@interop/minimal-cipher 7.0.0

package/dist/algorithms/fips.d.ts

@@ -0,0 +1,8 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import * as cipher from './a256gcm.js';
+import * as keyAgreement from './p256.js';
+export { cipher };
+export { keyAgreement };
+//# sourceMappingURL=fips.d.ts.map

package/dist/algorithms/fips.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fips.d.ts","sourceRoot":"","sources":["../../src/algorithms/fips.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AACtC,OAAO,KAAK,YAAY,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/algorithms/fips.js

@@ -0,0 +1,8 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import * as cipher from './a256gcm.js';
+import * as keyAgreement from './p256.js';
+export { cipher };
+export { keyAgreement };
+//# sourceMappingURL=fips.js.map

package/dist/algorithms/fips.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fips.js","sourceRoot":"","sources":["../../src/algorithms/fips.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AACtC,OAAO,KAAK,YAAY,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/algorithms/p256.d.ts

@@ -0,0 +1,24 @@
+import type { IMultikeyDocument } from '@interop/data-integrity-core';
+import type { Epk, EphemeralKeyPair, KekFromEphemeralPeerResult, KekFromStaticPeerResult, KeyAgreementKey } from '../types.js';
+export declare const JWE_ALG = "ECDH-ES+A256KW";
+export declare function kekFromEphemeralPeer({ keyAgreementKey, epk }: {
+    keyAgreementKey: KeyAgreementKey;
+    epk: Epk;
+}): Promise<KekFromEphemeralPeerResult>;
+/**
+ * (Encryption case) Generates KEK from ephemeral DH private key and a peer's
+ * public static key.
+ *
+ * @param {object} options - Options hashmap.
+ * @param {object} options.ephemeralKeyPair - Ephemeral key pair.
+ * @param {object} options.staticPublicKey - Static public key.
+ *
+ * @returns {Promise<object>} - Resolves with kek object derived from static
+ *   peer.
+ */
+export declare function kekFromStaticPeer({ ephemeralKeyPair, staticPublicKey }: {
+    ephemeralKeyPair: EphemeralKeyPair;
+    staticPublicKey: IMultikeyDocument;
+}): Promise<KekFromStaticPeerResult>;
+export declare function generateEphemeralKeyPair(): Promise<EphemeralKeyPair>;
+//# sourceMappingURL=p256.d.ts.map

package/dist/algorithms/p256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"p256.d.ts","sourceRoot":"","sources":["../../src/algorithms/p256.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAGrE,OAAO,KAAK,EACV,GAAG,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,EACvB,eAAe,EAChB,MAAM,aAAa,CAAA;AAEpB,eAAO,MAAM,OAAO,mBAAmB,CAAA;AAIvC,wBAAsB,oBAAoB,CAAC,EACzC,eAAe,EACf,GAAG,EACJ,EAAE;IACD,eAAe,EAAE,eAAe,CAAA;IAChC,GAAG,EAAE,GAAG,CAAA;CACT,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAqCtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,eAAe,EAChB,EAAE;IACD,gBAAgB,EAAE,gBAAgB,CAAA;IAElC,eAAe,EAAE,iBAAiB,CAAA;CACnC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAyBnC;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAgB1E"}

package/dist/algorithms/p256.js

@@ -0,0 +1,106 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import { base64url } from '../baseX.js';
+import * as EcdsaMultikey from '@interop/ecdsa-multikey';
+import { createKek } from './aeskw.js';
+import { deriveKey } from './ecdhkdf.js';
+export const JWE_ALG = 'ECDH-ES+A256KW';
+// Decryption case: get Kek from a private key agreement key and a
+// peer's public ephemeral DH key encoded as an `epk`
+export async function kekFromEphemeralPeer({ keyAgreementKey, epk }) {
+    if (!(epk && typeof epk === 'object')) {
+        throw new TypeError('"epk" must be an object.');
+    }
+    if (epk.kty !== 'EC') {
+        throw new Error('"epk.kty" must be the string "EC".');
+    }
+    if (epk.crv !== 'P-256') {
+        throw new Error('"epk.crv" must be the string "P-256".');
+    }
+    const jwk = { ...epk };
+    jwk.key_ops = ['deriveBits'];
+    // the `epk` is validated above as an EC P-256 JWK, but the loose JWE-header
+    // `Epk` shape does not structurally satisfy the strict EC `Jwk`
+    const publicKey = await EcdsaMultikey.fromJwk({
+        jwk: jwk,
+        secretKey: true
+    });
+    // export to multikey key for Web KMS transport and to raw for `producerInfo`
+    const [ephemeralPublicKey, { publicKey: rawPublicKey }] = await Promise.all([
+        publicKey.export({ publicKey: true, includeContext: true }),
+        publicKey.export({ raw: true })
+    ]);
+    // is it safe to use IDs like in rfc7518 or does
+    // https://tools.ietf.org/html/rfc7748#section-7 pose any issues?
+    const encoder = new TextEncoder();
+    // "Party U Info"
+    const producerInfo = rawPublicKey;
+    // "Party V Info"
+    const consumerInfo = encoder.encode(keyAgreementKey.id);
+    const secret = await keyAgreementKey.deriveSecret({
+        publicKey: ephemeralPublicKey
+    });
+    const keyData = await deriveKey({ secret, producerInfo, consumerInfo });
+    return { kek: await createKek({ keyData }) };
+}
+/**
+ * (Encryption case) Generates KEK from ephemeral DH private key and a peer's
+ * public static key.
+ *
+ * @param {object} options - Options hashmap.
+ * @param {object} options.ephemeralKeyPair - Ephemeral key pair.
+ * @param {object} options.staticPublicKey - Static public key.
+ *
+ * @returns {Promise<object>} - Resolves with kek object derived from static
+ *   peer.
+ */
+export async function kekFromStaticPeer({ ephemeralKeyPair, staticPublicKey }) {
+    if (!staticPublicKey) {
+        throw new Error('"staticPublicKey" is required.');
+    }
+    // static key must be a P-256 multikey
+    const keyAgreement = true;
+    const remotePublicKey = await EcdsaMultikey.from(staticPublicKey, keyAgreement);
+    const encoder = new TextEncoder();
+    // "Party U Info"
+    const producerInfo = ephemeralKeyPair.publicKey;
+    // "Party V Info"
+    const consumerInfo = encoder.encode(staticPublicKey.id);
+    const secret = await _deriveSecret({ ephemeralKeyPair, remotePublicKey });
+    const keyData = await deriveKey({ secret, producerInfo, consumerInfo });
+    return {
+        kek: await createKek({ keyData }),
+        epk: ephemeralKeyPair.epk,
+        apu: base64url.encode(producerInfo),
+        apv: base64url.encode(consumerInfo),
+        ephemeralPublicKey: ephemeralKeyPair.publicKey
+    };
+}
+export async function generateEphemeralKeyPair() {
+    // generate P-256 ephemeral public key
+    const keyPair = await EcdsaMultikey.generate({
+        curve: 'P-256',
+        keyAgreement: true
+    });
+    const { secretKey: privateKey, publicKey } = await keyPair.export({
+        secretKey: true,
+        raw: true
+    });
+    const epk = await EcdsaMultikey.toJwk({ keyPair, secretKey: true });
+    return {
+        privateKey: privateKey,
+        publicKey: publicKey,
+        epk: epk
+    };
+}
+async function _deriveSecret({ ephemeralKeyPair, remotePublicKey }) {
+    const jwk = { ...ephemeralKeyPair.epk };
+    jwk.key_ops = ['deriveBits'];
+    const privateKey = await EcdsaMultikey.fromJwk({
+        jwk: jwk,
+        secretKey: true
+    });
+    return privateKey.deriveSecret({ remotePublicKey });
+}
+//# sourceMappingURL=p256.js.map

package/dist/algorithms/p256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"p256.js","sourceRoot":"","sources":["../../src/algorithms/p256.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAA;AAGxD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AASxC,MAAM,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAA;AAEvC,kEAAkE;AAClE,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,eAAe,EACf,GAAG,EAIJ;IACC,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;IACjD,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAA;IACtB,GAAG,CAAC,OAAO,GAAG,CAAC,YAAY,CAAC,CAAA;IAC5B,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC;QAC5C,GAAG,EAAE,GAAqB;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;IAEF,6EAA6E;IAC7E,MAAM,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1E,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC3D,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC,CAAA;IAEF,gDAAgD;IAChD,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,iBAAiB;IACjB,MAAM,YAAY,GAAG,YAA0B,CAAA;IAC/C,iBAAiB;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC;QAChD,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;IACvE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;AAC9C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,eAAe,EAKhB;IACC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,sCAAsC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAA;IACzB,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,IAAI,CAC9C,eAAe,EACf,YAAY,CACb,CAAA;IAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,iBAAiB;IACjB,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAA;IAC/C,iBAAiB;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;IACvE,OAAO;QACL,GAAG,EAAE,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QACjC,GAAG,EAAE,gBAAgB,CAAC,GAAG;QACzB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,kBAAkB,EAAE,gBAAgB,CAAC,SAAS;KAC/C,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,sCAAsC;IACtC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC;QAC3C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;KACnB,CAAC,CAAA;IACF,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;QAChE,SAAS,EAAE,IAAI;QACf,GAAG,EAAE,IAAI;KACV,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnE,OAAO;QACL,UAAU,EAAE,UAAwB;QACpC,SAAS,EAAE,SAAuB;QAClC,GAAG,EAAE,GAAqB;KAC3B,CAAA;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,EAC3B,gBAAgB,EAChB,eAAe,EAKhB;IACC,MAAM,GAAG,GAAG,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAA;IACvC,GAAG,CAAC,OAAO,GAAG,CAAC,YAAY,CAAC,CAAA;IAC5B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC;QAC7C,GAAG,EAAE,GAAqB;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;IACF,OAAO,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;AACrD,CAAC"}

package/dist/algorithms/recommended.d.ts

@@ -0,0 +1,8 @@
+/*!
+ * Copyright (c) 2019-2020 Digital Bazaar, Inc. All rights reserved.
+ */
+import * as cipher from './xc20p.js';
+import * as keyAgreement from './x25519.js';
+export { cipher };
+export { keyAgreement };
+//# sourceMappingURL=recommended.d.ts.map

package/dist/algorithms/recommended.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommended.d.ts","sourceRoot":"","sources":["../../src/algorithms/recommended.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,MAAM,YAAY,CAAA;AACpC,OAAO,KAAK,YAAY,MAAM,aAAa,CAAA;AAE3C,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/algorithms/recommended.js

@@ -0,0 +1,8 @@
+/*!
+ * Copyright (c) 2019-2020 Digital Bazaar, Inc. All rights reserved.
+ */
+import * as cipher from './xc20p.js';
+import * as keyAgreement from './x25519.js';
+export { cipher };
+export { keyAgreement };
+//# sourceMappingURL=recommended.js.map

package/dist/algorithms/recommended.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommended.js","sourceRoot":"","sources":["../../src/algorithms/recommended.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,MAAM,YAAY,CAAA;AACpC,OAAO,KAAK,YAAY,MAAM,aAAa,CAAA;AAE3C,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/algorithms/x25519-helper-browser.d.ts

@@ -0,0 +1,7 @@
+import type { EphemeralKeyPair } from '../types.js';
+export declare function generateEphemeralKeyPair(): Promise<EphemeralKeyPair>;
+export declare function deriveSecret({ privateKey, remotePublicKey }: {
+    privateKey: Uint8Array;
+    remotePublicKey: Uint8Array;
+}): Promise<Uint8Array>;
+//# sourceMappingURL=x25519-helper-browser.d.ts.map

package/dist/algorithms/x25519-helper-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519-helper-browser.d.ts","sourceRoot":"","sources":["../../src/algorithms/x25519-helper-browser.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAa1E;AAED,wBAAsB,YAAY,CAAC,EACjC,UAAU,EACV,eAAe,EAChB,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,UAAU,CAAA;CAC5B,GAAG,OAAO,CAAC,UAAU,CAAC,CAGtB"}

package/dist/algorithms/x25519-helper-browser.js

@@ -0,0 +1,25 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+import { base64url } from '../baseX.js';
+import crypto from '../crypto.js';
+import { x25519 } from '@noble/curves/ed25519.js';
+export async function generateEphemeralKeyPair() {
+    // generate X25519 ephemeral public key
+    const privateKey = await crypto.getRandomValues(new Uint8Array(32));
+    const publicKey = x25519.scalarMultBase(privateKey);
+    return {
+        privateKey,
+        publicKey,
+        epk: {
+            kty: 'OKP',
+            crv: 'X25519',
+            x: base64url.encode(publicKey)
+        }
+    };
+}
+export async function deriveSecret({ privateKey, remotePublicKey }) {
+    // `scalarMult` takes secret key as param 1, public key as param 2
+    return x25519.scalarMult(privateKey, remotePublicKey);
+}
+//# sourceMappingURL=x25519-helper-browser.js.map

package/dist/algorithms/x25519-helper-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519-helper-browser.js","sourceRoot":"","sources":["../../src/algorithms/x25519-helper-browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,MAAM,MAAM,cAAc,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAGjD,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,uCAAuC;IACvC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;IACnD,OAAO;QACL,UAAU;QACV,SAAS;QACT,GAAG,EAAE;YACH,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,QAAQ;YACb,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;SAC/B;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,UAAU,EACV,eAAe,EAIhB;IACC,kEAAkE;IAClE,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;AACvD,CAAC"}

package/dist/algorithms/x25519-helper.d.ts

@@ -0,0 +1,7 @@
+import type { EphemeralKeyPair } from '../types.js';
+export declare function generateEphemeralKeyPair(): Promise<EphemeralKeyPair>;
+export declare function deriveSecret({ privateKey, remotePublicKey }: {
+    privateKey: Uint8Array;
+    remotePublicKey: Uint8Array;
+}): Promise<Uint8Array>;
+//# sourceMappingURL=x25519-helper.d.ts.map

package/dist/algorithms/x25519-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519-helper.d.ts","sourceRoot":"","sources":["../../src/algorithms/x25519-helper.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAanD,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAoB1E;AAED,wBAAsB,YAAY,CAAC,EACjC,UAAU,EACV,eAAe,EAChB,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,UAAU,CAAA;CAC5B,GAAG,OAAO,CAAC,UAAU,CAAC,CAetB"}

package/dist/algorithms/x25519-helper.js

@@ -0,0 +1,51 @@
+/*!
+ * Copyright (c) 2019-2022 Digital Bazaar, Inc. All rights reserved.
+ */
+import { base64url } from '../baseX.js';
+import * as crypto from 'node:crypto';
+import * as util from 'node:util';
+const { promisify } = util;
+const generateKeyPairAsync = promisify(crypto.generateKeyPair);
+const PUBLIC_KEY_DER_PREFIX = new Uint8Array([
+    48, 42, 48, 5, 6, 3, 43, 101, 110, 3, 33, 0
+]);
+const PRIVATE_KEY_DER_PREFIX = new Uint8Array([
+    48, 46, 2, 1, 0, 48, 5, 6, 3, 43, 101, 110, 4, 34, 4, 32
+]);
+export async function generateEphemeralKeyPair() {
+    // generate X25519 ephemeral public key
+    const publicKeyEncoding = { format: 'der', type: 'spki' };
+    const privateKeyEncoding = { format: 'der', type: 'pkcs8' };
+    const { publicKey: publicDerBytes, privateKey: privateDerBytes } = await generateKeyPairAsync('x25519', {
+        publicKeyEncoding,
+        privateKeyEncoding
+    });
+    const publicKey = publicDerBytes.slice(12, 12 + 32);
+    const privateKey = privateDerBytes.slice(16, 16 + 32);
+    return {
+        privateKey,
+        publicKey,
+        epk: {
+            kty: 'OKP',
+            crv: 'X25519',
+            x: base64url.encode(publicKey)
+        }
+    };
+}
+export async function deriveSecret({ privateKey, remotePublicKey }) {
+    const nodePrivateKey = crypto.createPrivateKey({
+        key: Buffer.concat([PRIVATE_KEY_DER_PREFIX, privateKey]),
+        format: 'der',
+        type: 'pkcs8'
+    });
+    const nodePublicKey = crypto.createPublicKey({
+        key: Buffer.concat([PUBLIC_KEY_DER_PREFIX, remotePublicKey]),
+        format: 'der',
+        type: 'spki'
+    });
+    return crypto.diffieHellman({
+        privateKey: nodePrivateKey,
+        publicKey: nodePublicKey
+    });
+}
+//# sourceMappingURL=x25519-helper.js.map

package/dist/algorithms/x25519-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519-helper.js","sourceRoot":"","sources":["../../src/algorithms/x25519-helper.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;AAE1B,MAAM,oBAAoB,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;AAE9D,MAAM,qBAAqB,GAAG,IAAI,UAAU,CAAC;IAC3C,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;CAC5C,CAAC,CAAA;AAEF,MAAM,sBAAsB,GAAG,IAAI,UAAU,CAAC;IAC5C,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;CACzD,CAAC,CAAA;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,uCAAuC;IACvC,MAAM,iBAAiB,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAW,CAAA;IAClE,MAAM,kBAAkB,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAW,CAAA;IACpE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,GAC9D,MAAM,oBAAoB,CAAC,QAAQ,EAAE;QACnC,iBAAiB;QACjB,kBAAkB;KACnB,CAAC,CAAA;IACJ,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IACrD,OAAO;QACL,UAAU;QACV,SAAS;QACT,GAAG,EAAE;YACH,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,QAAQ;YACb,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;SAC/B;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,UAAU,EACV,eAAe,EAIhB;IACC,MAAM,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC7C,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAA;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC;QAC3C,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;QAC5D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,aAAa,CAAC;QAC1B,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,aAAa;KACzB,CAAC,CAAA;AACJ,CAAC"}

package/dist/algorithms/x25519.d.ts

@@ -0,0 +1,44 @@
+import { deriveSecret, generateEphemeralKeyPair } from './x25519-helper.js';
+import type { Epk, EphemeralKeyPair, KekFromEphemeralPeerResult, KekFromStaticPeerResult, KeyAgreementKey } from '../types.js';
+export declare const MULTICODEC_X25519_PUB_HEADER: Uint8Array<ArrayBuffer>;
+export declare const JWE_ALG = "ECDH-ES+A256KW";
+export { generateEphemeralKeyPair, deriveSecret };
+export declare function kekFromEphemeralPeer({ keyAgreementKey, epk }: {
+    keyAgreementKey: KeyAgreementKey;
+    epk: Epk;
+}): Promise<KekFromEphemeralPeerResult>;
+/**
+ * (Encryption case) Generates KEK from ephemeral DH private key and a peer's
+ * public static key.
+ *
+ * @param {object} options - Options hashmap.
+ * @param {object} options.ephemeralKeyPair - Ephemeral key pair.
+ * @param {object} options.staticPublicKey - Static public key.
+ *
+ * @returns {Promise<object>} - Resolves with kek object derived from static
+ *   peer.
+ */
+export declare function kekFromStaticPeer({ ephemeralKeyPair, staticPublicKey }: {
+    ephemeralKeyPair: EphemeralKeyPair;
+    staticPublicKey: any;
+}): Promise<KekFromStaticPeerResult>;
+/**
+ * Adds a multicodec prefix to a given bytes array representing a public
+ * or private key, and multibase-encodes the result.
+ *
+ * @param {Uint8Array} header - Multicodec x25519 pub or pri key header, varint.
+ * @param {Uint8Array} bytes - Byte array representing a public or private key.
+ *
+ * @returns {string} Base58-btc encoded key (with multicodec prefix).
+ */
+export declare function multibaseEncode(header: Uint8Array, bytes: Uint8Array): string;
+/**
+ * Decodes a given string as a multibase-encoded multicodec value.
+ *
+ * @param {Uint8Array} header - Expected header bytes for the multicodec value.
+ * @param {string} text - Multibase encoded string to decode.
+ *
+ * @returns {Uint8Array} Decoded bytes.
+ */
+export declare function multibaseDecode(header: Uint8Array, text: string): Uint8Array;
+//# sourceMappingURL=x25519.d.ts.map

package/dist/algorithms/x25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519.d.ts","sourceRoot":"","sources":["../../src/algorithms/x25519.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAG3E,OAAO,KAAK,EACV,GAAG,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,EACvB,eAAe,EAChB,MAAM,aAAa,CAAA;AAMpB,eAAO,MAAM,4BAA4B,yBAA+B,CAAA;AACxE,eAAO,MAAM,OAAO,mBAAmB,CAAA;AACvC,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,CAAA;AAIjD,wBAAsB,oBAAoB,CAAC,EACzC,eAAe,EACf,GAAG,EACJ,EAAE;IACD,eAAe,EAAE,eAAe,CAAA;IAChC,GAAG,EAAE,GAAG,CAAA;CACT,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAiCtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,eAAe,EAChB,EAAE;IACD,gBAAgB,EAAE,gBAAgB,CAAA;IAElC,eAAe,EAAE,GAAG,CAAA;CACrB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAyBnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAK7E;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAQ5E"}

package/dist/algorithms/x25519.js

@@ -0,0 +1,112 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import { base58btc, base64url } from '../baseX.js';
+import { deriveSecret, generateEphemeralKeyPair } from './x25519-helper.js';
+import { createKek } from './aeskw.js';
+import { deriveKey } from './ecdhkdf.js';
+const KEY_TYPE = 'X25519KeyAgreementKey2020';
+// multibase base58-btc header
+const MULTIBASE_BASE58BTC_HEADER = 'z';
+// multicodec X25519-pub header as varint
+export const MULTICODEC_X25519_PUB_HEADER = new Uint8Array([0xec, 0x01]);
+export const JWE_ALG = 'ECDH-ES+A256KW';
+export { generateEphemeralKeyPair, deriveSecret };
+// Decryption case: get Kek from a private key agreement key and a
+// peer's public ephemeral DH key encoded as an `epk`
+export async function kekFromEphemeralPeer({ keyAgreementKey, epk }) {
+    if (!(epk && typeof epk === 'object')) {
+        throw new TypeError('"epk" must be an object.');
+    }
+    if (epk.kty !== 'OKP') {
+        throw new Error('"epk.kty" must be the string "OKP".');
+    }
+    if (epk.crv !== 'X25519') {
+        throw new Error('"epk.crv" must be the string "X25519".');
+    }
+    // decode public key material
+    const publicKey = base64url.decode(epk.x);
+    // convert to LD key for Web KMS
+    const ephemeralPublicKey = {
+        type: KEY_TYPE,
+        publicKeyMultibase: multibaseEncode(MULTICODEC_X25519_PUB_HEADER, publicKey)
+    };
+    // safe to use IDs like in rfc7518 or does
+    // https://tools.ietf.org/html/rfc7748#section-7 pose any issues?
+    const encoder = new TextEncoder();
+    // "Party U Info"
+    const producerInfo = publicKey;
+    // "Party V Info"
+    const consumerInfo = encoder.encode(keyAgreementKey.id);
+    const secret = await keyAgreementKey.deriveSecret({
+        publicKey: ephemeralPublicKey
+    });
+    const keyData = await deriveKey({ secret, producerInfo, consumerInfo });
+    return {
+        kek: await createKek({ keyData })
+    };
+}
+/**
+ * (Encryption case) Generates KEK from ephemeral DH private key and a peer's
+ * public static key.
+ *
+ * @param {object} options - Options hashmap.
+ * @param {object} options.ephemeralKeyPair - Ephemeral key pair.
+ * @param {object} options.staticPublicKey - Static public key.
+ *
+ * @returns {Promise<object>} - Resolves with kek object derived from static
+ *   peer.
+ */
+export async function kekFromStaticPeer({ ephemeralKeyPair, staticPublicKey }) {
+    if (!staticPublicKey) {
+        throw new Error('"staticPublicKey" is required.');
+    }
+    // static key must be an X25519 multikey
+    const remotePublicKey = multibaseDecode(MULTICODEC_X25519_PUB_HEADER, staticPublicKey.publicKeyMultibase);
+    const encoder = new TextEncoder();
+    // "Party U Info"
+    const producerInfo = ephemeralKeyPair.publicKey;
+    // "Party V Info"
+    const consumerInfo = encoder.encode(staticPublicKey.id);
+    const { privateKey } = ephemeralKeyPair;
+    const secret = await deriveSecret({ privateKey, remotePublicKey });
+    const keyData = await deriveKey({ secret, producerInfo, consumerInfo });
+    return {
+        kek: await createKek({ keyData }),
+        epk: ephemeralKeyPair.epk,
+        apu: base64url.encode(producerInfo),
+        apv: base64url.encode(consumerInfo),
+        ephemeralPublicKey: ephemeralKeyPair.publicKey
+    };
+}
+/**
+ * Adds a multicodec prefix to a given bytes array representing a public
+ * or private key, and multibase-encodes the result.
+ *
+ * @param {Uint8Array} header - Multicodec x25519 pub or pri key header, varint.
+ * @param {Uint8Array} bytes - Byte array representing a public or private key.
+ *
+ * @returns {string} Base58-btc encoded key (with multicodec prefix).
+ */
+export function multibaseEncode(header, bytes) {
+    const mcBytes = new Uint8Array(header.length + bytes.length);
+    mcBytes.set(header);
+    mcBytes.set(bytes, header.length);
+    return MULTIBASE_BASE58BTC_HEADER + base58btc.encode(mcBytes);
+}
+/**
+ * Decodes a given string as a multibase-encoded multicodec value.
+ *
+ * @param {Uint8Array} header - Expected header bytes for the multicodec value.
+ * @param {string} text - Multibase encoded string to decode.
+ *
+ * @returns {Uint8Array} Decoded bytes.
+ */
+export function multibaseDecode(header, text) {
+    const mcValue = base58btc.decode(text.slice(1));
+    if (!header.every((val, i) => mcValue[i] === val)) {
+        throw new Error('Multibase value does not have expected header.');
+    }
+    return mcValue.slice(header.length);
+}
+//# sourceMappingURL=x25519.js.map

package/dist/algorithms/x25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519.js","sourceRoot":"","sources":["../../src/algorithms/x25519.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AASxC,MAAM,QAAQ,GAAG,2BAA2B,CAAA;AAC5C,8BAA8B;AAC9B,MAAM,0BAA0B,GAAG,GAAG,CAAA;AACtC,yCAAyC;AACzC,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACxE,MAAM,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAA;AACvC,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,CAAA;AAEjD,kEAAkE;AAClE,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,eAAe,EACf,GAAG,EAIJ;IACC,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;IACjD,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,6BAA6B;IAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAW,CAAC,CAAA;IAEnD,gCAAgC;IAChC,MAAM,kBAAkB,GAAG;QACzB,IAAI,EAAE,QAAQ;QACd,kBAAkB,EAAE,eAAe,CAAC,4BAA4B,EAAE,SAAS,CAAC;KAC7E,CAAA;IAED,0CAA0C;IAC1C,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,iBAAiB;IACjB,MAAM,YAAY,GAAG,SAAS,CAAA;IAC9B,iBAAiB;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC;QAChD,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;IACvE,OAAO;QACL,GAAG,EAAE,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;KAClC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,eAAe,EAKhB;IACC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,wCAAwC;IACxC,MAAM,eAAe,GAAG,eAAe,CACrC,4BAA4B,EAC5B,eAAe,CAAC,kBAAkB,CACnC,CAAA;IAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,iBAAiB;IACjB,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAA;IAC/C,iBAAiB;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;IACvD,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAA;IAClE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;IACvE,OAAO;QACL,GAAG,EAAE,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QACjC,GAAG,EAAE,gBAAgB,CAAC,GAAG;QACzB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,kBAAkB,EAAE,gBAAgB,CAAC,SAAS;KAC/C,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,MAAkB,EAAE,KAAiB;IACnE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACnB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACjC,OAAO,0BAA0B,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAkB,EAAE,IAAY;IAC9D,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACrC,CAAC"}

package/dist/algorithms/xc20p.d.ts

@@ -0,0 +1,40 @@
+import type { CipherDecryptOptions, CipherEncryptOptions, EncryptResult } from '../types.js';
+export declare const JWE_ENC = "XC20P";
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as a XChaCha20Poly1305 (draft-irtf-cfrg-xchacha-01) key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export declare function generateKey(): Promise<Uint8Array>;
+/**
+ * Encrypts some data. The data will be encrypted using the given
+ * 256-bit XChaCha20Poly1305 (draft-irtf-cfrg-xchacha-01) content encryption
+ * key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - Resolves to `{ciphertext, iv, tag}`.
+ */
+export declare function encrypt({ data, additionalData, cek }: CipherEncryptOptions): Promise<EncryptResult>;
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given XChaCha20Poly1305 (draft-irtf-cfrg-xchacha-01) content encryption
+ * key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector (aka nonce).
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} The decrypted data.
+ */
+export declare function decrypt({ ciphertext, iv, tag, additionalData, cek }: CipherDecryptOptions): Promise<Uint8Array>;
+//# sourceMappingURL=xc20p.d.ts.map

package/dist/algorithms/xc20p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xc20p.d.ts","sourceRoot":"","sources":["../../src/algorithms/xc20p.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACd,MAAM,aAAa,CAAA;AAYpB,eAAO,MAAM,OAAO,UAAU,CAAA;AAE9B;;;;;GAKG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,CAGvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqB/C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,CA8B5C"}