@lindorm/aes 0.3.0 → 0.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/dist/classes/AesKit.js +6 -6
- package/dist/classes/AesKit.js.map +1 -1
- package/dist/constants/private/format.d.ts +1 -1
- package/dist/constants/private/format.d.ts.map +1 -1
- package/dist/constants/private/format.js +2 -2
- package/dist/constants/private/format.js.map +1 -1
- package/dist/types/aes-data.d.ts +0 -1
- package/dist/types/aes-data.d.ts.map +1 -1
- package/dist/types/aes-encryption-data.d.ts +0 -1
- package/dist/types/aes-encryption-data.d.ts.map +1 -1
- package/dist/types/private/auth-tag.d.ts +0 -2
- package/dist/types/private/auth-tag.d.ts.map +1 -1
- package/dist/types/private/content-encryption-key.d.ts +0 -1
- package/dist/types/private/content-encryption-key.d.ts.map +1 -1
- package/dist/types/private/key-wrap.d.ts +0 -1
- package/dist/types/private/key-wrap.d.ts.map +1 -1
- package/dist/utils/private/aes-cipher.d.ts +4 -4
- package/dist/utils/private/aes-cipher.d.ts.map +1 -1
- package/dist/utils/private/aes-cipher.js +10 -10
- package/dist/utils/private/aes-cipher.js.map +1 -1
- package/dist/utils/private/aes-data/auth-tag-hmac.d.ts +2 -3
- package/dist/utils/private/aes-data/auth-tag-hmac.d.ts.map +1 -1
- package/dist/utils/private/aes-data/auth-tag-hmac.js +8 -8
- package/dist/utils/private/aes-data/auth-tag-hmac.js.map +1 -1
- package/dist/utils/private/aes-data/auth-tag.d.ts +2 -3
- package/dist/utils/private/aes-data/auth-tag.d.ts.map +1 -1
- package/dist/utils/private/aes-data/auth-tag.js +7 -7
- package/dist/utils/private/aes-data/auth-tag.js.map +1 -1
- package/dist/utils/private/aes-data/get-initialisation-vector.d.ts +1 -2
- package/dist/utils/private/aes-data/get-initialisation-vector.d.ts.map +1 -1
- package/dist/utils/private/aes-data/get-initialisation-vector.js +3 -3
- package/dist/utils/private/aes-data/get-initialisation-vector.js.map +1 -1
- package/dist/utils/private/aes-data/split-content-encryption-key.d.ts +1 -2
- package/dist/utils/private/aes-data/split-content-encryption-key.d.ts.map +1 -1
- package/dist/utils/private/aes-data/split-content-encryption-key.js +3 -3
- package/dist/utils/private/aes-data/split-content-encryption-key.js.map +1 -1
- package/dist/utils/private/aes-data.d.ts +2 -2
- package/dist/utils/private/aes-data.d.ts.map +1 -1
- package/dist/utils/private/aes-data.js +15 -15
- package/dist/utils/private/aes-data.js.map +1 -1
- package/dist/utils/private/calculate/calculate-aes-encryption.d.ts +1 -1
- package/dist/utils/private/calculate/calculate-aes-encryption.d.ts.map +1 -1
- package/dist/utils/private/calculate/calculate-aes-encryption.js +3 -3
- package/dist/utils/private/calculate/calculate-aes-encryption.js.map +1 -1
- package/dist/utils/private/calculate/calculate-content-encryption-key-size.d.ts +1 -1
- package/dist/utils/private/calculate/calculate-content-encryption-key-size.d.ts.map +1 -1
- package/dist/utils/private/calculate/calculate-content-encryption-key-size.js +3 -3
- package/dist/utils/private/calculate/calculate-content-encryption-key-size.js.map +1 -1
- package/dist/utils/private/calculate/calculate-key-wrap-encryption.d.ts +1 -1
- package/dist/utils/private/calculate/calculate-key-wrap-encryption.d.ts.map +1 -1
- package/dist/utils/private/calculate/calculate-key-wrap-encryption.js +3 -3
- package/dist/utils/private/calculate/calculate-key-wrap-encryption.js.map +1 -1
- package/dist/utils/private/calculate/calculate-key-wrap-size.d.ts +1 -1
- package/dist/utils/private/calculate/calculate-key-wrap-size.d.ts.map +1 -1
- package/dist/utils/private/calculate/calculate-key-wrap-size.js +3 -3
- package/dist/utils/private/calculate/calculate-key-wrap-size.js.map +1 -1
- package/dist/utils/private/calculate/calculate-pbkdf-hash.d.ts +1 -1
- package/dist/utils/private/calculate/calculate-pbkdf-hash.d.ts.map +1 -1
- package/dist/utils/private/calculate/calculate-pbkdf-hash.js +3 -3
- package/dist/utils/private/calculate/calculate-pbkdf-hash.js.map +1 -1
- package/dist/utils/private/calculate/calculate-rsa-oaep-hash.d.ts +1 -1
- package/dist/utils/private/calculate/calculate-rsa-oaep-hash.d.ts.map +1 -1
- package/dist/utils/private/calculate/calculate-rsa-oaep-hash.js +3 -3
- package/dist/utils/private/calculate/calculate-rsa-oaep-hash.js.map +1 -1
- package/dist/utils/private/decode-aes-string.d.ts +1 -1
- package/dist/utils/private/decode-aes-string.d.ts.map +1 -1
- package/dist/utils/private/decode-aes-string.js +12 -12
- package/dist/utils/private/decode-aes-string.js.map +1 -1
- package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.d.ts +2 -2
- package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.d.ts.map +1 -1
- package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.js +14 -14
- package/dist/utils/private/diffie-hellman/diffie-hellman-key-wrap.js.map +1 -1
- package/dist/utils/private/diffie-hellman/diffie-hellman.d.ts +2 -2
- package/dist/utils/private/diffie-hellman/diffie-hellman.d.ts.map +1 -1
- package/dist/utils/private/diffie-hellman/diffie-hellman.js +11 -11
- package/dist/utils/private/diffie-hellman/diffie-hellman.js.map +1 -1
- package/dist/utils/private/diffie-hellman/shared-secret.d.ts +2 -3
- package/dist/utils/private/diffie-hellman/shared-secret.d.ts.map +1 -1
- package/dist/utils/private/diffie-hellman/shared-secret.js +7 -7
- package/dist/utils/private/diffie-hellman/shared-secret.js.map +1 -1
- package/dist/utils/private/encode-aes-string.d.ts +1 -1
- package/dist/utils/private/encode-aes-string.d.ts.map +1 -1
- package/dist/utils/private/encode-aes-string.js +12 -12
- package/dist/utils/private/encode-aes-string.js.map +1 -1
- package/dist/utils/private/get-key/get-decryption-key.d.ts +1 -1
- package/dist/utils/private/get-key/get-decryption-key.d.ts.map +1 -1
- package/dist/utils/private/get-key/get-decryption-key.js +7 -7
- package/dist/utils/private/get-key/get-decryption-key.js.map +1 -1
- package/dist/utils/private/get-key/get-encryption-key.d.ts +1 -1
- package/dist/utils/private/get-key/get-encryption-key.d.ts.map +1 -1
- package/dist/utils/private/get-key/get-encryption-key.js +7 -7
- package/dist/utils/private/get-key/get-encryption-key.js.map +1 -1
- package/dist/utils/private/key-derivation/hkdf.d.ts +1 -2
- package/dist/utils/private/key-derivation/hkdf.d.ts.map +1 -1
- package/dist/utils/private/key-derivation/hkdf.js +3 -3
- package/dist/utils/private/key-derivation/hkdf.js.map +1 -1
- package/dist/utils/private/key-derivation/pbkdf.d.ts +1 -2
- package/dist/utils/private/key-derivation/pbkdf.d.ts.map +1 -1
- package/dist/utils/private/key-derivation/pbkdf.js +3 -3
- package/dist/utils/private/key-derivation/pbkdf.js.map +1 -1
- package/dist/utils/private/key-types/get-ec-keys.d.ts +2 -2
- package/dist/utils/private/key-types/get-ec-keys.d.ts.map +1 -1
- package/dist/utils/private/key-types/get-ec-keys.js +9 -9
- package/dist/utils/private/key-types/get-ec-keys.js.map +1 -1
- package/dist/utils/private/key-types/get-oct-keys.d.ts +2 -2
- package/dist/utils/private/key-types/get-oct-keys.d.ts.map +1 -1
- package/dist/utils/private/key-types/get-oct-keys.js +11 -11
- package/dist/utils/private/key-types/get-oct-keys.js.map +1 -1
- package/dist/utils/private/key-types/get-okp-keys.d.ts +2 -2
- package/dist/utils/private/key-types/get-okp-keys.d.ts.map +1 -1
- package/dist/utils/private/key-types/get-okp-keys.js +9 -9
- package/dist/utils/private/key-types/get-okp-keys.js.map +1 -1
- package/dist/utils/private/key-types/get-rsa-keys.d.ts +2 -2
- package/dist/utils/private/key-types/get-rsa-keys.d.ts.map +1 -1
- package/dist/utils/private/key-types/get-rsa-keys.js +8 -8
- package/dist/utils/private/key-types/get-rsa-keys.js.map +1 -1
- package/dist/utils/private/key-wrap/ecb-key-wrap.d.ts +2 -2
- package/dist/utils/private/key-wrap/ecb-key-wrap.d.ts.map +1 -1
- package/dist/utils/private/key-wrap/ecb-key-wrap.js +7 -7
- package/dist/utils/private/key-wrap/ecb-key-wrap.js.map +1 -1
- package/dist/utils/private/key-wrap/gcm-key-wrap.d.ts +2 -2
- package/dist/utils/private/key-wrap/gcm-key-wrap.d.ts.map +1 -1
- package/dist/utils/private/key-wrap/gcm-key-wrap.js +7 -7
- package/dist/utils/private/key-wrap/gcm-key-wrap.js.map +1 -1
- package/dist/utils/private/key-wrap/key-wrap.d.ts +2 -2
- package/dist/utils/private/key-wrap/key-wrap.d.ts.map +1 -1
- package/dist/utils/private/key-wrap/key-wrap.js +9 -9
- package/dist/utils/private/key-wrap/key-wrap.js.map +1 -1
- package/dist/utils/private/oct/get-oct-dir-keys.d.ts +2 -2
- package/dist/utils/private/oct/get-oct-dir-keys.d.ts.map +1 -1
- package/dist/utils/private/oct/get-oct-dir-keys.js +7 -7
- package/dist/utils/private/oct/get-oct-dir-keys.js.map +1 -1
- package/dist/utils/private/oct/get-oct-key-key-wrap.d.ts +2 -2
- package/dist/utils/private/oct/get-oct-key-key-wrap.d.ts.map +1 -1
- package/dist/utils/private/oct/get-oct-key-key-wrap.js +12 -12
- package/dist/utils/private/oct/get-oct-key-key-wrap.js.map +1 -1
- package/dist/utils/private/oct/get-oct-pbkdf-key-wrap-keys.d.ts +2 -2
- package/dist/utils/private/oct/get-oct-pbkdf-key-wrap-keys.d.ts.map +1 -1
- package/dist/utils/private/oct/get-oct-pbkdf-key-wrap-keys.js +14 -14
- package/dist/utils/private/oct/get-oct-pbkdf-key-wrap-keys.js.map +1 -1
- package/package.json +6 -6
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
3
|
+
exports.gcmKeyUnwrap = exports.gcmKeyWrap = void 0;
|
|
4
4
|
const crypto_1 = require("crypto");
|
|
5
5
|
const errors_1 = require("../../../errors");
|
|
6
6
|
const calculate_key_wrap_encryption_1 = require("../calculate/calculate-key-wrap-encryption");
|
|
7
|
-
const
|
|
8
|
-
const algorithm = (0, calculate_key_wrap_encryption_1.
|
|
7
|
+
const gcmKeyWrap = ({ contentEncryptionKey, keyEncryptionKey, kryptos, }) => {
|
|
8
|
+
const algorithm = (0, calculate_key_wrap_encryption_1.calculateKeyWrapEncryption)(kryptos);
|
|
9
9
|
const publicEncryptionIv = (0, crypto_1.randomBytes)(12);
|
|
10
10
|
const cipher = (0, crypto_1.createCipheriv)(algorithm, keyEncryptionKey, publicEncryptionIv);
|
|
11
11
|
const publicEncryptionKey = Buffer.concat([
|
|
@@ -15,15 +15,15 @@ const _gcmKeyWrap = ({ contentEncryptionKey, keyEncryptionKey, kryptos, }) => {
|
|
|
15
15
|
const publicEncryptionTag = cipher.getAuthTag();
|
|
16
16
|
return { publicEncryptionKey, publicEncryptionIv, publicEncryptionTag };
|
|
17
17
|
};
|
|
18
|
-
exports.
|
|
19
|
-
const
|
|
18
|
+
exports.gcmKeyWrap = gcmKeyWrap;
|
|
19
|
+
const gcmKeyUnwrap = ({ keyEncryptionKey, kryptos, publicEncryptionIv, publicEncryptionKey, publicEncryptionTag, }) => {
|
|
20
20
|
if (!publicEncryptionIv) {
|
|
21
21
|
throw new errors_1.AesError("Invalid public encryption iv");
|
|
22
22
|
}
|
|
23
23
|
if (!publicEncryptionTag) {
|
|
24
24
|
throw new errors_1.AesError("Invalid public encryption tag");
|
|
25
25
|
}
|
|
26
|
-
const algorithm = (0, calculate_key_wrap_encryption_1.
|
|
26
|
+
const algorithm = (0, calculate_key_wrap_encryption_1.calculateKeyWrapEncryption)(kryptos);
|
|
27
27
|
const decipher = (0, crypto_1.createDecipheriv)(algorithm, keyEncryptionKey, publicEncryptionIv);
|
|
28
28
|
decipher.setAuthTag(publicEncryptionTag);
|
|
29
29
|
const contentEncryptionKey = Buffer.concat([
|
|
@@ -32,5 +32,5 @@ const _gcmKeyUnwrap = ({ keyEncryptionKey, kryptos, publicEncryptionIv, publicEn
|
|
|
32
32
|
]);
|
|
33
33
|
return { contentEncryptionKey };
|
|
34
34
|
};
|
|
35
|
-
exports.
|
|
35
|
+
exports.gcmKeyUnwrap = gcmKeyUnwrap;
|
|
36
36
|
//# sourceMappingURL=gcm-key-wrap.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gcm-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/gcm-key-wrap.ts"],"names":[],"mappings":";;;AAAA,mCAMgB;AAChB,4CAA2C;AAO3C,
|
|
1
|
+
{"version":3,"file":"gcm-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/gcm-key-wrap.ts"],"names":[],"mappings":";;;AAAA,mCAMgB;AAChB,4CAA2C;AAO3C,8FAAwF;AAEjF,MAAM,UAAU,GAAG,CAAC,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,GACQ,EAAiB,EAAE;IAClC,MAAM,SAAS,GAAG,IAAA,0DAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,kBAAkB,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAA,uBAAc,EAC3B,SAAS,EACT,gBAAgB,EAChB,kBAAkB,CACN,CAAC;IAEf,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;AAC1E,CAAC,CAAC;AAtBW,QAAA,UAAU,cAsBrB;AAEK,MAAM,YAAY,GAAG,CAAC,EAC3B,gBAAgB,EAChB,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACF,EAAmB,EAAE;IACtC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAQ,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,0DAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAC/B,SAAS,EACT,gBAAgB,EAChB,kBAAkB,CACJ,CAAC;IAEjB,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAEzC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACpC,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;IAEH,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAClC,CAAC,CAAC;AA9BW,QAAA,YAAY,gBA8BvB"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
import { KeyUnwrapOptions, KeyUnwrapResult, KeyWrapOptions, KeyWrapResult } from "../../../types/private";
|
|
2
|
-
export declare const
|
|
3
|
-
export declare const
|
|
2
|
+
export declare const keyWrap: (options: KeyWrapOptions) => KeyWrapResult;
|
|
3
|
+
export declare const keyUnwrap: (options: KeyUnwrapOptions) => KeyUnwrapResult;
|
|
4
4
|
//# sourceMappingURL=key-wrap.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/key-wrap.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,wBAAwB,CAAC;AAIhC,eAAO,MAAM,
|
|
1
|
+
{"version":3,"file":"key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/key-wrap.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,wBAAwB,CAAC;AAIhC,eAAO,MAAM,OAAO,YAAa,cAAc,KAAG,aAqBjD,CAAC;AAEF,eAAO,MAAM,SAAS,YAAa,gBAAgB,KAAG,eAqBrD,CAAC"}
|
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
3
|
+
exports.keyUnwrap = exports.keyWrap = void 0;
|
|
4
4
|
const errors_1 = require("../../../errors");
|
|
5
5
|
const ecb_key_wrap_1 = require("./ecb-key-wrap");
|
|
6
6
|
const gcm_key_wrap_1 = require("./gcm-key-wrap");
|
|
7
|
-
const
|
|
7
|
+
const keyWrap = (options) => {
|
|
8
8
|
switch (options.kryptos.algorithm) {
|
|
9
9
|
case "A128KW":
|
|
10
10
|
case "A192KW":
|
|
@@ -12,20 +12,20 @@ const _keyWrap = (options) => {
|
|
|
12
12
|
case "ECDH-ES+A128KW":
|
|
13
13
|
case "ECDH-ES+A192KW":
|
|
14
14
|
case "ECDH-ES+A256KW":
|
|
15
|
-
return (0, ecb_key_wrap_1.
|
|
15
|
+
return (0, ecb_key_wrap_1.ecbKeyWrap)(options);
|
|
16
16
|
case "A128GCMKW":
|
|
17
17
|
case "A192GCMKW":
|
|
18
18
|
case "A256GCMKW":
|
|
19
19
|
case "ECDH-ES+A128GCMKW":
|
|
20
20
|
case "ECDH-ES+A192GCMKW":
|
|
21
21
|
case "ECDH-ES+A256GCMKW":
|
|
22
|
-
return (0, gcm_key_wrap_1.
|
|
22
|
+
return (0, gcm_key_wrap_1.gcmKeyWrap)(options);
|
|
23
23
|
default:
|
|
24
24
|
throw new errors_1.AesError("Unsupported key wrap algorithm");
|
|
25
25
|
}
|
|
26
26
|
};
|
|
27
|
-
exports.
|
|
28
|
-
const
|
|
27
|
+
exports.keyWrap = keyWrap;
|
|
28
|
+
const keyUnwrap = (options) => {
|
|
29
29
|
switch (options.kryptos.algorithm) {
|
|
30
30
|
case "A128KW":
|
|
31
31
|
case "A192KW":
|
|
@@ -33,17 +33,17 @@ const _keyUnwrap = (options) => {
|
|
|
33
33
|
case "ECDH-ES+A128KW":
|
|
34
34
|
case "ECDH-ES+A192KW":
|
|
35
35
|
case "ECDH-ES+A256KW":
|
|
36
|
-
return (0, ecb_key_wrap_1.
|
|
36
|
+
return (0, ecb_key_wrap_1.ecbKeyUnwrap)(options);
|
|
37
37
|
case "A128GCMKW":
|
|
38
38
|
case "A192GCMKW":
|
|
39
39
|
case "A256GCMKW":
|
|
40
40
|
case "ECDH-ES+A128GCMKW":
|
|
41
41
|
case "ECDH-ES+A192GCMKW":
|
|
42
42
|
case "ECDH-ES+A256GCMKW":
|
|
43
|
-
return (0, gcm_key_wrap_1.
|
|
43
|
+
return (0, gcm_key_wrap_1.gcmKeyUnwrap)(options);
|
|
44
44
|
default:
|
|
45
45
|
throw new errors_1.AesError("Unsupported key wrap algorithm");
|
|
46
46
|
}
|
|
47
47
|
};
|
|
48
|
-
exports.
|
|
48
|
+
exports.keyUnwrap = keyUnwrap;
|
|
49
49
|
//# sourceMappingURL=key-wrap.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/key-wrap.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAO3C,
|
|
1
|
+
{"version":3,"file":"key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/key-wrap.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAO3C,iDAA0D;AAC1D,iDAA0D;AAEnD,MAAM,OAAO,GAAG,CAAC,OAAuB,EAAiB,EAAE;IAChE,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB;YACnB,OAAO,IAAA,yBAAU,EAAC,OAAO,CAAC,CAAC;QAE7B,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,mBAAmB,CAAC;QACzB,KAAK,mBAAmB,CAAC;QACzB,KAAK,mBAAmB;YACtB,OAAO,IAAA,yBAAU,EAAC,OAAO,CAAC,CAAC;QAE7B;YACE,MAAM,IAAI,iBAAQ,CAAC,gCAAgC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC;AArBW,QAAA,OAAO,WAqBlB;AAEK,MAAM,SAAS,GAAG,CAAC,OAAyB,EAAmB,EAAE;IACtE,QAAQ,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB;YACnB,OAAO,IAAA,2BAAY,EAAC,OAAO,CAAC,CAAC;QAE/B,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,mBAAmB,CAAC;QACzB,KAAK,mBAAmB,CAAC;QACzB,KAAK,mBAAmB;YACtB,OAAO,IAAA,2BAAY,EAAC,OAAO,CAAC,CAAC;QAE/B;YACE,MAAM,IAAI,iBAAQ,CAAC,gCAAgC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC;AArBW,QAAA,SAAS,aAqBpB"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
|
|
2
|
-
export declare const
|
|
3
|
-
export declare const
|
|
2
|
+
export declare const getOctDirEncryptionKey: ({ encryption, kryptos, }: CreateCekOptions) => CreateCekResult;
|
|
3
|
+
export declare const getOctDirDecryptionKey: ({ encryption, kryptos, }: DecryptCekOptions) => DecryptCekResult;
|
|
4
4
|
//# sourceMappingURL=get-oct-dir-keys.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-oct-dir-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-dir-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAGhC,eAAO,MAAM,
|
|
1
|
+
{"version":3,"file":"get-oct-dir-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-dir-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAGhC,eAAO,MAAM,sBAAsB,6BAGhC,gBAAgB,KAAG,eAerB,CAAC;AAEF,eAAO,MAAM,sBAAsB,6BAGhC,iBAAiB,KAAG,gBAetB,CAAC"}
|
|
@@ -1,15 +1,15 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
3
|
+
exports.getOctDirDecryptionKey = exports.getOctDirEncryptionKey = void 0;
|
|
4
4
|
const kryptos_1 = require("@lindorm/kryptos");
|
|
5
5
|
const errors_1 = require("../../../errors");
|
|
6
6
|
const calculate_content_encryption_key_size_1 = require("../calculate/calculate-content-encryption-key-size");
|
|
7
|
-
const
|
|
7
|
+
const getOctDirEncryptionKey = ({ encryption, kryptos, }) => {
|
|
8
8
|
if (!kryptos_1.Kryptos.isOct(kryptos)) {
|
|
9
9
|
throw new errors_1.AesError("Invalid Kryptos", { debug: { kryptos: kryptos.toJSON() } });
|
|
10
10
|
}
|
|
11
11
|
const der = kryptos.export("der");
|
|
12
|
-
const keyLength = (0, calculate_content_encryption_key_size_1.
|
|
12
|
+
const keyLength = (0, calculate_content_encryption_key_size_1.calculateContentEncryptionKeySize)(encryption);
|
|
13
13
|
if (der.privateKey.length !== keyLength) {
|
|
14
14
|
throw new errors_1.AesError("Invalid key length", {
|
|
15
15
|
debug: { keyLength, privateKeyLength: der.privateKey.length },
|
|
@@ -17,13 +17,13 @@ const _getOctDirEncryptionKey = ({ encryption, kryptos, }) => {
|
|
|
17
17
|
}
|
|
18
18
|
return { contentEncryptionKey: der.privateKey };
|
|
19
19
|
};
|
|
20
|
-
exports.
|
|
21
|
-
const
|
|
20
|
+
exports.getOctDirEncryptionKey = getOctDirEncryptionKey;
|
|
21
|
+
const getOctDirDecryptionKey = ({ encryption, kryptos, }) => {
|
|
22
22
|
if (!kryptos_1.Kryptos.isOct(kryptos)) {
|
|
23
23
|
throw new errors_1.AesError("Invalid Kryptos", { debug: { kryptos: kryptos.toJSON() } });
|
|
24
24
|
}
|
|
25
25
|
const der = kryptos.export("der");
|
|
26
|
-
const keyLength = (0, calculate_content_encryption_key_size_1.
|
|
26
|
+
const keyLength = (0, calculate_content_encryption_key_size_1.calculateContentEncryptionKeySize)(encryption);
|
|
27
27
|
if (der.privateKey.length !== keyLength) {
|
|
28
28
|
throw new errors_1.AesError("Invalid key length", {
|
|
29
29
|
debug: { keyLength, privateKeyLength: der.privateKey.length },
|
|
@@ -31,5 +31,5 @@ const _getOctDirDecryptionKey = ({ encryption, kryptos, }) => {
|
|
|
31
31
|
}
|
|
32
32
|
return { contentEncryptionKey: der.privateKey };
|
|
33
33
|
};
|
|
34
|
-
exports.
|
|
34
|
+
exports.getOctDirDecryptionKey = getOctDirDecryptionKey;
|
|
35
35
|
//# sourceMappingURL=get-oct-dir-keys.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-oct-dir-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-dir-keys.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAC3C,4CAA2C;AAO3C,
|
|
1
|
+
{"version":3,"file":"get-oct-dir-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-dir-keys.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAC3C,4CAA2C;AAO3C,8GAAuG;AAEhG,MAAM,sBAAsB,GAAG,CAAC,EACrC,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAA,yEAAiC,EAAC,UAAU,CAAC,CAAC;IAEhE,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;YACvC,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AAClD,CAAC,CAAC;AAlBW,QAAA,sBAAsB,0BAkBjC;AAEK,MAAM,sBAAsB,GAAG,CAAC,EACrC,UAAU,EACV,OAAO,GACW,EAAoB,EAAE;IACxC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAA,yEAAiC,EAAC,UAAU,CAAC,CAAC;IAEhE,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,EAAE;YACvC,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AAClD,CAAC,CAAC;AAlBW,QAAA,sBAAsB,0BAkBjC"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
|
|
2
|
-
export declare const
|
|
3
|
-
export declare const
|
|
2
|
+
export declare const getOctKeyWrapEncryptionKey: ({ encryption, kryptos, }: CreateCekOptions) => CreateCekResult;
|
|
3
|
+
export declare const getOctKeyWrapDecryptionKey: ({ hkdfSalt, kryptos, publicEncryptionIv, publicEncryptionKey, publicEncryptionTag, }: DecryptCekOptions) => DecryptCekResult;
|
|
4
4
|
//# sourceMappingURL=get-oct-key-key-wrap.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-oct-key-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAMhC,eAAO,MAAM,
|
|
1
|
+
{"version":3,"file":"get-oct-key-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAMhC,eAAO,MAAM,0BAA0B,6BAGpC,gBAAgB,KAAG,eA4BrB,CAAC;AAEF,eAAO,MAAM,0BAA0B,yFAMpC,iBAAiB,KAAG,gBAuBtB,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
3
|
+
exports.getOctKeyWrapDecryptionKey = exports.getOctKeyWrapEncryptionKey = void 0;
|
|
4
4
|
const kryptos_1 = require("@lindorm/kryptos");
|
|
5
5
|
const crypto_1 = require("crypto");
|
|
6
6
|
const errors_1 = require("../../../errors");
|
|
@@ -8,18 +8,18 @@ const calculate_content_encryption_key_size_1 = require("../calculate/calculate-
|
|
|
8
8
|
const calculate_key_wrap_size_1 = require("../calculate/calculate-key-wrap-size");
|
|
9
9
|
const hkdf_1 = require("../key-derivation/hkdf");
|
|
10
10
|
const key_wrap_1 = require("../key-wrap/key-wrap");
|
|
11
|
-
const
|
|
11
|
+
const getOctKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
|
|
12
12
|
if (!kryptos_1.Kryptos.isOct(kryptos)) {
|
|
13
13
|
throw new errors_1.AesError("Invalid Kryptos", { debug: { kryptos: kryptos.toJSON() } });
|
|
14
14
|
}
|
|
15
15
|
const der = kryptos.export("der");
|
|
16
|
-
const cekSize = (0, calculate_content_encryption_key_size_1.
|
|
16
|
+
const cekSize = (0, calculate_content_encryption_key_size_1.calculateContentEncryptionKeySize)(encryption);
|
|
17
17
|
const contentEncryptionKey = (0, crypto_1.randomBytes)(cekSize);
|
|
18
|
-
const { derivedKey, hkdfSalt } = (0, hkdf_1.
|
|
18
|
+
const { derivedKey, hkdfSalt } = (0, hkdf_1.hkdf)({
|
|
19
19
|
derivationKey: der.privateKey,
|
|
20
|
-
keyLength: (0, calculate_key_wrap_size_1.
|
|
20
|
+
keyLength: (0, calculate_key_wrap_size_1.calculateKeyWrapSize)(kryptos.algorithm),
|
|
21
21
|
});
|
|
22
|
-
const { publicEncryptionKey, publicEncryptionIv, publicEncryptionTag } = (0, key_wrap_1.
|
|
22
|
+
const { publicEncryptionKey, publicEncryptionIv, publicEncryptionTag } = (0, key_wrap_1.keyWrap)({
|
|
23
23
|
contentEncryptionKey,
|
|
24
24
|
kryptos,
|
|
25
25
|
keyEncryptionKey: derivedKey,
|
|
@@ -32,8 +32,8 @@ const _getOctKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
|
|
|
32
32
|
publicEncryptionTag,
|
|
33
33
|
};
|
|
34
34
|
};
|
|
35
|
-
exports.
|
|
36
|
-
const
|
|
35
|
+
exports.getOctKeyWrapEncryptionKey = getOctKeyWrapEncryptionKey;
|
|
36
|
+
const getOctKeyWrapDecryptionKey = ({ hkdfSalt, kryptos, publicEncryptionIv, publicEncryptionKey, publicEncryptionTag, }) => {
|
|
37
37
|
if (!kryptos_1.Kryptos.isOct(kryptos)) {
|
|
38
38
|
throw new errors_1.AesError("Invalid Kryptos", { debug: { kryptos: kryptos.toJSON() } });
|
|
39
39
|
}
|
|
@@ -41,12 +41,12 @@ const _getOctKeyWrapDecryptionKey = ({ hkdfSalt, kryptos, publicEncryptionIv, pu
|
|
|
41
41
|
throw new errors_1.AesError("Missing publicEncryptionKey");
|
|
42
42
|
}
|
|
43
43
|
const der = kryptos.export("der");
|
|
44
|
-
const { derivedKey } = (0, hkdf_1.
|
|
44
|
+
const { derivedKey } = (0, hkdf_1.hkdf)({
|
|
45
45
|
derivationKey: der.privateKey,
|
|
46
46
|
hkdfSalt,
|
|
47
|
-
keyLength: (0, calculate_key_wrap_size_1.
|
|
47
|
+
keyLength: (0, calculate_key_wrap_size_1.calculateKeyWrapSize)(kryptos.algorithm),
|
|
48
48
|
});
|
|
49
|
-
return (0, key_wrap_1.
|
|
49
|
+
return (0, key_wrap_1.keyUnwrap)({
|
|
50
50
|
keyEncryptionKey: derivedKey,
|
|
51
51
|
kryptos,
|
|
52
52
|
publicEncryptionIv,
|
|
@@ -54,5 +54,5 @@ const _getOctKeyWrapDecryptionKey = ({ hkdfSalt, kryptos, publicEncryptionIv, pu
|
|
|
54
54
|
publicEncryptionTag,
|
|
55
55
|
});
|
|
56
56
|
};
|
|
57
|
-
exports.
|
|
57
|
+
exports.getOctKeyWrapDecryptionKey = getOctKeyWrapDecryptionKey;
|
|
58
58
|
//# sourceMappingURL=get-oct-key-key-wrap.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-oct-key-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAC3C,mCAAqC;AACrC,4CAA2C;AAO3C,
|
|
1
|
+
{"version":3,"file":"get-oct-key-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAC3C,mCAAqC;AACrC,4CAA2C;AAO3C,8GAAuG;AACvG,kFAA4E;AAC5E,iDAA8C;AAC9C,mDAA0D;AAEnD,MAAM,0BAA0B,GAAG,CAAC,EACzC,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,yEAAiC,EAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAA,WAAI,EAAC;QACpC,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,8CAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;KACnD,CAAC,CAAC;IAEH,MAAM,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,IAAA,kBAAO,EAAC;QAC/E,oBAAoB;QACpB,OAAO;QACP,gBAAgB,EAAE,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,QAAQ;QACR,mBAAmB;QACnB,kBAAkB;QAClB,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AA/BW,QAAA,0BAA0B,8BA+BrC;AAEK,MAAM,0BAA0B,GAAG,CAAC,EACzC,QAAQ,EACR,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,WAAI,EAAC;QAC1B,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,QAAQ;QACR,SAAS,EAAE,IAAA,8CAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;KACnD,CAAC,CAAC;IAEH,OAAO,IAAA,oBAAS,EAAC;QACf,gBAAgB,EAAE,UAAU;QAC5B,OAAO;QACP,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC,CAAC;AA7BW,QAAA,0BAA0B,8BA6BrC"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
|
|
2
|
-
export declare const
|
|
3
|
-
export declare const
|
|
2
|
+
export declare const getOctPbkdfKeyWrapEncryptionKey: ({ encryption, kryptos, }: CreateCekOptions) => CreateCekResult;
|
|
3
|
+
export declare const getOctPbkdfKeyWrapDecryptionKey: ({ kryptos, pbkdfIterations, pbkdfSalt, publicEncryptionKey, }: DecryptCekOptions) => DecryptCekResult;
|
|
4
4
|
//# sourceMappingURL=get-oct-pbkdf-key-wrap-keys.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAOhC,eAAO,MAAM,
|
|
1
|
+
{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAOhC,eAAO,MAAM,+BAA+B,6BAGzC,gBAAgB,KAAG,eA4BrB,CAAC;AAEF,eAAO,MAAM,+BAA+B,kEAKzC,iBAAiB,KAAG,gBAuBtB,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
3
|
+
exports.getOctPbkdfKeyWrapDecryptionKey = exports.getOctPbkdfKeyWrapEncryptionKey = void 0;
|
|
4
4
|
const kryptos_1 = require("@lindorm/kryptos");
|
|
5
5
|
const crypto_1 = require("crypto");
|
|
6
6
|
const errors_1 = require("../../../errors");
|
|
@@ -9,19 +9,19 @@ const calculate_key_wrap_size_1 = require("../calculate/calculate-key-wrap-size"
|
|
|
9
9
|
const calculate_pbkdf_hash_1 = require("../calculate/calculate-pbkdf-hash");
|
|
10
10
|
const pbkdf_1 = require("../key-derivation/pbkdf");
|
|
11
11
|
const ecb_key_wrap_1 = require("../key-wrap/ecb-key-wrap");
|
|
12
|
-
const
|
|
12
|
+
const getOctPbkdfKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
|
|
13
13
|
if (!kryptos_1.Kryptos.isOct(kryptos)) {
|
|
14
14
|
throw new errors_1.AesError("Invalid Kryptos", { debug: { kryptos: kryptos.toJSON() } });
|
|
15
15
|
}
|
|
16
16
|
const der = kryptos.export("der");
|
|
17
|
-
const cekSize = (0, calculate_content_encryption_key_size_1.
|
|
17
|
+
const cekSize = (0, calculate_content_encryption_key_size_1.calculateContentEncryptionKeySize)(encryption);
|
|
18
18
|
const contentEncryptionKey = (0, crypto_1.randomBytes)(cekSize);
|
|
19
|
-
const { derivedKey, pbkdfIterations, pbkdfSalt } = (0, pbkdf_1.
|
|
19
|
+
const { derivedKey, pbkdfIterations, pbkdfSalt } = (0, pbkdf_1.pbkdf)({
|
|
20
20
|
derivationKey: der.privateKey,
|
|
21
|
-
keyLength: (0, calculate_key_wrap_size_1.
|
|
22
|
-
algorithm: (0, calculate_pbkdf_hash_1.
|
|
21
|
+
keyLength: (0, calculate_key_wrap_size_1.calculateKeyWrapSize)(kryptos.algorithm),
|
|
22
|
+
algorithm: (0, calculate_pbkdf_hash_1.calculatePbkdfAlgorithm)(kryptos),
|
|
23
23
|
});
|
|
24
|
-
const { publicEncryptionKey } = (0, ecb_key_wrap_1.
|
|
24
|
+
const { publicEncryptionKey } = (0, ecb_key_wrap_1.ecbKeyWrap)({
|
|
25
25
|
contentEncryptionKey,
|
|
26
26
|
kryptos,
|
|
27
27
|
keyEncryptionKey: derivedKey,
|
|
@@ -33,8 +33,8 @@ const _getOctPbkdfKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
|
|
|
33
33
|
publicEncryptionKey,
|
|
34
34
|
};
|
|
35
35
|
};
|
|
36
|
-
exports.
|
|
37
|
-
const
|
|
36
|
+
exports.getOctPbkdfKeyWrapEncryptionKey = getOctPbkdfKeyWrapEncryptionKey;
|
|
37
|
+
const getOctPbkdfKeyWrapDecryptionKey = ({ kryptos, pbkdfIterations, pbkdfSalt, publicEncryptionKey, }) => {
|
|
38
38
|
if (!kryptos_1.Kryptos.isOct(kryptos)) {
|
|
39
39
|
throw new errors_1.AesError("Invalid Kryptos", { debug: { kryptos: kryptos.toJSON() } });
|
|
40
40
|
}
|
|
@@ -42,18 +42,18 @@ const _getOctPbkdfKeyWrapDecryptionKey = ({ kryptos, pbkdfIterations, pbkdfSalt,
|
|
|
42
42
|
throw new errors_1.AesError("Missing publicEncryptionKey");
|
|
43
43
|
}
|
|
44
44
|
const der = kryptos.export("der");
|
|
45
|
-
const { derivedKey } = (0, pbkdf_1.
|
|
45
|
+
const { derivedKey } = (0, pbkdf_1.pbkdf)({
|
|
46
46
|
derivationKey: der.privateKey,
|
|
47
|
-
keyLength: (0, calculate_key_wrap_size_1.
|
|
48
|
-
algorithm: (0, calculate_pbkdf_hash_1.
|
|
47
|
+
keyLength: (0, calculate_key_wrap_size_1.calculateKeyWrapSize)(kryptos.algorithm),
|
|
48
|
+
algorithm: (0, calculate_pbkdf_hash_1.calculatePbkdfAlgorithm)(kryptos),
|
|
49
49
|
pbkdfIterations,
|
|
50
50
|
pbkdfSalt,
|
|
51
51
|
});
|
|
52
|
-
return (0, ecb_key_wrap_1.
|
|
52
|
+
return (0, ecb_key_wrap_1.ecbKeyUnwrap)({
|
|
53
53
|
keyEncryptionKey: derivedKey,
|
|
54
54
|
kryptos,
|
|
55
55
|
publicEncryptionKey,
|
|
56
56
|
});
|
|
57
57
|
};
|
|
58
|
-
exports.
|
|
58
|
+
exports.getOctPbkdfKeyWrapDecryptionKey = getOctPbkdfKeyWrapDecryptionKey;
|
|
59
59
|
//# sourceMappingURL=get-oct-pbkdf-key-wrap-keys.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAC3C,mCAAqC;AACrC,4CAA2C;AAO3C,
|
|
1
|
+
{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAC3C,mCAAqC;AACrC,4CAA2C;AAO3C,8GAAuG;AACvG,kFAA4E;AAC5E,4EAA4E;AAC5E,mDAAgD;AAChD,2DAAoE;AAE7D,MAAM,+BAA+B,GAAG,CAAC,EAC9C,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,yEAAiC,EAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,IAAA,aAAK,EAAC;QACvD,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,8CAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;QAClD,SAAS,EAAE,IAAA,8CAAuB,EAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;IAEH,MAAM,EAAE,mBAAmB,EAAE,GAAG,IAAA,yBAAU,EAAC;QACzC,oBAAoB;QACpB,OAAO;QACP,gBAAgB,EAAE,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,eAAe;QACf,SAAS;QACT,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AA/BW,QAAA,+BAA+B,mCA+B1C;AAEK,MAAM,+BAA+B,GAAG,CAAC,EAC9C,OAAO,EACP,eAAe,EACf,SAAS,EACT,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,aAAK,EAAC;QAC3B,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,8CAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;QAClD,SAAS,EAAE,IAAA,8CAAuB,EAAC,OAAO,CAAC;QAC3C,eAAe;QACf,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,IAAA,2BAAY,EAAC;QAClB,gBAAgB,EAAE,UAAU;QAC5B,OAAO;QACP,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC,CAAC;AA5BW,QAAA,+BAA+B,mCA4B1C"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@lindorm/aes",
|
|
3
|
-
"version": "0.3.
|
|
3
|
+
"version": "0.3.2",
|
|
4
4
|
"license": "AGPL-3.0-or-later",
|
|
5
5
|
"author": "Jonn Nilsson",
|
|
6
6
|
"repository": {
|
|
@@ -26,12 +26,12 @@
|
|
|
26
26
|
"update": "ncu -u"
|
|
27
27
|
},
|
|
28
28
|
"dependencies": {
|
|
29
|
-
"@lindorm/errors": "^0.1.
|
|
30
|
-
"@lindorm/is": "^0.1.
|
|
31
|
-
"@lindorm/kryptos": "^0.3.
|
|
29
|
+
"@lindorm/errors": "^0.1.6",
|
|
30
|
+
"@lindorm/is": "^0.1.6",
|
|
31
|
+
"@lindorm/kryptos": "^0.3.3"
|
|
32
32
|
},
|
|
33
33
|
"devDependencies": {
|
|
34
|
-
"@lindorm/types": "^0.
|
|
34
|
+
"@lindorm/types": "^0.2.0"
|
|
35
35
|
},
|
|
36
|
-
"gitHead": "
|
|
36
|
+
"gitHead": "2754aaec7a3d5110f12f5bd56e6f2eb075c53599"
|
|
37
37
|
}
|