@hpke/jose 0.0.0-stage → 0.1.0

package/esm/src/encrypt0.d.ts

@@ -0,0 +1,64 @@
+import type { CipherSuite } from "@hpke/core";
+import { type JoseHpkeAlg } from "./alg.js";
+import { type JweFlattenedJson, type JweGeneralJson } from "./serialization.js";
+/** Options for JoseEncrypt0 seal/open operations. */
+export interface JoseEncrypt0Options {
+    /** HPKE info parameter. Defaults to empty. */
+    info?: Uint8Array;
+    /**
+     * Pre-shared key for PSK mode. `id` is the HPKE psk_id; it is carried in the
+     * "psk_id" header parameter as BASE64URL(id).
+     */
+    psk?: {
+        id: Uint8Array;
+        key: Uint8Array;
+    };
+    /** Key identifier to include in the protected header. */
+    kid?: string;
+}
+/**
+ * JWE Integrated Encryption using HPKE.
+ *
+ * Implements draft-ietf-jose-hpke-encrypt-22 Section 5. seal() produces the
+ * Compact Serialization; open() accepts all JWE serializations.
+ */
+export interface JoseEncrypt0 {
+    /** The underlying HPKE CipherSuite. */
+    readonly suite: CipherSuite;
+    /** Generate a KEM key pair. */
+    generateKemKeyPair(): Promise<CryptoKeyPair>;
+    /**
+     * Encrypt a plaintext into a JWE Compact Serialization string.
+     *
+     * Format: BASE64URL(header).BASE64URL(enc)..BASE64URL(ct).
+     */
+    seal(recipientPublicKey: CryptoKey, plaintext: Uint8Array, options?: JoseEncrypt0Options): Promise<string>;
+    /**
+     * Decrypt a JWE in the Compact, Flattened JSON or General JSON Serialization.
+     * The JWE AAD, if any, is taken from the "aad" member.
+     */
+    open(recipientKey: CryptoKeyPair | CryptoKey, jwe: string | JweFlattenedJson | JweGeneralJson, options?: JoseEncrypt0Options): Promise<Uint8Array>;
+    /**
+     * Import a public key from a JWK.
+     * Validates kty and crv against the algorithm.
+     */
+    importPublicJwk(jwk: JsonWebKey): Promise<CryptoKey>;
+    /**
+     * Import a private key from a JWK.
+     * Validates kty and crv against the algorithm.
+     */
+    importPrivateJwk(jwk: JsonWebKey): Promise<CryptoKey>;
+}
+/** @internal */
+export declare class JoseEncrypt0Impl implements JoseEncrypt0 {
+    private _alg;
+    private _suite;
+    constructor(suite: CipherSuite, alg: JoseHpkeAlg);
+    get suite(): CipherSuite;
+    generateKemKeyPair(): Promise<CryptoKeyPair>;
+    seal(recipientPublicKey: CryptoKey, plaintext: Uint8Array, options?: JoseEncrypt0Options): Promise<string>;
+    open(recipientKey: CryptoKeyPair | CryptoKey, jwe: string | JweFlattenedJson | JweGeneralJson, options?: JoseEncrypt0Options): Promise<Uint8Array>;
+    importPublicJwk(jwk: JsonWebKey): Promise<CryptoKey>;
+    importPrivateJwk(jwk: JsonWebKey): Promise<CryptoKey>;
+}
+//# sourceMappingURL=encrypt0.d.ts.map

package/esm/src/encrypt0.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt0.d.ts","sourceRoot":"","sources":["../../src/src/encrypt0.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAA0B,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAGpE,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAEpB,MAAM,oBAAoB,CAAC;AAS5B,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB;;;OAGG;IACH,GAAG,CAAC,EAAE;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;IAC1C,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAE5B,+BAA+B;IAC/B,kBAAkB,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAE7C;;;;OAIG;IACH,IAAI,CACF,kBAAkB,EAAE,SAAS,EAC7B,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB;;;OAGG;IACH,IAAI,CACF,YAAY,EAAE,aAAa,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,cAAc,EAC/C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAErD;;;OAGG;IACH,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACvD;AAED,gBAAgB;AAChB,qBAAa,gBAAiB,YAAW,YAAY;IACnD,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,MAAM,CAAc;gBAEhB,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW;IAUhD,IAAI,KAAK,IAAI,WAAW,CAEvB;IAEK,kBAAkB,IAAI,OAAO,CAAC,aAAa,CAAC;IAI5C,IAAI,CACR,kBAAkB,EAAE,SAAS,EAC7B,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IAqCZ,IAAI,CACR,YAAY,EAAE,aAAa,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,cAAc,EAC/C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,UAAU,CAAC;IAqFhB,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IASpD,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAQ5D"}

package/esm/src/encrypt0.js

@@ -0,0 +1,128 @@
+import { isIntegratedEncryption } from "./alg.js";
+import { decodeBase64Url, encodeBase64Url } from "./utils.js";
+import { JoseError } from "./errors.js";
+import { parseJwe, } from "./serialization.js";
+import { extractPrivateKeyBytesFromJwk, extractPublicKeyBytesFromJwk, } from "./jwk.js";
+const EMPTY = new Uint8Array(0);
+const te = new TextEncoder();
+/** @internal */
+export class JoseEncrypt0Impl {
+    constructor(suite, alg) {
+        Object.defineProperty(this, "_alg", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "_suite", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        if (!isIntegratedEncryption(alg)) {
+            throw new JoseError("JoseEncrypt0 requires an Integrated Encryption algorithm");
+        }
+        this._alg = alg;
+        this._suite = suite;
+    }
+    get suite() {
+        return this._suite;
+    }
+    async generateKemKeyPair() {
+        return await this._suite.kem.generateKeyPair();
+    }
+    async seal(recipientPublicKey, plaintext, options) {
+        const info = options?.info ?? EMPTY;
+        const senderParams = {
+            recipientPublicKey,
+            info,
+        };
+        if (options?.psk) {
+            senderParams.psk = options.psk;
+        }
+        const ctx = await this._suite.createSenderContext(senderParams);
+        const encBytes = new Uint8Array(ctx.enc);
+        // Build protected header
+        const header = { alg: this._alg };
+        if (options?.kid) {
+            header.kid = options.kid;
+        }
+        if (options?.psk) {
+            header.psk_id = encodeBase64Url(options.psk.id);
+        }
+        const encodedProtectedHeader = encodeBase64Url(te.encode(JSON.stringify(header)));
+        // AAD = ASCII(Encoded Protected Header)
+        const aad = te.encode(encodedProtectedHeader);
+        const ciphertext = new Uint8Array(await ctx.seal(plaintext, aad));
+        // Compact JWE: header.enc..ct.
+        // IV and tag are empty for Integrated Encryption
+        return `${encodedProtectedHeader}.${encodeBase64Url(encBytes)}..${encodeBase64Url(ciphertext)}.`;
+    }
+    async open(recipientKey, jwe, options) {
+        const info = options?.info ?? EMPTY;
+        const parsed = parseJwe(jwe);
+        if (parsed.recipients.length !== 1) {
+            throw new JoseError("Integrated Encryption requires exactly one recipient");
+        }
+        const { joseHeader: header, encryptedKey } = parsed.recipients[0];
+        // "alg" MUST be in the protected header for Integrated Encryption
+        const algValue = parsed.protectedHeader.alg;
+        if (algValue !== this._alg) {
+            throw new JoseError(`Algorithm mismatch: expected ${this._alg}, got ${algValue}`);
+        }
+        // "enc" MUST NOT be present for Integrated Encryption
+        if ("enc" in header) {
+            throw new JoseError("enc parameter must not be present for Integrated Encryption");
+        }
+        // "ek" MUST NOT be present for Integrated Encryption
+        if ("ek" in header) {
+            throw new JoseError("ek parameter must not be present for Integrated Encryption");
+        }
+        // The JWE IV and Authentication Tag MUST be empty
+        if (parsed.iv || parsed.tag) {
+            throw new JoseError("iv and tag must be empty for Integrated Encryption");
+        }
+        if (!encryptedKey || !parsed.ciphertext) {
+            throw new JoseError("Missing encrypted key or ciphertext");
+        }
+        // PSK consistency validation
+        if (options?.psk) {
+            const storedPskId = parsed.protectedHeader.psk_id;
+            if (storedPskId === undefined) {
+                throw new JoseError("Missing psk_id in protected header for PSK mode");
+            }
+            if (storedPskId !== encodeBase64Url(options.psk.id)) {
+                throw new JoseError("psk_id mismatch");
+            }
+        }
+        else {
+            if ("psk_id" in header) {
+                throw new JoseError("psk_id present but PSK mode was not selected");
+            }
+        }
+        const encBytes = decodeBase64Url(encryptedKey);
+        const ciphertext = decodeBase64Url(parsed.ciphertext);
+        const privateKey = "privateKey" in recipientKey
+            ? recipientKey.privateKey
+            : recipientKey;
+        const recipientParams = {
+            recipientKey: privateKey,
+            enc: encBytes,
+            info,
+        };
+        if (options?.psk) {
+            recipientParams.psk = options.psk;
+        }
+        const ctx = await this._suite.createRecipientContext(recipientParams);
+        return new Uint8Array(await ctx.open(ciphertext, parsed.additionalData));
+    }
+    async importPublicJwk(jwk) {
+        const rawBytes = extractPublicKeyBytesFromJwk(jwk, this._alg);
+        return await this._suite.kem.importKey("raw", rawBytes.buffer, true);
+    }
+    async importPrivateJwk(jwk) {
+        const rawBytes = extractPrivateKeyBytesFromJwk(jwk, this._alg);
+        return await this._suite.kem.importKey("raw", rawBytes.buffer, false);
+    }
+}

package/esm/src/errors.d.ts

@@ -0,0 +1,7 @@
+/** Base error for @hpke/jose operations. */
+export declare class JoseError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+/** Wrap a failed crypto operation, retaining its original error as cause. */
+export declare function withJoseError<T>(message: string, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=errors.d.ts.map

package/esm/src/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/src/errors.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qBAAa,SAAU,SAAQ,KAAK;gBACf,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAI3D;AAED,6EAA6E;AAC7E,wBAAsB,aAAa,CAAC,CAAC,EACnC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAOZ"}

package/esm/src/errors.js

@@ -0,0 +1,18 @@
+/** Base error for @hpke/jose operations. */
+export class JoseError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "JoseError";
+    }
+}
+/** Wrap a failed crypto operation, retaining its original error as cause. */
+export async function withJoseError(message, fn) {
+    try {
+        return await fn();
+    }
+    catch (e) {
+        if (e instanceof JoseError)
+            throw e;
+        throw new JoseError(message, { cause: e });
+    }
+}

package/esm/src/hpke0.d.ts

@@ -0,0 +1,16 @@
+import { type AeadInterface } from "@hpke/core";
+import type { JoseEncrypt0 } from "./encrypt0.js";
+import type { JoseEncrypt } from "./encrypt.js";
+/** DHKEM(P-256), HKDF-SHA256, AES-128-GCM — Integrated Encryption. */
+export declare function createJoseHpke0(): JoseEncrypt0;
+/**
+ * DHKEM(P-256), HKDF-SHA256, AES-128-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export declare function createJoseHpke0Ke(contentAead: AeadInterface): JoseEncrypt;
+//# sourceMappingURL=hpke0.d.ts.map

package/esm/src/hpke0.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke0.d.ts","sourceRoot":"","sources":["../../src/src/hpke0.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,sEAAsE;AACtE,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,aAAa,GAAG,WAAW,CAWzE"}

package/esm/src/hpke0.js

@@ -0,0 +1,30 @@
+import { Aes128Gcm, CipherSuite, DhkemP256HkdfSha256, HkdfSha256, } from "@hpke/core";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+import { JoseEncryptImpl } from "./encrypt.js";
+/** DHKEM(P-256), HKDF-SHA256, AES-128-GCM — Integrated Encryption. */
+export function createJoseHpke0() {
+    const suite = new CipherSuite({
+        kem: new DhkemP256HkdfSha256(),
+        kdf: new HkdfSha256(),
+        aead: new Aes128Gcm(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_0);
+}
+/**
+ * DHKEM(P-256), HKDF-SHA256, AES-128-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export function createJoseHpke0Ke(contentAead) {
+    const suite = new CipherSuite({
+        kem: new DhkemP256HkdfSha256(),
+        kdf: new HkdfSha256(),
+        aead: new Aes128Gcm(),
+    });
+    return new JoseEncryptImpl(suite, JoseHpkeAlg.HPKE_0_KE, contentAead);
+}

package/esm/src/hpke1.d.ts

@@ -0,0 +1,16 @@
+import { type AeadInterface } from "@hpke/core";
+import type { JoseEncrypt0 } from "./encrypt0.js";
+import type { JoseEncrypt } from "./encrypt.js";
+/** DHKEM(P-384), HKDF-SHA384, AES-256-GCM — Integrated Encryption. */
+export declare function createJoseHpke1(): JoseEncrypt0;
+/**
+ * DHKEM(P-384), HKDF-SHA384, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export declare function createJoseHpke1Ke(contentAead: AeadInterface): JoseEncrypt;
+//# sourceMappingURL=hpke1.d.ts.map

package/esm/src/hpke1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke1.d.ts","sourceRoot":"","sources":["../../src/src/hpke1.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,sEAAsE;AACtE,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,aAAa,GAAG,WAAW,CAWzE"}

package/esm/src/hpke1.js

@@ -0,0 +1,30 @@
+import { Aes256Gcm, CipherSuite, DhkemP384HkdfSha384, HkdfSha384, } from "@hpke/core";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+import { JoseEncryptImpl } from "./encrypt.js";
+/** DHKEM(P-384), HKDF-SHA384, AES-256-GCM — Integrated Encryption. */
+export function createJoseHpke1() {
+    const suite = new CipherSuite({
+        kem: new DhkemP384HkdfSha384(),
+        kdf: new HkdfSha384(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_1);
+}
+/**
+ * DHKEM(P-384), HKDF-SHA384, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export function createJoseHpke1Ke(contentAead) {
+    const suite = new CipherSuite({
+        kem: new DhkemP384HkdfSha384(),
+        kdf: new HkdfSha384(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncryptImpl(suite, JoseHpkeAlg.HPKE_1_KE, contentAead);
+}

package/esm/src/hpke2.d.ts

@@ -0,0 +1,16 @@
+import { type AeadInterface } from "@hpke/core";
+import type { JoseEncrypt0 } from "./encrypt0.js";
+import type { JoseEncrypt } from "./encrypt.js";
+/** DHKEM(P-521), HKDF-SHA512, AES-256-GCM — Integrated Encryption. */
+export declare function createJoseHpke2(): JoseEncrypt0;
+/**
+ * DHKEM(P-521), HKDF-SHA512, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export declare function createJoseHpke2Ke(contentAead: AeadInterface): JoseEncrypt;
+//# sourceMappingURL=hpke2.d.ts.map

package/esm/src/hpke2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke2.d.ts","sourceRoot":"","sources":["../../src/src/hpke2.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,sEAAsE;AACtE,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,aAAa,GAAG,WAAW,CAWzE"}

package/esm/src/hpke2.js

@@ -0,0 +1,30 @@
+import { Aes256Gcm, CipherSuite, DhkemP521HkdfSha512, HkdfSha512, } from "@hpke/core";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+import { JoseEncryptImpl } from "./encrypt.js";
+/** DHKEM(P-521), HKDF-SHA512, AES-256-GCM — Integrated Encryption. */
+export function createJoseHpke2() {
+    const suite = new CipherSuite({
+        kem: new DhkemP521HkdfSha512(),
+        kdf: new HkdfSha512(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_2);
+}
+/**
+ * DHKEM(P-521), HKDF-SHA512, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export function createJoseHpke2Ke(contentAead) {
+    const suite = new CipherSuite({
+        kem: new DhkemP521HkdfSha512(),
+        kdf: new HkdfSha512(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncryptImpl(suite, JoseHpkeAlg.HPKE_2_KE, contentAead);
+}

package/esm/src/hpke3.d.ts

@@ -0,0 +1,16 @@
+import { type AeadInterface } from "@hpke/core";
+import type { JoseEncrypt0 } from "./encrypt0.js";
+import type { JoseEncrypt } from "./encrypt.js";
+/** DHKEM(X25519), HKDF-SHA256, AES-128-GCM — Integrated Encryption. */
+export declare function createJoseHpke3(): JoseEncrypt0;
+/**
+ * DHKEM(X25519), HKDF-SHA256, AES-128-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export declare function createJoseHpke3Ke(contentAead: AeadInterface): JoseEncrypt;
+//# sourceMappingURL=hpke3.d.ts.map

package/esm/src/hpke3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke3.d.ts","sourceRoot":"","sources":["../../src/src/hpke3.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,uEAAuE;AACvE,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,aAAa,GAAG,WAAW,CAWzE"}

package/esm/src/hpke3.js

@@ -0,0 +1,30 @@
+import { Aes128Gcm, CipherSuite, DhkemX25519HkdfSha256, HkdfSha256, } from "@hpke/core";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+import { JoseEncryptImpl } from "./encrypt.js";
+/** DHKEM(X25519), HKDF-SHA256, AES-128-GCM — Integrated Encryption. */
+export function createJoseHpke3() {
+    const suite = new CipherSuite({
+        kem: new DhkemX25519HkdfSha256(),
+        kdf: new HkdfSha256(),
+        aead: new Aes128Gcm(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_3);
+}
+/**
+ * DHKEM(X25519), HKDF-SHA256, AES-128-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export function createJoseHpke3Ke(contentAead) {
+    const suite = new CipherSuite({
+        kem: new DhkemX25519HkdfSha256(),
+        kdf: new HkdfSha256(),
+        aead: new Aes128Gcm(),
+    });
+    return new JoseEncryptImpl(suite, JoseHpkeAlg.HPKE_3_KE, contentAead);
+}

package/esm/src/hpke4.d.ts

@@ -0,0 +1,4 @@
+import type { JoseEncrypt0 } from "./encrypt0.js";
+/** DHKEM(X25519), HKDF-SHA256, ChaCha20Poly1305 — Integrated Encryption. */
+export declare function createJoseHpke4(): JoseEncrypt0;
+//# sourceMappingURL=hpke4.d.ts.map

package/esm/src/hpke4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke4.d.ts","sourceRoot":"","sources":["../../src/src/hpke4.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,4EAA4E;AAC5E,wBAAgB,eAAe,IAAI,YAAY,CAO9C"}

package/esm/src/hpke4.js

@@ -0,0 +1,13 @@
+import { CipherSuite, DhkemX25519HkdfSha256, HkdfSha256 } from "@hpke/core";
+import { Chacha20Poly1305 } from "@hpke/chacha20poly1305";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+/** DHKEM(X25519), HKDF-SHA256, ChaCha20Poly1305 — Integrated Encryption. */
+export function createJoseHpke4() {
+    const suite = new CipherSuite({
+        kem: new DhkemX25519HkdfSha256(),
+        kdf: new HkdfSha256(),
+        aead: new Chacha20Poly1305(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_4);
+}

package/esm/src/hpke5.d.ts

@@ -0,0 +1,16 @@
+import { type AeadInterface } from "@hpke/core";
+import type { JoseEncrypt0 } from "./encrypt0.js";
+import type { JoseEncrypt } from "./encrypt.js";
+/** DHKEM(X448), HKDF-SHA512, AES-256-GCM — Integrated Encryption. */
+export declare function createJoseHpke5(): JoseEncrypt0;
+/**
+ * DHKEM(X448), HKDF-SHA512, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export declare function createJoseHpke5Ke(contentAead: AeadInterface): JoseEncrypt;
+//# sourceMappingURL=hpke5.d.ts.map

package/esm/src/hpke5.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke5.d.ts","sourceRoot":"","sources":["../../src/src/hpke5.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,YAAY,CAAC;AAIpB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,qEAAqE;AACrE,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,aAAa,GAAG,WAAW,CAWzE"}

package/esm/src/hpke5.js

@@ -0,0 +1,31 @@
+import { Aes256Gcm, CipherSuite, HkdfSha512, } from "@hpke/core";
+import { DhkemX448HkdfSha512 } from "@hpke/dhkem-x448";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+import { JoseEncryptImpl } from "./encrypt.js";
+/** DHKEM(X448), HKDF-SHA512, AES-256-GCM — Integrated Encryption. */
+export function createJoseHpke5() {
+    const suite = new CipherSuite({
+        kem: new DhkemX448HkdfSha512(),
+        kdf: new HkdfSha512(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_5);
+}
+/**
+ * DHKEM(X448), HKDF-SHA512, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export function createJoseHpke5Ke(contentAead) {
+    const suite = new CipherSuite({
+        kem: new DhkemX448HkdfSha512(),
+        kdf: new HkdfSha512(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncryptImpl(suite, JoseHpkeAlg.HPKE_5_KE, contentAead);
+}

package/esm/src/hpke6.d.ts

@@ -0,0 +1,4 @@
+import type { JoseEncrypt0 } from "./encrypt0.js";
+/** DHKEM(X448), HKDF-SHA512, ChaCha20Poly1305 — Integrated Encryption. */
+export declare function createJoseHpke6(): JoseEncrypt0;
+//# sourceMappingURL=hpke6.d.ts.map

package/esm/src/hpke6.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke6.d.ts","sourceRoot":"","sources":["../../src/src/hpke6.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,0EAA0E;AAC1E,wBAAgB,eAAe,IAAI,YAAY,CAO9C"}

package/esm/src/hpke6.js

@@ -0,0 +1,14 @@
+import { CipherSuite, HkdfSha512 } from "@hpke/core";
+import { DhkemX448HkdfSha512 } from "@hpke/dhkem-x448";
+import { Chacha20Poly1305 } from "@hpke/chacha20poly1305";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+/** DHKEM(X448), HKDF-SHA512, ChaCha20Poly1305 — Integrated Encryption. */
+export function createJoseHpke6() {
+    const suite = new CipherSuite({
+        kem: new DhkemX448HkdfSha512(),
+        kdf: new HkdfSha512(),
+        aead: new Chacha20Poly1305(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_6);
+}

package/esm/src/hpke7.d.ts

@@ -0,0 +1,16 @@
+import { type AeadInterface } from "@hpke/core";
+import type { JoseEncrypt0 } from "./encrypt0.js";
+import type { JoseEncrypt } from "./encrypt.js";
+/** DHKEM(P-256), HKDF-SHA256, AES-256-GCM — Integrated Encryption. */
+export declare function createJoseHpke7(): JoseEncrypt0;
+/**
+ * DHKEM(P-256), HKDF-SHA256, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export declare function createJoseHpke7Ke(contentAead: AeadInterface): JoseEncrypt;
+//# sourceMappingURL=hpke7.d.ts.map

package/esm/src/hpke7.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke7.d.ts","sourceRoot":"","sources":["../../src/src/hpke7.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,sEAAsE;AACtE,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,aAAa,GAAG,WAAW,CAWzE"}

package/esm/src/hpke7.js

@@ -0,0 +1,30 @@
+import { Aes256Gcm, CipherSuite, DhkemP256HkdfSha256, HkdfSha256, } from "@hpke/core";
+import { JoseHpkeAlg } from "./alg.js";
+import { JoseEncrypt0Impl } from "./encrypt0.js";
+import { JoseEncryptImpl } from "./encrypt.js";
+/** DHKEM(P-256), HKDF-SHA256, AES-256-GCM — Integrated Encryption. */
+export function createJoseHpke7() {
+    const suite = new CipherSuite({
+        kem: new DhkemP256HkdfSha256(),
+        kdf: new HkdfSha256(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncrypt0Impl(suite, JoseHpkeAlg.HPKE_7);
+}
+/**
+ * DHKEM(P-256), HKDF-SHA256, AES-256-GCM — Key Encryption.
+ *
+ * @param contentAead The AEAD for content encryption (Layer 0), e.g.
+ *   `new Aes128Gcm()` or `new Aes256Gcm()`.
+ *   The JWE content algorithm is derived from it.
+ * @throws {JoseError} if contentAead has no supported JWE content-encryption
+ *   equivalent.
+ */
+export function createJoseHpke7Ke(contentAead) {
+    const suite = new CipherSuite({
+        kem: new DhkemP256HkdfSha256(),
+        kdf: new HkdfSha256(),
+        aead: new Aes256Gcm(),
+    });
+    return new JoseEncryptImpl(suite, JoseHpkeAlg.HPKE_7_KE, contentAead);
+}

package/esm/src/jwk.d.ts

@@ -0,0 +1,18 @@
+import type { JoseHpkeAlg } from "./alg.js";
+/** Expected JWK key type and curve for a given JOSE HPKE algorithm. */
+export declare function getExpectedJwkParams(alg: JoseHpkeAlg): {
+    kty: string;
+    crv: string;
+};
+/**
+ * Extract raw public key bytes from a JWK.
+ * For EC keys: uncompressed point (0x04 || x || y).
+ * For OKP keys: raw x coordinate bytes.
+ */
+export declare function extractPublicKeyBytesFromJwk(jwk: JsonWebKey, alg: JoseHpkeAlg): Uint8Array;
+/**
+ * Extract raw private key bytes from a JWK.
+ * Returns the d parameter bytes.
+ */
+export declare function extractPrivateKeyBytesFromJwk(jwk: JsonWebKey, alg: JoseHpkeAlg): Uint8Array;
+//# sourceMappingURL=jwk.d.ts.map

package/esm/src/jwk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwk.d.ts","sourceRoot":"","sources":["../../src/src/jwk.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAG5C,uEAAuE;AACvE,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,WAAW,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAwB9B;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,WAAW,GACf,UAAU,CAiCZ;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,WAAW,GACf,UAAU,CAkBZ"}