@haskou/value-objects 2.7.4 → 2.8.0

package/README.md

@@ -15,7 +15,7 @@ npm install @haskou/value-objects
 ```
 
 ```typescript
-import { Email, PositiveNumber, Color, Hour } from 'value-objects';
+import { Email, PositiveNumber, Color, Hour } from '@haskou/value-objects';
 
 // ✅ Automatic validation on construction
 const email = new Email('user@example.com');     // Valid
@@ -87,13 +87,55 @@ your application.
 - **`Coordinates`** - Coordinate pairs
 
 ### 🔐 Cryptography
-- **`KeyPair`** - Ed25519 key pair generation, signing, and verification
-- **`PrivateKey`** - Ed25519 private key (PEM format) with signing
-- **`PublicKey`** - Ed25519 public key (PEM format) with signature verification
-- **`Signature`** - Base64-encoded ed25519 digital signature
-- **`EncryptedPrivateKey`** - AES-256-GCM encrypted private key (scrypt-based, password-protected)
+- **`KeyPair`** - Ed25519 key pair generation for signing and verification
+- **`PrivateKey`** - Ed25519 private key (PEM format) for signing; also accepted by asymmetric payload decryption for data addressed to the matching key pair
+- **`PublicKey`** - Ed25519 public key (PEM format) for signature verification; also accepted by asymmetric payload encryption to address data to the matching key pair
+- **`Signature`** - Base64-encoded Ed25519 digital signature
+- **`EncryptedPayload`** - Base container for dot-separated encrypted payload formats
+- **`AsymmetricEncryptedPayload`** - Payload encrypted for an Ed25519/X25519 recipient key pair
+- **`SymmetricEncryptedPayload`** - Payload encrypted with a symmetric AES-256-GCM key
+- **`SymmetricKey`** - 32-byte AES-256-GCM key, randomly generated or deterministically derived from a password and salt with scrypt
+- **`EncryptedPrivateKey`** - Password-protected private key encryption using scrypt + AES-256-GCM
 - **`EncryptedKeyPair`** - Key pair with encrypted private key
 
+Technical notes:
+
+- Asymmetric payload encryption is a classical hybrid scheme. It generates an ephemeral
+  X25519 key pair, converts the recipient Ed25519 key material to Montgomery
+  form for X25519 key agreement, derives a shared secret, then derives a
+  256-bit AES key with SHA-256 and encrypts the payload with AES-256-GCM.
+- The asymmetric payload format is
+  `ephemeralPublicKey.iv.cipherText.tag`, with Base64-encoded fields,
+  32-byte ephemeral public keys, 12-byte random IVs, and 16-byte
+  authentication tags. Tampered ciphertext, IVs, tags, or key-agreement data
+  fail authentication during decryption.
+- Symmetric payload encryption uses a 32-byte AES-256-GCM key directly. The
+  payload format is `v1.aes-256-gcm.iv.cipherText.tag`, with Base64-encoded
+  IV, ciphertext, and tag fields.
+- `SymmetricKey.generate()` creates a random 256-bit key. `SymmetricKey.fromPassword()`
+  derives the same 256-bit key from the same password, salt, and scrypt
+  parameters. Encryption itself is still randomized because each payload uses a
+  fresh 12-byte IV.
+- A 32-byte key provides the AES-256 key size. Real security depends on using
+  either a high-entropy random key or a strong password with a unique,
+  non-empty salt. AES-GCM also requires that IVs do not repeat for the same key;
+  the library generates a random 96-bit IV for each encryption.
+- Payload encryption is intended for small payloads and is currently capped at
+  1 MiB before encryption.
+- Encrypted private keys use a separate password-based scheme:
+  `scrypt(N=16384,r=8,p=1)` with a 16-byte salt, then AES-256-GCM with a
+  12-byte IV and 16-byte authentication tag.
+- This is not a post-quantum cryptography scheme. Ed25519 and X25519 are
+  classical elliptic-curve primitives, so neither signatures nor payload key
+  agreement are post-quantum secure.
+- Payload encryption uses fresh ephemeral key material and a random IV per
+  encryption, but captured payloads can still be decrypted later if the
+  recipient private key is compromised. Treat it as recipient-addressed
+  encryption with ciphertext integrity, not as sender-authenticated encryption
+  or a forward-secret transport protocol.
+- The payload encryption format is library-specific, not HPKE, and has not been
+  independently audited as a protocol.
+
 ### 📎 Media
 - **`Media`** - Binary/string content with Buffer, size, and Base64 helpers
 
@@ -147,15 +189,26 @@ const sha512 = SHA512Hash.from('hello'); // 9b71d224bd62f3785d96d46ad3ea3d73319b
 console.log(md5.toBase64());
 
 // Crypto
-const keyPair = KeyPair.generate(); // Ed25519 key pair
+const keyPair = await KeyPair.generate(); // Ed25519 key pair
 const signature = keyPair.sign('hello world'); // Sign a message
 keyPair.isValidSignature('hello world', signature); // true
 
 // Encrypted key pairs
 const encrypted = await keyPair.encryptKeyPair('my-password');
-const sig = encrypted.sign('message', 'my-password');
+const sig = await encrypted.sign('message', 'my-password');
 encrypted.isValidSignature('message', sig); // true
 
+// Symmetric payload encryption
+const symmetricKey = SymmetricKey.generate();
+const symmetricPayload = symmetricKey.encrypt('secret data');
+const plaintext = symmetricKey.decrypt(symmetricPayload);
+console.log(plaintext.toString()); // 'secret data'
+
+// Deterministic key derivation from a password and explicit salt
+const derivedKey = await SymmetricKey.fromPassword('my-password', {
+  salt: 'stable-application-salt',
+});
+
 // Media
 const media = new Media('hello world');
 console.log(media.getSize()); // 11
@@ -211,7 +264,8 @@ to choose the npm version bump:
 Branches without one of these prefixes still run CI, but they do not publish
 to npm. Publishing uses npm Trusted Publishing from the `ci.yml` workflow.
 After a successful publish, CI commits the release version to the default
-branch and creates the matching `vX.Y.Z` Git tag.
+branch, creates the matching `vX.Y.Z` Git tag, and publishes a compact GitHub
+Release with the PR title, npm package link, release branch, and PR notes.
 
 ## 🤝 Contributing
 

package/dist/value-objects/crypto/AsymmetricEncryptedPayload.d.ts

@@ -0,0 +1,5 @@
+import { EncryptedPayload, EncryptedPayloadScheme } from './EncryptedPayload';
+export declare class AsymmetricEncryptedPayload extends EncryptedPayload {
+    getScheme(): EncryptedPayloadScheme;
+}
+//# sourceMappingURL=AsymmetricEncryptedPayload.d.ts.map

package/dist/value-objects/crypto/AsymmetricEncryptedPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AsymmetricEncryptedPayload.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/AsymmetricEncryptedPayload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE9E,qBAAa,0BAA2B,SAAQ,gBAAgB;IACvD,SAAS,IAAI,sBAAsB;CAG3C"}

package/dist/value-objects/crypto/AsymmetricEncryptedPayload.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AsymmetricEncryptedPayload = void 0;
+const EncryptedPayload_1 = require("./EncryptedPayload");
+class AsymmetricEncryptedPayload extends EncryptedPayload_1.EncryptedPayload {
+    getScheme() {
+        return 'asymmetric';
+    }
+}
+exports.AsymmetricEncryptedPayload = AsymmetricEncryptedPayload;
+//# sourceMappingURL=AsymmetricEncryptedPayload.js.map

package/dist/value-objects/crypto/AsymmetricEncryptedPayload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AsymmetricEncryptedPayload.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/AsymmetricEncryptedPayload.ts"],"names":[],"mappings":";;;AAAA,yDAA8E;AAE9E,MAAa,0BAA2B,SAAQ,mCAAgB;IACvD,SAAS;QACd,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAJD,gEAIC"}

package/dist/value-objects/crypto/EncryptedPayload.d.ts

@@ -1,4 +1,6 @@
 import { ValueObject } from '../ValueObject';
+export type EncryptedPayloadScheme = 'asymmetric' | 'symmetric' | 'unknown';
 export declare class EncryptedPayload extends ValueObject<string> {
+    getScheme(): EncryptedPayloadScheme;
 }
 //# sourceMappingURL=EncryptedPayload.d.ts.map

package/dist/value-objects/crypto/EncryptedPayload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EncryptedPayload.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/EncryptedPayload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,qBAAa,gBAAiB,SAAQ,WAAW,CAAC,MAAM,CAAC;CAAG"}
+{"version":3,"file":"EncryptedPayload.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/EncryptedPayload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,MAAM,sBAAsB,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5E,qBAAa,gBAAiB,SAAQ,WAAW,CAAC,MAAM,CAAC;IAChD,SAAS,IAAI,sBAAsB;CAa3C"}

package/dist/value-objects/crypto/EncryptedPayload.js

@@ -3,6 +3,16 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.EncryptedPayload = void 0;
 const ValueObject_1 = require("../ValueObject");
 class EncryptedPayload extends ValueObject_1.ValueObject {
+    getScheme() {
+        const parts = this.valueOf().split('.');
+        if (parts.length === 4) {
+            return 'asymmetric';
+        }
+        if (parts.length === 5 && parts[0] === 'v1' && parts[1] === 'aes-256-gcm') {
+            return 'symmetric';
+        }
+        return 'unknown';
+    }
 }
 exports.EncryptedPayload = EncryptedPayload;
 //# sourceMappingURL=EncryptedPayload.js.map

package/dist/value-objects/crypto/EncryptedPayload.js.map

@@ -1 +1 @@
-{"version":3,"file":"EncryptedPayload.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/EncryptedPayload.ts"],"names":[],"mappings":";;;AAAA,gDAA6C;AAE7C,MAAa,gBAAiB,SAAQ,yBAAmB;CAAG;AAA5D,4CAA4D"}
+{"version":3,"file":"EncryptedPayload.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/EncryptedPayload.ts"],"names":[],"mappings":";;;AAAA,gDAA6C;AAI7C,MAAa,gBAAiB,SAAQ,yBAAmB;IAChD,SAAS;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;YAC1E,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAdD,4CAcC"}

package/dist/value-objects/crypto/PublicKey.d.ts

@@ -1,6 +1,6 @@
 import { StringValueObject } from '../StringValueObject';
+import { AsymmetricEncryptedPayload } from './AsymmetricEncryptedPayload';
 import { CryptoPayload } from './CryptoPayload';
-import { EncryptedPayload } from './EncryptedPayload';
 import { Key } from './Key';
 import { Signature } from './Signature';
 export declare class PublicKey extends Key {
@@ -11,6 +11,6 @@ export declare class PublicKey extends Key {
     constructor(value: string | StringValueObject);
     private ensureIsValidPublicKey;
     isValidSignature(payload: CryptoPayload, signature: Signature): boolean;
-    encrypt(payload: CryptoPayload): EncryptedPayload;
+    encrypt(payload: CryptoPayload): AsymmetricEncryptedPayload;
 }
 //# sourceMappingURL=PublicKey.d.ts.map

package/dist/value-objects/crypto/PublicKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicKey.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/PublicKey.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,qBAAa,SAAU,SAAQ,GAAG;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAO;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAe;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAC+C;WAEhE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;gBAIrD,KAAK,EAAE,MAAM,GAAG,iBAAiB;IAU7C,OAAO,CAAC,sBAAsB;IAQvB,gBAAgB,CACrB,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,SAAS,GACnB,OAAO;IAeH,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB;CA4CzD"}
+{"version":3,"file":"PublicKey.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/PublicKey.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,qBAAa,SAAU,SAAQ,GAAG;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAO;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAe;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAC+C;WAEhE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;gBAIrD,KAAK,EAAE,MAAM,GAAG,iBAAiB;IAU7C,OAAO,CAAC,sBAAsB;IAQvB,gBAAgB,CACrB,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,SAAS,GACnB,OAAO;IAeH,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,0BAA0B;CA4CnE"}

package/dist/value-objects/crypto/PublicKey.js

@@ -7,8 +7,8 @@ const InvalidLengthError_1 = require("../../errors/InvalidLengthError");
 const patterns_1 = require("../../patterns");
 const media_1 = require("../media");
 const NullObject_1 = require("../NullObject");
+const AsymmetricEncryptedPayload_1 = require("./AsymmetricEncryptedPayload");
 const CryptoAdapter_1 = require("./CryptoAdapter");
-const EncryptedPayload_1 = require("./EncryptedPayload");
 const Key_1 = require("./Key");
 class PublicKey extends Key_1.Key {
     static LENGTH = 113;
@@ -54,7 +54,7 @@ class PublicKey extends Key_1.Key {
             buffer_1.Buffer.from(cipherText).toString('base64'),
             buffer_1.Buffer.from(tag).toString('base64'),
         ].join('.');
-        return new EncryptedPayload_1.EncryptedPayload(result);
+        return new AsymmetricEncryptedPayload_1.AsymmetricEncryptedPayload(result);
     }
 }
 exports.PublicKey = PublicKey;

package/dist/value-objects/crypto/PublicKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"PublicKey.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/PublicKey.ts"],"names":[],"mappings":";;;AAAA,mCAAgC;AAEhC,wEAAqE;AACrE,wEAAqE;AACrE,6CAAwC;AACxC,oCAAiC;AACjC,8CAA2C;AAE3C,mDAAgD;AAEhD,yDAAsD;AACtD,+BAA4B;AAG5B,MAAa,SAAU,SAAQ,SAAG;IACxB,MAAM,CAAU,MAAM,GAAG,GAAG,CAAC;IAC7B,MAAM,CAAU,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;IACjD,MAAM,CAAU,OAAO,GAC7B,2EAA2E,CAAC;IAEvE,MAAM,CAAC,OAAO,CAAC,GAA+B;QACnD,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,YAAY,KAAiC;QAC3C,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAExB,IAAI,uBAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAEO,sBAAsB,CAAC,KAAa;QAC1C,IAAA,iBAAM,EACJ,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EACjC,IAAI,uCAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAChD,CAAC;QACF,IAAA,iBAAM,EAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,uCAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAEM,gBAAgB,CACrB,OAAsB,EACtB,SAAoB;QAEpB,MAAM,aAAa,GACjB,OAAO,YAAY,aAAK;YACtB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;YACrB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,eAAe,GAAG,eAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,6BAAa,CAAC,MAAM,CAChC,eAAe,EACf,aAAa,EACb,IAAI,CAAC,OAAO,EAAE,CACf,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,OAAO,CAAC,OAAsB;QACnC,MAAM,aAAa,GACjB,OAAO,YAAY,aAAK;YACtB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;YACrB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAErC,IAAA,iBAAM,EACJ,aAAa,CAAC,MAAM,IAAI,SAAS,CAAC,kBAAkB,EACpD,IAAI,uCAAkB,CACpB,aAAa,CAAC,MAAM,EACpB,SAAS,CAAC,kBAAkB,CAC7B,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,6BAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAElE,MAAM,aAAa,GAAG,6BAAa,CAAC,sBAAsB,EAAE,CAAC;QAC7D,MAAM,YAAY,GAAG,6BAAa,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,6BAAa,CAAC,kBAAkB,CACnD,aAAa,EACb,SAAS,CACV,CAAC;QAEF,MAAM,MAAM,GAAG,6BAAa,CAAC,mBAAmB,CAC9C,YAAY,EACZ,YAAY,CACb,CAAC;QAEF,MAAM,EAAE,GAAG,6BAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,6BAAa,CAAC,gBAAgB,CACxD,MAAM,EACN,EAAE,EACF,aAAa,CACd,CAAC;QAEF,MAAM,MAAM,GAAG;YACb,eAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5C,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1C,eAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACpC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,IAAI,mCAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;;AAzFH,8BA0FC"}
+{"version":3,"file":"PublicKey.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/PublicKey.ts"],"names":[],"mappings":";;;AAAA,mCAAgC;AAEhC,wEAAqE;AACrE,wEAAqE;AACrE,6CAAwC;AACxC,oCAAiC;AACjC,8CAA2C;AAE3C,6EAA0E;AAC1E,mDAAgD;AAEhD,+BAA4B;AAG5B,MAAa,SAAU,SAAQ,SAAG;IACxB,MAAM,CAAU,MAAM,GAAG,GAAG,CAAC;IAC7B,MAAM,CAAU,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;IACjD,MAAM,CAAU,OAAO,GAC7B,2EAA2E,CAAC;IAEvE,MAAM,CAAC,OAAO,CAAC,GAA+B;QACnD,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,YAAY,KAAiC;QAC3C,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAExB,IAAI,uBAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAEO,sBAAsB,CAAC,KAAa;QAC1C,IAAA,iBAAM,EACJ,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EACjC,IAAI,uCAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAChD,CAAC;QACF,IAAA,iBAAM,EAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,uCAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAEM,gBAAgB,CACrB,OAAsB,EACtB,SAAoB;QAEpB,MAAM,aAAa,GACjB,OAAO,YAAY,aAAK;YACtB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;YACrB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,eAAe,GAAG,eAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,6BAAa,CAAC,MAAM,CAChC,eAAe,EACf,aAAa,EACb,IAAI,CAAC,OAAO,EAAE,CACf,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,OAAO,CAAC,OAAsB;QACnC,MAAM,aAAa,GACjB,OAAO,YAAY,aAAK;YACtB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;YACrB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAErC,IAAA,iBAAM,EACJ,aAAa,CAAC,MAAM,IAAI,SAAS,CAAC,kBAAkB,EACpD,IAAI,uCAAkB,CACpB,aAAa,CAAC,MAAM,EACpB,SAAS,CAAC,kBAAkB,CAC7B,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,6BAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAElE,MAAM,aAAa,GAAG,6BAAa,CAAC,sBAAsB,EAAE,CAAC;QAC7D,MAAM,YAAY,GAAG,6BAAa,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,6BAAa,CAAC,kBAAkB,CACnD,aAAa,EACb,SAAS,CACV,CAAC;QAEF,MAAM,MAAM,GAAG,6BAAa,CAAC,mBAAmB,CAC9C,YAAY,EACZ,YAAY,CACb,CAAC;QAEF,MAAM,EAAE,GAAG,6BAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,6BAAa,CAAC,gBAAgB,CACxD,MAAM,EACN,EAAE,EACF,aAAa,CACd,CAAC;QAEF,MAAM,MAAM,GAAG;YACb,eAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5C,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1C,eAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACpC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,IAAI,uDAA0B,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;;AAzFH,8BA0FC"}

package/dist/value-objects/crypto/SymmetricEncryptedPayload.d.ts

@@ -0,0 +1,5 @@
+import { EncryptedPayload, EncryptedPayloadScheme } from './EncryptedPayload';
+export declare class SymmetricEncryptedPayload extends EncryptedPayload {
+    getScheme(): EncryptedPayloadScheme;
+}
+//# sourceMappingURL=SymmetricEncryptedPayload.d.ts.map

package/dist/value-objects/crypto/SymmetricEncryptedPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SymmetricEncryptedPayload.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/SymmetricEncryptedPayload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE9E,qBAAa,yBAA0B,SAAQ,gBAAgB;IACtD,SAAS,IAAI,sBAAsB;CAG3C"}

package/dist/value-objects/crypto/SymmetricEncryptedPayload.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SymmetricEncryptedPayload = void 0;
+const EncryptedPayload_1 = require("./EncryptedPayload");
+class SymmetricEncryptedPayload extends EncryptedPayload_1.EncryptedPayload {
+    getScheme() {
+        return 'symmetric';
+    }
+}
+exports.SymmetricEncryptedPayload = SymmetricEncryptedPayload;
+//# sourceMappingURL=SymmetricEncryptedPayload.js.map

package/dist/value-objects/crypto/SymmetricEncryptedPayload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SymmetricEncryptedPayload.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/SymmetricEncryptedPayload.ts"],"names":[],"mappings":";;;AAAA,yDAA8E;AAE9E,MAAa,yBAA0B,SAAQ,mCAAgB;IACtD,SAAS;QACd,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAJD,8DAIC"}

package/dist/value-objects/crypto/SymmetricKey.d.ts

@@ -0,0 +1,40 @@
+import { Buffer } from 'buffer';
+import { StringValueObject } from '../StringValueObject';
+import { ValueObject } from '../ValueObject';
+import { CryptoPayload } from './CryptoPayload';
+import { EncryptedPayload } from './EncryptedPayload';
+import { SymmetricEncryptedPayload } from './SymmetricEncryptedPayload';
+export type SymmetricKeyDerivationOptions = {
+    N?: number;
+    p?: number;
+    r?: number;
+    salt: string | StringValueObject | Buffer;
+};
+export declare class SymmetricKey extends ValueObject<string> {
+    private static readonly ALGORITHM;
+    private static readonly IV_LENGTH;
+    private static readonly KEY_LENGTH;
+    private static readonly MAX_PAYLOAD_LENGTH;
+    private static readonly PAYLOAD_PARTS;
+    private static readonly SCRYPT_N;
+    private static readonly SCRYPT_P;
+    private static readonly SCRYPT_R;
+    private static readonly TAG_LENGTH;
+    private static readonly VERSION;
+    private static readonly BASE64_PATTERN;
+    private static getBase64DecodedLength;
+    private static ensureIsBase64;
+    private static ensureBase64DecodedLength;
+    private static getSaltBytes;
+    private static getPayloadBytes;
+    static fromBase64(key: string | StringValueObject): SymmetricKey;
+    static fromBuffer(key: Buffer): SymmetricKey;
+    static generate(): SymmetricKey;
+    static fromPassword(password: string | StringValueObject, options: SymmetricKeyDerivationOptions): Promise<SymmetricKey>;
+    constructor(value: string | StringValueObject);
+    private ensureIsValidKey;
+    getBuffer(): Buffer;
+    encrypt(payload: CryptoPayload): SymmetricEncryptedPayload;
+    decrypt(encryptedPayload: EncryptedPayload): Buffer;
+}
+//# sourceMappingURL=SymmetricKey.d.ts.map

package/dist/value-objects/crypto/SymmetricKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SymmetricKey.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/SymmetricKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAOhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,MAAM,MAAM,6BAA6B,GAAG;IAC1C,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,MAAM,CAAC;CAC3C,CAAC;AAEF,qBAAa,YAAa,SAAQ,WAAW,CAAC,MAAM,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAM;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAM;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAe;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAK;IAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAS;IACzC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAK;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAK;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAM;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAQ;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAC+B;IAErE,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAMrC,OAAO,CAAC,MAAM,CAAC,cAAc;IAa7B,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAYxC,OAAO,CAAC,MAAM,CAAC,YAAY;IAU3B,OAAO,CAAC,MAAM,CAAC,eAAe;WAMhB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,YAAY;WAIzD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY;WASrC,QAAQ,IAAI,YAAY;WAMlB,YAAY,CAC9B,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EACpC,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,YAAY,CAAC;gBAkBZ,KAAK,EAAE,MAAM,GAAG,iBAAiB;IAU7C,OAAO,CAAC,gBAAgB;IAcjB,SAAS,IAAI,MAAM;IAInB,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,yBAAyB;IA4B1D,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM;CAuC3D"}

package/dist/value-objects/crypto/SymmetricKey.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SymmetricKey = void 0;
+const buffer_1 = require("buffer");
+const InvalidFormatError_1 = require("../../errors/InvalidFormatError");
+const InvalidLengthError_1 = require("../../errors/InvalidLengthError");
+const patterns_1 = require("../../patterns");
+const media_1 = require("../media");
+const NullObject_1 = require("../NullObject");
+const ValueObject_1 = require("../ValueObject");
+const CryptoAdapter_1 = require("./CryptoAdapter");
+const CryptoDerivation_1 = require("./encrypted-private-key/CryptoDerivation");
+const SymmetricEncryptedPayload_1 = require("./SymmetricEncryptedPayload");
+class SymmetricKey extends ValueObject_1.ValueObject {
+    static ALGORITHM = 'aes-256-gcm';
+    static IV_LENGTH = 12;
+    static KEY_LENGTH = 32;
+    static MAX_PAYLOAD_LENGTH = 1024 * 1024;
+    static PAYLOAD_PARTS = 5;
+    static SCRYPT_N = 16384;
+    static SCRYPT_P = 1;
+    static SCRYPT_R = 8;
+    static TAG_LENGTH = 16;
+    static VERSION = 'v1';
+    static BASE64_PATTERN = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+    static getBase64DecodedLength(value) {
+        const padding = value.endsWith('==') ? 2 : value.endsWith('=') ? 1 : 0;
+        return (value.length / 4) * 3 - padding;
+    }
+    static ensureIsBase64(value, encryptedPayload, options = { allowEmpty: false }) {
+        (0, patterns_1.assert)((options.allowEmpty || value.length > 0) &&
+            value.length % 4 === 0 &&
+            SymmetricKey.BASE64_PATTERN.test(value), new InvalidFormatError_1.InvalidFormatError(encryptedPayload.valueOf()));
+    }
+    static ensureBase64DecodedLength(value, encryptedPayload, length) {
+        SymmetricKey.ensureIsBase64(value, encryptedPayload);
+        (0, patterns_1.assert)(SymmetricKey.getBase64DecodedLength(value) === length, new InvalidFormatError_1.InvalidFormatError(encryptedPayload.valueOf()));
+    }
+    static getSaltBytes(salt) {
+        if (buffer_1.Buffer.isBuffer(salt)) {
+            return salt;
+        }
+        return buffer_1.Buffer.from(salt.valueOf());
+    }
+    static getPayloadBytes(payload) {
+        return payload instanceof media_1.Media
+            ? payload.getBuffer()
+            : buffer_1.Buffer.from(payload.valueOf());
+    }
+    static fromBase64(key) {
+        return new SymmetricKey(key.valueOf());
+    }
+    static fromBuffer(key) {
+        (0, patterns_1.assert)(key.length === SymmetricKey.KEY_LENGTH, new InvalidLengthError_1.InvalidLengthError(key.length, SymmetricKey.KEY_LENGTH));
+        return new SymmetricKey(key.toString('base64'));
+    }
+    static generate() {
+        return SymmetricKey.fromBuffer(CryptoAdapter_1.CryptoAdapter.randomBytes(SymmetricKey.KEY_LENGTH));
+    }
+    static async fromPassword(password, options) {
+        const salt = SymmetricKey.getSaltBytes(options.salt);
+        (0, patterns_1.assert)(salt.length > 0, new InvalidLengthError_1.InvalidLengthError(salt.length, 1));
+        const key = await CryptoDerivation_1.CryptoDerivation.scryptAsync(password.valueOf(), salt, SymmetricKey.KEY_LENGTH, {
+            N: options.N ?? SymmetricKey.SCRYPT_N,
+            p: options.p ?? SymmetricKey.SCRYPT_P,
+            r: options.r ?? SymmetricKey.SCRYPT_R,
+        });
+        return SymmetricKey.fromBuffer(buffer_1.Buffer.from(key));
+    }
+    constructor(value) {
+        super(value?.valueOf());
+        if (NullObject_1.NullObject.isNullObject(this)) {
+            return this;
+        }
+        this.ensureIsValidKey(this.value);
+    }
+    ensureIsValidKey(value) {
+        (0, patterns_1.assert)(value.length % 4 === 0 && SymmetricKey.BASE64_PATTERN.test(value), new InvalidFormatError_1.InvalidFormatError(value));
+        (0, patterns_1.assert)(SymmetricKey.getBase64DecodedLength(value) === SymmetricKey.KEY_LENGTH, new InvalidLengthError_1.InvalidLengthError(SymmetricKey.getBase64DecodedLength(value), SymmetricKey.KEY_LENGTH));
+    }
+    getBuffer() {
+        return buffer_1.Buffer.from(this.valueOf(), 'base64');
+    }
+    encrypt(payload) {
+        const messageBuffer = SymmetricKey.getPayloadBytes(payload);
+        (0, patterns_1.assert)(messageBuffer.length <= SymmetricKey.MAX_PAYLOAD_LENGTH, new InvalidLengthError_1.InvalidLengthError(messageBuffer.length, SymmetricKey.MAX_PAYLOAD_LENGTH));
+        const iv = CryptoAdapter_1.CryptoAdapter.randomBytes(SymmetricKey.IV_LENGTH);
+        const { cipherText, tag } = CryptoAdapter_1.CryptoAdapter.encryptAes256Gcm(this.getBuffer(), iv, messageBuffer);
+        const result = [
+            SymmetricKey.VERSION,
+            SymmetricKey.ALGORITHM,
+            iv.toString('base64'),
+            buffer_1.Buffer.from(cipherText).toString('base64'),
+            buffer_1.Buffer.from(tag).toString('base64'),
+        ].join('.');
+        return new SymmetricEncryptedPayload_1.SymmetricEncryptedPayload(result);
+    }
+    decrypt(encryptedPayload) {
+        const parts = encryptedPayload.valueOf().split('.');
+        (0, patterns_1.assert)(parts.length === SymmetricKey.PAYLOAD_PARTS, new InvalidFormatError_1.InvalidFormatError(encryptedPayload.valueOf()));
+        const [version, algorithm, ivB64, cipherTextB64, tagB64] = parts;
+        (0, patterns_1.assert)(version === SymmetricKey.VERSION && algorithm === SymmetricKey.ALGORITHM, new InvalidFormatError_1.InvalidFormatError(encryptedPayload.valueOf()));
+        SymmetricKey.ensureBase64DecodedLength(ivB64, encryptedPayload, SymmetricKey.IV_LENGTH);
+        SymmetricKey.ensureIsBase64(cipherTextB64, encryptedPayload, {
+            allowEmpty: true,
+        });
+        const cipherTextLength = SymmetricKey.getBase64DecodedLength(cipherTextB64);
+        (0, patterns_1.assert)(cipherTextLength <= SymmetricKey.MAX_PAYLOAD_LENGTH, new InvalidLengthError_1.InvalidLengthError(cipherTextLength, SymmetricKey.MAX_PAYLOAD_LENGTH));
+        SymmetricKey.ensureBase64DecodedLength(tagB64, encryptedPayload, SymmetricKey.TAG_LENGTH);
+        return CryptoAdapter_1.CryptoAdapter.decryptAes256Gcm(this.getBuffer(), buffer_1.Buffer.from(ivB64, 'base64'), buffer_1.Buffer.from(cipherTextB64, 'base64'), buffer_1.Buffer.from(tagB64, 'base64'));
+    }
+}
+exports.SymmetricKey = SymmetricKey;
+//# sourceMappingURL=SymmetricKey.js.map

package/dist/value-objects/crypto/SymmetricKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SymmetricKey.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/SymmetricKey.ts"],"names":[],"mappings":";;;AAAA,mCAAgC;AAEhC,wEAAqE;AACrE,wEAAqE;AACrE,6CAAwC;AACxC,oCAAiC;AACjC,8CAA2C;AAE3C,gDAA6C;AAC7C,mDAAgD;AAEhD,+EAA4E;AAE5E,2EAAwE;AASxE,MAAa,YAAa,SAAQ,yBAAmB;IAC3C,MAAM,CAAU,SAAS,GAAG,aAAa,CAAC;IAC1C,MAAM,CAAU,SAAS,GAAG,EAAE,CAAC;IAC/B,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAChC,MAAM,CAAU,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;IACjD,MAAM,CAAU,aAAa,GAAG,CAAC,CAAC;IAClC,MAAM,CAAU,QAAQ,GAAG,KAAK,CAAC;IACjC,MAAM,CAAU,QAAQ,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAU,QAAQ,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAChC,MAAM,CAAU,OAAO,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAU,cAAc,GACpC,kEAAkE,CAAC;IAE7D,MAAM,CAAC,sBAAsB,CAAC,KAAa;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvE,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IAC1C,CAAC;IAEO,MAAM,CAAC,cAAc,CAC3B,KAAa,EACb,gBAAkC,EAClC,UAAmC,EAAE,UAAU,EAAE,KAAK,EAAE;QAExD,IAAA,iBAAM,EACJ,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACtC,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;YACtB,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EACzC,IAAI,uCAAkB,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CACnD,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,yBAAyB,CACtC,KAAa,EACb,gBAAkC,EAClC,MAAc;QAEd,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACrD,IAAA,iBAAM,EACJ,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,MAAM,EACrD,IAAI,uCAAkB,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CACnD,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,YAAY,CACzB,IAAyC;QAEzC,IAAI,eAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,OAAsB;QACnD,OAAO,OAAO,YAAY,aAAK;YAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;YACrB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,GAA+B;QACtD,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,GAAW;QAClC,IAAA,iBAAM,EACJ,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,UAAU,EACtC,IAAI,uCAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,UAAU,CAAC,CAC5D,CAAC;QAEF,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,QAAQ;QACpB,OAAO,YAAY,CAAC,UAAU,CAC5B,6BAAa,CAAC,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CACnD,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,YAAY,CAC9B,QAAoC,EACpC,OAAsC;QAEtC,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,iBAAM,EAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,uCAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAEhE,MAAM,GAAG,GAAG,MAAM,mCAAgB,CAAC,WAAW,CAC5C,QAAQ,CAAC,OAAO,EAAE,EAClB,IAAI,EACJ,YAAY,CAAC,UAAU,EACvB;YACE,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,YAAY,CAAC,QAAQ;YACrC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,YAAY,CAAC,QAAQ;YACrC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,YAAY,CAAC,QAAQ;SACtC,CACF,CAAC;QAEF,OAAO,YAAY,CAAC,UAAU,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,KAAiC;QAC3C,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAExB,IAAI,uBAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,IAAA,iBAAM,EACJ,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EACjE,IAAI,uCAAkB,CAAC,KAAK,CAAC,CAC9B,CAAC;QACF,IAAA,iBAAM,EACJ,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,UAAU,EACtE,IAAI,uCAAkB,CACpB,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAC1C,YAAY,CAAC,UAAU,CACxB,CACF,CAAC;IACJ,CAAC;IAEM,SAAS;QACd,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEM,OAAO,CAAC,OAAsB;QACnC,MAAM,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAA,iBAAM,EACJ,aAAa,CAAC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EACvD,IAAI,uCAAkB,CACpB,aAAa,CAAC,MAAM,EACpB,YAAY,CAAC,kBAAkB,CAChC,CACF,CAAC;QAEF,MAAM,EAAE,GAAG,6BAAa,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,6BAAa,CAAC,gBAAgB,CACxD,IAAI,CAAC,SAAS,EAAE,EAChB,EAAE,EACF,aAAa,CACd,CAAC;QAEF,MAAM,MAAM,GAAG;YACb,YAAY,CAAC,OAAO;YACpB,YAAY,CAAC,SAAS;YACtB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1C,eAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACpC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,IAAI,qDAAyB,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAEM,OAAO,CAAC,gBAAkC;QAC/C,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpD,IAAA,iBAAM,EACJ,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,aAAa,EAC3C,IAAI,uCAAkB,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CACnD,CAAC;QAEF,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QACjE,IAAA,iBAAM,EACJ,OAAO,KAAK,YAAY,CAAC,OAAO,IAAI,SAAS,KAAK,YAAY,CAAC,SAAS,EACxE,IAAI,uCAAkB,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CACnD,CAAC;QAEF,YAAY,CAAC,yBAAyB,CACpC,KAAK,EACL,gBAAgB,EAChB,YAAY,CAAC,SAAS,CACvB,CAAC;QACF,YAAY,CAAC,cAAc,CAAC,aAAa,EAAE,gBAAgB,EAAE;YAC3D,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,YAAY,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC5E,IAAA,iBAAM,EACJ,gBAAgB,IAAI,YAAY,CAAC,kBAAkB,EACnD,IAAI,uCAAkB,CAAC,gBAAgB,EAAE,YAAY,CAAC,kBAAkB,CAAC,CAC1E,CAAC;QACF,YAAY,CAAC,yBAAyB,CACpC,MAAM,EACN,gBAAgB,EAChB,YAAY,CAAC,UAAU,CACxB,CAAC;QAEF,OAAO,6BAAa,CAAC,gBAAgB,CACnC,IAAI,CAAC,SAAS,EAAE,EAChB,eAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAC5B,eAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EACpC,eAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAC9B,CAAC;IACJ,CAAC;;AAnMH,oCAoMC"}

package/dist/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.d.ts

@@ -8,11 +8,12 @@ export declare class EncryptedPrivateKeyV2 extends EncryptedPrivateKeyVersion {
     private static readonly SCRYPT_R;
     private static readonly SCRYPT_P;
     private static readonly SALT_ENTROPY;
-    private static readonly IV_ENTROPY;
-    private static readonly KEY_LENGTH;
     private static readonly CIPHER;
     private static readonly EXPECTED_PARTS;
+    private static readonly SYMMETRIC_PAYLOAD_VERSION;
     private static hasSupportedScryptParameters;
+    private static deriveSymmetricKey;
+    private static toSymmetricPayload;
     static encrypt(privateKey: PrivateKey, password: string | StringValueObject): Promise<string>;
     matches(parts: string[]): boolean;
     decrypt(parts: string[], password: string | StringValueObject): Promise<PrivateKey>;

package/dist/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EncryptedPrivateKeyV2.d.ts","sourceRoot":"","sources":["../../../../src/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,qBAAa,qBAAsB,SAAQ,0BAA0B;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAQ;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAY;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAS;IACzC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAK;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAK;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAM;IAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAM;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAM;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAiB;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAK;IAE3C,OAAO,CAAC,MAAM,CAAC,4BAA4B;WAQvB,OAAO,CACzB,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GACnC,OAAO,CAAC,MAAM,CAAC;IAoCX,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO;IAS3B,OAAO,CAClB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GACnC,OAAO,CAAC,UAAU,CAAC;CAwBvB"}
+{"version":3,"file":"EncryptedPrivateKeyV2.d.ts","sourceRoot":"","sources":["../../../../src/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAI3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,qBAAa,qBAAsB,SAAQ,0BAA0B;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAQ;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAY;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAS;IACzC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAK;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAK;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAM;IAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAiB;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAK;IAC3C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAQ;IAEzD,OAAO,CAAC,MAAM,CAAC,4BAA4B;mBAQtB,kBAAkB;IAQvC,OAAO,CAAC,MAAM,CAAC,kBAAkB;WAkBb,OAAO,CACzB,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GACnC,OAAO,CAAC,MAAM,CAAC;IA8BX,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO;IAS3B,OAAO,CAClB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GACnC,OAAO,CAAC,UAAU,CAAC;CAqBvB"}

package/dist/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.js

@@ -2,8 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EncryptedPrivateKeyV2 = void 0;
 const buffer_1 = require("buffer");
-const CryptoAdapter_1 = require("../CryptoAdapter");
 const PrivateKey_1 = require("../PrivateKey");
+const SymmetricEncryptedPayload_1 = require("../SymmetricEncryptedPayload");
+const SymmetricKey_1 = require("../SymmetricKey");
 const CryptoDerivation_1 = require("./CryptoDerivation");
 const EncryptedPrivateKeyVersion_1 = require("./EncryptedPrivateKeyVersion");
 class EncryptedPrivateKeyV2 extends EncryptedPrivateKeyVersion_1.EncryptedPrivateKeyVersion {
@@ -13,24 +14,43 @@ class EncryptedPrivateKeyV2 extends EncryptedPrivateKeyVersion_1.EncryptedPrivat
     static SCRYPT_R = 8;
     static SCRYPT_P = 1;
     static SALT_ENTROPY = 16;
-    static IV_ENTROPY = 12;
-    static KEY_LENGTH = 32;
     static CIPHER = 'aes-256-gcm';
     static EXPECTED_PARTS = 9;
+    static SYMMETRIC_PAYLOAD_VERSION = 'v1';
     static hasSupportedScryptParameters(parts) {
         return (parts[2] === `N${EncryptedPrivateKeyV2.SCRYPT_N}` &&
             parts[3] === `r${EncryptedPrivateKeyV2.SCRYPT_R}` &&
             parts[4] === `p${EncryptedPrivateKeyV2.SCRYPT_P}`);
     }
+    static async deriveSymmetricKey(password, salt, options) {
+        return SymmetricKey_1.SymmetricKey.fromPassword(password, { ...options, salt });
+    }
+    static toSymmetricPayload(parts) {
+        const iv = parts[6];
+        const tag = parts[7];
+        const cipherText = parts[8];
+        return new SymmetricEncryptedPayload_1.SymmetricEncryptedPayload([
+            EncryptedPrivateKeyV2.SYMMETRIC_PAYLOAD_VERSION,
+            EncryptedPrivateKeyV2.CIPHER,
+            iv,
+            cipherText,
+            tag,
+        ].join('.'));
+    }
     static async encrypt(privateKey, password) {
         const salt = await CryptoDerivation_1.CryptoDerivation.randomBytesAsync(EncryptedPrivateKeyV2.SALT_ENTROPY);
-        const key = await CryptoDerivation_1.CryptoDerivation.scryptAsync(password.valueOf(), salt, EncryptedPrivateKeyV2.KEY_LENGTH, {
+        const key = await EncryptedPrivateKeyV2.deriveSymmetricKey(password, salt, {
             N: EncryptedPrivateKeyV2.SCRYPT_N,
             p: EncryptedPrivateKeyV2.SCRYPT_P,
             r: EncryptedPrivateKeyV2.SCRYPT_R,
         });
-        const iv = await CryptoDerivation_1.CryptoDerivation.randomBytesAsync(EncryptedPrivateKeyV2.IV_ENTROPY);
-        const { cipherText, tag } = CryptoAdapter_1.CryptoAdapter.encryptAes256Gcm(key, iv, buffer_1.Buffer.from(privateKey.valueOf()));
+        const symmetricPayload = key
+            .encrypt(privateKey.valueOf())
+            .valueOf()
+            .split('.');
+        const iv = symmetricPayload[2];
+        const cipherText = symmetricPayload[3];
+        const tag = symmetricPayload[4];
         return [
             EncryptedPrivateKeyV2.VERSION,
             EncryptedPrivateKeyV2.KDF,
@@ -38,9 +58,9 @@ class EncryptedPrivateKeyV2 extends EncryptedPrivateKeyVersion_1.EncryptedPrivat
             `r${EncryptedPrivateKeyV2.SCRYPT_R}`,
             `p${EncryptedPrivateKeyV2.SCRYPT_P}`,
             salt.toString('base64'),
-            iv.toString('base64'),
-            buffer_1.Buffer.from(tag).toString('base64'),
-            buffer_1.Buffer.from(cipherText).toString('base64'),
+            iv,
+            tag,
+            cipherText,
         ].join('.');
     }
     matches(parts) {
@@ -57,11 +77,12 @@ class EncryptedPrivateKeyV2 extends EncryptedPrivateKeyVersion_1.EncryptedPrivat
         const r = parseInt(parts[3].slice(1), 10);
         const p = parseInt(parts[4].slice(1), 10);
         const salt = buffer_1.Buffer.from(parts[5], 'base64');
-        const iv = buffer_1.Buffer.from(parts[6], 'base64');
-        const tag = buffer_1.Buffer.from(parts[7], 'base64');
-        const cipherText = buffer_1.Buffer.from(parts[8], 'base64');
-        const key = await CryptoDerivation_1.CryptoDerivation.scryptAsync(password.valueOf(), salt, EncryptedPrivateKeyV2.KEY_LENGTH, { N, p, r });
-        const decrypted = CryptoAdapter_1.CryptoAdapter.decryptAes256Gcm(key, iv, cipherText, tag);
+        const key = await EncryptedPrivateKeyV2.deriveSymmetricKey(password, salt, {
+            N,
+            p,
+            r,
+        });
+        const decrypted = key.decrypt(EncryptedPrivateKeyV2.toSymmetricPayload(parts));
         return new PrivateKey_1.PrivateKey(decrypted.toString());
     }
 }

package/dist/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.js.map

@@ -1 +1 @@
-{"version":3,"file":"EncryptedPrivateKeyV2.js","sourceRoot":"","sources":["../../../../src/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.ts"],"names":[],"mappings":";;;AAAA,mCAAgC;AAGhC,oDAAiD;AACjD,8CAA2C;AAC3C,yDAAsD;AACtD,6EAA0E;AAE1E,MAAa,qBAAsB,SAAQ,uDAA0B;IAC3D,MAAM,CAAU,OAAO,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAU,GAAG,GAAG,QAAQ,CAAC;IAC/B,MAAM,CAAU,QAAQ,GAAG,KAAK,CAAC;IACjC,MAAM,CAAU,QAAQ,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAU,QAAQ,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAU,YAAY,GAAG,EAAE,CAAC;IAClC,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAChC,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAChC,MAAM,CAAU,MAAM,GAAG,aAAa,CAAC;IACvC,MAAM,CAAU,cAAc,GAAG,CAAC,CAAC;IAEnC,MAAM,CAAC,4BAA4B,CAAC,KAAe;QACzD,OAAO,CACL,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACjD,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACjD,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,qBAAqB,CAAC,QAAQ,EAAE,CAClD,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,OAAO,CACzB,UAAsB,EACtB,QAAoC;QAEpC,MAAM,IAAI,GAAG,MAAM,mCAAgB,CAAC,gBAAgB,CAClD,qBAAqB,CAAC,YAAY,CACnC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,mCAAgB,CAAC,WAAW,CAC5C,QAAQ,CAAC,OAAO,EAAE,EAClB,IAAI,EACJ,qBAAqB,CAAC,UAAU,EAChC;YACE,CAAC,EAAE,qBAAqB,CAAC,QAAQ;YACjC,CAAC,EAAE,qBAAqB,CAAC,QAAQ;YACjC,CAAC,EAAE,qBAAqB,CAAC,QAAQ;SAClC,CACF,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,mCAAgB,CAAC,gBAAgB,CAChD,qBAAqB,CAAC,UAAU,CACjC,CAAC;QACF,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,6BAAa,CAAC,gBAAgB,CACxD,GAAG,EACH,EAAE,EACF,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAClC,CAAC;QAEF,OAAO;YACL,qBAAqB,CAAC,OAAO;YAC7B,qBAAqB,CAAC,GAAG;YACzB,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACpC,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACpC,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,eAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnC,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAEM,OAAO,CAAC,KAAe;QAC5B,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,qBAAqB,CAAC,cAAc;YACrD,KAAK,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,OAAO;YAC1C,KAAK,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,GAAG;YACtC,qBAAqB,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAC1D,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,KAAe,EACf,QAAoC;QAEpC,IAAI,CAAC,qBAAqB,CAAC,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,MAAM,mCAAgB,CAAC,WAAW,CAC5C,QAAQ,CAAC,OAAO,EAAE,EAClB,IAAI,EACJ,qBAAqB,CAAC,UAAU,EAChC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CACZ,CAAC;QAEF,MAAM,SAAS,GAAG,6BAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAE3E,OAAO,IAAI,uBAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC;;AA9FH,sDA+FC"}
+{"version":3,"file":"EncryptedPrivateKeyV2.js","sourceRoot":"","sources":["../../../../src/value-objects/crypto/encrypted-private-key/EncryptedPrivateKeyV2.ts"],"names":[],"mappings":";;;AAAA,mCAAgC;AAGhC,8CAA2C;AAC3C,4EAAyE;AACzE,kDAA+C;AAC/C,yDAAsD;AACtD,6EAA0E;AAE1E,MAAa,qBAAsB,SAAQ,uDAA0B;IAC3D,MAAM,CAAU,OAAO,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAU,GAAG,GAAG,QAAQ,CAAC;IAC/B,MAAM,CAAU,QAAQ,GAAG,KAAK,CAAC;IACjC,MAAM,CAAU,QAAQ,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAU,QAAQ,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAU,YAAY,GAAG,EAAE,CAAC;IAClC,MAAM,CAAU,MAAM,GAAG,aAAa,CAAC;IACvC,MAAM,CAAU,cAAc,GAAG,CAAC,CAAC;IACnC,MAAM,CAAU,yBAAyB,GAAG,IAAI,CAAC;IAEjD,MAAM,CAAC,4BAA4B,CAAC,KAAe;QACzD,OAAO,CACL,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACjD,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACjD,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,qBAAqB,CAAC,QAAQ,EAAE,CAClD,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,kBAAkB,CACrC,QAAoC,EACpC,IAAY,EACZ,OAA4C;QAE5C,OAAO,2BAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAC/B,KAAe;QAEf,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAE5B,OAAO,IAAI,qDAAyB,CAClC;YACE,qBAAqB,CAAC,yBAAyB;YAC/C,qBAAqB,CAAC,MAAM;YAC5B,EAAE;YACF,UAAU;YACV,GAAG;SACJ,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,OAAO,CACzB,UAAsB,EACtB,QAAoC;QAEpC,MAAM,IAAI,GAAG,MAAM,mCAAgB,CAAC,gBAAgB,CAClD,qBAAqB,CAAC,YAAY,CACnC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE;YACzE,CAAC,EAAE,qBAAqB,CAAC,QAAQ;YACjC,CAAC,EAAE,qBAAqB,CAAC,QAAQ;YACjC,CAAC,EAAE,qBAAqB,CAAC,QAAQ;SAClC,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,GAAG;aACzB,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;aAC7B,OAAO,EAAE;aACT,KAAK,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAEhC,OAAO;YACL,qBAAqB,CAAC,OAAO;YAC7B,qBAAqB,CAAC,GAAG;YACzB,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACpC,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACpC,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,EAAE;YACF,GAAG;YACH,UAAU;SACX,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAEM,OAAO,CAAC,KAAe;QAC5B,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,qBAAqB,CAAC,cAAc;YACrD,KAAK,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,OAAO;YAC1C,KAAK,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,GAAG;YACtC,qBAAqB,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAC1D,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,KAAe,EACf,QAAoC;QAEpC,IAAI,CAAC,qBAAqB,CAAC,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE;YACzE,CAAC;YACD,CAAC;YACD,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAC3B,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAChD,CAAC;QAEF,OAAO,IAAI,uBAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC;;AA9GH,sDA+GC"}

package/dist/value-objects/crypto/index.d.ts

@@ -1,3 +1,4 @@
+export * from './AsymmetricEncryptedPayload';
 export * from './EncryptedKeyPair';
 export * from './EncryptedPayload';
 export * from './EncryptedPrivateKey';
@@ -6,4 +7,6 @@ export * from './KeyPair';
 export * from './PrivateKey';
 export * from './PublicKey';
 export * from './Signature';
+export * from './SymmetricEncryptedPayload';
+export * from './SymmetricKey';
 //# sourceMappingURL=index.d.ts.map

package/dist/value-objects/crypto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/value-objects/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gBAAgB,CAAC"}

package/dist/value-objects/crypto/index.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./AsymmetricEncryptedPayload"), exports);
 tslib_1.__exportStar(require("./EncryptedKeyPair"), exports);
 tslib_1.__exportStar(require("./EncryptedPayload"), exports);
 tslib_1.__exportStar(require("./EncryptedPrivateKey"), exports);
@@ -9,4 +10,6 @@ tslib_1.__exportStar(require("./KeyPair"), exports);
 tslib_1.__exportStar(require("./PrivateKey"), exports);
 tslib_1.__exportStar(require("./PublicKey"), exports);
 tslib_1.__exportStar(require("./Signature"), exports);
+tslib_1.__exportStar(require("./SymmetricEncryptedPayload"), exports);
+tslib_1.__exportStar(require("./SymmetricKey"), exports);
 //# sourceMappingURL=index.js.map

package/dist/value-objects/crypto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/index.ts"],"names":[],"mappings":";;;AAAA,6DAAmC;AACnC,6DAAmC;AACnC,gEAAsC;AACtC,gDAAsB;AACtB,oDAA0B;AAC1B,uDAA6B;AAC7B,sDAA4B;AAC5B,sDAA4B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/value-objects/crypto/index.ts"],"names":[],"mappings":";;;AAAA,uEAA6C;AAC7C,6DAAmC;AACnC,6DAAmC;AACnC,gEAAsC;AACtC,gDAAsB;AACtB,oDAA0B;AAC1B,uDAA6B;AAC7B,sDAA4B;AAC5B,sDAA4B;AAC5B,sEAA4C;AAC5C,yDAA+B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haskou/value-objects",
-  "version": "2.7.4",
+  "version": "2.8.0",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [