@hg-ts/rsa 0.7.24 → 0.7.26

package/dist/rsa/public-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-key.d.ts","sourceRoot":"","sources":["../../src/rsa/public-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACtC,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAmBjD,qBAAa,YAAa,SAAQ,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;IACvE,OAAc,MAAM,iFAAU;IAEvB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;IASvC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IAejD,QAAQ,IAAI,MAAM;WAIpB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY;IAMtD,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,4BAA4B;IAQpC,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,KAAK;IAIb,OAAO,KAAK,SAAS,GAEpB;IAED,OAAO,KAAK,SAAS,GAEpB;IAED,OAAO,CAAC,gBAAgB;CAWxB"}

package/dist/rsa/public-key.js

@@ -0,0 +1,85 @@
+import { z } from '@hg-ts/validation';
+import forge from 'node-forge';
+import { BasePublicKey } from '../base/index.js';
+const schema = z.string().transform((value, ctx) => {
+    try {
+        const publicKey = forge.pki.publicKeyFromPem(value);
+        return forge.pki.publicKeyToPem(publicKey);
+    }
+    catch (error) {
+        ctx.issues.push({
+            message: 'Invalid public key',
+            fatal: true,
+            code: 'invalid_format',
+            input: value,
+            format: 'RSA Public Key',
+        });
+        return value;
+    }
+}).pipe(z.string());
+export class RsaPublicKey extends BasePublicKey {
+    static schema = schema;
+    encrypt(value) {
+        const md = this.getMd();
+        const chunks = this.prepareToEncrypt(value);
+        const encryptedChunks = chunks.map(chunk => this.key.encrypt(chunk, 'RSAES-PKCS1-V1_5', { md }));
+        return this.formatEncrypted(encryptedChunks);
+    }
+    verify(signature, value) {
+        const hash = this.getMd();
+        hash.update(value, 'utf8');
+        const pss = forge.pss.create({
+            md: this.getMd(),
+            mgf: forge.mgf.mgf1.create(this.getMd()),
+            saltLength: 20,
+        });
+        const formattedSignature = this.formatSignature(signature);
+        return this.key.verify(hash.digest().bytes(), formattedSignature, pss);
+    }
+    toString() {
+        return forge.pki.publicKeyToPem(this.key);
+    }
+    static fromString(pemKey) {
+        const key = forge.pki.publicKeyFromPem(pemKey);
+        return new RsaPublicKey(key);
+    }
+    prepareToEncrypt(data) {
+        const input = this.formatDecryptedInputToBinary(data);
+        return this.splitBinaryInput(input, this.maxLength);
+    }
+    formatDecryptedInputToBinary(data) {
+        if (typeof data === 'string') {
+            return forge.util.encodeUtf8(data);
+        }
+        return Buffer.from(data).toString('hex');
+    }
+    formatSignature(data) {
+        if (typeof data === 'string') {
+            return data;
+        }
+        return Buffer.from(data).toString('binary');
+    }
+    formatEncrypted(data) {
+        const chunks = data.map(chunk => Buffer.from(chunk, 'binary').toString('hex'));
+        return Buffer.from(chunks.join(''), 'hex');
+    }
+    getMd() {
+        return forge.md.sha256.create();
+    }
+    get maxLength() {
+        return this.keyLength - (this.getMd().digestLength * 2) - 2;
+    }
+    get keyLength() {
+        return Math.ceil(this.key.n.bitLength() / 8);
+    }
+    splitBinaryInput(value, length) {
+        const chunks = [];
+        let index = 0;
+        while (index < value.length) {
+            chunks.push(value.slice(index, index + length));
+            index += length;
+        }
+        return chunks;
+    }
+}
+//# sourceMappingURL=public-key.js.map

package/dist/rsa/public-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-key.js","sourceRoot":"","sources":["../../src/rsa/public-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACtC,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAClD,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAEpD,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,OAAO,EAAE,oBAAoB;YAC7B,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,gBAAgB;SACxB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEpB,MAAM,OAAO,YAAa,SAAQ,aAAsC;IAChE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAEvB,OAAO,CAAC,KAAsB;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE5C,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEjG,OAAO,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC;IAEM,MAAM,CAAC,SAA0B,EAAE,KAAa;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5B,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,UAAU,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE3D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;IAEe,QAAQ;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,MAAc;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAE/C,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAEO,gBAAgB,CAAC,IAAqB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAEO,4BAA4B,CAAC,IAAqB;QACzD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAEO,eAAe,CAAC,IAAqB;QAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAEO,eAAe,CAAC,IAAc;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAE/E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK;QACZ,OAAO,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAED,IAAY,SAAS;QACpB,OAAO,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,IAAY,SAAS;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,gBAAgB,CAAC,KAAa,EAAE,MAAc;QACrD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;YAChD,KAAK,IAAI,MAAM,CAAC;QACjB,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC"}

package/dist/{rsa.test.d.ts → rsa/rsa.test.d.ts}

@@ -1,10 +1,16 @@
 import { Suite } from '@hg-ts/tests';
 export declare class RsaTest extends Suite {
+    nativeKey(): Promise<void>;
     keyPairFromPrivateKey(): Promise<void>;
     keyPairFromPrivateKeyString(): Promise<void>;
+    keyPairFromPrivateKeyEncryption(): Promise<void>;
     signature(): Promise<void>;
     signatureBuffer(): Promise<void>;
     encryption(): Promise<void>;
+    encryptionFailsForAnotherRecipient(): Promise<void>;
+    encryptionRu(): Promise<void>;
+    encryptionHex(): Promise<void>;
+    encryptionEn(): Promise<void>;
     encryptionBuffer(): Promise<void>;
     longMessageEncryption(): Promise<void>;
     longMessageSignature(): Promise<void>;

package/dist/rsa/rsa.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.test.d.ts","sourceRoot":"","sources":["../../src/rsa/rsa.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,KAAK,EAEL,MAAM,cAAc,CAAC;AAQtB,qBACa,OAAQ,SAAQ,KAAK;IAEpB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1B,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtC,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5C,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC;IAYhD,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAS1B,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAShC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAU3B,kCAAkC,IAAI,OAAO,CAAC,IAAI,CAAC;IAWnD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAS7B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAS9B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAS7B,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IASjC,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAUtC,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IASrC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAUvB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQrC,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQpC,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1C,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;CAOvD"}

package/dist/{rsa.test.js → rsa/rsa.test.js}

@@ -1,88 +1,134 @@
 import { __decorate, __metadata } from "tslib";
 import { Describe, expect, ExpectException, Suite, Test, } from '@hg-ts/tests';
 import { z } from '@hg-ts/validation';
-import { RSAKeyPair } from './rsa.key-pair.js';
-import { RSAPrivateKey } from './rsa.private-key.js';
-import { RSAPublicKey } from './rsa.public-key.js';
+import forge from 'node-forge';
+import { InvalidDecryptionKeyExpection } from '../exceptions/index.js';
+import { RsaKeyPair } from './key-pair.js';
+import { RsaPrivateKey } from './private-key.js';
+import { RsaPublicKey } from './public-key.js';
 let RsaTest = class RsaTest extends Suite {
+    async nativeKey() {
+        const { privateKeyInstance, privateKey, publicKeyInstance, publicKey } = new RsaKeyPair({ bits: 786 });
+        expect(privateKey).toBe(forge.pki.privateKeyToPem(privateKeyInstance.nativeKey));
+        expect(publicKey).toBe(forge.pki.publicKeyToPem(publicKeyInstance.nativeKey));
+    }
     async keyPairFromPrivateKey() {
-        const { privateKey, publicKey } = new RSAKeyPair({ bits: 512 });
-        const key = RSAPrivateKey.fromString(privateKey);
-        const keyPairFromKey = new RSAKeyPair({ privateKey: key });
+        const { privateKey, publicKey } = new RsaKeyPair();
+        const key = RsaPrivateKey.fromString(privateKey);
+        const keyPairFromKey = new RsaKeyPair({ privateKey: key });
         expect(keyPairFromKey.privateKey).toBe(privateKey);
         expect(keyPairFromKey.publicKey).toBe(publicKey);
     }
     async keyPairFromPrivateKeyString() {
-        const { privateKey, publicKey } = new RSAKeyPair({ bits: 512 });
-        const keyPairFromKey = new RSAKeyPair({ privateKey });
+        const { privateKey, publicKey } = new RsaKeyPair({ bits: 786 });
+        const keyPairFromKey = new RsaKeyPair({ privateKey });
         expect(keyPairFromKey.privateKey).toBe(privateKey);
         expect(keyPairFromKey.publicKey).toBe(publicKey);
     }
+    async keyPairFromPrivateKeyEncryption() {
+        const { privateKey } = new RsaKeyPair({ bits: 786 });
+        const key = RsaPrivateKey.fromString(privateKey);
+        const value = Math.random().toString();
+        const encrypted = key.toPublicKey().encrypt(value);
+        const decrypted = key.decrypt(encrypted);
+        expect(value).toBe(decrypted);
+    }
     async signature() {
-        const rsa = new RSAKeyPair({ bits: 512 });
+        const rsa = new RsaKeyPair({ bits: 786 });
         const value = Math.random().toString();
         const signature = rsa.sign(value);
         expect(rsa.verify(signature.toString('binary'), value)).toBeTruthy();
     }
     async signatureBuffer() {
-        const rsa = new RSAKeyPair({ bits: 512 });
+        const rsa = new RsaKeyPair({ bits: 786 });
         const value = Math.random().toString();
         const signature = rsa.sign(value);
         expect(rsa.verify(signature, value)).toBeTruthy();
     }
     async encryption() {
-        const rsa = new RSAKeyPair({ bits: 1024 });
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const value = Math.random().toString();
+        const encrypted = rsa.encrypt(value);
+        expect(rsa.decrypt(encrypted.toString('hex'))).toBe(value);
+    }
+    async encryptionFailsForAnotherRecipient() {
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const anotherRecipient = new RsaKeyPair({ bits: 786 });
         const value = Math.random().toString();
         const encrypted = rsa.encrypt(value);
+        anotherRecipient.decrypt(encrypted.toString('hex'));
+    }
+    async encryptionRu() {
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const value = 'Тестовый текст';
+        const encrypted = rsa.encrypt(value);
+        expect(rsa.decrypt(encrypted.toString('hex'))).toBe(value);
+    }
+    async encryptionHex() {
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const value = Math.floor(Math.random() * 10000).toString(16);
+        const encrypted = rsa.encrypt(value);
+        expect(rsa.decrypt(encrypted.toString('hex'))).toBe(value);
+    }
+    async encryptionEn() {
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const value = 'Test text';
+        const encrypted = rsa.encrypt(value);
         expect(rsa.decrypt(encrypted.toString('hex'))).toBe(value);
     }
     async encryptionBuffer() {
-        const rsa = new RSAKeyPair({ bits: 1024 });
+        const rsa = new RsaKeyPair({ bits: 786 });
         const value = Buffer.from(Math.random().toString(), 'utf-8');
         const encrypted = rsa.encrypt(value);
         expect(Buffer.from(rsa.decrypt(encrypted), 'hex')).toMatchObject(value);
     }
     async longMessageEncryption() {
-        const rsa = new RSAKeyPair({ bits: 1024 });
-        const rsaToTest = new RSAKeyPair({ bits: 1024 });
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const rsaToTest = new RsaKeyPair({ bits: 786 });
         const value = rsaToTest.publicKey;
         const encrypted = rsa.encrypt(value);
         expect(rsa.decrypt(encrypted)).toBe(value);
     }
     async longMessageSignature() {
-        const rsa = new RSAKeyPair({ bits: 512 });
+        const rsa = new RsaKeyPair({ bits: 786 });
         const value = rsa.publicKey;
         const signature = rsa.sign(value);
         expect(rsa.verify(signature, value)).toBeTruthy();
     }
     async seeded() {
         const seed = Math.random().toString();
-        const rsa1 = new RSAKeyPair({ seed, bits: 512 });
-        const rsa2 = new RSAKeyPair({ seed, bits: 512 });
+        const rsa1 = new RsaKeyPair({ seed, bits: 786 });
+        const rsa2 = new RsaKeyPair({ seed, bits: 786 });
         expect(rsa1.privateKey).toBe(rsa2.privateKey);
         expect(rsa1.publicKey).toBe(rsa2.publicKey);
     }
     async privateKeyFromString() {
-        const rsa = new RSAKeyPair({ bits: 512 });
-        const rsaFromString = RSAPrivateKey.fromString(rsa.privateKey);
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const rsaFromString = RsaPrivateKey.fromString(rsa.privateKey);
         expect(rsaFromString.toString()).toBe(rsa.privateKey.toString());
     }
     async publicKeyFromString() {
-        const rsa = new RSAKeyPair({ bits: 512 });
-        const rsaFromString = RSAPublicKey.fromString(rsa.publicKey);
+        const rsa = new RsaKeyPair({ bits: 786 });
+        const rsaFromString = RsaPublicKey.fromString(rsa.publicKey);
         expect(rsaFromString.toString()).toBe(rsa.publicKey.toString());
     }
     async publicKeyValidationsValid() {
-        const rsa = new RSAKeyPair({ bits: 512 });
-        RSAPublicKey.schema.parse(rsa.publicKey.toString());
+        const rsa = new RsaKeyPair({ bits: 786 });
+        RsaPublicKey.schema.parse(rsa.publicKey.toString());
     }
     async publicKeyValidationsFails() {
-        RSAPublicKey.schema.parse(`-----BEGIN PUBLIC KEY-----
+        RsaPublicKey.schema.parse(`-----BEGIN PUBLIC KEY-----
 MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALnfPJr6J2UXwvZhbPWolBw4UJHAEMd
 /FvIyIYADhT/k+2TIFixs4pxM5VaGMP7Tny+5WAouv9ulh4tACPxKoMCAwEAAQ==
 -----END PUBLIC KEY-----`);
     }
 };
+__decorate([
+    Test(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RsaTest.prototype, "nativeKey", null);
 __decorate([
     Test(),
     __metadata("design:type", Function),
@@ -95,6 +141,12 @@ __decorate([
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)
 ], RsaTest.prototype, "keyPairFromPrivateKeyString", null);
+__decorate([
+    Test(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RsaTest.prototype, "keyPairFromPrivateKeyEncryption", null);
 __decorate([
     Test(),
     __metadata("design:type", Function),
@@ -113,6 +165,31 @@ __decorate([
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)
 ], RsaTest.prototype, "encryption", null);
+__decorate([
+    Test(),
+    ExpectException(InvalidDecryptionKeyExpection),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RsaTest.prototype, "encryptionFailsForAnotherRecipient", null);
+__decorate([
+    Test(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RsaTest.prototype, "encryptionRu", null);
+__decorate([
+    Test(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RsaTest.prototype, "encryptionHex", null);
+__decorate([
+    Test(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RsaTest.prototype, "encryptionEn", null);
 __decorate([
     Test(),
     __metadata("design:type", Function),

package/dist/rsa/rsa.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.test.js","sourceRoot":"","sources":["../../src/rsa/rsa.test.ts"],"names":[],"mappings":";AAAA,OAAO,EACN,QAAQ,EACR,MAAM,EACN,eAAe,EACf,KAAK,EACL,IAAI,GACJ,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACtC,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGxC,IAAM,OAAO,GAAb,MAAM,OAAQ,SAAQ,KAAK;IAEpB,AAAN,KAAK,CAAC,SAAS;QACrB,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAEvG,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC;IAGY,AAAN,KAAK,CAAC,qBAAqB;QACjC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEjD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAGY,AAAN,KAAK,CAAC,2BAA2B;QACvC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAEhE,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAGY,AAAN,KAAK,CAAC,+BAA+B;QAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEzC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAGY,AAAN,KAAK,CAAC,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QAEvC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACtE,CAAC;IAGY,AAAN,KAAK,CAAC,eAAe;QAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QAEvC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IAGY,AAAN,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QAEvC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAIY,AAAN,KAAK,CAAC,kCAAkC;QAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QAEvC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAErC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY;QACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAE/B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAGY,AAAN,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY;QACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC;QAE1B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAGY,AAAN,KAAK,CAAC,gBAAgB;QAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAGY,AAAN,KAAK,CAAC,qBAAqB;QACjC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC;QAElC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAGY,AAAN,KAAK,CAAC,oBAAoB;QAChC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAE5B,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IAGY,AAAN,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAEjD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAGY,AAAN,KAAK,CAAC,oBAAoB;QAChC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE/D,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAGY,AAAN,KAAK,CAAC,mBAAmB;QAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAGY,AAAN,KAAK,CAAC,yBAAyB;QACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAE1C,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IAIY,AAAN,KAAK,CAAC,yBAAyB;QAErC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;;;yBAGH,CAAC,CAAC;IAC1B,CAAC;CACD,CAAA;AAhLa;IADZ,IAAI,EAAE;;;;wCAMN;AAGY;IADZ,IAAI,EAAE;;;;oDASN;AAGY;IADZ,IAAI,EAAE;;;;0DAQN;AAGY;IADZ,IAAI,EAAE;;;;8DAUN;AAGY;IADZ,IAAI,EAAE;;;;wCAON;AAGY;IADZ,IAAI,EAAE;;;;8CAON;AAGY;IADZ,IAAI,EAAE;;;;yCAON;AAIY;IAFZ,IAAI,EAAE;IACN,eAAe,CAAC,6BAA6B,CAAC;;;;iEAS9C;AAGY;IADZ,IAAI,EAAE;;;;2CAON;AAGY;IADZ,IAAI,EAAE;;;;4CAON;AAGY;IADZ,IAAI,EAAE;;;;2CAON;AAGY;IADZ,IAAI,EAAE;;;;+CAON;AAGY;IADZ,IAAI,EAAE;;;;oDAQN;AAGY;IADZ,IAAI,EAAE;;;;mDAON;AAGY;IADZ,IAAI,EAAE;;;;qCAQN;AAGY;IADZ,IAAI,EAAE;;;;mDAMN;AAGY;IADZ,IAAI,EAAE;;;;kDAMN;AAGY;IADZ,IAAI,EAAE;;;;wDAKN;AAIY;IAFZ,IAAI,EAAE;IACN,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC;;;;wDAO3B;AAjLW,OAAO;IADnB,QAAQ,EAAE;GACE,OAAO,CAkLnB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hg-ts/rsa",
-  "version": "0.7.24",
+  "version": "0.7.26",
   "main": "dist/index.js",
   "type": "module",
   "exports": {
@@ -18,12 +18,12 @@
     "test:dev": "vitest watch"
   },
   "devDependencies": {
-    "@hg-ts-config/typescript": "0.7.24",
-    "@hg-ts/exception": "0.7.24",
-    "@hg-ts/linter": "0.7.24",
-    "@hg-ts/tests": "0.7.24",
-    "@hg-ts/types": "0.7.24",
-    "@hg-ts/validation": "0.7.24",
+    "@hg-ts-config/typescript": "0.7.26",
+    "@hg-ts/exception": "0.7.26",
+    "@hg-ts/linter": "0.7.26",
+    "@hg-ts/tests": "0.7.26",
+    "@hg-ts/types": "0.7.26",
+    "@hg-ts/validation": "0.7.26",
     "@types/node": "22.19.1",
     "@types/node-forge": "^1",
     "@vitest/coverage-v8": "4.0.14",
@@ -36,13 +36,15 @@
     "vitest": "4.0.14"
   },
   "peerDependencies": {
-    "@hg-ts/exception": "0.7.24",
-    "@hg-ts/validation": "0.7.24",
+    "@hg-ts/exception": "0.7.26",
+    "@hg-ts/validation": "0.7.26",
     "reflect-metadata": "*",
     "tslib": "*",
     "vitest": "*"
   },
   "dependencies": {
+    "@signalapp/libsignal-client": "0.93.1",
+    "libsodium-wrappers": "0.8.4",
     "node-forge": "1.3.1"
   }
 }

package/src/X25519/index.ts

@@ -0,0 +1,3 @@
+export * from './public-key.js';
+export * from './private-key.js';
+export * from './key-pair.js';

package/src/X25519/key-pair.ts

@@ -0,0 +1,58 @@
+import sodium from 'libsodium-wrappers';
+import {
+	BaseKeyPair,
+	KeyPairOptions,
+	KeyPairResult,
+	NewKeyPairOptions,
+} from '../base/index.js';
+import { X25519PrivateKey } from './private-key.js';
+import { X25519PublicKey } from './public-key.js';
+
+export class X25519KeyPair extends BaseKeyPair<
+	X25519PrivateKey,
+	X25519PublicKey
+> {
+	public constructor(options: KeyPairOptions<X25519PrivateKey> = {}) {
+		super(options, X25519PrivateKey);
+	}
+
+	public override encrypt(value: string | Buffer, recipientPublicKey: X25519PublicKey): Buffer {
+		return recipientPublicKey.encrypt(value, this.privateKeyInstance);
+	}
+
+	public override decrypt(value: string | Buffer, senderPublicKey: X25519PublicKey): string {
+		return this.privateKeyInstance.decrypt(value, senderPublicKey);
+	}
+
+	public override sign(value: string): Buffer {
+		return this.privateKeyInstance.sign(value);
+	}
+
+	public override verify(signature: string | Buffer, value: string): boolean {
+		return this.publicKeyInstance.verify(signature, value);
+	}
+
+	protected generateNewKeys(options: NewKeyPairOptions): KeyPairResult<X25519PrivateKey, X25519PublicKey> {
+		const privateKey = this.generatePrivateKey(options.seed);
+		const privateKeyInstance = new X25519PrivateKey(privateKey);
+
+		return {
+			privateKey: privateKeyInstance,
+			publicKey: privateKeyInstance.toPublicKey(),
+		};
+	}
+
+	private generatePrivateKey(seed?: string): Buffer {
+		if (!seed) {
+			return Buffer.from(sodium.randombytes_buf(sodium.crypto_scalarmult_SCALARBYTES));
+		}
+
+		const bytes = Buffer.from(seed, 'utf8');
+
+		if (bytes.length === sodium.crypto_scalarmult_SCALARBYTES) {
+			return bytes;
+		}
+
+		return Buffer.from(sodium.crypto_generichash(sodium.crypto_scalarmult_SCALARBYTES, bytes, null));
+	}
+}

package/src/X25519/private-key.ts

@@ -0,0 +1,54 @@
+import { NotImplementedException } from '@hg-ts/exception';
+import sodium from 'libsodium-wrappers';
+import { BasePrivateKey } from '../base/index.js';
+import { InvalidDecryptionKeyExpection } from '../exceptions/index.js';
+import { X25519PublicKey } from './public-key.js';
+import { deriveEncryptionKey } from './utils.js';
+
+export class X25519PrivateKey extends BasePrivateKey<Buffer, X25519PublicKey> {
+	public override decrypt(encrypted: string | Buffer, senderPublicKeyInstance: X25519PublicKey): string {
+		const payload = typeof encrypted === 'string' ? Buffer.from(encrypted, 'base64') : encrypted;
+
+		const senderPublicKey = senderPublicKeyInstance.nativeKey;
+		const sharedSecret = Buffer.from(sodium.crypto_scalarmult(this.key, senderPublicKey));
+
+		const publicKey = this.toPublicKey().nativeKey;
+		const encryptionKey = deriveEncryptionKey(sharedSecret, senderPublicKey, publicKey);
+
+		try {
+			const nonce = payload.subarray(0, 24);
+			const ciphertext = payload.subarray(24);
+			const decrypted = sodium.crypto_aead_xchacha20poly1305_ietf_decrypt(
+				null,
+				ciphertext,
+				null,
+				nonce,
+				encryptionKey,
+			);
+
+			return Buffer.from(decrypted).toString('utf-8');
+		} catch {
+			throw new InvalidDecryptionKeyExpection();
+		}
+	}
+
+	public override sign(_value: string): Buffer {
+		throw new NotImplementedException();
+	}
+
+	public override toPublicKey(): X25519PublicKey {
+		return new X25519PublicKey(Buffer.from(sodium.crypto_scalarmult_base(this.key)));
+	}
+
+	public override toString(): string {
+		return this.key.toString('base64');
+	}
+
+	public override get nativeKey(): Buffer {
+		return Buffer.from(this.key);
+	}
+
+	public static fromString(value: string): X25519PrivateKey {
+		return new X25519PrivateKey(Buffer.from(value, 'base64'));
+	}
+}

package/src/X25519/public-key.ts

@@ -0,0 +1,68 @@
+import { NotImplementedException } from '@hg-ts/exception';
+import { z } from '@hg-ts/validation';
+import sodium from 'libsodium-wrappers';
+import { BasePublicKey } from '../base/index.js';
+import type { X25519PrivateKey } from './private-key.js';
+import { deriveEncryptionKey } from './utils.js';
+
+const schema = z.string().transform((value, ctx) => {
+	const publicKey = Buffer.from(value, 'base64');
+
+	if (publicKey.length !== sodium.crypto_scalarmult_BYTES) {
+		ctx.issues.push({
+			message: 'Invalid X25519 public key',
+			fatal: true,
+			code: 'invalid_format',
+			input: value,
+			format: 'X25519 Public Key',
+		});
+		return value;
+	}
+
+	return value;
+}).pipe(z.string());
+
+export class X25519PublicKey extends BasePublicKey<Buffer> {
+	public static schema = schema;
+
+	public override encrypt(value: string | Buffer, senderPrivateKeyInstance: X25519PrivateKey): Buffer {
+		const senderPrivateKey = senderPrivateKeyInstance.nativeKey;
+		const sharedSecret = Buffer.from(sodium.crypto_scalarmult(senderPrivateKey, this.key));
+
+		const senderPublicKey = senderPrivateKeyInstance.toPublicKey().nativeKey;
+		const encryptionKey = deriveEncryptionKey(sharedSecret, senderPublicKey, this.key);
+
+		const nonce = Buffer.from(sodium.randombytes_buf(sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES));
+		const ciphertext = Buffer.from(sodium.crypto_aead_xchacha20poly1305_ietf_encrypt(
+			this.formatInput(value),
+			null,
+			null,
+			nonce,
+			encryptionKey,
+		));
+
+		return Buffer.concat([nonce, ciphertext]);
+	}
+
+	public override verify(_signature: string | Buffer, _value: string): boolean {
+		throw new NotImplementedException();
+	}
+
+	public override toString(): string {
+		return this.key.toString('base64');
+	}
+
+	public override get nativeKey(): Buffer {
+		return Buffer.from(this.key);
+	}
+
+	public static fromString(value: string): X25519PublicKey {
+		return new X25519PublicKey(Buffer.from(value, 'base64'));
+	}
+
+	private formatInput(value: string | Buffer): Buffer {
+		return typeof value === 'string'
+			? Buffer.from(value, 'utf8')
+			: value;
+	}
+}

package/src/X25519/utils.ts

@@ -0,0 +1,22 @@
+import sodium from 'libsodium-wrappers';
+
+const ALGORITHM = Buffer.from('X25519-XChaCha20-Poly1305', 'utf8');
+
+sodium.ready.catch(() => {});
+
+export function deriveEncryptionKey(
+	sharedSecret: Buffer,
+	senderPublicKey: Buffer,
+	recipientPublicKey: Buffer,
+): Buffer {
+	return Buffer.from(sodium.crypto_generichash(
+		sodium.crypto_aead_xchacha20poly1305_ietf_KEYBYTES,
+		Buffer.concat([
+			ALGORITHM,
+			sharedSecret,
+			senderPublicKey,
+			recipientPublicKey,
+		]),
+		null,
+	));
+}