@interop/minimal-cipher 7.0.0

package/dist/Cipher.js

@@ -0,0 +1,313 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+import { base64url } from './baseX.js';
+import * as fipsAlgorithm from './algorithms/fips.js';
+import * as recAlgorithm from './algorithms/recommended.js';
+import { DecryptTransformer } from './DecryptTransformer.js';
+import { EncryptTransformer } from './EncryptTransformer.js';
+import { stringToUint8Array } from './util.js';
+const VERSIONS = ['recommended', 'fips'];
+export class Cipher {
+    version;
+    cipher;
+    keyAgreement;
+    /**
+     * Creates a new Cipher instance that can be used to encrypt or decrypt
+     * data. A version must be supplied for encrypting data; the version
+     * indicates whether a FIPS-compliant algorithm or the latest recommended
+     * algorithm will be used.
+     *
+     * @param {string} [version='recommended'] - `fips` to use a FIPS-compliant
+     *   algorithm, `recommended` to use the latest recommended algorithm when
+     *   encrypting.
+     *
+     * @returns {Cipher} A Cipher used to encrypt and decrypt data.
+     */
+    constructor({ version = 'recommended' } = {}) {
+        if (typeof version !== 'string') {
+            throw new TypeError('"version" must be a string.');
+        }
+        if (!VERSIONS.includes(version)) {
+            throw new Error(`Unsupported version "${version}".`);
+        }
+        this.version = version;
+        if (version === 'fips') {
+            this.cipher = fipsAlgorithm.cipher;
+            this.keyAgreement = fipsAlgorithm.keyAgreement;
+        }
+        else {
+            this.cipher = recAlgorithm.cipher;
+            this.keyAgreement = recAlgorithm.keyAgreement;
+        }
+    }
+    /**
+     * Creates a TransformStream that will encrypt some data for one or more
+     * recipients and output a stream of chunks, each containing an object
+     * with the property `jwe` with a JWE value.
+     *
+     * A list of recipients must be given in the `recipients` array, identified
+     * by key agreement keys. An ephemeral ECDH key will be generated and used to
+     * derive shared KEKs that will wrap a randomly generated CEK. Each recipient
+     * in the `recipients` array will be updated to include the generated
+     * ephemeral ECDH key.
+     *
+     * @param {object} options - The options for the stream.
+     * @param {Array} options.recipients - An array of recipients for the
+     *   encrypted content.
+     * @param {Function} options.keyResolver - A function that returns a Promise
+     *   that resolves a key ID to a DH public key.
+     * @param {number} [options.chunkSize=1048576] - The size, in bytes,
+     *   of the chunks to break the incoming data into.
+     *
+     * @returns {Promise<TransformStream>} Resolves to a TransformStream.
+     */
+    async createEncryptStream({ recipients, keyResolver, chunkSize }) {
+        const transformer = await this.createEncryptTransformer({
+            recipients,
+            keyResolver,
+            chunkSize
+        });
+        return new TransformStream(transformer);
+    }
+    /**
+     * Creates a TransformStream that will decrypt one or more chunks, each one
+     * that is an object with a `jwe` property that has a JWE as a value. The
+     * stream will output chunks of Uint8Arrays consisting of the decrypted
+     * data from each chunk.
+     *
+     * The only JWEs currently supported use an `alg` of `ECDH-ES+A256KW` and
+     * `enc` of `A256GCM` or `XC20P`. These parameters refer to data that has been
+     * encrypted using a 256-bit AES-GCM or XChaCha20Poly1305 content encryption
+     * key (CEK) that has been wrapped using a 256-bit AES-KW key encryption key
+     * (KEK) generated via a shared secret between an ephemeral ECDH key and a
+     * static ECDH key (ECDH-ES).
+     *
+     * @param {object} options - Options for createDecryptStream.
+     * @param {object} options.keyAgreementKey - A key agreement key API with
+     *   `id` and deriveSecret`.
+     *
+     * @returns {Promise<TransformStream>} Resolves to the TransformStream.
+     */
+    async createDecryptStream({ keyAgreementKey }) {
+        const transformer = await this.createDecryptTransformer({ keyAgreementKey });
+        return new TransformStream(transformer);
+    }
+    /**
+     * Encrypts some data for one or more recipients and outputs a JWE. The
+     * data to encrypt can be given as a Uint8Array or a string.
+     *
+     * A list of recipients must be given in the `recipients` array, identified
+     * by key agreement keys. An ephemeral ECDH key will be generated and used to
+     * derive shared KEKs that will wrap a randomly generated CEK. Each recipient
+     * in the `recipients` array will be updated to include the generated
+     * ephemeral ECDH key.
+     *
+     * @param {object} options - Options for encrypt.
+     * @param {Uint8Array|string} [options.data] - The data to encrypt.
+     * @param {Array} options.recipients - An array of recipients for the\
+     *   encrypted content.
+     * @param {Function} options.keyResolver - A function that returns a Promise
+     *   that resolves a key ID to a DH public key.
+     *
+     * @returns {Promise<object>} Resolves to a JWE.
+     */
+    async encrypt({ data, recipients, keyResolver }) {
+        if (!(data instanceof Uint8Array) && typeof data !== 'string') {
+            throw new TypeError('"data" must be a Uint8Array or a string.');
+        }
+        let bytes = data;
+        if (data) {
+            bytes = stringToUint8Array(data);
+        }
+        const transformer = await this.createEncryptTransformer({
+            recipients,
+            keyResolver
+        });
+        return transformer.encrypt(bytes);
+    }
+    /**
+     * Encrypts an object. The object will be serialized to JSON and passed
+     * to `encrypt`. See `encrypt` for other parameters.
+     *
+     * @param {object} options - Options to use.
+     * @param {object} options.obj - The object to encrypt.
+     * @param {object} options.rest - The other options to be passed to encrypt.
+     *
+     * @returns {Promise<object>} Resolves to a JWE.
+     */
+    async encryptObject({ obj, ...rest }) {
+        if (typeof obj !== 'object') {
+            throw new TypeError('"obj" must be an object.');
+        }
+        return this.encrypt({ data: JSON.stringify(obj), ...rest });
+    }
+    /**
+     * Decrypts a single JWE.
+     *
+     * The only JWEs currently supported use an `alg` of `ECDH-ES+A256KW` and
+     * `enc` of `A256GCM` or `XC20P`. These parameters refer to data that has been
+     * encrypted using a 256-bit AES-GCM or XChaCha20Poly1305 content encryption
+     * key (CEK) that has been wrapped using a 256-bit AES-KW key encryption key
+     * (KEK) generated via a shared secret between an ephemeral ECDH key and a
+     * static ECDH key (ECDH-ES).
+     *
+     * Note: This version also supports decrypting data that was encrypted using
+     * `C20P` (ChaCha20Poly1305) for backwards compatibility.
+     *
+     * @param {object} options - Options for decrypt.
+     * @param {object} options.jwe - The JWE to decrypt.
+     * @param {object} options.keyAgreementKey - A key agreement key API with
+     *   `id` and `deriveSecret`.
+     *
+     * @returns {Promise<Uint8Array>} - Resolves to the decrypted data
+     *   or `null` if the decryption failed.
+     */
+    async decrypt({ jwe, keyAgreementKey }) {
+        const transformer = await this.createDecryptTransformer({ keyAgreementKey });
+        return transformer.decrypt(jwe);
+    }
+    /**
+     * Decrypts a JWE that must contain an encrypted object. This method will
+     * call `decrypt` and then `JSON.parse` the resulting decrypted UTF-8 data.
+     *
+     * @param {object} options - Options.
+     * @param {object} options.jwe - The JWE to decrypt.
+     * @param {object} options.keyAgreementKey - A key agreement key API with
+     *   `id` and `deriveSecret`.
+     *
+     * @returns {Promise<object>} - Resolves to the decrypted object or `null`
+     *   if the decryption failed.
+     */
+    async decryptObject({ jwe, keyAgreementKey }) {
+        const data = await this.decrypt({ jwe, keyAgreementKey });
+        if (!data) {
+            // decryption failed
+            return null;
+        }
+        return JSON.parse(new TextDecoder().decode(data));
+    }
+    /**
+     * Creates an EncryptTransformer that can be used to encrypt one or more
+     * chunks of data.
+     *
+     * A list of recipients must be given in the `recipients` array, identified
+     * by key agreement keys. An ephemeral ECDH key will be generated and used to
+     * derive shared KEKs that will wrap a randomly generated CEK. Each recipient
+     * in the `recipients` array will be updated to include the generated
+     * ephemeral ECDH key.
+     *
+     * @param {object} options - Options for the transformer.
+     * @param {Array} options.recipients - An array of recipients for the
+     *   encrypted content.
+     * @param {Function} options.keyResolver - A function that returns
+     *   a Promise that resolves a key ID to a DH public key.
+     * @param {number} [options.chunkSize=1048576] - The size, in bytes, of the
+     *   chunks to break the incoming data into (only applies if returning a
+     *   stream).
+     *
+     * @returns {Promise<EncryptTransformer>} - Resolves to an EncryptTransformer.
+     */
+    async createEncryptTransformer({ recipients, keyResolver, chunkSize }) {
+        if (!(Array.isArray(recipients) && recipients.length > 0)) {
+            throw new TypeError('"recipients" must be a non-empty array.');
+        }
+        // ensure all recipients use the supported key agreement algorithm
+        const { keyAgreement } = this;
+        const { JWE_ALG: alg } = keyAgreement;
+        if (!recipients.every(e => e.header && e.header.alg === alg)) {
+            throw new Error(`All recipients must use the algorithm "${alg}".`);
+        }
+        const { cipher } = this;
+        // generate a CEK for encrypting the content
+        const cek = await cipher.generateKey();
+        // derive ephemeral ECDH key pair to use with all recipients
+        const ephemeralKeyPair = await keyAgreement.generateEphemeralKeyPair();
+        recipients = await Promise.all(recipients.map(recipient => this._createRecipient({ recipient, cek, ephemeralKeyPair, keyResolver })));
+        // create shared protected header as associated authenticated data (aad)
+        // ASCII(BASE64URL(UTF8(JWE Protected Header)))
+        const enc = cipher.JWE_ENC;
+        const jweProtectedHeader = JSON.stringify({ enc });
+        const encodedProtectedHeader = base64url.encode(stringToUint8Array(jweProtectedHeader));
+        // UTF8-encoding a base64url-encoded string is the same as ASCII
+        const additionalData = stringToUint8Array(encodedProtectedHeader);
+        return new EncryptTransformer({
+            recipients,
+            encodedProtectedHeader,
+            cipher,
+            additionalData,
+            cek,
+            chunkSize
+        });
+    }
+    /**
+     * Creates a DecryptTransformer.
+     *
+     * @param {object} options - Options to use.
+     * @param {object} options.keyAgreementKey - A key agreement key API with
+     *   `id` and `deriveSecret`.
+     *
+     * @returns {Promise<DecryptTransformer>} - Resolves to a DecryptTransformer.
+     */
+    async createDecryptTransformer({ keyAgreementKey }) {
+        return new DecryptTransformer({
+            keyAgreement: this.keyAgreement,
+            keyAgreementKey
+        });
+    }
+    /**
+     * Creates a JWE recipient using the given inputs.
+     *
+     * @see https://tools.ietf.org/html/rfc7516#section-4
+     *
+     * @param {object} options - Options to use.
+     * @param {object} options.recipient - A recipient with a header with a
+     *   kid and alg.
+     * @param {object} options.ephemeralKeyPair - An ephemeral key pair.
+     * @param {object} options.cek - A content encryption key.
+     * @param {Function} options.keyResolver - A function that can resolve keys.
+     *
+     * @returns {Promise<object>} A JWE recipient object.
+     */
+    async _createRecipient({ recipient, ephemeralKeyPair, cek, keyResolver }) {
+        if (!recipient) {
+            throw new TypeError('"options.recipient" is required.');
+        }
+        if (!ephemeralKeyPair) {
+            throw new TypeError('"options.ephemeralKeyPair" is required.');
+        }
+        if (!cek) {
+            throw new TypeError('"options.cek" is required.');
+        }
+        if (!keyResolver) {
+            throw new TypeError('"options.keyResolver" is required.');
+        }
+        // resolve public DH key for recipient
+        const { keyAgreement } = this;
+        const staticPublicKey = await keyResolver({ id: recipient.header.kid });
+        // derive KEKs for each recipient
+        const derivedResult = await keyAgreement.kekFromStaticPeer({
+            ephemeralKeyPair,
+            staticPublicKey
+        });
+        const { kek, epk, apu, apv } = derivedResult;
+        const header = {
+            // contains the key id - kid
+            // contains the algorithm - alg
+            ...recipient.header,
+            // the ephemeralKeyPair
+            epk,
+            // base64 encoded ephemeralKeyPair's publicKey
+            apu,
+            // base64 encoded staticPublicKey's id
+            apv
+        };
+        return {
+            ...recipient,
+            header,
+            // the cek is wrapped so the recipient can use it to decrypt later
+            encrypted_key: await kek.wrapKey({ unwrappedKey: cek })
+        };
+    }
+}
+//# sourceMappingURL=Cipher.js.map

package/dist/Cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Cipher.js","sourceRoot":"","sources":["../src/Cipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAW9C,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;AAoBxC,MAAM,OAAO,MAAM;IACjB,OAAO,CAAQ;IACf,MAAM,CAAiB;IACvB,YAAY,CAAuB;IAEnC;;;;;;;;;;;OAWG;IACH,YAAY,EAAE,OAAO,GAAG,aAAa,KAA2B,EAAE;QAChE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,IAAI,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAA;YAClC,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,YAAY,CAAA;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAA;YACjC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,YAAY,CAAA;QAC/C,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,mBAAmB,CAAC,EACxB,UAAU,EACV,WAAW,EACX,SAAS,EACY;QACrB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;YACtD,UAAU;YACV,WAAW;YACX,SAAS;SACV,CAAC,CAAA;QACF,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,mBAAmB,CAAC,EACxB,eAAe,EAGhB;QACC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5E,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,OAAO,CAAC,EACZ,IAAI,EACJ,UAAU,EACV,WAAW,EACI;QACf,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,KAAK,GAAwB,IAAI,CAAA;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;YACtD,UAAU;YACV,WAAW;SACZ,CAAC,CAAA;QACF,OAAO,WAAW,CAAC,OAAO,CAAC,KAAmB,CAAC,CAAA;IACjD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,EAAwB;QACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,OAAO,CAAC,EACZ,GAAG,EACH,eAAe,EAIhB;QACC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5E,OAAO,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CAAC,EAClB,GAAG,EACH,eAAe,EAIhB;QACC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oBAAoB;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACnD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,wBAAwB,CAAC,EAC7B,UAAU,EACV,WAAW,EACX,SAAS,EACY;QACrB,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;QAChE,CAAC;QACD,kEAAkE;QAClE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,IAAI,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAEvB,4CAA4C;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAA;QAEtC,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,wBAAwB,EAAE,CAAA;QAEtE,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,IAAI,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CACzE,CACF,CAAA;QAED,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAA;QAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAClD,MAAM,sBAAsB,GAAG,SAAS,CAAC,MAAM,CAC7C,kBAAkB,CAAC,kBAAkB,CAAC,CACvC,CAAA;QACD,gEAAgE;QAChE,MAAM,cAAc,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,CAAA;QAEjE,OAAO,IAAI,kBAAkB,CAAC;YAC5B,UAAU;YACV,sBAAsB;YACtB,MAAM;YACN,cAAc;YACd,GAAG;YACH,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,wBAAwB,CAAC,EAC7B,eAAe,EAGhB;QACC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,eAAe;SAChB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,SAAS,EACT,gBAAgB,EAChB,GAAG,EACH,WAAW,EAMZ;QACC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;QACnD,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;QAC3D,CAAC;QACD,sCAAsC;QACtC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;QAC7B,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QACvE,iCAAiC;QACjC,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC;YACzD,gBAAgB;YAChB,eAAe;SAChB,CAAC,CAAA;QACF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAA;QAC5C,MAAM,MAAM,GAAG;YACb,4BAA4B;YAC5B,+BAA+B;YAC/B,GAAG,SAAS,CAAC,MAAM;YACnB,uBAAuB;YACvB,GAAG;YACH,8CAA8C;YAC9C,GAAG;YACH,sCAAsC;YACtC,GAAG;SACJ,CAAA;QACD,OAAO;YACL,GAAG,SAAS;YACZ,MAAM;YACN,kEAAkE;YAClE,aAAa,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;CACF"}

package/dist/DecryptTransformer.d.ts

@@ -0,0 +1,14 @@
+import type { JWE, KeyAgreementAlgorithm, KeyAgreementKey } from './types.js';
+export declare class DecryptTransformer {
+    keyAgreement: KeyAgreementAlgorithm;
+    keyAgreementKey: KeyAgreementKey;
+    constructor({ keyAgreement, keyAgreementKey }?: {
+        keyAgreement?: KeyAgreementAlgorithm;
+        keyAgreementKey?: KeyAgreementKey;
+    });
+    transform(chunk: {
+        jwe: JWE;
+    }, controller: TransformStreamDefaultController): Promise<void>;
+    decrypt(jwe: JWE): Promise<Uint8Array | null>;
+}
+//# sourceMappingURL=DecryptTransformer.d.ts.map

package/dist/DecryptTransformer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DecryptTransformer.d.ts","sourceRoot":"","sources":["../src/DecryptTransformer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGV,GAAG,EACH,qBAAqB,EACrB,eAAe,EAEhB,MAAM,YAAY,CAAA;AAenB,qBAAa,kBAAkB;IAC7B,YAAY,EAAE,qBAAqB,CAAA;IACnC,eAAe,EAAE,eAAe,CAAA;gBAEpB,EACV,YAAY,EACZ,eAAe,EAChB,GAAE;QACD,YAAY,CAAC,EAAE,qBAAqB,CAAA;QACpC,eAAe,CAAC,EAAE,eAAe,CAAA;KAC7B;IAWA,SAAS,CACb,KAAK,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,EACnB,UAAU,EAAE,gCAAgC,GAC3C,OAAO,CAAC,IAAI,CAAC;IAiBV,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;CAgFpD"}

package/dist/DecryptTransformer.js

@@ -0,0 +1,125 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+import { base64url } from './baseX.js';
+import * as fipsAlgorithm from './algorithms/fips.js';
+import * as recAlgorithm from './algorithms/recommended.js';
+import { stringToUint8Array } from './util.js';
+// support `C20P` for backwards compatibility
+import * as c20p from './algorithms/c20p.js';
+const CIPHER_ALGORITHMS = {
+    [fipsAlgorithm.cipher.JWE_ENC]: fipsAlgorithm.cipher,
+    [recAlgorithm.cipher.JWE_ENC]: recAlgorithm.cipher,
+    // backwards compatibility for decryption only (*not* encryption)
+    [c20p.JWE_ENC]: c20p
+};
+// only supported key algorithm
+const KEY_ALGORITHM = 'ECDH-ES+A256KW';
+export class DecryptTransformer {
+    keyAgreement;
+    keyAgreementKey;
+    constructor({ keyAgreement, keyAgreementKey } = {}) {
+        if (!keyAgreement) {
+            throw new TypeError('"keyAgreement" is a required parameter.');
+        }
+        if (!keyAgreementKey) {
+            throw new TypeError('"keyAgreementKey" is a required parameter.');
+        }
+        this.keyAgreement = keyAgreement;
+        this.keyAgreementKey = keyAgreementKey;
+    }
+    async transform(chunk, controller) {
+        // assumes `chunk` is an object with a JWE under the `jwe` property
+        if (!(chunk && typeof chunk === 'object')) {
+            throw new TypeError('"chunk" must be an object.');
+        }
+        const { jwe } = chunk;
+        const data = await this.decrypt(jwe);
+        if (data === null) {
+            const error = new Error('Invalid decryption key.');
+            error.name = 'DataError';
+            throw error;
+        }
+        controller.enqueue(data);
+    }
+    async decrypt(jwe) {
+        // validate JWE
+        if (!(jwe && typeof jwe === 'object')) {
+            throw new TypeError('"jwe" must be an object.');
+        }
+        if (typeof jwe.protected !== 'string') {
+            throw new TypeError('"jwe.protected" is missing or not a string.');
+        }
+        if (typeof jwe.iv !== 'string') {
+            throw new Error('Invalid or missing "iv".');
+        }
+        if (typeof jwe.ciphertext !== 'string') {
+            throw new Error('Invalid or missing "ciphertext".');
+        }
+        if (typeof jwe.tag !== 'string') {
+            throw new Error('Invalid or missing "tag".');
+        }
+        // validate encryption header
+        let header;
+        let additionalData;
+        try {
+            // ASCII(BASE64URL(UTF8(JWE Protected Header)))
+            additionalData = stringToUint8Array(jwe.protected);
+            header = JSON.parse(new TextDecoder().decode(base64url.decode(jwe.protected)));
+        }
+        catch {
+            throw new Error('Invalid JWE "protected" header.');
+        }
+        if (!(header.enc && typeof header.enc === 'string')) {
+            throw new Error('Invalid JWE "enc" header.');
+        }
+        const cipher = CIPHER_ALGORITHMS[header.enc];
+        if (!cipher) {
+            throw new Error('Unsupported encryption algorithm "${header.enc}".');
+        }
+        if (!Array.isArray(jwe.recipients)) {
+            throw new TypeError('"jwe.recipients" must be an array.');
+        }
+        // find `keyAgreementKey` matching recipient
+        const { keyAgreementKey } = this;
+        const recipient = _findRecipient(jwe.recipients, keyAgreementKey);
+        if (!recipient) {
+            throw new Error('No matching recipient found for key agreement key.');
+        }
+        // get wrapped CEK
+        const { encrypted_key: wrappedKey } = recipient;
+        if (typeof wrappedKey !== 'string') {
+            throw new Error('Invalid or missing "encrypted_key".');
+        }
+        // TODO: consider a cache of encrypted_key => CEKs to reduce unwrapping
+        // calls which may even need to hit the network (e.g., Web KMS)
+        // derive KEK and unwrap CEK
+        const { epk } = recipient.header;
+        const { keyAgreement } = this;
+        const { kek } = await keyAgreement.kekFromEphemeralPeer({
+            keyAgreementKey,
+            epk: epk
+        });
+        const cek = await kek.unwrapKey({ wrappedKey });
+        if (!cek) {
+            // failed to unwrap key
+            return null;
+        }
+        // decrypt content
+        const { ciphertext, iv, tag } = jwe;
+        return cipher.decrypt({
+            ciphertext: base64url.decode(ciphertext),
+            iv: base64url.decode(iv),
+            tag: base64url.decode(tag),
+            additionalData,
+            cek
+        });
+    }
+}
+function _findRecipient(recipients, key) {
+    return recipients.find(e => e.header &&
+        e.header.kid === key.id &&
+        !key.algorithm &&
+        e.header.alg === KEY_ALGORITHM);
+}
+//# sourceMappingURL=DecryptTransformer.js.map

package/dist/DecryptTransformer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DecryptTransformer.js","sourceRoot":"","sources":["../src/DecryptTransformer.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAU9C,6CAA6C;AAC7C,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAA;AAE5C,MAAM,iBAAiB,GAAoC;IACzD,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM;IACpD,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,MAAM;IAClD,iEAAiE;IACjE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI;CACrB,CAAA;AAED,+BAA+B;AAC/B,MAAM,aAAa,GAAG,gBAAgB,CAAA;AAEtC,MAAM,OAAO,kBAAkB;IAC7B,YAAY,CAAuB;IACnC,eAAe,CAAiB;IAEhC,YAAY,EACV,YAAY,EACZ,eAAe,KAIb,EAAE;QACJ,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;QACnE,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAAmB,EACnB,UAA4C;QAE5C,mEAAmE;QACnE,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;QACnD,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;QAErB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;YAClD,KAAK,CAAC,IAAI,GAAG,WAAW,CAAA;YACxB,MAAM,KAAK,CAAA;QACb,CAAC;QAED,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,eAAe;QACf,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC9C,CAAC;QAED,6BAA6B;QAE7B,IAAI,MAAW,CAAA;QACf,IAAI,cAAc,CAAA;QAClB,IAAI,CAAC;YACH,+CAA+C;YAC/C,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAC1D,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC9C,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;QAC3D,CAAC;QAED,4CAA4C;QAC5C,MAAM,EAAE,eAAe,EAAE,GAAG,IAAI,CAAA;QAChC,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QACjE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,kBAAkB;QAClB,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,SAAS,CAAA;QAC/C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxD,CAAC;QAED,uEAAuE;QACvE,+DAA+D;QAE/D,4BAA4B;QAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAA;QAChC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;QAC7B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,YAAY,CAAC,oBAAoB,CAAC;YACtD,eAAe;YACf,GAAG,EAAE,GAAU;SAChB,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,uBAAuB;YACvB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,kBAAkB;QAClB,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,CAAA;QACnC,OAAO,MAAM,CAAC,OAAO,CAAC;YACpB,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;YACxC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,cAAc;YACd,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;CACF;AAED,SAAS,cAAc,CACrB,UAAuB,EACvB,GAAoB;IAEpB,OAAO,UAAU,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,CACF,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE;QACvB,CAAC,GAAG,CAAC,SAAS;QACd,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,CACjC,CAAA;AACH,CAAC"}

package/dist/EncryptTransformer.d.ts

@@ -0,0 +1,28 @@
+import type { CipherAlgorithm, JWE, Recipient } from './types.js';
+interface EncryptTransformerOptions {
+    recipients: Recipient[];
+    encodedProtectedHeader: string;
+    cipher: CipherAlgorithm;
+    additionalData: Uint8Array;
+    cek: Uint8Array;
+    chunkSize?: number;
+}
+export declare class EncryptTransformer {
+    recipients: Recipient[];
+    encodedProtectedHeader: string;
+    cipher: CipherAlgorithm;
+    additionalData: Uint8Array;
+    cek: Uint8Array;
+    chunkSize: number;
+    offset: number;
+    totalOffset: number;
+    index: number;
+    buffer: Uint8Array;
+    constructor({ recipients, encodedProtectedHeader, cipher, additionalData, cek, chunkSize }: EncryptTransformerOptions);
+    start(): void;
+    transform(chunk: Uint8Array | null, controller: TransformStreamDefaultController): Promise<void>;
+    flush(controller: TransformStreamDefaultController): Promise<void>;
+    encrypt(data: Uint8Array): Promise<JWE>;
+}
+export {};
+//# sourceMappingURL=EncryptTransformer.d.ts.map

package/dist/EncryptTransformer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptTransformer.d.ts","sourceRoot":"","sources":["../src/EncryptTransformer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAKjE,UAAU,yBAAyB;IACjC,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,MAAM,EAAE,eAAe,CAAA;IACvB,cAAc,EAAE,UAAU,CAAA;IAC1B,GAAG,EAAE,UAAU,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,kBAAkB;IAC7B,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,MAAM,EAAE,eAAe,CAAA;IACvB,cAAc,EAAE,UAAU,CAAA;IAC1B,GAAG,EAAE,UAAU,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAG,UAAU,CAAA;gBAEP,EACV,UAAU,EACV,sBAAsB,EACtB,MAAM,EACN,cAAc,EACd,GAAG,EACH,SAA8B,EAC/B,EAAE,yBAAyB;IAY5B,KAAK,IAAI,IAAI;IAIP,SAAS,CACb,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,UAAU,EAAE,gCAAgC,GAC3C,OAAO,CAAC,IAAI,CAAC;IAiCV,KAAK,CAAC,UAAU,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBlE,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;CAkB9C"}

package/dist/EncryptTransformer.js

@@ -0,0 +1,94 @@
+/*!
+ * Copyright (c) 2019-2022 Digital Bazaar, Inc. All rights reserved.
+ */
+import { base64url } from './baseX.js';
+// 1 MiB = 1048576
+const DEFAULT_CHUNK_SIZE = 1048576;
+export class EncryptTransformer {
+    recipients;
+    encodedProtectedHeader;
+    cipher;
+    additionalData;
+    cek;
+    chunkSize;
+    offset;
+    totalOffset;
+    index;
+    buffer;
+    constructor({ recipients, encodedProtectedHeader, cipher, additionalData, cek, chunkSize = DEFAULT_CHUNK_SIZE }) {
+        this.recipients = recipients;
+        this.encodedProtectedHeader = encodedProtectedHeader;
+        this.cipher = cipher;
+        this.additionalData = additionalData;
+        this.cek = cek;
+        this.chunkSize = chunkSize;
+        this.offset = 0;
+        this.totalOffset = 0;
+        this.index = 0;
+    }
+    start() {
+        this.buffer = new Uint8Array(this.chunkSize);
+    }
+    async transform(chunk, controller) {
+        const { buffer } = this;
+        // assumes `chunk` is a Uint8Array...
+        if (!(chunk instanceof Uint8Array)) {
+            throw new TypeError('"chunk" must be an object.');
+        }
+        while (chunk) {
+            const space = buffer.length - this.offset;
+            if (chunk.length <= space) {
+                buffer.set(chunk, this.offset);
+                this.offset += chunk.byteLength;
+                this.totalOffset += chunk.byteLength;
+                chunk = null;
+            }
+            else {
+                const partial = new Uint8Array(chunk.buffer, chunk.byteOffset, space);
+                chunk = new Uint8Array(chunk.buffer, chunk.byteOffset + space, chunk.length - space);
+                buffer.set(partial, this.offset);
+                this.offset += space;
+                this.totalOffset += space;
+            }
+            // flush if buffer is full and more data remains
+            if (chunk) {
+                await this.flush(controller);
+            }
+        }
+    }
+    async flush(controller) {
+        if (this.offset === 0) {
+            // nothing to flush
+            return;
+        }
+        // encrypt data
+        const { buffer } = this;
+        const data = new Uint8Array(buffer.buffer, buffer.byteOffset, this.offset);
+        const jwe = await this.encrypt(data);
+        // clear buffer
+        this.offset = 0;
+        controller.enqueue({
+            index: this.index++,
+            offset: this.totalOffset,
+            jwe
+        });
+    }
+    async encrypt(data) {
+        const { cipher, additionalData, cek } = this;
+        const { ciphertext, iv, tag } = await cipher.encrypt({
+            data,
+            additionalData,
+            cek
+        });
+        // represent encrypted data as JWE
+        const jwe = {
+            protected: this.encodedProtectedHeader,
+            recipients: this.recipients,
+            iv: base64url.encode(iv),
+            ciphertext: base64url.encode(ciphertext),
+            tag: base64url.encode(tag)
+        };
+        return jwe;
+    }
+}
+//# sourceMappingURL=EncryptTransformer.js.map

package/dist/EncryptTransformer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptTransformer.js","sourceRoot":"","sources":["../src/EncryptTransformer.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAGtC,kBAAkB;AAClB,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAWlC,MAAM,OAAO,kBAAkB;IAC7B,UAAU,CAAa;IACvB,sBAAsB,CAAQ;IAC9B,MAAM,CAAiB;IACvB,cAAc,CAAY;IAC1B,GAAG,CAAY;IACf,SAAS,CAAQ;IACjB,MAAM,CAAQ;IACd,WAAW,CAAQ;IACnB,KAAK,CAAQ;IACb,MAAM,CAAa;IAEnB,YAAY,EACV,UAAU,EACV,sBAAsB,EACtB,MAAM,EACN,cAAc,EACd,GAAG,EACH,SAAS,GAAG,kBAAkB,EACJ;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAA;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QACpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QACf,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;QACpB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAA;IAChB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAAwB,EACxB,UAA4C;QAE5C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAEvB,qCAAqC;QACrC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;YACzC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;gBAC9B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;gBAC/B,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU,CAAA;gBACpC,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;gBACrE,KAAK,GAAG,IAAI,UAAU,CACpB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,GAAG,KAAK,EACxB,KAAK,CAAC,MAAM,GAAG,KAAK,CACrB,CAAA;gBACD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;gBAChC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAA;gBACpB,IAAI,CAAC,WAAW,IAAI,KAAK,CAAA;YAC3B,CAAC;YAED,gDAAgD;YAChD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAA4C;QACtD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,mBAAmB;YACnB,OAAM;QACR,CAAC;QAED,eAAe;QACf,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAEpC,eAAe;QACf,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QAEf,UAAU,CAAC,OAAO,CAAC;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,IAAI,CAAC,WAAW;YACxB,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAgB;QAC5B,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;QAC5C,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnD,IAAI;YACJ,cAAc;YACd,GAAG;SACJ,CAAC,CAAA;QAEF,kCAAkC;QAClC,MAAM,GAAG,GAAQ;YACf,SAAS,EAAE,IAAI,CAAC,sBAAsB;YACtC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;YACxC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;SAC3B,CAAA;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;CACF"}

package/dist/algorithms/a256gcm.d.ts

@@ -0,0 +1,39 @@
+import type { CipherDecryptOptions, CipherEncryptOptions, EncryptResult } from '../types.js';
+export declare const JWE_ENC = "A256GCM";
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as an AES-GCM key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export declare function generateKey(): Promise<Uint8Array>;
+/**
+ * Encrypts some data. The data will be encrypted using the given 256-bit
+ * AES-GCM content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} options.additionalData - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - A Promise that resolves to
+ *   `{ciphertext, iv, tag}`.
+ */
+export declare function encrypt({ data, additionalData, cek }: CipherEncryptOptions): Promise<EncryptResult>;
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given 256-bit AES-GCM content encryption key.
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector.
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} options.additionalData - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} - The decrypted data.
+ */
+export declare function decrypt({ ciphertext, iv, tag, additionalData, cek }: CipherDecryptOptions): Promise<Uint8Array>;
+//# sourceMappingURL=a256gcm.d.ts.map

package/dist/algorithms/a256gcm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a256gcm.d.ts","sourceRoot":"","sources":["../../src/algorithms/a256gcm.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACd,MAAM,aAAa,CAAA;AAEpB,eAAO,MAAM,OAAO,YAAY,CAAA;AAEhC;;;;;GAKG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,CASvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAiC/C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,CA+B5C"}