@lindorm/rsa 0.2.10 → 0.3.0

package/CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [0.3.0](https://github.com/lindorm-io/monorepo/compare/@lindorm/rsa@0.2.11...@lindorm/rsa@0.3.0) (2026-05-02)
+
+### Features
+
+- migrate 20 packages from jest to vitest ([d8bfda8](https://github.com/lindorm-io/monorepo/commit/d8bfda8854dc1cb9537ba0b3e47ec4e4c7bded08))
+
+## [0.2.11](https://github.com/lindorm-io/monorepo/compare/@lindorm/rsa@0.2.10...@lindorm/rsa@0.2.11) (2026-04-19)
+
+**Note:** Version bump only for package @lindorm/rsa
+
 ## [0.2.10](https://github.com/lindorm-io/monorepo/compare/@lindorm/rsa@0.2.9...@lindorm/rsa@0.2.10) (2026-04-15)
 
 **Note:** Version bump only for package @lindorm/rsa

package/README.md

@@ -1,6 +1,8 @@
 # @lindorm/rsa
 
-RSA signature kit built on Node's `crypto` module and [`@lindorm/kryptos`](../kryptos). Provides an `RsaKit` class that implements the `IKeyKit` contract used across the Lindorm cryptography packages.
+RSA signing kit built on Node's `crypto` module and [`@lindorm/kryptos`](https://www.npmjs.com/package/@lindorm/kryptos). Provides an `RsaKit` class that implements the `IKeyKit` contract used across the Lindorm cryptography packages.
+
+This package is **ESM-only**.
 
 ## Installation
 
@@ -8,6 +10,15 @@ RSA signature kit built on Node's `crypto` module and [`@lindorm/kryptos`](../kr
 npm install @lindorm/rsa
 ```
 
+`RsaKit` accepts an `IKryptos` instance constructed by the consumer, so [`@lindorm/kryptos`](https://www.npmjs.com/package/@lindorm/kryptos) must also be installed in your project.
+
+## Features
+
+- Sign, verify, and assert RSA signatures over `Buffer` or `string` input
+- Supports `RS256`, `RS384`, `RS512` (PKCS#1 v1.5) and `PS256`, `PS384`, `PS512` (PSS, salt length 32)
+- Configurable string output encoding via Node's `BufferEncoding`
+- Rejects non-RSA keys and RSA encryption algorithms (e.g. `RSA-OAEP`) at construction time
+
 ## Quick Start
 
 ```typescript
@@ -17,16 +28,12 @@ import { KryptosKit } from "@lindorm/kryptos";
 const kryptos = KryptosKit.generate.sig.rsa({ algorithm: "PS256" });
 const kit = new RsaKit({ kryptos });
 
-// Sign
 const signature = kit.sign("hello world");
 
-// Verify
 kit.verify("hello world", signature); // true
 
-// Assert (throws RsaError if invalid)
-kit.assert("hello world", signature);
+kit.assert("hello world", signature); // throws RsaError if invalid
 
-// Format Buffer to string
 kit.format(signature); // base64 string
 ```
 
@@ -36,11 +43,11 @@ kit.format(signature); // base64 string
 new RsaKit({
   kryptos, // IKryptos — must be an RSA key with a signing algorithm
   dsa: "der", // DsaEncoding — "der" | "ieee-p1363" (default: "der")
-  encoding: "base64", // BufferEncoding — output encoding (default: "base64")
+  encoding: "base64", // BufferEncoding — string encoding for verify/format (default: "base64")
 });
 ```
 
-The constructor validates that the key is an RSA type with a supported signing algorithm (RS256, RS384, RS512, PS256, PS384, PS512). Encryption keys (RSA-OAEP etc.) are rejected with an `RsaError`.
+The constructor validates that the key is an RSA key with one of the supported signing algorithms (`RS256`, `RS384`, `RS512`, `PS256`, `PS384`, `PS512`). RSA encryption keys and non-RSA keys are rejected with an `RsaError`.
 
 ## API
 
@@ -55,6 +62,11 @@ class RsaKit implements IKeyKit {
 
 `KeyData` is `Buffer | string`.
 
+- `sign(data)` — produces a signature `Buffer` using the configured key and algorithm.
+- `verify(data, signature)` — returns `true` if the signature is valid. String signatures are decoded using the configured `encoding`.
+- `assert(data, signature)` — same as `verify`, but throws `RsaError` instead of returning `false`.
+- `format(buffer)` — encodes a signature `Buffer` to a string using the configured `encoding`.
+
 ## Supported Algorithms
 
 | Algorithm | Padding     | Hash    |
@@ -66,9 +78,11 @@ class RsaKit implements IKeyKit {
 | PS384     | PSS         | SHA-384 |
 | PS512     | PSS         | SHA-512 |
 
+PSS variants are signed and verified with a salt length of 32 bytes.
+
 ## Error Handling
 
-All errors are `RsaError` instances:
+All errors thrown by this package are instances of `RsaError`:
 
 ```typescript
 import { RsaError } from "@lindorm/rsa";

package/dist/classes/RsaKit.d.ts

@@ -1,5 +1,5 @@
-import { IKeyKit, KeyData } from "@lindorm/types";
-import { RsaKitOptions } from "../types";
+import type { IKeyKit, KeyData } from "@lindorm/types";
+import type { RsaKitOptions } from "../types/index.js";
 export declare class RsaKit implements IKeyKit {
     private readonly dsa;
     private readonly encoding;

package/dist/classes/RsaKit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RsaKit.d.ts","sourceRoot":"","sources":["../../src/classes/RsaKit.ts"],"names":[],"mappings":"AAMA,OAAO,EAAe,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAOzC,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;gBAEnB,OAAO,EAAE,aAAa;IAiBlC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAQ3B,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO;IAUlD,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI;IAU/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAGpC"}
+{"version":3,"file":"RsaKit.d.ts","sourceRoot":"","sources":["../../src/classes/RsaKit.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAe,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAOvD,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;gBAEnB,OAAO,EAAE,aAAa;IAiBlC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAQ3B,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO;IAUlD,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI;IAU/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAGpC"}

package/dist/classes/RsaKit.js

@@ -1,33 +1,30 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RsaKit = void 0;
-const kryptos_1 = require("@lindorm/kryptos");
-const errors_1 = require("../errors");
-const private_1 = require("../utils/private");
-class RsaKit {
+import { KryptosKit, RSA_SIG_ALGORITHMS, } from "@lindorm/kryptos";
+import { RsaError } from "../errors/index.js";
+import { assertRsaSignature, createRsaSignature, verifyRsaSignature, } from "../internal/index.js";
+export class RsaKit {
     dsa;
     encoding;
     kryptos;
     constructor(options) {
         this.dsa = options.dsa ?? "der";
         this.encoding = options.encoding ?? "base64";
-        if (!kryptos_1.KryptosKit.isRsa(options.kryptos)) {
-            throw new errors_1.RsaError("Invalid Kryptos instance");
+        if (!KryptosKit.isRsa(options.kryptos)) {
+            throw new RsaError("Invalid Kryptos instance");
         }
-        if (!kryptos_1.RSA_SIG_ALGORITHMS.includes(options.kryptos.algorithm)) {
-            throw new errors_1.RsaError("RsaKit only supports signing algorithms (RS256, RS384, RS512, PS256, PS384, PS512)");
+        if (!RSA_SIG_ALGORITHMS.includes(options.kryptos.algorithm)) {
+            throw new RsaError("RsaKit only supports signing algorithms (RS256, RS384, RS512, PS256, PS384, PS512)");
         }
         this.kryptos = options.kryptos;
     }
     sign(data) {
-        return (0, private_1.createRsaSignature)({
+        return createRsaSignature({
             data,
             dsaEncoding: this.dsa,
             kryptos: this.kryptos,
         });
     }
     verify(data, signature) {
-        return (0, private_1.verifyRsaSignature)({
+        return verifyRsaSignature({
             data,
             dsaEncoding: this.dsa,
             encoding: this.encoding,
@@ -36,7 +33,7 @@ class RsaKit {
         });
     }
     assert(data, signature) {
-        return (0, private_1.assertRsaSignature)({
+        return assertRsaSignature({
             data,
             dsaEncoding: this.dsa,
             encoding: this.encoding,
@@ -48,5 +45,4 @@ class RsaKit {
         return data.toString(this.encoding);
     }
 }
-exports.RsaKit = RsaKit;
 //# sourceMappingURL=RsaKit.js.map

package/dist/classes/RsaKit.js.map

@@ -1 +1 @@
-{"version":3,"file":"RsaKit.js","sourceRoot":"","sources":["../../src/classes/RsaKit.ts"],"names":[],"mappings":";;;AAAA,8CAK0B;AAE1B,sCAAqC;AAErC,8CAI0B;AAE1B,MAAa,MAAM;IACA,GAAG,CAAc;IACjB,QAAQ,CAAiB;IACzB,OAAO,CAAc;IAEtC,YAAmB,OAAsB;QACvC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAE7C,IAAI,CAAC,oBAAU,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,iBAAQ,CAAC,0BAA0B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,4BAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,iBAAQ,CAChB,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAEM,IAAI,CAAC,IAAa;QACvB,OAAO,IAAA,4BAAkB,EAAC;YACxB,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,IAAA,4BAAkB,EAAC;YACxB,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,IAAA,4BAAkB,EAAC;YACxB,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;CACF;AArDD,wBAqDC"}
+{"version":3,"file":"RsaKit.js","sourceRoot":"","sources":["../../src/classes/RsaKit.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EACV,kBAAkB,GAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,OAAO,MAAM;IACA,GAAG,CAAc;IACjB,QAAQ,CAAiB;IACzB,OAAO,CAAc;IAEtC,YAAmB,OAAsB;QACvC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAE7C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,QAAQ,CAChB,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAEM,IAAI,CAAC,IAAa;QACvB,OAAO,kBAAkB,CAAC;YACxB,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,kBAAkB,CAAC;YACxB,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAa,EAAE,SAAkB;QAC7C,OAAO,kBAAkB,CAAC;YACxB,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/classes/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./RsaKit";
+export * from "./RsaKit.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/classes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/classes/index.js

@@ -1,18 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./RsaKit"), exports);
+export * from "./RsaKit.js";
 //# sourceMappingURL=index.js.map

package/dist/classes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/errors/RsaError.js

@@ -1,8 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RsaError = void 0;
-const errors_1 = require("@lindorm/errors");
-class RsaError extends errors_1.LindormError {
+import { LindormError } from "@lindorm/errors";
+export class RsaError extends LindormError {
 }
-exports.RsaError = RsaError;
 //# sourceMappingURL=RsaError.js.map

package/dist/errors/RsaError.js.map

@@ -1 +1 @@
-{"version":3,"file":"RsaError.js","sourceRoot":"","sources":["../../src/errors/RsaError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,QAAS,SAAQ,qBAAY;CAAG;AAA7C,4BAA6C"}
+{"version":3,"file":"RsaError.js","sourceRoot":"","sources":["../../src/errors/RsaError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,OAAO,QAAS,SAAQ,YAAY;CAAG"}

package/dist/errors/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./RsaError";
+export * from "./RsaError.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}

package/dist/errors/index.js

@@ -1,18 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./RsaError"), exports);
+export * from "./RsaError.js";
 //# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export * from "./classes";
-export * from "./errors";
-export * from "./types";
+export * from "./classes/index.js";
+export * from "./errors/index.js";
+export * from "./types/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -1,20 +1,4 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./classes"), exports);
-__exportStar(require("./errors"), exports);
-__exportStar(require("./types"), exports);
+export * from "./classes/index.js";
+export * from "./errors/index.js";
+export * from "./types/index.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,2CAAyB;AACzB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/{utils/private → internal}/get-key.d.ts

@@ -1,6 +1,6 @@
-import { IKryptosRsa } from "@lindorm/kryptos";
-import { DsaEncoding } from "@lindorm/types";
-import { SignPrivateKeyInput, VerifyPublicKeyInput } from "crypto";
+import type { IKryptosRsa } from "@lindorm/kryptos";
+import type { DsaEncoding } from "@lindorm/types";
+import type { SignPrivateKeyInput, VerifyPublicKeyInput } from "crypto";
 export declare const getSignKey: (kryptos: IKryptosRsa, dsaEncoding: DsaEncoding) => SignPrivateKeyInput | string;
 export declare const getVerifyKey: (kryptos: IKryptosRsa, dsaEncoding: DsaEncoding) => VerifyPublicKeyInput | string;
 //# sourceMappingURL=get-key.d.ts.map

package/dist/internal/get-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-key.d.ts","sourceRoot":"","sources":["../../src/internal/get-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAKxE,eAAO,MAAM,UAAU,GACrB,SAAS,WAAW,EACpB,aAAa,WAAW,KACvB,mBAAmB,GAAG,MAqBxB,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,SAAS,WAAW,EACpB,aAAa,WAAW,KACvB,oBAAoB,GAAG,MAqBzB,CAAC"}

package/dist/internal/get-key.js

@@ -0,0 +1,40 @@
+import { RSA_PKCS1_PSS_PADDING } from "constants";
+import { RsaError } from "../errors/index.js";
+const RSA_PKCS1_SALT_LENGTH = 32;
+export const getSignKey = (kryptos, dsaEncoding) => {
+    const { privateKey } = kryptos.export("pem");
+    if (!privateKey) {
+        throw new RsaError("Private key not found in key set", { debug: { kryptos } });
+    }
+    if (kryptos.algorithm.startsWith("PS")) {
+        return {
+            key: privateKey,
+            padding: RSA_PKCS1_PSS_PADDING,
+            saltLength: RSA_PKCS1_SALT_LENGTH,
+            dsaEncoding,
+        };
+    }
+    if (kryptos.algorithm.startsWith("RS")) {
+        return { key: privateKey, dsaEncoding };
+    }
+    throw new RsaError("Unsupported RSA algorithm", { debug: { kryptos } });
+};
+export const getVerifyKey = (kryptos, dsaEncoding) => {
+    const { publicKey } = kryptos.export("pem");
+    if (!publicKey) {
+        throw new RsaError("Public key not found in key set", { debug: { kryptos } });
+    }
+    if (kryptos.algorithm.startsWith("PS")) {
+        return {
+            key: publicKey,
+            padding: RSA_PKCS1_PSS_PADDING,
+            saltLength: RSA_PKCS1_SALT_LENGTH,
+            dsaEncoding,
+        };
+    }
+    if (kryptos.algorithm.startsWith("RS")) {
+        return { key: publicKey, dsaEncoding };
+    }
+    throw new RsaError("Unsupported RSA algorithm", { debug: { kryptos } });
+};
+//# sourceMappingURL=get-key.js.map

package/dist/internal/get-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-key.js","sourceRoot":"","sources":["../../src/internal/get-key.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,qBAAqB,GAAG,EAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,OAAoB,EACpB,WAAwB,EACM,EAAE;IAChC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,qBAAqB;YAC9B,UAAU,EAAE,qBAAqB;YACjC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAAoB,EACpB,WAAwB,EACO,EAAE;IACjC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE5C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,qBAAqB;YAC9B,UAAU,EAAE,qBAAqB;YACjC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC"}

package/dist/internal/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./get-key.js";
+export * from "./map-algorithm.js";
+export * from "./rsa-signature.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/internal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}

package/dist/internal/index.js

@@ -0,0 +1,4 @@
+export * from "./get-key.js";
+export * from "./map-algorithm.js";
+export * from "./rsa-signature.js";
+//# sourceMappingURL=index.js.map

package/dist/internal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/internal/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}

package/dist/internal/map-algorithm.d.ts

@@ -0,0 +1,4 @@
+import { type IKryptosRsa } from "@lindorm/kryptos";
+import type { ShaAlgorithm } from "@lindorm/types";
+export declare const mapRsaAlgorithm: (kryptos: IKryptosRsa) => ShaAlgorithm;
+//# sourceMappingURL=map-algorithm.d.ts.map

package/dist/internal/map-algorithm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-algorithm.d.ts","sourceRoot":"","sources":["../../src/internal/map-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAGjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAYnD,eAAO,MAAM,eAAe,GAAI,SAAS,WAAW,KAAG,YAQtD,CAAC"}

package/dist/internal/map-algorithm.js

@@ -0,0 +1,19 @@
+import { RSA_SIG_ALGORITHMS, } from "@lindorm/kryptos";
+import { RsaError } from "../errors/index.js";
+const RSA_SIG_ALGORITHM_MAP = {
+    RS256: "SHA256",
+    RS384: "SHA384",
+    RS512: "SHA512",
+    PS256: "SHA256",
+    PS384: "SHA384",
+    PS512: "SHA512",
+};
+export const mapRsaAlgorithm = (kryptos) => {
+    if (!RSA_SIG_ALGORITHMS.includes(kryptos.algorithm)) {
+        throw new RsaError("Unsupported RSA algorithm for signing", {
+            debug: { algorithm: kryptos.algorithm },
+        });
+    }
+    return RSA_SIG_ALGORITHM_MAP[kryptos.algorithm];
+};
+//# sourceMappingURL=map-algorithm.js.map

package/dist/internal/map-algorithm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-algorithm.js","sourceRoot":"","sources":["../../src/internal/map-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,GAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,qBAAqB,GAA0C;IACnE,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAoB,EAAgB,EAAE;IACpE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE;YAC1D,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC,OAAO,CAAC,SAA4B,CAAC,CAAC;AACrE,CAAC,CAAC"}

package/dist/{utils/private → internal}/rsa-signature.d.ts

@@ -1,4 +1,4 @@
-import { CreateRsaSignatureOptions, VerifyRsaSignatureOptions } from "../../types";
+import type { CreateRsaSignatureOptions, VerifyRsaSignatureOptions } from "../types/index.js";
 export declare const createRsaSignature: ({ data, dsaEncoding, kryptos, }: CreateRsaSignatureOptions) => Buffer;
 export declare const verifyRsaSignature: ({ data, dsaEncoding, encoding, kryptos, signature, }: VerifyRsaSignatureOptions) => boolean;
 export declare const assertRsaSignature: (options: VerifyRsaSignatureOptions) => void;

package/dist/internal/rsa-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa-signature.d.ts","sourceRoot":"","sources":["../../src/internal/rsa-signature.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,mBAAmB,CAAC;AAI3B,eAAO,MAAM,kBAAkB,GAAI,iCAIhC,yBAAyB,KAAG,MAIY,CAAC;AAE5C,eAAO,MAAM,kBAAkB,GAAI,sDAMhC,yBAAyB,KAAG,OAO1B,CAAC;AAEN,eAAO,MAAM,kBAAkB,GAAI,SAAS,yBAAyB,KAAG,IAGvE,CAAC"}

package/dist/internal/rsa-signature.js

@@ -0,0 +1,19 @@
+import { isString } from "@lindorm/is";
+import { createSign, createVerify } from "crypto";
+import { RsaError } from "../errors/index.js";
+import { getSignKey, getVerifyKey } from "./get-key.js";
+import { mapRsaAlgorithm } from "./map-algorithm.js";
+export const createRsaSignature = ({ data, dsaEncoding, kryptos, }) => createSign(mapRsaAlgorithm(kryptos))
+    .update(data)
+    .end()
+    .sign(getSignKey(kryptos, dsaEncoding));
+export const verifyRsaSignature = ({ data, dsaEncoding, encoding, kryptos, signature, }) => createVerify(mapRsaAlgorithm(kryptos))
+    .update(data)
+    .end()
+    .verify(getVerifyKey(kryptos, dsaEncoding), isString(signature) ? Buffer.from(signature, encoding) : signature);
+export const assertRsaSignature = (options) => {
+    if (verifyRsaSignature(options))
+        return;
+    throw new RsaError("Invalid signature");
+};
+//# sourceMappingURL=rsa-signature.js.map

package/dist/internal/rsa-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa-signature.js","sourceRoot":"","sources":["../../src/internal/rsa-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,WAAW,EACX,OAAO,GACmB,EAAU,EAAE,CACtC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;KACjC,MAAM,CAAC,IAAI,CAAC;KACZ,GAAG,EAAE;KACL,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,OAAO,EACP,SAAS,GACiB,EAAW,EAAE,CACvC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;KACnC,MAAM,CAAC,IAAI,CAAC;KACZ,GAAG,EAAE;KACL,MAAM,CACL,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,EAClC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CACnE,CAAC;AAEN,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAkC,EAAQ,EAAE;IAC7E,IAAI,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO;IACxC,MAAM,IAAI,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AAC1C,CAAC,CAAC"}

package/dist/types/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./rsa-kit";
+export * from "./rsa-kit.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/types/index.js

@@ -1,18 +1,2 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./rsa-kit"), exports);
+export * from "./rsa-kit.js";
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/types/rsa-kit.d.ts

@@ -1,5 +1,5 @@
-import { IKryptos, IKryptosRsa } from "@lindorm/kryptos";
-import { DsaEncoding, KeyData } from "@lindorm/types";
+import type { IKryptos, IKryptosRsa } from "@lindorm/kryptos";
+import type { DsaEncoding, KeyData } from "@lindorm/types";
 export type CreateRsaSignatureOptions = {
     data: KeyData;
     dsaEncoding: DsaEncoding;

package/dist/types/rsa-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rsa-kit.d.ts","sourceRoot":"","sources":["../../src/types/rsa-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC"}
+{"version":3,"file":"rsa-kit.d.ts","sourceRoot":"","sources":["../../src/types/rsa-kit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC"}

package/dist/types/rsa-kit.js

@@ -1,3 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};
 //# sourceMappingURL=rsa-kit.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lindorm/rsa",
-  "version": "0.2.10",
+  "version": "0.3.0",
   "license": "AGPL-3.0-or-later",
   "author": "Jonn Nilsson",
   "repository": {
@@ -11,15 +11,21 @@
   "publishConfig": {
     "access": "public"
   },
-  "main": "dist/index.js",
+  "type": "module",
   "typings": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
   "scripts": {
     "build": "rimraf dist && tsc -b ./tsconfig.build.json",
     "example": "ts-node example",
     "prettier": "prettier --write ./src/*",
-    "test": "jest",
-    "test:ci": "jest",
-    "test:watch": "jest --watch --",
+    "test": "vitest run",
+    "test:unit": "vitest run --exclude '**/*.integration.test.ts'",
+    "test:watch": "vitest",
     "typecheck": "tsc",
     "typecheck:watch": "tsc --watch",
     "update": "ncu -i",
@@ -27,12 +33,10 @@
     "verify": "npm run typecheck && npm run build && npm test"
   },
   "dependencies": {
-    "@lindorm/errors": "^0.1.17",
-    "@lindorm/is": "^0.1.15",
-    "@lindorm/kryptos": "^0.6.0"
-  },
-  "devDependencies": {
-    "@lindorm/types": "^0.5.0"
+    "@lindorm/errors": "^0.2.0",
+    "@lindorm/is": "^0.2.0",
+    "@lindorm/kryptos": "^0.8.0",
+    "@lindorm/types": "^0.6.0"
   },
-  "gitHead": "7a7ca458fd7765833aaf99bb9115abe802e01946"
+  "gitHead": "a2b0a53295aebda806b4057f34707e8583570265"
 }

package/vitest.config.mjs

@@ -0,0 +1,3 @@
+import { createVitestConfig } from "../../vitest.config.base.mjs";
+
+export default createVitestConfig();

package/dist/utils/private/get-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-key.d.ts","sourceRoot":"","sources":["../../../src/utils/private/get-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAKnE,eAAO,MAAM,UAAU,GACrB,SAAS,WAAW,EACpB,aAAa,WAAW,KACvB,mBAAmB,GAAG,MAqBxB,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,SAAS,WAAW,EACpB,aAAa,WAAW,KACvB,oBAAoB,GAAG,MAqBzB,CAAC"}

package/dist/utils/private/get-key.js

@@ -1,45 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getVerifyKey = exports.getSignKey = void 0;
-const constants_1 = require("constants");
-const errors_1 = require("../../errors");
-const RSA_PKCS1_SALT_LENGTH = 32;
-const getSignKey = (kryptos, dsaEncoding) => {
-    const { privateKey } = kryptos.export("pem");
-    if (!privateKey) {
-        throw new errors_1.RsaError("Private key not found in key set", { debug: { kryptos } });
-    }
-    if (kryptos.algorithm.startsWith("PS")) {
-        return {
-            key: privateKey,
-            padding: constants_1.RSA_PKCS1_PSS_PADDING,
-            saltLength: RSA_PKCS1_SALT_LENGTH,
-            dsaEncoding,
-        };
-    }
-    if (kryptos.algorithm.startsWith("RS")) {
-        return { key: privateKey, dsaEncoding };
-    }
-    throw new errors_1.RsaError("Unsupported RSA algorithm", { debug: { kryptos } });
-};
-exports.getSignKey = getSignKey;
-const getVerifyKey = (kryptos, dsaEncoding) => {
-    const { publicKey } = kryptos.export("pem");
-    if (!publicKey) {
-        throw new errors_1.RsaError("Public key not found in key set", { debug: { kryptos } });
-    }
-    if (kryptos.algorithm.startsWith("PS")) {
-        return {
-            key: publicKey,
-            padding: constants_1.RSA_PKCS1_PSS_PADDING,
-            saltLength: RSA_PKCS1_SALT_LENGTH,
-            dsaEncoding,
-        };
-    }
-    if (kryptos.algorithm.startsWith("RS")) {
-        return { key: publicKey, dsaEncoding };
-    }
-    throw new errors_1.RsaError("Unsupported RSA algorithm", { debug: { kryptos } });
-};
-exports.getVerifyKey = getVerifyKey;
-//# sourceMappingURL=get-key.js.map

package/dist/utils/private/get-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-key.js","sourceRoot":"","sources":["../../../src/utils/private/get-key.ts"],"names":[],"mappings":";;;AAEA,yCAAkD;AAElD,yCAAwC;AAExC,MAAM,qBAAqB,GAAG,EAAW,CAAC;AAEnC,MAAM,UAAU,GAAG,CACxB,OAAoB,EACpB,WAAwB,EACM,EAAE;IAChC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,iBAAQ,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,iCAAqB;YAC9B,UAAU,EAAE,qBAAqB;YACjC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,iBAAQ,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC;AAxBW,QAAA,UAAU,cAwBrB;AAEK,MAAM,YAAY,GAAG,CAC1B,OAAoB,EACpB,WAAwB,EACO,EAAE;IACjC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE5C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,iBAAQ,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,iCAAqB;YAC9B,UAAU,EAAE,qBAAqB;YACjC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,IAAI,iBAAQ,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC;AAxBW,QAAA,YAAY,gBAwBvB"}

package/dist/utils/private/index.d.ts

@@ -1,4 +0,0 @@
-export * from "./get-key";
-export * from "./map-algorithm";
-export * from "./rsa-signature";
-//# sourceMappingURL=index.d.ts.map

package/dist/utils/private/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC"}

package/dist/utils/private/index.js

@@ -1,20 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./get-key"), exports);
-__exportStar(require("./map-algorithm"), exports);
-__exportStar(require("./rsa-signature"), exports);
-//# sourceMappingURL=index.js.map

package/dist/utils/private/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/private/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,kDAAgC;AAChC,kDAAgC"}

package/dist/utils/private/map-algorithm.d.ts

@@ -1,4 +0,0 @@
-import { IKryptosRsa } from "@lindorm/kryptos";
-import { ShaAlgorithm } from "@lindorm/types";
-export declare const mapRsaAlgorithm: (kryptos: IKryptosRsa) => ShaAlgorithm;
-//# sourceMappingURL=map-algorithm.d.ts.map

package/dist/utils/private/map-algorithm.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"map-algorithm.d.ts","sourceRoot":"","sources":["../../../src/utils/private/map-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAuC,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAY9C,eAAO,MAAM,eAAe,GAAI,SAAS,WAAW,KAAG,YAQtD,CAAC"}

package/dist/utils/private/map-algorithm.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.mapRsaAlgorithm = void 0;
-const kryptos_1 = require("@lindorm/kryptos");
-const errors_1 = require("../../errors");
-const RSA_SIG_ALGORITHM_MAP = {
-    RS256: "SHA256",
-    RS384: "SHA384",
-    RS512: "SHA512",
-    PS256: "SHA256",
-    PS384: "SHA384",
-    PS512: "SHA512",
-};
-const mapRsaAlgorithm = (kryptos) => {
-    if (!kryptos_1.RSA_SIG_ALGORITHMS.includes(kryptos.algorithm)) {
-        throw new errors_1.RsaError("Unsupported RSA algorithm for signing", {
-            debug: { algorithm: kryptos.algorithm },
-        });
-    }
-    return RSA_SIG_ALGORITHM_MAP[kryptos.algorithm];
-};
-exports.mapRsaAlgorithm = mapRsaAlgorithm;
-//# sourceMappingURL=map-algorithm.js.map

package/dist/utils/private/map-algorithm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"map-algorithm.js","sourceRoot":"","sources":["../../../src/utils/private/map-algorithm.ts"],"names":[],"mappings":";;;AAAA,8CAAoF;AAEpF,yCAAwC;AAExC,MAAM,qBAAqB,GAA0C;IACnE,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEK,MAAM,eAAe,GAAG,CAAC,OAAoB,EAAgB,EAAE;IACpE,IAAI,CAAC,4BAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAA4B,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,iBAAQ,CAAC,uCAAuC,EAAE;YAC1D,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC,OAAO,CAAC,SAA4B,CAAC,CAAC;AACrE,CAAC,CAAC;AARW,QAAA,eAAe,mBAQ1B"}

package/dist/utils/private/rsa-signature.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rsa-signature.d.ts","sourceRoot":"","sources":["../../../src/utils/private/rsa-signature.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAInF,eAAO,MAAM,kBAAkB,GAAI,iCAIhC,yBAAyB,KAAG,MAIY,CAAC;AAE5C,eAAO,MAAM,kBAAkB,GAAI,sDAMhC,yBAAyB,KAAG,OAO1B,CAAC;AAEN,eAAO,MAAM,kBAAkB,GAAI,SAAS,yBAAyB,KAAG,IAGvE,CAAC"}

package/dist/utils/private/rsa-signature.js

@@ -1,25 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertRsaSignature = exports.verifyRsaSignature = exports.createRsaSignature = void 0;
-const is_1 = require("@lindorm/is");
-const crypto_1 = require("crypto");
-const errors_1 = require("../../errors");
-const get_key_1 = require("./get-key");
-const map_algorithm_1 = require("./map-algorithm");
-const createRsaSignature = ({ data, dsaEncoding, kryptos, }) => (0, crypto_1.createSign)((0, map_algorithm_1.mapRsaAlgorithm)(kryptos))
-    .update(data)
-    .end()
-    .sign((0, get_key_1.getSignKey)(kryptos, dsaEncoding));
-exports.createRsaSignature = createRsaSignature;
-const verifyRsaSignature = ({ data, dsaEncoding, encoding, kryptos, signature, }) => (0, crypto_1.createVerify)((0, map_algorithm_1.mapRsaAlgorithm)(kryptos))
-    .update(data)
-    .end()
-    .verify((0, get_key_1.getVerifyKey)(kryptos, dsaEncoding), (0, is_1.isString)(signature) ? Buffer.from(signature, encoding) : signature);
-exports.verifyRsaSignature = verifyRsaSignature;
-const assertRsaSignature = (options) => {
-    if ((0, exports.verifyRsaSignature)(options))
-        return;
-    throw new errors_1.RsaError("Invalid signature");
-};
-exports.assertRsaSignature = assertRsaSignature;
-//# sourceMappingURL=rsa-signature.js.map

package/dist/utils/private/rsa-signature.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rsa-signature.js","sourceRoot":"","sources":["../../../src/utils/private/rsa-signature.ts"],"names":[],"mappings":";;;AAAA,oCAAuC;AACvC,mCAAkD;AAClD,yCAAwC;AAExC,uCAAqD;AACrD,mDAAkD;AAE3C,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,WAAW,EACX,OAAO,GACmB,EAAU,EAAE,CACtC,IAAA,mBAAU,EAAC,IAAA,+BAAe,EAAC,OAAO,CAAC,CAAC;KACjC,MAAM,CAAC,IAAI,CAAC;KACZ,GAAG,EAAE;KACL,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAR/B,QAAA,kBAAkB,sBAQa;AAErC,MAAM,kBAAkB,GAAG,CAAC,EACjC,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,OAAO,EACP,SAAS,GACiB,EAAW,EAAE,CACvC,IAAA,qBAAY,EAAC,IAAA,+BAAe,EAAC,OAAO,CAAC,CAAC;KACnC,MAAM,CAAC,IAAI,CAAC;KACZ,GAAG,EAAE;KACL,MAAM,CACL,IAAA,sBAAY,EAAC,OAAO,EAAE,WAAW,CAAC,EAClC,IAAA,aAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CACnE,CAAC;AAbO,QAAA,kBAAkB,sBAazB;AAEC,MAAM,kBAAkB,GAAG,CAAC,OAAkC,EAAQ,EAAE;IAC7E,IAAI,IAAA,0BAAkB,EAAC,OAAO,CAAC;QAAE,OAAO;IACxC,MAAM,IAAI,iBAAQ,CAAC,mBAAmB,CAAC,CAAC;AAC1C,CAAC,CAAC;AAHW,QAAA,kBAAkB,sBAG7B"}