@keetanetwork/anchor 0.0.1

package/lib/certificates.js

@@ -0,0 +1,463 @@
+import * as KeetaNetClient from '@keetanetwork/keetanet-client';
+import * as ASN1 from './utils/asn1.js';
+import { Buffer } from './utils/buffer.js';
+import crypto from './utils/crypto.js';
+import { assertNever } from './utils/never.js';
+/* -----MOVE TO NODE AND ASN1NAPIRS----- */
+function getOID(name, oidDB) {
+    if (name in oidDB) {
+        // eslint-disable-next-line @typescript-eslint/consistent-type-assertions
+        const oid = oidDB[name];
+        if (oid === undefined) {
+            throw (new Error('internal error: OID was undefined'));
+        }
+        return (oid);
+    }
+    else {
+        throw (new Error('Unknown algorithm'));
+    }
+}
+function lookupByOID(oid, oidDB) {
+    for (const [key, value] of Object.entries(oidDB)) {
+        if (key === oid) {
+            return (key);
+        }
+        if (value === oid) {
+            return (key);
+        }
+    }
+    throw (new Error(`Unknown OID: ${oid}`));
+}
+/* -----END MOVE TO NODE AND ASN1NAPIRS----- */
+function toJSON(data) {
+    const retval = JSON.parse(JSON.stringify(data, function (key, convertedValue) {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+        const value = this[key];
+        if (typeof value === 'object' && value !== null) {
+            if ('publicKeyString' in value && typeof value.publicKeyString === 'object' && value.publicKeyString !== null) {
+                if ('get' in value.publicKeyString && typeof value.publicKeyString.get === 'function') {
+                    /*
+                     * If the value has a publicKeyString property that is an
+                     * object with a get method, we assume it is a KeetaNetAccount
+                     * or similar object and we return the public key string
+                     */
+                    // eslint-disable-next-line @typescript-eslint/no-unsafe-call
+                    const publicKeyString = value.publicKeyString.get();
+                    if (typeof publicKeyString === 'string') {
+                        return (publicKeyString);
+                    }
+                }
+            }
+        }
+        if (Buffer.isBuffer(value)) {
+            return (value.toString('base64'));
+        }
+        if (typeof value === 'bigint') {
+            return (value.toString());
+        }
+        return (convertedValue);
+    }));
+    return (retval);
+}
+/*
+ * Because our public interfaces are ArrayBuffers we often need to convert
+ * Buffers to ArrayBuffers -- an alias to the Node function to do that
+ */
+const bufferToArrayBuffer = KeetaNetClient.lib.Utils.Helper.bufferToArrayBuffer.bind(KeetaNetClient.lib.Utils.Helper);
+/**
+ * Sensitive Attribute Schema
+ *
+ * ASN.1 Schema:
+ * SensitiveAttributes DEFINITIONS ::= BEGIN
+ *         SensitiveAttribute ::= SEQUENCE {
+ *                 version        INTEGER { v1(0) },
+ *                 cipher         SEQUENCE {
+ *                         algorithm    OBJECT IDENTIFIER,
+ *                         ivOrNonce    OCTET STRING,
+ *                         key          OCTET STRING
+ *                 },
+ *                 hashedValue    SEQUENCE {
+ *                         encryptedSalt  OCTET STRING,
+ *                         algorithm      OBJECT IDENTIFIER,
+ *                         value          OCTET STRING
+ *                 },
+ *                 encryptedValue OCTET STRING
+ *         }
+ * END
+ *
+ * https://keeta.notion.site/Keeta-KYC-Certificate-Extensions-13e5da848e588042bdcef81fc40458b7
+ *
+ * @internal
+ */
+const SensitiveAttributeSchemaInternal = [
+    0n,
+    [
+        ASN1.ValidateASN1.IsOID,
+        ASN1.ValidateASN1.IsOctetString,
+        ASN1.ValidateASN1.IsOctetString
+    ],
+    [
+        ASN1.ValidateASN1.IsOctetString,
+        ASN1.ValidateASN1.IsOID,
+        ASN1.ValidateASN1.IsOctetString
+    ],
+    ASN1.ValidateASN1.IsOctetString
+];
+/*
+ * Database of permitted algorithms and their OIDs
+ */
+const sensitiveAttributeOIDDB = {
+    'aes-256-gcm': '2.16.840.1.101.3.4.1.46',
+    'aes-256-cbc': '2.16.840.1.101.3.4.1.42',
+    'sha2-256': '2.16.840.1.101.3.4.2.1',
+    'sha3-256': '2.16.840.1.101.3.4.2.8'
+};
+class SensitiveAttributeBuilder {
+    #account;
+    #value;
+    constructor(account, value) {
+        this.#account = account;
+        if (value) {
+            this.set(value);
+        }
+    }
+    set(value) {
+        if (Buffer.isBuffer(value)) {
+            this.#value = value;
+        }
+        else if (typeof value === 'string') {
+            this.#value = Buffer.from(value, 'utf-8');
+        }
+        else {
+            this.#value = Buffer.from(value);
+        }
+        return (this);
+    }
+    async build() {
+        if (this.#value === undefined) {
+            throw (new Error('Value not set'));
+        }
+        const salt = crypto.randomBytes(32);
+        const hashingAlgorithm = KeetaNetClient.lib.Utils.Hash.HashFunctionName;
+        const publicKey = Buffer.from(this.#account.publicKey.get());
+        const cipher = 'aes-256-gcm';
+        const key = crypto.randomBytes(32);
+        const nonce = crypto.randomBytes(12);
+        const encryptedKey = await this.#account.encrypt(key);
+        function encrypt(value) {
+            const cipherObject = crypto.createCipheriv(cipher, key, nonce);
+            let retval = cipherObject.update(value);
+            retval = Buffer.concat([retval, cipherObject.final()]);
+            return (retval);
+        }
+        const encryptedValue = encrypt(this.#value);
+        const encryptedSalt = encrypt(salt);
+        const saltedValue = Buffer.concat([salt, publicKey, encryptedValue, this.#value]);
+        const hashedAndSaltedValue = KeetaNetClient.lib.Utils.Hash.Hash(saltedValue);
+        const attributeStructure = [
+            /* Version */
+            0n,
+            /* Cipher Details */
+            [
+                /* Algorithm */
+                { type: 'oid', oid: getOID(cipher, sensitiveAttributeOIDDB) },
+                /* IV or Nonce */
+                nonce,
+                /* Symmetric key, encrypted with the public key of the account */
+                Buffer.from(encryptedKey)
+            ],
+            /* Hashed Value */
+            [
+                /* Encrypted Salt */
+                Buffer.from(encryptedSalt),
+                /* Hashing Algorithm */
+                { type: 'oid', oid: getOID(hashingAlgorithm, sensitiveAttributeOIDDB) },
+                /* Hash of <Encrypted Salt> || <Public Key> || <Value> */
+                Buffer.from(hashedAndSaltedValue)
+            ],
+            /* Encrypted Value, encrypted with the Cipher above */
+            encryptedValue
+        ];
+        const encodedAttributeObject = ASN1.JStoASN1(attributeStructure);
+        const retval = encodedAttributeObject.toBER();
+        return (retval);
+    }
+}
+class SensitiveAttribute {
+    #account;
+    #info;
+    constructor(account, data) {
+        this.#account = account;
+        this.#info = this.decode(data);
+    }
+    decode(data) {
+        if (Buffer.isBuffer(data)) {
+            data = bufferToArrayBuffer(data);
+        }
+        const dataObject = new ASN1.BufferStorageASN1(data, SensitiveAttributeSchemaInternal);
+        const decodedAttribute = dataObject.getASN1();
+        const decodedVersion = decodedAttribute[0] + 1n;
+        if (decodedVersion !== 1n) {
+            throw (new Error(`Unsupported Sensitive Attribute version (${decodedVersion})`));
+        }
+        return ({
+            version: decodedVersion,
+            publicKey: this.#account.publicKeyString.get(),
+            cipher: {
+                algorithm: lookupByOID(decodedAttribute[1][0].oid, sensitiveAttributeOIDDB),
+                iv: decodedAttribute[1][1],
+                key: decodedAttribute[1][2]
+            },
+            hashedValue: {
+                encryptedSalt: decodedAttribute[2][0],
+                algorithm: lookupByOID(decodedAttribute[2][1].oid, sensitiveAttributeOIDDB),
+                value: decodedAttribute[2][2]
+            },
+            encryptedValue: decodedAttribute[3]
+        });
+    }
+    async #decryptValue(value) {
+        const decryptedKey = await this.#account.decrypt(this.#info.cipher.key);
+        const algorithm = this.#info.cipher.algorithm;
+        const iv = this.#info.cipher.iv;
+        const cipher = crypto.createDecipheriv(algorithm, Buffer.from(decryptedKey), iv);
+        const decryptedValue = cipher.update(value);
+        return (decryptedValue);
+    }
+    /**
+     * Get the value of the sensitive attribute
+     *
+     * This will decrypt the value using the account's private key
+     * and return the value as an ArrayBuffer
+     *
+     * Since sensitive attributes are binary blobs, this returns an
+     * ArrayBuffer
+     */
+    async get() {
+        const decryptedValue = await this.#decryptValue(this.#info.encryptedValue);
+        return (bufferToArrayBuffer(decryptedValue));
+    }
+    /**
+     * Get the value of the sensitive attribute as a string after being
+     * interpreted as UTF-8 ( @see SensitiveAttribute.get for more information)
+     */
+    async getString() {
+        const value = await this.get();
+        return (Buffer.from(value).toString('utf-8'));
+    }
+    /**
+     * Generate a proof that a sensitive attribute is a given value,
+     * which can be validated by a third party using the certificate
+     * and the `validateProof` method
+     */
+    async proove() {
+        const value = await this.get();
+        const salt = await this.#decryptValue(this.#info.hashedValue.encryptedSalt);
+        return ({
+            value: Buffer.from(value).toString('base64'),
+            hash: {
+                salt: salt.toString('base64')
+            }
+        });
+    }
+    /**
+     * Validate the proof that a sensitive attribute is a given value
+     */
+    async validateProof(proof) {
+        const plaintextValue = Buffer.from(proof.value, 'base64');
+        const proofSaltBuffer = Buffer.from(proof.hash.salt, 'base64');
+        const publicKeyBuffer = Buffer.from(this.#account.publicKey.get());
+        const encryptedValue = this.#info.encryptedValue;
+        const hashedAndSaltedValue = KeetaNetClient.lib.Utils.Hash.Hash(Buffer.concat([proofSaltBuffer, publicKeyBuffer, encryptedValue, plaintextValue]));
+        const hashedAndSaltedValueBuffer = Buffer.from(hashedAndSaltedValue);
+        return (this.#info.hashedValue.value.equals(hashedAndSaltedValueBuffer));
+    }
+    toJSON() {
+        return (toJSON(this.#info));
+    }
+}
+/**
+ * Database of attributes
+ */
+const CertificateAttributeOIDDB = {
+    'fullName': '1.3.6.1.4.1.62675.1.0',
+    'dateOfBirth': '1.3.6.1.4.1.62675.1.1',
+    'address': '1.3.6.1.4.1.62675.1.2',
+    'email': '1.3.6.1.4.1.62675.1.3',
+    'phoneNumber': '1.3.6.1.4.1.62675.1.4'
+};
+/**
+ * ASN.1 Schema for Certificate KYC Attributes Extension
+ *
+ * KYCAttributes DEFINITIONS ::= BEGIN
+ *         KYCAttributes ::= SEQUENCE OF Attribute
+ *         Attribute ::= SEQUENCE {
+ *                 -- Name of the attribute
+ *                 name        OBJECT IDENTIFIER,
+ *                 -- Value of this attribute
+ *                 value       CHOICE {
+ *                         -- A plain value, not sensitive
+ *                         plainValue       [0] IMPLICIT OCTET STRING,
+ *                         -- A sensitive value, encoded as a SensitiveAttribute in DER encoding
+ *                         sensitiveValue   [1] IMPLICIT OCTET STRING
+ *                 }
+ *         }
+ * END
+ *
+ * https://keeta.notion.site/Keeta-KYC-Certificate-Extensions-13e5da848e588042bdcef81fc40458b7
+ *
+ */
+const CertificateKYCAttributeSchemaValidation = {
+    sequenceOf: [ASN1.ValidateASN1.IsOID, {
+            choice: [
+                { type: 'context', value: 0, kind: 'implicit', contains: ASN1.ValidateASN1.IsOctetString },
+                { type: 'context', value: 1, kind: 'implicit', contains: ASN1.ValidateASN1.IsOctetString }
+            ]
+        }]
+};
+export class CertificateBuilder extends KeetaNetClient.lib.Utils.Certificate.CertificateBuilder {
+    #attributes = {};
+    /**
+     * Map the parameters from the public interface to the internal
+     * (Certificate library) interface
+     */
+    static mapParams(params) {
+        const paramsCopy = { ...params };
+        let subjectPublicKey;
+        if (paramsCopy.subject) {
+            subjectPublicKey = paramsCopy.subject;
+            delete (paramsCopy.subject);
+        }
+        const retval = paramsCopy;
+        if (subjectPublicKey) {
+            retval.subjectPublicKey = subjectPublicKey;
+        }
+        return (retval);
+    }
+    constructor(params) {
+        super(CertificateBuilder.mapParams(params));
+    }
+    /**
+     * Set a KYC Attribute to a given value
+     */
+    setAttribute(name, sensitive, value) {
+        this.#attributes[name] = { sensitive, value };
+    }
+    async addExtensions(...args) {
+        const retval = await super.addExtensions(...args);
+        const subject = args[0].subjectPublicKey;
+        /* Encode the attributes */
+        const certAttributes = [];
+        for (const [name, attribute] of Object.entries(this.#attributes)) {
+            if (!(name in CertificateAttributeOIDDB)) {
+                throw (new Error(`Unknown attribute: ${name}`));
+            }
+            /*
+             * Since we are iteratively building the certificate, we
+             * can assume that the attribute is always present in
+             * the object
+             */
+            // eslint-disable-next-line @typescript-eslint/consistent-type-assertions
+            const nameOID = CertificateAttributeOIDDB[name];
+            let value;
+            if (attribute.sensitive) {
+                const sensitiveAttribute = new SensitiveAttributeBuilder(subject, attribute.value);
+                value = Buffer.from(await sensitiveAttribute.build());
+            }
+            else {
+                if (typeof attribute.value === 'string') {
+                    value = Buffer.from(attribute.value, 'utf-8');
+                }
+                else {
+                    value = Buffer.from(attribute.value);
+                }
+            }
+            certAttributes.push([{
+                    type: 'oid',
+                    oid: nameOID
+                }, {
+                    type: 'context',
+                    kind: 'implicit',
+                    value: attribute.sensitive ? 1 : 0,
+                    contains: value
+                }]);
+        }
+        if (certAttributes.length > 0) {
+            retval.push(KeetaNetClient.lib.Utils.Certificate.CertificateBuilder.extension('1.3.6.1.4.1.62675.0.0', certAttributes));
+        }
+        return (retval);
+    }
+    /**
+     * Create a Certificate object from the builder
+     *
+     * The parameters passed in are merged with the parameters passed in
+     * when constructing the builder
+     */
+    async build(params) {
+        const paramsCopy = CertificateBuilder.mapParams(params);
+        const certificate = await super.buildDER(paramsCopy);
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define
+        const certificateObject = new Certificate(certificate, {
+            /**
+             * Specify the moment as `null` to avoid validation
+             * of the certificate's validity period.  We don't
+             * care if the certificate is expired or not for
+             * the purposes of this builder.
+             */
+            moment: null
+        });
+        return (certificateObject);
+    }
+}
+export class Certificate extends KeetaNetClient.lib.Utils.Certificate.Certificate {
+    subjectKey;
+    static Builder = CertificateBuilder;
+    /**
+     * User KYC Attributes
+     */
+    attributes = {};
+    constructor(input, options) {
+        super(input, options);
+        this.subjectKey = options?.subjectKey ?? this.subjectPublicKey;
+        super.finalizeConstruction();
+    }
+    finalizeConstruction() {
+        /* Do nothing, we call the super method in the constructor */
+    }
+    processExtension(id, value) {
+        if (super.processExtension(id, value)) {
+            return (true);
+        }
+        if (id === '1.3.6.1.4.1.62675.0.0') {
+            const attributesRaw = new ASN1.BufferStorageASN1(value, CertificateKYCAttributeSchemaValidation).getASN1();
+            for (const attribute of attributesRaw) {
+                const name = lookupByOID(attribute[0].oid, CertificateAttributeOIDDB);
+                const valueKind = attribute[1].value;
+                const value = bufferToArrayBuffer(attribute[1].contains);
+                switch (valueKind) {
+                    case 0:
+                        /* Plain Value */
+                        this.attributes[name] = { sensitive: false, value: value };
+                        break;
+                    case 1:
+                        /* Sensitive Value */
+                        this.attributes[name] = {
+                            sensitive: true,
+                            value: new SensitiveAttribute(this.subjectKey, value)
+                        };
+                        break;
+                    default:
+                        assertNever(valueKind);
+                }
+            }
+            return (true);
+        }
+        return (false);
+    }
+}
+/** @internal */
+export const _Testing = {
+    SensitiveAttributeBuilder,
+    SensitiveAttribute
+};
+//# sourceMappingURL=certificates.js.map

package/lib/certificates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificates.js","sourceRoot":"","sources":["../../src/lib/certificates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,MAAM,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAU/C,2CAA2C;AAC3C,SAAS,MAAM,CAAC,IAAY,EAAE,KAAiC;IAC9D,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QACnB,yEAAyE;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,IAA0B,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,MAAK,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,OAAM,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;SAAM,CAAC;QACP,MAAK,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACvC,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAiC;IAClE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACjB,OAAM,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;QAED,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnB,OAAM,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACF,CAAC;IAED,MAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AACD,+CAA+C;AAE/C,SAAS,MAAM,CAAC,IAAa;IAC5B,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAS,GAAG,EAAE,cAAuB;QAC5F,sEAAsE;QACtE,MAAM,KAAK,GAAY,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjD,IAAI,iBAAiB,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC/G,IAAI,KAAK,IAAI,KAAK,CAAC,eAAe,IAAI,OAAO,KAAK,CAAC,eAAe,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;oBACvF;;;;uBAIG;oBACH,6DAA6D;oBAC7D,MAAM,eAAe,GAAY,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC;oBAC7D,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;wBACzC,OAAM,CAAC,eAAe,CAAC,CAAC;oBACzB,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1B,CAAC;QAED,OAAM,CAAC,cAAc,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC;IAEJ,OAAM,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAEtH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,gCAAgC,GAalC;IACH,EAAE;IACF;QACC,IAAI,CAAC,YAAY,CAAC,KAAK;QACvB,IAAI,CAAC,YAAY,CAAC,aAAa;QAC/B,IAAI,CAAC,YAAY,CAAC,aAAa;KAC/B;IACD;QACC,IAAI,CAAC,YAAY,CAAC,aAAa;QAC/B,IAAI,CAAC,YAAY,CAAC,KAAK;QACvB,IAAI,CAAC,YAAY,CAAC,aAAa;KAC/B;IACD,IAAI,CAAC,YAAY,CAAC,aAAa;CAC/B,CAAC;AASF;;GAEG;AACH,MAAM,uBAAuB,GAAG;IAC/B,aAAa,EAAE,yBAAyB;IACxC,aAAa,EAAE,yBAAyB;IACxC,UAAU,EAAE,wBAAwB;IACpC,UAAU,EAAE,wBAAwB;CACpC,CAAC;AAEF,MAAM,yBAAyB;IACrB,QAAQ,CAAkB;IACnC,MAAM,CAAqB;IAE3B,YAAY,OAAwB,EAAE,KAAqC;QAC1E,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QAExB,IAAI,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IAED,GAAG,CAAC,KAAoC;QACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,OAAM,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAK,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACxE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,aAAa,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEtD,SAAS,OAAO,CAAC,KAAa;YAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACvD,OAAM,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAEpC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,MAAM,oBAAoB,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE7E,MAAM,kBAAkB,GAA6B;YACpD,aAAa;YACb,EAAE;YACF,oBAAoB;YACpB;gBACC,eAAe;gBACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,EAAE;gBAC7D,iBAAiB;gBACjB,KAAK;gBACL,iEAAiE;gBACjE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;aACzB;YACD,kBAAkB;YAClB;gBACC,oBAAoB;gBACpB,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC1B,uBAAuB;gBACvB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,EAAE;gBACvE,yDAAyD;gBACzD,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;aACjC;YACD,sDAAsD;YACtD,cAAc;SACd,CAAC;QACF,MAAM,sBAAsB,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAE9C,OAAM,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACD;AAED,MAAM,kBAAkB;IACd,QAAQ,CAAkB;IAC1B,KAAK,CAA2C;IAEzD,YAAY,OAAwB,EAAE,IAA0B;QAC/D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAEO,MAAM,CAAC,IAA0B;QACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACtF,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QAE9C,MAAM,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAChD,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAK,CAAC,IAAI,KAAK,CAAC,4CAA4C,cAAc,GAAG,CAAC,CAAC,CAAC;QACjF,CAAC;QAED,OAAM,CAAC;YACN,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE;YAC9C,MAAM,EAAE;gBACP,SAAS,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,uBAAuB,CAAC;gBAC3E,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1B,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC3B;YACD,WAAW,EAAE;gBACZ,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,SAAS,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,uBAAuB,CAAC;gBAC3E,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC7B;YACD,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa;QAChC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACjF,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5C,OAAM,CAAC,cAAc,CAAC,CAAC;IACxB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,GAAG;QACR,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAE3E,OAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACd,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,OAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACX,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAE5E,OAAM,CAAC;YACN,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5C,IAAI,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC7B;SACD,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,KAA0C;QAC7D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE/D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAEjD,MAAM,oBAAoB,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QACnJ,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAErE,OAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM;QACL,OAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,CAAC;CACD;AAED;;GAEG;AACH,MAAM,yBAAyB,GAAG;IACjC,UAAU,EAAE,uBAAuB;IACnC,aAAa,EAAE,uBAAuB;IACtC,SAAS,EAAE,uBAAuB;IAClC,OAAO,EAAE,uBAAuB;IAChC,aAAa,EAAE,uBAAuB;CACtC,CAAC;AAYF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,uCAAuC,GAAG;IAC/C,UAAU,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE;YACrC,MAAM,EAAE;gBACP,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,CAAU,EAAE,IAAI,EAAE,UAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE;gBACrH,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,CAAU,EAAE,IAAI,EAAE,UAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE;aACrH;SACD,CAAC;CACoB,CAAC;AAKxB,MAAM,OAAO,kBAAmB,SAAQ,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB;IACrF,WAAW,GAA2E,EAAE,CAAC;IAElG;;;OAGG;IACK,MAAM,CAAC,SAAS,CAAC,MAA0C;QAClE,MAAM,UAAU,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACjC,IAAI,gBAAgB,CAAC;QACrB,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,gBAAgB,GAAG,UAAU,CAAC,OAAO,CAAC;YACtC,OAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,GAA0C,UAAU,CAAC;QACjE,IAAI,gBAAgB,EAAE,CAAC;YACtB,MAAM,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAC5C,CAAC;QACD,OAAM,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED,YAAY,MAA0C;QACrD,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAA+B,EAAE,SAAkB,EAAE,KAA2B;QAC5F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,GAAG,IAA+G;QAC/I,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAEzC,2BAA2B;QAC3B,MAAM,cAAc,GAAkC,EAAE,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,IAAI,yBAAyB,CAAC,EAAE,CAAC;gBAC1C,MAAK,CAAC,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;YAED;;;;eAIG;YACH,yEAAyE;YACzE,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAA8C,CAAC,CAAC;YAE1F,IAAI,KAAa,CAAC;YAClB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACzB,MAAM,kBAAkB,GAAG,IAAI,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;gBACnF,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACP,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACzC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACP,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACF,CAAC;YAED,cAAc,CAAC,IAAI,CAAC,CAAC;oBACpB,IAAI,EAAE,KAAK;oBACX,GAAG,EAAE,OAAO;iBACZ,EAAE;oBACF,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClC,QAAQ,EAAE,KAAK;iBACf,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CACV,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,SAAS,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAC1G,CAAC;QACH,CAAC;QAED,OAAM,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,MAA0C;QACrD,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAErD,mEAAmE;QACnE,MAAM,iBAAiB,GAAG,IAAI,WAAW,CAAC,WAAW,EAAE;YACtD;;;;;eAKG;YACH,MAAM,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,OAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3B,CAAC;CACD;AAED,MAAM,OAAO,WAAY,SAAQ,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW;IAC/D,UAAU,CAAkB;IAC7C,MAAM,CAAU,OAAO,GAA8B,kBAAkB,CAAC;IAExE;;OAEG;IACM,UAAU,GAQf,EAAE,CAAC;IAEP,YAAY,KAAwF,EAAE,OAA8H;QACnO,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEtB,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAE/D,KAAK,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAES,oBAAoB;QAC7B,6DAA6D;IAC9D,CAAC;IAES,gBAAgB,CAAC,EAAU,EAAE,KAAkB;QACxD,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YACvC,OAAM,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QAED,IAAI,EAAE,KAAK,uBAAuB,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,uCAAuC,CAAC,CAAC,OAAO,EAAE,CAAC;YAE3G,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;gBACtE,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBACrC,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAEzD,QAAQ,SAAS,EAAE,CAAC;oBACnB,KAAK,CAAC;wBACL,iBAAiB;wBACjB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;wBAC3D,MAAM;oBACP,KAAK,CAAC;wBACL,qBAAqB;wBACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG;4BACvB,SAAS,EAAE,IAAI;4BACf,KAAK,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;yBACrD,CAAC;wBACF,MAAM;oBACP;wBACC,WAAW,CAAC,SAAS,CAAC,CAAC;gBACzB,CAAC;YACF,CAAC;YAED,OAAM,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QAED,OAAM,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;;AAGF,gBAAgB;AAChB,MAAM,CAAC,MAAM,QAAQ,GAAG;IACvB,yBAAyB;IACzB,kBAAkB;CAClB,CAAC","sourcesContent":["import * as KeetaNetClient from '@keetanetwork/keetanet-client';\nimport * as ASN1 from './utils/asn1.js';\nimport { Buffer } from './utils/buffer.js';\nimport crypto from './utils/crypto.js';\nimport { assertNever } from './utils/never.js';\n\n/* ENUM */\ntype AccountKeyAlgorithm = InstanceType<typeof KeetaNetClient.lib.Account>['keyType'];\n\n/**\n * An alias for the KeetaNetAccount type\n */\ntype KeetaNetAccount = ReturnType<typeof KeetaNetClient.lib.Account.fromSeed<AccountKeyAlgorithm>>;\n\n/* -----MOVE TO NODE AND ASN1NAPIRS----- */\nfunction getOID(name: string, oidDB: { [name: string]: string }) {\n\tif (name in oidDB) {\n\t\t// eslint-disable-next-line @typescript-eslint/consistent-type-assertions\n\t\tconst oid = oidDB[name as keyof typeof oidDB];\n\t\tif (oid === undefined) {\n\t\t\tthrow(new Error('internal error: OID was undefined'));\n\t\t}\n\n\t\treturn(oid);\n\t} else {\n\t\tthrow(new Error('Unknown algorithm'));\n\t}\n}\n\nfunction lookupByOID(oid: string, oidDB: { [name: string]: string }) {\n\tfor (const [key, value] of Object.entries(oidDB)) {\n\t\tif (key === oid) {\n\t\t\treturn(key);\n\t\t}\n\n\t\tif (value === oid) {\n\t\t\treturn(key);\n\t\t}\n\t}\n\n\tthrow(new Error(`Unknown OID: ${oid}`));\n}\n/* -----END MOVE TO NODE AND ASN1NAPIRS----- */\n\nfunction toJSON(data: unknown): unknown {\n\tconst retval: unknown = JSON.parse(JSON.stringify(data, function(key, convertedValue: unknown) {\n\t\t// eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n\t\tconst value: unknown = this[key];\n\n\t\tif (typeof value === 'object' && value !== null) {\n\t\t\tif ('publicKeyString' in value && typeof value.publicKeyString === 'object' && value.publicKeyString !== null) {\n\t\t\t\tif ('get' in value.publicKeyString && typeof value.publicKeyString.get === 'function') {\n\t\t\t\t\t/*\n\t\t\t\t\t * If the value has a publicKeyString property that is an\n\t\t\t\t\t * object with a get method, we assume it is a KeetaNetAccount\n\t\t\t\t\t * or similar object and we return the public key string\n\t\t\t\t\t */\n\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-unsafe-call\n\t\t\t\t\tconst publicKeyString: unknown = value.publicKeyString.get();\n\t\t\t\t\tif (typeof publicKeyString === 'string') {\n\t\t\t\t\t\treturn(publicKeyString);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (Buffer.isBuffer(value)) {\n\t\t\treturn(value.toString('base64'));\n\t\t}\n\t\tif (typeof value === 'bigint') {\n\t\t\treturn(value.toString());\n\t\t}\n\n\t\treturn(convertedValue);\n\t}));\n\n\treturn(retval);\n}\n\n/*\n * Because our public interfaces are ArrayBuffers we often need to convert\n * Buffers to ArrayBuffers -- an alias to the Node function to do that\n */\nconst bufferToArrayBuffer = KeetaNetClient.lib.Utils.Helper.bufferToArrayBuffer.bind(KeetaNetClient.lib.Utils.Helper);\n\n/**\n * Sensitive Attribute Schema\n *\n * ASN.1 Schema:\n * SensitiveAttributes DEFINITIONS ::= BEGIN\n *         SensitiveAttribute ::= SEQUENCE {\n *                 version        INTEGER { v1(0) },\n *                 cipher         SEQUENCE {\n *                         algorithm    OBJECT IDENTIFIER,\n *                         ivOrNonce    OCTET STRING,\n *                         key          OCTET STRING\n *                 },\n *                 hashedValue    SEQUENCE {\n *                         encryptedSalt  OCTET STRING,\n *                         algorithm      OBJECT IDENTIFIER,\n *                         value          OCTET STRING\n *                 },\n *                 encryptedValue OCTET STRING\n *         }\n * END\n *\n * https://keeta.notion.site/Keeta-KYC-Certificate-Extensions-13e5da848e588042bdcef81fc40458b7\n *\n * @internal\n */\nconst SensitiveAttributeSchemaInternal: [\n\tversion: 0n,\n\tcipher: [\n\t\talgorithm: typeof ASN1.ValidateASN1.IsOID,\n\t\tiv: typeof ASN1.ValidateASN1.IsOctetString,\n\t\tkey: typeof ASN1.ValidateASN1.IsOctetString\n\t],\n\thashedValue: [\n\t\tencryptedSalt: typeof ASN1.ValidateASN1.IsOctetString,\n\t\talgorithm: typeof ASN1.ValidateASN1.IsOID,\n\t\tvalue: typeof ASN1.ValidateASN1.IsOctetString\n\t],\n\tencryptedValue: typeof ASN1.ValidateASN1.IsOctetString\n] = [\n\t0n,\n\t[\n\t\tASN1.ValidateASN1.IsOID,\n\t\tASN1.ValidateASN1.IsOctetString,\n\t\tASN1.ValidateASN1.IsOctetString\n\t],\n\t[\n\t\tASN1.ValidateASN1.IsOctetString,\n\t\tASN1.ValidateASN1.IsOID,\n\t\tASN1.ValidateASN1.IsOctetString\n\t],\n\tASN1.ValidateASN1.IsOctetString\n];\n\n/**\n * The Sensitive Attribute Schema\n *\n * @internal\n */\ntype SensitiveAttributeSchema = ASN1.SchemaMap<typeof SensitiveAttributeSchemaInternal>;\n\n/*\n * Database of permitted algorithms and their OIDs\n */\nconst sensitiveAttributeOIDDB = {\n\t'aes-256-gcm': '2.16.840.1.101.3.4.1.46',\n\t'aes-256-cbc': '2.16.840.1.101.3.4.1.42',\n\t'sha2-256': '2.16.840.1.101.3.4.2.1',\n\t'sha3-256': '2.16.840.1.101.3.4.2.8'\n};\n\nclass SensitiveAttributeBuilder {\n\treadonly #account: KeetaNetAccount;\n\t#value: Buffer | undefined;\n\n\tconstructor(account: KeetaNetAccount, value?: Buffer | ArrayBuffer | string) {\n\t\tthis.#account = account;\n\n\t\tif (value) {\n\t\t\tthis.set(value);\n\t\t}\n\t}\n\n\tset(value: Buffer | ArrayBuffer | string) {\n\t\tif (Buffer.isBuffer(value)) {\n\t\t\tthis.#value = value;\n\t\t} else if (typeof value === 'string') {\n\t\t\tthis.#value = Buffer.from(value, 'utf-8');\n\t\t} else {\n\t\t\tthis.#value = Buffer.from(value);\n\t\t}\n\n\t\treturn(this);\n\t}\n\n\tasync build() {\n\t\tif (this.#value === undefined) {\n\t\t\tthrow(new Error('Value not set'));\n\t\t}\n\n\t\tconst salt = crypto.randomBytes(32);\n\n\t\tconst hashingAlgorithm = KeetaNetClient.lib.Utils.Hash.HashFunctionName;\n\t\tconst publicKey = Buffer.from(this.#account.publicKey.get());\n\n\t\tconst cipher = 'aes-256-gcm';\n\t\tconst key = crypto.randomBytes(32);\n\t\tconst nonce = crypto.randomBytes(12);\n\t\tconst encryptedKey = await this.#account.encrypt(key);\n\n\t\tfunction encrypt(value: Buffer) {\n\t\t\tconst cipherObject = crypto.createCipheriv(cipher, key, nonce);\n\t\t\tlet retval = cipherObject.update(value);\n\t\t\tretval = Buffer.concat([retval, cipherObject.final()]);\n\t\t\treturn(retval);\n\t\t}\n\n\t\tconst encryptedValue = encrypt(this.#value);\n\t\tconst encryptedSalt = encrypt(salt);\n\n\t\tconst saltedValue = Buffer.concat([salt, publicKey, encryptedValue, this.#value]);\n\t\tconst hashedAndSaltedValue = KeetaNetClient.lib.Utils.Hash.Hash(saltedValue);\n\n\t\tconst attributeStructure: SensitiveAttributeSchema = [\n\t\t\t/* Version */\n\t\t\t0n,\n\t\t\t/* Cipher Details */\n\t\t\t[\n\t\t\t\t/* Algorithm */\n\t\t\t\t{ type: 'oid', oid: getOID(cipher, sensitiveAttributeOIDDB) },\n\t\t\t\t/* IV or Nonce */\n\t\t\t\tnonce,\n\t\t\t\t/* Symmetric key, encrypted with the public key of the account */\n\t\t\t\tBuffer.from(encryptedKey)\n\t\t\t],\n\t\t\t/* Hashed Value */\n\t\t\t[\n\t\t\t\t/* Encrypted Salt */\n\t\t\t\tBuffer.from(encryptedSalt),\n\t\t\t\t/* Hashing Algorithm */\n\t\t\t\t{ type: 'oid', oid: getOID(hashingAlgorithm, sensitiveAttributeOIDDB) },\n\t\t\t\t/* Hash of <Encrypted Salt> || <Public Key> || <Value> */\n\t\t\t\tBuffer.from(hashedAndSaltedValue)\n\t\t\t],\n\t\t\t/* Encrypted Value, encrypted with the Cipher above */\n\t\t\tencryptedValue\n\t\t];\n\t\tconst encodedAttributeObject = ASN1.JStoASN1(attributeStructure);\n\n\t\tconst retval = encodedAttributeObject.toBER();\n\n\t\treturn(retval);\n\t}\n}\n\nclass SensitiveAttribute {\n\treadonly #account: KeetaNetAccount;\n\treadonly #info: ReturnType<SensitiveAttribute['decode']>;\n\n\tconstructor(account: KeetaNetAccount, data: Buffer | ArrayBuffer) {\n\t\tthis.#account = account;\n\t\tthis.#info = this.decode(data);\n\t}\n\n\tprivate decode(data: Buffer | ArrayBuffer) {\n\t\tif (Buffer.isBuffer(data)) {\n\t\t\tdata = bufferToArrayBuffer(data);\n\t\t}\n\n\t\tconst dataObject = new ASN1.BufferStorageASN1(data, SensitiveAttributeSchemaInternal);\n\t\tconst decodedAttribute = dataObject.getASN1();\n\n\t\tconst decodedVersion = decodedAttribute[0] + 1n;\n\t\tif (decodedVersion !== 1n) {\n\t\t\tthrow(new Error(`Unsupported Sensitive Attribute version (${decodedVersion})`));\n\t\t}\n\n\t\treturn({\n\t\t\tversion: decodedVersion,\n\t\t\tpublicKey: this.#account.publicKeyString.get(),\n\t\t\tcipher: {\n\t\t\t\talgorithm: lookupByOID(decodedAttribute[1][0].oid, sensitiveAttributeOIDDB),\n\t\t\t\tiv: decodedAttribute[1][1],\n\t\t\t\tkey: decodedAttribute[1][2]\n\t\t\t},\n\t\t\thashedValue: {\n\t\t\t\tencryptedSalt: decodedAttribute[2][0],\n\t\t\t\talgorithm: lookupByOID(decodedAttribute[2][1].oid, sensitiveAttributeOIDDB),\n\t\t\t\tvalue: decodedAttribute[2][2]\n\t\t\t},\n\t\t\tencryptedValue: decodedAttribute[3]\n\t\t});\n\t}\n\n\tasync #decryptValue(value: Buffer) {\n\t\tconst decryptedKey = await this.#account.decrypt(this.#info.cipher.key);\n\t\tconst algorithm = this.#info.cipher.algorithm;\n\t\tconst iv = this.#info.cipher.iv;\n\n\t\tconst cipher = crypto.createDecipheriv(algorithm, Buffer.from(decryptedKey), iv);\n\t\tconst decryptedValue = cipher.update(value);\n\n\t\treturn(decryptedValue);\n\t}\n\n\t/**\n\t * Get the value of the sensitive attribute\n\t *\n\t * This will decrypt the value using the account's private key\n\t * and return the value as an ArrayBuffer\n\t *\n\t * Since sensitive attributes are binary blobs, this returns an\n\t * ArrayBuffer\n\t */\n\tasync get(): Promise<ArrayBuffer> {\n\t\tconst decryptedValue = await this.#decryptValue(this.#info.encryptedValue);\n\n\t\treturn(bufferToArrayBuffer(decryptedValue));\n\t}\n\n\t/**\n\t * Get the value of the sensitive attribute as a string after being\n\t * interpreted as UTF-8 ( @see SensitiveAttribute.get for more information)\n\t */\n\tasync getString(): Promise<string> {\n\t\tconst value = await this.get();\n\t\treturn(Buffer.from(value).toString('utf-8'));\n\t}\n\n\t/**\n\t * Generate a proof that a sensitive attribute is a given value,\n\t * which can be validated by a third party using the certificate\n\t * and the `validateProof` method\n\t */\n\tasync proove(): Promise<{ value: string; hash: { salt: string }}> {\n\t\tconst value = await this.get();\n\t\tconst salt = await this.#decryptValue(this.#info.hashedValue.encryptedSalt);\n\n\t\treturn({\n\t\t\tvalue: Buffer.from(value).toString('base64'),\n\t\t\thash: {\n\t\t\t\tsalt: salt.toString('base64')\n\t\t\t}\n\t\t});\n\t}\n\n\t/**\n\t * Validate the proof that a sensitive attribute is a given value\n\t */\n\tasync validateProof(proof: Awaited<ReturnType<this['proove']>>): Promise<boolean> {\n\t\tconst plaintextValue = Buffer.from(proof.value, 'base64');\n\t\tconst proofSaltBuffer = Buffer.from(proof.hash.salt, 'base64');\n\n\t\tconst publicKeyBuffer = Buffer.from(this.#account.publicKey.get());\n\t\tconst encryptedValue = this.#info.encryptedValue;\n\n\t\tconst hashedAndSaltedValue = KeetaNetClient.lib.Utils.Hash.Hash(Buffer.concat([proofSaltBuffer, publicKeyBuffer, encryptedValue, plaintextValue]));\n\t\tconst hashedAndSaltedValueBuffer = Buffer.from(hashedAndSaltedValue);\n\n\t\treturn(this.#info.hashedValue.value.equals(hashedAndSaltedValueBuffer));\n\t}\n\n\ttoJSON(): unknown/* XXX:TODO */ {\n\t\treturn(toJSON(this.#info));\n\t}\n}\n\n/**\n * Database of attributes\n */\nconst CertificateAttributeOIDDB = {\n\t'fullName': '1.3.6.1.4.1.62675.1.0',\n\t'dateOfBirth': '1.3.6.1.4.1.62675.1.1',\n\t'address': '1.3.6.1.4.1.62675.1.2',\n\t'email': '1.3.6.1.4.1.62675.1.3',\n\t'phoneNumber': '1.3.6.1.4.1.62675.1.4'\n};\ntype CertificateAttributeNames = keyof typeof CertificateAttributeOIDDB;\n\ntype BaseCertificateBuilderParams = NonNullable<ConstructorParameters<typeof KeetaNetClient.lib.Utils.Certificate.CertificateBuilder>[0]>;\ntype CertificateBuilderParams = Required<Pick<BaseCertificateBuilderParams, 'issuer' | 'validFrom' | 'validTo' | 'serial' | 'hashLib' | 'issuerDN' | 'subjectDN' | 'isCA'> & {\n\t/**\n\t * The key of the subject -- used for Sensitive Attributes as well\n\t * as the certificate Subject\n\t */\n\tsubject: BaseCertificateBuilderParams['subjectPublicKey'];\n}>;\n\n/**\n * ASN.1 Schema for Certificate KYC Attributes Extension\n *\n * KYCAttributes DEFINITIONS ::= BEGIN\n *         KYCAttributes ::= SEQUENCE OF Attribute\n *         Attribute ::= SEQUENCE {\n *                 -- Name of the attribute\n *                 name        OBJECT IDENTIFIER,\n *                 -- Value of this attribute\n *                 value       CHOICE {\n *                         -- A plain value, not sensitive\n *                         plainValue       [0] IMPLICIT OCTET STRING,\n *                         -- A sensitive value, encoded as a SensitiveAttribute in DER encoding\n *                         sensitiveValue   [1] IMPLICIT OCTET STRING\n *                 }\n *         }\n * END\n *\n * https://keeta.notion.site/Keeta-KYC-Certificate-Extensions-13e5da848e588042bdcef81fc40458b7\n *\n */\nconst CertificateKYCAttributeSchemaValidation = {\n\tsequenceOf: [ASN1.ValidateASN1.IsOID, {\n\t\tchoice: [\n\t\t\t{ type: 'context' as const, value: 0 as const, kind: 'implicit' as const, contains: ASN1.ValidateASN1.IsOctetString },\n\t\t\t{ type: 'context' as const, value: 1 as const, kind: 'implicit' as const, contains: ASN1.ValidateASN1.IsOctetString }\n\t\t]\n\t}]\n} satisfies ASN1.Schema;\n\n/** @internal */\ntype CertificateKYCAttributeSchema = ASN1.SchemaMap<typeof CertificateKYCAttributeSchemaValidation>;\n\nexport class CertificateBuilder extends KeetaNetClient.lib.Utils.Certificate.CertificateBuilder {\n\treadonly #attributes: { [name: string]: { sensitive: boolean; value: ArrayBuffer | string }} = {};\n\n\t/**\n\t * Map the parameters from the public interface to the internal\n\t * (Certificate library) interface\n\t */\n\tprivate static mapParams(params?: Partial<CertificateBuilderParams>): Partial<BaseCertificateBuilderParams> {\n\t\tconst paramsCopy = { ...params };\n\t\tlet subjectPublicKey;\n\t\tif (paramsCopy.subject) {\n\t\t\tsubjectPublicKey = paramsCopy.subject;\n\t\t\tdelete(paramsCopy.subject);\n\t\t}\n\t\tconst retval: Partial<BaseCertificateBuilderParams> = paramsCopy;\n\t\tif (subjectPublicKey) {\n\t\t\tretval.subjectPublicKey = subjectPublicKey;\n\t\t}\n\t\treturn(retval);\n\t}\n\n\tconstructor(params?: Partial<CertificateBuilderParams>) {\n\t\tsuper(CertificateBuilder.mapParams(params));\n\t}\n\n\t/**\n\t * Set a KYC Attribute to a given value\n\t */\n\tsetAttribute(name: CertificateAttributeNames, sensitive: boolean, value: ArrayBuffer | string): void {\n\t\tthis.#attributes[name] = { sensitive, value };\n\t}\n\n\tprotected async addExtensions(...args: Parameters<InstanceType<typeof KeetaNetClient.lib.Utils.Certificate.CertificateBuilder>['addExtensions']>): ReturnType<InstanceType<typeof KeetaNetClient.lib.Utils.Certificate.CertificateBuilder>['addExtensions']> {\n\t\tconst retval = await super.addExtensions(...args);\n\n\t\tconst subject = args[0].subjectPublicKey;\n\n\t\t/* Encode the attributes */\n\t\tconst certAttributes: CertificateKYCAttributeSchema = [];\n\t\tfor (const [name, attribute] of Object.entries(this.#attributes)) {\n\t\t\tif (!(name in CertificateAttributeOIDDB)) {\n\t\t\t\tthrow(new Error(`Unknown attribute: ${name}`));\n\t\t\t}\n\n\t\t\t/*\n\t\t\t * Since we are iteratively building the certificate, we\n\t\t\t * can assume that the attribute is always present in\n\t\t\t * the object\n\t\t\t */\n\t\t\t// eslint-disable-next-line @typescript-eslint/consistent-type-assertions\n\t\t\tconst nameOID = CertificateAttributeOIDDB[name as keyof typeof CertificateAttributeOIDDB];\n\n\t\t\tlet value: Buffer;\n\t\t\tif (attribute.sensitive) {\n\t\t\t\tconst sensitiveAttribute = new SensitiveAttributeBuilder(subject, attribute.value);\n\t\t\t\tvalue = Buffer.from(await sensitiveAttribute.build());\n\t\t\t} else {\n\t\t\t\tif (typeof attribute.value === 'string') {\n\t\t\t\t\tvalue = Buffer.from(attribute.value, 'utf-8');\n\t\t\t\t} else {\n\t\t\t\t\tvalue = Buffer.from(attribute.value);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tcertAttributes.push([{\n\t\t\t\ttype: 'oid',\n\t\t\t\toid: nameOID\n\t\t\t}, {\n\t\t\t\ttype: 'context',\n\t\t\t\tkind: 'implicit',\n\t\t\t\tvalue: attribute.sensitive ? 1 : 0,\n\t\t\t\tcontains: value\n\t\t\t}]);\n\t\t}\n\n\t\tif (certAttributes.length > 0) {\n\t\t\tretval.push(\n\t\t\t\tKeetaNetClient.lib.Utils.Certificate.CertificateBuilder.extension('1.3.6.1.4.1.62675.0.0', certAttributes)\n\t\t\t);\n\t\t}\n\n\t\treturn(retval);\n\t}\n\n\t/**\n\t * Create a Certificate object from the builder\n\t *\n\t * The parameters passed in are merged with the parameters passed in\n\t * when constructing the builder\n\t */\n\tasync build(params?: Partial<CertificateBuilderParams>): Promise<Certificate> {\n\t\tconst paramsCopy = CertificateBuilder.mapParams(params);\n\t\tconst certificate = await super.buildDER(paramsCopy);\n\n\t\t// eslint-disable-next-line @typescript-eslint/no-use-before-define\n\t\tconst certificateObject = new Certificate(certificate, {\n\t\t\t/**\n\t\t\t * Specify the moment as `null` to avoid validation\n\t\t\t * of the certificate's validity period.  We don't\n\t\t\t * care if the certificate is expired or not for\n\t\t\t * the purposes of this builder.\n\t\t\t */\n\t\t\tmoment: null\n\t\t});\n\n\t\treturn(certificateObject);\n\t}\n}\n\nexport class Certificate extends KeetaNetClient.lib.Utils.Certificate.Certificate {\n\tprivate readonly subjectKey: KeetaNetAccount;\n\tstatic readonly Builder: typeof CertificateBuilder = CertificateBuilder;\n\n\t/**\n\t * User KYC Attributes\n\t */\n\treadonly attributes: {\n\t\t[name: string]: {\n\t\t\tsensitive: true;\n\t\t\tvalue: SensitiveAttribute;\n\t\t} | {\n\t\t\tsensitive: false;\n\t\t\tvalue: ArrayBuffer;\n\t\t}\n\t} = {};\n\n\tconstructor(input: ConstructorParameters<typeof KeetaNetClient.lib.Utils.Certificate.Certificate>[0], options?: ConstructorParameters<typeof KeetaNetClient.lib.Utils.Certificate.Certificate>[1] & { subjectKey?: KeetaNetAccount }) {\n\t\tsuper(input, options);\n\n\t\tthis.subjectKey = options?.subjectKey ?? this.subjectPublicKey;\n\n\t\tsuper.finalizeConstruction();\n\t}\n\n\tprotected finalizeConstruction(): void {\n\t\t/* Do nothing, we call the super method in the constructor */\n\t}\n\n\tprotected processExtension(id: string, value: ArrayBuffer): boolean {\n\t\tif (super.processExtension(id, value)) {\n\t\t\treturn(true);\n\t\t}\n\n\t\tif (id === '1.3.6.1.4.1.62675.0.0') {\n\t\t\tconst attributesRaw = new ASN1.BufferStorageASN1(value, CertificateKYCAttributeSchemaValidation).getASN1();\n\n\t\t\tfor (const attribute of attributesRaw) {\n\t\t\t\tconst name = lookupByOID(attribute[0].oid, CertificateAttributeOIDDB);\n\t\t\t\tconst valueKind = attribute[1].value;\n\t\t\t\tconst value = bufferToArrayBuffer(attribute[1].contains);\n\n\t\t\t\tswitch (valueKind) {\n\t\t\t\t\tcase 0:\n\t\t\t\t\t\t/* Plain Value */\n\t\t\t\t\t\tthis.attributes[name] = { sensitive: false, value: value };\n\t\t\t\t\t\tbreak;\n\t\t\t\t\tcase 1:\n\t\t\t\t\t\t/* Sensitive Value */\n\t\t\t\t\t\tthis.attributes[name] = {\n\t\t\t\t\t\t\tsensitive: true,\n\t\t\t\t\t\t\tvalue: new SensitiveAttribute(this.subjectKey, value)\n\t\t\t\t\t\t};\n\t\t\t\t\t\tbreak;\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tassertNever(valueKind);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn(true);\n\t\t}\n\n\t\treturn(false);\n\t}\n}\n\n/** @internal */\nexport const _Testing = {\n\tSensitiveAttributeBuilder,\n\tSensitiveAttribute\n};\n"]}

package/lib/encrypted-container.d.ts

@@ -0,0 +1,106 @@
+import { lib as KeetaNetLib } from '@keetanetwork/keetanet-client';
+import { Buffer } from './utils/buffer.js';
+declare const Account: typeof KeetaNetLib.Account;
+type Account = InstanceType<typeof KeetaNetLib.Account>;
+type CipherOptions = {
+    /**
+     * The symmetric cipher key (if any)
+     */
+    cipherKey: Buffer | undefined;
+    /**
+     * The symmetric cipher IV (if any)
+     */
+    cipherIV: Buffer | undefined;
+    /**
+     * The symmetric cipher algorithm
+     */
+    cipherAlgo: string;
+};
+type EncryptedContainerInfo = Pick<CipherOptions, 'cipherAlgo'> & {
+    /**
+     * Set of accounts which can access the data
+     */
+    principals: Account[];
+};
+type UnencryptedContainerInfo = {
+    /**
+     * Unencrypted container should not have any principals
+     */
+    principals: null;
+};
+export declare class EncryptedContainer {
+    #private;
+    private static readonly algorithm;
+    /**
+     * Encryption details
+     */
+    protected _internalState: EncryptedContainerInfo | UnencryptedContainerInfo;
+    constructor(principals: Account[] | null);
+    get encrypted(): boolean;
+    /**
+     * Create an instance of the EncryptedContainer from an encrypted blob,
+     * it will need to be decryptable with one of the specified principals
+     *
+     * After decryption happens, the list of principals with access to the
+     * resource will be reset to what is contained within the encrypted
+     * container
+     */
+    static fromEncryptedBuffer(data: Buffer, principals: Account[]): EncryptedContainer;
+    static fromEncodedBuffer(data: Buffer, principals: Account[] | null): EncryptedContainer;
+    /**
+     * Create an instance of the EncryptedContainer from a plaintext.
+     *
+     * It will be decryptable by any one of the specified principals
+     *
+     * @param data The plaintext data to encrypt or encode
+     * @param principals The list of principals who can access the data if it is null then the data is not encrypted
+     * @param locked If true, the plaintext data will not be accessible from this instance; otherwise it will be -- default depends on principals
+     * @returns The EncryptedContainer instance with the plaintext data and principals set
+     */
+    static fromPlaintext(data: string | Buffer, principals: Account[] | null, locked?: boolean): EncryptedContainer;
+    /**
+     * Set the plaintext buffer to the specified value
+     */
+    setPlaintext(data: string | Buffer): void;
+    private get _encoded();
+    private get _plaintext();
+    /**
+     * Grant access to the secret for account(s) synchronously.  This
+     * assumes the plaintext has already been computed and will fail
+     * if it is not
+     */
+    grantAccessSync(accounts: Account[] | Account): void;
+    /**
+     * Grant access to the secret for account(s).
+     */
+    grantAccess(accounts: Account[] | Account): Promise<void>;
+    /**
+     * Revoke access to the secret for an account synchronously.  This
+     * assumes the plaintext has already been computed and will fail
+     * if it is not
+     */
+    revokeAccessSync(account: Account): void;
+    /**
+     * Revoke access to the secret for an account
+     */
+    revokeAccess(account: Account): Promise<void>;
+    /**
+     * Disable access to the plaintext from this instance
+     */
+    disablePlaintext(): void;
+    /**
+     * Get the plaintext for this instance
+     */
+    getPlaintext(): Promise<Buffer>;
+    /**
+     * Get the serializable buffer which can be stored and reconstructed
+     */
+    getEncodedBuffer(): Promise<Buffer>;
+    /**
+     * Get the list of accounts which have access to read the plaintext of
+     * this container
+     */
+    get principals(): Account[];
+}
+export default EncryptedContainer;
+//# sourceMappingURL=encrypted-container.d.ts.map

package/lib/encrypted-container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-container.d.ts","sourceRoot":"","sources":["../../src/lib/encrypted-container.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAKnE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAO3C,QAAA,MAAM,OAAO,EAAE,OAAO,WAAW,CAAC,OAA6B,CAAC;AAChE,KAAK,OAAO,GAAG,YAAY,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AA0FxD,KAAK,aAAa,GAAG;IACpB;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACnB,CAAA;AA0TD,KAAK,sBAAsB,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,GAAG;IACjE;;OAEG;IACH,UAAU,EAAE,OAAO,EAAE,CAAC;CACtB,CAAA;AAED,KAAK,wBAAwB,GAAG;IAC/B;;OAEG;IACH,UAAU,EAAE,IAAI,CAAC;CACjB,CAAA;AAED,qBAAa,kBAAkB;;IAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAOlD;;OAEG;IACH,SAAS,CAAC,cAAc,EAAE,sBAAsB,GAAG,wBAAwB,CAAC;gBAUhE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI;IAcxC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAMD;;;;;;;OAOG;IACH,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,kBAAkB;IASnF,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,GAAG,kBAAkB;IASxF;;;;;;;;;OASG;IACH,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,kBAAkB;IAmB/G;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAezC,OAAO,KAAK,QAAQ,GAMnB;IAED,OAAO,KAAK,UAAU,GAMrB;IA8JD;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI;IAmBpD;;OAEG;IACG,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/D;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAiBxC;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAmBrC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAezC;;;OAGG;IACH,IAAI,UAAU,IAAI,OAAO,EAAE,CAM1B;CACD;AAQD,eAAe,kBAAkB,CAAC"}