@matter/general 0.15.0-alpha.0-20250613-a55f991d4 → 0.15.0-alpha.0-20250616-4b3754906

package/dist/cjs/crypto/Crypto.d.ts

@@ -68,7 +68,6 @@ export declare const ec: {
     notImplemented: () => never;
     p256: import("@noble/curves/_shortw_utils").CurveFnWithCreate;
 };
-export declare const CRYPTO_RANDOM_LENGTH = 32;
 export declare const CRYPTO_ENCRYPT_ALGORITHM = "aes-128-ccm";
 export declare const CRYPTO_HASH_ALGORITHM = "sha256";
 export declare const CRYPTO_EC_CURVE = "prime256v1";
@@ -83,89 +82,64 @@ export type CryptoDsaEncoding = "ieee-p1363" | "der";
  * AES-CCM implementation.
  *
  * If your platform does not fully implement Web Crypto, or offers a native implementation of AES-CCM, you can replace
- * {@link Crypto.get} to expose a different implementation.
+ * the implementation in {@link Environment.default}.
  *
  * WARNING: The standard implementation is unaudited.  See relevant warnings in StandardCrypto.ts.
  */
-export interface Crypto {
+export declare abstract class Crypto {
     /**
      * The name used in log messages.
      */
-    implementationName: string;
+    abstract implementationName: string;
     /**
      * Encrypt using AES-CCM with constants limited to those required by Matter.
      */
-    encrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, aad?: Uint8Array): Uint8Array;
+    abstract encrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, aad?: Uint8Array): Uint8Array;
     /**
      * Decrypt using AES-CCM with constants limited to those required by Matter.
      */
-    decrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, aad?: Uint8Array): Uint8Array;
+    abstract decrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, aad?: Uint8Array): Uint8Array;
     /**
-     * Obtain random bytes from the most cryptographically-appropriate source available.
+     * Create a random buffer from the most cryptographically-appropriate source available.
      */
-    getRandomData(length: number): Uint8Array;
+    abstract randomBytes(length: number): Uint8Array;
     /**
      * Compute the SHA-256 hash of a buffer.
      */
-    computeSha256(data: Uint8Array | Uint8Array[]): MaybePromise<Uint8Array>;
+    abstract computeSha256(data: Uint8Array | Uint8Array[]): MaybePromise<Uint8Array>;
     /**
      * Create a key from a secret using PBKDF2.
      */
-    createPbkdf2Key(secret: Uint8Array, salt: Uint8Array, iteration: number, keyLength: number): MaybePromise<Uint8Array>;
+    abstract createPbkdf2Key(secret: Uint8Array, salt: Uint8Array, iteration: number, keyLength: number): MaybePromise<Uint8Array>;
     /**
      * Create a key from a secret using HKDF.
      */
-    createHkdfKey(secret: Uint8Array, salt: Uint8Array, info: Uint8Array, length?: number): MaybePromise<Uint8Array>;
+    abstract createHkdfKey(secret: Uint8Array, salt: Uint8Array, info: Uint8Array, length?: number): MaybePromise<Uint8Array>;
     /**
      * Create an HMAC signature.
      */
-    signHmac(key: Uint8Array, data: Uint8Array): MaybePromise<Uint8Array>;
+    abstract signHmac(key: Uint8Array, data: Uint8Array): MaybePromise<Uint8Array>;
     /**
      * Create an ECDSA signature.
      */
-    signEcdsa(privateKey: JsonWebKey, data: Uint8Array | Uint8Array[], dsaEncoding?: CryptoDsaEncoding): MaybePromise<Uint8Array>;
+    abstract signEcdsa(privateKey: JsonWebKey, data: Uint8Array | Uint8Array[], dsaEncoding?: CryptoDsaEncoding): MaybePromise<Uint8Array>;
     /**
      * Authenticate an ECDSA signature.
      */
-    verifyEcdsa(publicKey: JsonWebKey, data: Uint8Array, signature: Uint8Array, dsaEncoding?: CryptoDsaEncoding): MaybePromise<void>;
+    abstract verifyEcdsa(publicKey: JsonWebKey, data: Uint8Array, signature: Uint8Array, dsaEncoding?: CryptoDsaEncoding): MaybePromise<void>;
     /**
      * Create a general-purpose EC key.
      */
-    createKeyPair(): MaybePromise<PrivateKey>;
+    abstract createKeyPair(): MaybePromise<PrivateKey>;
     /**
      * Compute the shared secret for a Diffie-Hellman exchange.
      */
-    generateDhSecret(key: PrivateKey, peerKey: PublicKey): MaybePromise<Uint8Array>;
+    abstract generateDhSecret(key: PrivateKey, peerKey: PublicKey): MaybePromise<Uint8Array>;
+    get randomUint8(): number;
+    get randomUint16(): number;
+    get randomUint32(): number;
+    get randomBigUint64(): bigint;
+    randomBigInt(size: number, maxValue?: bigint): bigint;
+    reportUsage(component?: string): void;
 }
-/**
- * Crypto support functions.
- */
-export declare const Crypto: {
-    /**
-     * The default crypto implementation.
-     */
-    readonly default: Crypto;
-    get provider(): undefined | (() => Crypto);
-    /**
-     * Set the default crypto provider.
-     */
-    set provider(provider: () => Crypto);
-    readonly implementationName: string;
-    encrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, aad?: Uint8Array): Uint8Array<ArrayBufferLike>;
-    decrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, aad?: Uint8Array): Uint8Array<ArrayBufferLike>;
-    getRandomData(length: number): Uint8Array<ArrayBufferLike>;
-    getRandom(): Uint8Array<ArrayBufferLike>;
-    getRandomUInt16(): number;
-    getRandomUInt32(): number;
-    getRandomBigUInt64(): bigint;
-    getRandomBigInt(size: number, maxValue?: bigint): bigint;
-    computeSha256(data: Uint8Array | Uint8Array[]): MaybePromise<Uint8Array<ArrayBufferLike>>;
-    createPbkdf2Key(secret: Uint8Array, salt: Uint8Array, iteration: number, keyLength: number): MaybePromise<Uint8Array<ArrayBufferLike>>;
-    createHkdfKey(secret: Uint8Array, salt: Uint8Array, info: Uint8Array, length?: number): MaybePromise<Uint8Array<ArrayBufferLike>>;
-    signHmac(key: Uint8Array, data: Uint8Array): MaybePromise<Uint8Array<ArrayBufferLike>>;
-    signEcdsa(privateKey: JsonWebKey, data: Uint8Array | Uint8Array[], dsaEncoding?: CryptoDsaEncoding): MaybePromise<Uint8Array<ArrayBufferLike>>;
-    verifyEcdsa(publicKey: JsonWebKey, data: Uint8Array, signature: Uint8Array, dsaEncoding?: CryptoDsaEncoding): MaybePromise<void>;
-    createKeyPair(): MaybePromise<PrivateKey>;
-    generateDhSecret(key: PrivateKey, peerKey: PublicKey): MaybePromise<Uint8Array<ArrayBufferLike>>;
-};
 //# sourceMappingURL=Crypto.d.ts.map

package/dist/cjs/crypto/Crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Crypto.d.ts","sourceRoot":"","sources":["../../../src/crypto/Crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,GAAG,MAAM,gCAAgC,CAAC;AACtD,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAKtD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAEjD,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;YAwJyC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;mFA3ErD,GAAI;;;;gEAkDuE,GAAI,yBAAwB,GAAI;;;;;;;;;;;;;CA3H9G,CAAC;AAEF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AACtD,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAC9C,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,KAAK,CAAC;AAIrD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,MAAM;IACnB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAE5F;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAE5F;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IAE1C;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAEzE;;OAEG;IACH,eAAe,CACX,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAClB,YAAY,CAAC,UAAU,CAAC,CAAC;IAE5B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAEjH;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAEtE;;OAEG;IACH,SAAS,CACL,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,EAC/B,WAAW,CAAC,EAAE,iBAAiB,GAChC,YAAY,CAAC,UAAU,CAAC,CAAC;IAE5B;;OAEG;IACH,WAAW,CACP,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,EACrB,WAAW,CAAC,EAAE,iBAAiB,GAChC,YAAY,CAAC,IAAI,CAAC,CAAC;IAEtB;;OAEG;IACH,aAAa,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC;IAE1C;;OAEG;IACH,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;CACnF;AAMD;;GAEG;AACH,eAAO,MAAM,MAAM;IACf;;OAEG;;oBAmBa,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC;IAI1C;;OAEG;2BACoB,MAAM,MAAM;;iBAYtB,UAAU,QAAQ,UAAU,SAAS,UAAU,QAAQ,UAAU;iBAIjE,UAAU,QAAQ,UAAU,SAAS,UAAU,QAAQ,UAAU;0BAIxD,MAAM;;;;;0BAoBN,MAAM,aAAa,MAAM;wBAW3B,UAAU,GAAG,UAAU,EAAE;4BAIrB,UAAU,QAAQ,UAAU,aAAa,MAAM,aAAa,MAAM;0BAIpE,UAAU,QAAQ,UAAU,QAAQ,UAAU,WAAW,MAAM;kBAIvE,UAAU,QAAQ,UAAU;0BAIpB,UAAU,QAAQ,UAAU,GAAG,UAAU,EAAE,gBAAgB,iBAAiB;2BAI3E,UAAU,QAAQ,UAAU,aAAa,UAAU,gBAAgB,iBAAiB;;0BAQrF,UAAU,WAAW,SAAS;CAGvD,CAAC"}
+{"version":3,"file":"Crypto.d.ts","sourceRoot":"","sources":["../../../src/crypto/Crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,GAAG,MAAM,gCAAgC,CAAC;AACtD,OAAO,KAAK,KAAK,MAAM,8BAA8B,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAEjD,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;YA8IyO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;mFA7D1O,GAAI;;;;gEAgD6C,GAC/D,yBAAwB,GAAI;;;;;;;;;;;;;CA9H5B,CAAC;AAEF,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AACtD,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAC9C,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,KAAK,CAAC;AAIrD;;;;;;;;;;GAUG;AACH,8BAAsB,MAAM;IACxB;;OAEG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAEpC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU;IAEpG;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU;IAEpG;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU;IAEhD;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC;IAEjF;;OAEG;IACH,QAAQ,CAAC,eAAe,CACpB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAClB,YAAY,CAAC,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,aAAa,CAClB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,CAAC,EAAE,MAAM,GAChB,YAAY,CAAC,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;IAE9E;;OAEG;IACH,QAAQ,CAAC,SAAS,CACd,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,EAC/B,WAAW,CAAC,EAAE,iBAAiB,GAChC,YAAY,CAAC,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,WAAW,CAChB,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,EACrB,WAAW,CAAC,EAAE,iBAAiB,GAChC,YAAY,CAAC,IAAI,CAAC;IAErB;;OAEG;IACH,QAAQ,CAAC,aAAa,IAAI,YAAY,CAAC,UAAU,CAAC;IAElD;;OAEG;IACH,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC;IAExF,IAAI,WAAW,WAEd;IAED,IAAI,YAAY,WAEf;IAED,IAAI,YAAY,WAEf;IAED,IAAI,eAAe,WAElB;IAED,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;IAW5C,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM;CAOjC"}

package/dist/cjs/crypto/Crypto.js

@@ -33,7 +33,6 @@ __export(Crypto_exports, {
   CRYPTO_EC_KEY_BYTES: () => CRYPTO_EC_KEY_BYTES,
   CRYPTO_ENCRYPT_ALGORITHM: () => CRYPTO_ENCRYPT_ALGORITHM,
   CRYPTO_HASH_ALGORITHM: () => CRYPTO_HASH_ALGORITHM,
-  CRYPTO_RANDOM_LENGTH: () => CRYPTO_RANDOM_LENGTH,
   CRYPTO_SYMMETRIC_KEY_LENGTH: () => CRYPTO_SYMMETRIC_KEY_LENGTH,
   Crypto: () => Crypto,
   ec: () => ec
@@ -41,13 +40,10 @@ __export(Crypto_exports, {
 module.exports = __toCommonJS(Crypto_exports);
 var import_Diagnostic = require("#log/Diagnostic.js");
 var import_Logger = require("#log/Logger.js");
-var import_Boot = require("#util/Boot.js");
+var import_Bytes = require("#util/Bytes.js");
 var mod = __toESM(require("@noble/curves/abstract/modular"), 1);
 var utils = __toESM(require("@noble/curves/abstract/utils"), 1);
 var import_p256 = require("@noble/curves/p256");
-var import_MatterError = require("../MatterError.js");
-var import_Bytes = require("../util/Bytes.js");
-var import_DataReader = require("../util/DataReader.js");
 /**
  * @license
  * Copyright 2022-2025 Matter.js Authors
@@ -58,7 +54,6 @@ const ec = {
   ...utils,
   ...mod
 };
-const CRYPTO_RANDOM_LENGTH = 32;
 const CRYPTO_ENCRYPT_ALGORITHM = "aes-128-ccm";
 const CRYPTO_HASH_ALGORITHM = "sha256";
 const CRYPTO_EC_CURVE = "prime256v1";
@@ -66,106 +61,34 @@ const CRYPTO_EC_KEY_BYTES = 32;
 const CRYPTO_AUTH_TAG_LENGTH = 16;
 const CRYPTO_SYMMETRIC_KEY_LENGTH = 16;
 const logger = import_Logger.Logger.get("Crypto");
-let logImplementationName = true;
-let defaultInstance;
-let defaultProvider;
-const Crypto = {
-  /**
-   * The default crypto implementation.
-   */
-  get default() {
-    if (defaultInstance) {
-      return defaultInstance;
-    }
-    if (defaultProvider === void 0) {
-      throw new import_MatterError.NoProviderError("There is no cryptography implementation installed");
-    }
-    defaultInstance = defaultProvider();
-    if (logImplementationName) {
-      logger.debug("Using", import_Diagnostic.Diagnostic.strong(defaultInstance.implementationName), "cryptography implementation");
-    }
-    return defaultInstance;
-  },
-  get provider() {
-    return defaultProvider;
-  },
-  /**
-   * Set the default crypto provider.
-   */
-  set provider(provider) {
-    if (defaultProvider === provider) {
-      return;
-    }
-    defaultProvider = void 0;
-    defaultProvider = provider;
-  },
-  get implementationName() {
-    return Crypto.default.implementationName;
-  },
-  encrypt(key, data, nonce, aad) {
-    return Crypto.default.encrypt(key, data, nonce, aad);
-  },
-  decrypt(key, data, nonce, aad) {
-    return Crypto.default.decrypt(key, data, nonce, aad);
-  },
-  getRandomData(length) {
-    return Crypto.default.getRandomData(length);
-  },
-  getRandom() {
-    return Crypto.default.getRandomData(CRYPTO_RANDOM_LENGTH);
-  },
-  getRandomUInt16() {
-    return new import_DataReader.DataReader(Crypto.default.getRandomData(2), import_Bytes.Endian.Little).readUInt16();
-  },
-  getRandomUInt32() {
-    return new import_DataReader.DataReader(Crypto.default.getRandomData(4), import_Bytes.Endian.Little).readUInt32();
-  },
-  getRandomBigUInt64() {
-    return new import_DataReader.DataReader(Crypto.default.getRandomData(8), import_Bytes.Endian.Little).readUInt64();
-  },
-  getRandomBigInt(size, maxValue) {
-    const { bytesToNumberBE } = ec;
+class Crypto {
+  get randomUint8() {
+    return this.randomBytes(1)[0];
+  }
+  get randomUint16() {
+    return new DataView(this.randomBytes(2).buffer).getUint16(0);
+  }
+  get randomUint32() {
+    return new DataView(this.randomBytes(4).buffer).getUint32(0);
+  }
+  get randomBigUint64() {
+    return new DataView(this.randomBytes(8).buffer).getBigUint64(0);
+  }
+  randomBigInt(size, maxValue) {
     if (maxValue === void 0) {
-      return bytesToNumberBE(Crypto.getRandomData(size));
+      return import_Bytes.Bytes.asBigInt(this.randomBytes(size));
     }
     while (true) {
-      const random = bytesToNumberBE(Crypto.getRandomData(size));
+      const random = import_Bytes.Bytes.asBigInt(this.randomBytes(size));
       if (random < maxValue) return random;
     }
-  },
-  computeSha256(data) {
-    return Crypto.default.computeSha256(data);
-  },
-  createPbkdf2Key(secret, salt, iteration, keyLength) {
-    return Crypto.default.createPbkdf2Key(secret, salt, iteration, keyLength);
-  },
-  createHkdfKey(secret, salt, info, length) {
-    return Crypto.default.createHkdfKey(secret, salt, info, length);
-  },
-  signHmac(key, data) {
-    return Crypto.default.signHmac(key, data);
-  },
-  signEcdsa(privateKey, data, dsaEncoding) {
-    return Crypto.default.signEcdsa(privateKey, data, dsaEncoding);
-  },
-  verifyEcdsa(publicKey, data, signature, dsaEncoding) {
-    return Crypto.default.verifyEcdsa(publicKey, data, signature, dsaEncoding);
-  },
-  createKeyPair() {
-    return Crypto.default.createKeyPair();
-  },
-  generateDhSecret(key, peerKey) {
-    return Crypto.default.generateDhSecret(key, peerKey);
   }
-};
-Crypto;
-import_Boot.Boot.init(() => {
-  logImplementationName = true;
-  defaultInstance = void 0;
-  defaultProvider = void 0;
-  if (typeof MatterHooks !== "undefined") {
-    logImplementationName = true;
-    MatterHooks.cryptoSetup?.(Crypto);
+  reportUsage(component) {
+    const message = ["Using", import_Diagnostic.Diagnostic.strong(this.implementationName), "crypto implementation"];
+    if (component) {
+      message.push("for", component);
+    }
+    logger.debug(...message);
   }
-});
+}
 //# sourceMappingURL=Crypto.js.map

package/dist/cjs/crypto/Crypto.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../src/crypto/Crypto.ts"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,wBAA2B;AAC3B,oBAAuB;AACvB,kBAAqB;AAErB,UAAqB;AACrB,YAAuB;AACvB,kBAAqB;AACrB,yBAAgC;AAChC,mBAAuB;AACvB,wBAA2B;AAf3B;AAAA;AAAA;AAAA;AAAA;AAkBO,MAAM,KAAK;AAAA,EACd;AAAA,EACA,GAAG;AAAA,EACH,GAAG;AACP;AAEO,MAAM,uBAAuB;AAC7B,MAAM,2BAA2B;AACjC,MAAM,wBAAwB;AAC9B,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAC/B,MAAM,8BAA8B;AAG3C,MAAM,SAAS,qBAAO,IAAI,QAAQ;AAyFlC,IAAI,wBAAwB;AAC5B,IAAI;AACJ,IAAI;AAKG,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA,EAIlB,IAAI,UAAU;AACV,QAAI,iBAAiB;AACjB,aAAO;AAAA,IACX;AAEA,QAAI,oBAAoB,QAAW;AAC/B,YAAM,IAAI,mCAAgB,mDAAmD;AAAA,IACjF;AAEA,sBAAkB,gBAAgB;AAElC,QAAI,uBAAuB;AACvB,aAAO,MAAM,SAAS,6BAAW,OAAO,gBAAgB,kBAAkB,GAAG,6BAA6B;AAAA,IAC9G;AAEA,WAAO;AAAA,EACX;AAAA,EAEA,IAAI,WAAuC;AACvC,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,SAAS,UAAwB;AACjC,QAAI,oBAAoB,UAAU;AAC9B;AAAA,IACJ;AACA,sBAAkB;AAClB,sBAAkB;AAAA,EACtB;AAAA,EAEA,IAAI,qBAAqB;AACrB,WAAO,OAAO,QAAQ;AAAA,EAC1B;AAAA,EAEA,QAAQ,KAAiB,MAAkB,OAAmB,KAAkB;AAC5E,WAAO,OAAO,QAAQ,QAAQ,KAAK,MAAM,OAAO,GAAG;AAAA,EACvD;AAAA,EAEA,QAAQ,KAAiB,MAAkB,OAAmB,KAAkB;AAC5E,WAAO,OAAO,QAAQ,QAAQ,KAAK,MAAM,OAAO,GAAG;AAAA,EACvD;AAAA,EAEA,cAAc,QAAgB;AAC1B,WAAO,OAAO,QAAQ,cAAc,MAAM;AAAA,EAC9C;AAAA,EAEA,YAAY;AACR,WAAO,OAAO,QAAQ,cAAc,oBAAoB;AAAA,EAC5D;AAAA,EAEA,kBAAkB;AACd,WAAO,IAAI,6BAAW,OAAO,QAAQ,cAAc,CAAC,GAAG,oBAAO,MAAM,EAAE,WAAW;AAAA,EACrF;AAAA,EAEA,kBAAkB;AACd,WAAO,IAAI,6BAAW,OAAO,QAAQ,cAAc,CAAC,GAAG,oBAAO,MAAM,EAAE,WAAW;AAAA,EACrF;AAAA,EAEA,qBAAqB;AACjB,WAAO,IAAI,6BAAW,OAAO,QAAQ,cAAc,CAAC,GAAG,oBAAO,MAAM,EAAE,WAAW;AAAA,EACrF;AAAA,EAEA,gBAAgB,MAAc,UAAmB;AAC7C,UAAM,EAAE,gBAAgB,IAAI;AAC5B,QAAI,aAAa,QAAW;AACxB,aAAO,gBAAgB,OAAO,cAAc,IAAI,CAAC;AAAA,IACrD;AACA,WAAO,MAAM;AACT,YAAM,SAAS,gBAAgB,OAAO,cAAc,IAAI,CAAC;AACzD,UAAI,SAAS,SAAU,QAAO;AAAA,IAClC;AAAA,EACJ;AAAA,EAEA,cAAc,MAAiC;AAC3C,WAAO,OAAO,QAAQ,cAAc,IAAI;AAAA,EAC5C;AAAA,EAEA,gBAAgB,QAAoB,MAAkB,WAAmB,WAAmB;AACxF,WAAO,OAAO,QAAQ,gBAAgB,QAAQ,MAAM,WAAW,SAAS;AAAA,EAC5E;AAAA,EAEA,cAAc,QAAoB,MAAkB,MAAkB,QAAiB;AACnF,WAAO,OAAO,QAAQ,cAAc,QAAQ,MAAM,MAAM,MAAM;AAAA,EAClE;AAAA,EAEA,SAAS,KAAiB,MAAkB;AACxC,WAAO,OAAO,QAAQ,SAAS,KAAK,IAAI;AAAA,EAC5C;AAAA,EAEA,UAAU,YAAwB,MAAiC,aAAiC;AAChG,WAAO,OAAO,QAAQ,UAAU,YAAY,MAAM,WAAW;AAAA,EACjE;AAAA,EAEA,YAAY,WAAuB,MAAkB,WAAuB,aAAiC;AACzG,WAAO,OAAO,QAAQ,YAAY,WAAW,MAAM,WAAW,WAAW;AAAA,EAC7E;AAAA,EAEA,gBAAgB;AACZ,WAAO,OAAO,QAAQ,cAAc;AAAA,EACxC;AAAA,EAEA,iBAAiB,KAAiB,SAAoB;AAClD,WAAO,OAAO,QAAQ,iBAAiB,KAAK,OAAO;AAAA,EACvD;AACJ;AAEA;AAEA,iBAAK,KAAK,MAAM;AACZ,0BAAwB;AACxB,oBAAkB;AAClB,oBAAkB;AAGlB,MAAI,OAAO,gBAAgB,aAAa;AAEpC,4BAAwB;AAGxB,gBAAY,cAAc,MAAM;AAAA,EACpC;AACJ,CAAC;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,wBAA2B;AAC3B,oBAAuB;AACvB,mBAAsB;AAEtB,UAAqB;AACrB,YAAuB;AACvB,kBAAqB;AAbrB;AAAA;AAAA;AAAA;AAAA;AAgBO,MAAM,KAAK;AAAA,EACd;AAAA,EACA,GAAG;AAAA,EACH,GAAG;AACP;AAEO,MAAM,2BAA2B;AACjC,MAAM,wBAAwB;AAC9B,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAC/B,MAAM,8BAA8B;AAG3C,MAAM,SAAS,qBAAO,IAAI,QAAQ;AAa3B,MAAe,OAAO;AAAA,EAgFzB,IAAI,cAAc;AACd,WAAO,KAAK,YAAY,CAAC,EAAE,CAAC;AAAA,EAChC;AAAA,EAEA,IAAI,eAAe;AACf,WAAO,IAAI,SAAS,KAAK,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC;AAAA,EAC/D;AAAA,EAEA,IAAI,eAAe;AACf,WAAO,IAAI,SAAS,KAAK,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC;AAAA,EAC/D;AAAA,EAEA,IAAI,kBAAkB;AAClB,WAAO,IAAI,SAAS,KAAK,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC;AAAA,EAClE;AAAA,EAEA,aAAa,MAAc,UAAmB;AAC1C,QAAI,aAAa,QAAW;AACxB,aAAO,mBAAM,SAAS,KAAK,YAAY,IAAI,CAAC;AAAA,IAChD;AAEA,WAAO,MAAM;AACT,YAAM,SAAS,mBAAM,SAAS,KAAK,YAAY,IAAI,CAAC;AACpD,UAAI,SAAS,SAAU,QAAO;AAAA,IAClC;AAAA,EACJ;AAAA,EAEA,YAAY,WAAoB;AAC5B,UAAM,UAAU,CAAC,SAAS,6BAAW,OAAO,KAAK,kBAAkB,GAAG,uBAAuB;AAC7F,QAAI,WAAW;AACX,cAAQ,KAAK,OAAO,SAAS;AAAA,IACjC;AACA,WAAO,MAAM,GAAG,OAAO;AAAA,EAC3B;AACJ;",
   "names": []
 }

package/dist/cjs/crypto/MockCrypto.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @license
+ * Copyright 2022-2025 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Crypto } from "./Crypto.js";
+/**
+ * WARNING: ONLY FOR USE IN PROTECTED TESTING ENVIRONMENTS WHERE SECURITY IS NOT A CONCERN
+ *
+ * A {@link Crypto} with sources of entropy replaced to produce stable values based on an input index.
+ *
+ * This is useful in testing environments where Matter logic is difficult to test with true entropy.
+ *
+ * Depending on implementation some methods may need further mocking to remove entropy entirely.  Mocking is sufficient
+ * for current testing purposes.
+ */
+export interface MockCrypto extends Crypto {
+    /**
+     * The index of the random space.  May be modified to adjust computations going forward.
+     */
+    index: number;
+}
+export declare function MockCrypto(index?: number, implementation?: new () => Crypto): MockCrypto;
+//# sourceMappingURL=MockCrypto.d.ts.map

package/dist/cjs/crypto/MockCrypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MockCrypto.d.ts","sourceRoot":"","sources":["../../../src/crypto/MockCrypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,MAAM,EAAM,MAAM,aAAa,CAAC;AAIzC;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAW,SAAQ,MAAM;IACtC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,UAAU,CAAC,KAAK,GAAE,MAAa,EAAE,cAAc,GAAE,UAAU,MAAuB,GAkC7E,UAAU,CAC9B"}

package/dist/cjs/crypto/MockCrypto.js

@@ -0,0 +1,61 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var MockCrypto_exports = {};
+__export(MockCrypto_exports, {
+  MockCrypto: () => MockCrypto
+});
+module.exports = __toCommonJS(MockCrypto_exports);
+var import_MatterError = require("#MatterError.js");
+var import_Crypto = require("./Crypto.js");
+var import_Key = require("./Key.js");
+var import_StandardCrypto = require("./StandardCrypto.js");
+/**
+ * @license
+ * Copyright 2022-2025 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+function MockCrypto(index = 128, implementation = import_StandardCrypto.StandardCrypto) {
+  if (index < 0 || index > 255) {
+    throw new import_MatterError.ImplementationError(`Index for stable crypto must be 0-255`);
+  }
+  const crypto = new implementation();
+  crypto.randomBytes = function getRandomDataNONENTROPIC(length) {
+    const result = new Uint8Array(length);
+    result.fill(index);
+    return result;
+  };
+  crypto.createKeyPair = function getRandomDataNONENTROPIC() {
+    const privateBits = import_Crypto.ec.mapHashToField(new Uint8Array(crypto.randomBytes(48)), import_Crypto.ec.p256.CURVE.n);
+    return (0, import_Key.Key)({
+      kty: import_Key.KeyType.EC,
+      crv: import_Key.CurveType.p256,
+      privateBits
+    });
+  };
+  Object.defineProperty(crypto, "index", {
+    get() {
+      return index;
+    },
+    set(newIndex) {
+      index = newIndex % 256;
+    }
+  });
+  return crypto;
+}
+//# sourceMappingURL=MockCrypto.js.map

package/dist/cjs/crypto/MockCrypto.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../src/crypto/MockCrypto.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,yBAAoC;AACpC,oBAA2B;AAC3B,iBAAoD;AACpD,4BAA+B;AAT/B;AAAA;AAAA;AAAA;AAAA;AA4BO,SAAS,WAAW,QAAgB,KAAM,iBAAmC,sCAAgB;AAChG,MAAI,QAAQ,KAAK,QAAQ,KAAK;AAC1B,UAAM,IAAI,uCAAoB,uCAAuC;AAAA,EACzE;AAEA,QAAM,SAAS,IAAI,eAAe;AAGlC,SAAO,cAAc,SAAS,yBAAyB,QAAQ;AAC3D,UAAM,SAAS,IAAI,WAAW,MAAM;AACpC,WAAO,KAAK,KAAK;AACjB,WAAO;AAAA,EACX;AAGA,SAAO,gBAAgB,SAAS,2BAA2B;AACvD,UAAM,cAAc,iBAAG,eAAe,IAAI,WAAW,OAAO,YAAY,EAAE,CAAC,GAAG,iBAAG,KAAK,MAAM,CAAC;AAC7F,eAAO,gBAAI;AAAA,MACP,KAAK,mBAAQ;AAAA,MACb,KAAK,qBAAU;AAAA,MACf;AAAA,IACJ,CAAC;AAAA,EACL;AAEA,SAAO,eAAe,QAAQ,SAAS;AAAA,IACnC,MAAM;AACF,aAAO;AAAA,IACX;AAAA,IAEA,IAAI,UAAkB;AAClB,cAAQ,WAAW;AAAA,IACvB;AAAA,EACJ,CAAC;AAED,SAAO;AACX;",
+  "names": []
+}

package/dist/cjs/crypto/Spake2p.d.ts

@@ -3,24 +3,23 @@
  * Copyright 2022-2025 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
+import { Crypto } from "./Crypto.js";
 export interface PbkdfParameters {
     iterations: number;
     salt: Uint8Array;
 }
 export declare class Spake2p {
-    private readonly context;
-    private readonly random;
-    private readonly w0;
-    static computeW0W1({ iterations, salt }: PbkdfParameters, pin: number): Promise<{
+    #private;
+    static computeW0W1(crypto: Crypto, { iterations, salt }: PbkdfParameters, pin: number): Promise<{
         w0: bigint;
         w1: bigint;
     }>;
-    static computeW0L(pbkdfParameters: PbkdfParameters, pin: number): Promise<{
+    static computeW0L(crypto: Crypto, pbkdfParameters: PbkdfParameters, pin: number): Promise<{
         w0: bigint;
         L: Uint8Array<ArrayBufferLike>;
     }>;
-    static create(context: Uint8Array, w0: bigint): Spake2p;
-    constructor(context: Uint8Array, random: bigint, w0: bigint);
+    static create(crypto: Crypto, context: Uint8Array, w0: bigint): Spake2p;
+    constructor(crypto: Crypto, context: Uint8Array, random: bigint, w0: bigint);
     computeX(): Uint8Array;
     computeY(): Uint8Array;
     computeSecretAndVerifiersFromY(w1: bigint, X: Uint8Array, Y: Uint8Array): Promise<{

package/dist/cjs/crypto/Spake2p.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Spake2p.d.ts","sourceRoot":"","sources":["../../../src/crypto/Spake2p.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqBH,MAAM,WAAW,eAAe;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;CACpB;AAED,qBAAa,OAAO;IAsBZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,EAAE;WAvBV,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM;;;;WAS9D,UAAU,CAAC,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM;;;;IAMrE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM;gBAMxB,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM;IAG/B,QAAQ,IAAI,UAAU;IAKtB,QAAQ,IAAI,UAAU;IAKhB,8BAA8B,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU;;;;;IAavE,8BAA8B,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU;;;;;YAalE,yBAAyB;IAevC,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,YAAY;CAIvB"}
+{"version":3,"file":"Spake2p.d.ts","sourceRoot":"","sources":["../../../src/crypto/Spake2p.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,MAAM,EAAM,MAAM,aAAa,CAAC;AAgBzC,MAAM,WAAW,eAAe;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;CACpB;AAED,qBAAa,OAAO;;WAMH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM;;;;WAS9E,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM;;;;IAMrF,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM;gBAKjD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;IAO3E,QAAQ,IAAI,UAAU;IAKtB,QAAQ,IAAI,UAAU;IAKhB,8BAA8B,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU;;;;;IAavE,8BAA8B,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU;;;;;YAalE,yBAAyB;IAevC,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,YAAY;CAIvB"}

package/dist/cjs/crypto/Spake2p.js

@@ -41,34 +41,39 @@ const M = ProjectivePoint.fromHex("02886e2f97ace46e55ba9dd7242579f2993b64e16ef3d
 const N = ProjectivePoint.fromHex("03d8bbd6c639c62937b04d997f38c3770719c629d7014d49a24b4f98baa1292b49");
 const CRYPTO_W_SIZE_BYTES = import_CryptoConstants.CRYPTO_GROUP_SIZE_BYTES + 8;
 class Spake2p {
-  constructor(context, random, w0) {
-    this.context = context;
-    this.random = random;
-    this.w0 = w0;
-  }
-  static async computeW0W1({ iterations, salt }, pin) {
+  #crypto;
+  #context;
+  #random;
+  #w0;
+  static async computeW0W1(crypto, { iterations, salt }, pin) {
     const pinWriter = new import_DataWriter.DataWriter(import_Bytes.Endian.Little);
     pinWriter.writeUInt32(pin);
-    const ws = await import_Crypto.Crypto.createPbkdf2Key(pinWriter.toByteArray(), salt, iterations, CRYPTO_W_SIZE_BYTES * 2);
+    const ws = await crypto.createPbkdf2Key(pinWriter.toByteArray(), salt, iterations, CRYPTO_W_SIZE_BYTES * 2);
     const w0 = mod(bytesToNumberBE(ws.slice(0, 40)), P256_CURVE.n);
     const w1 = mod(bytesToNumberBE(ws.slice(40, 80)), P256_CURVE.n);
     return { w0, w1 };
   }
-  static async computeW0L(pbkdfParameters, pin) {
-    const { w0, w1 } = await this.computeW0W1(pbkdfParameters, pin);
+  static async computeW0L(crypto, pbkdfParameters, pin) {
+    const { w0, w1 } = await this.computeW0W1(crypto, pbkdfParameters, pin);
     const L = ProjectivePoint.BASE.multiply(w1).toRawBytes(false);
     return { w0, L };
   }
-  static create(context, w0) {
-    const random = import_Crypto.Crypto.getRandomBigInt(32, P256_CURVE.Fp.ORDER);
-    return new Spake2p(context, random, w0);
+  static create(crypto, context, w0) {
+    const random = crypto.randomBigInt(32, P256_CURVE.Fp.ORDER);
+    return new Spake2p(crypto, context, random, w0);
+  }
+  constructor(crypto, context, random, w0) {
+    this.#crypto = crypto;
+    this.#context = context;
+    this.#random = random;
+    this.#w0 = w0;
   }
   computeX() {
-    const X = ProjectivePoint.BASE.multiply(this.random).add(M.multiply(this.w0));
+    const X = ProjectivePoint.BASE.multiply(this.#random).add(M.multiply(this.#w0));
     return X.toRawBytes(false);
   }
   computeY() {
-    const Y = ProjectivePoint.BASE.multiply(this.random).add(N.multiply(this.w0));
+    const Y = ProjectivePoint.BASE.multiply(this.#random).add(N.multiply(this.#w0));
     return Y.toRawBytes(false);
   }
   async computeSecretAndVerifiersFromY(w1, X, Y) {
@@ -78,8 +83,8 @@ class Spake2p {
     } catch (error) {
       throw new import_MatterError.InternalError(`Y is not on the curve: ${error.message}`);
     }
-    const yNwo = YPoint.add(N.multiply(this.w0).negate());
-    const Z = yNwo.multiply(this.random);
+    const yNwo = YPoint.add(N.multiply(this.#w0).negate());
+    const Z = yNwo.multiply(this.#random);
     const V = yNwo.multiply(w1);
     return this.computeSecretAndVerifiers(X, Y, Z.toRawBytes(false), V.toRawBytes(false));
   }
@@ -91,24 +96,24 @@ class Spake2p {
     } catch (error) {
       throw new import_MatterError.InternalError(`X is not on the curve: ${error.message}`);
     }
-    const Z = XPoint.add(M.multiply(this.w0).negate()).multiply(this.random);
-    const V = LPoint.multiply(this.random);
+    const Z = XPoint.add(M.multiply(this.#w0).negate()).multiply(this.#random);
+    const V = LPoint.multiply(this.#random);
     return this.computeSecretAndVerifiers(X, Y, Z.toRawBytes(false), V.toRawBytes(false));
   }
   async computeSecretAndVerifiers(X, Y, Z, V) {
     const TT_HASH = await this.computeTranscriptHash(X, Y, Z, V);
     const Ka = TT_HASH.slice(0, 16);
     const Ke = TT_HASH.slice(16, 32);
-    const KcAB = await import_Crypto.Crypto.createHkdfKey(Ka, new Uint8Array(0), import_Bytes.Bytes.fromString("ConfirmationKeys"), 32);
+    const KcAB = await this.#crypto.createHkdfKey(Ka, new Uint8Array(0), import_Bytes.Bytes.fromString("ConfirmationKeys"), 32);
     const KcA = KcAB.slice(0, 16);
     const KcB = KcAB.slice(16, 32);
-    const hAY = await import_Crypto.Crypto.signHmac(KcA, Y);
-    const hBX = await import_Crypto.Crypto.signHmac(KcB, X);
+    const hAY = await this.#crypto.signHmac(KcA, Y);
+    const hBX = await this.#crypto.signHmac(KcB, X);
     return { Ke, hAY, hBX };
   }
   computeTranscriptHash(X, Y, Z, V) {
     const TTwriter = new import_DataWriter.DataWriter(import_Bytes.Endian.Little);
-    this.addToContext(TTwriter, this.context);
+    this.addToContext(TTwriter, this.#context);
     this.addToContext(TTwriter, import_Bytes.Bytes.fromString(""));
     this.addToContext(TTwriter, import_Bytes.Bytes.fromString(""));
     this.addToContext(TTwriter, M.toRawBytes(false));
@@ -117,8 +122,8 @@ class Spake2p {
     this.addToContext(TTwriter, Y);
     this.addToContext(TTwriter, Z);
     this.addToContext(TTwriter, V);
-    this.addToContext(TTwriter, numberToBytesBE(this.w0, 32));
-    return import_Crypto.Crypto.computeSha256(TTwriter.toByteArray());
+    this.addToContext(TTwriter, numberToBytesBE(this.#w0, 32));
+    return this.#crypto.computeSha256(TTwriter.toByteArray());
   }
   addToContext(TTwriter, data) {
     TTwriter.writeUInt64(data.length);

package/dist/cjs/crypto/Spake2p.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../src/crypto/Spake2p.ts"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,yBAA8B;AAC9B,mBAA8B;AAC9B,wBAA2B;AAC3B,oBAA2B;AAC3B,6BAAwC;AAVxC;AAAA;AAAA;AAAA;AAAA;AAYA,MAAM;AAAA,EACF,MAAM,EAAE,iBAAiB,OAAO,WAAW;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACJ,IAAI;AAGJ,MAAM,IAAI,gBAAgB,QAAQ,oEAAoE;AACtG,MAAM,IAAI,gBAAgB,QAAQ,oEAAoE;AAEtG,MAAM,sBAAsB,iDAA0B;AAO/C,MAAM,QAAQ;AAAA,EAqBjB,YACqB,SACA,QACA,IACnB;AAHmB;AACA;AACA;AAAA,EAClB;AAAA,EAxBH,aAAa,YAAY,EAAE,YAAY,KAAK,GAAoB,KAAa;AACzE,UAAM,YAAY,IAAI,6BAAW,oBAAO,MAAM;AAC9C,cAAU,YAAY,GAAG;AACzB,UAAM,KAAK,MAAM,qBAAO,gBAAgB,UAAU,YAAY,GAAG,MAAM,YAAY,sBAAsB,CAAC;AAC1G,UAAM,KAAK,IAAI,gBAAgB,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC;AAC7D,UAAM,KAAK,IAAI,gBAAgB,GAAG,MAAM,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC;AAC9D,WAAO,EAAE,IAAI,GAAG;AAAA,EACpB;AAAA,EAEA,aAAa,WAAW,iBAAkC,KAAa;AACnE,UAAM,EAAE,IAAI,GAAG,IAAI,MAAM,KAAK,YAAY,iBAAiB,GAAG;AAC9D,UAAM,IAAI,gBAAgB,KAAK,SAAS,EAAE,EAAE,WAAW,KAAK;AAC5D,WAAO,EAAE,IAAI,EAAE;AAAA,EACnB;AAAA,EAEA,OAAO,OAAO,SAAqB,IAAY;AAC3C,UAAM,SAAS,qBAAO,gBAAgB,IAAI,WAAW,GAAG,KAAK;AAC7D,WAAO,IAAI,QAAQ,SAAS,QAAQ,EAAE;AAAA,EAC1C;AAAA,EAQA,WAAuB;AACnB,UAAM,IAAI,gBAAgB,KAAK,SAAS,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,EAAE,CAAC;AAC5E,WAAO,EAAE,WAAW,KAAK;AAAA,EAC7B;AAAA,EAEA,WAAuB;AACnB,UAAM,IAAI,gBAAgB,KAAK,SAAS,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,EAAE,CAAC;AAC5E,WAAO,EAAE,WAAW,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,+BAA+B,IAAY,GAAe,GAAe;AAC3E,UAAM,SAAS,gBAAgB,QAAQ,CAAC;AACxC,QAAI;AACA,aAAO,eAAe;AAAA,IAC1B,SAAS,OAAO;AACZ,YAAM,IAAI,iCAAc,0BAA2B,MAAc,OAAO,EAAE;AAAA,IAC9E;AACA,UAAM,OAAO,OAAO,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,OAAO,CAAC;AACpD,UAAM,IAAI,KAAK,SAAS,KAAK,MAAM;AACnC,UAAM,IAAI,KAAK,SAAS,EAAE;AAC1B,WAAO,KAAK,0BAA0B,GAAG,GAAG,EAAE,WAAW,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACxF;AAAA,EAEA,MAAM,+BAA+B,GAAe,GAAe,GAAe;AAC9E,UAAM,SAAS,gBAAgB,QAAQ,CAAC;AACxC,UAAM,SAAS,gBAAgB,QAAQ,CAAC;AACxC,QAAI;AACA,aAAO,eAAe;AAAA,IAC1B,SAAS,OAAO;AACZ,YAAM,IAAI,iCAAc,0BAA2B,MAAc,OAAO,EAAE;AAAA,IAC9E;AACA,UAAM,IAAI,OAAO,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,MAAM;AACvE,UAAM,IAAI,OAAO,SAAS,KAAK,MAAM;AACrC,WAAO,KAAK,0BAA0B,GAAG,GAAG,EAAE,WAAW,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACxF;AAAA,EAEA,MAAc,0BAA0B,GAAe,GAAe,GAAe,GAAe;AAChG,UAAM,UAAU,MAAM,KAAK,sBAAsB,GAAG,GAAG,GAAG,CAAC;AAC3D,UAAM,KAAK,QAAQ,MAAM,GAAG,EAAE;AAC9B,UAAM,KAAK,QAAQ,MAAM,IAAI,EAAE;AAE/B,UAAM,OAAO,MAAM,qBAAO,cAAc,IAAI,IAAI,WAAW,CAAC,GAAG,mBAAM,WAAW,kBAAkB,GAAG,EAAE;AACvG,UAAM,MAAM,KAAK,MAAM,GAAG,EAAE;AAC5B,UAAM,MAAM,KAAK,MAAM,IAAI,EAAE;AAE7B,UAAM,MAAM,MAAM,qBAAO,SAAS,KAAK,CAAC;AACxC,UAAM,MAAM,MAAM,qBAAO,SAAS,KAAK,CAAC;AAExC,WAAO,EAAE,IAAI,KAAK,IAAI;AAAA,EAC1B;AAAA,EAEQ,sBAAsB,GAAe,GAAe,GAAe,GAAe;AACtF,UAAM,WAAW,IAAI,6BAAW,oBAAO,MAAM;AAC7C,SAAK,aAAa,UAAU,KAAK,OAAO;AACxC,SAAK,aAAa,UAAU,mBAAM,WAAW,EAAE,CAAC;AAChD,SAAK,aAAa,UAAU,mBAAM,WAAW,EAAE,CAAC;AAChD,SAAK,aAAa,UAAU,EAAE,WAAW,KAAK,CAAC;AAC/C,SAAK,aAAa,UAAU,EAAE,WAAW,KAAK,CAAC;AAC/C,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,gBAAgB,KAAK,IAAI,EAAE,CAAC;AACxD,WAAO,qBAAO,cAAc,SAAS,YAAY,CAAC;AAAA,EACtD;AAAA,EAEQ,aAAa,UAAqC,MAAkB;AACxE,aAAS,YAAY,KAAK,MAAM;AAChC,aAAS,eAAe,IAAI;AAAA,EAChC;AACJ;",
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,yBAA8B;AAC9B,mBAA8B;AAC9B,wBAA2B;AAC3B,oBAA2B;AAC3B,6BAAwC;AAVxC;AAAA;AAAA;AAAA;AAAA;AAYA,MAAM;AAAA,EACF,MAAM,EAAE,iBAAiB,OAAO,WAAW;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACJ,IAAI;AAGJ,MAAM,IAAI,gBAAgB,QAAQ,oEAAoE;AACtG,MAAM,IAAI,gBAAgB,QAAQ,oEAAoE;AAEtG,MAAM,sBAAsB,iDAA0B;AAO/C,MAAM,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,aAAa,YAAY,QAAgB,EAAE,YAAY,KAAK,GAAoB,KAAa;AACzF,UAAM,YAAY,IAAI,6BAAW,oBAAO,MAAM;AAC9C,cAAU,YAAY,GAAG;AACzB,UAAM,KAAK,MAAM,OAAO,gBAAgB,UAAU,YAAY,GAAG,MAAM,YAAY,sBAAsB,CAAC;AAC1G,UAAM,KAAK,IAAI,gBAAgB,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC;AAC7D,UAAM,KAAK,IAAI,gBAAgB,GAAG,MAAM,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC;AAC9D,WAAO,EAAE,IAAI,GAAG;AAAA,EACpB;AAAA,EAEA,aAAa,WAAW,QAAgB,iBAAkC,KAAa;AACnF,UAAM,EAAE,IAAI,GAAG,IAAI,MAAM,KAAK,YAAY,QAAQ,iBAAiB,GAAG;AACtE,UAAM,IAAI,gBAAgB,KAAK,SAAS,EAAE,EAAE,WAAW,KAAK;AAC5D,WAAO,EAAE,IAAI,EAAE;AAAA,EACnB;AAAA,EAEA,OAAO,OAAO,QAAgB,SAAqB,IAAY;AAC3D,UAAM,SAAS,OAAO,aAAa,IAAI,WAAW,GAAG,KAAK;AAC1D,WAAO,IAAI,QAAQ,QAAQ,SAAS,QAAQ,EAAE;AAAA,EAClD;AAAA,EAEA,YAAY,QAAgB,SAAqB,QAAgB,IAAY;AACzE,SAAK,UAAU;AACf,SAAK,WAAW;AAChB,SAAK,UAAU;AACf,SAAK,MAAM;AAAA,EACf;AAAA,EAEA,WAAuB;AACnB,UAAM,IAAI,gBAAgB,KAAK,SAAS,KAAK,OAAO,EAAE,IAAI,EAAE,SAAS,KAAK,GAAG,CAAC;AAC9E,WAAO,EAAE,WAAW,KAAK;AAAA,EAC7B;AAAA,EAEA,WAAuB;AACnB,UAAM,IAAI,gBAAgB,KAAK,SAAS,KAAK,OAAO,EAAE,IAAI,EAAE,SAAS,KAAK,GAAG,CAAC;AAC9E,WAAO,EAAE,WAAW,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,+BAA+B,IAAY,GAAe,GAAe;AAC3E,UAAM,SAAS,gBAAgB,QAAQ,CAAC;AACxC,QAAI;AACA,aAAO,eAAe;AAAA,IAC1B,SAAS,OAAO;AACZ,YAAM,IAAI,iCAAc,0BAA2B,MAAc,OAAO,EAAE;AAAA,IAC9E;AACA,UAAM,OAAO,OAAO,IAAI,EAAE,SAAS,KAAK,GAAG,EAAE,OAAO,CAAC;AACrD,UAAM,IAAI,KAAK,SAAS,KAAK,OAAO;AACpC,UAAM,IAAI,KAAK,SAAS,EAAE;AAC1B,WAAO,KAAK,0BAA0B,GAAG,GAAG,EAAE,WAAW,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACxF;AAAA,EAEA,MAAM,+BAA+B,GAAe,GAAe,GAAe;AAC9E,UAAM,SAAS,gBAAgB,QAAQ,CAAC;AACxC,UAAM,SAAS,gBAAgB,QAAQ,CAAC;AACxC,QAAI;AACA,aAAO,eAAe;AAAA,IAC1B,SAAS,OAAO;AACZ,YAAM,IAAI,iCAAc,0BAA2B,MAAc,OAAO,EAAE;AAAA,IAC9E;AACA,UAAM,IAAI,OAAO,IAAI,EAAE,SAAS,KAAK,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,OAAO;AACzE,UAAM,IAAI,OAAO,SAAS,KAAK,OAAO;AACtC,WAAO,KAAK,0BAA0B,GAAG,GAAG,EAAE,WAAW,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACxF;AAAA,EAEA,MAAc,0BAA0B,GAAe,GAAe,GAAe,GAAe;AAChG,UAAM,UAAU,MAAM,KAAK,sBAAsB,GAAG,GAAG,GAAG,CAAC;AAC3D,UAAM,KAAK,QAAQ,MAAM,GAAG,EAAE;AAC9B,UAAM,KAAK,QAAQ,MAAM,IAAI,EAAE;AAE/B,UAAM,OAAO,MAAM,KAAK,QAAQ,cAAc,IAAI,IAAI,WAAW,CAAC,GAAG,mBAAM,WAAW,kBAAkB,GAAG,EAAE;AAC7G,UAAM,MAAM,KAAK,MAAM,GAAG,EAAE;AAC5B,UAAM,MAAM,KAAK,MAAM,IAAI,EAAE;AAE7B,UAAM,MAAM,MAAM,KAAK,QAAQ,SAAS,KAAK,CAAC;AAC9C,UAAM,MAAM,MAAM,KAAK,QAAQ,SAAS,KAAK,CAAC;AAE9C,WAAO,EAAE,IAAI,KAAK,IAAI;AAAA,EAC1B;AAAA,EAEQ,sBAAsB,GAAe,GAAe,GAAe,GAAe;AACtF,UAAM,WAAW,IAAI,6BAAW,oBAAO,MAAM;AAC7C,SAAK,aAAa,UAAU,KAAK,QAAQ;AACzC,SAAK,aAAa,UAAU,mBAAM,WAAW,EAAE,CAAC;AAChD,SAAK,aAAa,UAAU,mBAAM,WAAW,EAAE,CAAC;AAChD,SAAK,aAAa,UAAU,EAAE,WAAW,KAAK,CAAC;AAC/C,SAAK,aAAa,UAAU,EAAE,WAAW,KAAK,CAAC;AAC/C,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,CAAC;AAC7B,SAAK,aAAa,UAAU,gBAAgB,KAAK,KAAK,EAAE,CAAC;AACzD,WAAO,KAAK,QAAQ,cAAc,SAAS,YAAY,CAAC;AAAA,EAC5D;AAAA,EAEQ,aAAa,UAAqC,MAAkB;AACxE,aAAS,YAAY,KAAK,MAAM;AAChC,aAAS,eAAe,IAAI;AAAA,EAChC;AACJ;",
   "names": []
 }

package/dist/cjs/crypto/StandardCrypto.d.ts

@@ -15,10 +15,10 @@ import { PrivateKey, PublicKey } from "./Key.js";
  * Web Crypto doesn't support AES-CCM required by Matter so fall back to a JS implementation for that.  See relevant
  * warnings in the "aes" subdirectory.
  */
-export declare class StandardCrypto implements Crypto {
+export declare class StandardCrypto extends Crypto {
     implementationName: string;
     static provider(): StandardCrypto;
-    getRandomData(length: number): Uint8Array;
+    randomBytes(length: number): Uint8Array;
     encrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, associatedData?: Uint8Array): Uint8Array<ArrayBufferLike>;
     decrypt(key: Uint8Array, data: Uint8Array, nonce: Uint8Array, associatedData?: Uint8Array): Uint8Array<ArrayBufferLike>;
     computeSha256(buffer: Uint8Array | Uint8Array[]): Promise<Uint8Array<ArrayBuffer>>;

package/dist/cjs/crypto/StandardCrypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StandardCrypto.d.ts","sourceRoot":"","sources":["../../../src/crypto/StandardCrypto.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAE,MAAM,EAA+B,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,OAAO,EAA2B,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAU1E;;;;;;;;GAQG;AACH,qBAAa,cAAe,YAAW,MAAM;IACzC,kBAAkB,SAAQ;IAE1B,MAAM,CAAC,QAAQ;IAIf,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU;IAMzC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,UAAU;IAKzF,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,UAAU;IAKnF,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,EAAE;IAO/C,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAe1F,aAAa,CACf,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,GAAE,MAAoC;IAgB1C,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU;IAK7C,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,EAAE,WAAW,CAAC,EAAE,iBAAiB;IA+B3F,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,iBAAiB;IA2BrG,aAAa;IA2Bb,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS;CAkC7D"}
+{"version":3,"file":"StandardCrypto.d.ts","sourceRoot":"","sources":["../../../src/crypto/StandardCrypto.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAE,MAAM,EAA+B,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,OAAO,EAA2B,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAU1E;;;;;;;;GAQG;AACH,qBAAa,cAAe,SAAQ,MAAM;IACtC,kBAAkB,SAAQ;IAE1B,MAAM,CAAC,QAAQ;IAIf,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU;IAMvC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,UAAU;IAKzF,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,UAAU;IAKnF,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,EAAE;IAO/C,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAe1F,aAAa,CACf,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,GAAE,MAAoC;IAgB1C,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU;IAK7C,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,EAAE,WAAW,CAAC,EAAE,iBAAiB;IA+B3F,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,iBAAiB;IA2BrG,aAAa;IA2Bb,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS;CAkC7D"}