@nmshd/crypto 2.2.0-alpha.8 → 3.0.1

package/dist/crypto-layer/CryptoDerivationHandle.js

@@ -1,76 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CryptoDerivationHandle = void 0;
-const CoreBuffer_1 = require("../CoreBuffer");
-const CryptoError_1 = require("../CryptoError");
-const CryptoErrorCode_1 = require("../CryptoErrorCode");
-const CryptoValidation_1 = require("../CryptoValidation");
-const CryptoLayerProviders_1 = require("./CryptoLayerProviders");
-const CryptoLayerUtils_1 = require("./CryptoLayerUtils");
-const CryptoEncryptionHandle_1 = require("./encryption/CryptoEncryptionHandle");
-const DeviceBoundDerivedKeyHandle_1 = require("./encryption/DeviceBoundDerivedKeyHandle");
-const PortableDerivedKeyHandle_1 = require("./encryption/PortableDerivedKeyHandle");
-class CryptoDerivationHandle {
-    static async deriveKeyHandleFromPassword(constructor, derivationParameters, keySpecOfResultingKey) {
-        CryptoValidation_1.CryptoValidation.checkBuffer(new CoreBuffer_1.CoreBuffer(derivationParameters.salt), 8, 64, "salt", true);
-        const provider = (0, CryptoLayerProviders_1.getProvider)(derivationParameters.providerIdent);
-        const kdfParameters = CryptoLayerUtils_1.CryptoLayerUtils.kdfFromCryptoDerivation(derivationParameters.derivationAlgorithm, derivationParameters.derivationIterations, derivationParameters.derivationMemoryLimit, derivationParameters.derivationParallelism);
-        let keyHandle;
-        try {
-            keyHandle = await provider.deriveKeyFromPassword(derivationParameters.password.toUtf8(), derivationParameters.salt.buffer, keySpecOfResultingKey, kdfParameters);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalKeyDerivation, `Provider ${await provider.providerName()} failed to derive key from password.`, undefined, e, CryptoDerivationHandle.deriveKeyHandleFromPassword);
-        }
-        return await CryptoEncryptionHandle_1.CryptoEncryptionHandle._keyHandleFromProviderAndCalKeyHandle(constructor, provider, keyHandle);
-    }
-    /**
-     * Derive an ephemeral {@link DeviceBoundDerivedKeyHandle} from a password.
-     */
-    static async deriveDeviceBoundKeyHandleFromPassword(parameters) {
-        const keySpec = {
-            cipher: CryptoLayerUtils_1.CryptoLayerUtils.cipherFromCryptoEncryptionAlgorithm(parameters.resultingKeyEncryptionAlgorithm),
-            signing_hash: CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashFromCryptoHashAlgorithm(parameters.resultingKeyHashAlgorithm),
-            ephemeral: true,
-            non_exportable: true
-        };
-        return await CryptoDerivationHandle.deriveKeyHandleFromPassword(DeviceBoundDerivedKeyHandle_1.DeviceBoundDerivedKeyHandle, parameters, keySpec);
-    }
-    /**
-     * Derive an ephemeral {@link PortableDerivedKeyHandle} from a password.
-     */
-    static async derivePortableKeyHandleFromPassword(parameters) {
-        const keySpec = {
-            cipher: CryptoLayerUtils_1.CryptoLayerUtils.cipherFromCryptoEncryptionAlgorithm(parameters.resultingKeyEncryptionAlgorithm),
-            signing_hash: CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashFromCryptoHashAlgorithm(parameters.resultingKeyHashAlgorithm),
-            ephemeral: true,
-            non_exportable: false
-        };
-        return await CryptoDerivationHandle.deriveKeyHandleFromPassword(PortableDerivedKeyHandle_1.PortableDerivedKeyHandle, parameters, keySpec);
-    }
-    static async deriveKeyFromBaseKeyHandle(constructor, baseKey, keyId, context) {
-        const bytes = CoreBuffer_1.CoreBuffer.fromUtf8(`id:${keyId};ctx:${context}`);
-        let keyHandle;
-        try {
-            keyHandle = await baseKey.keyHandle.deriveKey(bytes.buffer);
-        }
-        catch (e) {
-            throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalKeyDerivation, `Failed to derive key from base key.`, undefined, e, CryptoDerivationHandle.deriveKeyFromBaseKeyHandle);
-        }
-        return await CryptoEncryptionHandle_1.CryptoEncryptionHandle._keyHandleFromProviderAndCalKeyHandle(constructor, baseKey.provider, keyHandle);
-    }
-    /**
-     * Derive an ephemeral {@link DeviceBoundDerivedKeyHandle} from a {@link DeviceBoundKeyHandle} with the same algorithms.
-     */
-    static async deriveDeviceBoundKeyHandle(baseKey, keyId, context) {
-        return await CryptoDerivationHandle.deriveKeyFromBaseKeyHandle(DeviceBoundDerivedKeyHandle_1.DeviceBoundDerivedKeyHandle, baseKey, keyId, context);
-    }
-    /**
-     * Derive an ephemeral {@link PortableDerivedKeyHandle} from a {@link PortableKeyHandle} with the same algorithms.
-     */
-    static async derivePortableKeyHandle(baseKey, keyId, context) {
-        return await CryptoDerivationHandle.deriveKeyFromBaseKeyHandle(PortableDerivedKeyHandle_1.PortableDerivedKeyHandle, baseKey, keyId, context);
-    }
-}
-exports.CryptoDerivationHandle = CryptoDerivationHandle;
-//# sourceMappingURL=CryptoDerivationHandle.js.map

package/dist/crypto-layer/CryptoDerivationHandle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CryptoDerivationHandle.js","sourceRoot":"","sources":["../../src/crypto-layer/CryptoDerivationHandle.ts"],"names":[],"mappings":";;;AAEA,8CAAwD;AAExD,gDAA6C;AAC7C,wDAAqD;AACrD,0DAAuD;AAIvD,iEAAqD;AACrD,yDAAsD;AAGtD,gFAA6E;AAC7E,0FAAuF;AAEvF,oFAAiF;AAejF,MAAa,sBAAsB;IACvB,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC5C,WAAwB,EACxB,oBAA2D,EAC3D,qBAA8B;QAE9B,mCAAgB,CAAC,WAAW,CAAC,IAAI,uBAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAE7F,MAAM,QAAQ,GAAG,IAAA,kCAAW,EAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAQ,mCAAgB,CAAC,uBAAuB,CAC/D,oBAAoB,CAAC,mBAAmB,EACxC,oBAAoB,CAAC,oBAAoB,EACzC,oBAAoB,CAAC,qBAAqB,EAC1C,oBAAoB,CAAC,qBAAqB,CAC7C,CAAC;QAEF,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACD,SAAS,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAC5C,oBAAoB,CAAC,QAAQ,CAAC,MAAM,EAAE,EACtC,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAChC,qBAAqB,EACrB,aAAa,CAChB,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,gBAAgB,EAChC,YAAY,MAAM,QAAQ,CAAC,YAAY,EAAE,sCAAsC,EAC/E,SAAS,EACT,CAAU,EACV,sBAAsB,CAAC,2BAA2B,CACrD,CAAC;QACN,CAAC;QAED,OAAO,MAAM,+CAAsB,CAAC,qCAAqC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChH,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,sCAAsC,CACtD,UAAiD;QAEjD,MAAM,OAAO,GAAY;YACrB,MAAM,EAAE,mCAAgB,CAAC,mCAAmC,CAAC,UAAU,CAAC,+BAA+B,CAAC;YACxG,YAAY,EAAE,mCAAgB,CAAC,iCAAiC,CAAC,UAAU,CAAC,yBAAyB,CAAC;YACtG,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI;SACvB,CAAC;QAEF,OAAO,MAAM,sBAAsB,CAAC,2BAA2B,CAC3D,yDAA2B,EAC3B,UAAU,EACV,OAAO,CACV,CAAC;IACN,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,mCAAmC,CACnD,UAAiD;QAEjD,MAAM,OAAO,GAAY;YACrB,MAAM,EAAE,mCAAgB,CAAC,mCAAmC,CAAC,UAAU,CAAC,+BAA+B,CAAC;YACxG,YAAY,EAAE,mCAAgB,CAAC,iCAAiC,CAAC,UAAU,CAAC,yBAAyB,CAAC;YACtG,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,KAAK;SACxB,CAAC;QAEF,OAAO,MAAM,sBAAsB,CAAC,2BAA2B,CAC3D,mDAAwB,EACxB,UAAU,EACV,OAAO,CACV,CAAC;IACN,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC3C,WAAwB,EACxB,OAAU,EACV,KAAa,EACb,OAAe;QAEf,MAAM,KAAK,GAAG,uBAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,OAAO,EAAE,CAAC,CAAC;QAEhE,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACD,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,gBAAgB,EAChC,qCAAqC,EACrC,SAAS,EACT,CAAU,EACV,sBAAsB,CAAC,0BAA0B,CACpD,CAAC;QACN,CAAC;QAED,OAAO,MAAM,+CAAsB,CAAC,qCAAqC,CACrE,WAAW,EACX,OAAO,CAAC,QAAQ,EAChB,SAAS,CACZ,CAAC;IACN,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC1C,OAA6B,EAC7B,KAAa,EACb,OAAe;QAEf,OAAO,MAAM,sBAAsB,CAAC,0BAA0B,CAG5D,yDAA2B,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,uBAAuB,CACvC,OAA0B,EAC1B,KAAa,EACb,OAAe;QAEf,OAAO,MAAM,sBAAsB,CAAC,0BAA0B,CAC1D,mDAAwB,EACxB,OAAO,EACP,KAAK,EACL,OAAO,CACV,CAAC;IACN,CAAC;CACJ;AAvID,wDAuIC"}

package/dist/crypto-layer/CryptoLayerConfig.d.ts

@@ -1,82 +0,0 @@
-import { AdditionalConfig, KeyHandle, KeyPairHandle, SecurityLevel } from "@nmshd/rs-crypto-types";
-import { CryptoSerializable } from "../CryptoSerializable";
-import { CryptoEncryptionAlgorithm } from "../encryption/CryptoEncryption";
-import { CryptoHashAlgorithm } from "../hash/CryptoHash";
-import { CryptoSignatureAlgorithm } from "../signature/CryptoSignatureAlgorithm";
-import { DeviceBoundKeyHandle } from "./encryption/DeviceBoundKeyHandle";
-import { DeviceBoundKeyPairHandle } from "./signature/DeviceBoundKeyPairHandle";
-type KeyHandleType = "symmetric" | "asymmetric";
-interface IProviderInitConfigKeyHandle {
-    type: KeyHandleType;
-    keyId: string;
-    providerName: string;
-}
-/**
- * Configuration for loading a key handle from a provider without loading on deserialization.
- */
-export declare class ProviderInitConfigKeyHandle extends CryptoSerializable {
-    type: KeyHandleType;
-    keyId: string;
-    providerName: string;
-    static from(value: IProviderInitConfigKeyHandle): ProviderInitConfigKeyHandle;
-    static fromDeviceBoundHandle(handle: DeviceBoundKeyHandle | DeviceBoundKeyPairHandle): ProviderInitConfigKeyHandle;
-    loadKeyHandle(): Promise<KeyHandle | KeyPairHandle>;
-}
-interface IProviderInitConfig {
-    providerName: string;
-    masterEncryptionKeyHandle?: ProviderInitConfigKeyHandle;
-    masterSignatureKeyHandle?: ProviderInitConfigKeyHandle;
-    requiredProvider?: ProviderInitConfig;
-}
-/**
- * Recursive configuration used to load providers and their dependencies.
- */
-export declare class ProviderInitConfig extends CryptoSerializable {
-    providerName: string;
-    masterEncryptionKeyHandle?: ProviderInitConfigKeyHandle;
-    masterSignatureKeyHandle?: ProviderInitConfigKeyHandle;
-    requiredProvider?: ProviderInitConfig;
-    static from(value: IProviderInitConfig): ProviderInitConfig;
-}
-export type StorageConfig = Extract<AdditionalConfig, {
-    KVStoreConfig: any;
-} | {
-    FileStoreConfig: any;
-}>;
-export type CryptoLayerProviderIdentifier = {
-    providerName: string;
-} | {
-    securityLevel: SecurityLevel;
-};
-export type StorageSecuritySpec = {
-    type: "asymmetric";
-    asymmetricKeyAlgorithm: CryptoSignatureAlgorithm;
-    encryptionAlgorithm: CryptoEncryptionAlgorithm | undefined;
-    hashingAlgorithm: CryptoHashAlgorithm;
-} | {
-    type: "symmetric";
-    encryptionAlgorithm: CryptoEncryptionAlgorithm;
-    hashingAlgorithm: CryptoHashAlgorithm;
-};
-export interface StorageSecurityConfig {
-    name: string;
-    signature: StorageSecuritySpec;
-    encryption: StorageSecuritySpec;
-}
-export type KeyMetadata = {
-    id: string;
-    type: "symmetric";
-    encryptionAlgorithm: CryptoEncryptionAlgorithm;
-    hashAlgorithm: CryptoHashAlgorithm;
-    deviceBound: boolean;
-    ephemeral: boolean;
-} | {
-    id: string;
-    type: "asymmetric";
-    asymmetricKeyAlgorithm: CryptoSignatureAlgorithm;
-    encryptionAlgorithm?: CryptoEncryptionAlgorithm;
-    hashAlgorithm: CryptoHashAlgorithm;
-    deviceBound: boolean;
-    ephemeral: boolean;
-};
-export {};

package/dist/crypto-layer/CryptoLayerConfig.js

@@ -1,93 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var ProviderInitConfigKeyHandle_1, ProviderInitConfig_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProviderInitConfig = exports.ProviderInitConfigKeyHandle = void 0;
-const ts_serval_1 = require("@js-soft/ts-serval");
-const CryptoSerializable_1 = require("../CryptoSerializable");
-const CryptoLayerProviders_1 = require("./CryptoLayerProviders");
-const DeviceBoundKeyHandle_1 = require("./encryption/DeviceBoundKeyHandle");
-/**
- * Configuration for loading a key handle from a provider without loading on deserialization.
- */
-let ProviderInitConfigKeyHandle = ProviderInitConfigKeyHandle_1 = class ProviderInitConfigKeyHandle extends CryptoSerializable_1.CryptoSerializable {
-    static from(value) {
-        return ProviderInitConfigKeyHandle_1.fromAny(value);
-    }
-    static fromDeviceBoundHandle(handle) {
-        return ProviderInitConfigKeyHandle_1.from({
-            type: handle instanceof DeviceBoundKeyHandle_1.DeviceBoundKeyHandle ? "symmetric" : "asymmetric",
-            keyId: handle.id,
-            providerName: handle.providerName
-        });
-    }
-    async loadKeyHandle() {
-        const provider = (0, CryptoLayerProviders_1.getProvider)({ providerName: this.providerName });
-        switch (this.type) {
-            case "asymmetric":
-                return await provider.loadKeyPair(this.keyId);
-            case "symmetric":
-                return await provider.loadKey(this.keyId);
-        }
-    }
-};
-exports.ProviderInitConfigKeyHandle = ProviderInitConfigKeyHandle;
-__decorate([
-    (0, ts_serval_1.validate)(),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", String)
-], ProviderInitConfigKeyHandle.prototype, "type", void 0);
-__decorate([
-    (0, ts_serval_1.validate)(),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", String)
-], ProviderInitConfigKeyHandle.prototype, "keyId", void 0);
-__decorate([
-    (0, ts_serval_1.validate)(),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", String)
-], ProviderInitConfigKeyHandle.prototype, "providerName", void 0);
-exports.ProviderInitConfigKeyHandle = ProviderInitConfigKeyHandle = ProviderInitConfigKeyHandle_1 = __decorate([
-    (0, ts_serval_1.type)("ProviderInitConfigKeyHandle")
-], ProviderInitConfigKeyHandle);
-/**
- * Recursive configuration used to load providers and their dependencies.
- */
-let ProviderInitConfig = ProviderInitConfig_1 = class ProviderInitConfig extends CryptoSerializable_1.CryptoSerializable {
-    static from(value) {
-        return ProviderInitConfig_1.fromAny(value);
-    }
-};
-exports.ProviderInitConfig = ProviderInitConfig;
-__decorate([
-    (0, ts_serval_1.validate)(),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", String)
-], ProviderInitConfig.prototype, "providerName", void 0);
-__decorate([
-    (0, ts_serval_1.validate)({ nullable: true }),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", ProviderInitConfigKeyHandle)
-], ProviderInitConfig.prototype, "masterEncryptionKeyHandle", void 0);
-__decorate([
-    (0, ts_serval_1.validate)({ nullable: true }),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", ProviderInitConfigKeyHandle)
-], ProviderInitConfig.prototype, "masterSignatureKeyHandle", void 0);
-__decorate([
-    (0, ts_serval_1.validate)({ nullable: true }),
-    (0, ts_serval_1.serialize)(),
-    __metadata("design:type", ProviderInitConfig)
-], ProviderInitConfig.prototype, "requiredProvider", void 0);
-exports.ProviderInitConfig = ProviderInitConfig = ProviderInitConfig_1 = __decorate([
-    (0, ts_serval_1.type)("ProviderInitConfig")
-], ProviderInitConfig);
-//# sourceMappingURL=CryptoLayerConfig.js.map

package/dist/crypto-layer/CryptoLayerConfig.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CryptoLayerConfig.js","sourceRoot":"","sources":["../../src/crypto-layer/CryptoLayerConfig.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,kDAA+D;AAE/D,8DAA2D;AAI3D,iEAAqD;AACrD,4EAAyE;AAWzE;;GAEG;AAEI,IAAM,2BAA2B,mCAAjC,MAAM,2BAA4B,SAAQ,uCAAkB;IAaxD,MAAM,CAAC,IAAI,CAAC,KAAmC;QAClD,OAAO,6BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAEM,MAAM,CAAC,qBAAqB,CAC/B,MAAuD;QAEvD,OAAO,6BAA2B,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,MAAM,YAAY,2CAAoB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY;YACzE,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,YAAY,EAAE,MAAM,CAAC,YAAY;SACpC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,aAAa;QACtB,MAAM,QAAQ,GAAG,IAAA,kCAAW,EAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAElE,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,YAAY;gBACb,OAAO,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClD,KAAK,WAAW;gBACZ,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;CACJ,CAAA;AArCY,kEAA2B;AAG7B;IAFN,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;yDACe;AAIpB;IAFN,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;0DACS;AAId;IAFN,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;iEACgB;sCAXnB,2BAA2B;IADvC,IAAA,gBAAI,EAAC,6BAA6B,CAAC;GACvB,2BAA2B,CAqCvC;AASD;;GAEG;AAEI,IAAM,kBAAkB,0BAAxB,MAAM,kBAAmB,SAAQ,uCAAkB;IAiB/C,MAAM,CAAC,IAAI,CAAC,KAA0B;QACzC,OAAO,oBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;CACJ,CAAA;AApBY,gDAAkB;AAGpB;IAFN,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;wDACgB;AAIrB;IAFN,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;8BACuB,2BAA2B;qEAAC;AAIxD;IAFN,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;8BACsB,2BAA2B;oEAAC;AAIvD;IAFN,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;8BACc,kBAAkB;4DAAC;6BAfpC,kBAAkB;IAD9B,IAAA,gBAAI,EAAC,oBAAoB,CAAC;GACd,kBAAkB,CAoB9B"}

package/dist/crypto-layer/CryptoLayerProviders.d.ts

@@ -1,17 +0,0 @@
-import { Provider, ProviderFactoryFunctions, SecurityLevel } from "@nmshd/rs-crypto-types";
-import { CryptoLayerProviderIdentifier, KeyMetadata, ProviderInitConfig, StorageConfig, StorageSecurityConfig } from "./CryptoLayerConfig";
-export declare function initializeProviders(providerConfig: ProviderInitConfig, storageConfig: StorageConfig, factoryFunctions: ProviderFactoryFunctions): Promise<void>;
-export declare function newInitializedProviders(storageConfig: StorageConfig, factoryFunctions: ProviderFactoryFunctions, storageSecurityConfig?: StorageSecurityConfig[]): Promise<ProviderInitConfig | undefined>;
-/**
- * Returns an initialized provider with the given provider identifier if possible,
- * otherwise throws {@link CryptoError} with {@link CryptoErrorCode.CalThisProviderNotInitialized}.
- *
- * Providers need to be initialized via the {@link newInitializedProviders} or {@link initializeProviders} functions,
- * else throws {@link CryptoError} with  {@link CryptoErrorCode.CalProvidersNotInitialized}.
- */
-export declare function getProvider(identifier: CryptoLayerProviderIdentifier): Provider;
-export declare function hasProviderForSecurityLevel(securityLevel: SecurityLevel): boolean;
-export declare function providersInitialized(): boolean;
-export declare function clearProviders(): void;
-export declare function keyCountOfProvider(providerIdent: CryptoLayerProviderIdentifier): Promise<number>;
-export declare function keysOfProvider(providerIdent: CryptoLayerProviderIdentifier): Promise<KeyMetadata[]>;

package/dist/crypto-layer/CryptoLayerProviders.js

@@ -1,261 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.initializeProviders = initializeProviders;
-exports.newInitializedProviders = newInitializedProviders;
-exports.getProvider = getProvider;
-exports.hasProviderForSecurityLevel = hasProviderForSecurityLevel;
-exports.providersInitialized = providersInitialized;
-exports.clearProviders = clearProviders;
-exports.keyCountOfProvider = keyCountOfProvider;
-exports.keysOfProvider = keysOfProvider;
-const CryptoError_1 = require("../CryptoError");
-const CryptoErrorCode_1 = require("../CryptoErrorCode");
-const CryptoLayerConfig_1 = require("./CryptoLayerConfig");
-const CryptoLayerUtils_1 = require("./CryptoLayerUtils");
-const CryptoEncryptionHandle_1 = require("./encryption/CryptoEncryptionHandle");
-const CryptoSignaturesHandle_1 = require("./signature/CryptoSignaturesHandle");
-const SOFTWARE_PROVIDER_NAME = "SoftwareProvider";
-const ANDROID_PROVIDER_NAME = "ANDROID_PROVIDER";
-const ANDROID_HARDWARE_PROVIDER_NAME = "ANDROID_PROVIDER_SECURE_ELEMENT";
-const APPLE_SECURE_ENCLAVE_PROVIDER_NAME = "APPLE_SECURE_ENCLAVE";
-// const WINDOWS_PROVIDER_NAME = "";
-// const LINUX_PROVIDER_NAME = "Linux_Provider";
-const DEFAULT_STORAGE_SECURITY_CONFIG = [
-    {
-        name: ANDROID_HARDWARE_PROVIDER_NAME,
-        signature: {
-            type: "asymmetric",
-            asymmetricKeyAlgorithm: 4 /* CryptoSignatureAlgorithm.RSA_2048 */,
-            encryptionAlgorithm: undefined,
-            hashingAlgorithm: 1 /* CryptoHashAlgorithm.SHA256 */
-        },
-        encryption: {
-            type: "symmetric",
-            encryptionAlgorithm: 2 /* CryptoEncryptionAlgorithm.AES256_GCM */,
-            hashingAlgorithm: 1 /* CryptoHashAlgorithm.SHA256 */
-        }
-    },
-    {
-        name: ANDROID_PROVIDER_NAME,
-        signature: {
-            type: "asymmetric",
-            asymmetricKeyAlgorithm: 4 /* CryptoSignatureAlgorithm.RSA_2048 */,
-            encryptionAlgorithm: undefined,
-            hashingAlgorithm: 1 /* CryptoHashAlgorithm.SHA256 */
-        },
-        encryption: {
-            type: "symmetric",
-            encryptionAlgorithm: 2 /* CryptoEncryptionAlgorithm.AES256_GCM */,
-            hashingAlgorithm: 1 /* CryptoHashAlgorithm.SHA256 */
-        }
-    },
-    {
-        name: APPLE_SECURE_ENCLAVE_PROVIDER_NAME,
-        signature: {
-            type: "asymmetric",
-            asymmetricKeyAlgorithm: 1 /* CryptoSignatureAlgorithm.ECDSA_P256 */,
-            encryptionAlgorithm: undefined,
-            hashingAlgorithm: 1 /* CryptoHashAlgorithm.SHA256 */
-        },
-        encryption: {
-            type: "asymmetric",
-            asymmetricKeyAlgorithm: 1 /* CryptoSignatureAlgorithm.ECDSA_P256 */,
-            encryptionAlgorithm: 2 /* CryptoEncryptionAlgorithm.AES256_GCM */,
-            hashingAlgorithm: 1 /* CryptoHashAlgorithm.SHA256 */
-        }
-    }
-];
-const PROVIDERS = new Map();
-const PROVIDERS_BY_NAME = new Map();
-async function insertProviderIntoProviderMaps(provider) {
-    const [capabilities, name] = await Promise.all([provider.getCapabilities(), provider.providerName()]);
-    if (capabilities === undefined) {
-        throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalLoadingProvider, `Failed getting capabilities of provider: '${name}'`).setContext(insertProviderIntoProviderMaps);
-    }
-    const securityLevel = capabilities.min_security_level;
-    if (PROVIDERS.has(securityLevel)) {
-        throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalProvidersAlreadyInitialized, `Only one provider of a security level can be initialized at a time. Provider for security level '${securityLevel}' has already been loaded.`).setContext(insertProviderIntoProviderMaps);
-    }
-    PROVIDERS.set(securityLevel, provider);
-    PROVIDERS_BY_NAME.set(name, provider);
-}
-async function loadProviderFromName(providerName, providerImplConfig, factoryFunctions) {
-    const provider = await factoryFunctions.createProviderFromName(providerName, providerImplConfig);
-    if (provider === undefined) {
-        throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalLoadingProvider, `Failed initializing provider: '${providerName}'`).setContext(loadProviderFromName);
-    }
-    return provider;
-}
-async function additionalConfigFromProviderToBeInitializedConfig(providerConfig) {
-    const additionalConfig = [];
-    if (providerConfig.masterEncryptionKeyHandle) {
-        const handle = await providerConfig.masterEncryptionKeyHandle.loadKeyHandle();
-        if (providerConfig.masterEncryptionKeyHandle.type === "symmetric") {
-            additionalConfig.push({
-                StorageConfigSymmetricEncryption: handle
-            });
-        }
-        else {
-            additionalConfig.push({
-                StorageConfigAsymmetricEncryption: handle
-            });
-        }
-    }
-    if (providerConfig.masterSignatureKeyHandle) {
-        const handle = await providerConfig.masterSignatureKeyHandle.loadKeyHandle();
-        if (providerConfig.masterSignatureKeyHandle.type === "symmetric") {
-            additionalConfig.push({
-                StorageConfigHMAC: handle
-            });
-        }
-        else {
-            additionalConfig.push({
-                StorageConfigDSA: handle
-            });
-        }
-    }
-    return additionalConfig;
-}
-async function initializeProviders(providerConfig, storageConfig, factoryFunctions) {
-    if (providerConfig.requiredProvider !== undefined) {
-        await initializeProviders(providerConfig.requiredProvider, storageConfig, factoryFunctions);
-    }
-    const implConfig = {
-        additional_config: [storageConfig]
-    };
-    implConfig.additional_config.push(...(await additionalConfigFromProviderToBeInitializedConfig(providerConfig)));
-    const provider = await loadProviderFromName(providerConfig.providerName, implConfig, factoryFunctions);
-    await insertProviderIntoProviderMaps(provider);
-}
-async function newFallbackSoftwareProvider(softwareProviderName, storageConfig, factoryFunctions) {
-    const providerToBeInitializedConfig = CryptoLayerConfig_1.ProviderInitConfig.from({
-        providerName: softwareProviderName
-    });
-    await initializeProviders(providerToBeInitializedConfig, storageConfig, factoryFunctions);
-    return providerToBeInitializedConfig;
-}
-async function keyHandleFromStorageSecuritySpec(spec) {
-    if (spec.type === "symmetric") {
-        return await CryptoEncryptionHandle_1.CryptoEncryptionHandle.generateDeviceBoundKeyHandle({ securityLevel: "Hardware" }, spec.encryptionAlgorithm, spec.hashingAlgorithm);
-    }
-    return await CryptoSignaturesHandle_1.CryptoSignaturesHandle.generateDeviceBoundKeyPairHandle({ securityLevel: "Hardware" }, spec.asymmetricKeyAlgorithm, spec.encryptionAlgorithm, spec.hashingAlgorithm);
-}
-async function newHybridProvider(hwProviderName, storageConfig, storageSecurityConfig, factoryFunctions) {
-    const hwProviderToBeInitialized = CryptoLayerConfig_1.ProviderInitConfig.from({
-        providerName: hwProviderName
-    });
-    await initializeProviders(hwProviderToBeInitialized, storageConfig, factoryFunctions);
-    const [encryptionKeyHandle, signatureKeyHandle] = await Promise.all([
-        keyHandleFromStorageSecuritySpec(storageSecurityConfig.encryption),
-        keyHandleFromStorageSecuritySpec(storageSecurityConfig.signature)
-    ]);
-    const swProviderToBeInitialized = CryptoLayerConfig_1.ProviderInitConfig.from({
-        providerName: SOFTWARE_PROVIDER_NAME,
-        masterSignatureKeyHandle: CryptoLayerConfig_1.ProviderInitConfigKeyHandle.fromDeviceBoundHandle(signatureKeyHandle),
-        masterEncryptionKeyHandle: CryptoLayerConfig_1.ProviderInitConfigKeyHandle.fromDeviceBoundHandle(encryptionKeyHandle)
-    });
-    await initializeProviders(swProviderToBeInitialized, storageConfig, factoryFunctions);
-    swProviderToBeInitialized.requiredProvider = hwProviderToBeInitialized;
-    return swProviderToBeInitialized;
-}
-async function newInitializedProviders(storageConfig, factoryFunctions, storageSecurityConfig) {
-    const getStorageSecurityConfig = (providerName) => {
-        var _a;
-        return (_a = storageSecurityConfig === null || storageSecurityConfig === void 0 ? void 0 : storageSecurityConfig.find((config) => config.name === providerName)) !== null && _a !== void 0 ? _a : DEFAULT_STORAGE_SECURITY_CONFIG.find((config) => config.name === providerName);
-    };
-    const basicProviderImplConfig = {
-        additional_config: [storageConfig]
-    };
-    const providerNamesAndCaps = await factoryFunctions.getProviderCapabilities(basicProviderImplConfig);
-    const hardwareProviderNamesAndCaps = providerNamesAndCaps
-        .filter(([, cap]) => cap.min_security_level === "Hardware")
-        .filter(([name]) => getStorageSecurityConfig(name));
-    const softwareProviderNamesAndCaps = providerNamesAndCaps.filter(([, cap]) => cap.min_security_level === "Software");
-    if (hardwareProviderNamesAndCaps.length === 0) {
-        if (softwareProviderNamesAndCaps.length === 0) {
-            return undefined;
-        }
-        const nonFallbackSoftwareProviders = softwareProviderNamesAndCaps.filter(([name]) => name !== SOFTWARE_PROVIDER_NAME);
-        if (nonFallbackSoftwareProviders.length !== 0) {
-            return await newFallbackSoftwareProvider(nonFallbackSoftwareProviders[0][0], storageConfig, factoryFunctions);
-        }
-        return await newFallbackSoftwareProvider(SOFTWARE_PROVIDER_NAME, storageConfig, factoryFunctions);
-    }
-    const hwProviderName = hardwareProviderNamesAndCaps[0][0];
-    const hwStorageSecurityConfig = getStorageSecurityConfig(hwProviderName);
-    if (hwStorageSecurityConfig === undefined) {
-        return undefined;
-    }
-    return await newHybridProvider(hwProviderName, storageConfig, hwStorageSecurityConfig, factoryFunctions);
-}
-/**
- * Returns an initialized provider with the given provider identifier if possible,
- * otherwise throws {@link CryptoError} with {@link CryptoErrorCode.CalThisProviderNotInitialized}.
- *
- * Providers need to be initialized via the {@link newInitializedProviders} or {@link initializeProviders} functions,
- * else throws {@link CryptoError} with  {@link CryptoErrorCode.CalProvidersNotInitialized}.
- */
-function getProvider(identifier) {
-    if (PROVIDERS.size === 0) {
-        throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalProvidersNotInitialized, "Failed to get providers as providers are not initialized.").setContext(getProvider);
-    }
-    let provider;
-    if ("securityLevel" in identifier) {
-        provider = PROVIDERS.get(identifier.securityLevel);
-    }
-    if ("providerName" in identifier) {
-        provider = PROVIDERS_BY_NAME.get(identifier.providerName);
-    }
-    if (provider === undefined) {
-        throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalThisProviderNotInitialized, `Failed finding provider with identifier ${JSON.stringify(identifier)}`).setContext(getProvider);
-    }
-    return provider;
-}
-function hasProviderForSecurityLevel(securityLevel) {
-    if (PROVIDERS.size === 0) {
-        throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalProvidersNotInitialized, "Failed to get providers as providers are not initialized.").setContext(hasProviderForSecurityLevel);
-    }
-    return PROVIDERS.has(securityLevel);
-}
-function providersInitialized() {
-    if (PROVIDERS.size !== PROVIDERS_BY_NAME.size) {
-        throw new CryptoError_1.CryptoError(CryptoErrorCode_1.CryptoErrorCode.CalLoadingProvider, `The maps providers by name and providers by security level are out of sync. (${PROVIDERS_BY_NAME.size} != ${PROVIDERS.size})`).setContext(providersInitialized);
-    }
-    return PROVIDERS.size !== 0;
-}
-function clearProviders() {
-    PROVIDERS.clear();
-    PROVIDERS_BY_NAME.clear();
-}
-async function keyCountOfProvider(providerIdent) {
-    const provider = getProvider(providerIdent);
-    return (await provider.getAllKeys()).length;
-}
-async function keysOfProvider(providerIdent) {
-    const provider = getProvider(providerIdent);
-    const keys = await provider.getAllKeys();
-    return keys.map(([id, spec]) => {
-        if ("KeySpec" in spec) {
-            return {
-                id: id,
-                type: "symmetric",
-                encryptionAlgorithm: CryptoLayerUtils_1.CryptoLayerUtils.cryptoEncryptionAlgorithmFromCipher(spec.KeySpec.cipher),
-                hashAlgorithm: CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashAlgorithmFromCryptoHash(spec.KeySpec.signing_hash),
-                deviceBound: spec.KeySpec.non_exportable,
-                ephemeral: spec.KeySpec.ephemeral
-            };
-        }
-        return {
-            id: id,
-            type: "asymmetric",
-            encryptionAlgorithm: spec.KeyPairSpec.cipher
-                ? CryptoLayerUtils_1.CryptoLayerUtils.cryptoEncryptionAlgorithmFromCipher(spec.KeyPairSpec.cipher)
-                : undefined,
-            asymmetricKeyAlgorithm: CryptoLayerUtils_1.CryptoLayerUtils.cryptoSignatureAlgorithmFromAsymmetricKeySpec(spec.KeyPairSpec.asym_spec),
-            hashAlgorithm: CryptoLayerUtils_1.CryptoLayerUtils.cryptoHashAlgorithmFromCryptoHash(spec.KeyPairSpec.signing_hash),
-            deviceBound: spec.KeyPairSpec.non_exportable,
-            ephemeral: spec.KeyPairSpec.ephemeral
-        };
-    });
-}
-//# sourceMappingURL=CryptoLayerProviders.js.map

package/dist/crypto-layer/CryptoLayerProviders.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CryptoLayerProviders.js","sourceRoot":"","sources":["../../src/crypto-layer/CryptoLayerProviders.ts"],"names":[],"mappings":";;AA+JA,kDAkBC;AAgED,0DA+CC;AASD,kCAwBC;AAED,kEASC;AAED,oDASC;AAED,wCAGC;AAED,gDAIC;AAED,wCA8BC;AAzXD,gDAA6C;AAC7C,wDAAqD;AAIrD,2DAQ6B;AAC7B,yDAAsD;AACtD,gFAA6E;AAE7E,+EAA4E;AAG5E,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAClD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACjD,MAAM,8BAA8B,GAAG,iCAAiC,CAAC;AACzE,MAAM,kCAAkC,GAAG,sBAAsB,CAAC;AAClE,oCAAoC;AACpC,gDAAgD;AAEhD,MAAM,+BAA+B,GAA4B;IAC7D;QACI,IAAI,EAAE,8BAA8B;QACpC,SAAS,EAAE;YACP,IAAI,EAAE,YAAY;YAClB,sBAAsB,2CAAmC;YACzD,mBAAmB,EAAE,SAAS;YAC9B,gBAAgB,oCAA4B;SAC/C;QACD,UAAU,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,mBAAmB,8CAAsC;YACzD,gBAAgB,oCAA4B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE;YACP,IAAI,EAAE,YAAY;YAClB,sBAAsB,2CAAmC;YACzD,mBAAmB,EAAE,SAAS;YAC9B,gBAAgB,oCAA4B;SAC/C;QACD,UAAU,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,mBAAmB,8CAAsC;YACzD,gBAAgB,oCAA4B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,kCAAkC;QACxC,SAAS,EAAE;YACP,IAAI,EAAE,YAAY;YAClB,sBAAsB,6CAAqC;YAC3D,mBAAmB,EAAE,SAAS;YAC9B,gBAAgB,oCAA4B;SAC/C;QACD,UAAU,EAAE;YACR,IAAI,EAAE,YAAY;YAClB,sBAAsB,6CAAqC;YAC3D,mBAAmB,8CAAsC;YACzD,gBAAgB,oCAA4B;SAC/C;KACJ;CACJ,CAAC;AAEF,MAAM,SAAS,GAAiC,IAAI,GAAG,EAAE,CAAC;AAC1D,MAAM,iBAAiB,GAA0B,IAAI,GAAG,EAAE,CAAC;AAE3D,KAAK,UAAU,8BAA8B,CAAC,QAAkB;IAC5D,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAEtG,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,kBAAkB,EAClC,6CAA6C,IAAI,GAAG,CACvD,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,aAAa,GAAG,YAAY,CAAC,kBAAkB,CAAC;IAEtD,IAAI,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,8BAA8B,EAC9C,oGAAoG,aAAa,4BAA4B,CAChJ,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,oBAAoB,CAC/B,YAAoB,EACpB,kBAAsC,EACtC,gBAA0C;IAE1C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,sBAAsB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAEjG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,kBAAkB,EAClC,kCAAkC,YAAY,GAAG,CACpD,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,iDAAiD,CAC5D,cAAkC;IAElC,MAAM,gBAAgB,GAAG,EAAE,CAAC;IAE5B,IAAI,cAAc,CAAC,yBAAyB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,yBAAyB,CAAC,aAAa,EAAE,CAAC;QAC9E,IAAI,cAAc,CAAC,yBAAyB,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChE,gBAAgB,CAAC,IAAI,CAAC;gBAClB,gCAAgC,EAAE,MAAM;aAC3C,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,gBAAgB,CAAC,IAAI,CAAC;gBAClB,iCAAiC,EAAE,MAAM;aAC5C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAI,cAAc,CAAC,wBAAwB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,wBAAwB,CAAC,aAAa,EAAE,CAAC;QAC7E,IAAI,cAAc,CAAC,wBAAwB,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/D,gBAAgB,CAAC,IAAI,CAAC;gBAClB,iBAAiB,EAAE,MAAM;aAC5B,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,gBAAgB,CAAC,IAAI,CAAC;gBAClB,gBAAgB,EAAE,MAAM;aAC3B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC5B,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACrC,cAAkC,EAClC,aAA4B,EAC5B,gBAA0C;IAE1C,IAAI,cAAc,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,mBAAmB,CAAC,cAAc,CAAC,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,UAAU,GAAuB;QACnC,iBAAiB,EAAE,CAAC,aAAa,CAAC;KACrC,CAAC;IAEF,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,iDAAiD,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAEhH,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAEvG,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,2BAA2B,CACtC,oBAA4B,EAC5B,aAA4B,EAC5B,gBAA0C;IAE1C,MAAM,6BAA6B,GAAG,sCAAkB,CAAC,IAAI,CAAC;QAC1D,YAAY,EAAE,oBAAoB;KACrC,CAAC,CAAC;IAEH,MAAM,mBAAmB,CAAC,6BAA6B,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAE1F,OAAO,6BAA6B,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC3C,IAAyB;IAEzB,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,MAAM,+CAAsB,CAAC,4BAA4B,CAC5D,EAAE,aAAa,EAAE,UAAU,EAAE,EAC7B,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,gBAAgB,CACxB,CAAC;IACN,CAAC;IACD,OAAO,MAAM,+CAAsB,CAAC,gCAAgC,CAChE,EAAE,aAAa,EAAE,UAAU,EAAE,EAC7B,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,gBAAgB,CACxB,CAAC;AACN,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,cAAsB,EACtB,aAA4B,EAC5B,qBAA4C,EAC5C,gBAA0C;IAE1C,MAAM,yBAAyB,GAAG,sCAAkB,CAAC,IAAI,CAAC;QACtD,YAAY,EAAE,cAAc;KAC/B,CAAC,CAAC;IAEH,MAAM,mBAAmB,CAAC,yBAAyB,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAEtF,MAAM,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChE,gCAAgC,CAAC,qBAAqB,CAAC,UAAU,CAAC;QAClE,gCAAgC,CAAC,qBAAqB,CAAC,SAAS,CAAC;KACpE,CAAC,CAAC;IAEH,MAAM,yBAAyB,GAAG,sCAAkB,CAAC,IAAI,CAAC;QACtD,YAAY,EAAE,sBAAsB;QACpC,wBAAwB,EAAE,+CAA2B,CAAC,qBAAqB,CAAC,kBAAkB,CAAC;QAC/F,yBAAyB,EAAE,+CAA2B,CAAC,qBAAqB,CAAC,mBAAmB,CAAC;KACpG,CAAC,CAAC;IAEH,MAAM,mBAAmB,CAAC,yBAAyB,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAEtF,yBAAyB,CAAC,gBAAgB,GAAG,yBAAyB,CAAC;IAEvE,OAAO,yBAAyB,CAAC;AACrC,CAAC;AAEM,KAAK,UAAU,uBAAuB,CACzC,aAA4B,EAC5B,gBAA0C,EAC1C,qBAA+C;IAE/C,MAAM,wBAAwB,GAAG,CAAC,YAAoB,EAAE,EAAE;;QACtD,OAAA,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,mCACrE,+BAA+B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAA;KAAA,CAAC;IAEnF,MAAM,uBAAuB,GAAuB;QAChD,iBAAiB,EAAE,CAAC,aAAa,CAAC;KACrC,CAAC;IACF,MAAM,oBAAoB,GAAG,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IACrG,MAAM,4BAA4B,GAAG,oBAAoB;SACpD,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,KAAK,UAAU,CAAC;SAC1D,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,MAAM,4BAA4B,GAAG,oBAAoB,CAAC,MAAM,CAC5D,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,KAAK,UAAU,CACrD,CAAC;IAEF,IAAI,4BAA4B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,4BAA4B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,4BAA4B,GAAG,4BAA4B,CAAC,MAAM,CACpE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,sBAAsB,CAC9C,CAAC;QACF,IAAI,4BAA4B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,2BAA2B,CACpC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClC,aAAa,EACb,gBAAgB,CACnB,CAAC;QACN,CAAC;QACD,OAAO,MAAM,2BAA2B,CAAC,sBAAsB,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,cAAc,GAAG,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,uBAAuB,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAEzE,IAAI,uBAAuB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,iBAAiB,CAAC,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;AAC7G,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,UAAyC;IACjE,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,0BAA0B,EAC1C,2DAA2D,CAC9D,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,QAA8B,CAAC;IAEnC,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;QAChC,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QAC/B,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,6BAA6B,EAC7C,2CAA2C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAC1E,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,SAAgB,2BAA2B,CAAC,aAA4B;IACpE,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,0BAA0B,EAC1C,2DAA2D,CAC9D,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,oBAAoB;IAChC,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,yBAAW,CACjB,iCAAe,CAAC,kBAAkB,EAClC,gFAAgF,iBAAiB,CAAC,IAAI,OAAO,SAAS,CAAC,IAAI,GAAG,CACjI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAgB,cAAc;IAC1B,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,iBAAiB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,aAA4C;IACjF,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAE5C,OAAO,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,aAA4C;IAC7E,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;IAEzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;QAC3B,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO;gBACH,EAAE,EAAE,EAAE;gBACN,IAAI,EAAE,WAAW;gBACjB,mBAAmB,EAAE,mCAAgB,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC9F,aAAa,EAAE,mCAAgB,CAAC,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC5F,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBACxC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;aACpC,CAAC;QACN,CAAC;QAED,OAAO;YACH,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,YAAY;YAClB,mBAAmB,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;gBACxC,CAAC,CAAC,mCAAgB,CAAC,mCAAmC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC/E,CAAC,CAAC,SAAS;YACf,sBAAsB,EAAE,mCAAgB,CAAC,6CAA6C,CAClF,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7B;YACD,aAAa,EAAE,mCAAgB,CAAC,iCAAiC,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;YAChG,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,cAAc;YAC5C,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;SACxC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/crypto-layer/CryptoLayerUtils.d.ts

@@ -1,15 +0,0 @@
-import { Argon2Options, AsymmetricKeySpec, Cipher, CryptoHash, KDF } from "@nmshd/rs-crypto-types";
-import { CryptoDerivationAlgorithm, CryptoEncryptionAlgorithm } from "..";
-import { CryptoExchangeAlgorithm } from "../exchange/CryptoExchange";
-import { CryptoHashAlgorithm } from "../hash/CryptoHash";
-import { CryptoSignatureAlgorithm } from "../signature/CryptoSignatureAlgorithm";
-export declare class CryptoLayerUtils {
-    static asymSpecFromCryptoExchangeOrSignatureAlgorithm(algorithm: CryptoExchangeAlgorithm | CryptoSignatureAlgorithm): AsymmetricKeySpec;
-    static cryptoSignatureAlgorithmFromAsymmetricKeySpec(spec: AsymmetricKeySpec): CryptoSignatureAlgorithm;
-    static cryptoHashAlgorithmFromCryptoHash(cryptoHash: CryptoHash): CryptoHashAlgorithm;
-    static cryptoHashFromCryptoHashAlgorithm(algorithm: CryptoHashAlgorithm): CryptoHash;
-    static cipherFromCryptoEncryptionAlgorithm(alg: CryptoEncryptionAlgorithm): Cipher;
-    static cryptoEncryptionAlgorithmFromCipher(cipher: Cipher): CryptoEncryptionAlgorithm;
-    static argon2OptionsFromIterationsMemLimitAndParallelism(iterations: number, memlimit: number, parallelism: number): Argon2Options;
-    static kdfFromCryptoDerivation(derivationAlgorithm: CryptoDerivationAlgorithm, iterations: number, memlimit: number, parallelism: number): KDF;
-}