@lindorm/aes 0.1.3 → 0.2.0

package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._getDiffieHellmanKeyWrapDecryptionKey = exports._getDiffieHellmanKeyWrapEncryptionKey = void 0;
+const crypto_1 = require("crypto");
+const errors_1 = require("../../../errors");
+const calculate_content_encryption_key_size_1 = require("../calculate/calculate-content-encryption-key-size");
+const calculate_key_wrap_size_1 = require("../calculate/calculate-key-wrap-size");
+const hkdf_1 = require("../key-derivation/hkdf");
+const key_wrap_1 = require("../key-wrap/key-wrap");
+const shared_secret_1 = require("./shared-secret");
+const _getDiffieHellmanKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
+    const { publicEncryptionJwk, sharedSecret } = (0, shared_secret_1._generateSharedSecret)(kryptos);
+    const cekSize = (0, calculate_content_encryption_key_size_1._calculateContentEncryptionKeySize)(encryption);
+    const contentEncryptionKey = (0, crypto_1.randomBytes)(cekSize);
+    const { derivedKey, hkdfSalt } = (0, hkdf_1._hkdf)({
+        derivationKey: sharedSecret,
+        keyLength: (0, calculate_key_wrap_size_1._calculateKeyWrapSize)(kryptos.algorithm),
+    });
+    const publicEncryptionKey = (0, key_wrap_1._aesKeyWrap)({
+        contentEncryptionKey,
+        kryptos,
+        keyEncryptionKey: derivedKey,
+    });
+    return {
+        contentEncryptionKey,
+        hkdfSalt,
+        publicEncryptionJwk,
+        publicEncryptionKey,
+    };
+};
+exports._getDiffieHellmanKeyWrapEncryptionKey = _getDiffieHellmanKeyWrapEncryptionKey;
+const _getDiffieHellmanKeyWrapDecryptionKey = ({ hkdfSalt, kryptos, publicEncryptionJwk, publicEncryptionKey, }) => {
+    if (!publicEncryptionKey) {
+        throw new errors_1.AesError("Missing publicEncryptionKey");
+    }
+    const sharedSecret = (0, shared_secret_1._calculateSharedSecret)({ kryptos, publicEncryptionJwk });
+    const { derivedKey } = (0, hkdf_1._hkdf)({
+        derivationKey: sharedSecret,
+        hkdfSalt,
+        keyLength: (0, calculate_key_wrap_size_1._calculateKeyWrapSize)(kryptos.algorithm),
+    });
+    const unwrappedKey = (0, key_wrap_1._aesKeyUnwrap)({
+        keyEncryptionKey: derivedKey,
+        kryptos,
+        wrappedKey: publicEncryptionKey,
+    });
+    return { contentEncryptionKey: unwrappedKey };
+};
+exports._getDiffieHellmanKeyWrapDecryptionKey = _getDiffieHellmanKeyWrapDecryptionKey;
+//# sourceMappingURL=diffie-hellman-key-wrap.js.map

package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffie-hellman-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/diffie-hellman/diffie-hellman-key-wrap.ts"],"names":[],"mappings":";;;AAAA,mCAAqC;AACrC,4CAA2C;AAO3C,8GAAwG;AACxG,kFAA6E;AAC7E,iDAA+C;AAC/C,mDAAkE;AAClE,mDAAgF;AAEzE,MAAM,qCAAqC,GAAG,CAAC,EACpD,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,GAAG,IAAA,qCAAqB,EAAC,OAAO,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAG,IAAA,0EAAkC,EAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAA,YAAK,EAAC;QACrC,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,IAAA,+CAAqB,EAAC,OAAO,CAAC,SAAS,CAAC;KACpD,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,IAAA,sBAAW,EAAC;QACtC,oBAAoB;QACpB,OAAO;QACP,gBAAgB,EAAE,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,QAAQ;QACR,mBAAmB;QACnB,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AA1BW,QAAA,qCAAqC,yCA0BhD;AAEK,MAAM,qCAAqC,GAAG,CAAC,EACpD,QAAQ,EACR,OAAO,EACP,mBAAmB,EACnB,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,sCAAsB,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAE9E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,YAAK,EAAC;QAC3B,aAAa,EAAE,YAAY;QAC3B,QAAQ;QACR,SAAS,EAAE,IAAA,+CAAqB,EAAC,OAAO,CAAC,SAAS,CAAC;KACpD,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAA,wBAAa,EAAC;QACjC,gBAAgB,EAAE,UAAU;QAC5B,OAAO;QACP,UAAU,EAAE,mBAAmB;KAChC,CAAC,CAAC;IAEH,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC;AAChD,CAAC,CAAC;AAzBW,QAAA,qCAAqC,yCAyBhD"}

package/dist/utils/private/diffie-hellman/diffie-hellman.d.ts

@@ -0,0 +1,4 @@
+import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
+export declare const _getDiffieHellmanEncryptionKey: ({ encryption, kryptos, }: CreateCekOptions) => CreateCekResult;
+export declare const _getDiffieHellmanDecryptionKey: ({ encryption, hkdfSalt, kryptos, publicEncryptionJwk, }: DecryptCekOptions) => DecryptCekResult;
+//# sourceMappingURL=diffie-hellman.d.ts.map

package/dist/utils/private/diffie-hellman/diffie-hellman.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffie-hellman.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/diffie-hellman/diffie-hellman.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAKhC,eAAO,MAAM,8BAA8B,6BAGxC,gBAAgB,KAAG,eAcrB,CAAC;AAEF,eAAO,MAAM,8BAA8B,4DAKxC,iBAAiB,KAAG,gBAkBtB,CAAC"}

package/dist/utils/private/diffie-hellman/diffie-hellman.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._getDiffieHellmanDecryptionKey = exports._getDiffieHellmanEncryptionKey = void 0;
+const kryptos_1 = require("@lindorm/kryptos");
+const errors_1 = require("../../../errors");
+const calculate_content_encryption_key_size_1 = require("../calculate/calculate-content-encryption-key-size");
+const hkdf_1 = require("../key-derivation/hkdf");
+const shared_secret_1 = require("./shared-secret");
+const _getDiffieHellmanEncryptionKey = ({ encryption, kryptos, }) => {
+    const { publicEncryptionJwk, sharedSecret } = (0, shared_secret_1._generateSharedSecret)(kryptos);
+    const keyLength = (0, calculate_content_encryption_key_size_1._calculateContentEncryptionKeySize)(encryption);
+    const { derivedKey, hkdfSalt } = (0, hkdf_1._hkdf)({
+        derivationKey: sharedSecret,
+        keyLength,
+    });
+    return {
+        contentEncryptionKey: derivedKey,
+        hkdfSalt,
+        publicEncryptionJwk,
+    };
+};
+exports._getDiffieHellmanEncryptionKey = _getDiffieHellmanEncryptionKey;
+const _getDiffieHellmanDecryptionKey = ({ encryption, hkdfSalt, kryptos, publicEncryptionJwk, }) => {
+    if (!kryptos_1.Kryptos.isEc(kryptos) && !kryptos_1.Kryptos.isOkp(kryptos)) {
+        throw new errors_1.AesError("Invalid kryptos type");
+    }
+    if (!publicEncryptionJwk) {
+        throw new errors_1.AesError("Missing publicEncryptionJwk");
+    }
+    const sharedSecret = (0, shared_secret_1._calculateSharedSecret)({ kryptos, publicEncryptionJwk });
+    const keyLength = (0, calculate_content_encryption_key_size_1._calculateContentEncryptionKeySize)(encryption);
+    const { derivedKey } = (0, hkdf_1._hkdf)({
+        derivationKey: sharedSecret,
+        hkdfSalt,
+        keyLength,
+    });
+    return { contentEncryptionKey: derivedKey };
+};
+exports._getDiffieHellmanDecryptionKey = _getDiffieHellmanDecryptionKey;
+//# sourceMappingURL=diffie-hellman.js.map

package/dist/utils/private/diffie-hellman/diffie-hellman.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffie-hellman.js","sourceRoot":"","sources":["../../../../src/utils/private/diffie-hellman/diffie-hellman.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAC3C,4CAA2C;AAO3C,8GAAwG;AACxG,iDAA+C;AAC/C,mDAAgF;AAEzE,MAAM,8BAA8B,GAAG,CAAC,EAC7C,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,GAAG,IAAA,qCAAqB,EAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAA,0EAAkC,EAAC,UAAU,CAAC,CAAC;IAEjE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAA,YAAK,EAAC;QACrC,aAAa,EAAE,YAAY;QAC3B,SAAS;KACV,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB,EAAE,UAAU;QAChC,QAAQ;QACR,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AAjBW,QAAA,8BAA8B,kCAiBzC;AAEK,MAAM,8BAA8B,GAAG,CAAC,EAC7C,UAAU,EACV,QAAQ,EACR,OAAO,EACP,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,iBAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,iBAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,sCAAsB,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAA,0EAAkC,EAAC,UAAU,CAAC,CAAC;IAEjE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,YAAK,EAAC;QAC3B,aAAa,EAAE,YAAY;QAC3B,QAAQ;QACR,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC;AAC9C,CAAC,CAAC;AAvBW,QAAA,8BAA8B,kCAuBzC"}

package/dist/utils/private/diffie-hellman/shared-secret.d.ts

@@ -0,0 +1,13 @@
+/// <reference types="node" />
+import { IKryptos } from "@lindorm/kryptos";
+import { PublicEncryptionJwk } from "../../../types";
+import { DecryptCekOptions } from "../../../types/private";
+type GenerateResult = {
+    publicEncryptionJwk: PublicEncryptionJwk;
+    sharedSecret: Buffer;
+};
+type CalculateSharedSecretOptions = Pick<DecryptCekOptions, "kryptos" | "publicEncryptionJwk">;
+export declare const _generateSharedSecret: (kryptos: IKryptos) => GenerateResult;
+export declare const _calculateSharedSecret: ({ kryptos, publicEncryptionJwk, }: CalculateSharedSecretOptions) => Buffer;
+export {};
+//# sourceMappingURL=shared-secret.d.ts.map

package/dist/utils/private/diffie-hellman/shared-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-secret.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/diffie-hellman/shared-secret.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAW,MAAM,kBAAkB,CAAC;AAGrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,KAAK,cAAc,GAAG;IACpB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,KAAK,4BAA4B,GAAG,IAAI,CACtC,iBAAiB,EACjB,SAAS,GAAG,qBAAqB,CAClC,CAAC;AAeF,eAAO,MAAM,qBAAqB,YAAa,QAAQ,KAAG,cA4BzD,CAAC;AAEF,eAAO,MAAM,sBAAsB,sCAGhC,4BAA4B,KAAG,MAyBjC,CAAC"}

package/dist/utils/private/diffie-hellman/shared-secret.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._calculateSharedSecret = exports._generateSharedSecret = void 0;
+const kryptos_1 = require("@lindorm/kryptos");
+const crypto_1 = require("crypto");
+const errors_1 = require("../../../errors");
+const _generateKryptos = (kryptos) => {
+    if (!kryptos_1.Kryptos.isEc(kryptos) && !kryptos_1.Kryptos.isOkp(kryptos)) {
+        throw new errors_1.AesError("Invalid kryptos type");
+    }
+    return kryptos_1.Kryptos.generate({
+        algorithm: kryptos.algorithm,
+        curve: kryptos.curve,
+        type: kryptos.type,
+        use: "enc",
+    });
+};
+const _generateSharedSecret = (kryptos) => {
+    const pek = _generateKryptos(kryptos);
+    const der = kryptos.export("der");
+    const sender = pek.export("der");
+    if (!sender.privateKey) {
+        throw new errors_1.AesError("Sender private key is missing");
+    }
+    const sharedSecret = (0, crypto_1.diffieHellman)({
+        privateKey: (0, crypto_1.createPrivateKey)({
+            key: sender.privateKey,
+            format: "der",
+            type: "pkcs8",
+        }),
+        publicKey: (0, crypto_1.createPublicKey)({
+            key: der.publicKey,
+            format: "der",
+            type: "spki",
+        }),
+    });
+    const { crv, kty, x, y } = pek.export("jwk");
+    return {
+        publicEncryptionJwk: { crv, kty, x, y },
+        sharedSecret,
+    };
+};
+exports._generateSharedSecret = _generateSharedSecret;
+const _calculateSharedSecret = ({ kryptos, publicEncryptionJwk, }) => {
+    if (!publicEncryptionJwk) {
+        throw new errors_1.AesError("Missing publicEncryptionJwk");
+    }
+    const pek = kryptos_1.Kryptos.from("jwk", { alg: "ECDH-ES", use: "enc", ...publicEncryptionJwk });
+    const der = kryptos.export("der");
+    const receiver = pek.export("der");
+    if (!der.privateKey) {
+        throw new errors_1.AesError("Kryptos private key is missing");
+    }
+    return (0, crypto_1.diffieHellman)({
+        privateKey: (0, crypto_1.createPrivateKey)({
+            key: der.privateKey,
+            format: "der",
+            type: "pkcs8",
+        }),
+        publicKey: (0, crypto_1.createPublicKey)({
+            key: receiver.publicKey,
+            format: "der",
+            type: "spki",
+        }),
+    });
+};
+exports._calculateSharedSecret = _calculateSharedSecret;
+//# sourceMappingURL=shared-secret.js.map

package/dist/utils/private/diffie-hellman/shared-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-secret.js","sourceRoot":"","sources":["../../../../src/utils/private/diffie-hellman/shared-secret.ts"],"names":[],"mappings":";;;AAAA,8CAAqD;AACrD,mCAA0E;AAC1E,4CAA2C;AAc3C,MAAM,gBAAgB,GAAG,CAAC,OAAiB,EAAY,EAAE;IACvD,IAAI,CAAC,iBAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,iBAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,iBAAO,CAAC,QAAQ,CAAC;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,KAAK;KACJ,CAAC,CAAC;AACZ,CAAC,CAAC;AAEK,MAAM,qBAAqB,GAAG,CAAC,OAAiB,EAAkB,EAAE;IACzE,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,sBAAa,EAAC;QACjC,UAAU,EAAE,IAAA,yBAAgB,EAAC;YAC3B,GAAG,EAAE,MAAM,CAAC,UAAU;YACtB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC;QACF,SAAS,EAAE,IAAA,wBAAe,EAAC;YACzB,GAAG,EAAE,GAAG,CAAC,SAAS;YAClB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,OAAO;QACL,mBAAmB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE;QACvC,YAAY;KACb,CAAC;AACJ,CAAC,CAAC;AA5BW,QAAA,qBAAqB,yBA4BhC;AAEK,MAAM,sBAAsB,GAAG,CAAC,EACrC,OAAO,EACP,mBAAmB,GACU,EAAU,EAAE;IACzC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,iBAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAQ,CAAC,gCAAgC,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,IAAA,sBAAa,EAAC;QACnB,UAAU,EAAE,IAAA,yBAAgB,EAAC;YAC3B,GAAG,EAAE,GAAG,CAAC,UAAU;YACnB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC;QACF,SAAS,EAAE,IAAA,wBAAe,EAAC;YACzB,GAAG,EAAE,QAAQ,CAAC,SAAS;YACvB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AA5BW,QAAA,sBAAsB,0BA4BjC"}

package/dist/utils/private/encode-aes-string.d.ts

@@ -1,3 +1,3 @@
 import { AesEncryptionData } from "../../types";
-export declare const _encodeAesString: ({ encryption: algorithm, authTag, content, encryptionKeyAlgorithm, format, initialisationVector, integrityHash, keyId, publicEncryptionJwk, publicEncryptionKey, version, }: AesEncryptionData) => string;
+export declare const _encodeAesString: ({ algorithm, authTag, content, encryption, format, hkdfSalt, initialisationVector, keyId, pbkdfIterations, pbkdfSalt, publicEncryptionJwk, publicEncryptionKey, version, }: AesEncryptionData) => string;
 //# sourceMappingURL=encode-aes-string.d.ts.map

package/dist/utils/private/encode-aes-string.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encode-aes-string.d.ts","sourceRoot":"","sources":["../../../src/utils/private/encode-aes-string.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,gBAAgB,gLAY1B,iBAAiB,KAAG,MAoBtB,CAAC"}
+{"version":3,"file":"encode-aes-string.d.ts","sourceRoot":"","sources":["../../../src/utils/private/encode-aes-string.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,eAAO,MAAM,gBAAgB,+KAc1B,iBAAiB,KAAG,MA6BtB,CAAC"}

package/dist/utils/private/encode-aes-string.js

@@ -2,24 +2,27 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports._encodeAesString = void 0;
 const utils_1 = require("@lindorm/utils");
-const _encodeAesString = ({ encryption: algorithm, authTag, content, encryptionKeyAlgorithm, format, initialisationVector, integrityHash, keyId, publicEncryptionJwk, publicEncryptionKey, version, }) => {
+const _encodeAesString = ({ algorithm, authTag, content, encryption, format, hkdfSalt, initialisationVector, keyId, pbkdfIterations, pbkdfSalt, publicEncryptionJwk, publicEncryptionKey, version, }) => {
     const values = (0, utils_1.removeEmpty)({
-        v: version,
+        v: version.toString(),
         f: format,
-        cek: publicEncryptionKey?.toString(format),
-        crv: publicEncryptionJwk?.crv,
-        eka: encryptionKeyAlgorithm,
-        ih: integrityHash,
+        alg: algorithm,
         iv: initialisationVector.toString(format),
-        kid: publicEncryptionKey && keyId ? keyId.toString(format) : undefined,
-        tag: authTag?.toString(format),
+        kid: keyId.toString(format),
+        tag: authTag.toString(format),
+        hks: hkdfSalt?.toString(format),
+        p2c: pbkdfIterations?.toString(),
+        p2s: pbkdfSalt?.toString(format),
+        pek: publicEncryptionKey?.toString(format),
+        crv: publicEncryptionJwk?.crv,
+        kty: publicEncryptionJwk?.kty,
         x: publicEncryptionJwk?.x,
         y: publicEncryptionJwk?.y,
     });
     const array = Object.entries(values).map(([key, value]) => `${key}=${value}`);
     const str = array.join(",");
     const cnt = content.toString(format);
-    return `$${algorithm}$${str}$${cnt}$`;
+    return `$${encryption}$${str}$${cnt}$`;
 };
 exports._encodeAesString = _encodeAesString;
 //# sourceMappingURL=encode-aes-string.js.map

package/dist/utils/private/encode-aes-string.js.map

@@ -1 +1 @@
-{"version":3,"file":"encode-aes-string.js","sourceRoot":"","sources":["../../../src/utils/private/encode-aes-string.ts"],"names":[],"mappings":";;;AAAA,0CAA6C;AAGtC,MAAM,gBAAgB,GAAG,CAAC,EAC/B,UAAU,EAAE,SAAS,EACrB,OAAO,EACP,OAAO,EACP,sBAAsB,EACtB,MAAM,EACN,oBAAoB,EACpB,aAAa,EACb,KAAK,EACL,mBAAmB,EACnB,mBAAmB,EACnB,OAAO,GACW,EAAU,EAAE;IAC9B,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC;QACzB,CAAC,EAAE,OAAO;QACV,CAAC,EAAE,MAAM;QACT,GAAG,EAAE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC1C,GAAG,EAAE,mBAAmB,EAAE,GAAG;QAC7B,GAAG,EAAE,sBAAsB;QAC3B,EAAE,EAAE,aAAa;QACjB,EAAE,EAAE,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzC,GAAG,EAAE,mBAAmB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACtE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC9B,CAAC,EAAE,mBAAmB,EAAE,CAAC;QACzB,CAAC,EAAE,mBAAmB,EAAE,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAE9E,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAErC,OAAO,IAAI,SAAS,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;AACxC,CAAC,CAAC;AAhCW,QAAA,gBAAgB,oBAgC3B"}
+{"version":3,"file":"encode-aes-string.js","sourceRoot":"","sources":["../../../src/utils/private/encode-aes-string.ts"],"names":[],"mappings":";;;AAAA,0CAA6C;AAItC,MAAM,gBAAgB,GAAG,CAAC,EAC/B,SAAS,EACT,OAAO,EACP,OAAO,EACP,UAAU,EACV,MAAM,EACN,QAAQ,EACR,oBAAoB,EACpB,KAAK,EACL,eAAe,EACf,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,OAAO,GACW,EAAU,EAAE;IAC9B,MAAM,MAAM,GAAoB,IAAA,mBAAW,EAAC;QAC1C,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE;QACrB,CAAC,EAAE,MAAM;QAGT,GAAG,EAAE,SAAS;QACd,EAAE,EAAE,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAG7B,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC/B,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE;QAChC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;QAChC,GAAG,EAAE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC;QAG1C,GAAG,EAAE,mBAAmB,EAAE,GAAG;QAC7B,GAAG,EAAE,mBAAmB,EAAE,GAAG;QAC7B,CAAC,EAAE,mBAAmB,EAAE,CAAC;QACzB,CAAC,EAAE,mBAAmB,EAAE,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAE9E,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAErC,OAAO,IAAI,UAAU,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;AACzC,CAAC,CAAC;AA3CW,QAAA,gBAAgB,oBA2C3B"}

package/dist/utils/private/get-key/get-decryption-key.d.ts

@@ -0,0 +1,3 @@
+import { DecryptCekOptions, DecryptCekResult } from "../../../types/private";
+export declare const _getDecryptionKey: (options: DecryptCekOptions) => DecryptCekResult;
+//# sourceMappingURL=get-decryption-key.d.ts.map

package/dist/utils/private/get-key/get-decryption-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-decryption-key.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/get-key/get-decryption-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAM7E,eAAO,MAAM,iBAAiB,YAAa,iBAAiB,KAAG,gBAmB9D,CAAC"}

package/dist/utils/private/get-key/get-decryption-key.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._getDecryptionKey = void 0;
+const errors_1 = require("../../../errors");
+const get_ec_keys_1 = require("../key-types/get-ec-keys");
+const get_oct_keys_1 = require("../key-types/get-oct-keys");
+const get_okp_keys_1 = require("../key-types/get-okp-keys");
+const get_rsa_keys_1 = require("../key-types/get-rsa-keys");
+const _getDecryptionKey = (options) => {
+    switch (options.kryptos.type) {
+        case "EC":
+            return (0, get_ec_keys_1._getEcDecryptionKey)(options);
+        case "oct":
+            return (0, get_oct_keys_1._getOctDecryptionKey)(options);
+        case "OKP":
+            return (0, get_okp_keys_1._getOkpDecryptionKey)(options);
+        case "RSA":
+            return (0, get_rsa_keys_1._getRsaDecryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getDecryptionKey = _getDecryptionKey;
+//# sourceMappingURL=get-decryption-key.js.map

package/dist/utils/private/get-key/get-decryption-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-decryption-key.js","sourceRoot":"","sources":["../../../../src/utils/private/get-key/get-decryption-key.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAE3C,0DAA+D;AAC/D,4DAAiE;AACjE,4DAAiE;AACjE,4DAAiE;AAE1D,MAAM,iBAAiB,GAAG,CAAC,OAA0B,EAAoB,EAAE;IAChF,QAAQ,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,IAAI;YACP,OAAO,IAAA,iCAAmB,EAAC,OAAO,CAAC,CAAC;QAEtC,KAAK,KAAK;YACR,OAAO,IAAA,mCAAoB,EAAC,OAAO,CAAC,CAAC;QAEvC,KAAK,KAAK;YACR,OAAO,IAAA,mCAAoB,EAAC,OAAO,CAAC,CAAC;QAEvC,KAAK,KAAK;YACR,OAAO,IAAA,mCAAoB,EAAC,OAAO,CAAC,CAAC;QAEvC;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAnBW,QAAA,iBAAiB,qBAmB5B"}

package/dist/utils/private/get-key/get-encryption-key.d.ts

@@ -0,0 +1,3 @@
+import { CreateCekOptions, CreateCekResult } from "../../../types/private";
+export declare const _getEncryptionKey: (options: CreateCekOptions) => CreateCekResult;
+//# sourceMappingURL=get-encryption-key.d.ts.map

package/dist/utils/private/get-key/get-encryption-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-encryption-key.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/get-key/get-encryption-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAM3E,eAAO,MAAM,iBAAiB,YAAa,gBAAgB,KAAG,eAmB7D,CAAC"}

package/dist/utils/private/get-key/get-encryption-key.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._getEncryptionKey = void 0;
+const errors_1 = require("../../../errors");
+const get_ec_keys_1 = require("../key-types/get-ec-keys");
+const get_oct_keys_1 = require("../key-types/get-oct-keys");
+const get_okp_keys_1 = require("../key-types/get-okp-keys");
+const get_rsa_keys_1 = require("../key-types/get-rsa-keys");
+const _getEncryptionKey = (options) => {
+    switch (options.kryptos.type) {
+        case "EC":
+            return (0, get_ec_keys_1._getEcEncryptionKey)(options);
+        case "oct":
+            return (0, get_oct_keys_1._getOctEncryptionKey)(options);
+        case "OKP":
+            return (0, get_okp_keys_1._getOkpEncryptionKey)(options);
+        case "RSA":
+            return (0, get_rsa_keys_1._getRsaEncryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getEncryptionKey = _getEncryptionKey;
+//# sourceMappingURL=get-encryption-key.js.map

package/dist/utils/private/get-key/get-encryption-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-encryption-key.js","sourceRoot":"","sources":["../../../../src/utils/private/get-key/get-encryption-key.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAE3C,0DAA+D;AAC/D,4DAAiE;AACjE,4DAAiE;AACjE,4DAAiE;AAE1D,MAAM,iBAAiB,GAAG,CAAC,OAAyB,EAAmB,EAAE;IAC9E,QAAQ,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,IAAI;YACP,OAAO,IAAA,iCAAmB,EAAC,OAAO,CAAC,CAAC;QAEtC,KAAK,KAAK;YACR,OAAO,IAAA,mCAAoB,EAAC,OAAO,CAAC,CAAC;QAEvC,KAAK,KAAK;YACR,OAAO,IAAA,mCAAoB,EAAC,OAAO,CAAC,CAAC;QAEvC,KAAK,KAAK;YACR,OAAO,IAAA,mCAAoB,EAAC,OAAO,CAAC,CAAC;QAEvC;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAnBW,QAAA,iBAAiB,qBAmB5B"}

package/dist/utils/private/key-derivation/hkdf.d.ts

@@ -0,0 +1,14 @@
+/// <reference types="node" />
+import { AesKeyLength } from "@lindorm/types";
+type Options = {
+    derivationKey: Buffer;
+    hkdfSalt?: Buffer;
+    keyLength: AesKeyLength;
+};
+type Result = {
+    derivedKey: Buffer;
+    hkdfSalt: Buffer;
+};
+export declare const _hkdf: (options: Options) => Result;
+export {};
+//# sourceMappingURL=hkdf.d.ts.map

package/dist/utils/private/key-derivation/hkdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/hkdf.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,KAAK,OAAO,GAAG;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;CACzB,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,KAAK,YAAa,OAAO,KAAG,MASxC,CAAC"}

package/dist/utils/private/key-derivation/hkdf.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._hkdf = void 0;
+const crypto_1 = require("crypto");
+const _hkdf = (options) => {
+    const hkdfSalt = options.hkdfSalt ?? (0, crypto_1.randomBytes)(16);
+    const info = Buffer.from("lindorm.hkdf", "utf-8");
+    const derivedKey = Buffer.from((0, crypto_1.hkdfSync)("SHA256", options.derivationKey, hkdfSalt, info, options.keyLength));
+    return { derivedKey, hkdfSalt };
+};
+exports._hkdf = _hkdf;
+//# sourceMappingURL=hkdf.js.map

package/dist/utils/private/key-derivation/hkdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hkdf.js","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/hkdf.ts"],"names":[],"mappings":";;;AACA,mCAA+C;AAaxC,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAU,EAAE;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAC5B,IAAA,iBAAQ,EAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAC7E,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC,CAAC;AATW,QAAA,KAAK,SAShB"}

package/dist/utils/private/key-derivation/pbkdf.d.ts

@@ -0,0 +1,17 @@
+/// <reference types="node" />
+import { AesKeyLength, ShaAlgorithm } from "@lindorm/types";
+type Options = {
+    algorithm: ShaAlgorithm;
+    derivationKey: Buffer;
+    keyLength: AesKeyLength;
+    pbkdfIterations?: number;
+    pbkdfSalt?: Buffer;
+};
+type Result = {
+    derivedKey: Buffer;
+    pbkdfIterations: number;
+    pbkdfSalt: Buffer;
+};
+export declare const _pbkdf: (options: Options) => Result;
+export {};
+//# sourceMappingURL=pbkdf.d.ts.map

package/dist/utils/private/key-derivation/pbkdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/pbkdf.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG5D,KAAK,OAAO,GAAG;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,YAAY,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAKF,eAAO,MAAM,MAAM,YAAa,OAAO,KAAG,MAazC,CAAC"}

package/dist/utils/private/key-derivation/pbkdf.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._pbkdf = void 0;
+const crypto_1 = require("crypto");
+const randomIterations = () => Math.floor(Math.random() * 20000) + 90000;
+const _pbkdf = (options) => {
+    const pbkdfSalt = options.pbkdfSalt ?? (0, crypto_1.randomBytes)(16);
+    const pbkdfIterations = options.pbkdfIterations ?? randomIterations();
+    const derivedKey = (0, crypto_1.pbkdf2Sync)(options.derivationKey, pbkdfSalt, pbkdfIterations, options.keyLength, options.algorithm);
+    return { derivedKey, pbkdfIterations, pbkdfSalt };
+};
+exports._pbkdf = _pbkdf;
+//# sourceMappingURL=pbkdf.js.map

package/dist/utils/private/key-derivation/pbkdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf.js","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/pbkdf.ts"],"names":[],"mappings":";;;AACA,mCAAiD;AAiBjD,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAE1E,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAU,EAAE;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gBAAgB,EAAE,CAAC;IAEtE,MAAM,UAAU,GAAG,IAAA,mBAAU,EAC3B,OAAO,CAAC,aAAa,EACrB,SAAS,EACT,eAAe,EACf,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC,CAAC;AAbW,QAAA,MAAM,UAajB"}

package/dist/utils/private/key-types/get-ec-keys.d.ts

@@ -0,0 +1,4 @@
+import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
+export declare const _getEcEncryptionKey: (options: CreateCekOptions) => CreateCekResult;
+export declare const _getEcDecryptionKey: (options: DecryptCekOptions) => DecryptCekResult;
+//# sourceMappingURL=get-ec-keys.d.ts.map

package/dist/utils/private/key-types/get-ec-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-ec-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-types/get-ec-keys.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAUhC,eAAO,MAAM,mBAAmB,YAAa,gBAAgB,KAAG,eAe/D,CAAC;AAEF,eAAO,MAAM,mBAAmB,YAAa,iBAAiB,KAAG,gBAehE,CAAC"}

package/dist/utils/private/key-types/get-ec-keys.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._getEcDecryptionKey = exports._getEcEncryptionKey = void 0;
+const errors_1 = require("../../../errors");
+const diffie_hellman_1 = require("../diffie-hellman/diffie-hellman");
+const diffie_hellman_key_wrap_1 = require("../diffie-hellman/diffie-hellman-key-wrap");
+const _getEcEncryptionKey = (options) => {
+    switch (options.kryptos.algorithm) {
+        case "ECDH-ES":
+            return (0, diffie_hellman_1._getDiffieHellmanEncryptionKey)(options);
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+            return (0, diffie_hellman_key_wrap_1._getDiffieHellmanKeyWrapEncryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getEcEncryptionKey = _getEcEncryptionKey;
+const _getEcDecryptionKey = (options) => {
+    switch (options.kryptos.algorithm) {
+        case "ECDH-ES":
+            return (0, diffie_hellman_1._getDiffieHellmanDecryptionKey)(options);
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+            return (0, diffie_hellman_key_wrap_1._getDiffieHellmanKeyWrapDecryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getEcDecryptionKey = _getEcDecryptionKey;
+//# sourceMappingURL=get-ec-keys.js.map

package/dist/utils/private/key-types/get-ec-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-ec-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/key-types/get-ec-keys.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAO3C,qEAG0C;AAC1C,uFAGmD;AAE5C,MAAM,mBAAmB,GAAG,CAAC,OAAyB,EAAmB,EAAE;IAChF,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,IAAA,+CAA8B,EAAC,OAAO,CAAC,CAAC;QAEjD,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB;YACnB,OAAO,IAAA,+DAAqC,EAAC,OAAO,CAAC,CAAC;QAExD;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAfW,QAAA,mBAAmB,uBAe9B;AAEK,MAAM,mBAAmB,GAAG,CAAC,OAA0B,EAAoB,EAAE;IAClF,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,IAAA,+CAA8B,EAAC,OAAO,CAAC,CAAC;QAEjD,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB;YACnB,OAAO,IAAA,+DAAqC,EAAC,OAAO,CAAC,CAAC;QAExD;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAfW,QAAA,mBAAmB,uBAe9B"}

package/dist/utils/private/key-types/get-oct-keys.d.ts

@@ -0,0 +1,4 @@
+import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
+export declare const _getOctEncryptionKey: (options: CreateCekOptions) => CreateCekResult;
+export declare const _getOctDecryptionKey: (options: DecryptCekOptions) => DecryptCekResult;
+//# sourceMappingURL=get-oct-keys.d.ts.map

package/dist/utils/private/key-types/get-oct-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-oct-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-types/get-oct-keys.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAchC,eAAO,MAAM,oBAAoB,YAAa,gBAAgB,KAAG,eAoBhE,CAAC;AAEF,eAAO,MAAM,oBAAoB,YAAa,iBAAiB,KAAG,gBAoBjE,CAAC"}

package/dist/utils/private/key-types/get-oct-keys.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._getOctDecryptionKey = exports._getOctEncryptionKey = void 0;
+const errors_1 = require("../../../errors");
+const get_oct_dir_keys_1 = require("../oct/get-oct-dir-keys");
+const get_oct_key_wrap_keys_1 = require("../oct/get-oct-key-wrap-keys");
+const get_oct_pbkdf_key_wrap_keys_1 = require("../oct/get-oct-pbkdf-key-wrap-keys");
+const _getOctEncryptionKey = (options) => {
+    switch (options.kryptos.algorithm) {
+        case "dir":
+            return (0, get_oct_dir_keys_1._getOctDirEncryptionKey)(options);
+        case "A128KW":
+        case "A192KW":
+        case "A256KW":
+            return (0, get_oct_key_wrap_keys_1._getOctKeyWrapEncryptionKey)(options);
+        case "PBES2-HS256+A128KW":
+        case "PBES2-HS384+A192KW":
+        case "PBES2-HS512+A256KW":
+            return (0, get_oct_pbkdf_key_wrap_keys_1._getOctPbkdfKeyWrapEncryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getOctEncryptionKey = _getOctEncryptionKey;
+const _getOctDecryptionKey = (options) => {
+    switch (options.kryptos.algorithm) {
+        case "dir":
+            return (0, get_oct_dir_keys_1._getOctDirDecryptionKey)(options);
+        case "A128KW":
+        case "A192KW":
+        case "A256KW":
+            return (0, get_oct_key_wrap_keys_1._getOctKeyWrapDecryptionKey)(options);
+        case "PBES2-HS256+A128KW":
+        case "PBES2-HS384+A192KW":
+        case "PBES2-HS512+A256KW":
+            return (0, get_oct_pbkdf_key_wrap_keys_1._getOctPbkdfKeyWrapDecryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getOctDecryptionKey = _getOctDecryptionKey;
+//# sourceMappingURL=get-oct-keys.js.map

package/dist/utils/private/key-types/get-oct-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-oct-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/key-types/get-oct-keys.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAO3C,8DAGiC;AACjC,wEAGsC;AACtC,oFAG4C;AAErC,MAAM,oBAAoB,GAAG,CAAC,OAAyB,EAAmB,EAAE;IACjF,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,KAAK;YACR,OAAO,IAAA,0CAAuB,EAAC,OAAO,CAAC,CAAC;QAE1C,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAA,mDAA2B,EAAC,OAAO,CAAC,CAAC;QAE9C,KAAK,oBAAoB,CAAC;QAC1B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,oBAAoB;YACvB,OAAO,IAAA,8DAAgC,EAAC,OAAO,CAAC,CAAC;QAEnD;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AApBW,QAAA,oBAAoB,wBAoB/B;AAEK,MAAM,oBAAoB,GAAG,CAAC,OAA0B,EAAoB,EAAE;IACnF,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,KAAK;YACR,OAAO,IAAA,0CAAuB,EAAC,OAAO,CAAC,CAAC;QAE1C,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAA,mDAA2B,EAAC,OAAO,CAAC,CAAC;QAE9C,KAAK,oBAAoB,CAAC;QAC1B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,oBAAoB;YACvB,OAAO,IAAA,8DAAgC,EAAC,OAAO,CAAC,CAAC;QAEnD;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AApBW,QAAA,oBAAoB,wBAoB/B"}

package/dist/utils/private/key-types/get-okp-keys.d.ts

@@ -0,0 +1,4 @@
+import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
+export declare const _getOkpEncryptionKey: (options: CreateCekOptions) => CreateCekResult;
+export declare const _getOkpDecryptionKey: (options: DecryptCekOptions) => DecryptCekResult;
+//# sourceMappingURL=get-okp-keys.d.ts.map

package/dist/utils/private/key-types/get-okp-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-okp-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-types/get-okp-keys.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAMhC,eAAO,MAAM,oBAAoB,YAAa,gBAAgB,KAAG,eAUhE,CAAC;AAEF,eAAO,MAAM,oBAAoB,YAAa,iBAAiB,KAAG,gBAUjE,CAAC"}

package/dist/utils/private/key-types/get-okp-keys.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._getOkpDecryptionKey = exports._getOkpEncryptionKey = void 0;
+const errors_1 = require("../../../errors");
+const diffie_hellman_1 = require("../diffie-hellman/diffie-hellman");
+const _getOkpEncryptionKey = (options) => {
+    switch (options.kryptos.algorithm) {
+        case "ECDH-ES":
+            return (0, diffie_hellman_1._getDiffieHellmanEncryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getOkpEncryptionKey = _getOkpEncryptionKey;
+const _getOkpDecryptionKey = (options) => {
+    switch (options.kryptos.algorithm) {
+        case "ECDH-ES":
+            return (0, diffie_hellman_1._getDiffieHellmanDecryptionKey)(options);
+        default:
+            throw new errors_1.AesError("Unexpected Kryptos", {
+                debug: { kryptos: options.kryptos.toJSON() },
+            });
+    }
+};
+exports._getOkpDecryptionKey = _getOkpDecryptionKey;
+//# sourceMappingURL=get-okp-keys.js.map

package/dist/utils/private/key-types/get-okp-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-okp-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/key-types/get-okp-keys.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAO3C,qEAG0C;AAEnC,MAAM,oBAAoB,GAAG,CAAC,OAAyB,EAAmB,EAAE;IACjF,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,IAAA,+CAA8B,EAAC,OAAO,CAAC,CAAC;QAEjD;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAVW,QAAA,oBAAoB,wBAU/B;AAEK,MAAM,oBAAoB,GAAG,CAAC,OAA0B,EAAoB,EAAE;IACnF,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,IAAA,+CAA8B,EAAC,OAAO,CAAC,CAAC;QAEjD;YACE,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;aAC7C,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAVW,QAAA,oBAAoB,wBAU/B"}

package/dist/utils/private/key-types/get-rsa-keys.d.ts

@@ -0,0 +1,4 @@
+import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
+export declare const _getRsaEncryptionKey: ({ encryption, kryptos, }: CreateCekOptions) => CreateCekResult;
+export declare const _getRsaDecryptionKey: ({ kryptos, publicEncryptionKey, }: DecryptCekOptions) => DecryptCekResult;
+//# sourceMappingURL=get-rsa-keys.d.ts.map

package/dist/utils/private/key-types/get-rsa-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-rsa-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-types/get-rsa-keys.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAIhC,eAAO,MAAM,oBAAoB,6BAG9B,gBAAgB,KAAG,eA6BrB,CAAC;AAEF,eAAO,MAAM,oBAAoB,sCAG9B,iBAAiB,KAAG,gBAmCtB,CAAC"}