@inco/js 0.8.0-devnet-26 → 0.8.0-devnet-28

package/README.md

@@ -150,6 +150,8 @@ Requests attested decryption of one or more handles. Only handles approved via `
 **Three calling modes:**
 
 ```ts
+import { generateXwingKeypair } from "@inco/js/lite";
+
 // Mode 1: Plaintext result (auto-generates ephemeral keypair internally)
 const attestations = await zap.attestedDecrypt(walletClient, [handle]);
 attestations[0].plaintext.value; // The decrypted value
@@ -163,12 +165,11 @@ const encrypted = await zap.attestedDecrypt(
 encrypted[0].encryptedPlaintext.ciphertext.value;
 
 // Mode 3: Reencrypt and decrypt locally
-const decrypted = await zap.attestedDecrypt(
-  walletClient,
-  [handle],
-  keypair.encodePublicKey(),
-  keypair,
-);
+const keypair = await generateXwingKeypair();
+const decrypted = await zap.attestedDecrypt(walletClient, [handle], {
+  reencryptPubKey: keypair.encodePublicKey(),
+  reencryptKeypair: keypair,
+});
 decrypted[0].plaintext.value;
 ```
 
@@ -431,6 +432,25 @@ const deployment = getActiveLightningDeployment("baseSepolia");
 const deployments = getLightningDeployments(84532);
 ```
 
+#### X-Wing Keypair (`@inco/js/lite`)
+
+Generate an ephemeral X-Wing keypair for local reencryption (Mode 3 of `attestedDecrypt` and `attestedCompute`):
+
+```ts
+import { generateXwingKeypair, type XwingKeypair } from "@inco/js/lite";
+
+const keypair: XwingKeypair = await generateXwingKeypair();
+
+// Pass the public key to the attested call and the keypair for local decryption
+const decrypted = await zap.attestedDecrypt(walletClient, [handle], {
+  reencryptPubKey: keypair.encodePublicKey(),
+  reencryptKeypair: keypair,
+});
+decrypted[0].plaintext.value;
+```
+
+X-Wing is a post-quantum hybrid KEM combining ML-KEM-768 and X25519. The generated keypair is ephemeral — generate a fresh one per request.
+
 ---
 
 ### Reencryption Module (`@inco/js/reencryption`)

package/dist/cjs/generated/es/inco/covalidator/compute/v1/server_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/covalidator/compute/v1/server.proto (package inco.covalidator.compute.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/generated/es/inco/covalidator/compute/v1/types_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/covalidator/compute/v1/types.proto (package inco.covalidator.compute.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/generated/es/inco/helioswrapper/v1/helioswrapper_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/helioswrapper/v1/helioswrapper.proto (package inco.helioswrapper.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/generated/es/inco/kms/lite/v1/kms_service_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/kms/lite/v1/kms_service.proto (package inco.kms.lite.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/generated/es/inco/kms/lite/v1/types_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/kms/lite/v1/types.proto (package inco.kms.lite.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/generated/es/inco/sealingfetcher/v1/sealingfetcher_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/sealingfetcher/v1/sealingfetcher.proto (package inco.sealingfetcher.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/lite/index.d.ts

@@ -9,3 +9,5 @@ export * from './attested-decrypt.js';
 export * from './deployments.js';
 export * from './lightning.js';
 export type { AttestedOpts, AttestedOptsDecrypted, AttestedOptsEncrypted, AttestedOptsEphemeral, AttestedRevealOpts, AttestedWithVoucherOpts, AttestedWithVoucherOptsDecrypted, AttestedWithVoucherOptsEncrypted, AttestedWithVoucherOptsEphemeral, } from './types.js';
+export { generateXwingKeypair } from './xwing.js';
+export type { XwingKeypair } from './xwing.js';

package/dist/cjs/lite/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AttestedRevealError = exports.AttestedDecryptError = exports.AttestedComputeError = void 0;
+exports.generateXwingKeypair = exports.AttestedRevealError = exports.AttestedDecryptError = exports.AttestedComputeError = void 0;
 var types_js_1 = require("../attestedcompute/types.js");
 Object.defineProperty(exports, "AttestedComputeError", { enumerable: true, get: function () { return types_js_1.AttestedComputeError; } });
 var types_js_2 = require("../attesteddecrypt/types.js");
@@ -26,4 +26,6 @@ __exportStar(require("./attested-compute.js"), exports);
 __exportStar(require("./attested-decrypt.js"), exports);
 __exportStar(require("./deployments.js"), exports);
 __exportStar(require("./lightning.js"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvbGl0ZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHdEQUFtRTtBQUExRCxnSEFBQSxvQkFBb0IsT0FBQTtBQUM3Qix3REFBbUU7QUFBMUQsZ0hBQUEsb0JBQW9CLE9BQUE7QUFDN0IsdURBQWlFO0FBQXhELCtHQUFBLG1CQUFtQixPQUFBO0FBQzVCLGlFQUErQztBQU8vQyx3REFBc0M7QUFDdEMsd0RBQXNDO0FBQ3RDLG1EQUFpQztBQUNqQyxpREFBK0IifQ==
+var xwing_js_1 = require("./xwing.js");
+Object.defineProperty(exports, "generateXwingKeypair", { enumerable: true, get: function () { return xwing_js_1.generateXwingKeypair; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvbGl0ZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHdEQUFtRTtBQUExRCxnSEFBQSxvQkFBb0IsT0FBQTtBQUM3Qix3REFBbUU7QUFBMUQsZ0hBQUEsb0JBQW9CLE9BQUE7QUFDN0IsdURBQWlFO0FBQXhELCtHQUFBLG1CQUFtQixPQUFBO0FBQzVCLGlFQUErQztBQU8vQyx3REFBc0M7QUFDdEMsd0RBQXNDO0FBQ3RDLG1EQUFpQztBQUNqQyxpREFBK0I7QUFZL0IsdUNBQWtEO0FBQXpDLGdIQUFBLG9CQUFvQixPQUFBIn0=

package/dist/cjs/lite/lightning.d.ts

@@ -66,7 +66,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
     private getEncryptor;
     /**
      * Get the encryption scheme version used by this Lightning instance.
-     * Returns 1 for ECIES or 2 for X-Wing.
+     * Returns the X-Wing encryption scheme identifier.
      * This is a convenience method to get the encryption scheme used by this Lightning instance.
      */
     getEncryptionScheme(): Promise<EncryptionScheme>;
@@ -129,7 +129,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
     /** Returns a shallow copy of the deployment configuration this Lightning instance is bound to. */
     get deployment(): T;
     /**
-     * Encrypt a value using the network's public key (ECIES or X-Wing).
+     * Encrypt a value using the network's public key (X-Wing).
      * The encryption scheme is automatically detected based on the public key length.
      *
      * @param value a boolean or numeric value to encrypt

package/dist/cjs/lite/lightning.js

@@ -71,7 +71,7 @@ class Lightning {
     }
     /**
      * Get the encryption scheme version used by this Lightning instance.
-     * Returns 1 for ECIES or 2 for X-Wing.
+     * Returns the X-Wing encryption scheme identifier.
      * This is a convenience method to get the encryption scheme used by this Lightning instance.
      */
     async getEncryptionScheme() {
@@ -225,7 +225,7 @@ class Lightning {
         return { ...this._deployment };
     }
     /**
-     * Encrypt a value using the network's public key (ECIES or X-Wing).
+     * Encrypt a value using the network's public key (X-Wing).
      * The encryption scheme is automatically detected based on the public key length.
      *
      * @param value a boolean or numeric value to encrypt

package/dist/cjs/lite/xwing.d.ts

@@ -97,7 +97,7 @@ export type XwingDecryptorArgs = {
 /**
  * Encrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Output format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Output format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param pubKeyA - Recipient's public key
  * @param msg - Message to encrypt
@@ -109,7 +109,7 @@ export declare function encrypt(pubKeyA: CryptoKey, msg: Uint8Array, aad?: Uint8
 /**
  * Decrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Input format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Input format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param privKeyA - Recipient's private key
  * @param encryptedData - Encrypted data (encappedKey || ciphertext)

package/dist/cjs/lite/xwing.js

@@ -171,7 +171,7 @@ async function encodeXwingPublicKey(publicKey) {
 /**
  * Encrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Output format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Output format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param pubKeyA - Recipient's public key
  * @param msg - Message to encrypt
@@ -203,7 +203,7 @@ async function encrypt(pubKeyA, msg, aad = new Uint8Array(0), info = new Uint8Ar
 /**
  * Decrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Input format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Input format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param privKeyA - Recipient's private key
  * @param encryptedData - Encrypted data (encappedKey || ciphertext)

package/dist/esm/generated/es/inco/covalidator/compute/v1/server_pb.js

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/covalidator/compute/v1/server.proto (package inco.covalidator.compute.v1, syntax proto3)
 /* eslint-disable */
 import { enumDesc, fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";

package/dist/esm/generated/es/inco/covalidator/compute/v1/types_pb.js

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/covalidator/compute/v1/types.proto (package inco.covalidator.compute.v1, syntax proto3)
 /* eslint-disable */
 import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";

package/dist/esm/generated/es/inco/helioswrapper/v1/helioswrapper_pb.js

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/helioswrapper/v1/helioswrapper.proto (package inco.helioswrapper.v1, syntax proto3)
 /* eslint-disable */
 import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";

package/dist/esm/generated/es/inco/kms/lite/v1/kms_service_pb.js

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/kms/lite/v1/kms_service.proto (package inco.kms.lite.v1, syntax proto3)
 /* eslint-disable */
 import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";

package/dist/esm/generated/es/inco/kms/lite/v1/types_pb.js

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/kms/lite/v1/types.proto (package inco.kms.lite.v1, syntax proto3)
 /* eslint-disable */
 import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";

package/dist/esm/generated/es/inco/sealingfetcher/v1/sealingfetcher_pb.js

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v2.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts"
 // @generated from file inco/sealingfetcher/v1/sealingfetcher.proto (package inco.sealingfetcher.v1, syntax proto3)
 /* eslint-disable */
 import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";

package/dist/esm/lite/index.d.ts

@@ -9,3 +9,5 @@ export * from './attested-decrypt.js';
 export * from './deployments.js';
 export * from './lightning.js';
 export type { AttestedOpts, AttestedOptsDecrypted, AttestedOptsEncrypted, AttestedOptsEphemeral, AttestedRevealOpts, AttestedWithVoucherOpts, AttestedWithVoucherOptsDecrypted, AttestedWithVoucherOptsEncrypted, AttestedWithVoucherOptsEphemeral, } from './types.js';
+export { generateXwingKeypair } from './xwing.js';
+export type { XwingKeypair } from './xwing.js';

package/dist/esm/lite/index.js

@@ -6,4 +6,5 @@ export * from './attested-compute.js';
 export * from './attested-decrypt.js';
 export * from './deployments.js';
 export * from './lightning.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvbGl0ZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsb0JBQW9CLEVBQUUsTUFBTSw2QkFBNkIsQ0FBQztBQUNuRSxPQUFPLEVBQUUsb0JBQW9CLEVBQUUsTUFBTSw2QkFBNkIsQ0FBQztBQUNuRSxPQUFPLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSw0QkFBNEIsQ0FBQztBQUNqRSxjQUFjLGdDQUFnQyxDQUFDO0FBTy9DLGNBQWMsdUJBQXVCLENBQUM7QUFDdEMsY0FBYyx1QkFBdUIsQ0FBQztBQUN0QyxjQUFjLGtCQUFrQixDQUFDO0FBQ2pDLGNBQWMsZ0JBQWdCLENBQUMifQ==
+export { generateXwingKeypair } from './xwing.js';
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/lite/lightning.d.ts

@@ -66,7 +66,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
     private getEncryptor;
     /**
      * Get the encryption scheme version used by this Lightning instance.
-     * Returns 1 for ECIES or 2 for X-Wing.
+     * Returns the X-Wing encryption scheme identifier.
      * This is a convenience method to get the encryption scheme used by this Lightning instance.
      */
     getEncryptionScheme(): Promise<EncryptionScheme>;
@@ -129,7 +129,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
     /** Returns a shallow copy of the deployment configuration this Lightning instance is bound to. */
     get deployment(): T;
     /**
-     * Encrypt a value using the network's public key (ECIES or X-Wing).
+     * Encrypt a value using the network's public key (X-Wing).
      * The encryption scheme is automatically detected based on the public key length.
      *
      * @param value a boolean or numeric value to encrypt

package/dist/esm/lite/lightning.js

@@ -68,7 +68,7 @@ export class Lightning {
     }
     /**
      * Get the encryption scheme version used by this Lightning instance.
-     * Returns 1 for ECIES or 2 for X-Wing.
+     * Returns the X-Wing encryption scheme identifier.
      * This is a convenience method to get the encryption scheme used by this Lightning instance.
      */
     async getEncryptionScheme() {
@@ -222,7 +222,7 @@ export class Lightning {
         return { ...this._deployment };
     }
     /**
-     * Encrypt a value using the network's public key (ECIES or X-Wing).
+     * Encrypt a value using the network's public key (X-Wing).
      * The encryption scheme is automatically detected based on the public key length.
      *
      * @param value a boolean or numeric value to encrypt

package/dist/esm/lite/xwing.d.ts

@@ -97,7 +97,7 @@ export type XwingDecryptorArgs = {
 /**
  * Encrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Output format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Output format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param pubKeyA - Recipient's public key
  * @param msg - Message to encrypt
@@ -109,7 +109,7 @@ export declare function encrypt(pubKeyA: CryptoKey, msg: Uint8Array, aad?: Uint8
 /**
  * Decrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Input format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Input format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param privKeyA - Recipient's private key
  * @param encryptedData - Encrypted data (encappedKey || ciphertext)

package/dist/esm/lite/xwing.js

@@ -156,7 +156,7 @@ export async function encodeXwingPublicKey(publicKey) {
 /**
  * Encrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Output format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Output format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param pubKeyA - Recipient's public key
  * @param msg - Message to encrypt
@@ -188,7 +188,7 @@ export async function encrypt(pubKeyA, msg, aad = new Uint8Array(0), info = new
 /**
  * Decrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Input format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Input format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param privKeyA - Recipient's private key
  * @param encryptedData - Encrypted data (encappedKey || ciphertext)

package/dist/types/lite/index.d.ts

@@ -9,3 +9,5 @@ export * from './attested-decrypt.js';
 export * from './deployments.js';
 export * from './lightning.js';
 export type { AttestedOpts, AttestedOptsDecrypted, AttestedOptsEncrypted, AttestedOptsEphemeral, AttestedRevealOpts, AttestedWithVoucherOpts, AttestedWithVoucherOptsDecrypted, AttestedWithVoucherOptsEncrypted, AttestedWithVoucherOptsEphemeral, } from './types.js';
+export { generateXwingKeypair } from './xwing.js';
+export type { XwingKeypair } from './xwing.js';

package/dist/types/lite/lightning.d.ts

@@ -66,7 +66,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
     private getEncryptor;
     /**
      * Get the encryption scheme version used by this Lightning instance.
-     * Returns 1 for ECIES or 2 for X-Wing.
+     * Returns the X-Wing encryption scheme identifier.
      * This is a convenience method to get the encryption scheme used by this Lightning instance.
      */
     getEncryptionScheme(): Promise<EncryptionScheme>;
@@ -129,7 +129,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
     /** Returns a shallow copy of the deployment configuration this Lightning instance is bound to. */
     get deployment(): T;
     /**
-     * Encrypt a value using the network's public key (ECIES or X-Wing).
+     * Encrypt a value using the network's public key (X-Wing).
      * The encryption scheme is automatically detected based on the public key length.
      *
      * @param value a boolean or numeric value to encrypt

package/dist/types/lite/xwing.d.ts

@@ -97,7 +97,7 @@ export type XwingDecryptorArgs = {
 /**
  * Encrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Output format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Output format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param pubKeyA - Recipient's public key
  * @param msg - Message to encrypt
@@ -109,7 +109,7 @@ export declare function encrypt(pubKeyA: CryptoKey, msg: Uint8Array, aad?: Uint8
 /**
  * Decrypt using X-Wing HPKE (RFC 9180) with ChaCha20-Poly1305 AEAD.
  *
- * Input format: encappedKey (1184 bytes) || ciphertext (variable length)
+ * Input format: encappedKey (1120 bytes) || ciphertext (variable length)
  *
  * @param privKeyA - Recipient's private key
  * @param encryptedData - Encrypted data (encappedKey || ciphertext)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inco/js",
-  "version": "0.8.0-devnet-26",
+  "version": "0.8.0-devnet-28",
   "repository": "https://github.com/Inco-fhevm/inco-monorepo",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -88,7 +88,7 @@
     "@hpke/hybridkem-x-wing": "0.6.1",
     "@hpke/core": "1.7.5",
     "@hpke/chacha20poly1305": "1.7.1",
-    "effect": "3.18.4",
+    "effect": "3.21.0",
     "sha3": "2.1.4",
     "viem": "2.39.3"
   },