@metamask-previews/cryptography 0.0.0-preview-e45297452 → 0.0.0-preview-635748c9f

package/CHANGELOG.md

@@ -9,10 +9,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- Initial release ([#10282](https://github.com/MetaMask/core/pull/10282), [#10431](https://github.com/MetaMask/core/pull/10431), [#10403](https://github.com/MetaMask/core/pull/10403), [#10468](https://github.com/MetaMask/core/pull/10468))
+- Initial release ([#10282](https://github.com/MetaMask/core/pull/10282), [#10431](https://github.com/MetaMask/core/pull/10431), [#10403](https://github.com/MetaMask/core/pull/10403), [#10468](https://github.com/MetaMask/core/pull/10468), [#10503](https://github.com/MetaMask/core/pull/10503), [#10563](https://github.com/MetaMask/core/pull/10563), [#10506](https://github.com/MetaMask/core/pull/10506))
   - Add `sha256`, `sha384`, and `sha512` functions for computing SHA digests
   - Add `hmacSha256`, `hmacSha384`, and `hmacSha512` functions for computing HMAC digests
   - Add `pbkdf2Sha256`, `pbkdf2Sha384`, and `pbkdf2Sha512` functions for key derivation
   - Add `hkdfSha256`, `hkdfSha384`, and `hkdfSha512` functions for key derivation
+  - Add `getPublicKey` and `getSharedSecret` functions for X25519 key derivation exported via `@metamask/cryptography/x25519`
+  - Add `getRandomBytes` function for generating cryptographically secure random bytes
+  - Add `getPublicKey`, `sign`, and `verify` functions for Ed25519 exported via `@metamask/cryptography/ed25519`
 
 [Unreleased]: https://github.com/MetaMask/core/

package/dist/ed25519.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Derive the Ed25519 public key corresponding to the given private key.
+ *
+ * @param privateKey - The 32-byte Ed25519 private key.
+ * @returns The 32-byte Ed25519 public key.
+ */
+export declare function getPublicKey(privateKey: BufferSource): Promise<Uint8Array>;
+/**
+ * Sign the given data using the given Ed25519 private key.
+ *
+ * @param privateKey - The 32-byte Ed25519 private key seed.
+ * @param data - The data to sign.
+ * @returns The 64-byte Ed25519 signature.
+ */
+export declare function sign(privateKey: BufferSource, data: BufferSource): Promise<Uint8Array>;
+/**
+ * Verify an Ed25519 signature.
+ *
+ * @param publicKey - The 32-byte Ed25519 public key.
+ * @param signature - The 64-byte signature to verify.
+ * @param data - The signed data.
+ * @returns `true` if the signature is valid, `false` otherwise.
+ */
+export declare function verify(publicKey: BufferSource, signature: BufferSource, data: BufferSource): Promise<boolean>;
+//# sourceMappingURL=ed25519.d.ts.map

package/dist/ed25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519.d.ts","sourceRoot":"","sources":["../src/ed25519.ts"],"names":[],"mappings":"AAUA;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,YAAY,GACvB,OAAO,CAAC,UAAU,CAAC,CAiCrB;AAED;;;;;;GAMG;AACH,wBAAsB,IAAI,CACxB,UAAU,EAAE,YAAY,EACxB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,UAAU,CAAC,CAuBrB;AAED;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAC1B,SAAS,EAAE,YAAY,EACvB,SAAS,EAAE,YAAY,EACvB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,OAAO,CAAC,CA2BlB"}

package/dist/ed25519.js

@@ -0,0 +1,60 @@
+import { buildPKCS8Header, toPKCS8 } from './utils.js';
+// https://www.rfc-editor.org/rfc/rfc8032
+const ED25519_KEY_LENGTH = 32;
+const ED25519_SIGNATURE_LENGTH = 64;
+// https://www.rfc-editor.org/rfc/rfc8410#section-7
+// https://github.com/nodejs/node/blob/main/test/parallel/test-webcrypto-export-import-cfrg.js
+const ED25519_PKCS8_HEADER = buildPKCS8Header([0x2b, 0x65, 0x70]);
+/**
+ * Derive the Ed25519 public key corresponding to the given private key.
+ *
+ * @param privateKey - The 32-byte Ed25519 private key.
+ * @returns The 32-byte Ed25519 public key.
+ */
+export async function getPublicKey(privateKey) {
+    if (privateKey.byteLength !== ED25519_KEY_LENGTH) {
+        throw new Error(`Invalid private key length: Private key must be exactly ${ED25519_KEY_LENGTH} bytes for Ed25519.`);
+    }
+    // The WebCrypto API expects private keys to be in PKCS8 format.
+    const subtlePrivateKey = await globalThis.crypto.subtle.importKey('pkcs8', toPKCS8(ED25519_PKCS8_HEADER, privateKey), { name: 'Ed25519' }, true, ['sign']);
+    const jwk = await globalThis.crypto.subtle.exportKey('jwk', subtlePrivateKey);
+    // Intentionally discarding private key from JWK (`d`).
+    const subtlePublicKey = await globalThis.crypto.subtle.importKey('jwk', { kty: jwk.kty, crv: jwk.crv, x: jwk.x }, { name: 'Ed25519' }, true, ['verify']);
+    const publicKey = await globalThis.crypto.subtle.exportKey('raw', subtlePublicKey);
+    return new Uint8Array(publicKey);
+}
+/**
+ * Sign the given data using the given Ed25519 private key.
+ *
+ * @param privateKey - The 32-byte Ed25519 private key seed.
+ * @param data - The data to sign.
+ * @returns The 64-byte Ed25519 signature.
+ */
+export async function sign(privateKey, data) {
+    if (privateKey.byteLength !== ED25519_KEY_LENGTH) {
+        throw new Error(`Invalid private key length: Private key must be exactly ${ED25519_KEY_LENGTH} bytes for Ed25519.`);
+    }
+    // The WebCrypto API expects private keys to be in PKCS8 format.
+    const subtleKey = await globalThis.crypto.subtle.importKey('pkcs8', toPKCS8(ED25519_PKCS8_HEADER, privateKey), { name: 'Ed25519' }, false, ['sign']);
+    const signature = await globalThis.crypto.subtle.sign({ name: 'Ed25519' }, subtleKey, data);
+    return new Uint8Array(signature);
+}
+/**
+ * Verify an Ed25519 signature.
+ *
+ * @param publicKey - The 32-byte Ed25519 public key.
+ * @param signature - The 64-byte signature to verify.
+ * @param data - The signed data.
+ * @returns `true` if the signature is valid, `false` otherwise.
+ */
+export async function verify(publicKey, signature, data) {
+    if (publicKey.byteLength !== ED25519_KEY_LENGTH) {
+        throw new Error(`Invalid public key length: Public key must be exactly ${ED25519_KEY_LENGTH} bytes for Ed25519.`);
+    }
+    if (signature.byteLength !== ED25519_SIGNATURE_LENGTH) {
+        throw new Error(`Invalid signature length: Signature must be exactly ${ED25519_SIGNATURE_LENGTH} bytes for Ed25519.`);
+    }
+    const subtleKey = await globalThis.crypto.subtle.importKey('raw', publicKey, { name: 'Ed25519' }, false, ['verify']);
+    return globalThis.crypto.subtle.verify({ name: 'Ed25519' }, subtleKey, signature, data);
+}
+//# sourceMappingURL=ed25519.js.map

package/dist/ed25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519.js","sourceRoot":"","sources":["../src/ed25519.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEvD,yCAAyC;AACzC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,mDAAmD;AACnD,8FAA8F;AAC9F,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAElE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAwB;IAExB,IAAI,UAAU,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,2DAA2D,kBAAkB,qBAAqB,CACnG,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/D,OAAO,EACP,OAAO,CAAC,oBAAoB,EAAE,UAAU,CAAC,EACzC,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,IAAI,EACJ,CAAC,MAAM,CAAC,CACT,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAE9E,uDAAuD;IACvD,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC9D,KAAK,EACL,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EACxC,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACxD,KAAK,EACL,eAAe,CAChB,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,UAAwB,EACxB,IAAkB;IAElB,IAAI,UAAU,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,2DAA2D,kBAAkB,qBAAqB,CACnG,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACxD,OAAO,EACP,OAAO,CAAC,oBAAoB,EAAE,UAAU,CAAC,EACzC,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CACnD,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,SAAS,EACT,IAAI,CACL,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,SAAuB,EACvB,SAAuB,EACvB,IAAkB;IAElB,IAAI,SAAS,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,yDAAyD,kBAAkB,qBAAqB,CACjG,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,uDAAuD,wBAAwB,qBAAqB,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACxD,KAAK,EACL,SAAS,EACT,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,SAAS,EACT,SAAS,EACT,IAAI,CACL,CAAC;AACJ,CAAC","sourcesContent":["import { buildPKCS8Header, toPKCS8 } from './utils.js';\n\n// https://www.rfc-editor.org/rfc/rfc8032\nconst ED25519_KEY_LENGTH = 32;\nconst ED25519_SIGNATURE_LENGTH = 64;\n\n// https://www.rfc-editor.org/rfc/rfc8410#section-7\n// https://github.com/nodejs/node/blob/main/test/parallel/test-webcrypto-export-import-cfrg.js\nconst ED25519_PKCS8_HEADER = buildPKCS8Header([0x2b, 0x65, 0x70]);\n\n/**\n * Derive the Ed25519 public key corresponding to the given private key.\n *\n * @param privateKey - The 32-byte Ed25519 private key.\n * @returns The 32-byte Ed25519 public key.\n */\nexport async function getPublicKey(\n  privateKey: BufferSource,\n): Promise<Uint8Array> {\n  if (privateKey.byteLength !== ED25519_KEY_LENGTH) {\n    throw new Error(\n      `Invalid private key length: Private key must be exactly ${ED25519_KEY_LENGTH} bytes for Ed25519.`,\n    );\n  }\n\n  // The WebCrypto API expects private keys to be in PKCS8 format.\n  const subtlePrivateKey = await globalThis.crypto.subtle.importKey(\n    'pkcs8',\n    toPKCS8(ED25519_PKCS8_HEADER, privateKey),\n    { name: 'Ed25519' },\n    true,\n    ['sign'],\n  );\n\n  const jwk = await globalThis.crypto.subtle.exportKey('jwk', subtlePrivateKey);\n\n  // Intentionally discarding private key from JWK (`d`).\n  const subtlePublicKey = await globalThis.crypto.subtle.importKey(\n    'jwk',\n    { kty: jwk.kty, crv: jwk.crv, x: jwk.x },\n    { name: 'Ed25519' },\n    true,\n    ['verify'],\n  );\n\n  const publicKey = await globalThis.crypto.subtle.exportKey(\n    'raw',\n    subtlePublicKey,\n  );\n\n  return new Uint8Array(publicKey);\n}\n\n/**\n * Sign the given data using the given Ed25519 private key.\n *\n * @param privateKey - The 32-byte Ed25519 private key seed.\n * @param data - The data to sign.\n * @returns The 64-byte Ed25519 signature.\n */\nexport async function sign(\n  privateKey: BufferSource,\n  data: BufferSource,\n): Promise<Uint8Array> {\n  if (privateKey.byteLength !== ED25519_KEY_LENGTH) {\n    throw new Error(\n      `Invalid private key length: Private key must be exactly ${ED25519_KEY_LENGTH} bytes for Ed25519.`,\n    );\n  }\n\n  // The WebCrypto API expects private keys to be in PKCS8 format.\n  const subtleKey = await globalThis.crypto.subtle.importKey(\n    'pkcs8',\n    toPKCS8(ED25519_PKCS8_HEADER, privateKey),\n    { name: 'Ed25519' },\n    false,\n    ['sign'],\n  );\n\n  const signature = await globalThis.crypto.subtle.sign(\n    { name: 'Ed25519' },\n    subtleKey,\n    data,\n  );\n\n  return new Uint8Array(signature);\n}\n\n/**\n * Verify an Ed25519 signature.\n *\n * @param publicKey - The 32-byte Ed25519 public key.\n * @param signature - The 64-byte signature to verify.\n * @param data - The signed data.\n * @returns `true` if the signature is valid, `false` otherwise.\n */\nexport async function verify(\n  publicKey: BufferSource,\n  signature: BufferSource,\n  data: BufferSource,\n): Promise<boolean> {\n  if (publicKey.byteLength !== ED25519_KEY_LENGTH) {\n    throw new Error(\n      `Invalid public key length: Public key must be exactly ${ED25519_KEY_LENGTH} bytes for Ed25519.`,\n    );\n  }\n\n  if (signature.byteLength !== ED25519_SIGNATURE_LENGTH) {\n    throw new Error(\n      `Invalid signature length: Signature must be exactly ${ED25519_SIGNATURE_LENGTH} bytes for Ed25519.`,\n    );\n  }\n\n  const subtleKey = await globalThis.crypto.subtle.importKey(\n    'raw',\n    publicKey,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n\n  return globalThis.crypto.subtle.verify(\n    { name: 'Ed25519' },\n    subtleKey,\n    signature,\n    data,\n  );\n}\n"]}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export * from './hkdf.js';
 export * from './hmac.js';
 export * from './pbkdf2.js';
+export * from './random.js';
 export * from './sha.js';
 export type * from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,mBAAmB,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,mBAAmB,YAAY,CAAC"}

package/dist/index.js

@@ -1,5 +1,6 @@
 export * from './hkdf.js';
 export * from './hmac.js';
 export * from './pbkdf2.js';
+export * from './random.js';
 export * from './sha.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC","sourcesContent":["export * from './hkdf.js';\nexport * from './hmac.js';\nexport * from './pbkdf2.js';\nexport * from './sha.js';\nexport type * from './types.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC","sourcesContent":["export * from './hkdf.js';\nexport * from './hmac.js';\nexport * from './pbkdf2.js';\nexport * from './random.js';\nexport * from './sha.js';\nexport type * from './types.js';\n"]}

package/dist/random.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generate random bytes using the platform's cryptographically secure pseudo-random number generator (CSPRNG).
+ *
+ * @param length - The number of random bytes to generate.
+ * @returns An `Uint8Array` of the provided length with random bytes.
+ * @throws If `length` is not greater than 0.
+ */
+export declare function getRandomBytes(length: number): Uint8Array;
+//# sourceMappingURL=random.d.ts.map

package/dist/random.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"random.d.ts","sourceRoot":"","sources":["../src/random.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAKzD"}

package/dist/random.js

@@ -0,0 +1,14 @@
+/**
+ * Generate random bytes using the platform's cryptographically secure pseudo-random number generator (CSPRNG).
+ *
+ * @param length - The number of random bytes to generate.
+ * @returns An `Uint8Array` of the provided length with random bytes.
+ * @throws If `length` is not greater than 0.
+ */
+export function getRandomBytes(length) {
+    if (length <= 0) {
+        throw new Error('Invalid length: Length must be greater than 0.');
+    }
+    return globalThis.crypto.getRandomValues(new Uint8Array(length));
+}
+//# sourceMappingURL=random.js.map

package/dist/random.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"random.js","sourceRoot":"","sources":["../src/random.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC","sourcesContent":["/**\n * Generate random bytes using the platform's cryptographically secure pseudo-random number generator (CSPRNG).\n *\n * @param length - The number of random bytes to generate.\n * @returns An `Uint8Array` of the provided length with random bytes.\n * @throws If `length` is not greater than 0.\n */\nexport function getRandomBytes(length: number): Uint8Array {\n  if (length <= 0) {\n    throw new Error('Invalid length: Length must be greater than 0.');\n  }\n  return globalThis.crypto.getRandomValues(new Uint8Array(length));\n}\n"]}

package/dist/utils.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Convert a `BufferSource` to a `Uint8Array` view over the same bytes.
+ *
+ * @param source - The `ArrayBuffer`, typed array, or `DataView` to convert.
+ * @returns A `Uint8Array` sharing memory with the source.
+ */
+export declare function toUint8Array(source: BufferSource): Uint8Array<ArrayBuffer>;
+/**
+ * Build the 16-byte PKCS8 header for a private key.
+ * https://www.rfc-editor.org/rfc/rfc8410#section-7
+ *
+ * @param oid - The 3-byte curve OID.
+ * @returns The PKCS8 header.
+ */
+export declare function buildPKCS8Header(oid: [number, number, number]): Uint8Array<ArrayBuffer>;
+/**
+ * Wrap a raw private key in a PKCS8 envelope.
+ *
+ * @param header - The algorithm-specific PKCS8 header.
+ * @param key - The raw key bytes to wrap.
+ * @returns The complete PKCS8 envelope.
+ */
+export declare function toPKCS8(header: Uint8Array, key: BufferSource): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,CAK1E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAC5B,UAAU,CAAC,WAAW,CAAC,CAiBzB;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CACrB,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,YAAY,GAChB,UAAU,CAAC,WAAW,CAAC,CAKzB"}

package/dist/utils.js

@@ -0,0 +1,51 @@
+/**
+ * Convert a `BufferSource` to a `Uint8Array` view over the same bytes.
+ *
+ * @param source - The `ArrayBuffer`, typed array, or `DataView` to convert.
+ * @returns A `Uint8Array` sharing memory with the source.
+ */
+export function toUint8Array(source) {
+    if (source instanceof ArrayBuffer) {
+        return new Uint8Array(source);
+    }
+    return new Uint8Array(source.buffer, source.byteOffset, source.byteLength);
+}
+/**
+ * Build the 16-byte PKCS8 header for a private key.
+ * https://www.rfc-editor.org/rfc/rfc8410#section-7
+ *
+ * @param oid - The 3-byte curve OID.
+ * @returns The PKCS8 header.
+ */
+export function buildPKCS8Header(oid) {
+    return new Uint8Array([
+        0x30,
+        0x2e,
+        0x02,
+        0x01,
+        0x00,
+        0x30,
+        0x05,
+        0x06,
+        0x03,
+        ...oid,
+        0x04,
+        0x22,
+        0x04,
+        0x20,
+    ]);
+}
+/**
+ * Wrap a raw private key in a PKCS8 envelope.
+ *
+ * @param header - The algorithm-specific PKCS8 header.
+ * @param key - The raw key bytes to wrap.
+ * @returns The complete PKCS8 envelope.
+ */
+export function toPKCS8(header, key) {
+    const pkcs8 = new Uint8Array(header.length + key.byteLength);
+    pkcs8.set(header);
+    pkcs8.set(toUint8Array(key), header.length);
+    return pkcs8;
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,IAAI,MAAM,YAAY,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAA6B;IAE7B,OAAO,IAAI,UAAU,CAAC;QACpB,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,GAAG,GAAG;QACN,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CACrB,MAAkB,EAClB,GAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7D,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["/**\n * Convert a `BufferSource` to a `Uint8Array` view over the same bytes.\n *\n * @param source - The `ArrayBuffer`, typed array, or `DataView` to convert.\n * @returns A `Uint8Array` sharing memory with the source.\n */\nexport function toUint8Array(source: BufferSource): Uint8Array<ArrayBuffer> {\n  if (source instanceof ArrayBuffer) {\n    return new Uint8Array(source);\n  }\n  return new Uint8Array(source.buffer, source.byteOffset, source.byteLength);\n}\n\n/**\n * Build the 16-byte PKCS8 header for a private key.\n * https://www.rfc-editor.org/rfc/rfc8410#section-7\n *\n * @param oid - The 3-byte curve OID.\n * @returns The PKCS8 header.\n */\nexport function buildPKCS8Header(\n  oid: [number, number, number],\n): Uint8Array<ArrayBuffer> {\n  return new Uint8Array([\n    0x30,\n    0x2e,\n    0x02,\n    0x01,\n    0x00,\n    0x30,\n    0x05,\n    0x06,\n    0x03,\n    ...oid,\n    0x04,\n    0x22,\n    0x04,\n    0x20,\n  ]);\n}\n\n/**\n * Wrap a raw private key in a PKCS8 envelope.\n *\n * @param header - The algorithm-specific PKCS8 header.\n * @param key - The raw key bytes to wrap.\n * @returns The complete PKCS8 envelope.\n */\nexport function toPKCS8(\n  header: Uint8Array,\n  key: BufferSource,\n): Uint8Array<ArrayBuffer> {\n  const pkcs8 = new Uint8Array(header.length + key.byteLength);\n  pkcs8.set(header);\n  pkcs8.set(toUint8Array(key), header.length);\n  return pkcs8;\n}\n"]}

package/dist/x25519.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Derive the X25519 public key corresponding to a private key.
+ *
+ * @param privateKey - The 32-byte X25519 private key.
+ * @returns The 32-byte X25519 public key.
+ */
+export declare function getPublicKey(privateKey: BufferSource): Promise<Uint8Array>;
+/**
+ * Compute the X25519 shared secret given a private key and a peer's public key.
+ *
+ * @param privateKey - The 32-byte X25519 private key.
+ * @param publicKey - The 32-byte X25519 public key of the peer.
+ * @returns The 32-byte shared secret.
+ */
+export declare function getSharedSecret(privateKey: BufferSource, publicKey: BufferSource): Promise<Uint8Array>;
+//# sourceMappingURL=x25519.d.ts.map

package/dist/x25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519.d.ts","sourceRoot":"","sources":["../src/x25519.ts"],"names":[],"mappings":"AA8DA;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,YAAY,GACvB,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,YAAY,EACxB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,UAAU,CAAC,CAGrB"}

package/dist/x25519.js

@@ -0,0 +1,51 @@
+import { buildPKCS8Header, toPKCS8 } from './utils.js';
+const X25519_KEY_LENGTH = 32;
+// https://www.rfc-editor.org/rfc/rfc7748#section-4.1
+const X25519_BASE_POINT = new Uint8Array(32);
+X25519_BASE_POINT[0] = 9;
+// https://www.rfc-editor.org/rfc/rfc8410#section-7
+// https://github.com/nodejs/node/blob/main/test/parallel/test-webcrypto-export-import-cfrg.js
+const X25519_PKCS8_HEADER = buildPKCS8Header([0x2b, 0x65, 0x6e]);
+/**
+ * Perform scalar multiplication of a point by a private key,
+ * specified as the X25519 function in RFC 7748, Section 5.
+ *
+ * @param privateKey - The 32-byte X25519 private key (scalar).
+ * @param publicKey - The 32-byte X25519 public key (u-coordinate).
+ * @returns The 32-byte result of the scalar multiplication.
+ */
+async function scalarMultiply(privateKey, publicKey) {
+    if (privateKey.byteLength !== X25519_KEY_LENGTH) {
+        throw new Error(`Invalid private key length: Private key must be exactly ${X25519_KEY_LENGTH} bytes for X25519.`);
+    }
+    if (publicKey.byteLength !== X25519_KEY_LENGTH) {
+        throw new Error(`Invalid public key length: Public key must be exactly ${X25519_KEY_LENGTH} bytes for X25519.`);
+    }
+    // The WebCrypto API expects private keys to be in PKCS8 format.
+    const subtlePrivateKey = await globalThis.crypto.subtle.importKey('pkcs8', toPKCS8(X25519_PKCS8_HEADER, privateKey), { name: 'X25519' }, false, ['deriveBits']);
+    const subtlePublicKey = await globalThis.crypto.subtle.importKey('raw', publicKey, { name: 'X25519' }, false, []);
+    const result = await globalThis.crypto.subtle.deriveBits({ name: 'X25519', public: subtlePublicKey }, subtlePrivateKey, X25519_KEY_LENGTH * 8);
+    return new Uint8Array(result);
+}
+/**
+ * Derive the X25519 public key corresponding to a private key.
+ *
+ * @param privateKey - The 32-byte X25519 private key.
+ * @returns The 32-byte X25519 public key.
+ */
+export async function getPublicKey(privateKey) {
+    // X25519 public keys are derived as X25519(k, 9)
+    return scalarMultiply(privateKey, X25519_BASE_POINT);
+}
+/**
+ * Compute the X25519 shared secret given a private key and a peer's public key.
+ *
+ * @param privateKey - The 32-byte X25519 private key.
+ * @param publicKey - The 32-byte X25519 public key of the peer.
+ * @returns The 32-byte shared secret.
+ */
+export async function getSharedSecret(privateKey, publicKey) {
+    // X25519 shared secrets are derived as X25519(a, K_b)
+    return scalarMultiply(privateKey, publicKey);
+}
+//# sourceMappingURL=x25519.js.map

package/dist/x25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519.js","sourceRoot":"","sources":["../src/x25519.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,qDAAqD;AACrD,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAC7C,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAEzB,mDAAmD;AACnD,8FAA8F;AAC9F,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEjE;;;;;;;GAOG;AACH,KAAK,UAAU,cAAc,CAC3B,UAAwB,EACxB,SAAuB;IAEvB,IAAI,UAAU,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,2DAA2D,iBAAiB,oBAAoB,CACjG,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,yDAAyD,iBAAiB,oBAAoB,CAC/F,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/D,OAAO,EACP,OAAO,CAAC,mBAAmB,EAAE,UAAU,CAAC,EACxC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC9D,KAAK,EACL,SAAS,EACT,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,EAAE,CACH,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CACtD,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,EAC3C,gBAAgB,EAChB,iBAAiB,GAAG,CAAC,CACtB,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAwB;IAExB,iDAAiD;IACjD,OAAO,cAAc,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAwB,EACxB,SAAuB;IAEvB,sDAAsD;IACtD,OAAO,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["import { buildPKCS8Header, toPKCS8 } from './utils.js';\n\nconst X25519_KEY_LENGTH = 32;\n\n// https://www.rfc-editor.org/rfc/rfc7748#section-4.1\nconst X25519_BASE_POINT = new Uint8Array(32);\nX25519_BASE_POINT[0] = 9;\n\n// https://www.rfc-editor.org/rfc/rfc8410#section-7\n// https://github.com/nodejs/node/blob/main/test/parallel/test-webcrypto-export-import-cfrg.js\nconst X25519_PKCS8_HEADER = buildPKCS8Header([0x2b, 0x65, 0x6e]);\n\n/**\n * Perform scalar multiplication of a point by a private key,\n * specified as the X25519 function in RFC 7748, Section 5.\n *\n * @param privateKey - The 32-byte X25519 private key (scalar).\n * @param publicKey - The 32-byte X25519 public key (u-coordinate).\n * @returns The 32-byte result of the scalar multiplication.\n */\nasync function scalarMultiply(\n  privateKey: BufferSource,\n  publicKey: BufferSource,\n): Promise<Uint8Array> {\n  if (privateKey.byteLength !== X25519_KEY_LENGTH) {\n    throw new Error(\n      `Invalid private key length: Private key must be exactly ${X25519_KEY_LENGTH} bytes for X25519.`,\n    );\n  }\n\n  if (publicKey.byteLength !== X25519_KEY_LENGTH) {\n    throw new Error(\n      `Invalid public key length: Public key must be exactly ${X25519_KEY_LENGTH} bytes for X25519.`,\n    );\n  }\n\n  // The WebCrypto API expects private keys to be in PKCS8 format.\n  const subtlePrivateKey = await globalThis.crypto.subtle.importKey(\n    'pkcs8',\n    toPKCS8(X25519_PKCS8_HEADER, privateKey),\n    { name: 'X25519' },\n    false,\n    ['deriveBits'],\n  );\n\n  const subtlePublicKey = await globalThis.crypto.subtle.importKey(\n    'raw',\n    publicKey,\n    { name: 'X25519' },\n    false,\n    [],\n  );\n\n  const result = await globalThis.crypto.subtle.deriveBits(\n    { name: 'X25519', public: subtlePublicKey },\n    subtlePrivateKey,\n    X25519_KEY_LENGTH * 8,\n  );\n\n  return new Uint8Array(result);\n}\n\n/**\n * Derive the X25519 public key corresponding to a private key.\n *\n * @param privateKey - The 32-byte X25519 private key.\n * @returns The 32-byte X25519 public key.\n */\nexport async function getPublicKey(\n  privateKey: BufferSource,\n): Promise<Uint8Array> {\n  // X25519 public keys are derived as X25519(k, 9)\n  return scalarMultiply(privateKey, X25519_BASE_POINT);\n}\n\n/**\n * Compute the X25519 shared secret given a private key and a peer's public key.\n *\n * @param privateKey - The 32-byte X25519 private key.\n * @param publicKey - The 32-byte X25519 public key of the peer.\n * @returns The 32-byte shared secret.\n */\nexport async function getSharedSecret(\n  privateKey: BufferSource,\n  publicKey: BufferSource,\n): Promise<Uint8Array> {\n  // X25519 shared secrets are derived as X25519(a, K_b)\n  return scalarMultiply(privateKey, publicKey);\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask-previews/cryptography",
-  "version": "0.0.0-preview-e45297452",
+  "version": "0.0.0-preview-635748c9f",
   "description": "Provides optimized versions of commonly used cryptography functions for MetaMask clients",
   "keywords": [
     "Ethereum",
@@ -25,6 +25,14 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./ed25519": {
+      "types": "./dist/ed25519.d.ts",
+      "default": "./dist/ed25519.js"
+    },
+    "./x25519": {
+      "types": "./dist/x25519.d.ts",
+      "default": "./dist/x25519.js"
+    },
     "./package.json": "./package.json"
   },
   "publishConfig": {