@interop/minimal-cipher 7.0.0

package/dist/algorithms/xc20p.js

@@ -0,0 +1,160 @@
+/*!
+ * Copyright (c) 2019-2023 Digital Bazaar, Inc. All rights reserved.
+ */
+import { _chacha20, decrypt as _decrypt, _encrypt } from './c20p.js';
+import crypto from '../crypto.js';
+// constants are based on the string: "expand 32-byte k"
+const CHACHA20_CONSTANTS = [
+    0x61707865, // "expa" referred to as the "sigma" constant
+    0x3320646e, // "nd 3" keys used here must be 32-bytes
+    0x79622d32, // "2-by"
+    0x6b206574 // "te k"
+];
+const LE = true;
+const NULL_DATA = new Uint8Array(64);
+export const JWE_ENC = 'XC20P';
+/**
+ * Generates a content encryption key (CEK). The 256-bit key is intended to be
+ * used as a XChaCha20Poly1305 (draft-irtf-cfrg-xchacha-01) key.
+ *
+ * @returns {Promise<Uint8Array>} - Resolves to the generated key.
+ */
+export async function generateKey() {
+    // generate content encryption key
+    return crypto.getRandomValues(new Uint8Array(32));
+}
+/**
+ * Encrypts some data. The data will be encrypted using the given
+ * 256-bit XChaCha20Poly1305 (draft-irtf-cfrg-xchacha-01) content encryption
+ * key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.data - The data to encrypt.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<object>} - Resolves to `{ciphertext, iv, tag}`.
+ */
+export async function encrypt({ data, additionalData, cek }) {
+    if (!(data instanceof Uint8Array)) {
+        throw new TypeError('"data" must be a Uint8Array.');
+    }
+    if (!(cek instanceof Uint8Array)) {
+        throw new TypeError('"cek" must be a Uint8Array.');
+    }
+    // generate 24-byte (192-bit) XChaCha20Poly1305 IV and use it and `cek` to
+    // generate subkey and 12-byte (96-bit) IV for use with ChaCha20Poly1305
+    const nonce = crypto.getRandomValues(new Uint8Array(24));
+    const { subkey, iv } = await _generateSubkey({ cek, nonce });
+    // run ChaCha20Poly1305
+    const result = await _encrypt({ data, additionalData, cek: subkey, iv });
+    // return full XChaCha20Poly1305 nonce as IV
+    result.iv = nonce;
+    // wipe generated values
+    subkey.fill(0);
+    iv.fill(0);
+    return result;
+}
+/**
+ * Decrypts some encrypted data. The data must have been encrypted using
+ * the given XChaCha20Poly1305 (draft-irtf-cfrg-xchacha-01) content encryption
+ * key (CEK).
+ *
+ * @param {object} options - The options to use.
+ * @param {Uint8Array} options.ciphertext - The data to decrypt.
+ * @param {Uint8Array} options.iv - The initialization vector (aka nonce).
+ * @param {Uint8Array} options.tag - The authentication tag.
+ * @param {Uint8Array} [options.additionalData] - Optional additional
+ *   authentication data.
+ * @param {Uint8Array} options.cek - The content encryption key to use.
+ *
+ * @returns {Promise<Uint8Array>} The decrypted data.
+ */
+export async function decrypt({ ciphertext, iv, tag, additionalData, cek }) {
+    if (!(iv instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "iv".');
+    }
+    if (!(ciphertext instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "ciphertext".');
+    }
+    if (!(tag instanceof Uint8Array)) {
+        throw new Error('Invalid or missing "tag".');
+    }
+    if (!(cek instanceof Uint8Array)) {
+        throw new TypeError('"cek" must be a Uint8Array.');
+    }
+    // generate subkey and 12-byte (96-bit) IV for use with ChaCha20Poly1305 from
+    // `cek` and 24-byte (192-bit) XChaCha20Poly1305 IV
+    const { subkey, iv: newIV } = await _generateSubkey({ cek, nonce: iv });
+    // decrypt `ciphertext`
+    const result = await _decrypt({
+        ciphertext,
+        iv: newIV,
+        tag,
+        additionalData,
+        cek: subkey
+    });
+    // wipe generated values
+    subkey.fill(0);
+    newIV.fill(0);
+    return result;
+}
+async function _generateSubkey({ cek, nonce }) {
+    // generate subkey and 12-byte IV for ChaCha20Poly1305; first 4 bytes of
+    // IV are NULL bytes, last 8 are the last 8 bytes of the randomly generated
+    // 24-byte XChaCha20Poly1305 nonce
+    const subkey = await _hchacha20({ key: cek, nonce: nonce.subarray(0, 16) });
+    const iv = new Uint8Array(12);
+    iv.set(nonce.subarray(16), 4);
+    return { subkey, iv };
+}
+async function _hchacha20({ key, nonce }) {
+    /* HChaCha20's output is the first 16 bytes of internal state and last 16
+    bytes of ChaCha20 internal state after running its usual rounds. See:
+  
+    https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-xchacha#section-2.2
+  
+    ChaCha20's output is each 4 bytes of internal state (interpreted as a LE
+    uint32) after running the usual rounds added to the initial internal state
+    (again, with each 4 bytes interpreted as a LE uint32).
+  
+    Therefore, we can implement HChaCha20 by:
+  
+    1. Creating the ChaCha20 initial state by concatenating the ChaCha20
+      constants with the 32-byte key and the 16-byte nonce.
+    2. Running ChaCha20 with the 32-byte key, 16-byte nonce, and zero-filled
+      64-byte data to get 64 byte output. The zero-filled data makes the
+      internal XOR operations no-ops.
+    3. Read the first 16 bytes and last 16 bytes of ChaCha20 output as LE uint32s
+      and subtract each corresponding LE uint32 from the initial state.
+    4. Concatenate the resulting 32 bytes to produce the HChaCha20 output. */
+    // create initial ChaCha20 state as 16 LE uint32s (no need to convert to
+    // 64 bytes as the numbers will be used directly below)
+    const state = new Array(16);
+    for (let i = 0; i < 4; ++i) {
+        state[i] = CHACHA20_CONSTANTS[i];
+    }
+    const dvKey = new DataView(key.buffer, key.byteOffset, key.length);
+    for (let i = 0; i < 8; ++i) {
+        state[i + 4] = dvKey.getUint32(i * 4, LE);
+    }
+    const dvNonce = new DataView(nonce.buffer, nonce.byteOffset, nonce.length);
+    for (let i = 0; i < 4; ++i) {
+        state[i + 12] = dvNonce.getUint32(i * 4, LE);
+    }
+    // run ChaCha20
+    const dst = await _chacha20({ key, nonce, src: NULL_DATA });
+    // generate HChaCha20 output
+    const out = new Uint8Array(32);
+    const dvOut = new DataView(out.buffer, out.byteOffset, out.length);
+    const dvDst = new DataView(dst.buffer, dst.byteOffset, dst.length);
+    for (let i = 0; i < 4; ++i) {
+        dvOut.setUint32(i * 4, (dvDst.getUint32(i * 4, LE) - state[i]) | 0, LE);
+    }
+    for (let i = 0; i < 4; ++i) {
+        dvOut.setUint32(i * 4 + 16, (dvDst.getUint32(i * 4 + 48, LE) - state[i + 12]) | 0, LE);
+    }
+    return out;
+}
+//# sourceMappingURL=xc20p.js.map

package/dist/algorithms/xc20p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xc20p.js","sourceRoot":"","sources":["../../src/algorithms/xc20p.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpE,OAAO,MAAM,MAAM,cAAc,CAAA;AAOjC,wDAAwD;AACxD,MAAM,kBAAkB,GAAG;IACzB,UAAU,EAAE,6CAA6C;IACzD,UAAU,EAAE,yCAAyC;IACrD,UAAU,EAAE,SAAS;IACrB,UAAU,CAAC,SAAS;CACrB,CAAA;AACD,MAAM,EAAE,GAAG,IAAI,CAAA;AACf,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;AAEpC,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAA;AAE9B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,kCAAkC;IAClC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,IAAI,EACJ,cAAc,EACd,GAAG,EACkB;IACrB,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACxD,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IAE5D,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IACxE,4CAA4C;IAC5C,MAAM,CAAC,EAAE,GAAG,KAAK,CAAA;IACjB,wBAAwB;IACxB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACd,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACV,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAC5B,UAAU,EACV,EAAE,EACF,GAAG,EACH,cAAc,EACd,GAAG,EACkB;IACrB,IAAI,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;IAED,6EAA6E;IAC7E,mDAAmD;IACnD,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IAEvE,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC5B,UAAU;QACV,EAAE,EAAE,KAAK;QACT,GAAG;QACH,cAAc;QACd,GAAG,EAAE,MAAM;KACZ,CAAC,CAAA;IACF,wBAAwB;IACxB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACb,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,EAC7B,GAAG,EACH,KAAK,EAIN;IACC,wEAAwE;IACxE,2EAA2E;IAC3E,kCAAkC;IAClC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3E,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC7B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7B,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EACxB,GAAG,EACH,KAAK,EAIN;IACC;;;;;;;;;;;;;;;;;;6EAkByE;IAEzE,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,KAAK,GAAa,IAAI,KAAK,CAAC,EAAE,CAAC,CAAA;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,eAAe;IACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAA;IAE3D,4BAA4B;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,SAAS,CACb,CAAC,GAAG,CAAC,GAAG,EAAE,EACV,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EACrD,EAAE,CACH,CAAA;IACH,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/baseX.d.ts

@@ -0,0 +1,7 @@
+export declare const base58btc: import("@scure/base").BytesCoder;
+/**
+ * base64url must be RFC 4648 compliant for JWK interop, and JWK uses the
+ * unpadded form, hence `base64urlnopad`.
+ */
+export declare const base64url: import("@scure/base").BytesCoder;
+//# sourceMappingURL=baseX.d.ts.map

package/dist/baseX.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseX.d.ts","sourceRoot":"","sources":["../src/baseX.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS,kCAAS,CAAA;AAE/B;;;GAGG;AACH,eAAO,MAAM,SAAS,kCAAiB,CAAA"}

package/dist/baseX.js

@@ -0,0 +1,11 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+import { base58, base64urlnopad } from '@scure/base';
+export const base58btc = base58;
+/**
+ * base64url must be RFC 4648 compliant for JWK interop, and JWK uses the
+ * unpadded form, hence `base64urlnopad`.
+ */
+export const base64url = base64urlnopad;
+//# sourceMappingURL=baseX.js.map

package/dist/baseX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseX.js","sourceRoot":"","sources":["../src/baseX.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEpD,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAA;AAE/B;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAA"}

package/dist/crypto.d.ts

@@ -0,0 +1,3 @@
+declare const _default: Crypto;
+export default _default;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":";AACA,wBAAgC"}

package/dist/crypto.js

@@ -0,0 +1,3 @@
+// WebCrypto. Available natively in browsers and in Node (>=24).
+export default globalThis.crypto;
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,eAAe,UAAU,CAAC,MAAM,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+/*!
+ * Copyright (c) 2018-2019 Digital Bazaar, Inc. All rights reserved.
+ */
+export { Cipher } from './Cipher.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,5 @@
+/*!
+ * Copyright (c) 2018-2019 Digital Bazaar, Inc. All rights reserved.
+ */
+export { Cipher } from './Cipher.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA"}

package/dist/types.d.ts

@@ -0,0 +1,119 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+/** Result of a content-encryption operation. */
+export interface EncryptResult {
+    ciphertext: Uint8Array;
+    iv: Uint8Array;
+    tag: Uint8Array;
+}
+/** Options passed to a content-encryption algorithm's `encrypt`. */
+export interface CipherEncryptOptions {
+    data: Uint8Array;
+    additionalData?: Uint8Array;
+    cek: Uint8Array;
+}
+/** Options passed to a content-encryption algorithm's `decrypt`. */
+export interface CipherDecryptOptions {
+    ciphertext: Uint8Array;
+    iv: Uint8Array;
+    tag: Uint8Array;
+    additionalData?: Uint8Array;
+    cek: Uint8Array;
+}
+/** A content-encryption algorithm (e.g. A256GCM, XC20P, C20P). */
+export interface CipherAlgorithm {
+    JWE_ENC: string;
+    generateKey(): Promise<Uint8Array>;
+    encrypt(options: CipherEncryptOptions): Promise<EncryptResult>;
+    decrypt(options: CipherDecryptOptions): Promise<Uint8Array | null>;
+}
+/** An ephemeral public key, encoded as a JWK. */
+export interface Epk {
+    kty: string;
+    crv: string;
+    x?: string;
+    [key: string]: unknown;
+}
+/** An ephemeral key pair used during key agreement. */
+export interface EphemeralKeyPair {
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+    epk: Epk;
+}
+/** A key-encryption key (KEK) used to wrap/unwrap a CEK. */
+export interface Kek {
+    algorithm: {
+        name: string;
+    };
+    wrapKey(options: {
+        unwrappedKey: Uint8Array;
+    }): Promise<string>;
+    unwrapKey(options: {
+        wrappedKey: string;
+    }): Promise<Uint8Array | null>;
+}
+/** Result of deriving a KEK from a static peer (encryption case). */
+export interface KekFromStaticPeerResult {
+    kek: Kek;
+    epk: Epk;
+    apu: string;
+    apv: string;
+    ephemeralPublicKey: Uint8Array;
+}
+/** Result of deriving a KEK from an ephemeral peer (decryption case). */
+export interface KekFromEphemeralPeerResult {
+    kek: Kek;
+}
+/**
+ * A key agreement key (KAK) API, as provided by the caller. External key
+ * implementations vary, so the non-identifying surface is left loose.
+ */
+export interface KeyAgreementKey {
+    id: string;
+    algorithm?: any;
+    deriveSecret(options: {
+        publicKey: any;
+    }): Promise<Uint8Array>;
+}
+/** A key agreement algorithm (e.g. X25519, P-256). */
+export interface KeyAgreementAlgorithm {
+    JWE_ALG: string;
+    generateEphemeralKeyPair(): Promise<EphemeralKeyPair>;
+    kekFromStaticPeer(options: {
+        ephemeralKeyPair: EphemeralKeyPair;
+        staticPublicKey: any;
+    }): Promise<KekFromStaticPeerResult>;
+    kekFromEphemeralPeer(options: {
+        keyAgreementKey: KeyAgreementKey;
+        epk: Epk;
+    }): Promise<KekFromEphemeralPeerResult>;
+}
+/** The JWE recipient header. */
+export interface RecipientHeader {
+    kid?: string;
+    alg?: string;
+    epk?: Epk;
+    apu?: string;
+    apv?: string;
+    [key: string]: unknown;
+}
+/** A JWE recipient. */
+export interface Recipient {
+    header: RecipientHeader;
+    encrypted_key?: string;
+    [key: string]: unknown;
+}
+/** A JSON Web Encryption (JWE) object. */
+export interface JWE {
+    protected: string;
+    recipients: Recipient[];
+    iv: string;
+    ciphertext: string;
+    tag: string;
+}
+/** Resolves a key ID to a DH public key. */
+export type KeyResolver = (options: {
+    id?: string;
+}) => Promise<any>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAA;IACtB,EAAE,EAAE,UAAU,CAAA;IACd,GAAG,EAAE,UAAU,CAAA;CAChB;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,CAAA;IAChB,cAAc,CAAC,EAAE,UAAU,CAAA;IAC3B,GAAG,EAAE,UAAU,CAAA;CAChB;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,UAAU,CAAA;IACtB,EAAE,EAAE,UAAU,CAAA;IACd,GAAG,EAAE,UAAU,CAAA;IACf,cAAc,CAAC,EAAE,UAAU,CAAA;IAC3B,GAAG,EAAE,UAAU,CAAA;CAChB;AAED,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,CAAA;IAClC,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9D,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;CACnE;AAED,iDAAiD;AACjD,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,CAAC,CAAC,EAAE,MAAM,CAAA;IACV,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,UAAU,CAAA;IACrB,GAAG,EAAE,GAAG,CAAA;CACT;AAED,4DAA4D;AAC5D,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3B,OAAO,CAAC,OAAO,EAAE;QAAE,YAAY,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/D,SAAS,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;CACvE;AAED,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,kBAAkB,EAAE,UAAU,CAAA;CAC/B;AAED,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IAEV,SAAS,CAAC,EAAE,GAAG,CAAA;IAEf,YAAY,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,GAAG,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC/D;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,wBAAwB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrD,iBAAiB,CAAC,OAAO,EAAE;QACzB,gBAAgB,EAAE,gBAAgB,CAAA;QAElC,eAAe,EAAE,GAAG,CAAA;KACrB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACpC,oBAAoB,CAAC,OAAO,EAAE;QAC5B,eAAe,EAAE,eAAe,CAAA;QAChC,GAAG,EAAE,GAAG,CAAA;KACT,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;CACxC;AAED,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,uBAAuB;AACvB,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,eAAe,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,0CAA0C;AAC1C,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,4CAA4C;AAE5C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA"}

package/dist/types.js

@@ -0,0 +1,5 @@
+/*!
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/util.d.ts

@@ -0,0 +1,2 @@
+export declare function stringToUint8Array(data: string | Uint8Array): Uint8Array;
+//# sourceMappingURL=util.d.ts.map

package/dist/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CASxE"}

package/dist/util.js

@@ -0,0 +1,11 @@
+export function stringToUint8Array(data) {
+    if (typeof data === 'string') {
+        // convert data to Uint8Array
+        return new TextEncoder().encode(data);
+    }
+    if (!(data instanceof Uint8Array)) {
+        throw new TypeError('"data" be a string or Uint8Array.');
+    }
+    return data;
+}
+//# sourceMappingURL=util.js.map

package/dist/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,kBAAkB,CAAC,IAAyB;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,6BAA6B;QAC7B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/package.json

@@ -0,0 +1,99 @@
+{
+  "name": "@interop/minimal-cipher",
+  "version": "7.0.0",
+  "description": "Minimal encryption/decryption JWE library.",
+  "license": "BSD-3-Clause",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "react-native": "./dist/index.js",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "module": "dist/index.js",
+  "browser": {
+    "./dist/algorithms/c20p.js": "./dist/algorithms/c20p-browser.js",
+    "./dist/algorithms/x25519-helper.js": "./dist/algorithms/x25519-helper-browser.js"
+  },
+  "types": "dist/index.d.ts",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "pnpm run clear && tsc",
+    "clear": "rimraf dist/*",
+    "dev": "vite",
+    "fix": "eslint --fix src test && pnpm run format",
+    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" \"*.md\"",
+    "lint": "eslint src test",
+    "prepare": "pnpm run build",
+    "rebuild": "pnpm run clear && pnpm run build",
+    "test": "pnpm run fix && pnpm run lint && pnpm run test:node && pnpm run test:browser",
+    "test:browser": "playwright test",
+    "test:node": "vitest run",
+    "test:coverage": "vitest run --coverage"
+  },
+  "dependencies": {
+    "@interop/data-integrity-core": "^6.1.2",
+    "@interop/ecdsa-multikey": "^2.1.0",
+    "@noble/curves": "^2.2.0",
+    "@scure/base": "^2.2.0",
+    "@stablelib/chacha": "^2.0.1",
+    "@stablelib/chacha20poly1305": "^2.0.1"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@interop/did-io": "^4.0.2",
+    "@interop/did-method-key": "^7.2.0",
+    "@interop/ed25519-verification-key": "^7.0.2",
+    "@interop/x25519-key-agreement-key": "^4.0.2",
+    "@playwright/test": "^1.60.0",
+    "@types/node": "^25.9.1",
+    "@vitest/coverage-v8": "^4.1.7",
+    "eslint": "^10.4.0",
+    "eslint-config-prettier": "^10.1.8",
+    "globals": "^17.6.0",
+    "prettier": "^3.8.3",
+    "rimraf": "^6.1.3",
+    "tweetnacl": "^1.0.3",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.59.4",
+    "vite": "^8.0.14",
+    "vitest": "^4.1.7"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/interop-alliance/minimal-cipher"
+  },
+  "keywords": [
+    "cipher",
+    "encryption",
+    "decryption",
+    "jwe",
+    "cwe",
+    "ChaCha20Poly1305",
+    "XChaCha20Poly1305",
+    "AES-GCM"
+  ],
+  "author": {
+    "name": "Digital Bazaar, Inc.",
+    "email": "support@digitalbazaar.com",
+    "url": "https://digitalbazaar.com/"
+  },
+  "bugs": {
+    "url": "https://github.com/interop-alliance/minimal-cipher/issues"
+  },
+  "homepage": "https://github.com/interop-alliance/minimal-cipher",
+  "publishConfig": {
+    "access": "public"
+  },
+  "packageManager": "pnpm@11.5.0",
+  "engines": {
+    "node": ">=24.0"
+  }
+}