@lindorm/aes 0.5.5 → 0.6.0

package/dist/utils/private/encryption.js

@@ -3,29 +3,20 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.decryptAes = exports.encryptAes = void 0;
 const crypto_1 = require("crypto");
 const private_1 = require("../../constants/private");
+const errors_1 = require("../../errors");
 const calculate_1 = require("./calculate");
 const content_1 = require("./content");
 const data_1 = require("./data");
 const get_key_1 = require("./get-key");
+const encrypt_content_1 = require("./encrypt-content");
 const encryptAes = (options) => {
-    const { data, encryption = "A256GCM", kryptos } = options;
-    const { contentEncryptionKey, hkdfSalt, pbkdfIterations, pbkdfSalt, publicEncryptionIv, publicEncryptionJwk, publicEncryptionKey, publicEncryptionTag, } = (0, get_key_1.getEncryptionKey)({
+    const { aad, data, encryption = "A256GCM", kryptos } = options;
+    const keyResult = (0, get_key_1.getEncryptionKey)({ encryption, kryptos });
+    const { authTag, content, contentType, initialisationVector } = (0, encrypt_content_1.encryptAesContent)({
+        aad,
+        contentEncryptionKey: keyResult.contentEncryptionKey,
+        data,
         encryption,
-        kryptos,
-    });
-    const { encryptionKey, hashKey } = (0, data_1.splitContentEncryptionKey)(encryption, contentEncryptionKey);
-    const aesEncryption = (0, calculate_1.calculateAesEncryption)(encryption);
-    const initialisationVector = (0, data_1.getInitialisationVector)(encryption);
-    const cipher = (0, crypto_1.createCipheriv)(aesEncryption, encryptionKey, initialisationVector);
-    const contentType = (0, content_1.calculateContentType)(data);
-    const buffer = (0, content_1.contentToBuffer)(data, contentType);
-    const content = Buffer.concat([cipher.update(buffer), cipher.final()]);
-    const authTag = (0, data_1.createAuthTag)({
-        cipher,
-        content,
-        hashKey,
-        encryption,
-        initialisationVector,
     });
     return {
         algorithm: kryptos.algorithm,
@@ -33,24 +24,22 @@ const encryptAes = (options) => {
         content,
         contentType,
         encryption,
-        hkdfSalt,
         initialisationVector,
         keyId: kryptos.id,
-        pbkdfIterations,
-        pbkdfSalt,
-        publicEncryptionIv,
-        publicEncryptionJwk,
-        publicEncryptionKey,
-        publicEncryptionTag,
+        pbkdfIterations: keyResult.pbkdfIterations,
+        pbkdfSalt: keyResult.pbkdfSalt,
+        publicEncryptionIv: keyResult.publicEncryptionIv,
+        publicEncryptionJwk: keyResult.publicEncryptionJwk,
+        publicEncryptionKey: keyResult.publicEncryptionKey,
+        publicEncryptionTag: keyResult.publicEncryptionTag,
         version: private_1.LATEST_AES_VERSION,
     };
 };
 exports.encryptAes = encryptAes;
 const decryptAes = (options) => {
-    const { authTag, content, contentType, encryption, hkdfSalt, initialisationVector, kryptos, pbkdfIterations, pbkdfSalt, publicEncryptionIv, publicEncryptionJwk, publicEncryptionKey, publicEncryptionTag, } = options;
+    const { aad, authTag, content, contentType, encryption, initialisationVector, kryptos, pbkdfIterations, pbkdfSalt, publicEncryptionIv, publicEncryptionJwk, publicEncryptionKey, publicEncryptionTag, } = options;
     const { contentEncryptionKey } = (0, get_key_1.getDecryptionKey)({
         encryption,
-        hkdfSalt,
         kryptos,
         pbkdfIterations,
         pbkdfSalt,
@@ -61,8 +50,19 @@ const decryptAes = (options) => {
     });
     const { encryptionKey, hashKey } = (0, data_1.splitContentEncryptionKey)(encryption, contentEncryptionKey);
     const aesEncryption = (0, calculate_1.calculateAesEncryption)(encryption);
-    const decipher = (0, crypto_1.createDecipheriv)(aesEncryption, encryptionKey, initialisationVector);
+    const isGcm = encryption.includes("GCM");
+    const decipherOptions = isGcm
+        ? { authTagLength: 16 }
+        : undefined;
+    const decipher = (0, crypto_1.createDecipheriv)(aesEncryption, encryptionKey, initialisationVector, decipherOptions);
+    if (isGcm && authTag && authTag.length !== 16) {
+        throw new errors_1.AesError("Invalid GCM auth tag length");
+    }
+    if (isGcm && aad) {
+        decipher.setAAD(aad);
+    }
     (0, data_1.assertAuthTag)({
+        aad,
         authTag,
         content,
         hashKey,

package/dist/utils/private/encryption.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/utils/private/encryption.ts"],"names":[],"mappings":";;;AAAA,mCAA0D;AAC1D,qDAA6D;AAM7D,2CAAqD;AACrD,uCAAgF;AAChF,iCAKgB;AAChB,uCAA+D;AAExD,MAAM,UAAU,GAAG,CAAC,OAAoC,EAAuB,EAAE;IACtF,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAE1D,MAAM,EACJ,oBAAoB,EACpB,QAAQ,EACR,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,IAAA,0BAAgB,EAAC;QACnB,UAAU;QACV,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAA,gCAAyB,EAC1D,UAAU,EACV,oBAAoB,CACrB,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,kCAAsB,EAAC,UAAU,CAAC,CAAC;IACzD,MAAM,oBAAoB,GAAG,IAAA,8BAAuB,EAAC,UAAU,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAElF,MAAM,WAAW,GAAG,IAAA,8BAAoB,EAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAA,yBAAe,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEvE,MAAM,OAAO,GAAG,IAAA,oBAAa,EAAC;QAC5B,MAAM;QACN,OAAO;QACP,OAAO;QACP,UAAU;QACV,oBAAoB;KACrB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,OAAO;QACP,WAAW;QACX,UAAU;QACV,QAAQ;QACR,oBAAoB;QACpB,KAAK,EAAE,OAAO,CAAC,EAAE;QACjB,eAAe;QACf,SAAS;QACT,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB;QACnB,mBAAmB;QACnB,OAAO,EAAE,4BAAkB;KAC5B,CAAC;AACJ,CAAC,CAAC;AAvDW,QAAA,UAAU,cAuDrB;AAEK,MAAM,UAAU,GAAG,CACxB,OAAoC,EACjC,EAAE;IACL,MAAM,EACJ,OAAO,EACP,OAAO,EACP,WAAW,EACX,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,OAAO,EACP,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,OAAO,CAAC;IAEZ,MAAM,EAAE,oBAAoB,EAAE,GAAG,IAAA,0BAAgB,EAAC;QAChD,UAAU;QACV,QAAQ;QACR,OAAO;QACP,eAAe;QACf,SAAS;QACT,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB;QACnB,mBAAmB;KACpB,CAAC,CAAC;IAEH,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAA,gCAAyB,EAC1D,UAAU,EACV,oBAAoB,CACrB,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,kCAAsB,EAAC,UAAU,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAEtF,IAAA,oBAAa,EAAC;QACZ,OAAO;QACP,OAAO;QACP,OAAO;QACP,QAAQ;QACR,UAAU;QACV,oBAAoB;KACrB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE1E,OAAO,IAAA,sBAAY,EAAI,KAAK,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC,CAAC;AAnDW,QAAA,UAAU,cAmDrB"}
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/utils/private/encryption.ts"],"names":[],"mappings":";;;AAAA,mCAAyE;AACzE,qDAA6D;AAC7D,yCAAwC;AAMxC,2CAAqD;AACrD,uCAAyC;AACzC,iCAAkE;AAClE,uCAA+D;AAC/D,uDAAsD;AAE/C,MAAM,UAAU,GAAG,CAAC,OAAoC,EAAuB,EAAE;IACtF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAE/D,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAE5D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,GAAG,IAAA,mCAAiB,EAAC;QAChF,GAAG;QACH,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,IAAI;QACJ,UAAU;KACX,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,OAAO;QACP,WAAW;QACX,UAAU;QACV,oBAAoB;QACpB,KAAK,EAAE,OAAO,CAAC,EAAE;QACjB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;QAClD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;QAClD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;QAClD,OAAO,EAAE,4BAAkB;KAC5B,CAAC;AACJ,CAAC,CAAC;AA5BW,QAAA,UAAU,cA4BrB;AAEK,MAAM,UAAU,GAAG,CACxB,OAAoC,EACjC,EAAE;IACL,MAAM,EACJ,GAAG,EACH,OAAO,EACP,OAAO,EACP,WAAW,EACX,UAAU,EACV,oBAAoB,EACpB,OAAO,EACP,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,OAAO,CAAC;IAEZ,MAAM,EAAE,oBAAoB,EAAE,GAAG,IAAA,0BAAgB,EAAC;QAChD,UAAU;QACV,OAAO;QACP,eAAe;QACf,SAAS;QACT,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB;QACnB,mBAAmB;KACpB,CAAC,CAAC;IAEH,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAA,gCAAyB,EAC1D,UAAU,EACV,oBAAoB,CACrB,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,kCAAsB,EAAC,UAAU,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,eAAe,GAAiC,KAAK;QACzD,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE;QACvB,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAC/B,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,eAAmC,CACpC,CAAC;IAEF,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QAChB,QAAwB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,IAAA,oBAAa,EAAC;QACZ,GAAG;QACH,OAAO;QACP,OAAO;QACP,OAAO;QACP,QAAQ;QACR,UAAU;QACV,oBAAoB;KACrB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE1E,OAAO,IAAA,sBAAY,EAAI,KAAK,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC,CAAC;AApEW,QAAA,UAAU,cAoErB"}

package/dist/utils/private/index.d.ts

@@ -6,8 +6,14 @@ export * from "./key-derivation";
 export * from "./key-types";
 export * from "./key-wrap";
 export * from "./oct";
+export * from "./aes-header";
 export * from "./encoded-aes";
+export * from "./encrypt-content";
+export * from "./encrypt-encoded";
+export * from "./encrypt-serialised";
+export * from "./encrypt-tokenised";
 export * from "./encryption";
+export * from "./prepare-encryption";
 export * from "./serialised-aes";
 export * from "./tokenised-aes";
 //# sourceMappingURL=index.d.ts.map

package/dist/utils/private/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AAEtB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AAEtB,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}

package/dist/utils/private/index.js

@@ -22,8 +22,14 @@ __exportStar(require("./key-derivation"), exports);
 __exportStar(require("./key-types"), exports);
 __exportStar(require("./key-wrap"), exports);
 __exportStar(require("./oct"), exports);
+__exportStar(require("./aes-header"), exports);
 __exportStar(require("./encoded-aes"), exports);
+__exportStar(require("./encrypt-content"), exports);
+__exportStar(require("./encrypt-encoded"), exports);
+__exportStar(require("./encrypt-serialised"), exports);
+__exportStar(require("./encrypt-tokenised"), exports);
 __exportStar(require("./encryption"), exports);
+__exportStar(require("./prepare-encryption"), exports);
 __exportStar(require("./serialised-aes"), exports);
 __exportStar(require("./tokenised-aes"), exports);
 //# sourceMappingURL=index.js.map

package/dist/utils/private/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yCAAuB;AACvB,mDAAiC;AACjC,4CAA0B;AAC1B,mDAAiC;AACjC,8CAA4B;AAC5B,6CAA2B;AAC3B,wCAAsB;AAEtB,gDAA8B;AAC9B,+CAA6B;AAC7B,mDAAiC;AACjC,kDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yCAAuB;AACvB,mDAAiC;AACjC,4CAA0B;AAC1B,mDAAiC;AACjC,8CAA4B;AAC5B,6CAA2B;AAC3B,wCAAsB;AAEtB,+CAA6B;AAC7B,gDAA8B;AAC9B,oDAAkC;AAClC,oDAAkC;AAClC,uDAAqC;AACrC,sDAAoC;AACpC,+CAA6B;AAC7B,uDAAqC;AACrC,mDAAiC;AACjC,kDAAgC"}

package/dist/utils/private/key-derivation/concat-kdf.d.ts

@@ -0,0 +1,14 @@
+import { AesKeyLength } from "@lindorm/types";
+type Options = {
+    algorithm: string;
+    apu?: Buffer;
+    apv?: Buffer;
+    keyLength: AesKeyLength;
+    sharedSecret: Buffer;
+};
+type Result = {
+    derivedKey: Buffer;
+};
+export declare const concatKdf: (options: Options) => Result;
+export {};
+//# sourceMappingURL=concat-kdf.d.ts.map

package/dist/utils/private/key-derivation/concat-kdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concat-kdf.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/concat-kdf.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,KAAK,OAAO,GAAG;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAQF,eAAO,MAAM,SAAS,GAAI,SAAS,OAAO,KAAG,MAiB5C,CAAC"}

package/dist/utils/private/key-derivation/concat-kdf.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.concatKdf = void 0;
+const crypto_1 = require("crypto");
+const lengthPrefixed = (data) => {
+    const len = Buffer.alloc(4);
+    len.writeUInt32BE(data.length);
+    return Buffer.concat([len, data]);
+};
+const concatKdf = (options) => {
+    const algId = lengthPrefixed(Buffer.from(options.algorithm, "utf8"));
+    const partyU = lengthPrefixed(options.apu ?? Buffer.alloc(0));
+    const partyV = lengthPrefixed(options.apv ?? Buffer.alloc(0));
+    const suppPub = Buffer.alloc(4);
+    suppPub.writeUInt32BE(options.keyLength * 8);
+    const otherInfo = Buffer.concat([algId, partyU, partyV, suppPub]);
+    const round = Buffer.alloc(4);
+    round.writeUInt32BE(1);
+    const hash = (0, crypto_1.createHash)("sha256");
+    hash.update(round);
+    hash.update(options.sharedSecret);
+    hash.update(otherInfo);
+    return { derivedKey: hash.digest().subarray(0, options.keyLength) };
+};
+exports.concatKdf = concatKdf;
+//# sourceMappingURL=concat-kdf.js.map

package/dist/utils/private/key-derivation/concat-kdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concat-kdf.js","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/concat-kdf.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AAepC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAU,EAAE;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC,CAAC;AAEK,MAAM,SAAS,GAAG,CAAC,OAAgB,EAAU,EAAE;IACpD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAEvB,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEvB,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;AACtE,CAAC,CAAC;AAjBW,QAAA,SAAS,aAiBpB"}

package/dist/utils/private/key-derivation/index.d.ts

@@ -1,3 +1,3 @@
-export * from "./hkdf";
+export * from "./concat-kdf";
 export * from "./pbkdf";
 //# sourceMappingURL=index.d.ts.map

package/dist/utils/private/key-derivation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC"}

package/dist/utils/private/key-derivation/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./hkdf"), exports);
+__exportStar(require("./concat-kdf"), exports);
 __exportStar(require("./pbkdf"), exports);
 //# sourceMappingURL=index.js.map

package/dist/utils/private/key-derivation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAAuB;AACvB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,0CAAwB"}

package/dist/utils/private/key-derivation/pbkdf.d.ts

@@ -3,6 +3,7 @@ type Options = {
     algorithm: ShaAlgorithm;
     derivationKey: Buffer;
     keyLength: AesKeyLength;
+    kryptosAlgorithm: string;
     pbkdfIterations?: number;
     pbkdfSalt?: Buffer;
 };

package/dist/utils/private/key-derivation/pbkdf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pbkdf.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/pbkdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG5D,KAAK,OAAO,GAAG;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,YAAY,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAKF,eAAO,MAAM,KAAK,GAAI,SAAS,OAAO,KAAG,MAaxC,CAAC"}
+{"version":3,"file":"pbkdf.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/pbkdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI5D,KAAK,OAAO,GAAG;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,YAAY,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAKF,eAAO,MAAM,KAAK,GAAI,SAAS,OAAO,KAAG,MAyBxC,CAAC"}

package/dist/utils/private/key-derivation/pbkdf.js

@@ -2,11 +2,22 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.pbkdf = void 0;
 const crypto_1 = require("crypto");
-const randomIterations = () => Math.floor(Math.random() * 20000) + 90000;
+const errors_1 = require("../../../errors");
+const randomIterations = () => (0, crypto_1.randomInt)(90000, 110001);
 const pbkdf = (options) => {
     const pbkdfSalt = options.pbkdfSalt ?? (0, crypto_1.randomBytes)(16);
     const pbkdfIterations = options.pbkdfIterations ?? randomIterations();
-    const derivedKey = (0, crypto_1.pbkdf2Sync)(options.derivationKey, pbkdfSalt, pbkdfIterations, options.keyLength, options.algorithm);
+    if (pbkdfIterations < 1000) {
+        throw new errors_1.AesError("PBKDF2 iteration count must be at least 1000", {
+            debug: { pbkdfIterations },
+        });
+    }
+    const rfcSalt = Buffer.concat([
+        Buffer.from(options.kryptosAlgorithm, "utf8"),
+        Buffer.from([0x00]),
+        pbkdfSalt,
+    ]);
+    const derivedKey = (0, crypto_1.pbkdf2Sync)(options.derivationKey, rfcSalt, pbkdfIterations, options.keyLength, options.algorithm);
     return { derivedKey, pbkdfIterations, pbkdfSalt };
 };
 exports.pbkdf = pbkdf;

package/dist/utils/private/key-derivation/pbkdf.js.map

@@ -1 +1 @@
-{"version":3,"file":"pbkdf.js","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/pbkdf.ts"],"names":[],"mappings":";;;AACA,mCAAiD;AAiBjD,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAE1E,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAU,EAAE;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gBAAgB,EAAE,CAAC;IAEtE,MAAM,UAAU,GAAG,IAAA,mBAAU,EAC3B,OAAO,CAAC,aAAa,EACrB,SAAS,EACT,eAAe,EACf,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC,CAAC;AAbW,QAAA,KAAK,SAahB"}
+{"version":3,"file":"pbkdf.js","sourceRoot":"","sources":["../../../../src/utils/private/key-derivation/pbkdf.ts"],"names":[],"mappings":";;;AACA,mCAA4D;AAC5D,4CAA2C;AAkB3C,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAA,kBAAS,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAEzD,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAU,EAAE;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gBAAgB,EAAE,CAAC;IAEtE,IAAI,eAAe,GAAG,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAQ,CAAC,8CAA8C,EAAE;YACjE,KAAK,EAAE,EAAE,eAAe,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAA,mBAAU,EAC3B,OAAO,CAAC,aAAa,EACrB,OAAO,EACP,eAAe,EACf,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC,CAAC;AAzBW,QAAA,KAAK,SAyBhB"}

package/dist/utils/private/key-wrap/ecb-key-wrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ecb-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/ecb-key-wrap.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,wBAAwB,CAAC;AAMhC,eAAO,MAAM,UAAU,GAAI,sDAIxB,cAAc,KAAG,aA8BnB,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,qDAI1B,gBAAgB,KAAG,eAmCrB,CAAC"}
+{"version":3,"file":"ecb-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/ecb-key-wrap.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,wBAAwB,CAAC;AAQhC,eAAO,MAAM,UAAU,GAAI,sDAIxB,cAAc,KAAG,aAoCnB,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,qDAI1B,gBAAgB,KAAG,eAqCrB,CAAC"}

package/dist/utils/private/key-wrap/ecb-key-wrap.js

@@ -2,13 +2,18 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ecbKeyUnwrap = exports.ecbKeyWrap = void 0;
 const crypto_1 = require("crypto");
+const errors_1 = require("../../../errors");
 const calculate_1 = require("../calculate");
 const AIV = "A6A6A6A6A6A6A6A6";
+const AIV_BUFFER = Buffer.from(AIV, "hex");
 const BLOCK_SIZE = 8;
 const ecbKeyWrap = ({ contentEncryptionKey, keyEncryptionKey, kryptos, }) => {
     const algorithm = (0, calculate_1.calculateKeyWrapEncryption)(kryptos);
+    if (contentEncryptionKey.length < 16 || contentEncryptionKey.length % 8 !== 0) {
+        throw new errors_1.AesError("Key wrap input must be at least 16 bytes and a multiple of 8");
+    }
     const n = contentEncryptionKey.length / BLOCK_SIZE;
-    let a = Buffer.from(AIV, "hex");
+    let a = Buffer.from(AIV_BUFFER);
     const r = [];
     for (let i = 0; i < n; i++) {
         r[i] = contentEncryptionKey.subarray(i * BLOCK_SIZE, (i + 1) * BLOCK_SIZE);
@@ -29,6 +34,7 @@ const ecbKeyWrap = ({ contentEncryptionKey, keyEncryptionKey, kryptos, }) => {
             r[i] = encrypted.subarray(BLOCK_SIZE);
         }
     }
+    cipher.final();
     return { publicEncryptionKey: Buffer.concat([a, ...r]) };
 };
 exports.ecbKeyWrap = ecbKeyWrap;
@@ -57,8 +63,9 @@ const ecbKeyUnwrap = ({ keyEncryptionKey, kryptos, publicEncryptionKey, }) => {
             r[i] = decrypted.subarray(BLOCK_SIZE);
         }
     }
-    if (!a.equals(Buffer.from(AIV, "hex"))) {
-        throw new Error("Integrity check failed");
+    decipher.final();
+    if (!(0, crypto_1.timingSafeEqual)(a, AIV_BUFFER)) {
+        throw new errors_1.AesError("Integrity check failed");
     }
     return { contentEncryptionKey: Buffer.concat(r) };
 };

package/dist/utils/private/key-wrap/ecb-key-wrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"ecb-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/ecb-key-wrap.ts"],"names":[],"mappings":";;;AAAA,mCAA0D;AAO1D,4CAA0D;AAE1D,MAAM,GAAG,GAAG,kBAA2B,CAAC;AACxC,MAAM,UAAU,GAAG,CAAU,CAAC;AAEvB,MAAM,UAAU,GAAG,CAAC,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,GACQ,EAAiB,EAAE;IAClC,MAAM,SAAS,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,CAAC,GAAG,oBAAoB,CAAC,MAAM,GAAG,UAAU,CAAC;IACnD,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,EAAE,CAAC;IAEb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAwB,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;YACD,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC,CAAC;AAlCW,QAAA,UAAU,cAkCrB;AAEK,MAAM,YAAY,GAAG,CAAC,EAC3B,gBAAgB,EAChB,OAAO,EACP,mBAAmB,GACF,EAAmB,EAAE;IACtC,MAAM,UAAU,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEvD,MAAM,CAAC,GAAG,mBAAmB,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,EAAE,CAAC;IAEb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACtE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC,CAAC;AAvCW,QAAA,YAAY,gBAuCvB"}
+{"version":3,"file":"ecb-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/ecb-key-wrap.ts"],"names":[],"mappings":";;;AAAA,mCAA2E;AAO3E,4CAA2C;AAC3C,4CAA0D;AAE1D,MAAM,GAAG,GAAG,kBAA2B,CAAC;AACxC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,CAAU,CAAC;AAEvB,MAAM,UAAU,GAAG,CAAC,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,GACQ,EAAiB,EAAE;IAClC,MAAM,SAAS,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,IAAI,oBAAoB,CAAC,MAAM,GAAG,EAAE,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,iBAAQ,CAAC,8DAA8D,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,GAAG,oBAAoB,CAAC,MAAM,GAAG,UAAU,CAAC;IACnD,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,EAAE,CAAC;IAEb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;YACD,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC,CAAC;AAxCW,QAAA,UAAU,cAwCrB;AAEK,MAAM,YAAY,GAAG,CAAC,EAC3B,gBAAgB,EAChB,OAAO,EACP,mBAAmB,GACF,EAAmB,EAAE;IACtC,MAAM,UAAU,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEvD,MAAM,CAAC,GAAG,mBAAmB,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,EAAE,CAAC;IAEb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACtE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEjB,IAAI,CAAC,IAAA,wBAAe,EAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,iBAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC,CAAC;AAzCW,QAAA,YAAY,gBAyCvB"}

package/dist/utils/private/key-wrap/gcm-key-wrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gcm-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/gcm-key-wrap.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,wBAAwB,CAAC;AAGhC,eAAO,MAAM,UAAU,GAAI,sDAIxB,cAAc,KAAG,aAkBnB,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,8FAM1B,gBAAgB,KAAG,eAwBrB,CAAC"}
+{"version":3,"file":"gcm-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/gcm-key-wrap.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,wBAAwB,CAAC;AAGhC,eAAO,MAAM,UAAU,GAAI,sDAIxB,cAAc,KAAG,aAkBnB,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,8FAM1B,gBAAgB,KAAG,eA8BrB,CAAC"}

package/dist/utils/private/key-wrap/gcm-key-wrap.js

@@ -23,6 +23,12 @@ const gcmKeyUnwrap = ({ keyEncryptionKey, kryptos, publicEncryptionIv, publicEnc
     if (!publicEncryptionTag) {
         throw new errors_1.AesError("Invalid public encryption tag");
     }
+    if (publicEncryptionIv.length !== 12) {
+        throw new errors_1.AesError("Invalid GCM key wrap IV length");
+    }
+    if (publicEncryptionTag.length !== 16) {
+        throw new errors_1.AesError("Invalid GCM key wrap auth tag length");
+    }
     const algorithm = (0, calculate_1.calculateKeyWrapEncryption)(kryptos);
     const decipher = (0, crypto_1.createDecipheriv)(algorithm, keyEncryptionKey, publicEncryptionIv);
     decipher.setAuthTag(publicEncryptionTag);

package/dist/utils/private/key-wrap/gcm-key-wrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcm-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/gcm-key-wrap.ts"],"names":[],"mappings":";;;AAAA,mCAMgB;AAChB,4CAA2C;AAO3C,4CAA0D;AAEnD,MAAM,UAAU,GAAG,CAAC,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,GACQ,EAAiB,EAAE;IAClC,MAAM,SAAS,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,kBAAkB,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAA,uBAAc,EAC3B,SAAS,EACT,gBAAgB,EAChB,kBAAkB,CACN,CAAC;IAEf,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;AAC1E,CAAC,CAAC;AAtBW,QAAA,UAAU,cAsBrB;AAEK,MAAM,YAAY,GAAG,CAAC,EAC3B,gBAAgB,EAChB,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACF,EAAmB,EAAE;IACtC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAQ,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAC/B,SAAS,EACT,gBAAgB,EAChB,kBAAkB,CACJ,CAAC;IAEjB,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAEzC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACpC,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;IAEH,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAClC,CAAC,CAAC;AA9BW,QAAA,YAAY,gBA8BvB"}
+{"version":3,"file":"gcm-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/key-wrap/gcm-key-wrap.ts"],"names":[],"mappings":";;;AAAA,mCAMgB;AAChB,4CAA2C;AAO3C,4CAA0D;AAEnD,MAAM,UAAU,GAAG,CAAC,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,GACQ,EAAiB,EAAE;IAClC,MAAM,SAAS,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,kBAAkB,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAA,uBAAc,EAC3B,SAAS,EACT,gBAAgB,EAChB,kBAAkB,CACN,CAAC;IAEf,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;AAC1E,CAAC,CAAC;AAtBW,QAAA,UAAU,cAsBrB;AAEK,MAAM,YAAY,GAAG,CAAC,EAC3B,gBAAgB,EAChB,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACF,EAAmB,EAAE;IACtC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAQ,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,iBAAQ,CAAC,gCAAgC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,mBAAmB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,iBAAQ,CAAC,sCAAsC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,sCAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAC/B,SAAS,EACT,gBAAgB,EAChB,kBAAkB,CACJ,CAAC;IAEjB,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAEzC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACpC,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;IAEH,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAClC,CAAC,CAAC;AApCW,QAAA,YAAY,gBAoCvB"}

package/dist/utils/private/oct/get-oct-key-key-wrap.d.ts

@@ -1,4 +1,4 @@
 import { CreateCekOptions, CreateCekResult, DecryptCekOptions, DecryptCekResult } from "../../../types/private";
 export declare const getOctKeyWrapEncryptionKey: ({ encryption, kryptos, }: CreateCekOptions) => CreateCekResult;
-export declare const getOctKeyWrapDecryptionKey: ({ hkdfSalt, kryptos, publicEncryptionIv, publicEncryptionKey, publicEncryptionTag, }: DecryptCekOptions) => DecryptCekResult;
+export declare const getOctKeyWrapDecryptionKey: ({ kryptos, publicEncryptionIv, publicEncryptionKey, publicEncryptionTag, }: DecryptCekOptions) => DecryptCekResult;
 //# sourceMappingURL=get-oct-key-key-wrap.d.ts.map

package/dist/utils/private/oct/get-oct-key-key-wrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-oct-key-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAKhC,eAAO,MAAM,0BAA0B,GAAI,0BAGxC,gBAAgB,KAAG,eA4BrB,CAAC;AAEF,eAAO,MAAM,0BAA0B,GAAI,sFAMxC,iBAAiB,KAAG,gBAuBtB,CAAC"}
+{"version":3,"file":"get-oct-key-key-wrap.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAIhC,eAAO,MAAM,0BAA0B,GAAI,0BAGxC,gBAAgB,KAAG,eAyBrB,CAAC;AAEF,eAAO,MAAM,0BAA0B,GAAI,4EAKxC,iBAAiB,KAAG,gBAoBtB,CAAC"}

package/dist/utils/private/oct/get-oct-key-key-wrap.js

@@ -5,7 +5,6 @@ const kryptos_1 = require("@lindorm/kryptos");
 const crypto_1 = require("crypto");
 const errors_1 = require("../../../errors");
 const calculate_1 = require("../calculate");
-const key_derivation_1 = require("../key-derivation");
 const key_wrap_1 = require("../key-wrap");
 const getOctKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
     if (!kryptos_1.KryptosKit.isOct(kryptos)) {
@@ -14,25 +13,22 @@ const getOctKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
     const der = kryptos.export("der");
     const cekSize = (0, calculate_1.calculateContentEncryptionKeySize)(encryption);
     const contentEncryptionKey = (0, crypto_1.randomBytes)(cekSize);
-    const { derivedKey, hkdfSalt } = (0, key_derivation_1.hkdf)({
-        derivationKey: der.privateKey,
-        keyLength: (0, calculate_1.calculateKeyWrapSize)(kryptos.algorithm),
-    });
+    const keyWrapSize = (0, calculate_1.calculateKeyWrapSize)(kryptos.algorithm);
+    const keyEncryptionKey = der.privateKey.subarray(0, keyWrapSize);
     const { publicEncryptionKey, publicEncryptionIv, publicEncryptionTag } = (0, key_wrap_1.keyWrap)({
         contentEncryptionKey,
         kryptos,
-        keyEncryptionKey: derivedKey,
+        keyEncryptionKey,
     });
     return {
         contentEncryptionKey,
-        hkdfSalt,
         publicEncryptionKey,
         publicEncryptionIv,
         publicEncryptionTag,
     };
 };
 exports.getOctKeyWrapEncryptionKey = getOctKeyWrapEncryptionKey;
-const getOctKeyWrapDecryptionKey = ({ hkdfSalt, kryptos, publicEncryptionIv, publicEncryptionKey, publicEncryptionTag, }) => {
+const getOctKeyWrapDecryptionKey = ({ kryptos, publicEncryptionIv, publicEncryptionKey, publicEncryptionTag, }) => {
     if (!kryptos_1.KryptosKit.isOct(kryptos)) {
         throw new errors_1.AesError("Invalid Kryptos", { debug: { kryptos: kryptos.toJSON() } });
     }
@@ -40,13 +36,10 @@ const getOctKeyWrapDecryptionKey = ({ hkdfSalt, kryptos, publicEncryptionIv, pub
         throw new errors_1.AesError("Missing publicEncryptionKey");
     }
     const der = kryptos.export("der");
-    const { derivedKey } = (0, key_derivation_1.hkdf)({
-        derivationKey: der.privateKey,
-        hkdfSalt,
-        keyLength: (0, calculate_1.calculateKeyWrapSize)(kryptos.algorithm),
-    });
+    const keyWrapSize = (0, calculate_1.calculateKeyWrapSize)(kryptos.algorithm);
+    const keyEncryptionKey = der.privateKey.subarray(0, keyWrapSize);
     return (0, key_wrap_1.keyUnwrap)({
-        keyEncryptionKey: derivedKey,
+        keyEncryptionKey,
         kryptos,
         publicEncryptionIv,
         publicEncryptionKey,

package/dist/utils/private/oct/get-oct-key-key-wrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-oct-key-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,mCAAqC;AACrC,4CAA2C;AAO3C,4CAAuF;AACvF,sDAAyC;AACzC,0CAAiD;AAE1C,MAAM,0BAA0B,GAAG,CAAC,EACzC,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,6CAAiC,EAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAA,qBAAI,EAAC;QACpC,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;KACnD,CAAC,CAAC;IAEH,MAAM,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,IAAA,kBAAO,EAAC;QAC/E,oBAAoB;QACpB,OAAO;QACP,gBAAgB,EAAE,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,QAAQ;QACR,mBAAmB;QACnB,kBAAkB;QAClB,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AA/BW,QAAA,0BAA0B,8BA+BrC;AAEK,MAAM,0BAA0B,GAAG,CAAC,EACzC,QAAQ,EACR,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,qBAAI,EAAC;QAC1B,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,QAAQ;QACR,SAAS,EAAE,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;KACnD,CAAC,CAAC;IAEH,OAAO,IAAA,oBAAS,EAAC;QACf,gBAAgB,EAAE,UAAU;QAC5B,OAAO;QACP,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC,CAAC;AA7BW,QAAA,0BAA0B,8BA6BrC"}
+{"version":3,"file":"get-oct-key-key-wrap.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-key-key-wrap.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,mCAAqC;AACrC,4CAA2C;AAO3C,4CAAuF;AACvF,0CAAiD;AAE1C,MAAM,0BAA0B,GAAG,CAAC,EACzC,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,6CAAiC,EAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAElD,MAAM,WAAW,GAAG,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAEjE,MAAM,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,IAAA,kBAAO,EAAC;QAC/E,oBAAoB;QACpB,OAAO;QACP,gBAAgB;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AA5BW,QAAA,0BAA0B,8BA4BrC;AAEK,MAAM,0BAA0B,GAAG,CAAC,EACzC,OAAO,EACP,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,WAAW,GAAG,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAEjE,OAAO,IAAA,oBAAS,EAAC;QACf,gBAAgB;QAChB,OAAO;QACP,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC,CAAC;AAzBW,QAAA,0BAA0B,8BAyBrC"}

package/dist/utils/private/oct/get-oct-pbkdf-key-wrap-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAShC,eAAO,MAAM,+BAA+B,GAAI,0BAG7C,gBAAgB,KAAG,eA4BrB,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,+DAK7C,iBAAiB,KAAG,gBAuBtB,CAAC"}
+{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.d.ts","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAShC,eAAO,MAAM,+BAA+B,GAAI,0BAG7C,gBAAgB,KAAG,eA6BrB,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,+DAK7C,iBAAiB,KAAG,gBAwBtB,CAAC"}

package/dist/utils/private/oct/get-oct-pbkdf-key-wrap-keys.js

@@ -18,6 +18,7 @@ const getOctPbkdfKeyWrapEncryptionKey = ({ encryption, kryptos, }) => {
         derivationKey: der.privateKey,
         keyLength: (0, calculate_1.calculateKeyWrapSize)(kryptos.algorithm),
         algorithm: (0, calculate_1.calculatePbkdfAlgorithm)(kryptos),
+        kryptosAlgorithm: kryptos.algorithm,
     });
     const { publicEncryptionKey } = (0, key_wrap_1.ecbKeyWrap)({
         contentEncryptionKey,
@@ -44,6 +45,7 @@ const getOctPbkdfKeyWrapDecryptionKey = ({ kryptos, pbkdfIterations, pbkdfSalt,
         derivationKey: der.privateKey,
         keyLength: (0, calculate_1.calculateKeyWrapSize)(kryptos.algorithm),
         algorithm: (0, calculate_1.calculatePbkdfAlgorithm)(kryptos),
+        kryptosAlgorithm: kryptos.algorithm,
         pbkdfIterations,
         pbkdfSalt,
     });

package/dist/utils/private/oct/get-oct-pbkdf-key-wrap-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,mCAAqC;AACrC,4CAA2C;AAO3C,4CAIsB;AACtB,sDAA0C;AAC1C,0CAAuD;AAEhD,MAAM,+BAA+B,GAAG,CAAC,EAC9C,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,6CAAiC,EAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,IAAA,sBAAK,EAAC;QACvD,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;QAClD,SAAS,EAAE,IAAA,mCAAuB,EAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;IAEH,MAAM,EAAE,mBAAmB,EAAE,GAAG,IAAA,qBAAU,EAAC;QACzC,oBAAoB;QACpB,OAAO;QACP,gBAAgB,EAAE,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,eAAe;QACf,SAAS;QACT,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AA/BW,QAAA,+BAA+B,mCA+B1C;AAEK,MAAM,+BAA+B,GAAG,CAAC,EAC9C,OAAO,EACP,eAAe,EACf,SAAS,EACT,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,sBAAK,EAAC;QAC3B,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;QAClD,SAAS,EAAE,IAAA,mCAAuB,EAAC,OAAO,CAAC;QAC3C,eAAe;QACf,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,IAAA,uBAAY,EAAC;QAClB,gBAAgB,EAAE,UAAU;QAC5B,OAAO;QACP,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC,CAAC;AA5BW,QAAA,+BAA+B,mCA4B1C"}
+{"version":3,"file":"get-oct-pbkdf-key-wrap-keys.js","sourceRoot":"","sources":["../../../../src/utils/private/oct/get-oct-pbkdf-key-wrap-keys.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,mCAAqC;AACrC,4CAA2C;AAO3C,4CAIsB;AACtB,sDAA0C;AAC1C,0CAAuD;AAEhD,MAAM,+BAA+B,GAAG,CAAC,EAC9C,UAAU,EACV,OAAO,GACU,EAAmB,EAAE;IACtC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,6CAAiC,EAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,IAAA,sBAAK,EAAC;QACvD,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;QAClD,SAAS,EAAE,IAAA,mCAAuB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,OAAO,CAAC,SAAS;KACpC,CAAC,CAAC;IAEH,MAAM,EAAE,mBAAmB,EAAE,GAAG,IAAA,qBAAU,EAAC;QACzC,oBAAoB;QACpB,OAAO;QACP,gBAAgB,EAAE,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,eAAe;QACf,SAAS;QACT,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC;AAhCW,QAAA,+BAA+B,mCAgC1C;AAEK,MAAM,+BAA+B,GAAG,CAAC,EAC9C,OAAO,EACP,eAAe,EACf,SAAS,EACT,mBAAmB,GACD,EAAoB,EAAE;IACxC,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,sBAAK,EAAC;QAC3B,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAA,gCAAoB,EAAC,OAAO,CAAC,SAAS,CAAC;QAClD,SAAS,EAAE,IAAA,mCAAuB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,OAAO,CAAC,SAAS;QACnC,eAAe;QACf,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,IAAA,uBAAY,EAAC;QAClB,gBAAgB,EAAE,UAAU;QAC5B,OAAO;QACP,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC,CAAC;AA7BW,QAAA,+BAA+B,mCA6B1C"}

package/dist/utils/private/prepare-encryption.d.ts

@@ -0,0 +1,3 @@
+import { PrepareEncryptionOptions, PreparedEncryption } from "../../types/private";
+export declare const prepareAesEncryption: (options: PrepareEncryptionOptions) => PreparedEncryption;
+//# sourceMappingURL=prepare-encryption.d.ts.map

package/dist/utils/private/prepare-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare-encryption.d.ts","sourceRoot":"","sources":["../../../src/utils/private/prepare-encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAInF,eAAO,MAAM,oBAAoB,GAC/B,SAAS,wBAAwB,KAChC,kBA8BF,CAAC"}

package/dist/utils/private/prepare-encryption.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareAesEncryption = void 0;
+const encrypt_content_1 = require("./encrypt-content");
+const get_key_1 = require("./get-key");
+const prepareAesEncryption = (options) => {
+    const { encryption = "A256GCM", kryptos } = options;
+    const { contentEncryptionKey, pbkdfIterations, pbkdfSalt, publicEncryptionIv, publicEncryptionJwk, publicEncryptionKey, publicEncryptionTag, } = (0, get_key_1.getEncryptionKey)({ encryption, kryptos });
+    return {
+        headerParams: {
+            publicEncryptionJwk,
+            pbkdfIterations,
+            pbkdfSalt,
+            publicEncryptionIv,
+            publicEncryptionTag,
+        },
+        publicEncryptionKey,
+        encrypt: (data, opts) => (0, encrypt_content_1.encryptAesContent)({
+            aad: opts?.aad,
+            contentEncryptionKey,
+            data,
+            encryption,
+        }),
+    };
+};
+exports.prepareAesEncryption = prepareAesEncryption;
+//# sourceMappingURL=prepare-encryption.js.map

package/dist/utils/private/prepare-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare-encryption.js","sourceRoot":"","sources":["../../../src/utils/private/prepare-encryption.ts"],"names":[],"mappings":";;;AACA,uDAAsD;AACtD,uCAA6C;AAEtC,MAAM,oBAAoB,GAAG,CAClC,OAAiC,EACb,EAAE;IACtB,MAAM,EAAE,UAAU,GAAG,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEpD,MAAM,EACJ,oBAAoB,EACpB,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,IAAA,0BAAgB,EAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAE9C,OAAO;QACL,YAAY,EAAE;YACZ,mBAAmB;YACnB,eAAe;YACf,SAAS;YACT,kBAAkB;YAClB,mBAAmB;SACpB;QACD,mBAAmB;QACnB,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACtB,IAAA,mCAAiB,EAAC;YAChB,GAAG,EAAE,IAAI,EAAE,GAAG;YACd,oBAAoB;YACpB,IAAI;YACJ,UAAU;SACX,CAAC;KACL,CAAC;AACJ,CAAC,CAAC;AAhCW,QAAA,oBAAoB,wBAgC/B"}

package/dist/utils/private/serialised-aes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serialised-aes.d.ts","sourceRoot":"","sources":["../../../src/utils/private/serialised-aes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,yBAAyB,GACpC,MAAM,mBAAmB,KACxB,uBAsBD,CAAC;AAEH,eAAO,MAAM,wBAAwB,GACnC,SAAS,uBAAuB,KAC/B,mBAsBD,CAAC"}
+{"version":3,"file":"serialised-aes.d.ts","sourceRoot":"","sources":["../../../src/utils/private/serialised-aes.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAwBrB,eAAO,MAAM,yBAAyB,GACpC,MAAM,mBAAmB,KACxB,uBAuBF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,SAAS,uBAAuB,KAC/B,mBAaF,CAAC"}