@interop/minimal-cipher 7.2.0 → 7.4.0

package/README.md

@@ -8,7 +8,6 @@ library, secure algs only, browser-compatible.
 
 ## Table of Contents
 
-- [Security](#security)
 - [Background](#background)
 - [Install](#install)
 - [Usage](#usage)
@@ -16,10 +15,6 @@ library, secure algs only, browser-compatible.
 - [Commercial Support](#commercial-support)
 - [License](#license)
 
-## Security
-
-TBD
-
 ## Background
 
 Every version of this library will only offer at most two algorithms for
@@ -84,8 +79,25 @@ Pick a Cipher interface (`recommended` or `fips`) and create an instance:
 import { Cipher } from '@interop/minimal-cipher'
 
 const cipher = new Cipher() // by default {version: 'recommended'}
+
+// or, to use FIPS-validated algorithms:
+const fipsCipher = new Cipher({ version: 'fips' })
 ```
 
+Both versions produce the same JWE envelope structure -- ECDH-ES key agreement
+that wraps the content encryption key (CEK) with AES Key Wrap (`A256KW`) -- and
+differ only in the content-encryption cipher and the key-agreement curve:
+
+| Version       | Content encryption (`enc`)   | Key agreement | Notes                                             |
+| ------------- | ---------------------------- | ------------- | ------------------------------------------------- |
+| `recommended` | `XC20P` (XChaCha20-Poly1305) | X25519        | Default. Modern, fast; not on the NIST/FIPS list. |
+| `fips`        | `A256GCM` (AES-256-GCM)      | NIST P-256    | Uses only FIPS 140-validated algorithms.          |
+
+Use `recommended` (the default) unless you have a specific FIPS requirement, in
+which case use `fips`. Note that `version` controls the algorithms used to
+**encrypt**, so it must match the kind of key agreement keys your recipients
+have: X25519 keys for `recommended`, P-256 keys for `fips`.
+
 ### Encrypting
 
 To encrypt something (to create a cipher, serialized as a JWE JSON document),
@@ -107,11 +119,11 @@ public/private key pairs that will be used to encrypt/decrypt the message):
 const keyAgreementKey = await fetchFromSomewhere()
 
 // or derive them from an existing Ed25519 signing key
-import { X25519KeyAgreementKey2020 } from '@digitalbazaar/x25519-key-agreement-key-2020'
-import { Ed25519VerificationKey2020 } from '@digitalbazaar/ed25519-verification-key-2020'
-const keyPair = await Ed25519VerificationKey2020.generate()
+import { X25519KeyAgreementKey2020 } from '@interop/x25519-key-agreement-key'
+import { Ed25519VerificationKey } from '@interop/ed25519-verification-key'
+const keyPair = await Ed25519VerificationKey.generate()
 
-const keyAgreementKey = X25519KeyPair.fromEd25519VerificationKey2020({
+const keyAgreementKey = X25519KeyAgreementKey2020.fromEd25519VerificationKey2020({
   keyPair
 })
 // If the source key pair didn't have a controller set, don't forget to set one:
@@ -123,8 +135,10 @@ const didDoc = await veresDriver.get({ did })
 const authnKey = didDoc.getVerificationMethod({
   proofPurpose: 'authentication'
 })
-const edKeyPair = await Ed25519VerificationKey2020.from(authnKey)
-const keyPair = X25519KeyPair.fromEd25519VerificationKey2020({ keyPair })
+const edKeyPair = await Ed25519VerificationKey.from(authnKey)
+const keyAgreementKey = X25519KeyAgreementKey2020.fromEd25519VerificationKey2020({
+  keyPair: edKeyPair
+})
 
 const recipient = {
   header: {
@@ -157,21 +171,46 @@ const keyResolver = async () => publicKeyNode
 // A more advanced resolver based on DID doc authentication keys
 const keyResolver = async ({ id }) => {
   // Use veres driver to fetch the authn key directly
-  const keyPair = await Ed25519VerificationKey2020.from(
+  const keyPair = await Ed25519VerificationKey.from(
     await veresDriver.get({ did: id })
   )
   // Convert authn key to key agreement key
-  return X25519KeyPair.fromEd25519VerificationKey2020({ keyPair })
+  return X25519KeyAgreementKey2020.fromEd25519VerificationKey2020({ keyPair })
 }
 ```
 
 ```js
-// Using did-veres-one driver as a resolver for did:v1:nym: DID keys
-// TODO: Implement this
+// Using the did:key method driver as a key resolver
+import { driver } from '@interop/did-method-key'
+import { Ed25519VerificationKey } from '@interop/ed25519-verification-key'
+
+const didKeyDriver = driver()
+// Register Ed25519 keys, and derive an X25519 keyAgreement key when resolving
+// (did:key identities are Ed25519 signing keys; encryption needs the derived
+// X25519 key agreement key)
+didKeyDriver.use({
+  keyPairClass: Ed25519VerificationKey,
+  enableEncryptionKeyDerivation: true
+})
+
+// The resolver is called with a key agreement key id (a did:key URL with a
+// fragment) and returns the matching public key node
+const keyResolver = async ({ id }) => didKeyDriver.get({ url: id })
 ```
 
+#### Shortcut: `createRecipients`
+
+If you already hold the recipient key-agreement keys (each with an `id` and the
+public key material the algorithm reads, e.g. `X25519KeyAgreementKey2020`
+instances), `cipher.createRecipients({ keys })` builds both the `recipients`
+array and a matching by-id `keyResolver` for you -- no need to assemble the
+headers or write a resolver. The header `alg` is taken from the cipher's key
+agreement algorithm, so it always matches the version:
+
 ```js
-// Using the did:key method driver as a key resolver
+const keys = [aliceKeyAgreementKey, bobKeyAgreementKey]
+const { recipients, keyResolver } = cipher.createRecipients({ keys })
+const jweDoc = await cipher.encryptObject({ obj, recipients, keyResolver })
 ```
 
 Create the JWE:
@@ -186,6 +225,91 @@ const obj = { key: 'value' }
 const jweDoc = await cipher.encryptObject({ obj, recipients, keyResolver })
 ```
 
+To encrypt a binary blob, pass the bytes directly as a `Uint8Array`. There is no
+need to text-encode the data first -- a `Uint8Array` is passed through to the
+content-encryption step as-is, while a string is UTF-8 encoded for you:
+
+```js
+// To encrypt a binary blob
+const data = new Uint8Array(await blob.arrayBuffer()) // e.g. from a browser Blob
+const jweDoc = await cipher.encrypt({ data, recipients, keyResolver })
+```
+
+### Streaming encryption
+
+`encrypt()` buffers the whole input in memory and produces a single JWE, which
+is fine for small payloads. For large blobs or files, use the streaming API
+instead: `createEncryptStream()` returns a WHATWG
+[`TransformStream`][Streams API] that breaks the incoming data into chunks
+(default `chunkSize` of 1 MiB) and emits one `{ jwe }` object per chunk, so the
+data is never fully held in memory.
+
+```js
+// `stream` is a WHATWG ReadableStream of Uint8Array chunks
+const encryptStream = await cipher.createEncryptStream({
+  recipients,
+  keyResolver,
+  chunkSize: 1048576 // optional; bytes per chunk, defaults to 1 MiB
+})
+
+// Each chunk read from the resulting stream is an object: { jwe }
+const readable = stream.pipeThrough(encryptStream)
+const reader = readable.getReader()
+let done
+let value
+while (!done) {
+  ;({ value, done } = await reader.read())
+  if (value) {
+    // store or upload value.jwe ...
+  }
+}
+```
+
+This is how [`edv-client`](https://github.com/digitalbazaar/edv-client) encrypts
+large documents: it pipes a user-supplied `ReadableStream` through
+`createEncryptStream()` and stores each emitted `jwe` as a separate chunk.
+
+### Encrypting with the FIPS version
+
+The examples above use the default `recommended` version, whose key agreement
+keys are X25519. To encrypt with FIPS-validated algorithms, construct the cipher
+with `{ version: 'fips' }` and use NIST P-256 key agreement keys. Everything
+else -- the `recipients` array, `keyResolver`, and the `encrypt*` calls -- works
+the same way.
+
+```js
+import { Cipher } from '@interop/minimal-cipher'
+import * as EcdsaMultikey from '@interop/ecdsa-multikey'
+
+const cipher = new Cipher({ version: 'fips' })
+
+// Generate (or load) a P-256 key agreement key for each recipient
+const keyAgreementKey = await EcdsaMultikey.generate({
+  id: 'urn:123',
+  curve: 'P-256',
+  keyAgreement: true
+})
+
+// The recipient header is the same shape as the recommended version
+const recipients = [
+  { header: { kid: keyAgreementKey.id, alg: 'ECDH-ES+A256KW' } }
+]
+
+// `keyResolver` resolves each `kid` to the recipient's P-256 public key
+const publicKeyNode = await keyAgreementKey.export({ publicKey: true })
+const keyResolver = async () => publicKeyNode
+
+const obj = { key: 'value' }
+const jweDoc = await cipher.encryptObject({ obj, recipients, keyResolver })
+```
+
+To decrypt, pass the P-256 key agreement key (which can derive the shared
+secret) as `keyAgreementKey`, exactly as with the recommended version:
+
+```js
+const object = await cipher.decryptObject({ jwe: jweDoc, keyAgreementKey })
+```
+
 ### Decrypting
 
 Decrypt a JWE JSON Document, using a private `keyAgreementKey`:
@@ -196,8 +320,58 @@ const data = await cipher.decrypt({ jwe, keyAgreementKey })
 const object = await cipher.decryptObject({ jwe, keyAgreementKey })
 ```
 
-TODO: Describe the required KEK API: // `id`, `algorithm`,
-`wrapKey({unwrappedKey})`, and `unwrapKey({wrappedKey})`
+To decrypt streamed (chunked) data, use `createDecryptStream()`. It returns a
+[`TransformStream`][Streams API] that takes `{ jwe }` chunks (as produced by
+`createEncryptStream()`) and outputs the decrypted `Uint8Array` chunks:
+
+```js
+// `stream` is a ReadableStream of { jwe } chunks
+const decryptStream = await cipher.createDecryptStream({ keyAgreementKey })
+const readable = stream.pipeThrough(decryptStream)
+const reader = readable.getReader()
+let done
+let value
+while (!done) {
+  ;({ value, done } = await reader.read())
+  if (value) {
+    // value is a Uint8Array of decrypted bytes ...
+  }
+}
+```
+
+### Key wrapping (the KEK interface)
+
+Encryption uses two layers of keys. A randomly generated **content encryption
+key (CEK)** encrypts the payload (with `A256GCM` or `XC20P`). That CEK is then
+wrapped, once per recipient, by a **key encryption key (KEK)**, and the wrapped
+result is stored as each recipient's `encrypted_key`. Decryption reverses this:
+the KEK unwraps the CEK, which then decrypts the payload.
+
+You do not construct or pass a KEK yourself. Because the cipher uses ECDH-ES key
+agreement, each KEK is derived internally, per recipient, from a shared secret
+between an ephemeral key and a recipient's static key agreement key. The
+recipient is identified in the JWE by its key agreement key id (the `kid` in the
+recipient header), which `keyResolver` maps to a public key -- the KEK itself is
+ephemeral and has no identity of its own.
+
+A KEK object implements the following interface:
+
+```ts
+interface KEK {
+  // The key-wrapping algorithm, e.g. { name: 'A256KW' }.
+  algorithm: { name: string }
+
+  // Wraps the CEK bytes; resolves to the base64url-encoded wrapped key.
+  wrapKey(options: { unwrappedKey: Uint8Array }): Promise<string>
+
+  // Unwraps a base64url-encoded wrapped key; resolves to the CEK bytes,
+  // or null if unwrapping fails (e.g. this KEK does not match the recipient).
+  unwrapKey(options: { wrappedKey: string }): Promise<Uint8Array | null>
+}
+```
+
+The built-in implementation wraps the CEK with AES Key Wrap (`A256KW`) using the
+Web Crypto API; see `src/algorithms/aeskw.ts`.
 
 ## Contribute
 

package/dist/Cipher.d.ts

@@ -1,19 +1,19 @@
 import { DecryptTransformer } from './DecryptTransformer.js';
 import { EncryptTransformer } from './EncryptTransformer.js';
-import type { IJWE, IKeyAgreementKey, IKeyResolver, IRecipient } from '@interop/data-integrity-core';
+import type { IJWE, IKeyAgreementKey, IKeyResolver, IRecipient, IRecipientTemplate } from '@interop/data-integrity-core';
 import type { CipherAlgorithm, EphemeralKeyPair, KeyAgreementAlgorithm } from './types.js';
 interface EncryptOptions {
     data?: Uint8Array | string;
-    recipients: IRecipient[];
+    recipients: IRecipientTemplate[];
     keyResolver: IKeyResolver;
 }
 interface EncryptObjectOptions {
     obj: object;
-    recipients: IRecipient[];
+    recipients: IRecipientTemplate[];
     keyResolver: IKeyResolver;
 }
 interface CreateEncryptOptions {
-    recipients: IRecipient[];
+    recipients: IRecipientTemplate[];
     keyResolver: IKeyResolver;
     chunkSize?: number;
 }
@@ -36,6 +36,35 @@ export declare class Cipher {
     constructor({ version }?: {
         version?: string;
     });
+    /**
+     * Builds the `recipients` array and a matching `keyResolver` from a set of
+     * recipient key-agreement keys, for use with `encrypt`/`encryptObject` (and
+     * the stream/transformer variants). Saves callers from assembling the
+     * recipient headers and a by-id resolver by hand.
+     *
+     * Each key must expose an `id` (used as the JWE recipient `kid`) and the
+     * public key material the key agreement algorithm reads -- for X25519, a
+     * `publicKeyMultibase` (e.g. an `X25519KeyAgreementKey2020` instance or its
+     * exported public key). The recipient header `alg` is taken from this
+     * cipher's key agreement algorithm (`this.keyAgreement.JWE_ALG`), so it
+     * always matches the cipher version. The returned `keyResolver` looks a
+     * recipient up by `id` and throws when asked for an unknown key.
+     *
+     * @param {object} options - Options.
+     * @param {Array} options.keys - Recipient key-agreement keys, each with an
+     *   `id` and the public key material the algorithm reads.
+     *
+     * @returns {{recipients: IRecipientTemplate[], keyResolver: IKeyResolver}}
+     *   The `recipients` array and the `keyResolver` to pass to `encrypt`.
+     */
+    createRecipients({ keys }: {
+        keys: {
+            id: string;
+        }[];
+    }): {
+        recipients: IRecipientTemplate[];
+        keyResolver: IKeyResolver;
+    };
     /**
      * Creates a TransformStream that will encrypt some data for one or more
      * recipients and output a stream of chunks, each containing an object
@@ -201,7 +230,7 @@ export declare class Cipher {
      * @returns {Promise<object>} A JWE recipient object.
      */
     _createRecipient({ recipient, ephemeralKeyPair, cek, keyResolver }: {
-        recipient: IRecipient;
+        recipient: IRecipientTemplate;
         ephemeralKeyPair: EphemeralKeyPair;
         cek: Uint8Array;
         keyResolver: IKeyResolver;

package/dist/Cipher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Cipher.d.ts","sourceRoot":"","sources":["../src/Cipher.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,OAAO,KAAK,EACV,IAAI,EACJ,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACX,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,YAAY,CAAA;AAInB,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAA;IAC1B,UAAU,EAAE,UAAU,EAAE,CAAA;IACxB,WAAW,EAAE,YAAY,CAAA;CAC1B;AAED,UAAU,oBAAoB;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,UAAU,EAAE,CAAA;IACxB,WAAW,EAAE,YAAY,CAAA;CAC1B;AAED,UAAU,oBAAoB;IAC5B,UAAU,EAAE,UAAU,EAAE,CAAA;IACxB,WAAW,EAAE,YAAY,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,MAAM;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,YAAY,EAAE,qBAAqB,CAAA;IAEnC;;;;;;;;;;;OAWG;gBACS,EAAE,OAAuB,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO;IAiBlE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,mBAAmB,CAAC,EACxB,UAAU,EACV,WAAW,EACX,SAAS,EACV,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IASlD;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CAAC,EACxB,eAAe,EAChB,EAAE;QACD,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,eAAe,CAAC;IAK5B;;;;;;;;;;;;;;;;;;OAkBG;IACG,OAAO,CAAC,EACZ,IAAI,EACJ,UAAU,EACV,WAAW,EACZ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAejC;;;;;;;;;OASG;IACG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1E;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,OAAO,CAAC,EACZ,GAAG,EACH,eAAe,EAChB,EAAE;QACD,GAAG,EAAE,IAAI,CAAA;QACT,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAK9B;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,EAClB,GAAG,EACH,eAAe,EAChB,EAAE;QACD,GAAG,EAAE,IAAI,CAAA;QACT,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAS1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,wBAAwB,CAAC,EAC7B,UAAU,EACV,WAAW,EACX,SAAS,EACV,EAAE,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA4CrD;;;;;;;;OAQG;IACG,wBAAwB,CAAC,EAC7B,eAAe,EAChB,EAAE;QACD,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO/B;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CAAC,EACrB,SAAS,EACT,gBAAgB,EAChB,GAAG,EACH,WAAW,EACZ,EAAE;QACD,SAAS,EAAE,UAAU,CAAA;QACrB,gBAAgB,EAAE,gBAAgB,CAAA;QAClC,GAAG,EAAE,UAAU,CAAA;QACf,WAAW,EAAE,YAAY,CAAA;KAC1B,GAAG,OAAO,CAAC,UAAU,CAAC;CAwCxB"}
+{"version":3,"file":"Cipher.d.ts","sourceRoot":"","sources":["../src/Cipher.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,OAAO,KAAK,EACV,IAAI,EACJ,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,kBAAkB,EACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,YAAY,CAAA;AAInB,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAA;IAC1B,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,WAAW,EAAE,YAAY,CAAA;CAC1B;AAED,UAAU,oBAAoB;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,WAAW,EAAE,YAAY,CAAA;CAC1B;AAED,UAAU,oBAAoB;IAC5B,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,WAAW,EAAE,YAAY,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,MAAM;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,YAAY,EAAE,qBAAqB,CAAA;IAEnC;;;;;;;;;;;OAWG;gBACS,EAAE,OAAuB,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO;IAiBlE;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE;QAAE,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,GAAG;QACtD,UAAU,EAAE,kBAAkB,EAAE,CAAA;QAChC,WAAW,EAAE,YAAY,CAAA;KAC1B;IAgBD;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,mBAAmB,CAAC,EACxB,UAAU,EACV,WAAW,EACX,SAAS,EACV,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IASlD;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CAAC,EACxB,eAAe,EAChB,EAAE;QACD,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,eAAe,CAAC;IAK5B;;;;;;;;;;;;;;;;;;OAkBG;IACG,OAAO,CAAC,EACZ,IAAI,EACJ,UAAU,EACV,WAAW,EACZ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAejC;;;;;;;;;OASG;IACG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1E;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,OAAO,CAAC,EACZ,GAAG,EACH,eAAe,EAChB,EAAE;QACD,GAAG,EAAE,IAAI,CAAA;QACT,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAK9B;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,EAClB,GAAG,EACH,eAAe,EAChB,EAAE;QACD,GAAG,EAAE,IAAI,CAAA;QACT,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAS1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,wBAAwB,CAAC,EAC7B,UAAU,EACV,WAAW,EACX,SAAS,EACV,EAAE,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA4CrD;;;;;;;;OAQG;IACG,wBAAwB,CAAC,EAC7B,eAAe,EAChB,EAAE;QACD,eAAe,EAAE,gBAAgB,CAAA;KAClC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO/B;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CAAC,EACrB,SAAS,EACT,gBAAgB,EAChB,GAAG,EACH,WAAW,EACZ,EAAE;QACD,SAAS,EAAE,kBAAkB,CAAA;QAC7B,gBAAgB,EAAE,gBAAgB,CAAA;QAClC,GAAG,EAAE,UAAU,CAAA;QACf,WAAW,EAAE,YAAY,CAAA;KAC1B,GAAG,OAAO,CAAC,UAAU,CAAC;CAwCxB"}

package/dist/Cipher.js

@@ -41,6 +41,42 @@ export class Cipher {
             this.keyAgreement = recAlgorithm.keyAgreement;
         }
     }
+    /**
+     * Builds the `recipients` array and a matching `keyResolver` from a set of
+     * recipient key-agreement keys, for use with `encrypt`/`encryptObject` (and
+     * the stream/transformer variants). Saves callers from assembling the
+     * recipient headers and a by-id resolver by hand.
+     *
+     * Each key must expose an `id` (used as the JWE recipient `kid`) and the
+     * public key material the key agreement algorithm reads -- for X25519, a
+     * `publicKeyMultibase` (e.g. an `X25519KeyAgreementKey2020` instance or its
+     * exported public key). The recipient header `alg` is taken from this
+     * cipher's key agreement algorithm (`this.keyAgreement.JWE_ALG`), so it
+     * always matches the cipher version. The returned `keyResolver` looks a
+     * recipient up by `id` and throws when asked for an unknown key.
+     *
+     * @param {object} options - Options.
+     * @param {Array} options.keys - Recipient key-agreement keys, each with an
+     *   `id` and the public key material the algorithm reads.
+     *
+     * @returns {{recipients: IRecipientTemplate[], keyResolver: IKeyResolver}}
+     *   The `recipients` array and the `keyResolver` to pass to `encrypt`.
+     */
+    createRecipients({ keys }) {
+        const alg = this.keyAgreement.JWE_ALG;
+        const byId = new Map(keys.map(key => [key.id, key]));
+        const recipients = keys.map(key => ({
+            header: { kid: key.id, alg }
+        }));
+        const keyResolver = async ({ id }) => {
+            const key = id ? byId.get(id) : undefined;
+            if (!key) {
+                throw new Error(`No public key for recipient "${id}".`);
+            }
+            return key;
+        };
+        return { recipients, keyResolver };
+    }
     /**
      * Creates a TransformStream that will encrypt some data for one or more
      * recipients and output a stream of chunks, each containing an object
@@ -223,7 +259,7 @@ export class Cipher {
         const cek = await cipher.generateKey();
         // derive ephemeral ECDH key pair to use with all recipients
         const ephemeralKeyPair = await keyAgreement.generateEphemeralKeyPair();
-        recipients = await Promise.all(recipients.map(recipient => this._createRecipient({ recipient, cek, ephemeralKeyPair, keyResolver })));
+        const wrappedRecipients = await Promise.all(recipients.map(recipient => this._createRecipient({ recipient, cek, ephemeralKeyPair, keyResolver })));
         // create shared protected header as associated authenticated data (aad)
         // ASCII(BASE64URL(UTF8(JWE Protected Header)))
         const enc = cipher.JWE_ENC;
@@ -232,7 +268,7 @@ export class Cipher {
         // UTF8-encoding a base64url-encoded string is the same as ASCII
         const additionalData = stringToUint8Array(encodedProtectedHeader);
         return new EncryptTransformer({
-            recipients,
+            recipients: wrappedRecipients,
             encodedProtectedHeader,
             cipher,
             additionalData,

package/dist/Cipher.js.map

@@ -1 +1 @@
-{"version":3,"file":"Cipher.js","sourceRoot":"","sources":["../src/Cipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAa9C,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;AAoBxC,MAAM,OAAO,MAAM;IACjB,OAAO,CAAQ;IACf,MAAM,CAAiB;IACvB,YAAY,CAAuB;IAEnC;;;;;;;;;;;OAWG;IACH,YAAY,EAAE,OAAO,GAAG,aAAa,KAA2B,EAAE;QAChE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,IAAI,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAA;YAClC,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,YAAY,CAAA;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAA;YACjC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,YAAY,CAAA;QAC/C,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,mBAAmB,CAAC,EACxB,UAAU,EACV,WAAW,EACX,SAAS,EACY;QACrB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;YACtD,UAAU;YACV,WAAW;YACX,SAAS;SACV,CAAC,CAAA;QACF,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,mBAAmB,CAAC,EACxB,eAAe,EAGhB;QACC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5E,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,OAAO,CAAC,EACZ,IAAI,EACJ,UAAU,EACV,WAAW,EACI;QACf,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,KAAK,GAAwB,IAAI,CAAA;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;YACtD,UAAU;YACV,WAAW;SACZ,CAAC,CAAA;QACF,OAAO,WAAW,CAAC,OAAO,CAAC,KAAmB,CAAC,CAAA;IACjD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,EAAwB;QACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,OAAO,CAAC,EACZ,GAAG,EACH,eAAe,EAIhB;QACC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5E,OAAO,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CAAC,EAClB,GAAG,EACH,eAAe,EAIhB;QACC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oBAAoB;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACnD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,wBAAwB,CAAC,EAC7B,UAAU,EACV,WAAW,EACX,SAAS,EACY;QACrB,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;QAChE,CAAC;QACD,kEAAkE;QAClE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,IAAI,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAEvB,4CAA4C;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAA;QAEtC,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,wBAAwB,EAAE,CAAA;QAEtE,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,IAAI,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CACzE,CACF,CAAA;QAED,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAA;QAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAClD,MAAM,sBAAsB,GAAG,SAAS,CAAC,MAAM,CAC7C,kBAAkB,CAAC,kBAAkB,CAAC,CACvC,CAAA;QACD,gEAAgE;QAChE,MAAM,cAAc,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,CAAA;QAEjE,OAAO,IAAI,kBAAkB,CAAC;YAC5B,UAAU;YACV,sBAAsB;YACtB,MAAM;YACN,cAAc;YACd,GAAG;YACH,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,wBAAwB,CAAC,EAC7B,eAAe,EAGhB;QACC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,eAAe;SAChB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,SAAS,EACT,gBAAgB,EAChB,GAAG,EACH,WAAW,EAMZ;QACC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;QACnD,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;QAC3D,CAAC;QACD,sCAAsC;QACtC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;QAC7B,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QACvE,iCAAiC;QACjC,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC;YACzD,gBAAgB;YAChB,eAAe;SAChB,CAAC,CAAA;QACF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAA;QAC5C,MAAM,MAAM,GAAG;YACb,4BAA4B;YAC5B,+BAA+B;YAC/B,GAAG,SAAS,CAAC,MAAM;YACnB,uBAAuB;YACvB,GAAG;YACH,8CAA8C;YAC9C,GAAG;YACH,sCAAsC;YACtC,GAAG;SACJ,CAAA;QACD,OAAO;YACL,GAAG,SAAS;YACZ,MAAM;YACN,kEAAkE;YAClE,aAAa,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;CACF"}
+{"version":3,"file":"Cipher.js","sourceRoot":"","sources":["../src/Cipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAc9C,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;AAoBxC,MAAM,OAAO,MAAM;IACjB,OAAO,CAAQ;IACf,MAAM,CAAiB;IACvB,YAAY,CAAuB;IAEnC;;;;;;;;;;;OAWG;IACH,YAAY,EAAE,OAAO,GAAG,aAAa,KAA2B,EAAE;QAChE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,IAAI,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAA;YAClC,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,YAAY,CAAA;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAA;YACjC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,YAAY,CAAA;QAC/C,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,gBAAgB,CAAC,EAAE,IAAI,EAA8B;QAInD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAA;QACrC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;QACpD,MAAM,UAAU,GAAyB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE;SAC7B,CAAC,CAAC,CAAA;QACH,MAAM,WAAW,GAAiB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACzC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,IAAI,CAAC,CAAA;YACzD,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC,CAAA;QACD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,mBAAmB,CAAC,EACxB,UAAU,EACV,WAAW,EACX,SAAS,EACY;QACrB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;YACtD,UAAU;YACV,WAAW;YACX,SAAS;SACV,CAAC,CAAA;QACF,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,mBAAmB,CAAC,EACxB,eAAe,EAGhB;QACC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5E,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,OAAO,CAAC,EACZ,IAAI,EACJ,UAAU,EACV,WAAW,EACI;QACf,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,KAAK,GAAwB,IAAI,CAAA;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;YACtD,UAAU;YACV,WAAW;SACZ,CAAC,CAAA;QACF,OAAO,WAAW,CAAC,OAAO,CAAC,KAAmB,CAAC,CAAA;IACjD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,EAAwB;QACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,OAAO,CAAC,EACZ,GAAG,EACH,eAAe,EAIhB;QACC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5E,OAAO,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CAAC,EAClB,GAAG,EACH,eAAe,EAIhB;QACC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oBAAoB;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACnD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,wBAAwB,CAAC,EAC7B,UAAU,EACV,WAAW,EACX,SAAS,EACY;QACrB,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;QAChE,CAAC;QACD,kEAAkE;QAClE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,IAAI,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAEvB,4CAA4C;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAA;QAEtC,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,wBAAwB,EAAE,CAAA;QAEtE,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CACzC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,IAAI,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CACzE,CACF,CAAA;QAED,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAA;QAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAClD,MAAM,sBAAsB,GAAG,SAAS,CAAC,MAAM,CAC7C,kBAAkB,CAAC,kBAAkB,CAAC,CACvC,CAAA;QACD,gEAAgE;QAChE,MAAM,cAAc,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,CAAA;QAEjE,OAAO,IAAI,kBAAkB,CAAC;YAC5B,UAAU,EAAE,iBAAiB;YAC7B,sBAAsB;YACtB,MAAM;YACN,cAAc;YACd,GAAG;YACH,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,wBAAwB,CAAC,EAC7B,eAAe,EAGhB;QACC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,eAAe;SAChB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,SAAS,EACT,gBAAgB,EAChB,GAAG,EACH,WAAW,EAMZ;QACC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;QACnD,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;QAC3D,CAAC;QACD,sCAAsC;QACtC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;QAC7B,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QACvE,iCAAiC;QACjC,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC;YACzD,gBAAgB;YAChB,eAAe;SAChB,CAAC,CAAA;QACF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAA;QAC5C,MAAM,MAAM,GAAG;YACb,4BAA4B;YAC5B,+BAA+B;YAC/B,GAAG,SAAS,CAAC,MAAM;YACnB,uBAAuB;YACvB,GAAG;YACH,8CAA8C;YAC9C,GAAG;YACH,sCAAsC;YACtC,GAAG;SACJ,CAAA;QACD,OAAO;YACL,GAAG,SAAS;YACZ,MAAM;YACN,kEAAkE;YAClE,aAAa,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@interop/minimal-cipher",
-  "version": "7.2.0",
+  "version": "7.4.0",
   "description": "Minimal encryption/decryption JWE library.",
   "license": "BSD-3-Clause",
   "type": "module",
@@ -30,17 +30,18 @@
     "dev": "vite",
     "fix": "eslint --fix src test && pnpm run format",
     "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" \"*.md\"",
-    "lint": "eslint src test",
+    "lint": "eslint src test && pnpm run typecheck",
     "prepare": "pnpm run build",
     "rebuild": "pnpm run clear && pnpm run build",
     "test": "pnpm run fix && pnpm run lint && pnpm run test:node && pnpm run test:browser",
     "test:browser": "playwright test",
     "test:node": "vitest run",
+    "typecheck": "tsc -p tsconfig.dev.json --noEmit",
     "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
-    "@interop/data-integrity-core": "^7.0.0",
-    "@interop/ecdsa-multikey": "^2.3.0",
+    "@interop/data-integrity-core": "^8.0.0",
+    "@interop/ecdsa-multikey": "^2.3.1",
     "@noble/curves": "^2.2.0",
     "@scure/base": "^2.2.0",
     "@stablelib/chacha": "^2.0.1",
@@ -48,10 +49,10 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@interop/did-io": "^4.0.4",
-    "@interop/did-method-key": "^7.3.1",
+    "@interop/did-io": "^4.0.5",
+    "@interop/did-method-key": "^7.3.2",
     "@interop/ed25519-verification-key": "^8.0.0",
-    "@interop/x25519-key-agreement-key": "^4.0.2",
+    "@interop/x25519-key-agreement-key": "^5.1.0",
     "@playwright/test": "^1.60.0",
     "@types/node": "^25.9.1",
     "@vitest/coverage-v8": "^4.1.7",