@nmshd/crypto 2.2.0-alpha.7 → 3.0.0

package/dist/crypto-layer/CryptoLayerUtils.js

@@ -1,108 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CryptoLayerUtils = void 0;
-const CryptoError_1 = require("../CryptoError");
-const CryptoErrorCode_1 = require("../CryptoErrorCode");
-class CryptoLayerUtils {
-    static asymSpecFromCryptoExchangeOrSignatureAlgorithm(algorithm) {
-        switch (algorithm) {
-            case 1 /* CryptoExchangeAlgorithm.ECDH_P256 */:
-                return "P256";
-            case 2 /* CryptoExchangeAlgorithm.ECDH_P521 */:
-                return "P521";
-            case 3 /* CryptoExchangeAlgorithm.ECDH_X25519 */:
-                return "Curve25519";
-            case 1 /* CryptoSignatureAlgorithm.ECDSA_P256 */:
-                return "P256";
-            case 2 /* CryptoSignatureAlgorithm.ECDSA_P521 */:
-                return "P521";
-            case 3 /* CryptoSignatureAlgorithm.ECDSA_ED25519 */:
-                return "Curve25519";
-            case 4 /* CryptoSignatureAlgorithm.RSA_2048 */:
-                return "RSA2048";
-        }
-    }
-    static cryptoHashAlgorithmFromCryptoHash(cryptoHash) {
-        // eslint-disable-next-line @typescript-eslint/switch-exhaustiveness-check
-        switch (cryptoHash) {
-            case "Sha2_256":
-                return 1 /* CryptoHashAlgorithm.SHA256 */;
-            case "Sha2_512":
-                return 2 /* CryptoHashAlgorithm.SHA512 */;
-            case "Blake2b":
-                return 3 /* CryptoHashAlgorithm.BLAKE2B */;
-            default:
-                throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalUnsupportedAlgorithm, `Hash function ${cryptoHash} is not supported by ts crypto.`);
-        }
-    }
-    static cryptoHashFromCryptoHashAlgorithm(algorithm) {
-        switch (algorithm) {
-            case 1 /* CryptoHashAlgorithm.SHA256 */:
-                return "Sha2_256";
-            case 2 /* CryptoHashAlgorithm.SHA512 */:
-                return "Sha2_512";
-            case 3 /* CryptoHashAlgorithm.BLAKE2B */:
-                return "Blake2b";
-        }
-    }
-    static cipherFromCryptoEncryptionAlgorithm(alg) {
-        switch (alg) {
-            case 1 /* CryptoEncryptionAlgorithm.AES128_GCM */:
-                return "AesGcm128";
-            case 2 /* CryptoEncryptionAlgorithm.AES256_GCM */:
-                return "AesGcm256";
-            case 3 /* CryptoEncryptionAlgorithm.XCHACHA20_POLY1305 */:
-                return "XChaCha20Poly1305";
-            case 4 /* CryptoEncryptionAlgorithm.AES128_CBC */:
-                return "AesCbc128";
-            case 5 /* CryptoEncryptionAlgorithm.AES256_CBC */:
-                return "AesCbc256";
-            case 6 /* CryptoEncryptionAlgorithm.CHACHA20_POLY1305 */:
-                return "ChaCha20Poly1305";
-        }
-    }
-    static cryptoEncryptionAlgorithmFromCipher(cipher) {
-        switch (cipher) {
-            case "AesGcm128":
-                return 1 /* CryptoEncryptionAlgorithm.AES128_GCM */;
-            case "AesGcm256":
-                return 2 /* CryptoEncryptionAlgorithm.AES256_GCM */;
-            case "AesCbc128":
-                return 4 /* CryptoEncryptionAlgorithm.AES128_CBC */;
-            case "AesCbc256":
-                return 5 /* CryptoEncryptionAlgorithm.AES256_CBC */;
-            case "XChaCha20Poly1305":
-                return 3 /* CryptoEncryptionAlgorithm.XCHACHA20_POLY1305 */;
-            case "ChaCha20Poly1305":
-                return 6 /* CryptoEncryptionAlgorithm.CHACHA20_POLY1305 */;
-        }
-    }
-    static argon2OptionsFromIterationsMemLimitAndParallelism(iterations, memlimit, parallelism) {
-        const kibiByteBase = 2 ^ 10;
-        if (memlimit % kibiByteBase !== 0) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.WrongParameters, "rust-crypto uses kibibytes for Argon2. The `memlimit` parameter (in bytes) is not a multiple of `2^10` and thus not convertible without loss.").setContext(CryptoLayerUtils.argon2OptionsFromIterationsMemLimitAndParallelism);
-        }
-        const memory = memlimit / kibiByteBase;
-        const options = {
-            memory: memory,
-            iterations: iterations,
-            parallelism: parallelism
-        };
-        return options;
-    }
-    static kdfFromCryptoDerivation(derivationAlgorithm, iterations, memlimit, parallelism) {
-        const options = CryptoLayerUtils.argon2OptionsFromIterationsMemLimitAndParallelism(iterations, memlimit, parallelism);
-        switch (derivationAlgorithm) {
-            case "argon2id" /* CryptoDerivationAlgorithm.ARGON2ID */:
-                // eslint-disable-next-line @typescript-eslint/naming-convention
-                return { Argon2id: options };
-            case "argon2i" /* CryptoDerivationAlgorithm.ARGON2I */:
-                // eslint-disable-next-line @typescript-eslint/naming-convention
-                return { Argon2i: options };
-            default:
-                throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.WrongParameters, `Crypto derivation algorithm '${derivationAlgorithm}' not supported.`).setContext(CryptoLayerUtils.kdfFromCryptoDerivation);
-        }
-    }
-}
-exports.CryptoLayerUtils = CryptoLayerUtils;
-//# sourceMappingURL=CryptoLayerUtils.js.map

package/dist/crypto-layer/CryptoLayerUtils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CryptoLayerUtils.js","sourceRoot":"","sources":["../../src/crypto-layer/CryptoLayerUtils.ts"],"names":[],"mappings":";;;AAEA,gDAA6C;AAC7C,wDAAqD;AAKrD,MAAa,gBAAgB;IAClB,MAAM,CAAC,8CAA8C,CACxD,SAA6D;QAE7D,QAAQ,SAAS,EAAE,CAAC;YAChB;gBACI,OAAO,MAAM,CAAC;YAClB;gBACI,OAAO,MAAM,CAAC;YAClB;gBACI,OAAO,YAAY,CAAC;YACxB;gBACI,OAAO,MAAM,CAAC;YAClB;gBACI,OAAO,MAAM,CAAC;YAClB;gBACI,OAAO,YAAY,CAAC;YACxB;gBACI,OAAO,SAAS,CAAC;QACzB,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,iCAAiC,CAAC,UAAsB;QAClE,0EAA0E;QAC1E,QAAQ,UAAU,EAAE,CAAC;YACjB,KAAK,UAAU;gBACX,0CAAkC;YACtC,KAAK,UAAU;gBACX,0CAAkC;YACtC,KAAK,SAAS;gBACV,2CAAmC;YACvC;gBACI,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,uBAAuB,EACvC,iBAAiB,UAAU,iCAAiC,CAC/D,CAAC;QACV,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,iCAAiC,CAAC,SAA8B;QAC1E,QAAQ,SAAS,EAAE,CAAC;YAChB;gBACI,OAAO,UAAU,CAAC;YACtB;gBACI,OAAO,UAAU,CAAC;YACtB;gBACI,OAAO,SAAS,CAAC;QACzB,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,mCAAmC,CAAC,GAA8B;QAC5E,QAAQ,GAAG,EAAE,CAAC;YACV;gBACI,OAAO,WAAW,CAAC;YACvB;gBACI,OAAO,WAAW,CAAC;YACvB;gBACI,OAAO,mBAAmB,CAAC;YAC/B;gBACI,OAAO,WAAW,CAAC;YACvB;gBACI,OAAO,WAAW,CAAC;YACvB;gBACI,OAAO,kBAAkB,CAAC;QAClC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,mCAAmC,CAAC,MAAc;QAC5D,QAAQ,MAAM,EAAE,CAAC;YACb,KAAK,WAAW;gBACZ,oDAA4C;YAChD,KAAK,WAAW;gBACZ,oDAA4C;YAChD,KAAK,WAAW;gBACZ,oDAA4C;YAChD,KAAK,WAAW;gBACZ,oDAA4C;YAChD,KAAK,mBAAmB;gBACpB,4DAAoD;YACxD,KAAK,kBAAkB;gBACnB,2DAAmD;QAC3D,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,iDAAiD,CAC3D,UAAkB,EAClB,QAAgB,EAChB,WAAmB;QAEnB,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,QAAQ,GAAG,YAAY,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,eAAe,EAC/B,+IAA+I,CAClJ,CAAC,UAAU,CAAC,gBAAgB,CAAC,iDAAiD,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,GAAG,YAAY,CAAC;QAEvC,MAAM,OAAO,GAAkB;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,UAAU;YACtB,WAAW,EAAE,WAAW;SAC3B,CAAC;QAEF,OAAO,OAAO,CAAC;IACnB,CAAC;IAEM,MAAM,CAAC,uBAAuB,CACjC,mBAA8C,EAC9C,UAAkB,EAClB,QAAgB,EAChB,WAAmB;QAEnB,MAAM,OAAO,GAAkB,gBAAgB,CAAC,iDAAiD,CAC7F,UAAU,EACV,QAAQ,EACR,WAAW,CACd,CAAC;QAEF,QAAQ,mBAAmB,EAAE,CAAC;YAC1B;gBACI,gEAAgE;gBAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACjC;gBACI,gEAAgE;gBAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAChC;gBACI,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,eAAe,EAC/B,gCAAgC,mBAAmB,kBAAkB,CACxE,CAAC,UAAU,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAC/D,CAAC;IACL,CAAC;CACJ;AArID,4CAqIC"}

package/dist/crypto-layer/encryption/BaseDerivedKeyHandle.d.ts

@@ -1,15 +0,0 @@
-import { KeyHandle, Provider } from "@nmshd/rs-crypto-types";
-import { CryptoEncryptionAlgorithm } from "../../encryption/CryptoEncryption";
-import { CryptoHashAlgorithm } from "../../hash/CryptoHash";
-/**
- * Variant of {@link BaseKeyHandle} without serialization and deserialization.
- */
-export declare abstract class BaseDerivedKeyHandle {
-    id: string;
-    providerName: string;
-    provider: Provider;
-    keyHandle: KeyHandle;
-    encryptionAndHashAlgorithm(): Promise<[CryptoEncryptionAlgorithm, CryptoHashAlgorithm]>;
-    encryptionAlgorithm(): Promise<CryptoEncryptionAlgorithm>;
-    hashAlgorithm(): Promise<CryptoHashAlgorithm>;
-}

package/dist/crypto-layer/encryption/BaseDerivedKeyHandle.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BaseDerivedKeyHandle = void 0;
-const CryptoLayerUtils_1 = require("../CryptoLayerUtils");
-/**
- * Variant of {@link BaseKeyHandle} without serialization and deserialization.
- */
-class BaseDerivedKeyHandle {
-    async encryptionAndHashAlgorithm() {
-        const spec = await this.keyHandle.spec();
-        return [
-            CryptoLayerUtils_1.CryptoLayerUtils.cryptoEncryptionAlgorithmFromCipher(spec.cipher),
-            CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashAlgorithmFromCryptoHash(spec.signing_hash)
-        ];
-    }
-    async encryptionAlgorithm() {
-        const spec = await this.keyHandle.spec();
-        return CryptoLayerUtils_1.CryptoLayerUtils.cryptoEncryptionAlgorithmFromCipher(spec.cipher);
-    }
-    async hashAlgorithm() {
-        const spec = await this.keyHandle.spec();
-        return CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashAlgorithmFromCryptoHash(spec.signing_hash);
-    }
-}
-exports.BaseDerivedKeyHandle = BaseDerivedKeyHandle;
-//# sourceMappingURL=BaseDerivedKeyHandle.js.map

package/dist/crypto-layer/encryption/BaseDerivedKeyHandle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseDerivedKeyHandle.js","sourceRoot":"","sources":["../../../src/crypto-layer/encryption/BaseDerivedKeyHandle.ts"],"names":[],"mappings":";;;AAGA,0DAAuD;AAEvD;;GAEG;AACH,MAAsB,oBAAoB;IAO/B,KAAK,CAAC,0BAA0B;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO;YACH,mCAAgB,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC;YACjE,mCAAgB,CAAC,iCAAiC,CAAC,IAAI,CAAC,YAAY,CAAC;SACxE,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,mBAAmB;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,mCAAgB,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,aAAa;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,mCAAgB,CAAC,iCAAiC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjF,CAAC;CACJ;AAxBD,oDAwBC"}

package/dist/crypto-layer/encryption/BaseKeyHandle.d.ts

@@ -1,29 +0,0 @@
-import { ISerializable, ISerialized, SerializableAsync } from "@js-soft/ts-serval";
-import { KeyHandle, Provider } from "@nmshd/rs-crypto-types";
-import { CryptoSerializableAsync } from "../../CryptoSerializable";
-import { CryptoEncryptionAlgorithm } from "../../encryption/CryptoEncryption";
-import { CryptoHashAlgorithm } from "../../hash/CryptoHash";
-export interface IBaseKeyHandleSerialized extends ISerialized {
-    kid: string;
-    pnm: string;
-}
-export interface IBaseKeyHandle extends ISerializable {
-    id: string;
-    providerName: string;
-}
-/**
- * Represents a handle to a secret key used for symmetric encryption/decryption within the crypto layer.
- * This handle encapsulates a reference to the key material, managed by the underlying crypto provider,
- * without exposing the raw key material directly.
- */
-export declare abstract class BaseKeyHandle extends CryptoSerializableAsync implements IBaseKeyHandle {
-    id: string;
-    providerName: string;
-    provider: Provider;
-    keyHandle: KeyHandle;
-    encryptionAndHashAlgorithm(): Promise<[CryptoEncryptionAlgorithm, CryptoHashAlgorithm]>;
-    encryptionAlgorithm(): Promise<CryptoEncryptionAlgorithm>;
-    hashAlgorithm(): Promise<CryptoHashAlgorithm>;
-    protected static preFrom(value: any): any;
-    static postFrom<T extends SerializableAsync>(value: T): Promise<T>;
-}

package/dist/crypto-layer/encryption/BaseKeyHandle.js

@@ -1,82 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var BaseKeyHandle_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BaseKeyHandle = void 0;
-const ts_serval_1 = require("@js-soft/ts-serval");
-const CryptoError_1 = require("../../CryptoError");
-const CryptoErrorCode_1 = require("../../CryptoErrorCode");
-const CryptoSerializable_1 = require("../../CryptoSerializable");
-const CryptoLayerProviders_1 = require("../CryptoLayerProviders");
-const CryptoLayerUtils_1 = require("../CryptoLayerUtils");
-/**
- * Represents a handle to a secret key used for symmetric encryption/decryption within the crypto layer.
- * This handle encapsulates a reference to the key material, managed by the underlying crypto provider,
- * without exposing the raw key material directly.
- */
-let BaseKeyHandle = BaseKeyHandle_1 = class BaseKeyHandle extends CryptoSerializable_1.CryptoSerializableAsync {
-    async encryptionAndHashAlgorithm() {
-        const spec = await this.keyHandle.spec();
-        return [
-            CryptoLayerUtils_1.CryptoLayerUtils.cryptoEncryptionAlgorithmFromCipher(spec.cipher),
-            CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashAlgorithmFromCryptoHash(spec.signing_hash)
-        ];
-    }
-    async encryptionAlgorithm() {
-        const spec = await this.keyHandle.spec();
-        return CryptoLayerUtils_1.CryptoLayerUtils.cryptoEncryptionAlgorithmFromCipher(spec.cipher);
-    }
-    async hashAlgorithm() {
-        const spec = await this.keyHandle.spec();
-        return CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashAlgorithmFromCryptoHash(spec.signing_hash);
-    }
-    static preFrom(value) {
-        if (value.kid) {
-            value = {
-                id: value.kid,
-                providerName: value.pnm,
-                spec: value.spc
-            };
-        }
-        return value;
-    }
-    static async postFrom(value) {
-        if (!(value instanceof this)) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.DeserializeValidation, "Expected 'BaseKeyHandle' in postFrom.");
-        }
-        const provider = (0, CryptoLayerProviders_1.getProvider)({ providerName: value.providerName });
-        let keyHandle;
-        try {
-            keyHandle = await provider.loadKey(value.id);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalLoadKey, "Failed to load key during deserialization.", undefined, e, BaseKeyHandle_1.postFrom);
-        }
-        value.keyHandle = keyHandle;
-        value.provider = provider;
-        return value;
-    }
-};
-exports.BaseKeyHandle = BaseKeyHandle;
-__decorate([
-    (0, ts_serval_1.validate)(),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", String)
-], BaseKeyHandle.prototype, "id", void 0);
-__decorate([
-    (0, ts_serval_1.validate)(),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", String)
-], BaseKeyHandle.prototype, "providerName", void 0);
-exports.BaseKeyHandle = BaseKeyHandle = BaseKeyHandle_1 = __decorate([
-    (0, ts_serval_1.type)("BaseKeyHandle")
-], BaseKeyHandle);
-//# sourceMappingURL=BaseKeyHandle.js.map

package/dist/crypto-layer/encryption/BaseKeyHandle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseKeyHandle.js","sourceRoot":"","sources":["../../../src/crypto-layer/encryption/BaseKeyHandle.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,kDAA8G;AAE9G,mDAAgD;AAChD,2DAAwD;AACxD,iEAAmE;AAGnE,kEAAsD;AACtD,0DAAuD;AAYvD;;;;GAIG;AAEI,IAAe,aAAa,qBAA5B,MAAe,aAAc,SAAQ,4CAAuB;IAYxD,KAAK,CAAC,0BAA0B;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO;YACH,mCAAgB,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC;YACjE,mCAAgB,CAAC,iCAAiC,CAAC,IAAI,CAAC,YAAY,CAAC;SACxE,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,mBAAmB;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,mCAAgB,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,aAAa;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,mCAAgB,CAAC,iCAAiC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjF,CAAC;IAES,MAAM,CAAU,OAAO,CAAC,KAAU;QACxC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,KAAK,GAAG;gBACJ,EAAE,EAAE,KAAK,CAAC,GAAG;gBACb,YAAY,EAAE,KAAK,CAAC,GAAG;gBACvB,IAAI,EAAE,KAAK,CAAC,GAAG;aAClB,CAAC;QACN,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAEM,MAAM,CAAU,KAAK,CAAC,QAAQ,CAA8B,KAAQ;QACvE,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAW,CAAC,iCAAe,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,kCAAW,EAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACnE,IAAI,SAAoB,CAAC;QACzB,IAAI,CAAC;YACD,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,UAAU,EAC1B,4CAA4C,EAC5C,SAAS,EACT,CAAU,EACV,eAAa,CAAC,QAAQ,CACzB,CAAC;QACN,CAAC;QAED,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAA;AAjEqB,sCAAa;AAGxB;IAFN,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;yCACM;AAIX;IAFN,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;mDACgB;wBAPV,aAAa;IADlC,IAAA,gBAAI,EAAC,eAAe,CAAC;GACA,aAAa,CAiElC"}

package/dist/crypto-layer/encryption/CryptoEncryptionHandle.d.ts

@@ -1,32 +0,0 @@
-import { KeyHandle, Provider } from "@nmshd/rs-crypto-types";
-import { CoreBuffer } from "../../CoreBuffer";
-import { CryptoCipher } from "../../encryption/CryptoCipher";
-import { CryptoEncryptionAlgorithm } from "../../encryption/CryptoEncryption";
-import { CryptoSecretKey } from "../../encryption/CryptoSecretKey";
-import { CryptoHashAlgorithm } from "../../hash/CryptoHash";
-import { CryptoLayerProviderIdentifier } from "../CryptoLayerConfig";
-import { BaseDerivedKeyHandle } from "./BaseDerivedKeyHandle";
-import { BaseKeyHandle } from "./BaseKeyHandle";
-import { DeviceBoundKeyHandle } from "./DeviceBoundKeyHandle";
-import { PortableDerivedKeyHandle } from "./PortableDerivedKeyHandle";
-import { PortableKeyHandle } from "./PortableKeyHandle";
-export declare class CryptoEncryptionHandle {
-    /**
-     * Creates a new {@link BaseKeyHandle} / {@link DerivedBaseKeyHandle} or its child from an existing {@link KeyHandle}.
-     */
-    static _keyHandleFromProviderAndCalKeyHandle<T extends BaseKeyHandle | BaseDerivedKeyHandle>(constructor: new () => T, provider: Provider, keyHandle: KeyHandle): Promise<T>;
-    private static generateKeyHandle;
-    static generateDeviceBoundKeyHandle(providerIdent: CryptoLayerProviderIdentifier, encryptionAlgorithm: CryptoEncryptionAlgorithm, hashAlgorithm: CryptoHashAlgorithm): Promise<DeviceBoundKeyHandle>;
-    static generatePortableKeyHandle(providerIdent: CryptoLayerProviderIdentifier, encryptionAlgorithm: CryptoEncryptionAlgorithm, hashAlgorithm: CryptoHashAlgorithm): Promise<PortableKeyHandle>;
-    static encrypt<T extends BaseKeyHandle | BaseDerivedKeyHandle>(plaintext: CoreBuffer, secretKeyHandle: T, nonce?: CoreBuffer): Promise<CryptoCipher>;
-    static encryptWithCounter<T extends BaseKeyHandle | BaseDerivedKeyHandle>(plaintext: CoreBuffer, secretKeyHandle: T, nonce: CoreBuffer, counter: number): Promise<CryptoCipher>;
-    static decrypt<T extends BaseKeyHandle | BaseDerivedKeyHandle>(cipher: CryptoCipher, secretKeyHandle: T, nonce?: CoreBuffer): Promise<CoreBuffer>;
-    static decryptWithCounter<T extends BaseKeyHandle | BaseDerivedKeyHandle>(cipher: CryptoCipher, secretKeyHandle: T, nonce: CoreBuffer, counter: number): Promise<CoreBuffer>;
-    static createNonce(providerIdent: CryptoLayerProviderIdentifier, algorithm: CryptoEncryptionAlgorithm): Promise<CoreBuffer>;
-    static extractRawKey(portableKeyHandle: PortableKeyHandle | PortableDerivedKeyHandle): Promise<CoreBuffer>;
-    static cryptoSecretKeyFromPortableKeyHandle(portableKeyHandle: PortableKeyHandle | PortableDerivedKeyHandle): Promise<CryptoSecretKey>;
-    private static keyHandleFromCryptoSecretKey;
-    static portableKeyHandleFromCryptoSecretKey(providerIdent: CryptoLayerProviderIdentifier, cryptoSecretKey: CryptoSecretKey, signingHash?: CryptoHashAlgorithm): Promise<PortableKeyHandle>;
-    static portableDerivedKeyHandleFromCryptoSecretKey(providerIdent: CryptoLayerProviderIdentifier, cryptoSecretKey: CryptoSecretKey, signingHash?: CryptoHashAlgorithm): Promise<PortableDerivedKeyHandle>;
-    private static _addCounter;
-}

package/dist/crypto-layer/encryption/CryptoEncryptionHandle.js

@@ -1,196 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CryptoEncryptionHandle = void 0;
-const CoreBuffer_1 = require("../../CoreBuffer");
-const CryptoError_1 = require("../../CryptoError");
-const CryptoErrorCode_1 = require("../../CryptoErrorCode");
-const CryptoValidation_1 = require("../../CryptoValidation");
-const CryptoCipher_1 = require("../../encryption/CryptoCipher");
-const CryptoSecretKey_1 = require("../../encryption/CryptoSecretKey");
-const CryptoLayerProviders_1 = require("../CryptoLayerProviders");
-const CryptoLayerUtils_1 = require("../CryptoLayerUtils");
-const DeviceBoundKeyHandle_1 = require("./DeviceBoundKeyHandle");
-const PortableDerivedKeyHandle_1 = require("./PortableDerivedKeyHandle");
-const PortableKeyHandle_1 = require("./PortableKeyHandle");
-class CryptoEncryptionHandle {
-    /**
-     * Creates a new {@link BaseKeyHandle} / {@link DerivedBaseKeyHandle} or its child from an existing {@link KeyHandle}.
-     */
-    static async _keyHandleFromProviderAndCalKeyHandle(constructor, provider, keyHandle) {
-        const result = new constructor();
-        [result.providerName, result.id] = await Promise.all([provider.providerName(), keyHandle.id()]);
-        result.provider = provider;
-        result.keyHandle = keyHandle;
-        return result;
-    }
-    static async generateKeyHandle(constructor, providerIdent, spec) {
-        const provider = (0, CryptoLayerProviders_1.getProvider)(providerIdent);
-        const keyHandle = await provider.createKey(spec);
-        const secretKeyHandle = await CryptoEncryptionHandle._keyHandleFromProviderAndCalKeyHandle(constructor, provider, keyHandle);
-        return secretKeyHandle;
-    }
-    static async generateDeviceBoundKeyHandle(providerIdent, encryptionAlgorithm, hashAlgorithm) {
-        const deviceBoundSpec = {
-            cipher: CryptoLayerUtils_1.CryptoLayerUtils.cipherFromCryptoEncryptionAlgorithm(encryptionAlgorithm),
-            signing_hash: CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashFromCryptoHashAlgorithm(hashAlgorithm),
-            ephemeral: false,
-            non_exportable: true
-        };
-        return await this.generateKeyHandle(DeviceBoundKeyHandle_1.DeviceBoundKeyHandle, providerIdent, deviceBoundSpec);
-    }
-    static async generatePortableKeyHandle(providerIdent, encryptionAlgorithm, hashAlgorithm) {
-        const portableSpec = {
-            cipher: CryptoLayerUtils_1.CryptoLayerUtils.cipherFromCryptoEncryptionAlgorithm(encryptionAlgorithm),
-            signing_hash: CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashFromCryptoHashAlgorithm(hashAlgorithm),
-            ephemeral: false,
-            non_exportable: false
-        };
-        return await this.generateKeyHandle(PortableKeyHandle_1.PortableKeyHandle, providerIdent, portableSpec);
-    }
-    static async encrypt(plaintext, secretKeyHandle, nonce) {
-        const encryptionAlgorithm = await secretKeyHandle.encryptionAlgorithm();
-        if (nonce === undefined || nonce.buffer.length === 0) {
-            nonce = await this.createNonce({ providerName: secretKeyHandle.providerName }, encryptionAlgorithm);
-        }
-        else {
-            CryptoValidation_1.CryptoValidation.checkNonceForAlgorithm(nonce, encryptionAlgorithm);
-        }
-        let cipher;
-        try {
-            cipher = await secretKeyHandle.keyHandle.encryptWithIv(plaintext.buffer, nonce.buffer);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.EncryptionEncrypt, `${e}`, undefined, e, CryptoEncryptionHandle.encrypt);
-        }
-        return CryptoCipher_1.CryptoCipher.from({
-            cipher: CoreBuffer_1.CoreBuffer.from(cipher),
-            algorithm: encryptionAlgorithm,
-            nonce
-        });
-    }
-    static async encryptWithCounter(plaintext, secretKeyHandle, nonce, counter) {
-        const encryptionAlgorithm = await secretKeyHandle.encryptionAlgorithm();
-        CryptoValidation_1.CryptoValidation.checkCounter(counter);
-        CryptoValidation_1.CryptoValidation.checkNonceForAlgorithm(nonce, encryptionAlgorithm);
-        const publicNonce = this._addCounter(nonce.buffer, counter);
-        let cipher;
-        try {
-            cipher = await secretKeyHandle.keyHandle.encryptWithIv(plaintext.buffer, publicNonce.buffer);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.EncryptionEncrypt, `${e}`, undefined, e, CryptoEncryptionHandle.encryptWithCounter);
-        }
-        return CryptoCipher_1.CryptoCipher.from({
-            cipher: CoreBuffer_1.CoreBuffer.from(cipher),
-            algorithm: encryptionAlgorithm,
-            counter
-        });
-    }
-    static async decrypt(cipher, secretKeyHandle, nonce) {
-        const encryptionAlgorithm = await secretKeyHandle.encryptionAlgorithm();
-        let publicNonce;
-        if (nonce !== undefined) {
-            CryptoValidation_1.CryptoValidation.checkNonceForAlgorithm(nonce, encryptionAlgorithm);
-            publicNonce = nonce.buffer;
-        }
-        else if (cipher.nonce !== undefined) {
-            publicNonce = cipher.nonce.buffer;
-        }
-        else {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.EncryptionWrongNonce, "Cipher does not contain a nonce and no nonce is given.").setContext(CryptoEncryptionHandle.decrypt);
-        }
-        try {
-            const buffer = await secretKeyHandle.keyHandle.decryptData(cipher.cipher.buffer, publicNonce);
-            return CoreBuffer_1.CoreBuffer.from(buffer);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.EncryptionEncrypt, `${e}`, undefined, e, CryptoEncryptionHandle.decrypt);
-        }
-    }
-    static async decryptWithCounter(cipher, secretKeyHandle, nonce, counter) {
-        const encryptionAlgorithm = await secretKeyHandle.encryptionAlgorithm();
-        CryptoValidation_1.CryptoValidation.checkCounter(counter);
-        CryptoValidation_1.CryptoValidation.checkNonceForAlgorithm(nonce, encryptionAlgorithm);
-        const publicNonce = this._addCounter(nonce.buffer, counter);
-        try {
-            const buffer = await secretKeyHandle.keyHandle.decryptData(cipher.cipher.buffer, publicNonce.buffer);
-            return CoreBuffer_1.CoreBuffer.from(buffer);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.EncryptionDecrypt, `${e}`, undefined, e, CryptoEncryptionHandle.decryptWithCounter);
-        }
-    }
-    static async createNonce(providerIdent, algorithm) {
-        const provider = (0, CryptoLayerProviders_1.getProvider)(providerIdent);
-        let nonceLength;
-        switch (algorithm) {
-            case 1 /* CryptoEncryptionAlgorithm.AES128_GCM */:
-            case 2 /* CryptoEncryptionAlgorithm.AES256_GCM */:
-            case 6 /* CryptoEncryptionAlgorithm.CHACHA20_POLY1305 */:
-                nonceLength = 12;
-                break;
-            case 4 /* CryptoEncryptionAlgorithm.AES128_CBC */:
-            case 5 /* CryptoEncryptionAlgorithm.AES256_CBC */:
-                nonceLength = 16;
-                break;
-            case 3 /* CryptoEncryptionAlgorithm.XCHACHA20_POLY1305 */:
-                nonceLength = 24;
-                break;
-        }
-        const buffer = await provider.getRandom(nonceLength);
-        return CoreBuffer_1.CoreBuffer.from(buffer);
-    }
-    static async extractRawKey(portableKeyHandle) {
-        const rawKey = await portableKeyHandle.keyHandle.extractKey();
-        return new CoreBuffer_1.CoreBuffer(rawKey);
-    }
-    static async cryptoSecretKeyFromPortableKeyHandle(portableKeyHandle) {
-        const rawKeyPromise = CryptoEncryptionHandle.extractRawKey(portableKeyHandle);
-        const algorithm = await portableKeyHandle.encryptionAlgorithm();
-        const cryptoSecretKeyObj = {
-            algorithm: algorithm,
-            secretKey: await rawKeyPromise
-        };
-        return CryptoSecretKey_1.CryptoSecretKey.from(cryptoSecretKeyObj);
-    }
-    static async keyHandleFromCryptoSecretKey(constructor, providerIdent, cryptoSecretKey, signingHash, ephemeral) {
-        const cipher = CryptoLayerUtils_1.CryptoLayerUtils.cipherFromCryptoEncryptionAlgorithm(cryptoSecretKey.algorithm);
-        const keySpec = {
-            cipher: cipher,
-            ephemeral: ephemeral,
-            signing_hash: CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashFromCryptoHashAlgorithm(signingHash),
-            non_exportable: false
-        };
-        const provider = (0, CryptoLayerProviders_1.getProvider)(providerIdent);
-        let keyHandle;
-        try {
-            keyHandle = await provider.importKey(keySpec, cryptoSecretKey.secretKey.buffer);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalImportOfKey, "Failed to import crypto secret key.", undefined, e, CryptoEncryptionHandle.keyHandleFromCryptoSecretKey);
-        }
-        return await CryptoEncryptionHandle._keyHandleFromProviderAndCalKeyHandle(constructor, provider, keyHandle);
-    }
-    static async portableKeyHandleFromCryptoSecretKey(providerIdent, cryptoSecretKey, signingHash = 2 /* CryptoHashAlgorithm.SHA512 */) {
-        return await CryptoEncryptionHandle.keyHandleFromCryptoSecretKey(PortableKeyHandle_1.PortableKeyHandle, providerIdent, cryptoSecretKey, signingHash, false);
-    }
-    static async portableDerivedKeyHandleFromCryptoSecretKey(providerIdent, cryptoSecretKey, signingHash = 2 /* CryptoHashAlgorithm.SHA512 */) {
-        return await CryptoEncryptionHandle.keyHandleFromCryptoSecretKey(PortableDerivedKeyHandle_1.PortableDerivedKeyHandle, providerIdent, cryptoSecretKey, signingHash, true);
-    }
-    static _addCounter(nonce, counter) {
-        let buffer;
-        if (nonce instanceof Uint8Array) {
-            buffer = new CoreBuffer_1.CoreBuffer(nonce);
-        }
-        else if (nonce instanceof CoreBuffer_1.CoreBuffer) {
-            buffer = nonce;
-        }
-        else {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.EncryptionWrongNonce).setContext(CryptoEncryptionHandle.decryptWithCounter);
-        }
-        const clone = buffer.clone().add(counter);
-        return clone;
-    }
-}
-exports.CryptoEncryptionHandle = CryptoEncryptionHandle;
-//# sourceMappingURL=CryptoEncryptionHandle.js.map

package/dist/crypto-layer/encryption/CryptoEncryptionHandle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CryptoEncryptionHandle.js","sourceRoot":"","sources":["../../../src/crypto-layer/encryption/CryptoEncryptionHandle.ts"],"names":[],"mappings":";;;AAEA,iDAA8C;AAC9C,mDAAgD;AAChD,2DAAwD;AACxD,6DAA0D;AAC1D,gEAA6D;AAE7D,sEAAqF;AAGrF,kEAAsD;AACtD,0DAAuD;AAGvD,iEAA8D;AAC9D,yEAAsE;AACtE,2DAAwD;AAExD,MAAa,sBAAsB;IAC/B;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,qCAAqC,CACrD,WAAwB,EACxB,QAAkB,EAClB,SAAoB;QAEpB,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAEjC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAEhG,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAClC,WAAwB,EACxB,aAA4C,EAC5C,IAAa;QAEb,MAAM,QAAQ,GAAG,IAAA,kCAAW,EAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,qCAAqC,CACtF,WAAW,EACX,QAAQ,EACR,SAAS,CACZ,CAAC;QACF,OAAO,eAAe,CAAC;IAC3B,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAC5C,aAA4C,EAC5C,mBAA8C,EAC9C,aAAkC;QAElC,MAAM,eAAe,GAAY;YAC7B,MAAM,EAAE,mCAAgB,CAAC,mCAAmC,CAAC,mBAAmB,CAAC;YACjF,YAAY,EAAE,mCAAgB,CAAC,iCAAiC,CAAC,aAAa,CAAC;YAC/E,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,IAAI;SACvB,CAAC;QAEF,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAuB,2CAAoB,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IACpH,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,yBAAyB,CACzC,aAA4C,EAC5C,mBAA8C,EAC9C,aAAkC;QAElC,MAAM,YAAY,GAAY;YAC1B,MAAM,EAAE,mCAAgB,CAAC,mCAAmC,CAAC,mBAAmB,CAAC;YACjF,YAAY,EAAE,mCAAgB,CAAC,iCAAiC,CAAC,aAAa,CAAC;YAC/E,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,KAAK;SACxB,CAAC;QAEF,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAoB,qCAAiB,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3G,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,OAAO,CACvB,SAAqB,EACrB,eAAkB,EAClB,KAAkB;QAElB,MAAM,mBAAmB,GAAG,MAAM,eAAe,CAAC,mBAAmB,EAAE,CAAC;QAExE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,eAAe,CAAC,YAAY,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACxG,CAAC;aAAM,CAAC;YACJ,mCAAgB,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,iBAAiB,EACjC,GAAG,CAAC,EAAE,EACN,SAAS,EACT,CAAU,EACV,sBAAsB,CAAC,OAAO,CACjC,CAAC;QACN,CAAC;QAED,OAAO,2BAAY,CAAC,IAAI,CAAC;YACrB,MAAM,EAAE,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B,SAAS,EAAE,mBAAmB;YAC9B,KAAK;SACR,CAAC,CAAC;IACP,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAClC,SAAqB,EACrB,eAAkB,EAClB,KAAiB,EACjB,OAAe;QAEf,MAAM,mBAAmB,GAAG,MAAM,eAAe,CAAC,mBAAmB,EAAE,CAAC;QAExE,mCAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,mCAAgB,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE5D,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACjG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,iBAAiB,EACjC,GAAG,CAAC,EAAE,EACN,SAAS,EACT,CAAU,EACV,sBAAsB,CAAC,kBAAkB,CAC5C,CAAC;QACN,CAAC;QAED,OAAO,2BAAY,CAAC,IAAI,CAAC;YACrB,MAAM,EAAE,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B,SAAS,EAAE,mBAAmB;YAC9B,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,OAAO,CACvB,MAAoB,EACpB,eAAkB,EAClB,KAAkB;QAElB,MAAM,mBAAmB,GAAG,MAAM,eAAe,CAAC,mBAAmB,EAAE,CAAC;QAExE,IAAI,WAAW,CAAC;QAChB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,mCAAgB,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YACpE,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACtC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,oBAAoB,EACpC,wDAAwD,CAC3D,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,iBAAiB,EACjC,GAAG,CAAC,EAAE,EACN,SAAS,EACT,CAAU,EACV,sBAAsB,CAAC,OAAO,CACjC,CAAC;QACN,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAClC,MAAoB,EACpB,eAAkB,EAClB,KAAiB,EACjB,OAAe;QAEf,MAAM,mBAAmB,GAAG,MAAM,eAAe,CAAC,mBAAmB,EAAE,CAAC;QAExE,mCAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,mCAAgB,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE5D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YACrG,OAAO,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,iBAAiB,EACjC,GAAG,CAAC,EAAE,EACN,SAAS,EACT,CAAU,EACV,sBAAsB,CAAC,kBAAkB,CAC5C,CAAC;QACN,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,WAAW,CAC3B,aAA4C,EAC5C,SAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAA,kCAAW,EAAC,aAAa,CAAC,CAAC;QAE5C,IAAI,WAAW,CAAC;QAChB,QAAQ,SAAS,EAAE,CAAC;YAChB,kDAA0C;YAC1C,kDAA0C;YAC1C;gBACI,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM;YACV,kDAA0C;YAC1C;gBACI,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM;YACV;gBACI,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrD,OAAO,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,aAAa,CAC7B,iBAA+D;QAE/D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC9D,OAAO,IAAI,uBAAU,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,oCAAoC,CACpD,iBAA+D;QAE/D,MAAM,aAAa,GAAG,sBAAsB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,CAAC;QAChE,MAAM,kBAAkB,GAAqB;YACzC,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,MAAM,aAAa;SACjC,CAAC;QACF,OAAO,iCAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAC7C,WAAwB,EACxB,aAA4C,EAC5C,eAAgC,EAChC,WAAgC,EAChC,SAAkB;QAElB,MAAM,MAAM,GAAG,mCAAgB,CAAC,mCAAmC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAY;YACrB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,mCAAgB,CAAC,iCAAiC,CAAC,WAAW,CAAC;YAC7E,cAAc,EAAE,KAAK;SACxB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAA,kCAAW,EAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,SAAoB,CAAC;QACzB,IAAI,CAAC;YACD,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,cAAc,EAC9B,qCAAqC,EACrC,SAAS,EACT,CAAU,EACV,sBAAsB,CAAC,4BAA4B,CACtD,CAAC;QACN,CAAC;QAED,OAAO,MAAM,sBAAsB,CAAC,qCAAqC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChH,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,oCAAoC,CACpD,aAA4C,EAC5C,eAAgC,EAChC,gDAA6D;QAE7D,OAAO,MAAM,sBAAsB,CAAC,4BAA4B,CAC5D,qCAAiB,EACjB,aAAa,EACb,eAAe,EACf,WAAW,EACX,KAAK,CACR,CAAC;IACN,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAC3D,aAA4C,EAC5C,eAAgC,EAChC,gDAA6D;QAE7D,OAAO,MAAM,sBAAsB,CAAC,4BAA4B,CAC5D,mDAAwB,EACxB,aAAa,EACb,eAAe,EACf,WAAW,EACX,IAAI,CACP,CAAC;IACN,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,KAA8B,EAAE,OAAe;QACtE,IAAI,MAAM,CAAC;QACX,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAC9B,MAAM,GAAG,IAAI,uBAAU,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;YACrC,MAAM,GAAG,KAAK,CAAC;QACnB,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,yBAAW,CAAC,iCAAe,CAAC,oBAAoB,CAAC,CAAC,UAAU,CAClE,sBAAsB,CAAC,kBAAkB,CAC5C,CAAC;QACN,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE1C,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAvTD,wDAuTC"}

package/dist/crypto-layer/encryption/DeviceBoundDerivedKeyHandle.d.ts

@@ -1,5 +0,0 @@
-import { BaseDerivedKeyHandle } from "./BaseDerivedKeyHandle";
-/** Non exportable, ephemeral key handle that is derived from a device bound key handle. */
-export declare class DeviceBoundDerivedKeyHandle extends BaseDerivedKeyHandle {
-    readonly _isDeviceBoundDerivedKeyHandle = true;
-}

package/dist/crypto-layer/encryption/DeviceBoundDerivedKeyHandle.js

@@ -1,24 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DeviceBoundDerivedKeyHandle = void 0;
-const ts_serval_1 = require("@js-soft/ts-serval");
-const BaseDerivedKeyHandle_1 = require("./BaseDerivedKeyHandle");
-/** Non exportable, ephemeral key handle that is derived from a device bound key handle. */
-let DeviceBoundDerivedKeyHandle = class DeviceBoundDerivedKeyHandle extends BaseDerivedKeyHandle_1.BaseDerivedKeyHandle {
-    constructor() {
-        super(...arguments);
-        // Phantom marker to make this type incompatible to other types that extend `BaseKeyHandle`.
-        this._isDeviceBoundDerivedKeyHandle = true;
-    }
-};
-exports.DeviceBoundDerivedKeyHandle = DeviceBoundDerivedKeyHandle;
-exports.DeviceBoundDerivedKeyHandle = DeviceBoundDerivedKeyHandle = __decorate([
-    (0, ts_serval_1.type)("DeviceBoundDerivedKeyHandle")
-], DeviceBoundDerivedKeyHandle);
-//# sourceMappingURL=DeviceBoundDerivedKeyHandle.js.map

package/dist/crypto-layer/encryption/DeviceBoundDerivedKeyHandle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"DeviceBoundDerivedKeyHandle.js","sourceRoot":"","sources":["../../../src/crypto-layer/encryption/DeviceBoundDerivedKeyHandle.ts"],"names":[],"mappings":";;;;;;;;;AAAA,kDAA0C;AAC1C,iEAA8D;AAE9D,2FAA2F;AAEpF,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,2CAAoB;IAA9D;;QACH,4FAA4F;QAC5E,mCAA8B,GAAG,IAAI,CAAC;IAC1D,CAAC;CAAA,CAAA;AAHY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,gBAAI,EAAC,6BAA6B,CAAC;GACvB,2BAA2B,CAGvC"}

package/dist/crypto-layer/encryption/DeviceBoundKeyHandle.d.ts

@@ -1,18 +0,0 @@
-import { CoreBuffer } from "../../CoreBuffer";
-import { BaseKeyHandle, IBaseKeyHandle, IBaseKeyHandleSerialized } from "./BaseKeyHandle";
-/** Key handle that is non exportable (the key cannot be extracted). */
-export declare class DeviceBoundKeyHandle extends BaseKeyHandle {
-    readonly _isDeviceBoundKeyHandle = true;
-    toJSON(verbose?: boolean): IBaseKeyHandleSerialized;
-    toBase64(verbose?: boolean): string;
-    /**
-     * Deserializes an object representation of a {@link DeviceBoundKeyHandle}.
-     *
-     * This method is not able to import raw keys or {@link KeyHandle}.
-     */
-    static from(value: IBaseKeyHandle | CoreBuffer): Promise<DeviceBoundKeyHandle>;
-    /** @see from */
-    static fromJSON(value: IBaseKeyHandleSerialized): Promise<DeviceBoundKeyHandle>;
-    /** @see from */
-    static fromBase64(value: string): Promise<DeviceBoundKeyHandle>;
-}

package/dist/crypto-layer/encryption/DeviceBoundKeyHandle.js

@@ -1,51 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DeviceBoundKeyHandle = void 0;
-const ts_serval_1 = require("@js-soft/ts-serval");
-const CoreBuffer_1 = require("../../CoreBuffer");
-const BaseKeyHandle_1 = require("./BaseKeyHandle");
-/** Key handle that is non exportable (the key cannot be extracted). */
-let DeviceBoundKeyHandle = class DeviceBoundKeyHandle extends BaseKeyHandle_1.BaseKeyHandle {
-    constructor() {
-        super(...arguments);
-        // Phantom marker to make this type incompatible to other types that extend `BaseKeyHandle`.
-        this._isDeviceBoundKeyHandle = true;
-    }
-    toJSON(verbose = true) {
-        return {
-            kid: this.id,
-            pnm: this.providerName,
-            "@type": verbose ? "DeviceBoundKeyHandle" : undefined
-        };
-    }
-    toBase64(verbose = true) {
-        return CoreBuffer_1.CoreBuffer.utf8_base64(this.serialize(verbose));
-    }
-    /**
-     * Deserializes an object representation of a {@link DeviceBoundKeyHandle}.
-     *
-     * This method is not able to import raw keys or {@link KeyHandle}.
-     */
-    static async from(value) {
-        return await this.fromAny(value);
-    }
-    /** @see from */
-    static async fromJSON(value) {
-        return await this.fromAny(value);
-    }
-    /** @see from */
-    static async fromBase64(value) {
-        return await this.deserialize(CoreBuffer_1.CoreBuffer.base64_utf8(value));
-    }
-};
-exports.DeviceBoundKeyHandle = DeviceBoundKeyHandle;
-exports.DeviceBoundKeyHandle = DeviceBoundKeyHandle = __decorate([
-    (0, ts_serval_1.type)("DeviceBoundKeyHandle")
-], DeviceBoundKeyHandle);
-//# sourceMappingURL=DeviceBoundKeyHandle.js.map

package/dist/crypto-layer/encryption/DeviceBoundKeyHandle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"DeviceBoundKeyHandle.js","sourceRoot":"","sources":["../../../src/crypto-layer/encryption/DeviceBoundKeyHandle.ts"],"names":[],"mappings":";;;;;;;;;AAAA,kDAA0C;AAC1C,iDAA8C;AAC9C,mDAA0F;AAE1F,uEAAuE;AAEhE,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,6BAAa;IAAhD;;QACH,4FAA4F;QAC5E,4BAAuB,GAAG,IAAI,CAAC;IAgCnD,CAAC;IA9BmB,MAAM,CAAC,OAAO,GAAG,IAAI;QACjC,OAAO;YACH,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,GAAG,EAAE,IAAI,CAAC,YAAY;YACtB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS;SACxD,CAAC;IACN,CAAC;IAEe,QAAQ,CAAC,OAAO,GAAG,IAAI;QACnC,OAAO,uBAAU,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAkC;QACvD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,gBAAgB;IACT,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAA+B;QACxD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,gBAAgB;IACT,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAa;QACxC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;CACJ,CAAA;AAlCY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,gBAAI,EAAC,sBAAsB,CAAC;GAChB,oBAAoB,CAkChC"}