
-	return result;
-}
-/**
-* Asynchronous HKDF key derivation.
-*/
-function hkdf(digest, ikm, salt, info, keylen, callback) {
-	setTimeout(() => {
-		try {
-			const result = hkdfSync(digest, ikm, salt, info, keylen);
-			callback(null, result);
-		} catch (err) {
-			callback(err instanceof Error ? err : new Error(String(err)));
-		}
-	}, 0);
-}
-
-//#endregion
-export { hkdf, hkdfSync };
+import{DIGEST_SIZES as e,SUPPORTED_ALGORITHMS as t,normalizeAlgorithm as n,toBuffer as r}from"./crypto-utils.js";import{Hmac as i}from"./hmac.js";import{Buffer as a}from"node:buffer";function o(e,t,n){let r=new i(e,t);return r.update(n),r.digest()}function s(e,t,n){return o(e,n,t)}function c(e,t,n,r,i){let s=Math.ceil(r/i);if(s>255)throw Error(`HKDF cannot generate more than 255 * HashLen bytes`);let c=a.allocUnsafe(s*i),l=a.alloc(0);for(let r=1;r<=s;r++)l=o(e,t,a.concat([l,n,a.from([r])])),l.copy(c,(r-1)*i);return a.from(c.buffer,c.byteOffset,r)}function l(i,o,l,u,d){let f=n(i),p=e[f];if(!t.has(f)||p===void 0)throw TypeError(`Unknown message digest: ${i}`);if(typeof d!=`number`||d<0)throw TypeError(`keylen must be a non-negative number`);let m=r(o),h=r(l),g=r(u),_=c(f,s(f,m,h.length===0?a.alloc(p,0):h),g,d,p),v=new ArrayBuffer(_.length);return new Uint8Array(v).set(_),v}function u(e,t,n,r,i,a){setTimeout(()=>{try{a(null,l(e,t,n,r,i))}catch(e){a(e instanceof Error?e:Error(String(e)))}},0)}export{u as hkdf,l as hkdfSync};

package/lib/esm/hmac.js

@@ -1,98 +1 @@
-import { BLOCK_SIZES, SUPPORTED_ALGORITHMS, normalizeAlgorithm } from "./crypto-utils.js";
-import { Hash } from "./hash.js";
-import { Buffer } from "node:buffer";
-import { Transform } from "node:stream";
-import { normalizeEncoding } from "@gjsify/utils";
-
-//#region src/hmac.ts
-/**
-* Creates and returns an Hmac object that uses the given algorithm and key.
-* Implemented using createHash (GLib.Checksum) since GLib.Hmac bindings are broken in GJS.
-*/
-var Hmac = class extends Transform {
-	_algorithm;
-	_innerHash;
-	_outerKeyPad;
-	_finalized = false;
-	constructor(algorithm, key) {
-		super();
-		const normalized = normalizeAlgorithm(algorithm);
-		if (!SUPPORTED_ALGORITHMS.has(normalized)) {
-			const err = new Error(`Unknown message digest: ${algorithm}`);
-			err.code = "ERR_CRYPTO_HASH_UNKNOWN";
-			throw err;
-		}
-		this._algorithm = normalized;
-		let keyBytes;
-		if (typeof key === "string") {
-			keyBytes = Buffer.from(key, "utf8");
-		} else {
-			keyBytes = key instanceof Uint8Array ? key : Buffer.from(key);
-		}
-		const blockSize = BLOCK_SIZES[normalized];
-		if (keyBytes.length > blockSize) {
-			const h = new Hash(normalized);
-			h.update(keyBytes);
-			keyBytes = h.digest();
-		}
-		const paddedKey = new Uint8Array(blockSize);
-		paddedKey.set(keyBytes);
-		const iKeyPad = new Uint8Array(blockSize);
-		const oKeyPad = new Uint8Array(blockSize);
-		for (let i = 0; i < blockSize; i++) {
-			iKeyPad[i] = paddedKey[i] ^ 54;
-			oKeyPad[i] = paddedKey[i] ^ 92;
-		}
-		this._outerKeyPad = oKeyPad;
-		this._innerHash = new Hash(normalized);
-		this._innerHash.update(iKeyPad);
-	}
-	/** Update the HMAC with data. */
-	update(data, inputEncoding) {
-		if (this._finalized) {
-			throw new Error("Digest already called");
-		}
-		let bytes;
-		if (typeof data === "string") {
-			const enc = normalizeEncoding(inputEncoding);
-			bytes = Buffer.from(data, enc);
-		} else {
-			bytes = data instanceof Uint8Array ? data : Buffer.from(data);
-		}
-		this._innerHash.update(bytes);
-		return this;
-	}
-	/** Calculate the HMAC digest. */
-	digest(encoding) {
-		if (this._finalized) {
-			throw new Error("Digest already called");
-		}
-		this._finalized = true;
-		const innerDigest = this._innerHash.digest();
-		const outerHash = new Hash(this._algorithm);
-		outerHash.update(this._outerKeyPad);
-		outerHash.update(innerDigest);
-		const result = outerHash.digest();
-		if (encoding) return result.toString(encoding);
-		return result;
-	}
-	_transform(chunk, encoding, callback) {
-		try {
-			this.update(chunk, encoding);
-			callback();
-		} catch (err) {
-			callback(err);
-		}
-	}
-	_flush(callback) {
-		try {
-			this.push(this.digest());
-			callback();
-		} catch (err) {
-			callback(err);
-		}
-	}
-};
-
-//#endregion
-export { Hmac };
+import{BLOCK_SIZES as e,SUPPORTED_ALGORITHMS as t,normalizeAlgorithm as n}from"./crypto-utils.js";import{Hash as r}from"./hash.js";import{Buffer as i}from"node:buffer";import{Transform as a}from"node:stream";import{normalizeEncoding as o}from"@gjsify/utils";var s=class extends a{_algorithm;_innerHash;_outerKeyPad;_finalized=!1;constructor(a,o){super();let s=n(a);if(!t.has(s)){let e=Error(`Unknown message digest: ${a}`);throw e.code=`ERR_CRYPTO_HASH_UNKNOWN`,e}this._algorithm=s;let c;c=typeof o==`string`?i.from(o,`utf8`):o instanceof Uint8Array?o:i.from(o);let l=e[s];if(c.length>l){let e=new r(s);e.update(c),c=e.digest()}let u=new Uint8Array(l);u.set(c);let d=new Uint8Array(l),f=new Uint8Array(l);for(let e=0;e<l;e++)d[e]=u[e]^54,f[e]=u[e]^92;this._outerKeyPad=f,this._innerHash=new r(s),this._innerHash.update(d)}update(e,t){if(this._finalized)throw Error(`Digest already called`);let n;if(typeof e==`string`){let r=o(t);n=i.from(e,r)}else n=e instanceof Uint8Array?e:i.from(e);return this._innerHash.update(n),this}digest(e){if(this._finalized)throw Error(`Digest already called`);this._finalized=!0;let t=this._innerHash.digest(),n=new r(this._algorithm);n.update(this._outerKeyPad),n.update(t);let i=n.digest();return e?i.toString(e):i}_transform(e,t,n){try{this.update(e,t),n()}catch(e){n(e)}}_flush(e){try{this.push(this.digest()),e()}catch(t){e(t)}}};export{s as Hmac};

package/lib/esm/index.js

@@ -1,85 +1 @@
-import { createCipher, createCipheriv, createDecipher, createDecipheriv, getCiphers } from "./cipher.js";
-import { constants } from "./constants.js";
-import { randomBytes, randomFill, randomFillSync, randomInt, randomUUID } from "./random.js";
-import { DiffieHellman, DiffieHellmanGroup, createDiffieHellman, createDiffieHellmanGroup, getDiffieHellman } from "./dh.js";
-import { createECDH, getCurves } from "./ecdh.js";
-import { Hash, getHashes, hash } from "./hash.js";
-import { Hmac } from "./hmac.js";
-import { ecdsaSign, ecdsaVerify } from "./ecdsa.js";
-import { hkdf, hkdfSync } from "./hkdf.js";
-import { timingSafeEqual } from "./timing-safe-equal.js";
-import { pbkdf2, pbkdf2Sync } from "./pbkdf2.js";
-import { scrypt, scryptSync } from "./scrypt.js";
-import { Sign, Verify, createSign, createVerify } from "./sign.js";
-import { privateDecrypt, privateEncrypt, publicDecrypt, publicEncrypt } from "./public-encrypt.js";
-import { mgf1 } from "./mgf1.js";
-import { rsaPssSign, rsaPssVerify } from "./rsa-pss.js";
-import { rsaOaepDecrypt, rsaOaepEncrypt } from "./rsa-oaep.js";
-import { KeyObject, createPrivateKey, createPublicKey, createSecretKey } from "./key-object.js";
-import { X509Certificate } from "./x509.js";
-
-//#region src/index.ts
-/** Create a Hash object for the given algorithm. */
-function createHash(algorithm) {
-	return new Hash(algorithm);
-}
-/** Create an Hmac object for the given algorithm and key. */
-function createHmac(algorithm, key) {
-	return new Hmac(algorithm, key);
-}
-var src_default = {
-	Hash,
-	getHashes,
-	hash,
-	Hmac,
-	randomBytes,
-	randomFill,
-	randomFillSync,
-	randomUUID,
-	randomInt,
-	timingSafeEqual,
-	constants,
-	pbkdf2,
-	pbkdf2Sync,
-	hkdf,
-	hkdfSync,
-	scrypt,
-	scryptSync,
-	createHash,
-	createHmac,
-	createCipher,
-	createCipheriv,
-	createDecipher,
-	createDecipheriv,
-	getCiphers,
-	Sign,
-	Verify,
-	createSign,
-	createVerify,
-	createDiffieHellman,
-	getDiffieHellman,
-	DiffieHellman,
-	DiffieHellmanGroup,
-	createDiffieHellmanGroup,
-	createECDH,
-	getCurves,
-	ecdsaSign,
-	ecdsaVerify,
-	publicEncrypt,
-	privateDecrypt,
-	privateEncrypt,
-	publicDecrypt,
-	rsaPssSign,
-	rsaPssVerify,
-	rsaOaepEncrypt,
-	rsaOaepDecrypt,
-	mgf1,
-	KeyObject,
-	createSecretKey,
-	createPublicKey,
-	createPrivateKey,
-	X509Certificate
-};
-
-//#endregion
-export { DiffieHellman, DiffieHellmanGroup, Hash, Hmac, KeyObject, Sign, Verify, X509Certificate, constants, createCipher, createCipheriv, createDecipher, createDecipheriv, createDiffieHellman, createDiffieHellmanGroup, createECDH, createHash, createHmac, createPrivateKey, createPublicKey, createSecretKey, createSign, createVerify, src_default as default, ecdsaSign, ecdsaVerify, getCiphers, getCurves, getDiffieHellman, getHashes, hash, hkdf, hkdfSync, mgf1, pbkdf2, pbkdf2Sync, privateDecrypt, privateEncrypt, publicDecrypt, publicEncrypt, randomBytes, randomFill, randomFillSync, randomInt, randomUUID, rsaOaepDecrypt, rsaOaepEncrypt, rsaPssSign, rsaPssVerify, scrypt, scryptSync, timingSafeEqual };
+import{createCipher as e,createCipheriv as t,createDecipher as n,createDecipheriv as r,getCiphers as i}from"./cipher.js";import{constants as a}from"./constants.js";import{randomBytes as o,randomFill as s,randomFillSync as c,randomInt as l,randomUUID as u}from"./random.js";import{DiffieHellman as d,DiffieHellmanGroup as f,createDiffieHellman as p,createDiffieHellmanGroup as m,getDiffieHellman as h}from"./dh.js";import{createECDH as g,getCurves as _}from"./ecdh.js";import{Hash as v,getHashes as y,hash as b}from"./hash.js";import{Hmac as x}from"./hmac.js";import{ecdsaSign as S,ecdsaVerify as C}from"./ecdsa.js";import{hkdf as w,hkdfSync as T}from"./hkdf.js";import{timingSafeEqual as E}from"./timing-safe-equal.js";import{pbkdf2 as D,pbkdf2Sync as O}from"./pbkdf2.js";import{scrypt as k,scryptSync as A}from"./scrypt.js";import{Sign as j,Verify as M,createSign as N,createVerify as P}from"./sign.js";import{privateDecrypt as F,privateEncrypt as I,publicDecrypt as L,publicEncrypt as R}from"./public-encrypt.js";import{mgf1 as z}from"./mgf1.js";import{rsaPssSign as B,rsaPssVerify as V}from"./rsa-pss.js";import{rsaOaepDecrypt as H,rsaOaepEncrypt as U}from"./rsa-oaep.js";import{KeyObject as W,createPrivateKey as G,createPublicKey as K,createSecretKey as q}from"./key-object.js";import{X509Certificate as J}from"./x509.js";function Y(e){return new v(e)}function X(e,t){return new x(e,t)}var Z={Hash:v,getHashes:y,hash:b,Hmac:x,randomBytes:o,randomFill:s,randomFillSync:c,randomUUID:u,randomInt:l,timingSafeEqual:E,constants:a,pbkdf2:D,pbkdf2Sync:O,hkdf:w,hkdfSync:T,scrypt:k,scryptSync:A,createHash:Y,createHmac:X,createCipher:e,createCipheriv:t,createDecipher:n,createDecipheriv:r,getCiphers:i,Sign:j,Verify:M,createSign:N,createVerify:P,createDiffieHellman:p,getDiffieHellman:h,DiffieHellman:d,DiffieHellmanGroup:f,createDiffieHellmanGroup:m,createECDH:g,getCurves:_,ecdsaSign:S,ecdsaVerify:C,publicEncrypt:R,privateDecrypt:F,privateEncrypt:I,publicDecrypt:L,rsaPssSign:B,rsaPssVerify:V,rsaOaepEncrypt:U,rsaOaepDecrypt:H,mgf1:z,KeyObject:W,createSecretKey:q,createPublicKey:K,createPrivateKey:G,X509Certificate:J};export{d as DiffieHellman,f as DiffieHellmanGroup,v as Hash,x as Hmac,W as KeyObject,j as Sign,M as Verify,J as X509Certificate,a as constants,e as createCipher,t as createCipheriv,n as createDecipher,r as createDecipheriv,p as createDiffieHellman,m as createDiffieHellmanGroup,g as createECDH,Y as createHash,X as createHmac,G as createPrivateKey,K as createPublicKey,q as createSecretKey,N as createSign,P as createVerify,Z as default,S as ecdsaSign,C as ecdsaVerify,i as getCiphers,_ as getCurves,h as getDiffieHellman,y as getHashes,b as hash,w as hkdf,T as hkdfSync,z as mgf1,D as pbkdf2,O as pbkdf2Sync,F as privateDecrypt,I as privateEncrypt,L as publicDecrypt,R as publicEncrypt,o as randomBytes,s as randomFill,c as randomFillSync,l as randomInt,u as randomUUID,H as rsaOaepDecrypt,U as rsaOaepEncrypt,B as rsaPssSign,V as rsaPssVerify,k as scrypt,A as scryptSync,E as timingSafeEqual};