@hxa-rn/react-native-quick-crypto 1.1.0-beta.1

package/dist/commonjs/keys/publicCipher.js

@@ -0,0 +1,165 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.privateDecrypt = privateDecrypt;
+exports.privateEncrypt = privateEncrypt;
+exports.publicDecrypt = publicDecrypt;
+exports.publicEncrypt = publicEncrypt;
+var _reactNativeNitroModules = require("react-native-nitro-modules");
+var _reactNativeBuffer = require("@craftzdog/react-native-buffer");
+var _utils = require("../utils");
+var _utils2 = require("./utils");
+var _classes = require("./classes");
+var _constants = require("../constants");
+function preparePublicCipherKey(key, isEncrypt) {
+  let keyObj;
+  let padding;
+  let oaepHash;
+  let oaepLabel;
+  if (key instanceof _classes.KeyObject) {
+    if (isEncrypt && key.type !== 'public') {
+      throw new Error('publicEncrypt requires a public key');
+    }
+    // publicDecrypt accepts both public and private keys (Node.js behavior)
+    // A private key contains the public components needed for verify_recover
+    keyObj = key;
+  } else if ((0, _utils2.isCryptoKey)(key)) {
+    const cryptoKey = key;
+    keyObj = cryptoKey.keyObject;
+  } else if ((0, _utils.isStringOrBuffer)(key)) {
+    const data = (0, _utils.binaryLikeToArrayBuffer)(key);
+    const isPem = typeof key === 'string' && key.includes('-----BEGIN');
+    const isPrivatePem = typeof key === 'string' && key.includes('-----BEGIN PRIVATE');
+    // publicDecrypt accepts both public and private keys (Node.js behavior)
+    if (!isEncrypt && isPrivatePem) {
+      keyObj = _classes.KeyObject.createKeyObject('private', data, _utils.KFormatType.PEM, _utils.KeyEncoding.PKCS8);
+    } else {
+      keyObj = _classes.KeyObject.createKeyObject('public', data, isPem ? _utils.KFormatType.PEM : _utils.KFormatType.DER, _utils.KeyEncoding.SPKI);
+    }
+  } else if (typeof key === 'object' && 'key' in key) {
+    const options = key;
+    const result = preparePublicCipherKey(options.key, isEncrypt);
+    keyObj = result.keyHandle;
+    padding = options.padding;
+    oaepHash = options.oaepHash;
+    if (options.oaepLabel) {
+      oaepLabel = (0, _utils.binaryLikeToArrayBuffer)(options.oaepLabel);
+    }
+  } else {
+    throw new Error('Invalid key input');
+  }
+  return {
+    keyHandle: keyObj,
+    padding,
+    oaepHash,
+    oaepLabel
+  };
+}
+function publicEncrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding,
+    oaepHash,
+    oaepLabel
+  } = preparePublicCipherKey(key, true);
+  const rsaCipher = _reactNativeNitroModules.NitroModules.createHybridObject('RsaCipher');
+  const data = (0, _utils.binaryLikeToArrayBuffer)(buffer);
+  const paddingMode = padding ?? _constants.constants.RSA_PKCS1_OAEP_PADDING;
+  const hashAlgorithm = oaepHash || 'sha1';
+  try {
+    const encrypted = rsaCipher.encrypt(keyHandle.handle, data, paddingMode, hashAlgorithm, oaepLabel);
+    return _reactNativeBuffer.Buffer.from(encrypted);
+  } catch (error) {
+    throw new Error(`publicEncrypt failed: ${error.message}`);
+  }
+}
+function publicDecrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding
+  } = preparePublicCipherKey(key, false);
+  const rsaCipher = _reactNativeNitroModules.NitroModules.createHybridObject('RsaCipher');
+  const data = (0, _utils.binaryLikeToArrayBuffer)(buffer);
+  const paddingMode = padding ?? _constants.constants.RSA_PKCS1_PADDING;
+  try {
+    const decrypted = rsaCipher.publicDecrypt(keyHandle.handle, data, paddingMode);
+    return _reactNativeBuffer.Buffer.from(decrypted);
+  } catch (error) {
+    throw new Error(`publicDecrypt failed: ${error.message}`);
+  }
+}
+function preparePrivateCipherKey(key, isEncrypt) {
+  let keyObj;
+  let padding;
+  let oaepHash;
+  let oaepLabel;
+  if (key instanceof _classes.KeyObject) {
+    if (isEncrypt && key.type !== 'private') {
+      throw new Error('privateEncrypt requires a private key');
+    }
+    if (!isEncrypt && key.type !== 'private') {
+      throw new Error('privateDecrypt requires a private key');
+    }
+    keyObj = key;
+  } else if ((0, _utils2.isCryptoKey)(key)) {
+    const cryptoKey = key;
+    keyObj = cryptoKey.keyObject;
+  } else if ((0, _utils.isStringOrBuffer)(key)) {
+    const data = (0, _utils.binaryLikeToArrayBuffer)(key);
+    const isPem = typeof key === 'string' && key.includes('-----BEGIN');
+    keyObj = _classes.KeyObject.createKeyObject('private', data, isPem ? _utils.KFormatType.PEM : _utils.KFormatType.DER, _utils.KeyEncoding.PKCS8);
+  } else if (typeof key === 'object' && 'key' in key) {
+    const options = key;
+    const result = preparePrivateCipherKey(options.key, isEncrypt);
+    keyObj = result.keyHandle;
+    padding = options.padding;
+    oaepHash = options.oaepHash;
+    if (options.oaepLabel) {
+      oaepLabel = (0, _utils.binaryLikeToArrayBuffer)(options.oaepLabel);
+    }
+  } else {
+    throw new Error('Invalid key input');
+  }
+  return {
+    keyHandle: keyObj,
+    padding,
+    oaepHash,
+    oaepLabel
+  };
+}
+function privateEncrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding
+  } = preparePrivateCipherKey(key, true);
+  const rsaCipher = _reactNativeNitroModules.NitroModules.createHybridObject('RsaCipher');
+  const data = (0, _utils.binaryLikeToArrayBuffer)(buffer);
+  const paddingMode = padding ?? _constants.constants.RSA_PKCS1_PADDING;
+  try {
+    const encrypted = rsaCipher.privateEncrypt(keyHandle.handle, data, paddingMode);
+    return _reactNativeBuffer.Buffer.from(encrypted);
+  } catch (error) {
+    throw new Error(`privateEncrypt failed: ${error.message}`);
+  }
+}
+function privateDecrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding,
+    oaepHash,
+    oaepLabel
+  } = preparePrivateCipherKey(key, false);
+  const rsaCipher = _reactNativeNitroModules.NitroModules.createHybridObject('RsaCipher');
+  const data = (0, _utils.binaryLikeToArrayBuffer)(buffer);
+  const paddingMode = padding ?? _constants.constants.RSA_PKCS1_OAEP_PADDING;
+  const hashAlgorithm = oaepHash || 'sha1';
+  try {
+    const decrypted = rsaCipher.privateDecrypt(keyHandle.handle, data, paddingMode, hashAlgorithm, oaepLabel);
+    return _reactNativeBuffer.Buffer.from(decrypted);
+  } catch (error) {
+    throw new Error(`privateDecrypt failed: ${error.message}`);
+  }
+}
+//# sourceMappingURL=publicCipher.js.map

package/dist/commonjs/keys/publicCipher.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNativeNitroModules","require","_reactNativeBuffer","_utils","_utils2","_classes","_constants","preparePublicCipherKey","key","isEncrypt","keyObj","padding","oaepHash","oaepLabel","KeyObject","type","Error","isCryptoKey","cryptoKey","keyObject","isStringOrBuffer","data","toAB","isPem","includes","isPrivatePem","createKeyObject","KFormatType","PEM","KeyEncoding","PKCS8","DER","SPKI","options","result","keyHandle","publicEncrypt","buffer","rsaCipher","NitroModules","createHybridObject","paddingMode","constants","RSA_PKCS1_OAEP_PADDING","hashAlgorithm","encrypted","encrypt","handle","Buffer","from","error","message","publicDecrypt","RSA_PKCS1_PADDING","decrypted","preparePrivateCipherKey","privateEncrypt","privateDecrypt"],"sources":["publicCipher.ts"],"sourcesContent":["import { NitroModules } from 'react-native-nitro-modules';\r\nimport { Buffer } from '@craftzdog/react-native-buffer';\r\nimport type { RsaCipher } from '../specs/v1/rsaCipher.nitro';\r\nimport type { BinaryLike } from '../utils';\r\nimport {\r\n  binaryLikeToArrayBuffer as toAB,\r\n  isStringOrBuffer,\r\n  KFormatType,\r\n  KeyEncoding,\r\n} from '../utils';\r\nimport { isCryptoKey } from './utils';\r\nimport { KeyObject, CryptoKey } from './classes';\r\nimport { constants } from '../constants';\r\n\r\ninterface PublicCipherOptions {\r\n  key: BinaryLike | KeyObject | CryptoKey;\r\n  padding?: number;\r\n  oaepHash?: string;\r\n  oaepLabel?: BinaryLike;\r\n}\r\n\r\ntype PublicCipherInput =\r\n  | BinaryLike\r\n  | KeyObject\r\n  | CryptoKey\r\n  | PublicCipherOptions;\r\n\r\ninterface PrivateCipherOptions {\r\n  key: BinaryLike | KeyObject | CryptoKey;\r\n  padding?: number;\r\n  oaepHash?: string;\r\n  oaepLabel?: BinaryLike;\r\n}\r\n\r\ntype PrivateCipherInput =\r\n  | BinaryLike\r\n  | KeyObject\r\n  | CryptoKey\r\n  | PrivateCipherOptions;\r\n\r\nfunction preparePublicCipherKey(\r\n  key: PublicCipherInput,\r\n  isEncrypt: boolean,\r\n): {\r\n  keyHandle: KeyObject;\r\n  padding?: number;\r\n  oaepHash?: string;\r\n  oaepLabel?: ArrayBuffer;\r\n} {\r\n  let keyObj: KeyObject;\r\n  let padding: number | undefined;\r\n  let oaepHash: string | undefined;\r\n  let oaepLabel: ArrayBuffer | undefined;\r\n\r\n  if (key instanceof KeyObject) {\r\n    if (isEncrypt && key.type !== 'public') {\r\n      throw new Error('publicEncrypt requires a public key');\r\n    }\r\n    // publicDecrypt accepts both public and private keys (Node.js behavior)\r\n    // A private key contains the public components needed for verify_recover\r\n    keyObj = key;\r\n  } else if (isCryptoKey(key)) {\r\n    const cryptoKey = key as CryptoKey;\r\n    keyObj = cryptoKey.keyObject;\r\n  } else if (isStringOrBuffer(key)) {\r\n    const data = toAB(key);\r\n    const isPem = typeof key === 'string' && key.includes('-----BEGIN');\r\n    const isPrivatePem =\r\n      typeof key === 'string' && key.includes('-----BEGIN PRIVATE');\r\n    // publicDecrypt accepts both public and private keys (Node.js behavior)\r\n    if (!isEncrypt && isPrivatePem) {\r\n      keyObj = KeyObject.createKeyObject(\r\n        'private',\r\n        data,\r\n        KFormatType.PEM,\r\n        KeyEncoding.PKCS8,\r\n      );\r\n    } else {\r\n      keyObj = KeyObject.createKeyObject(\r\n        'public',\r\n        data,\r\n        isPem ? KFormatType.PEM : KFormatType.DER,\r\n        KeyEncoding.SPKI,\r\n      );\r\n    }\r\n  } else if (typeof key === 'object' && 'key' in key) {\r\n    const options = key as PublicCipherOptions;\r\n    const result = preparePublicCipherKey(options.key, isEncrypt);\r\n    keyObj = result.keyHandle;\r\n    padding = options.padding;\r\n    oaepHash = options.oaepHash;\r\n    if (options.oaepLabel) {\r\n      oaepLabel = toAB(options.oaepLabel);\r\n    }\r\n  } else {\r\n    throw new Error('Invalid key input');\r\n  }\r\n\r\n  return { keyHandle: keyObj, padding, oaepHash, oaepLabel };\r\n}\r\n\r\nexport function publicEncrypt(\r\n  key: PublicCipherInput,\r\n  buffer: BinaryLike,\r\n): Buffer {\r\n  const { keyHandle, padding, oaepHash, oaepLabel } = preparePublicCipherKey(\r\n    key,\r\n    true,\r\n  );\r\n\r\n  const rsaCipher: RsaCipher = NitroModules.createHybridObject('RsaCipher');\r\n  const data = toAB(buffer);\r\n  const paddingMode = padding ?? constants.RSA_PKCS1_OAEP_PADDING;\r\n  const hashAlgorithm = oaepHash || 'sha1';\r\n\r\n  try {\r\n    const encrypted = rsaCipher.encrypt(\r\n      keyHandle.handle,\r\n      data,\r\n      paddingMode,\r\n      hashAlgorithm,\r\n      oaepLabel,\r\n    );\r\n    return Buffer.from(encrypted);\r\n  } catch (error) {\r\n    throw new Error(`publicEncrypt failed: ${(error as Error).message}`);\r\n  }\r\n}\r\n\r\nexport function publicDecrypt(\r\n  key: PublicCipherInput,\r\n  buffer: BinaryLike,\r\n): Buffer {\r\n  const { keyHandle, padding } = preparePublicCipherKey(key, false);\r\n\r\n  const rsaCipher: RsaCipher = NitroModules.createHybridObject('RsaCipher');\r\n  const data = toAB(buffer);\r\n  const paddingMode = padding ?? constants.RSA_PKCS1_PADDING;\r\n\r\n  try {\r\n    const decrypted = rsaCipher.publicDecrypt(\r\n      keyHandle.handle,\r\n      data,\r\n      paddingMode,\r\n    );\r\n    return Buffer.from(decrypted);\r\n  } catch (error) {\r\n    throw new Error(`publicDecrypt failed: ${(error as Error).message}`);\r\n  }\r\n}\r\n\r\nfunction preparePrivateCipherKey(\r\n  key: PrivateCipherInput,\r\n  isEncrypt: boolean,\r\n): {\r\n  keyHandle: KeyObject;\r\n  padding?: number;\r\n  oaepHash?: string;\r\n  oaepLabel?: ArrayBuffer;\r\n} {\r\n  let keyObj: KeyObject;\r\n  let padding: number | undefined;\r\n  let oaepHash: string | undefined;\r\n  let oaepLabel: ArrayBuffer | undefined;\r\n\r\n  if (key instanceof KeyObject) {\r\n    if (isEncrypt && key.type !== 'private') {\r\n      throw new Error('privateEncrypt requires a private key');\r\n    }\r\n    if (!isEncrypt && key.type !== 'private') {\r\n      throw new Error('privateDecrypt requires a private key');\r\n    }\r\n    keyObj = key;\r\n  } else if (isCryptoKey(key)) {\r\n    const cryptoKey = key as CryptoKey;\r\n    keyObj = cryptoKey.keyObject;\r\n  } else if (isStringOrBuffer(key)) {\r\n    const data = toAB(key);\r\n    const isPem = typeof key === 'string' && key.includes('-----BEGIN');\r\n    keyObj = KeyObject.createKeyObject(\r\n      'private',\r\n      data,\r\n      isPem ? KFormatType.PEM : KFormatType.DER,\r\n      KeyEncoding.PKCS8,\r\n    );\r\n  } else if (typeof key === 'object' && 'key' in key) {\r\n    const options = key as PrivateCipherOptions;\r\n    const result = preparePrivateCipherKey(options.key, isEncrypt);\r\n    keyObj = result.keyHandle;\r\n    padding = options.padding;\r\n    oaepHash = options.oaepHash;\r\n    if (options.oaepLabel) {\r\n      oaepLabel = toAB(options.oaepLabel);\r\n    }\r\n  } else {\r\n    throw new Error('Invalid key input');\r\n  }\r\n\r\n  return { keyHandle: keyObj, padding, oaepHash, oaepLabel };\r\n}\r\n\r\nexport function privateEncrypt(\r\n  key: PrivateCipherInput,\r\n  buffer: BinaryLike,\r\n): Buffer {\r\n  const { keyHandle, padding } = preparePrivateCipherKey(key, true);\r\n\r\n  const rsaCipher: RsaCipher = NitroModules.createHybridObject('RsaCipher');\r\n  const data = toAB(buffer);\r\n  const paddingMode = padding ?? constants.RSA_PKCS1_PADDING;\r\n\r\n  try {\r\n    const encrypted = rsaCipher.privateEncrypt(\r\n      keyHandle.handle,\r\n      data,\r\n      paddingMode,\r\n    );\r\n    return Buffer.from(encrypted);\r\n  } catch (error) {\r\n    throw new Error(`privateEncrypt failed: ${(error as Error).message}`);\r\n  }\r\n}\r\n\r\nexport function privateDecrypt(\r\n  key: PrivateCipherInput,\r\n  buffer: BinaryLike,\r\n): Buffer {\r\n  const { keyHandle, padding, oaepHash, oaepLabel } = preparePrivateCipherKey(\r\n    key,\r\n    false,\r\n  );\r\n\r\n  const rsaCipher: RsaCipher = NitroModules.createHybridObject('RsaCipher');\r\n  const data = toAB(buffer);\r\n  const paddingMode = padding ?? constants.RSA_PKCS1_OAEP_PADDING;\r\n  const hashAlgorithm = oaepHash || 'sha1';\r\n\r\n  try {\r\n    const decrypted = rsaCipher.privateDecrypt(\r\n      keyHandle.handle,\r\n      data,\r\n      paddingMode,\r\n      hashAlgorithm,\r\n      oaepLabel,\r\n    );\r\n    return Buffer.from(decrypted);\r\n  } catch (error) {\r\n    throw new Error(`privateDecrypt failed: ${(error as Error).message}`);\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;AAAA,IAAAA,wBAAA,GAAAC,OAAA;AACA,IAAAC,kBAAA,GAAAD,OAAA;AAGA,IAAAE,MAAA,GAAAF,OAAA;AAMA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,UAAA,GAAAL,OAAA;AA4BA,SAASM,sBAAsBA,CAC7BC,GAAsB,EACtBC,SAAkB,EAMlB;EACA,IAAIC,MAAiB;EACrB,IAAIC,OAA2B;EAC/B,IAAIC,QAA4B;EAChC,IAAIC,SAAkC;EAEtC,IAAIL,GAAG,YAAYM,kBAAS,EAAE;IAC5B,IAAIL,SAAS,IAAID,GAAG,CAACO,IAAI,KAAK,QAAQ,EAAE;MACtC,MAAM,IAAIC,KAAK,CAAC,qCAAqC,CAAC;IACxD;IACA;IACA;IACAN,MAAM,GAAGF,GAAG;EACd,CAAC,MAAM,IAAI,IAAAS,mBAAW,EAACT,GAAG,CAAC,EAAE;IAC3B,MAAMU,SAAS,GAAGV,GAAgB;IAClCE,MAAM,GAAGQ,SAAS,CAACC,SAAS;EAC9B,CAAC,MAAM,IAAI,IAAAC,uBAAgB,EAACZ,GAAG,CAAC,EAAE;IAChC,MAAMa,IAAI,GAAG,IAAAC,8BAAI,EAACd,GAAG,CAAC;IACtB,MAAMe,KAAK,GAAG,OAAOf,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACgB,QAAQ,CAAC,YAAY,CAAC;IACnE,MAAMC,YAAY,GAChB,OAAOjB,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACgB,QAAQ,CAAC,oBAAoB,CAAC;IAC/D;IACA,IAAI,CAACf,SAAS,IAAIgB,YAAY,EAAE;MAC9Bf,MAAM,GAAGI,kBAAS,CAACY,eAAe,CAChC,SAAS,EACTL,IAAI,EACJM,kBAAW,CAACC,GAAG,EACfC,kBAAW,CAACC,KACd,CAAC;IACH,CAAC,MAAM;MACLpB,MAAM,GAAGI,kBAAS,CAACY,eAAe,CAChC,QAAQ,EACRL,IAAI,EACJE,KAAK,GAAGI,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACI,GAAG,EACzCF,kBAAW,CAACG,IACd,CAAC;IACH;EACF,CAAC,MAAM,IAAI,OAAOxB,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,EAAE;IAClD,MAAMyB,OAAO,GAAGzB,GAA0B;IAC1C,MAAM0B,MAAM,GAAG3B,sBAAsB,CAAC0B,OAAO,CAACzB,GAAG,EAAEC,SAAS,CAAC;IAC7DC,MAAM,GAAGwB,MAAM,CAACC,SAAS;IACzBxB,OAAO,GAAGsB,OAAO,CAACtB,OAAO;IACzBC,QAAQ,GAAGqB,OAAO,CAACrB,QAAQ;IAC3B,IAAIqB,OAAO,CAACpB,SAAS,EAAE;MACrBA,SAAS,GAAG,IAAAS,8BAAI,EAACW,OAAO,CAACpB,SAAS,CAAC;IACrC;EACF,CAAC,MAAM;IACL,MAAM,IAAIG,KAAK,CAAC,mBAAmB,CAAC;EACtC;EAEA,OAAO;IAAEmB,SAAS,EAAEzB,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC;AAC5D;AAEO,SAASuB,aAAaA,CAC3B5B,GAAsB,EACtB6B,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAExB,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAGN,sBAAsB,CACxEC,GAAG,EACH,IACF,CAAC;EAED,MAAM8B,SAAoB,GAAGC,qCAAY,CAACC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMnB,IAAI,GAAG,IAAAC,8BAAI,EAACe,MAAM,CAAC;EACzB,MAAMI,WAAW,GAAG9B,OAAO,IAAI+B,oBAAS,CAACC,sBAAsB;EAC/D,MAAMC,aAAa,GAAGhC,QAAQ,IAAI,MAAM;EAExC,IAAI;IACF,MAAMiC,SAAS,GAAGP,SAAS,CAACQ,OAAO,CACjCX,SAAS,CAACY,MAAM,EAChB1B,IAAI,EACJoB,WAAW,EACXG,aAAa,EACb/B,SACF,CAAC;IACD,OAAOmC,yBAAM,CAACC,IAAI,CAACJ,SAAS,CAAC;EAC/B,CAAC,CAAC,OAAOK,KAAK,EAAE;IACd,MAAM,IAAIlC,KAAK,CAAC,yBAA0BkC,KAAK,CAAWC,OAAO,EAAE,CAAC;EACtE;AACF;AAEO,SAASC,aAAaA,CAC3B5C,GAAsB,EACtB6B,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAExB;EAAQ,CAAC,GAAGJ,sBAAsB,CAACC,GAAG,EAAE,KAAK,CAAC;EAEjE,MAAM8B,SAAoB,GAAGC,qCAAY,CAACC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMnB,IAAI,GAAG,IAAAC,8BAAI,EAACe,MAAM,CAAC;EACzB,MAAMI,WAAW,GAAG9B,OAAO,IAAI+B,oBAAS,CAACW,iBAAiB;EAE1D,IAAI;IACF,MAAMC,SAAS,GAAGhB,SAAS,CAACc,aAAa,CACvCjB,SAAS,CAACY,MAAM,EAChB1B,IAAI,EACJoB,WACF,CAAC;IACD,OAAOO,yBAAM,CAACC,IAAI,CAACK,SAAS,CAAC;EAC/B,CAAC,CAAC,OAAOJ,KAAK,EAAE;IACd,MAAM,IAAIlC,KAAK,CAAC,yBAA0BkC,KAAK,CAAWC,OAAO,EAAE,CAAC;EACtE;AACF;AAEA,SAASI,uBAAuBA,CAC9B/C,GAAuB,EACvBC,SAAkB,EAMlB;EACA,IAAIC,MAAiB;EACrB,IAAIC,OAA2B;EAC/B,IAAIC,QAA4B;EAChC,IAAIC,SAAkC;EAEtC,IAAIL,GAAG,YAAYM,kBAAS,EAAE;IAC5B,IAAIL,SAAS,IAAID,GAAG,CAACO,IAAI,KAAK,SAAS,EAAE;MACvC,MAAM,IAAIC,KAAK,CAAC,uCAAuC,CAAC;IAC1D;IACA,IAAI,CAACP,SAAS,IAAID,GAAG,CAACO,IAAI,KAAK,SAAS,EAAE;MACxC,MAAM,IAAIC,KAAK,CAAC,uCAAuC,CAAC;IAC1D;IACAN,MAAM,GAAGF,GAAG;EACd,CAAC,MAAM,IAAI,IAAAS,mBAAW,EAACT,GAAG,CAAC,EAAE;IAC3B,MAAMU,SAAS,GAAGV,GAAgB;IAClCE,MAAM,GAAGQ,SAAS,CAACC,SAAS;EAC9B,CAAC,MAAM,IAAI,IAAAC,uBAAgB,EAACZ,GAAG,CAAC,EAAE;IAChC,MAAMa,IAAI,GAAG,IAAAC,8BAAI,EAACd,GAAG,CAAC;IACtB,MAAMe,KAAK,GAAG,OAAOf,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACgB,QAAQ,CAAC,YAAY,CAAC;IACnEd,MAAM,GAAGI,kBAAS,CAACY,eAAe,CAChC,SAAS,EACTL,IAAI,EACJE,KAAK,GAAGI,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACI,GAAG,EACzCF,kBAAW,CAACC,KACd,CAAC;EACH,CAAC,MAAM,IAAI,OAAOtB,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,EAAE;IAClD,MAAMyB,OAAO,GAAGzB,GAA2B;IAC3C,MAAM0B,MAAM,GAAGqB,uBAAuB,CAACtB,OAAO,CAACzB,GAAG,EAAEC,SAAS,CAAC;IAC9DC,MAAM,GAAGwB,MAAM,CAACC,SAAS;IACzBxB,OAAO,GAAGsB,OAAO,CAACtB,OAAO;IACzBC,QAAQ,GAAGqB,OAAO,CAACrB,QAAQ;IAC3B,IAAIqB,OAAO,CAACpB,SAAS,EAAE;MACrBA,SAAS,GAAG,IAAAS,8BAAI,EAACW,OAAO,CAACpB,SAAS,CAAC;IACrC;EACF,CAAC,MAAM;IACL,MAAM,IAAIG,KAAK,CAAC,mBAAmB,CAAC;EACtC;EAEA,OAAO;IAAEmB,SAAS,EAAEzB,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC;AAC5D;AAEO,SAAS2C,cAAcA,CAC5BhD,GAAuB,EACvB6B,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAExB;EAAQ,CAAC,GAAG4C,uBAAuB,CAAC/C,GAAG,EAAE,IAAI,CAAC;EAEjE,MAAM8B,SAAoB,GAAGC,qCAAY,CAACC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMnB,IAAI,GAAG,IAAAC,8BAAI,EAACe,MAAM,CAAC;EACzB,MAAMI,WAAW,GAAG9B,OAAO,IAAI+B,oBAAS,CAACW,iBAAiB;EAE1D,IAAI;IACF,MAAMR,SAAS,GAAGP,SAAS,CAACkB,cAAc,CACxCrB,SAAS,CAACY,MAAM,EAChB1B,IAAI,EACJoB,WACF,CAAC;IACD,OAAOO,yBAAM,CAACC,IAAI,CAACJ,SAAS,CAAC;EAC/B,CAAC,CAAC,OAAOK,KAAK,EAAE;IACd,MAAM,IAAIlC,KAAK,CAAC,0BAA2BkC,KAAK,CAAWC,OAAO,EAAE,CAAC;EACvE;AACF;AAEO,SAASM,cAAcA,CAC5BjD,GAAuB,EACvB6B,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAExB,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAG0C,uBAAuB,CACzE/C,GAAG,EACH,KACF,CAAC;EAED,MAAM8B,SAAoB,GAAGC,qCAAY,CAACC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMnB,IAAI,GAAG,IAAAC,8BAAI,EAACe,MAAM,CAAC;EACzB,MAAMI,WAAW,GAAG9B,OAAO,IAAI+B,oBAAS,CAACC,sBAAsB;EAC/D,MAAMC,aAAa,GAAGhC,QAAQ,IAAI,MAAM;EAExC,IAAI;IACF,MAAM0C,SAAS,GAAGhB,SAAS,CAACmB,cAAc,CACxCtB,SAAS,CAACY,MAAM,EAChB1B,IAAI,EACJoB,WAAW,EACXG,aAAa,EACb/B,SACF,CAAC;IACD,OAAOmC,yBAAM,CAACC,IAAI,CAACK,SAAS,CAAC;EAC/B,CAAC,CAAC,OAAOJ,KAAK,EAAE;IACd,MAAM,IAAIlC,KAAK,CAAC,0BAA2BkC,KAAK,CAAWC,OAAO,EAAE,CAAC;EACvE;AACF","ignoreList":[]}

package/dist/commonjs/keys/signVerify.js

@@ -0,0 +1,225 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.Verify = exports.Sign = void 0;
+exports.createSign = createSign;
+exports.createVerify = createVerify;
+exports.sign = sign;
+exports.verify = verify;
+var _reactNativeBuffer = require("@craftzdog/react-native-buffer");
+var _reactNativeNitroModules = require("react-native-nitro-modules");
+var _classes = require("./classes");
+var _utils = require("./utils");
+var _utils2 = require("../utils");
+function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == typeof i ? i : i + ""; }
+function _toPrimitive(t, r) { if ("object" != typeof t || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != typeof i) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+function prepareKey(key, isPublic) {
+  // Already a KeyObject
+  if (key instanceof _classes.KeyObject) {
+    if (isPublic) {
+      if (key.type === 'secret') {
+        throw new Error('Cannot use secret key for signature verification');
+      }
+    } else {
+      if (key.type !== 'private') {
+        throw new Error('Key must be a private key for signing');
+      }
+    }
+    return {
+      keyObject: key
+    };
+  }
+
+  // CryptoKey - extract KeyObject
+  if ((0, _utils.isCryptoKey)(key)) {
+    const cryptoKey = key;
+    return prepareKey(cryptoKey.keyObject, isPublic);
+  }
+
+  // Raw string or buffer - create KeyObject
+  if ((0, _utils2.isStringOrBuffer)(key)) {
+    const isPem = typeof key === 'string' && key.includes('-----BEGIN');
+    const format = isPem ? _utils2.KFormatType.PEM : undefined;
+    const type = isPublic ? 'public' : 'private';
+    const keyData = (0, _utils2.binaryLikeToArrayBuffer)(key);
+    const keyObject = _classes.KeyObject.createKeyObject(type, keyData, format);
+    return {
+      keyObject
+    };
+  }
+
+  // KeyInputObject with options
+  if (typeof key === 'object' && 'key' in key) {
+    const keyObj = key;
+    const {
+      key: data,
+      format,
+      type,
+      padding,
+      saltLength,
+      dsaEncoding
+    } = keyObj;
+
+    // Nested KeyObject
+    if (data instanceof _classes.KeyObject) {
+      return {
+        keyObject: data,
+        options: {
+          padding,
+          saltLength,
+          dsaEncoding
+        }
+      };
+    }
+
+    // Nested CryptoKey
+    if ((0, _utils.isCryptoKey)(data)) {
+      return {
+        keyObject: data.keyObject,
+        options: {
+          padding,
+          saltLength,
+          dsaEncoding
+        }
+      };
+    }
+    if (!(0, _utils2.isStringOrBuffer)(data)) {
+      throw new Error('Invalid key data type');
+    }
+
+    // Determine format
+    const isPem = format === 'pem' || typeof data === 'string' && data.includes('-----BEGIN');
+    const kFormat = isPem ? _utils2.KFormatType.PEM : format === 'der' ? _utils2.KFormatType.DER : undefined;
+
+    // Determine encoding type
+    let kType;
+    if (type === 'pkcs8') kType = _utils2.KeyEncoding.PKCS8;else if (type === 'pkcs1') kType = _utils2.KeyEncoding.PKCS1;else if (type === 'sec1') kType = _utils2.KeyEncoding.SEC1;else if (type === 'spki') kType = _utils2.KeyEncoding.SPKI;
+    const keyType = isPublic ? 'public' : 'private';
+    // Always convert to ArrayBuffer to avoid Nitro bridge string truncation bug
+    const keyData = (0, _utils2.binaryLikeToArrayBuffer)(data);
+    const keyObject = _classes.KeyObject.createKeyObject(keyType, keyData, kFormat, kType);
+    return {
+      keyObject,
+      options: {
+        padding,
+        saltLength,
+        dsaEncoding
+      }
+    };
+  }
+  throw new Error('Invalid key input');
+}
+function dsaEncodingToNumber(dsaEncoding) {
+  if (dsaEncoding === 'der') return 0;
+  if (dsaEncoding === 'ieee-p1363') return 1;
+  return undefined;
+}
+class Sign {
+  constructor(algorithm) {
+    _defineProperty(this, "handle", void 0);
+    this.handle = _reactNativeNitroModules.NitroModules.createHybridObject('SignHandle');
+    this.handle.init(algorithm);
+  }
+  update(data) {
+    const dataBuffer = (0, _utils2.binaryLikeToArrayBuffer)(data);
+    this.handle.update(dataBuffer);
+    return this;
+  }
+  sign(privateKey, outputEncoding) {
+    if (privateKey === null || privateKey === undefined) {
+      throw new Error('Private key is required');
+    }
+    const {
+      keyObject,
+      options
+    } = prepareKey(privateKey, false);
+    const signature = this.handle.sign(keyObject.handle, options === null || options === void 0 ? void 0 : options.padding, options === null || options === void 0 ? void 0 : options.saltLength, dsaEncodingToNumber(options === null || options === void 0 ? void 0 : options.dsaEncoding));
+    const buf = _reactNativeBuffer.Buffer.from(signature);
+    if (outputEncoding) {
+      return buf.toString(outputEncoding);
+    }
+    return buf;
+  }
+}
+exports.Sign = Sign;
+class Verify {
+  constructor(algorithm) {
+    _defineProperty(this, "handle", void 0);
+    this.handle = _reactNativeNitroModules.NitroModules.createHybridObject('VerifyHandle');
+    this.handle.init(algorithm);
+  }
+  update(data) {
+    const dataBuffer = (0, _utils2.binaryLikeToArrayBuffer)(data);
+    this.handle.update(dataBuffer);
+    return this;
+  }
+  verify(publicKey, signature, signatureEncoding) {
+    if (publicKey === null || publicKey === undefined) {
+      throw new Error('Public key is required');
+    }
+    const {
+      keyObject,
+      options
+    } = prepareKey(publicKey, true);
+
+    // Convert signature to ArrayBuffer
+    let sigBuffer;
+    if (signatureEncoding && typeof signature === 'string') {
+      sigBuffer = (0, _utils2.binaryLikeToArrayBuffer)(_reactNativeBuffer.Buffer.from(signature, signatureEncoding));
+    } else {
+      sigBuffer = (0, _utils2.binaryLikeToArrayBuffer)(signature);
+    }
+    return this.handle.verify(keyObject.handle, sigBuffer, options === null || options === void 0 ? void 0 : options.padding, options === null || options === void 0 ? void 0 : options.saltLength, dsaEncodingToNumber(options === null || options === void 0 ? void 0 : options.dsaEncoding));
+  }
+}
+exports.Verify = Verify;
+function createSign(algorithm) {
+  return new Sign(algorithm);
+}
+function createVerify(algorithm) {
+  return new Verify(algorithm);
+}
+function sign(algorithm, data, key, callback) {
+  const doSign = () => {
+    if (key === null || key === undefined) {
+      throw new Error('Private key is required');
+    }
+    const signer = new Sign(algorithm ?? '');
+    signer.update(data);
+    return signer.sign(key);
+  };
+  if (callback) {
+    try {
+      const signature = doSign();
+      process.nextTick(callback, null, signature);
+    } catch (err) {
+      process.nextTick(callback, err);
+    }
+    return;
+  }
+  return doSign();
+}
+function verify(algorithm, data, key, signature, callback) {
+  const doVerify = () => {
+    if (key === null || key === undefined) {
+      throw new Error('Key is required');
+    }
+    const verifier = new Verify(algorithm ?? '');
+    verifier.update(data);
+    return verifier.verify(key, signature);
+  };
+  if (callback) {
+    try {
+      const result = doVerify();
+      process.nextTick(callback, null, result);
+    } catch (err) {
+      process.nextTick(callback, err);
+    }
+    return;
+  }
+  return doVerify();
+}
+//# sourceMappingURL=signVerify.js.map

package/dist/commonjs/keys/signVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNativeBuffer","require","_reactNativeNitroModules","_classes","_utils","_utils2","_defineProperty","e","r","t","_toPropertyKey","Object","defineProperty","value","enumerable","configurable","writable","i","_toPrimitive","Symbol","toPrimitive","call","TypeError","String","Number","prepareKey","key","isPublic","KeyObject","type","Error","keyObject","isCryptoKey","cryptoKey","isStringOrBuffer","isPem","includes","format","KFormatType","PEM","undefined","keyData","toAB","createKeyObject","keyObj","data","padding","saltLength","dsaEncoding","options","kFormat","DER","kType","KeyEncoding","PKCS8","PKCS1","SEC1","SPKI","keyType","dsaEncodingToNumber","Sign","constructor","algorithm","handle","NitroModules","createHybridObject","init","update","dataBuffer","sign","privateKey","outputEncoding","signature","buf","Buffer","from","toString","exports","Verify","verify","publicKey","signatureEncoding","sigBuffer","createSign","createVerify","callback","doSign","signer","process","nextTick","err","doVerify","verifier","result"],"sources":["signVerify.ts"],"sourcesContent":["import { Buffer } from '@craftzdog/react-native-buffer';\r\nimport { NitroModules } from 'react-native-nitro-modules';\r\nimport type {\r\n  SignHandle as SignHandleSpec,\r\n  VerifyHandle as VerifyHandleSpec,\r\n} from '../specs/v1/sign.nitro';\r\nimport { KeyObject, CryptoKey } from './classes';\r\nimport { isCryptoKey } from './utils';\r\nimport type { BinaryLike } from '../utils';\r\nimport {\r\n  binaryLikeToArrayBuffer as toAB,\r\n  isStringOrBuffer,\r\n  KFormatType,\r\n  KeyEncoding,\r\n} from '../utils';\r\n\r\ntype KeyInput = BinaryLike | KeyObject | CryptoKey | KeyInputObject;\r\n\r\ninterface KeyInputObject {\r\n  key: BinaryLike | KeyObject | CryptoKey;\r\n  format?: 'pem' | 'der';\r\n  type?: 'pkcs1' | 'pkcs8' | 'spki' | 'sec1';\r\n  passphrase?: BinaryLike;\r\n  padding?: number;\r\n  saltLength?: number;\r\n  dsaEncoding?: 'der' | 'ieee-p1363';\r\n}\r\n\r\ninterface SignOptions {\r\n  padding?: number;\r\n  saltLength?: number;\r\n  dsaEncoding?: 'der' | 'ieee-p1363';\r\n}\r\n\r\ninterface PreparedKey {\r\n  keyObject: KeyObject;\r\n  options?: SignOptions;\r\n}\r\n\r\nfunction prepareKey(key: KeyInput, isPublic: boolean): PreparedKey {\r\n  // Already a KeyObject\r\n  if (key instanceof KeyObject) {\r\n    if (isPublic) {\r\n      if (key.type === 'secret') {\r\n        throw new Error('Cannot use secret key for signature verification');\r\n      }\r\n    } else {\r\n      if (key.type !== 'private') {\r\n        throw new Error('Key must be a private key for signing');\r\n      }\r\n    }\r\n    return { keyObject: key };\r\n  }\r\n\r\n  // CryptoKey - extract KeyObject\r\n  if (isCryptoKey(key)) {\r\n    const cryptoKey = key as CryptoKey;\r\n    return prepareKey(cryptoKey.keyObject, isPublic);\r\n  }\r\n\r\n  // Raw string or buffer - create KeyObject\r\n  if (isStringOrBuffer(key)) {\r\n    const isPem = typeof key === 'string' && key.includes('-----BEGIN');\r\n    const format = isPem ? KFormatType.PEM : undefined;\r\n    const type = isPublic ? 'public' : 'private';\r\n    const keyData = toAB(key);\r\n    const keyObject = KeyObject.createKeyObject(type, keyData, format);\r\n    return { keyObject };\r\n  }\r\n\r\n  // KeyInputObject with options\r\n  if (typeof key === 'object' && 'key' in key) {\r\n    const keyObj = key as KeyInputObject;\r\n    const {\r\n      key: data,\r\n      format,\r\n      type,\r\n      padding,\r\n      saltLength,\r\n      dsaEncoding,\r\n    } = keyObj;\r\n\r\n    // Nested KeyObject\r\n    if (data instanceof KeyObject) {\r\n      return {\r\n        keyObject: data,\r\n        options: { padding, saltLength, dsaEncoding },\r\n      };\r\n    }\r\n\r\n    // Nested CryptoKey\r\n    if (isCryptoKey(data)) {\r\n      return {\r\n        keyObject: (data as CryptoKey).keyObject,\r\n        options: { padding, saltLength, dsaEncoding },\r\n      };\r\n    }\r\n\r\n    if (!isStringOrBuffer(data)) {\r\n      throw new Error('Invalid key data type');\r\n    }\r\n\r\n    // Determine format\r\n    const isPem =\r\n      format === 'pem' ||\r\n      (typeof data === 'string' && data.includes('-----BEGIN'));\r\n    const kFormat = isPem\r\n      ? KFormatType.PEM\r\n      : format === 'der'\r\n        ? KFormatType.DER\r\n        : undefined;\r\n\r\n    // Determine encoding type\r\n    let kType: KeyEncoding | undefined;\r\n    if (type === 'pkcs8') kType = KeyEncoding.PKCS8;\r\n    else if (type === 'pkcs1') kType = KeyEncoding.PKCS1;\r\n    else if (type === 'sec1') kType = KeyEncoding.SEC1;\r\n    else if (type === 'spki') kType = KeyEncoding.SPKI;\r\n\r\n    const keyType = isPublic ? 'public' : 'private';\r\n    // Always convert to ArrayBuffer to avoid Nitro bridge string truncation bug\r\n    const keyData = toAB(data);\r\n    const keyObject = KeyObject.createKeyObject(\r\n      keyType,\r\n      keyData,\r\n      kFormat,\r\n      kType,\r\n    );\r\n\r\n    return {\r\n      keyObject,\r\n      options: { padding, saltLength, dsaEncoding },\r\n    };\r\n  }\r\n\r\n  throw new Error('Invalid key input');\r\n}\r\n\r\nfunction dsaEncodingToNumber(\r\n  dsaEncoding?: 'der' | 'ieee-p1363',\r\n): number | undefined {\r\n  if (dsaEncoding === 'der') return 0;\r\n  if (dsaEncoding === 'ieee-p1363') return 1;\r\n  return undefined;\r\n}\r\n\r\nexport class Sign {\r\n  private handle: SignHandleSpec;\r\n\r\n  constructor(algorithm: string) {\r\n    this.handle = NitroModules.createHybridObject<SignHandleSpec>('SignHandle');\r\n    this.handle.init(algorithm);\r\n  }\r\n\r\n  update(data: BinaryLike): this {\r\n    const dataBuffer = toAB(data);\r\n    this.handle.update(dataBuffer);\r\n    return this;\r\n  }\r\n\r\n  sign(privateKey: KeyInput, outputEncoding?: BufferEncoding): Buffer;\r\n  sign(privateKey: KeyInput, outputEncoding?: BufferEncoding): Buffer | string {\r\n    if (privateKey === null || privateKey === undefined) {\r\n      throw new Error('Private key is required');\r\n    }\r\n\r\n    const { keyObject, options } = prepareKey(privateKey, false);\r\n\r\n    const signature = this.handle.sign(\r\n      keyObject.handle,\r\n      options?.padding,\r\n      options?.saltLength,\r\n      dsaEncodingToNumber(options?.dsaEncoding),\r\n    );\r\n\r\n    const buf = Buffer.from(signature);\r\n    if (outputEncoding) {\r\n      return buf.toString(outputEncoding);\r\n    }\r\n    return buf;\r\n  }\r\n}\r\n\r\nexport class Verify {\r\n  private handle: VerifyHandleSpec;\r\n\r\n  constructor(algorithm: string) {\r\n    this.handle =\r\n      NitroModules.createHybridObject<VerifyHandleSpec>('VerifyHandle');\r\n    this.handle.init(algorithm);\r\n  }\r\n\r\n  update(data: BinaryLike): this {\r\n    const dataBuffer = toAB(data);\r\n    this.handle.update(dataBuffer);\r\n    return this;\r\n  }\r\n\r\n  verify(\r\n    publicKey: KeyInput,\r\n    signature: BinaryLike,\r\n    signatureEncoding?: BufferEncoding,\r\n  ): boolean {\r\n    if (publicKey === null || publicKey === undefined) {\r\n      throw new Error('Public key is required');\r\n    }\r\n\r\n    const { keyObject, options } = prepareKey(publicKey, true);\r\n\r\n    // Convert signature to ArrayBuffer\r\n    let sigBuffer: ArrayBuffer;\r\n    if (signatureEncoding && typeof signature === 'string') {\r\n      sigBuffer = toAB(Buffer.from(signature, signatureEncoding));\r\n    } else {\r\n      sigBuffer = toAB(signature);\r\n    }\r\n\r\n    return this.handle.verify(\r\n      keyObject.handle,\r\n      sigBuffer,\r\n      options?.padding,\r\n      options?.saltLength,\r\n      dsaEncodingToNumber(options?.dsaEncoding),\r\n    );\r\n  }\r\n}\r\n\r\nexport function createSign(algorithm: string): Sign {\r\n  return new Sign(algorithm);\r\n}\r\n\r\nexport function createVerify(algorithm: string): Verify {\r\n  return new Verify(algorithm);\r\n}\r\n\r\ntype SignCallback = (err: Error | null, signature?: Buffer) => void;\r\ntype VerifyCallback = (err: Error | null, result?: boolean) => void;\r\n\r\nexport function sign(\r\n  algorithm: string | null | undefined,\r\n  data: BinaryLike,\r\n  key: KeyInput,\r\n): Buffer;\r\nexport function sign(\r\n  algorithm: string | null | undefined,\r\n  data: BinaryLike,\r\n  key: KeyInput,\r\n  callback: SignCallback,\r\n): void;\r\nexport function sign(\r\n  algorithm: string | null | undefined,\r\n  data: BinaryLike,\r\n  key: KeyInput,\r\n  callback?: SignCallback,\r\n): Buffer | void {\r\n  const doSign = (): Buffer => {\r\n    if (key === null || key === undefined) {\r\n      throw new Error('Private key is required');\r\n    }\r\n    const signer = new Sign(algorithm ?? '');\r\n    signer.update(data);\r\n    return signer.sign(key);\r\n  };\r\n\r\n  if (callback) {\r\n    try {\r\n      const signature = doSign();\r\n      process.nextTick(callback, null, signature);\r\n    } catch (err) {\r\n      process.nextTick(callback, err as Error);\r\n    }\r\n    return;\r\n  }\r\n\r\n  return doSign();\r\n}\r\n\r\nexport function verify(\r\n  algorithm: string | null | undefined,\r\n  data: BinaryLike,\r\n  key: KeyInput,\r\n  signature: BinaryLike,\r\n): boolean;\r\nexport function verify(\r\n  algorithm: string | null | undefined,\r\n  data: BinaryLike,\r\n  key: KeyInput,\r\n  signature: BinaryLike,\r\n  callback: VerifyCallback,\r\n): void;\r\nexport function verify(\r\n  algorithm: string | null | undefined,\r\n  data: BinaryLike,\r\n  key: KeyInput,\r\n  signature: BinaryLike,\r\n  callback?: VerifyCallback,\r\n): boolean | void {\r\n  const doVerify = (): boolean => {\r\n    if (key === null || key === undefined) {\r\n      throw new Error('Key is required');\r\n    }\r\n    const verifier = new Verify(algorithm ?? '');\r\n    verifier.update(data);\r\n    return verifier.verify(key, signature);\r\n  };\r\n\r\n  if (callback) {\r\n    try {\r\n      const result = doVerify();\r\n      process.nextTick(callback, null, result);\r\n    } catch (err) {\r\n      process.nextTick(callback, err as Error);\r\n    }\r\n    return;\r\n  }\r\n\r\n  return doVerify();\r\n}\r\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AACA,IAAAC,wBAAA,GAAAD,OAAA;AAKA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAJ,OAAA;AAKkB,SAAAK,gBAAAC,CAAA,EAAAC,CAAA,EAAAC,CAAA,YAAAD,CAAA,GAAAE,cAAA,CAAAF,CAAA,MAAAD,CAAA,GAAAI,MAAA,CAAAC,cAAA,CAAAL,CAAA,EAAAC,CAAA,IAAAK,KAAA,EAAAJ,CAAA,EAAAK,UAAA,MAAAC,YAAA,MAAAC,QAAA,UAAAT,CAAA,CAAAC,CAAA,IAAAC,CAAA,EAAAF,CAAA;AAAA,SAAAG,eAAAD,CAAA,QAAAQ,CAAA,GAAAC,YAAA,CAAAT,CAAA,uCAAAQ,CAAA,GAAAA,CAAA,GAAAA,CAAA;AAAA,SAAAC,aAAAT,CAAA,EAAAD,CAAA,2BAAAC,CAAA,KAAAA,CAAA,SAAAA,CAAA,MAAAF,CAAA,GAAAE,CAAA,CAAAU,MAAA,CAAAC,WAAA,kBAAAb,CAAA,QAAAU,CAAA,GAAAV,CAAA,CAAAc,IAAA,CAAAZ,CAAA,EAAAD,CAAA,uCAAAS,CAAA,SAAAA,CAAA,YAAAK,SAAA,yEAAAd,CAAA,GAAAe,MAAA,GAAAC,MAAA,EAAAf,CAAA;AAyBlB,SAASgB,UAAUA,CAACC,GAAa,EAAEC,QAAiB,EAAe;EACjE;EACA,IAAID,GAAG,YAAYE,kBAAS,EAAE;IAC5B,IAAID,QAAQ,EAAE;MACZ,IAAID,GAAG,CAACG,IAAI,KAAK,QAAQ,EAAE;QACzB,MAAM,IAAIC,KAAK,CAAC,kDAAkD,CAAC;MACrE;IACF,CAAC,MAAM;MACL,IAAIJ,GAAG,CAACG,IAAI,KAAK,SAAS,EAAE;QAC1B,MAAM,IAAIC,KAAK,CAAC,uCAAuC,CAAC;MAC1D;IACF;IACA,OAAO;MAAEC,SAAS,EAAEL;IAAI,CAAC;EAC3B;;EAEA;EACA,IAAI,IAAAM,kBAAW,EAACN,GAAG,CAAC,EAAE;IACpB,MAAMO,SAAS,GAAGP,GAAgB;IAClC,OAAOD,UAAU,CAACQ,SAAS,CAACF,SAAS,EAAEJ,QAAQ,CAAC;EAClD;;EAEA;EACA,IAAI,IAAAO,wBAAgB,EAACR,GAAG,CAAC,EAAE;IACzB,MAAMS,KAAK,GAAG,OAAOT,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACU,QAAQ,CAAC,YAAY,CAAC;IACnE,MAAMC,MAAM,GAAGF,KAAK,GAAGG,mBAAW,CAACC,GAAG,GAAGC,SAAS;IAClD,MAAMX,IAAI,GAAGF,QAAQ,GAAG,QAAQ,GAAG,SAAS;IAC5C,MAAMc,OAAO,GAAG,IAAAC,+BAAI,EAAChB,GAAG,CAAC;IACzB,MAAMK,SAAS,GAAGH,kBAAS,CAACe,eAAe,CAACd,IAAI,EAAEY,OAAO,EAAEJ,MAAM,CAAC;IAClE,OAAO;MAAEN;IAAU,CAAC;EACtB;;EAEA;EACA,IAAI,OAAOL,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,EAAE;IAC3C,MAAMkB,MAAM,GAAGlB,GAAqB;IACpC,MAAM;MACJA,GAAG,EAAEmB,IAAI;MACTR,MAAM;MACNR,IAAI;MACJiB,OAAO;MACPC,UAAU;MACVC;IACF,CAAC,GAAGJ,MAAM;;IAEV;IACA,IAAIC,IAAI,YAAYjB,kBAAS,EAAE;MAC7B,OAAO;QACLG,SAAS,EAAEc,IAAI;QACfI,OAAO,EAAE;UAAEH,OAAO;UAAEC,UAAU;UAAEC;QAAY;MAC9C,CAAC;IACH;;IAEA;IACA,IAAI,IAAAhB,kBAAW,EAACa,IAAI,CAAC,EAAE;MACrB,OAAO;QACLd,SAAS,EAAGc,IAAI,CAAed,SAAS;QACxCkB,OAAO,EAAE;UAAEH,OAAO;UAAEC,UAAU;UAAEC;QAAY;MAC9C,CAAC;IACH;IAEA,IAAI,CAAC,IAAAd,wBAAgB,EAACW,IAAI,CAAC,EAAE;MAC3B,MAAM,IAAIf,KAAK,CAAC,uBAAuB,CAAC;IAC1C;;IAEA;IACA,MAAMK,KAAK,GACTE,MAAM,KAAK,KAAK,IACf,OAAOQ,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACT,QAAQ,CAAC,YAAY,CAAE;IAC3D,MAAMc,OAAO,GAAGf,KAAK,GACjBG,mBAAW,CAACC,GAAG,GACfF,MAAM,KAAK,KAAK,GACdC,mBAAW,CAACa,GAAG,GACfX,SAAS;;IAEf;IACA,IAAIY,KAA8B;IAClC,IAAIvB,IAAI,KAAK,OAAO,EAAEuB,KAAK,GAAGC,mBAAW,CAACC,KAAK,CAAC,KAC3C,IAAIzB,IAAI,KAAK,OAAO,EAAEuB,KAAK,GAAGC,mBAAW,CAACE,KAAK,CAAC,KAChD,IAAI1B,IAAI,KAAK,MAAM,EAAEuB,KAAK,GAAGC,mBAAW,CAACG,IAAI,CAAC,KAC9C,IAAI3B,IAAI,KAAK,MAAM,EAAEuB,KAAK,GAAGC,mBAAW,CAACI,IAAI;IAElD,MAAMC,OAAO,GAAG/B,QAAQ,GAAG,QAAQ,GAAG,SAAS;IAC/C;IACA,MAAMc,OAAO,GAAG,IAAAC,+BAAI,EAACG,IAAI,CAAC;IAC1B,MAAMd,SAAS,GAAGH,kBAAS,CAACe,eAAe,CACzCe,OAAO,EACPjB,OAAO,EACPS,OAAO,EACPE,KACF,CAAC;IAED,OAAO;MACLrB,SAAS;MACTkB,OAAO,EAAE;QAAEH,OAAO;QAAEC,UAAU;QAAEC;MAAY;IAC9C,CAAC;EACH;EAEA,MAAM,IAAIlB,KAAK,CAAC,mBAAmB,CAAC;AACtC;AAEA,SAAS6B,mBAAmBA,CAC1BX,WAAkC,EACd;EACpB,IAAIA,WAAW,KAAK,KAAK,EAAE,OAAO,CAAC;EACnC,IAAIA,WAAW,KAAK,YAAY,EAAE,OAAO,CAAC;EAC1C,OAAOR,SAAS;AAClB;AAEO,MAAMoB,IAAI,CAAC;EAGhBC,WAAWA,CAACC,SAAiB,EAAE;IAAAxD,eAAA;IAC7B,IAAI,CAACyD,MAAM,GAAGC,qCAAY,CAACC,kBAAkB,CAAiB,YAAY,CAAC;IAC3E,IAAI,CAACF,MAAM,CAACG,IAAI,CAACJ,SAAS,CAAC;EAC7B;EAEAK,MAAMA,CAACtB,IAAgB,EAAQ;IAC7B,MAAMuB,UAAU,GAAG,IAAA1B,+BAAI,EAACG,IAAI,CAAC;IAC7B,IAAI,CAACkB,MAAM,CAACI,MAAM,CAACC,UAAU,CAAC;IAC9B,OAAO,IAAI;EACb;EAGAC,IAAIA,CAACC,UAAoB,EAAEC,cAA+B,EAAmB;IAC3E,IAAID,UAAU,KAAK,IAAI,IAAIA,UAAU,KAAK9B,SAAS,EAAE;MACnD,MAAM,IAAIV,KAAK,CAAC,yBAAyB,CAAC;IAC5C;IAEA,MAAM;MAAEC,SAAS;MAAEkB;IAAQ,CAAC,GAAGxB,UAAU,CAAC6C,UAAU,EAAE,KAAK,CAAC;IAE5D,MAAME,SAAS,GAAG,IAAI,CAACT,MAAM,CAACM,IAAI,CAChCtC,SAAS,CAACgC,MAAM,EAChBd,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEH,OAAO,EAChBG,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEF,UAAU,EACnBY,mBAAmB,CAACV,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAED,WAAW,CAC1C,CAAC;IAED,MAAMyB,GAAG,GAAGC,yBAAM,CAACC,IAAI,CAACH,SAAS,CAAC;IAClC,IAAID,cAAc,EAAE;MAClB,OAAOE,GAAG,CAACG,QAAQ,CAACL,cAAc,CAAC;IACrC;IACA,OAAOE,GAAG;EACZ;AACF;AAACI,OAAA,CAAAjB,IAAA,GAAAA,IAAA;AAEM,MAAMkB,MAAM,CAAC;EAGlBjB,WAAWA,CAACC,SAAiB,EAAE;IAAAxD,eAAA;IAC7B,IAAI,CAACyD,MAAM,GACTC,qCAAY,CAACC,kBAAkB,CAAmB,cAAc,CAAC;IACnE,IAAI,CAACF,MAAM,CAACG,IAAI,CAACJ,SAAS,CAAC;EAC7B;EAEAK,MAAMA,CAACtB,IAAgB,EAAQ;IAC7B,MAAMuB,UAAU,GAAG,IAAA1B,+BAAI,EAACG,IAAI,CAAC;IAC7B,IAAI,CAACkB,MAAM,CAACI,MAAM,CAACC,UAAU,CAAC;IAC9B,OAAO,IAAI;EACb;EAEAW,MAAMA,CACJC,SAAmB,EACnBR,SAAqB,EACrBS,iBAAkC,EACzB;IACT,IAAID,SAAS,KAAK,IAAI,IAAIA,SAAS,KAAKxC,SAAS,EAAE;MACjD,MAAM,IAAIV,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IAEA,MAAM;MAAEC,SAAS;MAAEkB;IAAQ,CAAC,GAAGxB,UAAU,CAACuD,SAAS,EAAE,IAAI,CAAC;;IAE1D;IACA,IAAIE,SAAsB;IAC1B,IAAID,iBAAiB,IAAI,OAAOT,SAAS,KAAK,QAAQ,EAAE;MACtDU,SAAS,GAAG,IAAAxC,+BAAI,EAACgC,yBAAM,CAACC,IAAI,CAACH,SAAS,EAAES,iBAAiB,CAAC,CAAC;IAC7D,CAAC,MAAM;MACLC,SAAS,GAAG,IAAAxC,+BAAI,EAAC8B,SAAS,CAAC;IAC7B;IAEA,OAAO,IAAI,CAACT,MAAM,CAACgB,MAAM,CACvBhD,SAAS,CAACgC,MAAM,EAChBmB,SAAS,EACTjC,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEH,OAAO,EAChBG,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEF,UAAU,EACnBY,mBAAmB,CAACV,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAED,WAAW,CAC1C,CAAC;EACH;AACF;AAAC6B,OAAA,CAAAC,MAAA,GAAAA,MAAA;AAEM,SAASK,UAAUA,CAACrB,SAAiB,EAAQ;EAClD,OAAO,IAAIF,IAAI,CAACE,SAAS,CAAC;AAC5B;AAEO,SAASsB,YAAYA,CAACtB,SAAiB,EAAU;EACtD,OAAO,IAAIgB,MAAM,CAAChB,SAAS,CAAC;AAC9B;AAgBO,SAASO,IAAIA,CAClBP,SAAoC,EACpCjB,IAAgB,EAChBnB,GAAa,EACb2D,QAAuB,EACR;EACf,MAAMC,MAAM,GAAGA,CAAA,KAAc;IAC3B,IAAI5D,GAAG,KAAK,IAAI,IAAIA,GAAG,KAAKc,SAAS,EAAE;MACrC,MAAM,IAAIV,KAAK,CAAC,yBAAyB,CAAC;IAC5C;IACA,MAAMyD,MAAM,GAAG,IAAI3B,IAAI,CAACE,SAAS,IAAI,EAAE,CAAC;IACxCyB,MAAM,CAACpB,MAAM,CAACtB,IAAI,CAAC;IACnB,OAAO0C,MAAM,CAAClB,IAAI,CAAC3C,GAAG,CAAC;EACzB,CAAC;EAED,IAAI2D,QAAQ,EAAE;IACZ,IAAI;MACF,MAAMb,SAAS,GAAGc,MAAM,CAAC,CAAC;MAC1BE,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAE,IAAI,EAAEb,SAAS,CAAC;IAC7C,CAAC,CAAC,OAAOkB,GAAG,EAAE;MACZF,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAEK,GAAY,CAAC;IAC1C;IACA;EACF;EAEA,OAAOJ,MAAM,CAAC,CAAC;AACjB;AAeO,SAASP,MAAMA,CACpBjB,SAAoC,EACpCjB,IAAgB,EAChBnB,GAAa,EACb8C,SAAqB,EACrBa,QAAyB,EACT;EAChB,MAAMM,QAAQ,GAAGA,CAAA,KAAe;IAC9B,IAAIjE,GAAG,KAAK,IAAI,IAAIA,GAAG,KAAKc,SAAS,EAAE;MACrC,MAAM,IAAIV,KAAK,CAAC,iBAAiB,CAAC;IACpC;IACA,MAAM8D,QAAQ,GAAG,IAAId,MAAM,CAAChB,SAAS,IAAI,EAAE,CAAC;IAC5C8B,QAAQ,CAACzB,MAAM,CAACtB,IAAI,CAAC;IACrB,OAAO+C,QAAQ,CAACb,MAAM,CAACrD,GAAG,EAAE8C,SAAS,CAAC;EACxC,CAAC;EAED,IAAIa,QAAQ,EAAE;IACZ,IAAI;MACF,MAAMQ,MAAM,GAAGF,QAAQ,CAAC,CAAC;MACzBH,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAE,IAAI,EAAEQ,MAAM,CAAC;IAC1C,CAAC,CAAC,OAAOH,GAAG,EAAE;MACZF,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAEK,GAAY,CAAC;IAC1C;IACA;EACF;EAEA,OAAOC,QAAQ,CAAC,CAAC;AACnB","ignoreList":[]}

package/dist/commonjs/keys/utils.js

@@ -0,0 +1,123 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getCryptoKeyPair = getCryptoKeyPair;
+exports.isCryptoKey = void 0;
+exports.parseKeyEncoding = parseKeyEncoding;
+exports.parsePrivateKeyEncoding = parsePrivateKeyEncoding;
+exports.parsePublicKeyEncoding = parsePublicKeyEncoding;
+var _utils = require("../utils");
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const isCryptoKey = obj => {
+  return obj !== null && (obj === null || obj === void 0 ? void 0 : obj.keyObject) !== undefined;
+};
+exports.isCryptoKey = isCryptoKey;
+function getCryptoKeyPair(key) {
+  if ('publicKey' in key && 'privateKey' in key) return key;
+  throw new Error('Invalid CryptoKeyPair');
+}
+
+/**
+ * Parses the public key encoding based on an object. keyType must be undefined
+ * when this is used to parse an input encoding and must be a valid key type if
+ * used to parse an output encoding.
+ */
+function parsePublicKeyEncoding(enc, keyType, objName) {
+  return parseKeyEncoding(enc, keyType, keyType ? true : undefined, objName);
+}
+
+/**
+ * Parses the private key encoding based on an object. keyType must be undefined
+ * when this is used to parse an input encoding and must be a valid key type if
+ * used to parse an output encoding.
+ */
+function parsePrivateKeyEncoding(enc, keyType, objName) {
+  return parseKeyEncoding(enc, keyType, false, objName);
+}
+function parseKeyEncoding(enc, keyType, isPublic, objName) {
+  // validateObject(enc, 'options');
+
+  const isInput = keyType === undefined;
+  const {
+    format,
+    type
+  } = parseKeyFormatAndType(enc, keyType, isPublic, objName);
+  let cipher, passphrase, encoding;
+  if (isPublic !== true) {
+    ({
+      cipher,
+      passphrase,
+      encoding
+    } = enc);
+    if (!isInput) {
+      if (cipher != null) {
+        if (typeof cipher !== 'string') throw new Error(`Invalid argument ${option('cipher', objName)}: ${cipher}`);
+        if (format === _utils.KFormatType.DER && (type === _utils.KeyEncoding.PKCS1 || type === _utils.KeyEncoding.SEC1)) {
+          throw new Error(`Incompatible key options ${encodingNames[type]} does not support encryption`);
+        }
+      } else if (passphrase !== undefined) {
+        throw new Error(`invalid argument ${option('cipher', objName)}: ${cipher}`);
+      }
+    }
+    if (isInput && passphrase !== undefined && !(0, _utils.isStringOrBuffer)(passphrase) || !isInput && cipher != null && !(0, _utils.isStringOrBuffer)(passphrase)) {
+      throw new Error(`Invalid argument value ${option('passphrase', objName)}: ${passphrase}`);
+    }
+  }
+  if (passphrase !== undefined) passphrase = (0, _utils.binaryLikeToArrayBuffer)(passphrase, encoding);
+  return {
+    format,
+    type,
+    cipher,
+    passphrase
+  };
+}
+const encodingNames = {
+  [_utils.KeyEncoding.PKCS1]: 'pkcs1',
+  [_utils.KeyEncoding.PKCS8]: 'pkcs8',
+  [_utils.KeyEncoding.SPKI]: 'spki',
+  [_utils.KeyEncoding.SEC1]: 'sec1'
+};
+function option(name, objName) {
+  return objName === undefined ? `options.${name}` : `options.${objName}.${name}`;
+}
+function parseKeyFormat(formatStr, defaultFormat, optionName) {
+  if (formatStr === undefined && defaultFormat !== undefined) return defaultFormat;else if (formatStr === 'pem') return _utils.KFormatType.PEM;else if (formatStr === 'der') return _utils.KFormatType.DER;else if (formatStr === 'jwk') return _utils.KFormatType.JWK;
+  throw new Error(`Invalid key format str: ${optionName}`);
+}
+function parseKeyType(typeStr, required, keyType, isPublic, optionName) {
+  if (typeStr === undefined && !required) {
+    return undefined;
+  } else if (typeStr === 'pkcs1') {
+    if (keyType !== undefined && keyType !== 'rsa') {
+      throw new Error(`Crypto incompatible key options: ${typeStr} can only be used for RSA keys`);
+    }
+    return _utils.KeyEncoding.PKCS1;
+  } else if (typeStr === 'spki' && isPublic !== false) {
+    return _utils.KeyEncoding.SPKI;
+  } else if (typeStr === 'pkcs8' && isPublic !== true) {
+    return _utils.KeyEncoding.PKCS8;
+  } else if (typeStr === 'sec1' && isPublic !== true) {
+    if (keyType !== undefined && keyType !== 'ec') {
+      throw new Error(`Incompatible key options ${typeStr} can only be used for EC keys`);
+    }
+    return _utils.KeyEncoding.SEC1;
+  }
+  throw new Error(`Invalid option ${optionName} - ${typeStr}`);
+}
+function parseKeyFormatAndType(enc, keyType, isPublic, objName) {
+  const {
+    format: formatStr,
+    type: typeStr
+  } = enc;
+  const isInput = keyType === undefined;
+  const format = parseKeyFormat(formatStr, isInput ? _utils.KFormatType.PEM : undefined, option('format', objName));
+  const isRequired = (!isInput || format === _utils.KFormatType.DER) && format !== _utils.KFormatType.JWK;
+  const type = parseKeyType(typeStr, isRequired, keyType, isPublic, option('type', objName));
+  return {
+    format,
+    type
+  };
+}
+//# sourceMappingURL=utils.js.map

package/dist/commonjs/keys/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_utils","require","isCryptoKey","obj","keyObject","undefined","exports","getCryptoKeyPair","key","Error","parsePublicKeyEncoding","enc","keyType","objName","parseKeyEncoding","parsePrivateKeyEncoding","isPublic","isInput","format","type","parseKeyFormatAndType","cipher","passphrase","encoding","option","KFormatType","DER","KeyEncoding","PKCS1","SEC1","encodingNames","isStringOrBuffer","binaryLikeToArrayBuffer","PKCS8","SPKI","name","parseKeyFormat","formatStr","defaultFormat","optionName","PEM","JWK","parseKeyType","typeStr","required","isRequired"],"sources":["utils.ts"],"sourcesContent":["import {\r\n  binaryLikeToArrayBuffer,\r\n  isStringOrBuffer,\r\n  KeyEncoding,\r\n  KFormatType,\r\n} from '../utils';\r\nimport type { CryptoKeyPair, EncodingOptions } from '../utils';\r\nimport type { CryptoKey } from './classes';\r\n\r\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\r\nexport const isCryptoKey = (obj: any): boolean => {\r\n  return obj !== null && obj?.keyObject !== undefined;\r\n};\r\n\r\nexport function getCryptoKeyPair(\r\n  key: CryptoKey | CryptoKeyPair,\r\n): CryptoKeyPair {\r\n  if ('publicKey' in key && 'privateKey' in key) return key;\r\n  throw new Error('Invalid CryptoKeyPair');\r\n}\r\n\r\n/**\r\n * Parses the public key encoding based on an object. keyType must be undefined\r\n * when this is used to parse an input encoding and must be a valid key type if\r\n * used to parse an output encoding.\r\n */\r\nexport function parsePublicKeyEncoding(\r\n  enc: EncodingOptions,\r\n  keyType: string | undefined,\r\n  objName?: string,\r\n) {\r\n  return parseKeyEncoding(enc, keyType, keyType ? true : undefined, objName);\r\n}\r\n\r\n/**\r\n * Parses the private key encoding based on an object. keyType must be undefined\r\n * when this is used to parse an input encoding and must be a valid key type if\r\n * used to parse an output encoding.\r\n */\r\nexport function parsePrivateKeyEncoding(\r\n  enc: EncodingOptions,\r\n  keyType: string | undefined,\r\n  objName?: string,\r\n) {\r\n  return parseKeyEncoding(enc, keyType, false, objName);\r\n}\r\n\r\nexport function parseKeyEncoding(\r\n  enc: EncodingOptions,\r\n  keyType?: string,\r\n  isPublic?: boolean,\r\n  objName?: string,\r\n) {\r\n  // validateObject(enc, 'options');\r\n\r\n  const isInput = keyType === undefined;\r\n\r\n  const { format, type } = parseKeyFormatAndType(\r\n    enc,\r\n    keyType,\r\n    isPublic,\r\n    objName,\r\n  );\r\n\r\n  let cipher, passphrase, encoding;\r\n  if (isPublic !== true) {\r\n    ({ cipher, passphrase, encoding } = enc);\r\n\r\n    if (!isInput) {\r\n      if (cipher != null) {\r\n        if (typeof cipher !== 'string')\r\n          throw new Error(\r\n            `Invalid argument ${option('cipher', objName)}: ${cipher}`,\r\n          );\r\n        if (\r\n          format === KFormatType.DER &&\r\n          (type === KeyEncoding.PKCS1 || type === KeyEncoding.SEC1)\r\n        ) {\r\n          throw new Error(\r\n            `Incompatible key options ${encodingNames[type]} does not support encryption`,\r\n          );\r\n        }\r\n      } else if (passphrase !== undefined) {\r\n        throw new Error(\r\n          `invalid argument ${option('cipher', objName)}: ${cipher}`,\r\n        );\r\n      }\r\n    }\r\n\r\n    if (\r\n      (isInput && passphrase !== undefined && !isStringOrBuffer(passphrase)) ||\r\n      (!isInput && cipher != null && !isStringOrBuffer(passphrase))\r\n    ) {\r\n      throw new Error(\r\n        `Invalid argument value ${option('passphrase', objName)}: ${passphrase}`,\r\n      );\r\n    }\r\n  }\r\n\r\n  if (passphrase !== undefined)\r\n    passphrase = binaryLikeToArrayBuffer(passphrase, encoding);\r\n\r\n  return { format, type, cipher, passphrase };\r\n}\r\n\r\nconst encodingNames = {\r\n  [KeyEncoding.PKCS1]: 'pkcs1',\r\n  [KeyEncoding.PKCS8]: 'pkcs8',\r\n  [KeyEncoding.SPKI]: 'spki',\r\n  [KeyEncoding.SEC1]: 'sec1',\r\n};\r\n\r\nfunction option(name: string, objName?: string) {\r\n  return objName === undefined\r\n    ? `options.${name}`\r\n    : `options.${objName}.${name}`;\r\n}\r\n\r\nfunction parseKeyFormat(\r\n  formatStr?: string,\r\n  defaultFormat?: KFormatType,\r\n  optionName?: string,\r\n) {\r\n  if (formatStr === undefined && defaultFormat !== undefined)\r\n    return defaultFormat;\r\n  else if (formatStr === 'pem') return KFormatType.PEM;\r\n  else if (formatStr === 'der') return KFormatType.DER;\r\n  else if (formatStr === 'jwk') return KFormatType.JWK;\r\n  throw new Error(`Invalid key format str: ${optionName}`);\r\n}\r\n\r\nfunction parseKeyType(\r\n  typeStr: string | undefined,\r\n  required: boolean,\r\n  keyType: string | undefined,\r\n  isPublic: boolean | undefined,\r\n  optionName: string,\r\n): KeyEncoding | undefined {\r\n  if (typeStr === undefined && !required) {\r\n    return undefined;\r\n  } else if (typeStr === 'pkcs1') {\r\n    if (keyType !== undefined && keyType !== 'rsa') {\r\n      throw new Error(\r\n        `Crypto incompatible key options: ${typeStr} can only be used for RSA keys`,\r\n      );\r\n    }\r\n    return KeyEncoding.PKCS1;\r\n  } else if (typeStr === 'spki' && isPublic !== false) {\r\n    return KeyEncoding.SPKI;\r\n  } else if (typeStr === 'pkcs8' && isPublic !== true) {\r\n    return KeyEncoding.PKCS8;\r\n  } else if (typeStr === 'sec1' && isPublic !== true) {\r\n    if (keyType !== undefined && keyType !== 'ec') {\r\n      throw new Error(\r\n        `Incompatible key options ${typeStr} can only be used for EC keys`,\r\n      );\r\n    }\r\n    return KeyEncoding.SEC1;\r\n  }\r\n\r\n  throw new Error(`Invalid option ${optionName} - ${typeStr}`);\r\n}\r\n\r\nfunction parseKeyFormatAndType(\r\n  enc: EncodingOptions,\r\n  keyType?: string,\r\n  isPublic?: boolean,\r\n  objName?: string,\r\n) {\r\n  const { format: formatStr, type: typeStr } = enc;\r\n\r\n  const isInput = keyType === undefined;\r\n  const format = parseKeyFormat(\r\n    formatStr,\r\n    isInput ? KFormatType.PEM : undefined,\r\n    option('format', objName),\r\n  );\r\n\r\n  const isRequired =\r\n    (!isInput || format === KFormatType.DER) && format !== KFormatType.JWK;\r\n\r\n  const type = parseKeyType(\r\n    typeStr,\r\n    isRequired,\r\n    keyType,\r\n    isPublic,\r\n    option('type', objName),\r\n  );\r\n  return { format, type };\r\n}\r\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AASA;AACO,MAAMC,WAAW,GAAIC,GAAQ,IAAc;EAChD,OAAOA,GAAG,KAAK,IAAI,IAAI,CAAAA,GAAG,aAAHA,GAAG,uBAAHA,GAAG,CAAEC,SAAS,MAAKC,SAAS;AACrD,CAAC;AAACC,OAAA,CAAAJ,WAAA,GAAAA,WAAA;AAEK,SAASK,gBAAgBA,CAC9BC,GAA8B,EACf;EACf,IAAI,WAAW,IAAIA,GAAG,IAAI,YAAY,IAAIA,GAAG,EAAE,OAAOA,GAAG;EACzD,MAAM,IAAIC,KAAK,CAAC,uBAAuB,CAAC;AAC1C;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,sBAAsBA,CACpCC,GAAoB,EACpBC,OAA2B,EAC3BC,OAAgB,EAChB;EACA,OAAOC,gBAAgB,CAACH,GAAG,EAAEC,OAAO,EAAEA,OAAO,GAAG,IAAI,GAAGP,SAAS,EAAEQ,OAAO,CAAC;AAC5E;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASE,uBAAuBA,CACrCJ,GAAoB,EACpBC,OAA2B,EAC3BC,OAAgB,EAChB;EACA,OAAOC,gBAAgB,CAACH,GAAG,EAAEC,OAAO,EAAE,KAAK,EAAEC,OAAO,CAAC;AACvD;AAEO,SAASC,gBAAgBA,CAC9BH,GAAoB,EACpBC,OAAgB,EAChBI,QAAkB,EAClBH,OAAgB,EAChB;EACA;;EAEA,MAAMI,OAAO,GAAGL,OAAO,KAAKP,SAAS;EAErC,MAAM;IAAEa,MAAM;IAAEC;EAAK,CAAC,GAAGC,qBAAqB,CAC5CT,GAAG,EACHC,OAAO,EACPI,QAAQ,EACRH,OACF,CAAC;EAED,IAAIQ,MAAM,EAAEC,UAAU,EAAEC,QAAQ;EAChC,IAAIP,QAAQ,KAAK,IAAI,EAAE;IACrB,CAAC;MAAEK,MAAM;MAAEC,UAAU;MAAEC;IAAS,CAAC,GAAGZ,GAAG;IAEvC,IAAI,CAACM,OAAO,EAAE;MACZ,IAAII,MAAM,IAAI,IAAI,EAAE;QAClB,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAC5B,MAAM,IAAIZ,KAAK,CACb,oBAAoBe,MAAM,CAAC,QAAQ,EAAEX,OAAO,CAAC,KAAKQ,MAAM,EAC1D,CAAC;QACH,IACEH,MAAM,KAAKO,kBAAW,CAACC,GAAG,KACzBP,IAAI,KAAKQ,kBAAW,CAACC,KAAK,IAAIT,IAAI,KAAKQ,kBAAW,CAACE,IAAI,CAAC,EACzD;UACA,MAAM,IAAIpB,KAAK,CACb,4BAA4BqB,aAAa,CAACX,IAAI,CAAC,8BACjD,CAAC;QACH;MACF,CAAC,MAAM,IAAIG,UAAU,KAAKjB,SAAS,EAAE;QACnC,MAAM,IAAII,KAAK,CACb,oBAAoBe,MAAM,CAAC,QAAQ,EAAEX,OAAO,CAAC,KAAKQ,MAAM,EAC1D,CAAC;MACH;IACF;IAEA,IACGJ,OAAO,IAAIK,UAAU,KAAKjB,SAAS,IAAI,CAAC,IAAA0B,uBAAgB,EAACT,UAAU,CAAC,IACpE,CAACL,OAAO,IAAII,MAAM,IAAI,IAAI,IAAI,CAAC,IAAAU,uBAAgB,EAACT,UAAU,CAAE,EAC7D;MACA,MAAM,IAAIb,KAAK,CACb,0BAA0Be,MAAM,CAAC,YAAY,EAAEX,OAAO,CAAC,KAAKS,UAAU,EACxE,CAAC;IACH;EACF;EAEA,IAAIA,UAAU,KAAKjB,SAAS,EAC1BiB,UAAU,GAAG,IAAAU,8BAAuB,EAACV,UAAU,EAAEC,QAAQ,CAAC;EAE5D,OAAO;IAAEL,MAAM;IAAEC,IAAI;IAAEE,MAAM;IAAEC;EAAW,CAAC;AAC7C;AAEA,MAAMQ,aAAa,GAAG;EACpB,CAACH,kBAAW,CAACC,KAAK,GAAG,OAAO;EAC5B,CAACD,kBAAW,CAACM,KAAK,GAAG,OAAO;EAC5B,CAACN,kBAAW,CAACO,IAAI,GAAG,MAAM;EAC1B,CAACP,kBAAW,CAACE,IAAI,GAAG;AACtB,CAAC;AAED,SAASL,MAAMA,CAACW,IAAY,EAAEtB,OAAgB,EAAE;EAC9C,OAAOA,OAAO,KAAKR,SAAS,GACxB,WAAW8B,IAAI,EAAE,GACjB,WAAWtB,OAAO,IAAIsB,IAAI,EAAE;AAClC;AAEA,SAASC,cAAcA,CACrBC,SAAkB,EAClBC,aAA2B,EAC3BC,UAAmB,EACnB;EACA,IAAIF,SAAS,KAAKhC,SAAS,IAAIiC,aAAa,KAAKjC,SAAS,EACxD,OAAOiC,aAAa,CAAC,KAClB,IAAID,SAAS,KAAK,KAAK,EAAE,OAAOZ,kBAAW,CAACe,GAAG,CAAC,KAChD,IAAIH,SAAS,KAAK,KAAK,EAAE,OAAOZ,kBAAW,CAACC,GAAG,CAAC,KAChD,IAAIW,SAAS,KAAK,KAAK,EAAE,OAAOZ,kBAAW,CAACgB,GAAG;EACpD,MAAM,IAAIhC,KAAK,CAAC,2BAA2B8B,UAAU,EAAE,CAAC;AAC1D;AAEA,SAASG,YAAYA,CACnBC,OAA2B,EAC3BC,QAAiB,EACjBhC,OAA2B,EAC3BI,QAA6B,EAC7BuB,UAAkB,EACO;EACzB,IAAII,OAAO,KAAKtC,SAAS,IAAI,CAACuC,QAAQ,EAAE;IACtC,OAAOvC,SAAS;EAClB,CAAC,MAAM,IAAIsC,OAAO,KAAK,OAAO,EAAE;IAC9B,IAAI/B,OAAO,KAAKP,SAAS,IAAIO,OAAO,KAAK,KAAK,EAAE;MAC9C,MAAM,IAAIH,KAAK,CACb,oCAAoCkC,OAAO,gCAC7C,CAAC;IACH;IACA,OAAOhB,kBAAW,CAACC,KAAK;EAC1B,CAAC,MAAM,IAAIe,OAAO,KAAK,MAAM,IAAI3B,QAAQ,KAAK,KAAK,EAAE;IACnD,OAAOW,kBAAW,CAACO,IAAI;EACzB,CAAC,MAAM,IAAIS,OAAO,KAAK,OAAO,IAAI3B,QAAQ,KAAK,IAAI,EAAE;IACnD,OAAOW,kBAAW,CAACM,KAAK;EAC1B,CAAC,MAAM,IAAIU,OAAO,KAAK,MAAM,IAAI3B,QAAQ,KAAK,IAAI,EAAE;IAClD,IAAIJ,OAAO,KAAKP,SAAS,IAAIO,OAAO,KAAK,IAAI,EAAE;MAC7C,MAAM,IAAIH,KAAK,CACb,4BAA4BkC,OAAO,+BACrC,CAAC;IACH;IACA,OAAOhB,kBAAW,CAACE,IAAI;EACzB;EAEA,MAAM,IAAIpB,KAAK,CAAC,kBAAkB8B,UAAU,MAAMI,OAAO,EAAE,CAAC;AAC9D;AAEA,SAASvB,qBAAqBA,CAC5BT,GAAoB,EACpBC,OAAgB,EAChBI,QAAkB,EAClBH,OAAgB,EAChB;EACA,MAAM;IAAEK,MAAM,EAAEmB,SAAS;IAAElB,IAAI,EAAEwB;EAAQ,CAAC,GAAGhC,GAAG;EAEhD,MAAMM,OAAO,GAAGL,OAAO,KAAKP,SAAS;EACrC,MAAMa,MAAM,GAAGkB,cAAc,CAC3BC,SAAS,EACTpB,OAAO,GAAGQ,kBAAW,CAACe,GAAG,GAAGnC,SAAS,EACrCmB,MAAM,CAAC,QAAQ,EAAEX,OAAO,CAC1B,CAAC;EAED,MAAMgC,UAAU,GACd,CAAC,CAAC5B,OAAO,IAAIC,MAAM,KAAKO,kBAAW,CAACC,GAAG,KAAKR,MAAM,KAAKO,kBAAW,CAACgB,GAAG;EAExE,MAAMtB,IAAI,GAAGuB,YAAY,CACvBC,OAAO,EACPE,UAAU,EACVjC,OAAO,EACPI,QAAQ,EACRQ,MAAM,CAAC,MAAM,EAAEX,OAAO,CACxB,CAAC;EACD,OAAO;IAAEK,MAAM;IAAEC;EAAK,CAAC;AACzB","ignoreList":[]}