@lindorm/oct 0.2.10 → 0.3.0

package/CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [0.3.0](https://github.com/lindorm-io/monorepo/compare/@lindorm/oct@0.2.11...@lindorm/oct@0.3.0) (2026-05-02)
+
+### Features
+
+- migrate 20 packages from jest to vitest ([d8bfda8](https://github.com/lindorm-io/monorepo/commit/d8bfda8854dc1cb9537ba0b3e47ec4e4c7bded08))
+
+## [0.2.11](https://github.com/lindorm-io/monorepo/compare/@lindorm/oct@0.2.10...@lindorm/oct@0.2.11) (2026-04-19)
+
+**Note:** Version bump only for package @lindorm/oct
+
 ## [0.2.10](https://github.com/lindorm-io/monorepo/compare/@lindorm/oct@0.2.9...@lindorm/oct@0.2.10) (2026-04-15)
 
 **Note:** Version bump only for package @lindorm/oct

package/README.md

@@ -1,6 +1,8 @@
 # @lindorm/oct
 
-HMAC signature kit built on Node's `crypto` module and [`@lindorm/kryptos`](../kryptos). Provides an `OctKit` class that implements the `IKeyKit` contract used across the Lindorm cryptography packages.
+HMAC signing kit built on Node's `crypto` module and [`@lindorm/kryptos`](https://www.npmjs.com/package/@lindorm/kryptos). Provides an `OctKit` class that implements the `IKeyKit` contract used across the Lindorm cryptography packages.
+
+This package is **ESM-only**.
 
 ## Installation
 
@@ -8,6 +10,16 @@ HMAC signature kit built on Node's `crypto` module and [`@lindorm/kryptos`](../k
 npm install @lindorm/oct
 ```
 
+`OctKit` accepts an `IKryptos` instance constructed by the consumer, so [`@lindorm/kryptos`](https://www.npmjs.com/package/@lindorm/kryptos) must also be installed in your project.
+
+## Features
+
+- Sign, verify, and assert HMAC signatures over `Buffer` or `string` input
+- Supports `HS256`, `HS384`, and `HS512`
+- Timing-safe signature comparison via `crypto.timingSafeEqual`
+- Configurable string output encoding via Node's `BufferEncoding`
+- Rejects non-oct keys and oct encryption algorithms at construction time
+
 ## Quick Start
 
 ```typescript
@@ -17,16 +29,12 @@ import { KryptosKit } from "@lindorm/kryptos";
 const kryptos = KryptosKit.generate.sig.oct({ algorithm: "HS256" });
 const kit = new OctKit({ kryptos });
 
-// Sign
 const signature = kit.sign("hello world");
 
-// Verify (timing-safe comparison)
 kit.verify("hello world", signature); // true
 
-// Assert (throws OctError if invalid)
-kit.assert("hello world", signature);
+kit.assert("hello world", signature); // throws OctError if invalid
 
-// Format Buffer to string
 kit.format(signature); // base64 string
 ```
 
@@ -35,11 +43,11 @@ kit.format(signature); // base64 string
 ```typescript
 new OctKit({
   kryptos, // IKryptos — must be an oct key with a signing algorithm
-  encoding: "base64", // BufferEncoding — output encoding (default: "base64")
+  encoding: "base64", // BufferEncoding — string encoding for verify/format (default: "base64")
 });
 ```
 
-The constructor validates that the key is an oct type with a supported signing algorithm (HS256, HS384, HS512). Encryption keys (A128KW, dir, etc.) are rejected with an `OctError`.
+The constructor validates that the key is an oct key with one of the supported signing algorithms (`HS256`, `HS384`, `HS512`). Non-oct keys and oct encryption algorithms are rejected with an `OctError`.
 
 ## API
 
@@ -54,6 +62,11 @@ class OctKit implements IKeyKit {
 
 `KeyData` is `Buffer | string`.
 
+- `sign(data)` — produces an HMAC digest as a `Buffer`.
+- `verify(data, signature)` — returns `true` if the signature matches. String signatures are decoded using the configured `encoding`. Comparison is timing-safe.
+- `assert(data, signature)` — same as `verify`, but throws `OctError` instead of returning `false`.
+- `format(buffer)` — encodes a signature `Buffer` to a string using the configured `encoding`.
+
 ## Supported Algorithms
 
 | Algorithm | Hash    |
@@ -62,13 +75,9 @@ class OctKit implements IKeyKit {
 | HS384     | SHA-384 |
 | HS512     | SHA-512 |
 
-## Security
-
-Signature verification uses `crypto.timingSafeEqual` to prevent timing attacks.
-
 ## Error Handling
 
-All errors are `OctError` instances:
+All errors thrown by this package are instances of `OctError`:
 
 ```typescript
 import { OctError } from "@lindorm/oct";

package/dist/classes/OctKit.d.ts

@@ -1,5 +1,5 @@
-import { IKeyKit, KeyData } from "@lindorm/types";
-import { OctKitOptions } from "../types";
+import type { IKeyKit, KeyData } from "@lindorm/types";
+import type { OctKitOptions } from "../types/index.js";
 export declare class OctKit implements IKeyKit {
     private readonly encoding;
     private readonly kryptos;

package/dist/classes/OctKit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OctKit.d.ts","sourceRoot":"","sources":["../../src/classes/OctKit.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAOzC,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;gBAEnB,OAAO,EAAE,aAAa;IAclC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAO3B,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO;IASlD,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI;IAS/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAGpC"}
+{"version":3,"file":"OctKit.d.ts","sourceRoot":"","sources":["../../src/classes/OctKit.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAOvD,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;gBAEnB,OAAO,EAAE,aAAa;IAclC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAO3B,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO;IASlD,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI;IAS/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAGpC"}

package/dist/classes/OctKit.js

@@ -1,30 +1,27 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OctKit = void 0;
-const kryptos_1 = require("@lindorm/kryptos");
-const errors_1 = require("../errors");
-const private_1 = require("../utils/private");
-class OctKit {
+import { KryptosKit, OCT_SIG_ALGORITHMS, } from "@lindorm/kryptos";
+import { OctError } from "../errors/index.js";
+import { assertOctSignature, createOctSignature, verifyOctSignature, } from "../internal/index.js";
+export class OctKit {
     encoding;
     kryptos;
     constructor(options) {
         this.encoding = options.encoding ?? "base64";
-        if (!kryptos_1.KryptosKit.isOct(options.kryptos)) {
-            throw new errors_1.OctError("Invalid Kryptos instance");
+        if (!KryptosKit.isOct(options.kryptos)) {
+            throw new OctError("Invalid Kryptos instance");
         }
-        if (!kryptos_1.OCT_SIG_ALGORITHMS.includes(options.kryptos.algorithm)) {
-            throw new errors_1.OctError("OctKit only supports signing algorithms (HS256, HS384, HS512)");
+        if (!OCT_SIG_ALGORITHMS.includes(options.kryptos.algorithm)) {
+            throw new OctError("OctKit only supports signing algorithms (HS256, HS384, HS512)");
         }
         this.kryptos = options.kryptos;
     }
     sign(data) {
-        return (0, private_1.createOctSignature)({
+        return createOctSignature({
             data,
             kryptos: this.kryptos,
         });
     }
     verify(data, signature) {
-        return (0, private_1.verifyOctSignature)({
+        return verifyOctSignature({
             data,
             encoding: this.encoding,
             kryptos: this.kryptos,
@@ -32,7 +29,7 @@ class OctKit {
         });
     }
     assert(data, signature) {
-        return (0, private_1.assertOctSignature)({
+        return assertOctSignature({
             data,
             encoding: this.encoding,
             kryptos: this.kryptos,
@@ -43,5 +40,4 @@ class OctKit {
         return data.toString(this.encoding);
     }
 }
-exports.OctKit = OctKit;
 //# sourceMappingURL=OctKit.js.map

package/dist/classes/OctKit.js.map

@@ -1 +1 @@
-{"version":3,"file":"OctKit.js","sourceRoot":"","sources":["../../src/classes/OctKit.ts"],"names":[],"mappings":";;;AAAA,8CAK0B;AAE1B,sCAAqC;AAErC,8CAI0B;AAE1B,MAAa,MAAM;IACA,QAAQ,CAAiB;IACzB,OAAO,CAAc;IAEtC,YAAmB,OAAsB;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAE7C,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,iBAAQ,CAAC,0BAA0B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,4BAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,iBAAQ,CAAC,+DAA+D,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAEM,IAAI,CAAC,IAAa;QACvB,OAAO,IAAA,4BAAkB,EAAC;YACxB,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,IAAA,4BAAkB,EAAC;YACxB,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,IAAA,4BAAkB,EAAC;YACxB,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;CACF;AA9CD,wBA8CC"}
+{"version":3,"file":"OctKit.js","sourceRoot":"","sources":["../../src/classes/OctKit.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EACV,kBAAkB,GAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,OAAO,MAAM;IACA,QAAQ,CAAiB;IACzB,OAAO,CAAc;IAEtC,YAAmB,OAAsB;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAE7C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,QAAQ,CAAC,+DAA+D,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAEM,IAAI,CAAC,IAAa;QACvB,OAAO,kBAAkB,CAAC;YACxB,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,kBAAkB,CAAC;YACxB,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,kBAAkB,CAAC;YACxB,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/classes/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./OctKit";
+export * from "./OctKit.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/classes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/classes/index.js

@@ -1,18 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./OctKit"), exports);
+export * from "./OctKit.js";
 //# sourceMappingURL=index.js.map

package/dist/classes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/errors/OctError.js

@@ -1,8 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OctError = void 0;
-const errors_1 = require("@lindorm/errors");
-class OctError extends errors_1.LindormError {
+import { LindormError } from "@lindorm/errors";
+export class OctError extends LindormError {
 }
-exports.OctError = OctError;
 //# sourceMappingURL=OctError.js.map

package/dist/errors/OctError.js.map

@@ -1 +1 @@
-{"version":3,"file":"OctError.js","sourceRoot":"","sources":["../../src/errors/OctError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,QAAS,SAAQ,qBAAY;CAAG;AAA7C,4BAA6C"}
+{"version":3,"file":"OctError.js","sourceRoot":"","sources":["../../src/errors/OctError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,OAAO,QAAS,SAAQ,YAAY;CAAG"}

package/dist/errors/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./OctError";
+export * from "./OctError.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}

package/dist/errors/index.js

@@ -1,18 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./OctError"), exports);
+export * from "./OctError.js";
 //# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export * from "./classes";
-export * from "./errors";
-export * from "./types";
+export * from "./classes/index.js";
+export * from "./errors/index.js";
+export * from "./types/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -1,20 +1,4 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./classes"), exports);
-__exportStar(require("./errors"), exports);
-__exportStar(require("./types"), exports);
+export * from "./classes/index.js";
+export * from "./errors/index.js";
+export * from "./types/index.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,2CAAyB;AACzB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/internal/assert-key-size.d.ts

@@ -0,0 +1,3 @@
+import type { ShaAlgorithm } from "@lindorm/types";
+export declare const assertKeySize: (algorithm: ShaAlgorithm, privateKey: Buffer) => void;
+//# sourceMappingURL=assert-key-size.d.ts.map

package/dist/internal/assert-key-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-key-size.d.ts","sourceRoot":"","sources":["../../src/internal/assert-key-size.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnD,eAAO,MAAM,aAAa,GAAI,WAAW,YAAY,EAAE,YAAY,MAAM,KAAG,IAiB3E,CAAC"}

package/dist/internal/assert-key-size.js

@@ -0,0 +1,20 @@
+import { OctError } from "../errors/index.js";
+export const assertKeySize = (algorithm, privateKey) => {
+    switch (algorithm) {
+        case "SHA256":
+            if (privateKey.length >= 16)
+                return;
+            throw new OctError("Invalid key size for SHA256");
+        case "SHA384":
+            if (privateKey.length >= 24)
+                return;
+            throw new OctError("Invalid key size for SHA384");
+        case "SHA512":
+            if (privateKey.length >= 32)
+                return;
+            throw new OctError("Invalid key size for SHA512");
+        default:
+            throw new OctError("Unsupported algorithm", { debug: { algorithm } });
+    }
+};
+//# sourceMappingURL=assert-key-size.js.map

package/dist/internal/assert-key-size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-key-size.js","sourceRoot":"","sources":["../../src/internal/assert-key-size.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAuB,EAAE,UAAkB,EAAQ,EAAE;IACjF,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO;YACpC,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QAEpD,KAAK,QAAQ;YACX,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO;YACpC,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QAEpD,KAAK,QAAQ;YACX,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO;YACpC,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QAEpD;YACE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC"}

package/dist/internal/get-key.d.ts

@@ -0,0 +1,3 @@
+import type { IKryptosOct } from "@lindorm/kryptos";
+export declare const getPrivateKey: (kryptos: IKryptosOct) => Buffer;
+//# sourceMappingURL=get-key.d.ts.map

package/dist/internal/get-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-key.d.ts","sourceRoot":"","sources":["../../src/internal/get-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,eAAO,MAAM,aAAa,GAAI,SAAS,WAAW,KAAG,MAQpD,CAAC"}

package/dist/internal/get-key.js

@@ -0,0 +1,9 @@
+import { OctError } from "../errors/index.js";
+export const getPrivateKey = (kryptos) => {
+    const { privateKey } = kryptos.export("der");
+    if (!privateKey) {
+        throw new OctError("Missing private key");
+    }
+    return privateKey;
+};
+//# sourceMappingURL=get-key.js.map

package/dist/internal/get-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-key.js","sourceRoot":"","sources":["../../src/internal/get-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAoB,EAAU,EAAE;IAC5D,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC"}

package/dist/internal/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./assert-key-size.js";
+export * from "./get-key.js";
+export * from "./map-algorithm.js";
+export * from "./oct-signature.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/internal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}

package/dist/internal/index.js

@@ -0,0 +1,5 @@
+export * from "./assert-key-size.js";
+export * from "./get-key.js";
+export * from "./map-algorithm.js";
+export * from "./oct-signature.js";
+//# sourceMappingURL=index.js.map

package/dist/internal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}

package/dist/internal/map-algorithm.d.ts

@@ -0,0 +1,4 @@
+import { type IKryptosOct } from "@lindorm/kryptos";
+import type { ShaAlgorithm } from "@lindorm/types";
+export declare const mapOctAlgorithm: (kryptos: IKryptosOct) => ShaAlgorithm;
+//# sourceMappingURL=map-algorithm.d.ts.map

package/dist/internal/map-algorithm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-algorithm.d.ts","sourceRoot":"","sources":["../../src/internal/map-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAGjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AASnD,eAAO,MAAM,eAAe,GAAI,SAAS,WAAW,KAAG,YAQtD,CAAC"}

package/dist/internal/map-algorithm.js

@@ -0,0 +1,16 @@
+import { OCT_SIG_ALGORITHMS, } from "@lindorm/kryptos";
+import { OctError } from "../errors/index.js";
+const OCT_SIG_ALGORITHM_MAP = {
+    HS256: "SHA256",
+    HS384: "SHA384",
+    HS512: "SHA512",
+};
+export const mapOctAlgorithm = (kryptos) => {
+    if (!OCT_SIG_ALGORITHMS.includes(kryptos.algorithm)) {
+        throw new OctError("Unsupported OCT algorithm for signing", {
+            debug: { algorithm: kryptos.algorithm },
+        });
+    }
+    return OCT_SIG_ALGORITHM_MAP[kryptos.algorithm];
+};
+//# sourceMappingURL=map-algorithm.js.map

package/dist/internal/map-algorithm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-algorithm.js","sourceRoot":"","sources":["../../src/internal/map-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,GAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,qBAAqB,GAA0C;IACnE,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAoB,EAAgB,EAAE;IACpE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE;YAC1D,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC,OAAO,CAAC,SAA4B,CAAC,CAAC;AACrE,CAAC,CAAC"}

package/dist/{utils/private → internal}/oct-signature.d.ts

@@ -1,4 +1,4 @@
-import { CreateOctSignatureOptions, VerifyOctSignatureOptions } from "../../types";
+import type { CreateOctSignatureOptions, VerifyOctSignatureOptions } from "../types/index.js";
 export declare const createOctSignature: ({ data, kryptos, }: CreateOctSignatureOptions) => Buffer;
 export declare const verifyOctSignature: ({ data, encoding, kryptos, signature, }: VerifyOctSignatureOptions) => boolean;
 export declare const assertOctSignature: (options: VerifyOctSignatureOptions) => void;

package/dist/internal/oct-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oct-signature.d.ts","sourceRoot":"","sources":["../../src/internal/oct-signature.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,mBAAmB,CAAC;AAK3B,eAAO,MAAM,kBAAkB,GAAI,oBAGhC,yBAAyB,KAAG,MAO9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,yCAKhC,yBAAyB,KAAG,OAO9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,SAAS,yBAAyB,KAAG,IAGvE,CAAC"}

package/dist/internal/oct-signature.js

@@ -0,0 +1,25 @@
+import { isString } from "@lindorm/is";
+import { createHmac, timingSafeEqual } from "crypto";
+import { OctError } from "../errors/index.js";
+import { assertKeySize } from "./assert-key-size.js";
+import { getPrivateKey } from "./get-key.js";
+import { mapOctAlgorithm } from "./map-algorithm.js";
+export const createOctSignature = ({ data, kryptos, }) => {
+    const algorithm = mapOctAlgorithm(kryptos);
+    const privateKey = getPrivateKey(kryptos);
+    assertKeySize(algorithm, privateKey);
+    return createHmac(algorithm, privateKey).update(data).digest();
+};
+export const verifyOctSignature = ({ data, encoding, kryptos, signature, }) => {
+    const expected = createOctSignature({ data, kryptos });
+    const actual = isString(signature) ? Buffer.from(signature, encoding) : signature;
+    if (expected.length !== actual.length)
+        return false;
+    return timingSafeEqual(expected, actual);
+};
+export const assertOctSignature = (options) => {
+    if (verifyOctSignature(options))
+        return;
+    throw new OctError("OctSignature does not match");
+};
+//# sourceMappingURL=oct-signature.js.map

package/dist/internal/oct-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oct-signature.js","sourceRoot":"","sources":["../../src/internal/oct-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK9C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,OAAO,GACmB,EAAU,EAAE;IACtC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAE1C,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAErC,OAAO,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,SAAS,GACiB,EAAW,EAAE;IACvC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEpD,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAkC,EAAQ,EAAE;IAC7E,IAAI,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO;IACxC,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AACpD,CAAC,CAAC"}

package/dist/types/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./oct-kit";
+export * from "./oct-kit.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/types/index.js

@@ -1,18 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./oct-kit"), exports);
+export * from "./oct-kit.js";
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/types/oct-kit.d.ts

@@ -1,5 +1,5 @@
-import { IKryptos, IKryptosOct } from "@lindorm/kryptos";
-import { KeyData } from "@lindorm/types";
+import type { IKryptos, IKryptosOct } from "@lindorm/kryptos";
+import type { KeyData } from "@lindorm/types";
 export type CreateOctSignatureOptions = {
     data: KeyData;
     kryptos: IKryptosOct;

package/dist/types/oct-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oct-kit.d.ts","sourceRoot":"","sources":["../../src/types/oct-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC"}
+{"version":3,"file":"oct-kit.d.ts","sourceRoot":"","sources":["../../src/types/oct-kit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC"}

package/dist/types/oct-kit.js

@@ -1,3 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};
 //# sourceMappingURL=oct-kit.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lindorm/oct",
-  "version": "0.2.10",
+  "version": "0.3.0",
   "license": "AGPL-3.0-or-later",
   "author": "Jonn Nilsson",
   "repository": {
@@ -11,15 +11,21 @@
   "publishConfig": {
     "access": "public"
   },
-  "main": "dist/index.js",
+  "type": "module",
   "typings": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
   "scripts": {
     "build": "rimraf dist && tsc -b ./tsconfig.build.json",
     "example": "ts-node example",
     "prettier": "prettier --write ./src/*",
-    "test": "jest",
-    "test:ci": "jest",
-    "test:watch": "jest --watch --",
+    "test": "vitest run",
+    "test:unit": "vitest run --exclude '**/*.integration.test.ts'",
+    "test:watch": "vitest",
     "typecheck": "tsc",
     "typecheck:watch": "tsc --watch",
     "update": "ncu -i",
@@ -27,12 +33,10 @@
     "verify": "npm run typecheck && npm run build && npm test"
   },
   "dependencies": {
-    "@lindorm/errors": "^0.1.17",
-    "@lindorm/is": "^0.1.15",
-    "@lindorm/kryptos": "^0.6.0"
-  },
-  "devDependencies": {
-    "@lindorm/types": "^0.5.0"
+    "@lindorm/errors": "^0.2.0",
+    "@lindorm/is": "^0.2.0",
+    "@lindorm/kryptos": "^0.8.0",
+    "@lindorm/types": "^0.6.0"
   },
-  "gitHead": "7a7ca458fd7765833aaf99bb9115abe802e01946"
+  "gitHead": "a2b0a53295aebda806b4057f34707e8583570265"
 }

package/vitest.config.mjs

@@ -0,0 +1,3 @@
+import { createVitestConfig } from "../../vitest.config.base.mjs";
+
+export default createVitestConfig();

package/dist/utils/private/assert-key-size.d.ts

@@ -1,3 +0,0 @@
-import { ShaAlgorithm } from "@lindorm/types";
-export declare const assertKeySize: (algorithm: ShaAlgorithm, privateKey: Buffer) => void;
-//# sourceMappingURL=assert-key-size.d.ts.map

package/dist/utils/private/assert-key-size.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"assert-key-size.d.ts","sourceRoot":"","sources":["../../../src/utils/private/assert-key-size.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,eAAO,MAAM,aAAa,GAAI,WAAW,YAAY,EAAE,YAAY,MAAM,KAAG,IAiB3E,CAAC"}

package/dist/utils/private/assert-key-size.js

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertKeySize = void 0;
-const errors_1 = require("../../errors");
-const assertKeySize = (algorithm, privateKey) => {
-    switch (algorithm) {
-        case "SHA256":
-            if (privateKey.length >= 16)
-                return;
-            throw new errors_1.OctError("Invalid key size for SHA256");
-        case "SHA384":
-            if (privateKey.length >= 24)
-                return;
-            throw new errors_1.OctError("Invalid key size for SHA384");
-        case "SHA512":
-            if (privateKey.length >= 32)
-                return;
-            throw new errors_1.OctError("Invalid key size for SHA512");
-        default:
-            throw new errors_1.OctError("Unsupported algorithm", { debug: { algorithm } });
-    }
-};
-exports.assertKeySize = assertKeySize;
-//# sourceMappingURL=assert-key-size.js.map

package/dist/utils/private/assert-key-size.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assert-key-size.js","sourceRoot":"","sources":["../../../src/utils/private/assert-key-size.ts"],"names":[],"mappings":";;;AACA,yCAAwC;AAEjC,MAAM,aAAa,GAAG,CAAC,SAAuB,EAAE,UAAkB,EAAQ,EAAE;IACjF,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO;YACpC,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;QAEpD,KAAK,QAAQ;YACX,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO;YACpC,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;QAEpD,KAAK,QAAQ;YACX,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO;YACpC,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;QAEpD;YACE,MAAM,IAAI,iBAAQ,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC;AAjBW,QAAA,aAAa,iBAiBxB"}

package/dist/utils/private/get-key.d.ts

@@ -1,3 +0,0 @@
-import { IKryptosOct } from "@lindorm/kryptos";
-export declare const getPrivateKey: (kryptos: IKryptosOct) => Buffer;
-//# sourceMappingURL=get-key.d.ts.map

package/dist/utils/private/get-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-key.d.ts","sourceRoot":"","sources":["../../../src/utils/private/get-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,eAAO,MAAM,aAAa,GAAI,SAAS,WAAW,KAAG,MAQpD,CAAC"}

package/dist/utils/private/get-key.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getPrivateKey = void 0;
-const errors_1 = require("../../errors");
-const getPrivateKey = (kryptos) => {
-    const { privateKey } = kryptos.export("der");
-    if (!privateKey) {
-        throw new errors_1.OctError("Missing private key");
-    }
-    return privateKey;
-};
-exports.getPrivateKey = getPrivateKey;
-//# sourceMappingURL=get-key.js.map

package/dist/utils/private/get-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-key.js","sourceRoot":"","sources":["../../../src/utils/private/get-key.ts"],"names":[],"mappings":";;;AACA,yCAAwC;AAEjC,MAAM,aAAa,GAAG,CAAC,OAAoB,EAAU,EAAE;IAC5D,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,iBAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AARW,QAAA,aAAa,iBAQxB"}

package/dist/utils/private/index.d.ts

@@ -1,5 +0,0 @@
-export * from "./assert-key-size";
-export * from "./get-key";
-export * from "./map-algorithm";
-export * from "./oct-signature";
-//# sourceMappingURL=index.d.ts.map

package/dist/utils/private/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC"}

package/dist/utils/private/index.js

@@ -1,21 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./assert-key-size"), exports);
-__exportStar(require("./get-key"), exports);
-__exportStar(require("./map-algorithm"), exports);
-__exportStar(require("./oct-signature"), exports);
-//# sourceMappingURL=index.js.map

package/dist/utils/private/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,4CAA0B;AAC1B,kDAAgC;AAChC,kDAAgC"}

package/dist/utils/private/map-algorithm.d.ts

@@ -1,4 +0,0 @@
-import { IKryptosOct } from "@lindorm/kryptos";
-import { ShaAlgorithm } from "@lindorm/types";
-export declare const mapOctAlgorithm: (kryptos: IKryptosOct) => ShaAlgorithm;
-//# sourceMappingURL=map-algorithm.d.ts.map

package/dist/utils/private/map-algorithm.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"map-algorithm.d.ts","sourceRoot":"","sources":["../../../src/utils/private/map-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAuC,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAS9C,eAAO,MAAM,eAAe,GAAI,SAAS,WAAW,KAAG,YAQtD,CAAC"}

package/dist/utils/private/map-algorithm.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.mapOctAlgorithm = void 0;
-const kryptos_1 = require("@lindorm/kryptos");
-const errors_1 = require("../../errors");
-const OCT_SIG_ALGORITHM_MAP = {
-    HS256: "SHA256",
-    HS384: "SHA384",
-    HS512: "SHA512",
-};
-const mapOctAlgorithm = (kryptos) => {
-    if (!kryptos_1.OCT_SIG_ALGORITHMS.includes(kryptos.algorithm)) {
-        throw new errors_1.OctError("Unsupported OCT algorithm for signing", {
-            debug: { algorithm: kryptos.algorithm },
-        });
-    }
-    return OCT_SIG_ALGORITHM_MAP[kryptos.algorithm];
-};
-exports.mapOctAlgorithm = mapOctAlgorithm;
-//# sourceMappingURL=map-algorithm.js.map

package/dist/utils/private/map-algorithm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"map-algorithm.js","sourceRoot":"","sources":["../../../src/utils/private/map-algorithm.ts"],"names":[],"mappings":";;;AAAA,8CAAoF;AAEpF,yCAAwC;AAExC,MAAM,qBAAqB,GAA0C;IACnE,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEK,MAAM,eAAe,GAAG,CAAC,OAAoB,EAAgB,EAAE;IACpE,IAAI,CAAC,4BAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,iBAAQ,CAAC,uCAAuC,EAAE;YAC1D,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC,OAAO,CAAC,SAA4B,CAAC,CAAC;AACrE,CAAC,CAAC;AARW,QAAA,eAAe,mBAQ1B"}

package/dist/utils/private/oct-signature.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oct-signature.d.ts","sourceRoot":"","sources":["../../../src/utils/private/oct-signature.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAKnF,eAAO,MAAM,kBAAkB,GAAI,oBAGhC,yBAAyB,KAAG,MAO9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,yCAKhC,yBAAyB,KAAG,OAO9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,SAAS,yBAAyB,KAAG,IAGvE,CAAC"}

package/dist/utils/private/oct-signature.js

@@ -1,31 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertOctSignature = exports.verifyOctSignature = exports.createOctSignature = void 0;
-const is_1 = require("@lindorm/is");
-const crypto_1 = require("crypto");
-const errors_1 = require("../../errors");
-const assert_key_size_1 = require("./assert-key-size");
-const get_key_1 = require("./get-key");
-const map_algorithm_1 = require("./map-algorithm");
-const createOctSignature = ({ data, kryptos, }) => {
-    const algorithm = (0, map_algorithm_1.mapOctAlgorithm)(kryptos);
-    const privateKey = (0, get_key_1.getPrivateKey)(kryptos);
-    (0, assert_key_size_1.assertKeySize)(algorithm, privateKey);
-    return (0, crypto_1.createHmac)(algorithm, privateKey).update(data).digest();
-};
-exports.createOctSignature = createOctSignature;
-const verifyOctSignature = ({ data, encoding, kryptos, signature, }) => {
-    const expected = (0, exports.createOctSignature)({ data, kryptos });
-    const actual = (0, is_1.isString)(signature) ? Buffer.from(signature, encoding) : signature;
-    if (expected.length !== actual.length)
-        return false;
-    return (0, crypto_1.timingSafeEqual)(expected, actual);
-};
-exports.verifyOctSignature = verifyOctSignature;
-const assertOctSignature = (options) => {
-    if ((0, exports.verifyOctSignature)(options))
-        return;
-    throw new errors_1.OctError("OctSignature does not match");
-};
-exports.assertOctSignature = assertOctSignature;
-//# sourceMappingURL=oct-signature.js.map

package/dist/utils/private/oct-signature.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oct-signature.js","sourceRoot":"","sources":["../../../src/utils/private/oct-signature.ts"],"names":[],"mappings":";;;AAAA,oCAAuC;AACvC,mCAAqD;AACrD,yCAAwC;AAExC,uDAAkD;AAClD,uCAA0C;AAC1C,mDAAkD;AAE3C,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,OAAO,GACmB,EAAU,EAAE;IACtC,MAAM,SAAS,GAAG,IAAA,+BAAe,EAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,OAAO,CAAC,CAAC;IAE1C,IAAA,+BAAa,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAErC,OAAO,IAAA,mBAAU,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AACjE,CAAC,CAAC;AAVW,QAAA,kBAAkB,sBAU7B;AAEK,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,SAAS,GACiB,EAAW,EAAE;IACvC,MAAM,QAAQ,GAAG,IAAA,0BAAkB,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAA,aAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEpD,OAAO,IAAA,wBAAe,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC,CAAC;AAZW,QAAA,kBAAkB,sBAY7B;AAEK,MAAM,kBAAkB,GAAG,CAAC,OAAkC,EAAQ,EAAE;IAC7E,IAAI,IAAA,0BAAkB,EAAC,OAAO,CAAC;QAAE,OAAO;IACxC,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,CAAC,CAAC;AACpD,CAAC,CAAC;AAHW,QAAA,kBAAkB,sBAG7B"}