@lindorm/aes 0.1.2 → 0.2.0

package/dist/utils/private/aes-data/auth-tag.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._assertAuthTag = exports._createAuthTag = void 0;
+const errors_1 = require("../../../errors");
+const auth_tag_hmac_1 = require("./auth-tag-hmac");
+const _createAuthTag = ({ encryption, cipher, content, hashKey, initialisationVector, }) => {
+    switch (encryption) {
+        case "A128CBC-HS256":
+        case "A192CBC-HS384":
+        case "A256CBC-HS512":
+            return (0, auth_tag_hmac_1._createHmacAuthTag)({
+                content,
+                encryption,
+                hashKey,
+                initialisationVector,
+            });
+        case "A128GCM":
+        case "A192GCM":
+        case "A256GCM":
+            return cipher.getAuthTag();
+        default:
+            throw new errors_1.AesError("Unexpected algorithm");
+    }
+};
+exports._createAuthTag = _createAuthTag;
+const _assertAuthTag = ({ authTag, content, hashKey, decipher, encryption, initialisationVector, }) => {
+    if (!authTag) {
+        throw new errors_1.AesError("Auth tag is missing");
+    }
+    switch (encryption) {
+        case "A128CBC-HS256":
+        case "A192CBC-HS384":
+        case "A256CBC-HS512":
+            (0, auth_tag_hmac_1._assertHmacAuthTag)({
+                authTag,
+                content,
+                encryption,
+                hashKey,
+                initialisationVector,
+            });
+            return;
+        case "A128GCM":
+        case "A192GCM":
+        case "A256GCM":
+            decipher.setAuthTag(authTag);
+            return;
+        default:
+            throw new errors_1.AesError("Unexpected algorithm");
+    }
+};
+exports._assertAuthTag = _assertAuthTag;
+//# sourceMappingURL=auth-tag.js.map

package/dist/utils/private/aes-data/auth-tag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tag.js","sourceRoot":"","sources":["../../../../src/utils/private/aes-data/auth-tag.ts"],"names":[],"mappings":";;;AACA,4CAA2C;AAE3C,mDAAyE;AAElE,MAAM,cAAc,GAAG,CAAC,EAC7B,UAAU,EACV,MAAM,EACN,OAAO,EACP,OAAO,EACP,oBAAoB,GACF,EAAU,EAAE;IAC9B,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,IAAA,kCAAkB,EAAC;gBACxB,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,oBAAoB;aACrB,CAAC,CAAC;QAEL,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAQ,MAAoB,CAAC,UAAU,EAAE,CAAC;QAE5C;YACE,MAAM,IAAI,iBAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC;AA1BW,QAAA,cAAc,kBA0BzB;AAEK,MAAM,cAAc,GAAG,CAAC,EAC7B,OAAO,EACP,OAAO,EACP,OAAO,EACP,QAAQ,EACR,UAAU,EACV,oBAAoB,GACF,EAAQ,EAAE;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,iBAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAED,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,IAAA,kCAAkB,EAAC;gBACjB,OAAO;gBACP,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,oBAAoB;aACrB,CAAC,CAAC;YACH,OAAO;QAET,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACX,QAAwB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO;QAET;YACE,MAAM,IAAI,iBAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC;AAlCW,QAAA,cAAc,kBAkCzB"}

package/dist/utils/private/aes-data/get-initialisation-vector.d.ts

@@ -0,0 +1,4 @@
+/// <reference types="node" />
+import { KryptosEncryption } from "@lindorm/kryptos";
+export declare const _getInitialisationVector: (encryption: KryptosEncryption) => Buffer;
+//# sourceMappingURL=get-initialisation-vector.d.ts.map

package/dist/utils/private/aes-data/get-initialisation-vector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-initialisation-vector.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/aes-data/get-initialisation-vector.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,eAAO,MAAM,wBAAwB,eAAgB,iBAAiB,KAAG,MAiBxE,CAAC"}

package/dist/utils/private/{get-initialisation-vector.js → aes-data/get-initialisation-vector.js}

@@ -2,16 +2,16 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports._getInitialisationVector = void 0;
 const crypto_1 = require("crypto");
-const errors_1 = require("../../errors");
+const errors_1 = require("../../../errors");
 const _getInitialisationVector = (encryption) => {
     switch (encryption) {
-        case "aes-128-cbc":
-        case "aes-192-cbc":
-        case "aes-256-cbc":
+        case "A128CBC-HS256":
+        case "A192CBC-HS384":
+        case "A256CBC-HS512":
             return (0, crypto_1.randomBytes)(16);
-        case "aes-128-gcm":
-        case "aes-192-gcm":
-        case "aes-256-gcm":
+        case "A128GCM":
+        case "A192GCM":
+        case "A256GCM":
             return (0, crypto_1.randomBytes)(12);
         default:
             throw new errors_1.AesError("Unexpected algorithm", {

package/dist/utils/private/aes-data/get-initialisation-vector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-initialisation-vector.js","sourceRoot":"","sources":["../../../../src/utils/private/aes-data/get-initialisation-vector.ts"],"names":[],"mappings":";;;AACA,mCAAqC;AACrC,4CAA2C;AAEpC,MAAM,wBAAwB,GAAG,CAAC,UAA6B,EAAU,EAAE;IAChF,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QAEzB,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QAEzB;YACE,MAAM,IAAI,iBAAQ,CAAC,sBAAsB,EAAE;gBACzC,KAAK,EAAE,EAAE,UAAU,EAAE;aACtB,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAjBW,QAAA,wBAAwB,4BAiBnC"}

package/dist/utils/private/aes-data/split-content-encryption-key.d.ts

@@ -0,0 +1,9 @@
+/// <reference types="node" />
+import { KryptosEncryption } from "@lindorm/kryptos";
+type Result = {
+    encryptionKey: Buffer;
+    hashKey: Buffer;
+};
+export declare const _splitContentEncryptionKey: (encryption: KryptosEncryption, contentEncryptionKey: Buffer) => Result;
+export {};
+//# sourceMappingURL=split-content-encryption-key.d.ts.map

package/dist/utils/private/aes-data/split-content-encryption-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"split-content-encryption-key.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/aes-data/split-content-encryption-key.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,KAAK,MAAM,GAAG;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAqBF,eAAO,MAAM,0BAA0B,eACzB,iBAAiB,wBACP,MAAM,KAC3B,MAcF,CAAC"}

package/dist/utils/private/aes-data/split-content-encryption-key.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._splitContentEncryptionKey = void 0;
+const errors_1 = require("../../../errors");
+const encryptionKeyLength = (encryption) => {
+    switch (encryption) {
+        case "A128CBC-HS256":
+        case "A128GCM":
+            return 16;
+        case "A192CBC-HS384":
+        case "A192GCM":
+            return 24;
+        case "A256CBC-HS512":
+        case "A256GCM":
+            return 32;
+        default:
+            throw new errors_1.AesError("Unexpected algorithm");
+    }
+};
+const _splitContentEncryptionKey = (encryption, contentEncryptionKey) => {
+    const keyLength = encryptionKeyLength(encryption);
+    const encryptionKey = contentEncryptionKey.subarray(0, keyLength);
+    const hashKey = contentEncryptionKey.subarray(keyLength);
+    if (hashKey.length &&
+        (encryption === "A128GCM" || encryption === "A192GCM" || encryption === "A256GCM")) {
+        throw new errors_1.AesError("Unexpected hash key");
+    }
+    return { encryptionKey, hashKey };
+};
+exports._splitContentEncryptionKey = _splitContentEncryptionKey;
+//# sourceMappingURL=split-content-encryption-key.js.map

package/dist/utils/private/aes-data/split-content-encryption-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"split-content-encryption-key.js","sourceRoot":"","sources":["../../../../src/utils/private/aes-data/split-content-encryption-key.ts"],"names":[],"mappings":";;;AAEA,4CAA2C;AAO3C,MAAM,mBAAmB,GAAG,CAAC,UAA6B,EAAgB,EAAE;IAC1E,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,eAAe,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QAEZ,KAAK,eAAe,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QAEZ,KAAK,eAAe,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QAEZ;YACE,MAAM,IAAI,iBAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,0BAA0B,GAAG,CACxC,UAA6B,EAC7B,oBAA4B,EACpB,EAAE;IACV,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAElD,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEzD,IACE,OAAO,CAAC,MAAM;QACd,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,CAAC,EAClF,CAAC;QACD,MAAM,IAAI,iBAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC,CAAC;AAjBW,QAAA,0BAA0B,8BAiBrC"}

package/dist/utils/private/aes-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aes-data.d.ts","sourceRoot":"","sources":["../../../src/utils/private/aes-data.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAM9F,eAAO,MAAM,eAAe,YAAa,qBAAqB,KAAG,iBA4ChE,CAAC;AAEF,eAAO,MAAM,eAAe,YAAa,qBAAqB,KAAG,MAkChE,CAAC"}
+{"version":3,"file":"aes-data.d.ts","sourceRoot":"","sources":["../../../src/utils/private/aes-data.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAQrB,eAAO,MAAM,eAAe,YAAa,qBAAqB,KAAG,iBAkDhE,CAAC;AAEF,eAAO,MAAM,eAAe,YAAa,qBAAqB,KAAG,MA0ChE,CAAC"}

package/dist/utils/private/aes-data.js

@@ -3,38 +3,42 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports._decryptAesData = exports._encryptAesData = void 0;
 const crypto_1 = require("crypto");
 const constants_1 = require("../../constants");
-const auth_tag_1 = require("./auth-tag");
-const get_decryption_key_1 = require("./get-decryption-key");
-const get_encryption_keys_1 = require("./get-encryption-keys");
-const get_initialisation_vector_1 = require("./get-initialisation-vector");
+const auth_tag_1 = require("./aes-data/auth-tag");
+const get_initialisation_vector_1 = require("./aes-data/get-initialisation-vector");
+const split_content_encryption_key_1 = require("./aes-data/split-content-encryption-key");
+const calculate_aes_encryption_1 = require("./calculate/calculate-aes-encryption");
+const get_decryption_key_1 = require("./get-key/get-decryption-key");
+const get_encryption_key_1 = require("./get-key/get-encryption-key");
 const _encryptAesData = (options) => {
-    const { data, encryption = "aes-256-gcm", encryptionKeyAlgorithm, format = "base64url", integrityHash, kryptos, } = options;
-    const { encryptionKey, publicEncryptionJwk, publicEncryptionKey } = (0, get_encryption_keys_1._getEncryptionKeys)({
+    const { data, encryption = "A256GCM", format = "base64url", kryptos } = options;
+    const { contentEncryptionKey, hkdfSalt, pbkdfIterations, pbkdfSalt, publicEncryptionJwk, publicEncryptionKey, } = (0, get_encryption_key_1._getEncryptionKey)({
         encryption,
         kryptos,
-        encryptionKeyAlgorithm,
     });
+    const { encryptionKey, hashKey } = (0, split_content_encryption_key_1._splitContentEncryptionKey)(encryption, contentEncryptionKey);
+    const aesEncryption = (0, calculate_aes_encryption_1._calculateAesEncryption)(encryption);
     const initialisationVector = (0, get_initialisation_vector_1._getInitialisationVector)(encryption);
-    const cipher = (0, crypto_1.createCipheriv)(encryption, encryptionKey, initialisationVector);
+    const cipher = (0, crypto_1.createCipheriv)(aesEncryption, encryptionKey, initialisationVector);
     const buffer = Buffer.isBuffer(data) ? data : Buffer.from(data);
     const content = Buffer.concat([cipher.update(buffer), cipher.final()]);
-    const authTag = (0, auth_tag_1._getAuthTag)({
-        encryption,
+    const authTag = (0, auth_tag_1._createAuthTag)({
         cipher,
         content,
-        encryptionKey,
+        hashKey,
+        encryption,
         initialisationVector,
-        integrityHash,
     });
     return {
-        encryption,
+        algorithm: kryptos.algorithm,
         authTag,
         content,
+        encryption,
         format,
+        hkdfSalt,
         initialisationVector,
-        integrityHash,
-        keyId: kryptos.id ? Buffer.from(kryptos.id, format) : undefined,
-        encryptionKeyAlgorithm: encryptionKeyAlgorithm && publicEncryptionKey ? encryptionKeyAlgorithm : undefined,
+        keyId: Buffer.from(kryptos.id, format),
+        pbkdfIterations,
+        pbkdfSalt,
         publicEncryptionJwk,
         publicEncryptionKey,
         version: constants_1.LATEST_AES_VERSION,
@@ -42,23 +46,26 @@ const _encryptAesData = (options) => {
 };
 exports._encryptAesData = _encryptAesData;
 const _decryptAesData = (options) => {
-    const { authTag, content, encryption, encryptionKeyAlgorithm, initialisationVector, integrityHash, kryptos, publicEncryptionJwk, publicEncryptionKey, } = options;
-    const decryptionKey = (0, get_decryption_key_1._getDecryptionKey)({
+    const { authTag, content, encryption, hkdfSalt, initialisationVector, kryptos, pbkdfIterations, pbkdfSalt, publicEncryptionJwk, publicEncryptionKey, } = options;
+    const { contentEncryptionKey } = (0, get_decryption_key_1._getDecryptionKey)({
         encryption,
-        encryptionKeyAlgorithm,
+        hkdfSalt,
         kryptos,
+        pbkdfIterations,
+        pbkdfSalt,
         publicEncryptionJwk,
         publicEncryptionKey,
     });
-    const decipher = (0, crypto_1.createDecipheriv)(encryption, decryptionKey, initialisationVector);
-    (0, auth_tag_1._setAuthTag)({
-        encryption,
+    const { encryptionKey, hashKey } = (0, split_content_encryption_key_1._splitContentEncryptionKey)(encryption, contentEncryptionKey);
+    const aesEncryption = (0, calculate_aes_encryption_1._calculateAesEncryption)(encryption);
+    const decipher = (0, crypto_1.createDecipheriv)(aesEncryption, encryptionKey, initialisationVector);
+    (0, auth_tag_1._assertAuthTag)({
         authTag,
         content,
+        hashKey,
         decipher,
-        decryptionKey,
+        encryption,
         initialisationVector,
-        integrityHash,
     });
     return Buffer.concat([decipher.update(content), decipher.final()]).toString("utf-8");
 };

package/dist/utils/private/aes-data.js.map

@@ -1 +1 @@
-{"version":3,"file":"aes-data.js","sourceRoot":"","sources":["../../../src/utils/private/aes-data.ts"],"names":[],"mappings":";;;AAAA,mCAA0D;AAC1D,+CAAqD;AAErD,yCAAsD;AACtD,6DAAyD;AACzD,+DAA2D;AAC3D,2EAAuE;AAEhE,MAAM,eAAe,GAAG,CAAC,OAA8B,EAAqB,EAAE;IACnF,MAAM,EACJ,IAAI,EACJ,UAAU,GAAG,aAAa,EAC1B,sBAAsB,EACtB,MAAM,GAAG,WAAW,EACpB,aAAa,EACb,OAAO,GACR,GAAG,OAAO,CAAC;IAEZ,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,GAAG,IAAA,wCAAkB,EAAC;QACrF,UAAU;QACV,OAAO;QACP,sBAAsB;KACvB,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,IAAA,oDAAwB,EAAC,UAAU,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,UAAU,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEvE,MAAM,OAAO,GAAG,IAAA,sBAAW,EAAC;QAC1B,UAAU;QACV,MAAM;QACN,OAAO;QACP,aAAa;QACb,oBAAoB;QACpB,aAAa;KACd,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,OAAO;QACP,OAAO;QACP,MAAM;QACN,oBAAoB;QACpB,aAAa;QACb,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,sBAAsB,EACpB,sBAAsB,IAAI,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS;QACpF,mBAAmB;QACnB,mBAAmB;QACnB,OAAO,EAAE,8BAAkB;KAC5B,CAAC;AACJ,CAAC,CAAC;AA5CW,QAAA,eAAe,mBA4C1B;AAEK,MAAM,eAAe,GAAG,CAAC,OAA8B,EAAU,EAAE;IACxE,MAAM,EACJ,OAAO,EACP,OAAO,EACP,UAAU,EACV,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,OAAO,EACP,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,OAAO,CAAC;IAEZ,MAAM,aAAa,GAAG,IAAA,sCAAiB,EAAC;QACtC,UAAU;QACV,sBAAsB;QACtB,OAAO;QACP,mBAAmB;QACnB,mBAAmB;KACpB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,UAAU,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAEnF,IAAA,sBAAW,EAAC;QACV,UAAU;QACV,OAAO;QACP,OAAO;QACP,QAAQ;QACR,aAAa;QACb,oBAAoB;QACpB,aAAa;KACd,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACvF,CAAC,CAAC;AAlCW,QAAA,eAAe,mBAkC1B"}
+{"version":3,"file":"aes-data.js","sourceRoot":"","sources":["../../../src/utils/private/aes-data.ts"],"names":[],"mappings":";;;AAAA,mCAA0D;AAC1D,+CAAqD;AAMrD,kDAAqE;AACrE,oFAAgF;AAChF,0FAAqF;AACrF,mFAA+E;AAC/E,qEAAiE;AACjE,qEAAiE;AAE1D,MAAM,eAAe,GAAG,CAAC,OAA8B,EAAqB,EAAE;IACnF,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEhF,MAAM,EACJ,oBAAoB,EACpB,QAAQ,EACR,eAAe,EACf,SAAS,EACT,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,IAAA,sCAAiB,EAAC;QACpB,UAAU;QACV,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAA,yDAA0B,EAC3D,UAAU,EACV,oBAAoB,CACrB,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,kDAAuB,EAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,IAAA,oDAAwB,EAAC,UAAU,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEvE,MAAM,OAAO,GAAG,IAAA,yBAAc,EAAC;QAC7B,MAAM;QACN,OAAO;QACP,OAAO;QACP,UAAU;QACV,oBAAoB;KACrB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,OAAO;QACP,UAAU;QACV,MAAM;QACN,QAAQ;QACR,oBAAoB;QACpB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC;QACtC,eAAe;QACf,SAAS;QACT,mBAAmB;QACnB,mBAAmB;QACnB,OAAO,EAAE,8BAAkB;KAC5B,CAAC;AACJ,CAAC,CAAC;AAlDW,QAAA,eAAe,mBAkD1B;AAEK,MAAM,eAAe,GAAG,CAAC,OAA8B,EAAU,EAAE;IACxE,MAAM,EACJ,OAAO,EACP,OAAO,EACP,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,OAAO,EACP,eAAe,EACf,SAAS,EACT,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,OAAO,CAAC;IAEZ,MAAM,EAAE,oBAAoB,EAAE,GAAG,IAAA,sCAAiB,EAAC;QACjD,UAAU;QACV,QAAQ;QACR,OAAO;QACP,eAAe;QACf,SAAS;QACT,mBAAmB;QACnB,mBAAmB;KACpB,CAAC,CAAC;IAEH,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAA,yDAA0B,EAC3D,UAAU,EACV,oBAAoB,CACrB,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,kDAAuB,EAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAEtF,IAAA,yBAAc,EAAC;QACb,OAAO;QACP,OAAO;QACP,OAAO;QACP,QAAQ;QACR,UAAU;QACV,oBAAoB;KACrB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACvF,CAAC,CAAC;AA1CW,QAAA,eAAe,mBA0C1B"}

package/dist/utils/private/calculate/calculate-aes-encryption.d.ts

@@ -0,0 +1,4 @@
+import { KryptosEncryption } from "@lindorm/kryptos";
+import { AesEncryption } from "../../../types";
+export declare const _calculateAesEncryption: (encryption: KryptosEncryption) => AesEncryption;
+//# sourceMappingURL=calculate-aes-encryption.d.ts.map

package/dist/utils/private/calculate/calculate-aes-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-aes-encryption.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-aes-encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,eAAO,MAAM,uBAAuB,eAAgB,iBAAiB,KAAG,aAuBvE,CAAC"}

package/dist/utils/private/calculate/calculate-aes-encryption.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._calculateAesEncryption = void 0;
+const errors_1 = require("../../../errors");
+const _calculateAesEncryption = (encryption) => {
+    switch (encryption) {
+        case "A128CBC-HS256":
+            return "aes-128-cbc";
+        case "A192CBC-HS384":
+            return "aes-192-cbc";
+        case "A256CBC-HS512":
+            return "aes-256-cbc";
+        case "A128GCM":
+            return "aes-128-gcm";
+        case "A192GCM":
+            return "aes-192-gcm";
+        case "A256GCM":
+            return "aes-256-gcm";
+        default:
+            throw new errors_1.AesError("Unsupported encryption algorithm");
+    }
+};
+exports._calculateAesEncryption = _calculateAesEncryption;
+//# sourceMappingURL=calculate-aes-encryption.js.map

package/dist/utils/private/calculate/calculate-aes-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-aes-encryption.js","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-aes-encryption.ts"],"names":[],"mappings":";;;AACA,4CAA2C;AAGpC,MAAM,uBAAuB,GAAG,CAAC,UAA6B,EAAiB,EAAE;IACtF,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QAEvB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QAEvB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QAEvB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QAEvB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QAEvB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QAEvB;YACE,MAAM,IAAI,iBAAQ,CAAC,kCAAkC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC;AAvBW,QAAA,uBAAuB,2BAuBlC"}

package/dist/utils/private/calculate/calculate-content-encryption-key-size.d.ts

@@ -0,0 +1,4 @@
+import { KryptosEncryption } from "@lindorm/kryptos";
+import { AesKeyLength } from "@lindorm/types";
+export declare const _calculateContentEncryptionKeySize: (encryption: KryptosEncryption) => AesKeyLength;
+//# sourceMappingURL=calculate-content-encryption-key-size.d.ts.map

package/dist/utils/private/calculate/calculate-content-encryption-key-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-content-encryption-key-size.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-content-encryption-key-size.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,eAAO,MAAM,kCAAkC,eACjC,iBAAiB,KAC5B,YAuBF,CAAC"}

package/dist/utils/private/calculate/calculate-content-encryption-key-size.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._calculateContentEncryptionKeySize = void 0;
+const errors_1 = require("../../../errors");
+const _calculateContentEncryptionKeySize = (encryption) => {
+    switch (encryption) {
+        case "A128GCM":
+            return 16;
+        case "A192GCM":
+            return 24;
+        case "A256GCM":
+            return 32;
+        case "A128CBC-HS256":
+            return 48;
+        case "A192CBC-HS384":
+            return 72;
+        case "A256CBC-HS512":
+            return 96;
+        default:
+            throw new errors_1.AesError("Unsupported encryption", { debug: { encryption } });
+    }
+};
+exports._calculateContentEncryptionKeySize = _calculateContentEncryptionKeySize;
+//# sourceMappingURL=calculate-content-encryption-key-size.js.map

package/dist/utils/private/calculate/calculate-content-encryption-key-size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-content-encryption-key-size.js","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-content-encryption-key-size.ts"],"names":[],"mappings":";;;AAEA,4CAA2C;AAEpC,MAAM,kCAAkC,GAAG,CAChD,UAA6B,EACf,EAAE;IAChB,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QAEZ,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QAEZ,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QAEZ,KAAK,eAAe;YAClB,OAAO,EAAE,CAAC;QAEZ,KAAK,eAAe;YAClB,OAAO,EAAE,CAAC;QAEZ,KAAK,eAAe;YAClB,OAAO,EAAE,CAAC;QAEZ;YACE,MAAM,IAAI,iBAAQ,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC;AAzBW,QAAA,kCAAkC,sCAyB7C"}

package/dist/utils/private/calculate/calculate-key-wrap-encryption.d.ts

@@ -0,0 +1,5 @@
+import { IKryptos } from "@lindorm/kryptos";
+type KeywrapEncryption = "aes-128-ecb" | "aes-192-ecb" | "aes-256-ecb";
+export declare const _calculateKeyWrapEncryption: (kryptos: IKryptos) => KeywrapEncryption;
+export {};
+//# sourceMappingURL=calculate-key-wrap-encryption.d.ts.map

package/dist/utils/private/calculate/calculate-key-wrap-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-key-wrap-encryption.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-key-wrap-encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,KAAK,iBAAiB,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAEvE,eAAO,MAAM,2BAA2B,YAAa,QAAQ,KAAG,iBAoB/D,CAAC"}

package/dist/utils/private/calculate/calculate-key-wrap-encryption.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._calculateKeyWrapEncryption = void 0;
+const _calculateKeyWrapEncryption = (kryptos) => {
+    switch (kryptos.algorithm) {
+        case "A128KW":
+        case "ECDH-ES+A128KW":
+        case "PBES2-HS256+A128KW":
+            return "aes-128-ecb";
+        case "A192KW":
+        case "ECDH-ES+A192KW":
+        case "PBES2-HS384+A192KW":
+            return "aes-192-ecb";
+        case "A256KW":
+        case "ECDH-ES+A256KW":
+        case "PBES2-HS512+A256KW":
+            return "aes-256-ecb";
+        default:
+            throw new Error("Unsupported keywrap encryption");
+    }
+};
+exports._calculateKeyWrapEncryption = _calculateKeyWrapEncryption;
+//# sourceMappingURL=calculate-key-wrap-encryption.js.map

package/dist/utils/private/calculate/calculate-key-wrap-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-key-wrap-encryption.js","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-key-wrap-encryption.ts"],"names":[],"mappings":";;;AAIO,MAAM,2BAA2B,GAAG,CAAC,OAAiB,EAAqB,EAAE;IAClF,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,aAAa,CAAC;QAEvB,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,aAAa,CAAC;QAEvB,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,aAAa,CAAC;QAEvB;YACE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC;AApBW,QAAA,2BAA2B,+BAoBtC"}

package/dist/utils/private/calculate/calculate-key-wrap-size.d.ts

@@ -0,0 +1,4 @@
+import { KryptosAlgorithm } from "@lindorm/kryptos";
+import { AesKeyLength } from "@lindorm/types";
+export declare const _calculateKeyWrapSize: (algorithm: KryptosAlgorithm) => AesKeyLength;
+//# sourceMappingURL=calculate-key-wrap-size.d.ts.map

package/dist/utils/private/calculate/calculate-key-wrap-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-key-wrap-size.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-key-wrap-size.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,eAAO,MAAM,qBAAqB,cAAe,gBAAgB,KAAG,YAoBnE,CAAC"}

package/dist/utils/private/calculate/calculate-key-wrap-size.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._calculateKeyWrapSize = void 0;
+const errors_1 = require("../../../errors");
+const _calculateKeyWrapSize = (algorithm) => {
+    switch (algorithm) {
+        case "A128KW":
+        case "ECDH-ES+A128KW":
+        case "PBES2-HS256+A128KW":
+            return 16;
+        case "A192KW":
+        case "ECDH-ES+A192KW":
+        case "PBES2-HS384+A192KW":
+            return 24;
+        case "A256KW":
+        case "ECDH-ES+A256KW":
+        case "PBES2-HS512+A256KW":
+            return 32;
+        default:
+            throw new errors_1.AesError("Unsupported algorithm", { debug: { algorithm } });
+    }
+};
+exports._calculateKeyWrapSize = _calculateKeyWrapSize;
+//# sourceMappingURL=calculate-key-wrap-size.js.map

package/dist/utils/private/calculate/calculate-key-wrap-size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-key-wrap-size.js","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-key-wrap-size.ts"],"names":[],"mappings":";;;AAEA,4CAA2C;AAEpC,MAAM,qBAAqB,GAAG,CAAC,SAA2B,EAAgB,EAAE;IACjF,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,EAAE,CAAC;QAEZ,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,EAAE,CAAC;QAEZ,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,EAAE,CAAC;QAEZ;YACE,MAAM,IAAI,iBAAQ,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC;AApBW,QAAA,qBAAqB,yBAoBhC"}

package/dist/utils/private/calculate/calculate-pbkdf-hash.d.ts

@@ -0,0 +1,4 @@
+import { IKryptos } from "@lindorm/kryptos";
+import { ShaAlgorithm } from "@lindorm/types";
+export declare const _calculatePbkdfAlgorithm: (kryptos: IKryptos) => ShaAlgorithm;
+//# sourceMappingURL=calculate-pbkdf-hash.d.ts.map

package/dist/utils/private/calculate/calculate-pbkdf-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-pbkdf-hash.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-pbkdf-hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,eAAO,MAAM,wBAAwB,YAAa,QAAQ,KAAG,YAc5D,CAAC"}

package/dist/utils/private/calculate/calculate-pbkdf-hash.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._calculatePbkdfAlgorithm = void 0;
+const errors_1 = require("../../../errors");
+const _calculatePbkdfAlgorithm = (kryptos) => {
+    switch (kryptos.algorithm) {
+        case "PBES2-HS256+A128KW":
+            return "SHA256";
+        case "PBES2-HS384+A192KW":
+            return "SHA384";
+        case "PBES2-HS512+A256KW":
+            return "SHA512";
+        default:
+            throw new errors_1.AesError("Unsupported PBKDF2 algorithm");
+    }
+};
+exports._calculatePbkdfAlgorithm = _calculatePbkdfAlgorithm;
+//# sourceMappingURL=calculate-pbkdf-hash.js.map

package/dist/utils/private/calculate/calculate-pbkdf-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-pbkdf-hash.js","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-pbkdf-hash.ts"],"names":[],"mappings":";;;AAEA,4CAA2C;AAEpC,MAAM,wBAAwB,GAAG,CAAC,OAAiB,EAAgB,EAAE;IAC1E,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,KAAK,oBAAoB;YACvB,OAAO,QAAQ,CAAC;QAElB,KAAK,oBAAoB;YACvB,OAAO,QAAQ,CAAC;QAElB,KAAK,oBAAoB;YACvB,OAAO,QAAQ,CAAC;QAElB;YACE,MAAM,IAAI,iBAAQ,CAAC,8BAA8B,CAAC,CAAC;IACvD,CAAC;AACH,CAAC,CAAC;AAdW,QAAA,wBAAwB,4BAcnC"}

package/dist/utils/private/calculate/calculate-rsa-oaep-hash.d.ts

@@ -0,0 +1,4 @@
+import { KryptosAlgorithm } from "@lindorm/kryptos";
+import { ShaAlgorithm } from "@lindorm/types";
+export declare const _calculateRsaOaepHash: (algorithm: KryptosAlgorithm) => ShaAlgorithm;
+//# sourceMappingURL=calculate-rsa-oaep-hash.d.ts.map

package/dist/utils/private/calculate/calculate-rsa-oaep-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-rsa-oaep-hash.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-rsa-oaep-hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,eAAO,MAAM,qBAAqB,cAAe,gBAAgB,KAAG,YAmBnE,CAAC"}

package/dist/utils/private/calculate/calculate-rsa-oaep-hash.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._calculateRsaOaepHash = void 0;
+const errors_1 = require("../../../errors");
+const _calculateRsaOaepHash = (algorithm) => {
+    switch (algorithm) {
+        case "RSA-OAEP":
+            return "SHA1";
+        case "RSA-OAEP-256":
+            return "SHA256";
+        case "RSA-OAEP-384":
+            return "SHA384";
+        case "RSA-OAEP-512":
+            return "SHA512";
+        default:
+            throw new errors_1.AesError("Unexpected encryption key algorithm", {
+                debug: { algorithm },
+            });
+    }
+};
+exports._calculateRsaOaepHash = _calculateRsaOaepHash;
+//# sourceMappingURL=calculate-rsa-oaep-hash.js.map

package/dist/utils/private/calculate/calculate-rsa-oaep-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculate-rsa-oaep-hash.js","sourceRoot":"","sources":["../../../../src/utils/private/calculate/calculate-rsa-oaep-hash.ts"],"names":[],"mappings":";;;AAEA,4CAA2C;AAEpC,MAAM,qBAAqB,GAAG,CAAC,SAA2B,EAAgB,EAAE;IACjF,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAEhB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC;QAElB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC;QAElB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC;QAElB;YACE,MAAM,IAAI,iBAAQ,CAAC,qCAAqC,EAAE;gBACxD,KAAK,EAAE,EAAE,SAAS,EAAE;aACrB,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAnBW,QAAA,qBAAqB,yBAmBhC"}

package/dist/utils/private/decode-aes-string.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decode-aes-string.d.ts","sourceRoot":"","sources":["../../../src/utils/private/decode-aes-string.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EAKlB,MAAM,aAAa,CAAC;AAIrB,eAAO,MAAM,gBAAgB,SAAU,MAAM,KAAG,iBAqC/C,CAAC"}
+{"version":3,"file":"decode-aes-string.d.ts","sourceRoot":"","sources":["../../../src/utils/private/decode-aes-string.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKhD,eAAO,MAAM,gBAAgB,SAAU,MAAM,KAAG,iBA6D/C,CAAC"}

package/dist/utils/private/decode-aes-string.js

@@ -2,10 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports._decodeAesString = void 0;
 const errors_1 = require("../../errors");
-const regex = /(?<key>[a-z]+)=(?<value>.+)/g;
+const regex = /(?<key>[a-z0-9]+)=(?<value>.+)/g;
 const _decodeAesString = (data) => {
-    const [_, alg, array, content] = data.split("$");
-    const algorithm = alg;
+    const [_, enc, array, content] = data.split("$");
+    const encryption = enc;
     const items = array.split(",");
     const values = {};
     for (const item of items) {
@@ -17,21 +17,23 @@ const _decodeAesString = (data) => {
         }
         values[match.groups.key] = match.groups.value;
     }
-    const { cek, crv: curve, eka, f, ih, iv, kid, tag, v, x, y, kty: keyType } = values;
+    const { v, f, alg, iv, kid, tag, hks, p2c, p2s, pek, crv: curve, kty: keyType, x, y, } = values;
     const crv = curve;
     const format = f;
     const kty = keyType;
     return {
-        encryption: algorithm,
-        authTag: tag ? Buffer.from(tag, format) : undefined,
+        authTag: Buffer.from(tag, format),
         content: Buffer.from(content, format),
-        encryptionKeyAlgorithm: eka,
+        encryption: encryption,
+        algorithm: alg,
         format,
-        integrityHash: ih,
+        hkdfSalt: hks ? Buffer.from(hks, format) : undefined,
         initialisationVector: Buffer.from(iv, format),
-        keyId: kid ? Buffer.from(kid, format) : undefined,
-        publicEncryptionJwk: crv && x && y && kty ? { crv, x, y, kty } : undefined,
-        publicEncryptionKey: cek ? Buffer.from(cek, format) : undefined,
+        keyId: Buffer.from(kid, format),
+        pbkdfIterations: p2c ? parseInt(p2c, 10) : undefined,
+        pbkdfSalt: p2s ? Buffer.from(p2s, format) : undefined,
+        publicEncryptionJwk: crv && x && kty ? { crv, x, y, kty } : undefined,
+        publicEncryptionKey: pek ? Buffer.from(pek, format) : undefined,
         version: parseInt(v, 10),
     };
 };

package/dist/utils/private/decode-aes-string.js.map

@@ -1 +1 @@
-{"version":3,"file":"decode-aes-string.js","sourceRoot":"","sources":["../../../src/utils/private/decode-aes-string.ts"],"names":[],"mappings":";;;AACA,yCAAwC;AASxC,MAAM,KAAK,GAAG,8BAA8B,CAAC;AAEtC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAqB,EAAE;IAClE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG,GAAiB,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACjD,MAAM,IAAI,iBAAQ,CAAC,2BAA2B,EAAE;gBAC9C,KAAK,EAAE,EAAE,IAAI,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IAChD,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACpF,MAAM,GAAG,GAAG,KAAqB,CAAC;IAClC,MAAM,MAAM,GAAG,CAAiB,CAAC;IACjC,MAAM,GAAG,GAAG,OAAe,CAAC;IAE5B,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACnD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QACrC,sBAAsB,EAAE,GAA6B;QACrD,MAAM;QACN,aAAa,EAAE,EAAmB;QAClC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;QAC7C,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACjD,mBAAmB,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;QAC1E,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;KACzB,CAAC;AACJ,CAAC,CAAC;AArCW,QAAA,gBAAgB,oBAqC3B"}
+{"version":3,"file":"decode-aes-string.js","sourceRoot":"","sources":["../../../src/utils/private/decode-aes-string.ts"],"names":[],"mappings":";;;AAEA,yCAAwC;AAIxC,MAAM,KAAK,GAAG,iCAAiC,CAAC;AAEzC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAqB,EAAE;IAClE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,GAAwB,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACjD,MAAM,IAAI,iBAAQ,CAAC,2BAA2B,EAAE;gBAC9C,KAAK,EAAE,EAAE,IAAI,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IAChD,CAAC;IAED,MAAM,EACJ,CAAC,EACD,CAAC,EAGD,GAAG,EACH,EAAE,EACF,GAAG,EACH,GAAG,EAGH,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EAGH,GAAG,EAAE,KAAK,EACV,GAAG,EAAE,OAAO,EACZ,CAAC,EACD,CAAC,GACF,GAAG,MAAoC,CAAC;IAEzC,MAAM,GAAG,GAAG,KAAqB,CAAC;IAClC,MAAM,MAAM,GAAG,CAAiB,CAAC;IACjC,MAAM,GAAG,GAAG,OAAuB,CAAC;IAEpC,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QACrC,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,GAAuB;QAClC,MAAM;QACN,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACpD,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;QAC7C,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QAC/B,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpD,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,mBAAmB,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;QACrE,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;KACzB,CAAC;AACJ,CAAC,CAAC;AA7DW,QAAA,gBAAgB,oBA6D3B"}

package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.d.ts

@@ -0,0 +1,4 @@
+import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
+export declare const _getDiffieHellmanKeyWrapEncryptionKey: ({ encryption, kryptos, }: CreateCekOptions) => CreateCekResult;
+export declare const _getDiffieHellmanKeyWrapDecryptionKey: ({ hkdfSalt, kryptos, publicEncryptionJwk, publicEncryptionKey, }: DecryptCekOptions) => DecryptCekResult;
+//# sourceMappingURL=diffie-hellman-key-wrap.d.ts.map

package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffie-hellman-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/diffie-hellman/diffie-hellman-key-wrap.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAOhC,eAAO,MAAM,qCAAqC,6BAG/C,gBAAgB,KAAG,eAuBrB,CAAC;AAEF,eAAO,MAAM,qCAAqC,qEAK/C,iBAAiB,KAAG,gBAoBtB,CAAC"}