@interop/minimal-cipher 7.0.0

package/dist/algorithms/a256gcm.js

@@ -0,0 +1,101 @@
+/*!
+ * Copyright (c) 2019-2020 Digital Bazaar, Inc. All rights reserved.
+ */
+import crypto from '../crypto.js';
+export const JWE_ENC = 'A256GCM';
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as an AES-GCM key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export async function generateKey() {
+    // generate content encryption key
+    const key = await crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, 
+    // key must be extractable in order to be wrapped
+    true, ['encrypt']);
+    return new Uint8Array(await crypto.subtle.exportKey('raw', key));
+}
+/**
+ * Encrypts some data. The data will be encrypted using the given 256-bit
+ * AES-GCM content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} options.additionalData - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - A Promise that resolves to
+ *   `{ciphertext, iv, tag}`.
+ */
+export async function encrypt({ data, additionalData, cek }) {
+    const cekKey = await _importCek({ cek, usages: ['encrypt'] });
+    // NIST Special Publication 800-38D 8.2.2 RGB Construction of IV allows for
+    // 96-bit IVs to be randomly generated; should this recommendation change
+    // we can pass in a sequence number that can be used in a fixed subfield
+    // along with random bytes in another subfield
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    // encrypt data
+    const tagBytes = 16;
+    const tagLength = tagBytes * 8;
+    const encrypted = new Uint8Array(await crypto.subtle.encrypt({
+        name: 'AES-GCM',
+        iv,
+        tagLength,
+        additionalData: additionalData
+    }, cekKey, data));
+    // split ciphertext and tag
+    const ciphertext = encrypted.subarray(0, encrypted.length - tagBytes);
+    const tag = encrypted.subarray(encrypted.length - tagBytes);
+    return {
+        ciphertext,
+        iv,
+        tag
+    };
+}
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given 256-bit AES-GCM content encryption key.
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector.
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} options.additionalData - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} - The decrypted data.
+ */
+export async function decrypt({ ciphertext, iv, tag, additionalData, cek }) {
+    if (!(iv instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "iv".');
+    }
+    if (!(ciphertext instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "ciphertext".');
+    }
+    if (!(tag instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "tag".');
+    }
+    const cekKey = await _importCek({ cek, usages: ['decrypt'] });
+    // decrypt `ciphertext`
+    const encrypted = new Uint8Array(ciphertext.length + tag.length);
+    encrypted.set(ciphertext);
+    encrypted.set(tag, ciphertext.length);
+    const tagLength = tag.length * 8;
+    const decrypted = new Uint8Array(await crypto.subtle.decrypt({
+        name: 'AES-GCM',
+        iv: iv,
+        tagLength,
+        additionalData: additionalData
+    }, cekKey, encrypted));
+    return decrypted;
+}
+async function _importCek({ cek, usages }) {
+    if (!(cek instanceof Uint8Array)) {
+        throw new TypeError('"cek" must be a Uint8Array.');
+    }
+    return crypto.subtle.importKey('raw', cek, { name: 'AES-GCM', length: 256 }, false, usages);
+}
+//# sourceMappingURL=a256gcm.js.map

package/dist/algorithms/a256gcm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a256gcm.js","sourceRoot":"","sources":["../../src/algorithms/a256gcm.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,MAAM,MAAM,cAAc,CAAA;AAOjC,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,kCAAkC;IAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CACzC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE;IAChC,iDAAiD;IACjD,IAAI,EACJ,CAAC,SAAS,CAAC,CACZ,CAAA;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAgB,CAAC,CAAC,CAAA;AAC/E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACkB;IACrB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAE7D,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,8CAA8C;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAErD,eAAe;IACf,MAAM,QAAQ,GAAG,EAAE,CAAA;IACnB,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,CAAA;IAC9B,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;QACE,IAAI,EAAE,SAAS;QACf,EAAE;QACF,SAAS;QACT,cAAc,EAAE,cAA8B;KAC/C,EACD,MAAM,EACN,IAAoB,CACrB,CACF,CAAA;IACD,2BAA2B;IAC3B,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAA;IACrE,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAA;IAE3D,OAAO;QACL,UAAU;QACV,EAAE;QACF,GAAG;KACJ,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACkB;IACrB,IAAI,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAE7D,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;IAChE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACzB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;QACE,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,EAAkB;QACtB,SAAS;QACT,cAAc,EAAE,cAA8B;KAC/C,EACD,MAAM,EACN,SAAyB,CAC1B,CACF,CAAA;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EACxB,GAAG,EACH,MAAM,EAIP;IACC,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,GAAmB,EACnB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,MAAM,CACP,CAAA;AACH,CAAC"}

package/dist/algorithms/aeskw.d.ts

@@ -0,0 +1,5 @@
+import type { Kek as KekInterface } from '../types.js';
+export declare function createKek({ keyData }: {
+    keyData: Uint8Array;
+}): Promise<KekInterface>;
+//# sourceMappingURL=aeskw.d.ts.map

package/dist/algorithms/aeskw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aeskw.d.ts","sourceRoot":"","sources":["../../src/algorithms/aeskw.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,GAAG,IAAI,YAAY,EAAE,MAAM,aAAa,CAAA;AAwFtD,wBAAsB,SAAS,CAAC,EAC9B,OAAO,EACR,EAAE;IACD,OAAO,EAAE,UAAU,CAAA;CACpB,GAAG,OAAO,CAAC,YAAY,CAAC,CAUxB"}

package/dist/algorithms/aeskw.js

@@ -0,0 +1,68 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+import { base64url } from '../baseX.js';
+import crypto from '../crypto.js';
+class Kek {
+    key;
+    algorithm;
+    constructor(key) {
+        this.key = key;
+        this.algorithm = { name: 'A256KW' };
+    }
+    /**
+     * Wraps a cryptographic key.
+     *
+     * @param {object} options - The options to use.
+     * @param {Uint8Array} options.unwrappedKey - The key material as a
+     *   `Uint8Array`.
+     *
+     * @returns {Promise<string>} - The base64url-encoded wrapped key bytes.
+     */
+    async wrapKey({ unwrappedKey }) {
+        const kek = this.key;
+        // Note: `AES-GCM` algorithm name doesn't matter; will be exported raw.
+        const extractable = true;
+        const unwrappedCryptoKey = await crypto.subtle.importKey('raw', unwrappedKey, { name: 'AES-GCM', length: 256 }, 
+        // key usage of `encrypt` refers to the key that is to be wrapped not
+        // the KEK itself; we just treat it like an AES-GCM key regardless of
+        // what it is
+        extractable, ['encrypt']);
+        const wrappedKey = await crypto.subtle.wrapKey('raw', unwrappedCryptoKey, kek, kek.algorithm);
+        return base64url.encode(new Uint8Array(wrappedKey));
+    }
+    /**
+     * Unwraps a cryptographic key.
+     *
+     * @param {object} options - The options to use.
+     * @param {string} options.wrappedKey - The wrapped key material as a
+     *   base64url-encoded string.
+     *
+     * @returns {Promise<Uint8Array>} - Resolves to the key bytes or null if
+     *   the unwrapping fails because the key does not match.
+     */
+    async unwrapKey({ wrappedKey }) {
+        const kek = this.key;
+        // Note: `AES-GCM` algorithm name doesn't matter; will be exported raw.
+        const wrappedKeyBytes = base64url.decode(wrappedKey);
+        try {
+            const extractable = true;
+            const key = await crypto.subtle.unwrapKey('raw', wrappedKeyBytes, kek, kek.algorithm, 
+            // key usage of `encrypt` refers to the key that is being unwrapped;
+            // we just treat it like an AES-GCM key regardless of what it is
+            { name: 'AES-GCM' }, extractable, ['encrypt']);
+            const keyBytes = await crypto.subtle.exportKey('raw', key);
+            return new Uint8Array(keyBytes);
+        }
+        catch {
+            // unwrapping key failed
+            return null;
+        }
+    }
+}
+export async function createKek({ keyData }) {
+    const extractable = true;
+    const key = await crypto.subtle.importKey('raw', keyData, { name: 'AES-KW', length: 256 }, extractable, ['wrapKey', 'unwrapKey']);
+    return new Kek(key);
+}
+//# sourceMappingURL=aeskw.js.map

package/dist/algorithms/aeskw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aeskw.js","sourceRoot":"","sources":["../../src/algorithms/aeskw.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,MAAM,MAAM,cAAc,CAAA;AAGjC,MAAM,GAAG;IACP,GAAG,CAAW;IACd,SAAS,CAAkB;IAE3B,YAAY,GAAc;QACxB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACrC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,EACZ,YAAY,EAGb;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;QACpB,uEAAuE;QACvE,MAAM,WAAW,GAAG,IAAI,CAAA;QAExB,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACtD,KAAK,EACL,YAA4B,EAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE;QAChC,qEAAqE;QACrE,qEAAqE;QACrE,aAAa;QACb,WAAW,EACX,CAAC,SAAS,CAAC,CACZ,CAAA;QACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC5C,KAAK,EACL,kBAAkB,EAClB,GAAG,EACH,GAAG,CAAC,SAAS,CACd,CAAA;QACD,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;IACrD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,SAAS,CAAC,EACd,UAAU,EAGX;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;QACpB,uEAAuE;QACvE,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACpD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAA;YACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,eAA+B,EAC/B,GAAG,EACH,GAAG,CAAC,SAAS;YACb,oEAAoE;YACpE,gEAAgE;YAChE,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,WAAW,EACX,CAAC,SAAS,CAAC,CACZ,CAAA;YACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAC1D,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;YACxB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAC9B,OAAO,EAGR;IACC,MAAM,WAAW,GAAG,IAAI,CAAA;IACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAuB,EACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAC/B,WAAW,EACX,CAAC,SAAS,EAAE,WAAW,CAAC,CACzB,CAAA;IACD,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;AACrB,CAAC"}

package/dist/algorithms/c20p-browser.d.ts

@@ -0,0 +1,51 @@
+import type { CipherDecryptOptions, CipherEncryptOptions, EncryptResult } from '../types.js';
+export declare const JWE_ENC = "C20P";
+interface InternalEncryptOptions {
+    data: Uint8Array;
+    additionalData?: Uint8Array;
+    cek: Uint8Array;
+    iv?: Uint8Array;
+}
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as a ChaCha20Poly1305 (RFC8439) key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export declare function generateKey(): Promise<Uint8Array>;
+/**
+ * Encrypts some data. The data will be encrypted using the given
+ * 256-bit ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - Resolves to `{ciphertext, iv, tag}`.
+ */
+export declare function encrypt({ data, additionalData, cek }: CipherEncryptOptions): Promise<EncryptResult>;
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector (aka nonce).
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} The decrypted data.
+ */
+export declare function decrypt({ ciphertext, iv, tag, additionalData, cek }: CipherDecryptOptions): Promise<Uint8Array | null>;
+export declare function _encrypt({ data, additionalData, cek, iv }: InternalEncryptOptions): Promise<EncryptResult>;
+export declare function _chacha20({ key, nonce, src }: {
+    key: Uint8Array;
+    nonce: Uint8Array;
+    src: Uint8Array;
+}): Uint8Array;
+export {};
+//# sourceMappingURL=c20p-browser.d.ts.map

package/dist/algorithms/c20p-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"c20p-browser.d.ts","sourceRoot":"","sources":["../../src/algorithms/c20p-browser.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACd,MAAM,aAAa,CAAA;AAEpB,eAAO,MAAM,OAAO,SAAS,CAAA;AAE7B,UAAU,sBAAsB;IAC9B,IAAI,EAAE,UAAU,CAAA;IAChB,cAAc,CAAC,EAAE,UAAU,CAAA;IAC3B,GAAG,EAAE,UAAU,CAAA;IACf,EAAE,CAAC,EAAE,UAAU,CAAA;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,CAGvD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAQ/C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAoBnD;AAGD,wBAAsB,QAAQ,CAAC,EAC7B,IAAI,EACJ,cAAc,EACd,GAAG,EACH,EAAE,EACH,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC,CAiBjD;AAGD,wBAAgB,SAAS,CAAC,EACxB,GAAG,EACH,KAAK,EACL,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,UAAU,CAAA;IACf,KAAK,EAAE,UAAU,CAAA;IACjB,GAAG,EAAE,UAAU,CAAA;CAChB,GAAG,UAAU,CAeb"}

package/dist/algorithms/c20p-browser.js

@@ -0,0 +1,106 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import { ChaCha20Poly1305, KEY_LENGTH } from '@stablelib/chacha20poly1305';
+import crypto from '../crypto.js';
+import { streamXOR } from '@stablelib/chacha';
+export const JWE_ENC = 'C20P';
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as a ChaCha20Poly1305 (RFC8439) key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export async function generateKey() {
+    // generate content encryption key
+    return crypto.getRandomValues(new Uint8Array(KEY_LENGTH));
+}
+/**
+ * Encrypts some data. The data will be encrypted using the given
+ * 256-bit ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - Resolves to `{ciphertext, iv, tag}`.
+ */
+export async function encrypt({ data, additionalData, cek }) {
+    if (!(data instanceof Uint8Array)) {
+        throw new TypeError('"data" must be a Uint8Array.');
+    }
+    if (!(cek instanceof Uint8Array)) {
+        throw new TypeError('"cek" must be a Uint8Array.');
+    }
+    return _encrypt({ data, additionalData, cek });
+}
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector (aka nonce).
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} The decrypted data.
+ */
+export async function decrypt({ ciphertext, iv, tag, additionalData, cek }) {
+    if (!(iv instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "iv".');
+    }
+    if (!(ciphertext instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "ciphertext".');
+    }
+    if (!(tag instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "tag".');
+    }
+    if (!(cek instanceof Uint8Array)) {
+        throw new TypeError('"cek" must be a Uint8Array.');
+    }
+    // decrypt `ciphertext`
+    const cipher = new ChaCha20Poly1305(cek);
+    const encrypted = new Uint8Array(ciphertext.length + cipher.tagLength);
+    encrypted.set(ciphertext);
+    encrypted.set(tag, ciphertext.length);
+    return cipher.open(iv, encrypted, additionalData);
+}
+// internal function exported for reuse by XChaCha20Poly1305
+export async function _encrypt({ data, additionalData, cek, iv }) {
+    const cipher = new ChaCha20Poly1305(cek);
+    // Note: Use of a random value here as a counter is only viable for a
+    // limited set of messages; using XChaCha20Poly1305 instead
+    // probabilistically eliminates chances of a collision as it has a 192-bit IV
+    if (iv === undefined) {
+        iv = crypto.getRandomValues(new Uint8Array(cipher.nonceLength));
+    }
+    // encrypt data
+    const encrypted = cipher.seal(iv, data, additionalData);
+    // split ciphertext and tag and return values
+    const ciphertext = encrypted.subarray(0, encrypted.length - cipher.tagLength);
+    const tag = encrypted.subarray(encrypted.length - cipher.tagLength);
+    return { ciphertext, iv, tag };
+}
+// internal function exported for reuse by XChaCha20Poly1305
+export function _chacha20({ key, nonce, src }) {
+    const dst = new Uint8Array(64);
+    // encrypt a single block (1 == full nonce will be used no counter generated)
+    try {
+        // `nonce` is modified internally, so copy it first
+        nonce = Uint8Array.prototype.slice.call(nonce);
+        return streamXOR(key, nonce, src, dst, 1);
+    }
+    catch (e) {
+        // ignore counter overflow error; we don't use the counter
+        if (e.message.includes('counter overflow')) {
+            return dst;
+        }
+        throw e;
+    }
+}
+//# sourceMappingURL=c20p-browser.js.map

package/dist/algorithms/c20p-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"c20p-browser.js","sourceRoot":"","sources":["../../src/algorithms/c20p-browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAC1E,OAAO,MAAM,MAAM,cAAc,CAAA;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAO7C,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAA;AAS7B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,kCAAkC;IAClC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACkB;IACrB,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACkB;IACrB,IAAI,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IACtE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACzB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;AACnD,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAC7B,IAAI,EACJ,cAAc,EACd,GAAG,EACH,EAAE,EACqB;IACvB,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAExC,qEAAqE;IACrE,2DAA2D;IAC3D,6EAA6E;IAC7E,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,eAAe;IACf,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;IAEvD,6CAA6C;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IAC7E,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IACnE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAA;AAChC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,SAAS,CAAC,EACxB,GAAG,EACH,KAAK,EACL,GAAG,EAKJ;IACC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAE9B,6EAA6E;IAC7E,IAAI,CAAC;QACH,mDAAmD;QACnD,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC9C,OAAO,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,0DAA0D;QAC1D,IAAK,CAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACtD,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC"}

package/dist/algorithms/c20p.d.ts

@@ -0,0 +1,51 @@
+import type { CipherDecryptOptions, CipherEncryptOptions, EncryptResult } from '../types.js';
+export declare const JWE_ENC = "C20P";
+interface InternalEncryptOptions {
+    data: Uint8Array;
+    additionalData?: Uint8Array;
+    cek: Uint8Array;
+    iv?: Uint8Array;
+}
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as a ChaCha20Poly1305 (RFC8439) key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export declare function generateKey(): Promise<Uint8Array>;
+/**
+ * Encrypts some data. The data will be encrypted using the given
+ * 256-bit ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - Resolves to `{ciphertext, iv, tag}`.
+ */
+export declare function encrypt({ data, additionalData, cek }: CipherEncryptOptions): Promise<EncryptResult>;
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector (aka nonce).
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} The decrypted data.
+ */
+export declare function decrypt({ ciphertext, iv, tag, additionalData, cek }: CipherDecryptOptions): Promise<Uint8Array>;
+export declare function _encrypt({ data, additionalData, cek, iv }: InternalEncryptOptions): Promise<EncryptResult>;
+export declare function _chacha20({ key, nonce, src }: {
+    key: Uint8Array;
+    nonce: Uint8Array;
+    src: Uint8Array;
+}): Uint8Array;
+export {};
+//# sourceMappingURL=c20p.d.ts.map

package/dist/algorithms/c20p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"c20p.d.ts","sourceRoot":"","sources":["../../src/algorithms/c20p.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACd,MAAM,aAAa,CAAA;AAEpB,eAAO,MAAM,OAAO,SAAS,CAAA;AAE7B,UAAU,sBAAsB;IAC9B,IAAI,EAAE,UAAU,CAAA;IAChB,cAAc,CAAC,EAAE,UAAU,CAAA;IAC3B,GAAG,EAAE,UAAU,CAAA;IACf,EAAE,CAAC,EAAE,UAAU,CAAA;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,CAGvD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAQ/C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0B5C;AAGD,wBAAsB,QAAQ,CAAC,EAC7B,IAAI,EACJ,cAAc,EACd,GAAG,EACH,EAAE,EACH,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC,CAuBjD;AAGD,wBAAgB,SAAS,CAAC,EACxB,GAAG,EACH,KAAK,EACL,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,UAAU,CAAA;IACf,KAAK,EAAE,UAAU,CAAA;IACjB,GAAG,EAAE,UAAU,CAAA;CAChB,GAAG,UAAU,CAMb"}

package/dist/algorithms/c20p.js

@@ -0,0 +1,110 @@
+/*!
+ * Copyright (c) 2019-2022 Digital Bazaar, Inc. All rights reserved.
+ */
+import crypto from 'node:crypto';
+import { default as webcrypto } from '../crypto.js';
+export const JWE_ENC = 'C20P';
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as a ChaCha20Poly1305 (RFC8439) key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export async function generateKey() {
+    // generate content encryption key
+    return webcrypto.getRandomValues(new Uint8Array(32));
+}
+/**
+ * Encrypts some data. The data will be encrypted using the given
+ * 256-bit ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - Resolves to `{ciphertext, iv, tag}`.
+ */
+export async function encrypt({ data, additionalData, cek }) {
+    if (!(data instanceof Uint8Array)) {
+        throw new TypeError('"data" must be a Uint8Array.');
+    }
+    if (!(cek instanceof Uint8Array)) {
+        throw new TypeError('"cek" must be a Uint8Array.');
+    }
+    return _encrypt({ data, additionalData, cek });
+}
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given ChaCha20Poly1305 (RFC8439) content encryption key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector (aka nonce).
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} The decrypted data.
+ */
+export async function decrypt({ ciphertext, iv, tag, additionalData, cek }) {
+    if (!(iv instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "iv".');
+    }
+    if (!(ciphertext instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "ciphertext".');
+    }
+    if (!(tag instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "tag".');
+    }
+    if (!(cek instanceof Uint8Array)) {
+        throw new TypeError('"cek" must be a Uint8Array.');
+    }
+    // decrypt `ciphertext` using node.js native implementation
+    const decipher = crypto.createDecipheriv('chacha20-poly1305', cek, iv, {
+        authTagLength: 16
+    });
+    decipher.setAuthTag(tag);
+    if (additionalData) {
+        // `plaintextLength` is optional at runtime for chacha20-poly1305
+        ;
+        decipher.setAAD(additionalData);
+    }
+    const decrypted = decipher.update(ciphertext);
+    const final = decipher.final();
+    return final.length > 0 ? Buffer.concat([decrypted, final]) : decrypted;
+}
+// internal function exported for reuse by XChaCha20Poly1305
+export async function _encrypt({ data, additionalData, cek, iv }) {
+    // Note: Use of a random value here as a counter is only viable for a
+    // limited set of messages; using XChaCha20Poly1305 instead
+    // probabilistically eliminates chances of a collision as it has a 192-bit IV
+    if (iv === undefined) {
+        iv = webcrypto.getRandomValues(new Uint8Array(12));
+    }
+    // encrypt `data` using node.js native implementation
+    const cipher = crypto.createCipheriv('chacha20-poly1305', cek, iv, {
+        authTagLength: 16
+    });
+    if (additionalData) {
+        // `plaintextLength` is optional at runtime for chacha20-poly1305
+        ;
+        cipher.setAAD(additionalData);
+    }
+    const encrypted = cipher.update(data);
+    const final = cipher.final();
+    const ciphertext = final.length > 0 ? Buffer.concat([encrypted, final]) : encrypted;
+    const tag = cipher.getAuthTag();
+    return { ciphertext, iv, tag };
+}
+// internal function exported for reuse by XChaCha20Poly1305
+export function _chacha20({ key, nonce, src }) {
+    // use node.js implementation
+    const cipher = crypto.createCipheriv('chacha20', key, nonce);
+    const dst = cipher.update(src);
+    const final = cipher.final();
+    return final.length > 0 ? Buffer.concat([dst, final]) : dst;
+}
+//# sourceMappingURL=c20p.js.map

package/dist/algorithms/c20p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"c20p.js","sourceRoot":"","sources":["../../src/algorithms/c20p.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,cAAc,CAAA;AAOnD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAA;AAS7B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,kCAAkC;IAClC,OAAO,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACkB;IACrB,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACkB;IACrB,IAAI,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;IAED,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,EAAE,EAAE,EAAE;QACrE,aAAa,EAAE,EAAE;KAClB,CAAC,CAAA;IACF,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IACxB,IAAI,cAAc,EAAE,CAAC;QACnB,iEAAiE;QACjE,CAAC;QAAC,QAA+B,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACzE,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAC7B,IAAI,EACJ,cAAc,EACd,GAAG,EACH,EAAE,EACqB;IACvB,qEAAqE;IACrE,2DAA2D;IAC3D,6EAA6E;IAC7E,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,EAAE,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACpD,CAAC;IAED,qDAAqD;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,GAAG,EAAE,EAAE,EAAE;QACjE,aAAa,EAAE,EAAE;KAClB,CAAC,CAAA;IACF,IAAI,cAAc,EAAE,CAAC;QACnB,iEAAiE;QACjE,CAAC;QAAC,MAA2B,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IACtD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;IAC5B,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IAE/B,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAA;AAChC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,SAAS,CAAC,EACxB,GAAG,EACH,KAAK,EACL,GAAG,EAKJ;IACC,6BAA6B;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;IAC5B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;AAC7D,CAAC"}

package/dist/algorithms/ecdhkdf.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Derives a 256-bit AES-KW key encryption key from a shared secret that
+ * was derived from an ephemeral and static pair
+ * of Elliptic Curve Diffie-Hellman keys.
+ *
+ * The KDF used is described in RFC 7518. This KDF is referenced by RFC 8037,
+ * which defines how to perform Curve25519 (X25519) ECDH key agreement.
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.secret - The shared secret (i.e., `Z`) to use.
+ * @param {Uint8Array} options.producerInfo - An array of application-specific
+ *   bytes describing the consumer (aka the "encrypter" or "sender").
+ * @param {Uint8Array} options.consumerInfo - An array of application-specific
+ *   bytes describing the producer (aka the "decrypter" or
+ *   "receiver"/"recipient").
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export declare function deriveKey({ secret, producerInfo, consumerInfo }: {
+    secret: Uint8Array;
+    producerInfo: Uint8Array;
+    consumerInfo: Uint8Array;
+}): Promise<Uint8Array>;
+//# sourceMappingURL=ecdhkdf.d.ts.map

package/dist/algorithms/ecdhkdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecdhkdf.d.ts","sourceRoot":"","sources":["../../src/algorithms/ecdhkdf.ts"],"names":[],"mappings":"AA2BA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,SAAS,CAAC,EAC9B,MAAM,EACN,YAAY,EACZ,YAAY,EACb,EAAE;IACD,MAAM,EAAE,UAAU,CAAA;IAClB,YAAY,EAAE,UAAU,CAAA;IACxB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0CtB"}

package/dist/algorithms/ecdhkdf.js

@@ -0,0 +1,76 @@
+/*!
+ * Copyright (c) 2019-2020 Digital Bazaar, Inc. All rights reserved.
+ */
+import crypto from '../crypto.js';
+// only supported algorithm
+const KEY_ALGORITHM = 'ECDH-ES+A256KW';
+// create static ALGORITHM_ID
+const ALGORITHM_CONTENT = new TextEncoder().encode(KEY_ALGORITHM);
+const ALGORITHM_ID = new Uint8Array(4 + ALGORITHM_CONTENT.length);
+// write length of content as 32-bit big endian integer, then write content
+const dv = new DataView(ALGORITHM_ID.buffer, ALGORITHM_ID.byteOffset, ALGORITHM_ID.byteLength);
+dv.setUint32(0, ALGORITHM_CONTENT.length);
+ALGORITHM_ID.set(ALGORITHM_CONTENT, 4);
+// RFC 7518 Section 4.6.2 specifies using SHA-256 for ECDH-ES KDF
+// https://tools.ietf.org/html/rfc7518#section-4.6.2
+const HASH_ALGORITHM = { name: 'SHA-256' };
+// derived keys are always 256-bits
+const KEY_LENGTH = 256;
+/**
+ * Derives a 256-bit AES-KW key encryption key from a shared secret that
+ * was derived from an ephemeral and static pair
+ * of Elliptic Curve Diffie-Hellman keys.
+ *
+ * The KDF used is described in RFC 7518. This KDF is referenced by RFC 8037,
+ * which defines how to perform Curve25519 (X25519) ECDH key agreement.
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.secret - The shared secret (i.e., `Z`) to use.
+ * @param {Uint8Array} options.producerInfo - An array of application-specific
+ *   bytes describing the consumer (aka the "encrypter" or "sender").
+ * @param {Uint8Array} options.consumerInfo - An array of application-specific
+ *   bytes describing the producer (aka the "decrypter" or
+ *   "receiver"/"recipient").
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export async function deriveKey({ secret, producerInfo, consumerInfo }) {
+    if (!(secret instanceof Uint8Array && secret.length > 0)) {
+        throw new TypeError('"secret" must be a non-empty Uint8Array.');
+    }
+    if (!(producerInfo instanceof Uint8Array && producerInfo.length > 0)) {
+        throw new TypeError('"producerInfo" must be a non-empty Uint8Array.');
+    }
+    if (!(consumerInfo instanceof Uint8Array && consumerInfo.length > 0)) {
+        throw new TypeError('"consumerInfo" must be a non-empty Uint8Array.');
+    }
+    // the output of Concat KDF is hash(roundNumber || Z || OtherInfo)
+    // where roundNumber is always 1 because the hash length is presumed to
+    // ...match the key length, encoded as a big endian 32-bit integer
+    // where OtherInfo is:
+    // AlgorithmID || PartyUInfo || PartyVInfo || SuppPubInfo
+    // where SuppPubInfo is the key length in bits, big endian encoded as a
+    // 32-bit number, i.e., 256 === [0, 0, 1, 0]
+    const input = new Uint8Array(4 + // round number
+        secret.length + // `Z`
+        ALGORITHM_ID.length + // AlgorithmID
+        4 +
+        producerInfo.length + // PartyUInfo
+        4 +
+        consumerInfo.length + // PartyVInfo
+        4); // SuppPubInfo (key data length in bits)
+    let offset = 0;
+    const dv = new DataView(input.buffer, input.byteOffset, input.byteLength);
+    dv.setUint32(offset, 1);
+    input.set(secret, (offset += 4));
+    input.set(ALGORITHM_ID, (offset += secret.length));
+    dv.setUint32((offset += ALGORITHM_ID.length), producerInfo.length);
+    input.set(producerInfo, (offset += 4));
+    dv.setUint32((offset += producerInfo.length), consumerInfo.length);
+    input.set(consumerInfo, (offset += 4));
+    // final write position; `offset` is not read again, so avoid reassigning it
+    dv.setUint32(offset + consumerInfo.length, KEY_LENGTH);
+    // hash input and return result as derived key
+    return new Uint8Array(await crypto.subtle.digest(HASH_ALGORITHM, input));
+}
+//# sourceMappingURL=ecdhkdf.js.map

package/dist/algorithms/ecdhkdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecdhkdf.js","sourceRoot":"","sources":["../../src/algorithms/ecdhkdf.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,MAAM,MAAM,cAAc,CAAA;AAEjC,2BAA2B;AAC3B,MAAM,aAAa,GAAG,gBAAgB,CAAA;AAEtC,6BAA6B;AAC7B,MAAM,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;AACjE,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;AACjE,2EAA2E;AAC3E,MAAM,EAAE,GAAG,IAAI,QAAQ,CACrB,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,UAAU,EACvB,YAAY,CAAC,UAAU,CACxB,CAAA;AACD,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;AACzC,YAAY,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;AAEtC,iEAAiE;AACjE,oDAAoD;AACpD,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAE1C,mCAAmC;AACnC,MAAM,UAAU,GAAG,GAAG,CAAA;AAEtB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAC9B,MAAM,EACN,YAAY,EACZ,YAAY,EAKb;IACC,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;IACjE,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,YAAY,UAAU,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,YAAY,UAAU,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IAED,kEAAkE;IAClE,uEAAuE;IACvE,kEAAkE;IAClE,sBAAsB;IACtB,yDAAyD;IACzD,uEAAuE;IACvE,4CAA4C;IAC5C,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,CAAC,GAAG,eAAe;QACjB,MAAM,CAAC,MAAM,GAAG,MAAM;QACtB,YAAY,CAAC,MAAM,GAAG,cAAc;QACpC,CAAC;QACD,YAAY,CAAC,MAAM,GAAG,aAAa;QACnC,CAAC;QACD,YAAY,CAAC,MAAM,GAAG,aAAa;QACnC,CAAC,CACJ,CAAA,CAAC,wCAAwC;IAC1C,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACzE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACvB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAClD,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IAClE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;IACtC,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IAClE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;IACtC,4EAA4E;IAC5E,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAEtD,8CAA8C;IAC9C,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAA;AAC1E,CAAC"}