@ohos-ports/react-native-quick-crypto 0.0.0-stage → 1.1.8-beta.0

package/lib/module/keys/index.js

@@ -0,0 +1,246 @@
+"use strict";
+
+import { AsymmetricKeyObject, CryptoKey, KeyObject, SecretKeyObject, PublicKeyObject, PrivateKeyObject } from './classes';
+import { generateKeyPair, generateKeyPairSync } from './generateKeyPair';
+import { createSign, createVerify, sign, verify, Sign, Verify } from './signVerify';
+import { publicEncrypt, publicDecrypt, privateEncrypt, privateDecrypt } from './publicCipher';
+import { isCryptoKey, parseKeyEncoding, parsePrivateKeyEncoding, parsePublicKeyEncoding } from './utils';
+import { NitroModules } from 'react-native-nitro-modules';
+import { binaryLikeToArrayBuffer as toAB, isStringOrBuffer, KFormatType, KeyEncoding, KeyType } from '../utils';
+import { randomBytes } from '../random';
+function isRawFormat(format) {
+  return format === 'raw-public' || format === 'raw-private' || format === 'raw-seed';
+}
+function createPublicKeyFromRaw(input) {
+  if (input.format !== 'raw-public') {
+    throw new Error('Invalid format for createPublicKey raw import');
+  }
+  if (typeof input.asymmetricKeyType !== 'string') {
+    throw new Error('options.asymmetricKeyType is required for raw key import');
+  }
+  if (input.asymmetricKeyType === 'ec' && !input.namedCurve) {
+    throw new Error('options.namedCurve is required for EC raw key import');
+  }
+  const handle = NitroModules.createHybridObject('KeyObjectHandle');
+  handle.initRawPublic(input.asymmetricKeyType, toAB(input.key), input.namedCurve);
+  return new PublicKeyObject(handle);
+}
+function createPrivateKeyFromRaw(input) {
+  if (input.format !== 'raw-private' && input.format !== 'raw-seed') {
+    throw new Error('Invalid format for createPrivateKey raw import');
+  }
+  if (typeof input.asymmetricKeyType !== 'string') {
+    throw new Error('options.asymmetricKeyType is required for raw key import');
+  }
+  if (input.asymmetricKeyType === 'ec' && !input.namedCurve) {
+    throw new Error('options.namedCurve is required for EC raw key import');
+  }
+  const handle = NitroModules.createHybridObject('KeyObjectHandle');
+  if (input.format === 'raw-seed') {
+    handle.initRawSeed(input.asymmetricKeyType, toAB(input.key));
+  } else {
+    handle.initRawPrivate(input.asymmetricKeyType, toAB(input.key), input.namedCurve);
+  }
+  return new PrivateKeyObject(handle);
+}
+function createSecretKey(key) {
+  const keyBuffer = toAB(key);
+  return KeyObject.createKeyObject('secret', keyBuffer);
+}
+function prepareAsymmetricKey(key, isPublic) {
+  if (key instanceof KeyObject) {
+    if (isPublic) {
+      // createPublicKey can accept either a public key or extract public from private
+      if (key.type === 'secret') {
+        throw new Error('Cannot create public key from secret key');
+      }
+      // Export as SPKI (public key format) - works for both public and private keys
+      const exported = key.handle.exportKey(KFormatType.DER, KeyEncoding.SPKI);
+      return {
+        data: exported,
+        format: 'der',
+        type: 'spki'
+      };
+    } else {
+      // createPrivateKey requires a private key
+      if (key.type !== 'private') {
+        throw new Error('Key must be a private key');
+      }
+      const exported = key.handle.exportKey(KFormatType.DER, KeyEncoding.PKCS8);
+      return {
+        data: exported,
+        format: 'der',
+        type: 'pkcs8'
+      };
+    }
+  }
+  if (isCryptoKey(key)) {
+    const cryptoKey = key;
+    return prepareAsymmetricKey(cryptoKey.keyObject, isPublic);
+  }
+  if (isStringOrBuffer(key)) {
+    // Detect PEM format from string content
+    const isPem = typeof key === 'string' && key.includes('-----BEGIN');
+    return {
+      data: toAB(key),
+      format: isPem ? 'pem' : undefined
+    };
+  }
+  if (typeof key === 'object' && 'key' in key) {
+    const keyObj = key;
+    const {
+      key: data,
+      format,
+      type,
+      passphrase
+    } = keyObj;
+    const passphraseAB = passphrase !== undefined ? toAB(passphrase) : undefined;
+    if (data instanceof KeyObject) {
+      return prepareAsymmetricKey(data, isPublic);
+    }
+    if (isCryptoKey(data)) {
+      return prepareAsymmetricKey(data.keyObject, isPublic);
+    }
+    if (!isStringOrBuffer(data)) {
+      throw new Error('Invalid key data type');
+    }
+
+    // For PEM format with string data, convert to ArrayBuffer
+    if ((format === 'pem' || typeof data === 'string' && data.includes('-----BEGIN')) && typeof data === 'string') {
+      return {
+        data: toAB(data),
+        format: 'pem',
+        type,
+        passphrase: passphraseAB
+      };
+    }
+
+    // Filter to only 'pem' or 'der' — JWK and raw formats are handled
+    // separately via dedicated paths.
+    const filteredFormat = format === 'pem' || format === 'der' ? format : undefined;
+    return {
+      data: toAB(data),
+      format: filteredFormat,
+      type,
+      passphrase: passphraseAB
+    };
+  }
+  throw new Error('Invalid key input');
+}
+function createPublicKey(key) {
+  if (typeof key === 'object' && 'key' in key && isRawFormat(key.format)) {
+    if (key.format !== 'raw-public') {
+      throw new Error(`Invalid format ${key.format} for createPublicKey — only 'raw-public' is allowed`);
+    }
+    return createPublicKeyFromRaw(key);
+  }
+  if (typeof key === 'object' && 'key' in key && key.format === 'jwk') {
+    const handle = NitroModules.createHybridObject('KeyObjectHandle');
+    const keyType = handle.initJwk(key.key);
+    if (keyType === undefined) {
+      throw new Error('Failed to import JWK');
+    }
+    if (keyType === KeyType.PRIVATE) {
+      // Extract public from private
+      const exported = handle.exportKey(KFormatType.DER, KeyEncoding.SPKI);
+      const pubHandle = NitroModules.createHybridObject('KeyObjectHandle');
+      pubHandle.init(KeyType.PUBLIC, exported, KFormatType.DER, KeyEncoding.SPKI);
+      return new PublicKeyObject(pubHandle);
+    }
+    return new PublicKeyObject(handle);
+  }
+  const {
+    data,
+    format,
+    type,
+    passphrase
+  } = prepareAsymmetricKey(key, true);
+
+  // Map format string to KFormatType enum
+  let kFormat;
+  if (format === 'pem') kFormat = KFormatType.PEM;else if (format === 'der') kFormat = KFormatType.DER;
+
+  // Map type string to KeyEncoding enum
+  let kType;
+  if (type === 'spki') kType = KeyEncoding.SPKI;else if (type === 'pkcs1') kType = KeyEncoding.PKCS1;
+  return KeyObject.createKeyObject('public', data, kFormat, kType, passphrase);
+}
+function createPrivateKey(key) {
+  if (typeof key === 'object' && 'key' in key && isRawFormat(key.format)) {
+    if (key.format === 'raw-public') {
+      throw new Error("Invalid format 'raw-public' for createPrivateKey");
+    }
+    return createPrivateKeyFromRaw(key);
+  }
+  if (typeof key === 'object' && 'key' in key && key.format === 'jwk') {
+    const handle = NitroModules.createHybridObject('KeyObjectHandle');
+    const keyType = handle.initJwk(key.key);
+    if (keyType === undefined || keyType !== KeyType.PRIVATE) {
+      throw new Error('Failed to import private key from JWK');
+    }
+    return new PrivateKeyObject(handle);
+  }
+  const {
+    data,
+    format,
+    type,
+    passphrase
+  } = prepareAsymmetricKey(key, false);
+
+  // Map format string to KFormatType enum
+  let kFormat;
+  if (format === 'pem') kFormat = KFormatType.PEM;else if (format === 'der') kFormat = KFormatType.DER;
+
+  // Map type string to KeyEncoding enum
+  let kType;
+  if (type === 'pkcs8') kType = KeyEncoding.PKCS8;else if (type === 'pkcs1') kType = KeyEncoding.PKCS1;else if (type === 'sec1') kType = KeyEncoding.SEC1;
+  return KeyObject.createKeyObject('private', data, kFormat, kType, passphrase);
+}
+function generateKeySync(type, options) {
+  if (typeof type !== 'string') {
+    throw new TypeError('The "type" argument must be a string');
+  }
+  if (typeof options !== 'object' || options === null) {
+    throw new TypeError('The "options" argument must be an object');
+  }
+  const {
+    length
+  } = options;
+  if (typeof length !== 'number' || !Number.isInteger(length)) {
+    throw new TypeError('The "options.length" property must be an integer');
+  }
+  switch (type) {
+    case 'hmac':
+      if (length < 8 || length > 2 ** 31 - 1) {
+        throw new RangeError('The "options.length" property must be >= 8 and <= 2147483647');
+      }
+      break;
+    case 'aes':
+      if (length !== 128 && length !== 192 && length !== 256) {
+        throw new RangeError('The "options.length" property must be 128, 192, or 256');
+      }
+      break;
+    default:
+      throw new TypeError(`The "type" argument must be 'aes' or 'hmac'. Received '${type}'`);
+  }
+  const keyBytes = length / 8;
+  const keyMaterial = randomBytes(keyBytes);
+  return createSecretKey(keyMaterial);
+}
+function generateKey(type, options, callback) {
+  if (typeof callback !== 'function') {
+    throw new TypeError('The "callback" argument must be a function');
+  }
+  try {
+    const key = generateKeySync(type, options);
+    process.nextTick(callback, null, key);
+  } catch (err) {
+    process.nextTick(callback, err);
+  }
+}
+export {
+// Node Public API
+createSecretKey, createPublicKey, createPrivateKey, CryptoKey, generateKey, generateKeySync, generateKeyPair, generateKeyPairSync, AsymmetricKeyObject, KeyObject, createSign, createVerify, sign, verify, Sign, Verify, publicEncrypt, publicDecrypt, privateEncrypt, privateDecrypt,
+// Node Internal API
+parsePublicKeyEncoding, parsePrivateKeyEncoding, parseKeyEncoding, SecretKeyObject, PublicKeyObject, PrivateKeyObject, isCryptoKey };
+//# sourceMappingURL=index.js.map

package/lib/module/keys/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["AsymmetricKeyObject","CryptoKey","KeyObject","SecretKeyObject","PublicKeyObject","PrivateKeyObject","generateKeyPair","generateKeyPairSync","createSign","createVerify","sign","verify","Sign","Verify","publicEncrypt","publicDecrypt","privateEncrypt","privateDecrypt","isCryptoKey","parseKeyEncoding","parsePrivateKeyEncoding","parsePublicKeyEncoding","NitroModules","binaryLikeToArrayBuffer","toAB","isStringOrBuffer","KFormatType","KeyEncoding","KeyType","randomBytes","isRawFormat","format","createPublicKeyFromRaw","input","Error","asymmetricKeyType","namedCurve","handle","createHybridObject","initRawPublic","key","createPrivateKeyFromRaw","initRawSeed","initRawPrivate","createSecretKey","keyBuffer","createKeyObject","prepareAsymmetricKey","isPublic","type","exported","exportKey","DER","SPKI","data","PKCS8","cryptoKey","keyObject","isPem","includes","undefined","keyObj","passphrase","passphraseAB","filteredFormat","createPublicKey","keyType","initJwk","PRIVATE","pubHandle","init","PUBLIC","kFormat","PEM","kType","PKCS1","createPrivateKey","SEC1","generateKeySync","options","TypeError","length","Number","isInteger","RangeError","keyBytes","keyMaterial","generateKey","callback","process","nextTick","err"],"sourceRoot":"../../../src","sources":["keys/index.ts"],"mappings":";;AAAA,SACEA,mBAAmB,EACnBC,SAAS,EACTC,SAAS,EACTC,eAAe,EACfC,eAAe,EACfC,gBAAgB,QACX,WAAW;AAClB,SAASC,eAAe,EAAEC,mBAAmB,QAAQ,mBAAmB;AACxE,SACEC,UAAU,EACVC,YAAY,EACZC,IAAI,EACJC,MAAM,EACNC,IAAI,EACJC,MAAM,QACD,cAAc;AACrB,SACEC,aAAa,EACbC,aAAa,EACbC,cAAc,EACdC,cAAc,QACT,gBAAgB;AACvB,SACEC,WAAW,EACXC,gBAAgB,EAChBC,uBAAuB,EACvBC,sBAAsB,QACjB,SAAS;AAChB,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SACEC,uBAAuB,IAAIC,IAAI,EAC/BC,gBAAgB,EAChBC,WAAW,EACXC,WAAW,EACXC,OAAO,QACF,UAAU;AACjB,SAASC,WAAW,QAAQ,WAAW;AAcvC,SAASC,WAAWA,CAClBC,MAA0B,EAC2B;EACrD,OACEA,MAAM,KAAK,YAAY,IAAIA,MAAM,KAAK,aAAa,IAAIA,MAAM,KAAK,UAAU;AAEhF;AAEA,SAASC,sBAAsBA,CAACC,KAAqB,EAAmB;EACtE,IAAIA,KAAK,CAACF,MAAM,KAAK,YAAY,EAAE;IACjC,MAAM,IAAIG,KAAK,CAAC,+CAA+C,CAAC;EAClE;EACA,IAAI,OAAOD,KAAK,CAACE,iBAAiB,KAAK,QAAQ,EAAE;IAC/C,MAAM,IAAID,KAAK,CAAC,0DAA0D,CAAC;EAC7E;EACA,IAAID,KAAK,CAACE,iBAAiB,KAAK,IAAI,IAAI,CAACF,KAAK,CAACG,UAAU,EAAE;IACzD,MAAM,IAAIF,KAAK,CAAC,sDAAsD,CAAC;EACzE;EACA,MAAMG,MAAM,GACVf,YAAY,CAACgB,kBAAkB,CAAkB,iBAAiB,CAAC;EACrED,MAAM,CAACE,aAAa,CAClBN,KAAK,CAACE,iBAAiB,EACvBX,IAAI,CAACS,KAAK,CAACO,GAAiB,CAAC,EAC7BP,KAAK,CAACG,UACR,CAAC;EACD,OAAO,IAAIhC,eAAe,CAACiC,MAAM,CAAC;AACpC;AAEA,SAASI,uBAAuBA,CAACR,KAAqB,EAAoB;EACxE,IAAIA,KAAK,CAACF,MAAM,KAAK,aAAa,IAAIE,KAAK,CAACF,MAAM,KAAK,UAAU,EAAE;IACjE,MAAM,IAAIG,KAAK,CAAC,gDAAgD,CAAC;EACnE;EACA,IAAI,OAAOD,KAAK,CAACE,iBAAiB,KAAK,QAAQ,EAAE;IAC/C,MAAM,IAAID,KAAK,CAAC,0DAA0D,CAAC;EAC7E;EACA,IAAID,KAAK,CAACE,iBAAiB,KAAK,IAAI,IAAI,CAACF,KAAK,CAACG,UAAU,EAAE;IACzD,MAAM,IAAIF,KAAK,CAAC,sDAAsD,CAAC;EACzE;EACA,MAAMG,MAAM,GACVf,YAAY,CAACgB,kBAAkB,CAAkB,iBAAiB,CAAC;EACrE,IAAIL,KAAK,CAACF,MAAM,KAAK,UAAU,EAAE;IAC/BM,MAAM,CAACK,WAAW,CAACT,KAAK,CAACE,iBAAiB,EAAEX,IAAI,CAACS,KAAK,CAACO,GAAiB,CAAC,CAAC;EAC5E,CAAC,MAAM;IACLH,MAAM,CAACM,cAAc,CACnBV,KAAK,CAACE,iBAAiB,EACvBX,IAAI,CAACS,KAAK,CAACO,GAAiB,CAAC,EAC7BP,KAAK,CAACG,UACR,CAAC;EACH;EACA,OAAO,IAAI/B,gBAAgB,CAACgC,MAAM,CAAC;AACrC;AAEA,SAASO,eAAeA,CAACJ,GAAe,EAAmB;EACzD,MAAMK,SAAS,GAAGrB,IAAI,CAACgB,GAAG,CAAC;EAC3B,OAAOtC,SAAS,CAAC4C,eAAe,CAAC,QAAQ,EAAED,SAAS,CAAC;AACvD;AAEA,SAASE,oBAAoBA,CAC3BP,GAAa,EACbQ,QAAiB,EAMjB;EACA,IAAIR,GAAG,YAAYtC,SAAS,EAAE;IAC5B,IAAI8C,QAAQ,EAAE;MACZ;MACA,IAAIR,GAAG,CAACS,IAAI,KAAK,QAAQ,EAAE;QACzB,MAAM,IAAIf,KAAK,CAAC,0CAA0C,CAAC;MAC7D;MACA;MACA,MAAMgB,QAAQ,GAAGV,GAAG,CAACH,MAAM,CAACc,SAAS,CAACzB,WAAW,CAAC0B,GAAG,EAAEzB,WAAW,CAAC0B,IAAI,CAAC;MACxE,OAAO;QAAEC,IAAI,EAAEJ,QAAQ;QAAEnB,MAAM,EAAE,KAAK;QAAEkB,IAAI,EAAE;MAAO,CAAC;IACxD,CAAC,MAAM;MACL;MACA,IAAIT,GAAG,CAACS,IAAI,KAAK,SAAS,EAAE;QAC1B,MAAM,IAAIf,KAAK,CAAC,2BAA2B,CAAC;MAC9C;MACA,MAAMgB,QAAQ,GAAGV,GAAG,CAACH,MAAM,CAACc,SAAS,CAACzB,WAAW,CAAC0B,GAAG,EAAEzB,WAAW,CAAC4B,KAAK,CAAC;MACzE,OAAO;QAAED,IAAI,EAAEJ,QAAQ;QAAEnB,MAAM,EAAE,KAAK;QAAEkB,IAAI,EAAE;MAAQ,CAAC;IACzD;EACF;EAEA,IAAI/B,WAAW,CAACsB,GAAG,CAAC,EAAE;IACpB,MAAMgB,SAAS,GAAGhB,GAAgB;IAClC,OAAOO,oBAAoB,CAACS,SAAS,CAACC,SAAS,EAAET,QAAQ,CAAC;EAC5D;EAEA,IAAIvB,gBAAgB,CAACe,GAAG,CAAC,EAAE;IACzB;IACA,MAAMkB,KAAK,GAAG,OAAOlB,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACmB,QAAQ,CAAC,YAAY,CAAC;IACnE,OAAO;MAAEL,IAAI,EAAE9B,IAAI,CAACgB,GAAG,CAAC;MAAET,MAAM,EAAE2B,KAAK,GAAG,KAAK,GAAGE;IAAU,CAAC;EAC/D;EAEA,IAAI,OAAOpB,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,EAAE;IAC3C,MAAMqB,MAAM,GAAGrB,GAAqB;IACpC,MAAM;MAAEA,GAAG,EAAEc,IAAI;MAAEvB,MAAM;MAAEkB,IAAI;MAAEa;IAAW,CAAC,GAAGD,MAAM;IACtD,MAAME,YAAY,GAChBD,UAAU,KAAKF,SAAS,GAAGpC,IAAI,CAACsC,UAAU,CAAC,GAAGF,SAAS;IAEzD,IAAIN,IAAI,YAAYpD,SAAS,EAAE;MAC7B,OAAO6C,oBAAoB,CAACO,IAAI,EAAEN,QAAQ,CAAC;IAC7C;IAEA,IAAI9B,WAAW,CAACoC,IAAI,CAAC,EAAE;MACrB,OAAOP,oBAAoB,CAAEO,IAAI,CAAeG,SAAS,EAAET,QAAQ,CAAC;IACtE;IAEA,IAAI,CAACvB,gBAAgB,CAAC6B,IAAI,CAAC,EAAE;MAC3B,MAAM,IAAIpB,KAAK,CAAC,uBAAuB,CAAC;IAC1C;;IAEA;IACA,IACE,CAACH,MAAM,KAAK,KAAK,IACd,OAAOuB,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACK,QAAQ,CAAC,YAAY,CAAE,KAC3D,OAAOL,IAAI,KAAK,QAAQ,EACxB;MACA,OAAO;QACLA,IAAI,EAAE9B,IAAI,CAAC8B,IAAI,CAAC;QAChBvB,MAAM,EAAE,KAAK;QACbkB,IAAI;QACJa,UAAU,EAAEC;MACd,CAAC;IACH;;IAEA;IACA;IACA,MAAMC,cAAyC,GAC7CjC,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,KAAK,GAAGA,MAAM,GAAG6B,SAAS;IAC3D,OAAO;MACLN,IAAI,EAAE9B,IAAI,CAAC8B,IAAI,CAAC;MAChBvB,MAAM,EAAEiC,cAAc;MACtBf,IAAI;MACJa,UAAU,EAAEC;IACd,CAAC;EACH;EAEA,MAAM,IAAI7B,KAAK,CAAC,mBAAmB,CAAC;AACtC;AAEA,SAAS+B,eAAeA,CAACzB,GAAa,EAAmB;EACvD,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,IAAIV,WAAW,CAACU,GAAG,CAACT,MAAM,CAAC,EAAE;IACtE,IAAIS,GAAG,CAACT,MAAM,KAAK,YAAY,EAAE;MAC/B,MAAM,IAAIG,KAAK,CACb,kBAAkBM,GAAG,CAACT,MAAM,qDAC9B,CAAC;IACH;IACA,OAAOC,sBAAsB,CAACQ,GAAqB,CAAC;EACtD;EACA,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,IAAIA,GAAG,CAACT,MAAM,KAAK,KAAK,EAAE;IACnE,MAAMM,MAAM,GACVf,YAAY,CAACgB,kBAAkB,CAAkB,iBAAiB,CAAC;IACrE,MAAM4B,OAAO,GAAG7B,MAAM,CAAC8B,OAAO,CAAC3B,GAAG,CAACA,GAAU,CAAC;IAC9C,IAAI0B,OAAO,KAAKN,SAAS,EAAE;MACzB,MAAM,IAAI1B,KAAK,CAAC,sBAAsB,CAAC;IACzC;IACA,IAAIgC,OAAO,KAAKtC,OAAO,CAACwC,OAAO,EAAE;MAC/B;MACA,MAAMlB,QAAQ,GAAGb,MAAM,CAACc,SAAS,CAACzB,WAAW,CAAC0B,GAAG,EAAEzB,WAAW,CAAC0B,IAAI,CAAC;MACpE,MAAMgB,SAAS,GACb/C,YAAY,CAACgB,kBAAkB,CAAkB,iBAAiB,CAAC;MACrE+B,SAAS,CAACC,IAAI,CACZ1C,OAAO,CAAC2C,MAAM,EACdrB,QAAQ,EACRxB,WAAW,CAAC0B,GAAG,EACfzB,WAAW,CAAC0B,IACd,CAAC;MACD,OAAO,IAAIjD,eAAe,CAACiE,SAAS,CAAC;IACvC;IACA,OAAO,IAAIjE,eAAe,CAACiC,MAAM,CAAC;EACpC;EAEA,MAAM;IAAEiB,IAAI;IAAEvB,MAAM;IAAEkB,IAAI;IAAEa;EAAW,CAAC,GAAGf,oBAAoB,CAACP,GAAG,EAAE,IAAI,CAAC;;EAE1E;EACA,IAAIgC,OAAgC;EACpC,IAAIzC,MAAM,KAAK,KAAK,EAAEyC,OAAO,GAAG9C,WAAW,CAAC+C,GAAG,CAAC,KAC3C,IAAI1C,MAAM,KAAK,KAAK,EAAEyC,OAAO,GAAG9C,WAAW,CAAC0B,GAAG;;EAEpD;EACA,IAAIsB,KAA8B;EAClC,IAAIzB,IAAI,KAAK,MAAM,EAAEyB,KAAK,GAAG/C,WAAW,CAAC0B,IAAI,CAAC,KACzC,IAAIJ,IAAI,KAAK,OAAO,EAAEyB,KAAK,GAAG/C,WAAW,CAACgD,KAAK;EAEpD,OAAOzE,SAAS,CAAC4C,eAAe,CAC9B,QAAQ,EACRQ,IAAI,EACJkB,OAAO,EACPE,KAAK,EACLZ,UACF,CAAC;AACH;AAEA,SAASc,gBAAgBA,CAACpC,GAAa,EAAoB;EACzD,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,IAAIV,WAAW,CAACU,GAAG,CAACT,MAAM,CAAC,EAAE;IACtE,IAAIS,GAAG,CAACT,MAAM,KAAK,YAAY,EAAE;MAC/B,MAAM,IAAIG,KAAK,CAAC,kDAAkD,CAAC;IACrE;IACA,OAAOO,uBAAuB,CAACD,GAAqB,CAAC;EACvD;EACA,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,IAAIA,GAAG,CAACT,MAAM,KAAK,KAAK,EAAE;IACnE,MAAMM,MAAM,GACVf,YAAY,CAACgB,kBAAkB,CAAkB,iBAAiB,CAAC;IACrE,MAAM4B,OAAO,GAAG7B,MAAM,CAAC8B,OAAO,CAAC3B,GAAG,CAACA,GAAU,CAAC;IAC9C,IAAI0B,OAAO,KAAKN,SAAS,IAAIM,OAAO,KAAKtC,OAAO,CAACwC,OAAO,EAAE;MACxD,MAAM,IAAIlC,KAAK,CAAC,uCAAuC,CAAC;IAC1D;IACA,OAAO,IAAI7B,gBAAgB,CAACgC,MAAM,CAAC;EACrC;EAEA,MAAM;IAAEiB,IAAI;IAAEvB,MAAM;IAAEkB,IAAI;IAAEa;EAAW,CAAC,GAAGf,oBAAoB,CAACP,GAAG,EAAE,KAAK,CAAC;;EAE3E;EACA,IAAIgC,OAAgC;EACpC,IAAIzC,MAAM,KAAK,KAAK,EAAEyC,OAAO,GAAG9C,WAAW,CAAC+C,GAAG,CAAC,KAC3C,IAAI1C,MAAM,KAAK,KAAK,EAAEyC,OAAO,GAAG9C,WAAW,CAAC0B,GAAG;;EAEpD;EACA,IAAIsB,KAA8B;EAClC,IAAIzB,IAAI,KAAK,OAAO,EAAEyB,KAAK,GAAG/C,WAAW,CAAC4B,KAAK,CAAC,KAC3C,IAAIN,IAAI,KAAK,OAAO,EAAEyB,KAAK,GAAG/C,WAAW,CAACgD,KAAK,CAAC,KAChD,IAAI1B,IAAI,KAAK,MAAM,EAAEyB,KAAK,GAAG/C,WAAW,CAACkD,IAAI;EAElD,OAAO3E,SAAS,CAAC4C,eAAe,CAC9B,SAAS,EACTQ,IAAI,EACJkB,OAAO,EACPE,KAAK,EACLZ,UACF,CAAC;AACH;AAMA,SAASgB,eAAeA,CACtB7B,IAAoB,EACpB8B,OAA2B,EACV;EACjB,IAAI,OAAO9B,IAAI,KAAK,QAAQ,EAAE;IAC5B,MAAM,IAAI+B,SAAS,CAAC,sCAAsC,CAAC;EAC7D;EACA,IAAI,OAAOD,OAAO,KAAK,QAAQ,IAAIA,OAAO,KAAK,IAAI,EAAE;IACnD,MAAM,IAAIC,SAAS,CAAC,0CAA0C,CAAC;EACjE;EAEA,MAAM;IAAEC;EAAO,CAAC,GAAGF,OAAO;EAE1B,IAAI,OAAOE,MAAM,KAAK,QAAQ,IAAI,CAACC,MAAM,CAACC,SAAS,CAACF,MAAM,CAAC,EAAE;IAC3D,MAAM,IAAID,SAAS,CAAC,kDAAkD,CAAC;EACzE;EAEA,QAAQ/B,IAAI;IACV,KAAK,MAAM;MACT,IAAIgC,MAAM,GAAG,CAAC,IAAIA,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;QACtC,MAAM,IAAIG,UAAU,CAClB,8DACF,CAAC;MACH;MACA;IACF,KAAK,KAAK;MACR,IAAIH,MAAM,KAAK,GAAG,IAAIA,MAAM,KAAK,GAAG,IAAIA,MAAM,KAAK,GAAG,EAAE;QACtD,MAAM,IAAIG,UAAU,CAClB,wDACF,CAAC;MACH;MACA;IACF;MACE,MAAM,IAAIJ,SAAS,CACjB,0DAA0D/B,IAAI,GAChE,CAAC;EACL;EAEA,MAAMoC,QAAQ,GAAGJ,MAAM,GAAG,CAAC;EAC3B,MAAMK,WAAW,GAAGzD,WAAW,CAACwD,QAAQ,CAAC;EACzC,OAAOzC,eAAe,CAAC0C,WAAW,CAAC;AACrC;AAEA,SAASC,WAAWA,CAClBtC,IAAoB,EACpB8B,OAA2B,EAC3BS,QAA4D,EACtD;EACN,IAAI,OAAOA,QAAQ,KAAK,UAAU,EAAE;IAClC,MAAM,IAAIR,SAAS,CAAC,4CAA4C,CAAC;EACnE;EAEA,IAAI;IACF,MAAMxC,GAAG,GAAGsC,eAAe,CAAC7B,IAAI,EAAE8B,OAAO,CAAC;IAC1CU,OAAO,CAACC,QAAQ,CAACF,QAAQ,EAAE,IAAI,EAAEhD,GAAG,CAAC;EACvC,CAAC,CAAC,OAAOmD,GAAG,EAAE;IACZF,OAAO,CAACC,QAAQ,CAACF,QAAQ,EAAEG,GAAY,CAAC;EAC1C;AACF;AAEA;AACE;AACA/C,eAAe,EACfqB,eAAe,EACfW,gBAAgB,EAChB3E,SAAS,EACTsF,WAAW,EACXT,eAAe,EACfxE,eAAe,EACfC,mBAAmB,EACnBP,mBAAmB,EACnBE,SAAS,EACTM,UAAU,EACVC,YAAY,EACZC,IAAI,EACJC,MAAM,EACNC,IAAI,EACJC,MAAM,EACNC,aAAa,EACbC,aAAa,EACbC,cAAc,EACdC,cAAc;AAEd;AACAI,sBAAsB,EACtBD,uBAAuB,EACvBD,gBAAgB,EAChBhB,eAAe,EACfC,eAAe,EACfC,gBAAgB,EAChBa,WAAW","ignoreList":[]}

package/lib/module/keys/publicCipher.js

@@ -0,0 +1,164 @@
+"use strict";
+
+import { NitroModules } from 'react-native-nitro-modules';
+import { Buffer } from '@craftzdog/react-native-buffer';
+import { binaryLikeToArrayBuffer as toAB, isStringOrBuffer, KFormatType, KeyEncoding } from '../utils';
+import { isCryptoKey } from './utils';
+import { KeyObject } from './classes';
+import { constants } from '../constants';
+function preparePublicCipherKey(key, isEncrypt) {
+  let keyObj;
+  let padding;
+  let oaepHash;
+  let oaepLabel;
+  if (key instanceof KeyObject) {
+    if (isEncrypt && key.type !== 'public') {
+      throw new Error('publicEncrypt requires a public key');
+    }
+    // publicDecrypt accepts both public and private keys (Node.js behavior)
+    // A private key contains the public components needed for verify_recover
+    keyObj = key;
+  } else if (isCryptoKey(key)) {
+    const cryptoKey = key;
+    keyObj = cryptoKey.keyObject;
+  } else if (isStringOrBuffer(key)) {
+    const data = toAB(key);
+    const isPem = typeof key === 'string' && key.includes('-----BEGIN');
+    const isPrivatePem = typeof key === 'string' && key.includes('-----BEGIN PRIVATE');
+    // publicDecrypt accepts both public and private keys (Node.js behavior)
+    if (!isEncrypt && isPrivatePem) {
+      keyObj = KeyObject.createKeyObject('private', data, KFormatType.PEM, KeyEncoding.PKCS8);
+    } else {
+      keyObj = KeyObject.createKeyObject('public', data, isPem ? KFormatType.PEM : KFormatType.DER, KeyEncoding.SPKI);
+    }
+  } else if (typeof key === 'object' && 'key' in key) {
+    const options = key;
+    const result = preparePublicCipherKey(options.key, isEncrypt);
+    keyObj = result.keyHandle;
+    padding = options.padding;
+    oaepHash = options.oaepHash;
+    if (options.oaepLabel) {
+      oaepLabel = toAB(options.oaepLabel);
+    }
+  } else {
+    throw new Error('Invalid key input');
+  }
+  return {
+    keyHandle: keyObj,
+    padding,
+    oaepHash,
+    oaepLabel
+  };
+}
+export function publicEncrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding,
+    oaepHash,
+    oaepLabel
+  } = preparePublicCipherKey(key, true);
+  const rsaCipher = NitroModules.createHybridObject('RsaCipher');
+  const data = toAB(buffer);
+  const paddingMode = padding ?? constants.RSA_PKCS1_OAEP_PADDING;
+  const hashAlgorithm = oaepHash || 'sha1';
+  try {
+    const encrypted = rsaCipher.encrypt(keyHandle.handle, data, paddingMode, hashAlgorithm, oaepLabel);
+    return Buffer.from(encrypted);
+  } catch (error) {
+    throw new Error(`publicEncrypt failed: ${error.message}`);
+  }
+}
+export function publicDecrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding
+  } = preparePublicCipherKey(key, false);
+  const rsaCipher = NitroModules.createHybridObject('RsaCipher');
+  const data = toAB(buffer);
+  const paddingMode = padding ?? constants.RSA_PKCS1_PADDING;
+  try {
+    const decrypted = rsaCipher.publicDecrypt(keyHandle.handle, data, paddingMode);
+    return Buffer.from(decrypted);
+  } catch {
+    // Bleichenbacher mitigation: surface a single, content-independent error
+    // for every decrypt failure so an attacker cannot use error-message
+    // differences as a padding oracle. The native side already collapses its
+    // OpenSSL error codes to the same opaque message; we drop it here too
+    // rather than re-leaking it via string interpolation.
+    throw new Error('publicDecrypt failed');
+  }
+}
+function preparePrivateCipherKey(key, isEncrypt) {
+  let keyObj;
+  let padding;
+  let oaepHash;
+  let oaepLabel;
+  if (key instanceof KeyObject) {
+    if (isEncrypt && key.type !== 'private') {
+      throw new Error('privateEncrypt requires a private key');
+    }
+    if (!isEncrypt && key.type !== 'private') {
+      throw new Error('privateDecrypt requires a private key');
+    }
+    keyObj = key;
+  } else if (isCryptoKey(key)) {
+    const cryptoKey = key;
+    keyObj = cryptoKey.keyObject;
+  } else if (isStringOrBuffer(key)) {
+    const data = toAB(key);
+    const isPem = typeof key === 'string' && key.includes('-----BEGIN');
+    keyObj = KeyObject.createKeyObject('private', data, isPem ? KFormatType.PEM : KFormatType.DER, KeyEncoding.PKCS8);
+  } else if (typeof key === 'object' && 'key' in key) {
+    const options = key;
+    const result = preparePrivateCipherKey(options.key, isEncrypt);
+    keyObj = result.keyHandle;
+    padding = options.padding;
+    oaepHash = options.oaepHash;
+    if (options.oaepLabel) {
+      oaepLabel = toAB(options.oaepLabel);
+    }
+  } else {
+    throw new Error('Invalid key input');
+  }
+  return {
+    keyHandle: keyObj,
+    padding,
+    oaepHash,
+    oaepLabel
+  };
+}
+export function privateEncrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding
+  } = preparePrivateCipherKey(key, true);
+  const rsaCipher = NitroModules.createHybridObject('RsaCipher');
+  const data = toAB(buffer);
+  const paddingMode = padding ?? constants.RSA_PKCS1_PADDING;
+  try {
+    const encrypted = rsaCipher.privateEncrypt(keyHandle.handle, data, paddingMode);
+    return Buffer.from(encrypted);
+  } catch (error) {
+    throw new Error(`privateEncrypt failed: ${error.message}`);
+  }
+}
+export function privateDecrypt(key, buffer) {
+  const {
+    keyHandle,
+    padding,
+    oaepHash,
+    oaepLabel
+  } = preparePrivateCipherKey(key, false);
+  const rsaCipher = NitroModules.createHybridObject('RsaCipher');
+  const data = toAB(buffer);
+  const paddingMode = padding ?? constants.RSA_PKCS1_OAEP_PADDING;
+  const hashAlgorithm = oaepHash || 'sha1';
+  try {
+    const decrypted = rsaCipher.privateDecrypt(keyHandle.handle, data, paddingMode, hashAlgorithm, oaepLabel);
+    return Buffer.from(decrypted);
+  } catch {
+    // Bleichenbacher mitigation — see publicDecrypt above.
+    throw new Error('privateDecrypt failed');
+  }
+}
+//# sourceMappingURL=publicCipher.js.map

package/lib/module/keys/publicCipher.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NitroModules","Buffer","binaryLikeToArrayBuffer","toAB","isStringOrBuffer","KFormatType","KeyEncoding","isCryptoKey","KeyObject","constants","preparePublicCipherKey","key","isEncrypt","keyObj","padding","oaepHash","oaepLabel","type","Error","cryptoKey","keyObject","data","isPem","includes","isPrivatePem","createKeyObject","PEM","PKCS8","DER","SPKI","options","result","keyHandle","publicEncrypt","buffer","rsaCipher","createHybridObject","paddingMode","RSA_PKCS1_OAEP_PADDING","hashAlgorithm","encrypted","encrypt","handle","from","error","message","publicDecrypt","RSA_PKCS1_PADDING","decrypted","preparePrivateCipherKey","privateEncrypt","privateDecrypt"],"sourceRoot":"../../../src","sources":["keys/publicCipher.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AACzD,SAASC,MAAM,QAAQ,gCAAgC;AAGvD,SACEC,uBAAuB,IAAIC,IAAI,EAC/BC,gBAAgB,EAChBC,WAAW,EACXC,WAAW,QACN,UAAU;AACjB,SAASC,WAAW,QAAQ,SAAS;AACrC,SAASC,SAAS,QAAmB,WAAW;AAChD,SAASC,SAAS,QAAQ,cAAc;AA4BxC,SAASC,sBAAsBA,CAC7BC,GAAsB,EACtBC,SAAkB,EAMlB;EACA,IAAIC,MAAiB;EACrB,IAAIC,OAA2B;EAC/B,IAAIC,QAA4B;EAChC,IAAIC,SAAkC;EAEtC,IAAIL,GAAG,YAAYH,SAAS,EAAE;IAC5B,IAAII,SAAS,IAAID,GAAG,CAACM,IAAI,KAAK,QAAQ,EAAE;MACtC,MAAM,IAAIC,KAAK,CAAC,qCAAqC,CAAC;IACxD;IACA;IACA;IACAL,MAAM,GAAGF,GAAG;EACd,CAAC,MAAM,IAAIJ,WAAW,CAACI,GAAG,CAAC,EAAE;IAC3B,MAAMQ,SAAS,GAAGR,GAAgB;IAClCE,MAAM,GAAGM,SAAS,CAACC,SAAS;EAC9B,CAAC,MAAM,IAAIhB,gBAAgB,CAACO,GAAG,CAAC,EAAE;IAChC,MAAMU,IAAI,GAAGlB,IAAI,CAACQ,GAAG,CAAC;IACtB,MAAMW,KAAK,GAAG,OAAOX,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACY,QAAQ,CAAC,YAAY,CAAC;IACnE,MAAMC,YAAY,GAChB,OAAOb,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACY,QAAQ,CAAC,oBAAoB,CAAC;IAC/D;IACA,IAAI,CAACX,SAAS,IAAIY,YAAY,EAAE;MAC9BX,MAAM,GAAGL,SAAS,CAACiB,eAAe,CAChC,SAAS,EACTJ,IAAI,EACJhB,WAAW,CAACqB,GAAG,EACfpB,WAAW,CAACqB,KACd,CAAC;IACH,CAAC,MAAM;MACLd,MAAM,GAAGL,SAAS,CAACiB,eAAe,CAChC,QAAQ,EACRJ,IAAI,EACJC,KAAK,GAAGjB,WAAW,CAACqB,GAAG,GAAGrB,WAAW,CAACuB,GAAG,EACzCtB,WAAW,CAACuB,IACd,CAAC;IACH;EACF,CAAC,MAAM,IAAI,OAAOlB,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,EAAE;IAClD,MAAMmB,OAAO,GAAGnB,GAA0B;IAC1C,MAAMoB,MAAM,GAAGrB,sBAAsB,CAACoB,OAAO,CAACnB,GAAG,EAAEC,SAAS,CAAC;IAC7DC,MAAM,GAAGkB,MAAM,CAACC,SAAS;IACzBlB,OAAO,GAAGgB,OAAO,CAAChB,OAAO;IACzBC,QAAQ,GAAGe,OAAO,CAACf,QAAQ;IAC3B,IAAIe,OAAO,CAACd,SAAS,EAAE;MACrBA,SAAS,GAAGb,IAAI,CAAC2B,OAAO,CAACd,SAAS,CAAC;IACrC;EACF,CAAC,MAAM;IACL,MAAM,IAAIE,KAAK,CAAC,mBAAmB,CAAC;EACtC;EAEA,OAAO;IAAEc,SAAS,EAAEnB,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC;AAC5D;AAEA,OAAO,SAASiB,aAAaA,CAC3BtB,GAAsB,EACtBuB,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAElB,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAGN,sBAAsB,CACxEC,GAAG,EACH,IACF,CAAC;EAED,MAAMwB,SAAoB,GAAGnC,YAAY,CAACoC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMf,IAAI,GAAGlB,IAAI,CAAC+B,MAAM,CAAC;EACzB,MAAMG,WAAW,GAAGvB,OAAO,IAAIL,SAAS,CAAC6B,sBAAsB;EAC/D,MAAMC,aAAa,GAAGxB,QAAQ,IAAI,MAAM;EAExC,IAAI;IACF,MAAMyB,SAAS,GAAGL,SAAS,CAACM,OAAO,CACjCT,SAAS,CAACU,MAAM,EAChBrB,IAAI,EACJgB,WAAW,EACXE,aAAa,EACbvB,SACF,CAAC;IACD,OAAOf,MAAM,CAAC0C,IAAI,CAACH,SAAS,CAAC;EAC/B,CAAC,CAAC,OAAOI,KAAK,EAAE;IACd,MAAM,IAAI1B,KAAK,CAAC,yBAA0B0B,KAAK,CAAWC,OAAO,EAAE,CAAC;EACtE;AACF;AAEA,OAAO,SAASC,aAAaA,CAC3BnC,GAAsB,EACtBuB,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAElB;EAAQ,CAAC,GAAGJ,sBAAsB,CAACC,GAAG,EAAE,KAAK,CAAC;EAEjE,MAAMwB,SAAoB,GAAGnC,YAAY,CAACoC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMf,IAAI,GAAGlB,IAAI,CAAC+B,MAAM,CAAC;EACzB,MAAMG,WAAW,GAAGvB,OAAO,IAAIL,SAAS,CAACsC,iBAAiB;EAE1D,IAAI;IACF,MAAMC,SAAS,GAAGb,SAAS,CAACW,aAAa,CACvCd,SAAS,CAACU,MAAM,EAChBrB,IAAI,EACJgB,WACF,CAAC;IACD,OAAOpC,MAAM,CAAC0C,IAAI,CAACK,SAAS,CAAC;EAC/B,CAAC,CAAC,MAAM;IACN;IACA;IACA;IACA;IACA;IACA,MAAM,IAAI9B,KAAK,CAAC,sBAAsB,CAAC;EACzC;AACF;AAEA,SAAS+B,uBAAuBA,CAC9BtC,GAAuB,EACvBC,SAAkB,EAMlB;EACA,IAAIC,MAAiB;EACrB,IAAIC,OAA2B;EAC/B,IAAIC,QAA4B;EAChC,IAAIC,SAAkC;EAEtC,IAAIL,GAAG,YAAYH,SAAS,EAAE;IAC5B,IAAII,SAAS,IAAID,GAAG,CAACM,IAAI,KAAK,SAAS,EAAE;MACvC,MAAM,IAAIC,KAAK,CAAC,uCAAuC,CAAC;IAC1D;IACA,IAAI,CAACN,SAAS,IAAID,GAAG,CAACM,IAAI,KAAK,SAAS,EAAE;MACxC,MAAM,IAAIC,KAAK,CAAC,uCAAuC,CAAC;IAC1D;IACAL,MAAM,GAAGF,GAAG;EACd,CAAC,MAAM,IAAIJ,WAAW,CAACI,GAAG,CAAC,EAAE;IAC3B,MAAMQ,SAAS,GAAGR,GAAgB;IAClCE,MAAM,GAAGM,SAAS,CAACC,SAAS;EAC9B,CAAC,MAAM,IAAIhB,gBAAgB,CAACO,GAAG,CAAC,EAAE;IAChC,MAAMU,IAAI,GAAGlB,IAAI,CAACQ,GAAG,CAAC;IACtB,MAAMW,KAAK,GAAG,OAAOX,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACY,QAAQ,CAAC,YAAY,CAAC;IACnEV,MAAM,GAAGL,SAAS,CAACiB,eAAe,CAChC,SAAS,EACTJ,IAAI,EACJC,KAAK,GAAGjB,WAAW,CAACqB,GAAG,GAAGrB,WAAW,CAACuB,GAAG,EACzCtB,WAAW,CAACqB,KACd,CAAC;EACH,CAAC,MAAM,IAAI,OAAOhB,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,EAAE;IAClD,MAAMmB,OAAO,GAAGnB,GAA2B;IAC3C,MAAMoB,MAAM,GAAGkB,uBAAuB,CAACnB,OAAO,CAACnB,GAAG,EAAEC,SAAS,CAAC;IAC9DC,MAAM,GAAGkB,MAAM,CAACC,SAAS;IACzBlB,OAAO,GAAGgB,OAAO,CAAChB,OAAO;IACzBC,QAAQ,GAAGe,OAAO,CAACf,QAAQ;IAC3B,IAAIe,OAAO,CAACd,SAAS,EAAE;MACrBA,SAAS,GAAGb,IAAI,CAAC2B,OAAO,CAACd,SAAS,CAAC;IACrC;EACF,CAAC,MAAM;IACL,MAAM,IAAIE,KAAK,CAAC,mBAAmB,CAAC;EACtC;EAEA,OAAO;IAAEc,SAAS,EAAEnB,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC;AAC5D;AAEA,OAAO,SAASkC,cAAcA,CAC5BvC,GAAuB,EACvBuB,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAElB;EAAQ,CAAC,GAAGmC,uBAAuB,CAACtC,GAAG,EAAE,IAAI,CAAC;EAEjE,MAAMwB,SAAoB,GAAGnC,YAAY,CAACoC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMf,IAAI,GAAGlB,IAAI,CAAC+B,MAAM,CAAC;EACzB,MAAMG,WAAW,GAAGvB,OAAO,IAAIL,SAAS,CAACsC,iBAAiB;EAE1D,IAAI;IACF,MAAMP,SAAS,GAAGL,SAAS,CAACe,cAAc,CACxClB,SAAS,CAACU,MAAM,EAChBrB,IAAI,EACJgB,WACF,CAAC;IACD,OAAOpC,MAAM,CAAC0C,IAAI,CAACH,SAAS,CAAC;EAC/B,CAAC,CAAC,OAAOI,KAAK,EAAE;IACd,MAAM,IAAI1B,KAAK,CAAC,0BAA2B0B,KAAK,CAAWC,OAAO,EAAE,CAAC;EACvE;AACF;AAEA,OAAO,SAASM,cAAcA,CAC5BxC,GAAuB,EACvBuB,MAAkB,EACV;EACR,MAAM;IAAEF,SAAS;IAAElB,OAAO;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAGiC,uBAAuB,CACzEtC,GAAG,EACH,KACF,CAAC;EAED,MAAMwB,SAAoB,GAAGnC,YAAY,CAACoC,kBAAkB,CAAC,WAAW,CAAC;EACzE,MAAMf,IAAI,GAAGlB,IAAI,CAAC+B,MAAM,CAAC;EACzB,MAAMG,WAAW,GAAGvB,OAAO,IAAIL,SAAS,CAAC6B,sBAAsB;EAC/D,MAAMC,aAAa,GAAGxB,QAAQ,IAAI,MAAM;EAExC,IAAI;IACF,MAAMiC,SAAS,GAAGb,SAAS,CAACgB,cAAc,CACxCnB,SAAS,CAACU,MAAM,EAChBrB,IAAI,EACJgB,WAAW,EACXE,aAAa,EACbvB,SACF,CAAC;IACD,OAAOf,MAAM,CAAC0C,IAAI,CAACK,SAAS,CAAC;EAC/B,CAAC,CAAC,MAAM;IACN;IACA,MAAM,IAAI9B,KAAK,CAAC,uBAAuB,CAAC;EAC1C;AACF","ignoreList":[]}

package/lib/module/keys/signVerify.js

@@ -0,0 +1,217 @@
+"use strict";
+
+import { Buffer } from '@craftzdog/react-native-buffer';
+import { NitroModules } from 'react-native-nitro-modules';
+import { KeyObject } from './classes';
+import { isCryptoKey } from './utils';
+import { binaryLikeToArrayBuffer as toAB, isStringOrBuffer, KFormatType, KeyEncoding } from '../utils';
+import { constants } from '../constants';
+function prepareKey(key, isPublic) {
+  // Already a KeyObject
+  if (key instanceof KeyObject) {
+    if (isPublic) {
+      if (key.type === 'secret') {
+        throw new Error('Cannot use secret key for signature verification');
+      }
+    } else {
+      if (key.type !== 'private') {
+        throw new Error('Key must be a private key for signing');
+      }
+    }
+    return {
+      keyObject: key
+    };
+  }
+
+  // CryptoKey - extract KeyObject
+  if (isCryptoKey(key)) {
+    const cryptoKey = key;
+    return prepareKey(cryptoKey.keyObject, isPublic);
+  }
+
+  // Raw string or buffer - create KeyObject
+  if (isStringOrBuffer(key)) {
+    const isPem = typeof key === 'string' && key.includes('-----BEGIN');
+    const format = isPem ? KFormatType.PEM : undefined;
+    const type = isPublic ? 'public' : 'private';
+    const keyData = toAB(key);
+    const keyObject = KeyObject.createKeyObject(type, keyData, format);
+    return {
+      keyObject
+    };
+  }
+
+  // KeyInputObject with options
+  if (typeof key === 'object' && 'key' in key) {
+    const keyObj = key;
+    const {
+      key: data,
+      format,
+      type,
+      padding,
+      saltLength,
+      dsaEncoding
+    } = keyObj;
+
+    // Nested KeyObject
+    if (data instanceof KeyObject) {
+      return {
+        keyObject: data,
+        options: {
+          padding,
+          saltLength,
+          dsaEncoding
+        }
+      };
+    }
+
+    // Nested CryptoKey
+    if (isCryptoKey(data)) {
+      return {
+        keyObject: data.keyObject,
+        options: {
+          padding,
+          saltLength,
+          dsaEncoding
+        }
+      };
+    }
+    if (!isStringOrBuffer(data)) {
+      throw new Error('Invalid key data type');
+    }
+
+    // Determine format
+    const isPem = format === 'pem' || typeof data === 'string' && data.includes('-----BEGIN');
+    const kFormat = isPem ? KFormatType.PEM : format === 'der' ? KFormatType.DER : undefined;
+
+    // Determine encoding type
+    let kType;
+    if (type === 'pkcs8') kType = KeyEncoding.PKCS8;else if (type === 'pkcs1') kType = KeyEncoding.PKCS1;else if (type === 'sec1') kType = KeyEncoding.SEC1;else if (type === 'spki') kType = KeyEncoding.SPKI;
+    const keyType = isPublic ? 'public' : 'private';
+    // Always convert to ArrayBuffer to avoid Nitro bridge string truncation bug
+    const keyData = toAB(data);
+    const keyObject = KeyObject.createKeyObject(keyType, keyData, kFormat, kType);
+    return {
+      keyObject,
+      options: {
+        padding,
+        saltLength,
+        dsaEncoding
+      }
+    };
+  }
+  throw new Error('Invalid key input');
+}
+function dsaEncodingToNumber(dsaEncoding) {
+  if (dsaEncoding === 'der') return 0;
+  if (dsaEncoding === 'ieee-p1363') return 1;
+  return undefined;
+}
+function getSaltLength(options) {
+  if (options?.padding === constants.RSA_PKCS1_PSS_PADDING && options?.saltLength === undefined) {
+    return constants.RSA_PSS_SALTLEN_MAX_SIGN;
+  }
+  return options?.saltLength;
+}
+export class Sign {
+  constructor(algorithm) {
+    this.handle = NitroModules.createHybridObject('SignHandle');
+    this.handle.init(algorithm);
+  }
+  update(data) {
+    const dataBuffer = toAB(data);
+    this.handle.update(dataBuffer);
+    return this;
+  }
+  sign(privateKey, outputEncoding) {
+    if (privateKey === null || privateKey === undefined) {
+      throw new Error('Private key is required');
+    }
+    const {
+      keyObject,
+      options
+    } = prepareKey(privateKey, false);
+    const signature = this.handle.sign(keyObject.handle, options?.padding, getSaltLength(options), dsaEncodingToNumber(options?.dsaEncoding));
+    const buf = Buffer.from(signature);
+    if (outputEncoding) {
+      return buf.toString(outputEncoding);
+    }
+    return buf;
+  }
+}
+export class Verify {
+  constructor(algorithm) {
+    this.handle = NitroModules.createHybridObject('VerifyHandle');
+    this.handle.init(algorithm);
+  }
+  update(data) {
+    const dataBuffer = toAB(data);
+    this.handle.update(dataBuffer);
+    return this;
+  }
+  verify(publicKey, signature, signatureEncoding) {
+    if (publicKey === null || publicKey === undefined) {
+      throw new Error('Public key is required');
+    }
+    const {
+      keyObject,
+      options
+    } = prepareKey(publicKey, true);
+
+    // Convert signature to ArrayBuffer
+    let sigBuffer;
+    if (signatureEncoding && typeof signature === 'string') {
+      sigBuffer = toAB(Buffer.from(signature, signatureEncoding));
+    } else {
+      sigBuffer = toAB(signature);
+    }
+    return this.handle.verify(keyObject.handle, sigBuffer, options?.padding, getSaltLength(options), dsaEncodingToNumber(options?.dsaEncoding));
+  }
+}
+export function createSign(algorithm) {
+  return new Sign(algorithm);
+}
+export function createVerify(algorithm) {
+  return new Verify(algorithm);
+}
+export function sign(algorithm, data, key, callback) {
+  const doSign = () => {
+    if (key === null || key === undefined) {
+      throw new Error('Private key is required');
+    }
+    const signer = new Sign(algorithm ?? '');
+    signer.update(data);
+    return signer.sign(key);
+  };
+  if (callback) {
+    try {
+      const signature = doSign();
+      process.nextTick(callback, null, signature);
+    } catch (err) {
+      process.nextTick(callback, err);
+    }
+    return;
+  }
+  return doSign();
+}
+export function verify(algorithm, data, key, signature, callback) {
+  const doVerify = () => {
+    if (key === null || key === undefined) {
+      throw new Error('Key is required');
+    }
+    const verifier = new Verify(algorithm ?? '');
+    verifier.update(data);
+    return verifier.verify(key, signature);
+  };
+  if (callback) {
+    try {
+      const result = doVerify();
+      process.nextTick(callback, null, result);
+    } catch (err) {
+      process.nextTick(callback, err);
+    }
+    return;
+  }
+  return doVerify();
+}
+//# sourceMappingURL=signVerify.js.map

package/lib/module/keys/signVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Buffer","NitroModules","KeyObject","isCryptoKey","binaryLikeToArrayBuffer","toAB","isStringOrBuffer","KFormatType","KeyEncoding","constants","prepareKey","key","isPublic","type","Error","keyObject","cryptoKey","isPem","includes","format","PEM","undefined","keyData","createKeyObject","keyObj","data","padding","saltLength","dsaEncoding","options","kFormat","DER","kType","PKCS8","PKCS1","SEC1","SPKI","keyType","dsaEncodingToNumber","getSaltLength","RSA_PKCS1_PSS_PADDING","RSA_PSS_SALTLEN_MAX_SIGN","Sign","constructor","algorithm","handle","createHybridObject","init","update","dataBuffer","sign","privateKey","outputEncoding","signature","buf","from","toString","Verify","verify","publicKey","signatureEncoding","sigBuffer","createSign","createVerify","callback","doSign","signer","process","nextTick","err","doVerify","verifier","result"],"sourceRoot":"../../../src","sources":["keys/signVerify.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,YAAY,QAAQ,4BAA4B;AAKzD,SAASC,SAAS,QAAmB,WAAW;AAChD,SAASC,WAAW,QAAQ,SAAS;AAErC,SACEC,uBAAuB,IAAIC,IAAI,EAC/BC,gBAAgB,EAChBC,WAAW,EACXC,WAAW,QACN,UAAU;AACjB,SAASC,SAAS,QAAQ,cAAc;AAyBxC,SAASC,UAAUA,CAACC,GAAa,EAAEC,QAAiB,EAAe;EACjE;EACA,IAAID,GAAG,YAAYT,SAAS,EAAE;IAC5B,IAAIU,QAAQ,EAAE;MACZ,IAAID,GAAG,CAACE,IAAI,KAAK,QAAQ,EAAE;QACzB,MAAM,IAAIC,KAAK,CAAC,kDAAkD,CAAC;MACrE;IACF,CAAC,MAAM;MACL,IAAIH,GAAG,CAACE,IAAI,KAAK,SAAS,EAAE;QAC1B,MAAM,IAAIC,KAAK,CAAC,uCAAuC,CAAC;MAC1D;IACF;IACA,OAAO;MAAEC,SAAS,EAAEJ;IAAI,CAAC;EAC3B;;EAEA;EACA,IAAIR,WAAW,CAACQ,GAAG,CAAC,EAAE;IACpB,MAAMK,SAAS,GAAGL,GAAgB;IAClC,OAAOD,UAAU,CAACM,SAAS,CAACD,SAAS,EAAEH,QAAQ,CAAC;EAClD;;EAEA;EACA,IAAIN,gBAAgB,CAACK,GAAG,CAAC,EAAE;IACzB,MAAMM,KAAK,GAAG,OAAON,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACO,QAAQ,CAAC,YAAY,CAAC;IACnE,MAAMC,MAAM,GAAGF,KAAK,GAAGV,WAAW,CAACa,GAAG,GAAGC,SAAS;IAClD,MAAMR,IAAI,GAAGD,QAAQ,GAAG,QAAQ,GAAG,SAAS;IAC5C,MAAMU,OAAO,GAAGjB,IAAI,CAACM,GAAG,CAAC;IACzB,MAAMI,SAAS,GAAGb,SAAS,CAACqB,eAAe,CAACV,IAAI,EAAES,OAAO,EAAEH,MAAM,CAAC;IAClE,OAAO;MAAEJ;IAAU,CAAC;EACtB;;EAEA;EACA,IAAI,OAAOJ,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAIA,GAAG,EAAE;IAC3C,MAAMa,MAAM,GAAGb,GAAqB;IACpC,MAAM;MACJA,GAAG,EAAEc,IAAI;MACTN,MAAM;MACNN,IAAI;MACJa,OAAO;MACPC,UAAU;MACVC;IACF,CAAC,GAAGJ,MAAM;;IAEV;IACA,IAAIC,IAAI,YAAYvB,SAAS,EAAE;MAC7B,OAAO;QACLa,SAAS,EAAEU,IAAI;QACfI,OAAO,EAAE;UAAEH,OAAO;UAAEC,UAAU;UAAEC;QAAY;MAC9C,CAAC;IACH;;IAEA;IACA,IAAIzB,WAAW,CAACsB,IAAI,CAAC,EAAE;MACrB,OAAO;QACLV,SAAS,EAAGU,IAAI,CAAeV,SAAS;QACxCc,OAAO,EAAE;UAAEH,OAAO;UAAEC,UAAU;UAAEC;QAAY;MAC9C,CAAC;IACH;IAEA,IAAI,CAACtB,gBAAgB,CAACmB,IAAI,CAAC,EAAE;MAC3B,MAAM,IAAIX,KAAK,CAAC,uBAAuB,CAAC;IAC1C;;IAEA;IACA,MAAMG,KAAK,GACTE,MAAM,KAAK,KAAK,IACf,OAAOM,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACP,QAAQ,CAAC,YAAY,CAAE;IAC3D,MAAMY,OAAO,GAAGb,KAAK,GACjBV,WAAW,CAACa,GAAG,GACfD,MAAM,KAAK,KAAK,GACdZ,WAAW,CAACwB,GAAG,GACfV,SAAS;;IAEf;IACA,IAAIW,KAA8B;IAClC,IAAInB,IAAI,KAAK,OAAO,EAAEmB,KAAK,GAAGxB,WAAW,CAACyB,KAAK,CAAC,KAC3C,IAAIpB,IAAI,KAAK,OAAO,EAAEmB,KAAK,GAAGxB,WAAW,CAAC0B,KAAK,CAAC,KAChD,IAAIrB,IAAI,KAAK,MAAM,EAAEmB,KAAK,GAAGxB,WAAW,CAAC2B,IAAI,CAAC,KAC9C,IAAItB,IAAI,KAAK,MAAM,EAAEmB,KAAK,GAAGxB,WAAW,CAAC4B,IAAI;IAElD,MAAMC,OAAO,GAAGzB,QAAQ,GAAG,QAAQ,GAAG,SAAS;IAC/C;IACA,MAAMU,OAAO,GAAGjB,IAAI,CAACoB,IAAI,CAAC;IAC1B,MAAMV,SAAS,GAAGb,SAAS,CAACqB,eAAe,CACzCc,OAAO,EACPf,OAAO,EACPQ,OAAO,EACPE,KACF,CAAC;IAED,OAAO;MACLjB,SAAS;MACTc,OAAO,EAAE;QAAEH,OAAO;QAAEC,UAAU;QAAEC;MAAY;IAC9C,CAAC;EACH;EAEA,MAAM,IAAId,KAAK,CAAC,mBAAmB,CAAC;AACtC;AAEA,SAASwB,mBAAmBA,CAC1BV,WAAkC,EACd;EACpB,IAAIA,WAAW,KAAK,KAAK,EAAE,OAAO,CAAC;EACnC,IAAIA,WAAW,KAAK,YAAY,EAAE,OAAO,CAAC;EAC1C,OAAOP,SAAS;AAClB;AAEA,SAASkB,aAAaA,CAACV,OAAqB,EAAsB;EAChE,IACEA,OAAO,EAAEH,OAAO,KAAKjB,SAAS,CAAC+B,qBAAqB,IACpDX,OAAO,EAAEF,UAAU,KAAKN,SAAS,EACjC;IACA,OAAOZ,SAAS,CAACgC,wBAAwB;EAC3C;EACA,OAAOZ,OAAO,EAAEF,UAAU;AAC5B;AAEA,OAAO,MAAMe,IAAI,CAAC;EAGhBC,WAAWA,CAACC,SAAiB,EAAE;IAC7B,IAAI,CAACC,MAAM,GAAG5C,YAAY,CAAC6C,kBAAkB,CAAiB,YAAY,CAAC;IAC3E,IAAI,CAACD,MAAM,CAACE,IAAI,CAACH,SAAS,CAAC;EAC7B;EAEAI,MAAMA,CAACvB,IAAgB,EAAQ;IAC7B,MAAMwB,UAAU,GAAG5C,IAAI,CAACoB,IAAI,CAAC;IAC7B,IAAI,CAACoB,MAAM,CAACG,MAAM,CAACC,UAAU,CAAC;IAC9B,OAAO,IAAI;EACb;EAGAC,IAAIA,CAACC,UAAoB,EAAEC,cAA+B,EAAmB;IAC3E,IAAID,UAAU,KAAK,IAAI,IAAIA,UAAU,KAAK9B,SAAS,EAAE;MACnD,MAAM,IAAIP,KAAK,CAAC,yBAAyB,CAAC;IAC5C;IAEA,MAAM;MAAEC,SAAS;MAAEc;IAAQ,CAAC,GAAGnB,UAAU,CAACyC,UAAU,EAAE,KAAK,CAAC;IAE5D,MAAME,SAAS,GAAG,IAAI,CAACR,MAAM,CAACK,IAAI,CAChCnC,SAAS,CAAC8B,MAAM,EAChBhB,OAAO,EAAEH,OAAO,EAChBa,aAAa,CAACV,OAAO,CAAC,EACtBS,mBAAmB,CAACT,OAAO,EAAED,WAAW,CAC1C,CAAC;IAED,MAAM0B,GAAG,GAAGtD,MAAM,CAACuD,IAAI,CAACF,SAAS,CAAC;IAClC,IAAID,cAAc,EAAE;MAClB,OAAOE,GAAG,CAACE,QAAQ,CAACJ,cAAc,CAAC;IACrC;IACA,OAAOE,GAAG;EACZ;AACF;AAEA,OAAO,MAAMG,MAAM,CAAC;EAGlBd,WAAWA,CAACC,SAAiB,EAAE;IAC7B,IAAI,CAACC,MAAM,GACT5C,YAAY,CAAC6C,kBAAkB,CAAmB,cAAc,CAAC;IACnE,IAAI,CAACD,MAAM,CAACE,IAAI,CAACH,SAAS,CAAC;EAC7B;EAEAI,MAAMA,CAACvB,IAAgB,EAAQ;IAC7B,MAAMwB,UAAU,GAAG5C,IAAI,CAACoB,IAAI,CAAC;IAC7B,IAAI,CAACoB,MAAM,CAACG,MAAM,CAACC,UAAU,CAAC;IAC9B,OAAO,IAAI;EACb;EAEAS,MAAMA,CACJC,SAAmB,EACnBN,SAAqB,EACrBO,iBAAkC,EACzB;IACT,IAAID,SAAS,KAAK,IAAI,IAAIA,SAAS,KAAKtC,SAAS,EAAE;MACjD,MAAM,IAAIP,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IAEA,MAAM;MAAEC,SAAS;MAAEc;IAAQ,CAAC,GAAGnB,UAAU,CAACiD,SAAS,EAAE,IAAI,CAAC;;IAE1D;IACA,IAAIE,SAAsB;IAC1B,IAAID,iBAAiB,IAAI,OAAOP,SAAS,KAAK,QAAQ,EAAE;MACtDQ,SAAS,GAAGxD,IAAI,CAACL,MAAM,CAACuD,IAAI,CAACF,SAAS,EAAEO,iBAAiB,CAAC,CAAC;IAC7D,CAAC,MAAM;MACLC,SAAS,GAAGxD,IAAI,CAACgD,SAAS,CAAC;IAC7B;IAEA,OAAO,IAAI,CAACR,MAAM,CAACa,MAAM,CACvB3C,SAAS,CAAC8B,MAAM,EAChBgB,SAAS,EACThC,OAAO,EAAEH,OAAO,EAChBa,aAAa,CAACV,OAAO,CAAC,EACtBS,mBAAmB,CAACT,OAAO,EAAED,WAAW,CAC1C,CAAC;EACH;AACF;AAEA,OAAO,SAASkC,UAAUA,CAAClB,SAAiB,EAAQ;EAClD,OAAO,IAAIF,IAAI,CAACE,SAAS,CAAC;AAC5B;AAEA,OAAO,SAASmB,YAAYA,CAACnB,SAAiB,EAAU;EACtD,OAAO,IAAIa,MAAM,CAACb,SAAS,CAAC;AAC9B;AAgBA,OAAO,SAASM,IAAIA,CAClBN,SAAoC,EACpCnB,IAAgB,EAChBd,GAAa,EACbqD,QAAuB,EACR;EACf,MAAMC,MAAM,GAAGA,CAAA,KAAc;IAC3B,IAAItD,GAAG,KAAK,IAAI,IAAIA,GAAG,KAAKU,SAAS,EAAE;MACrC,MAAM,IAAIP,KAAK,CAAC,yBAAyB,CAAC;IAC5C;IACA,MAAMoD,MAAM,GAAG,IAAIxB,IAAI,CAACE,SAAS,IAAI,EAAE,CAAC;IACxCsB,MAAM,CAAClB,MAAM,CAACvB,IAAI,CAAC;IACnB,OAAOyC,MAAM,CAAChB,IAAI,CAACvC,GAAG,CAAC;EACzB,CAAC;EAED,IAAIqD,QAAQ,EAAE;IACZ,IAAI;MACF,MAAMX,SAAS,GAAGY,MAAM,CAAC,CAAC;MAC1BE,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAE,IAAI,EAAEX,SAAS,CAAC;IAC7C,CAAC,CAAC,OAAOgB,GAAG,EAAE;MACZF,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAEK,GAAY,CAAC;IAC1C;IACA;EACF;EAEA,OAAOJ,MAAM,CAAC,CAAC;AACjB;AAeA,OAAO,SAASP,MAAMA,CACpBd,SAAoC,EACpCnB,IAAgB,EAChBd,GAAa,EACb0C,SAAqB,EACrBW,QAAyB,EACT;EAChB,MAAMM,QAAQ,GAAGA,CAAA,KAAe;IAC9B,IAAI3D,GAAG,KAAK,IAAI,IAAIA,GAAG,KAAKU,SAAS,EAAE;MACrC,MAAM,IAAIP,KAAK,CAAC,iBAAiB,CAAC;IACpC;IACA,MAAMyD,QAAQ,GAAG,IAAId,MAAM,CAACb,SAAS,IAAI,EAAE,CAAC;IAC5C2B,QAAQ,CAACvB,MAAM,CAACvB,IAAI,CAAC;IACrB,OAAO8C,QAAQ,CAACb,MAAM,CAAC/C,GAAG,EAAE0C,SAAS,CAAC;EACxC,CAAC;EAED,IAAIW,QAAQ,EAAE;IACZ,IAAI;MACF,MAAMQ,MAAM,GAAGF,QAAQ,CAAC,CAAC;MACzBH,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAE,IAAI,EAAEQ,MAAM,CAAC;IAC1C,CAAC,CAAC,OAAOH,GAAG,EAAE;MACZF,OAAO,CAACC,QAAQ,CAACJ,QAAQ,EAAEK,GAAY,CAAC;IAC1C;IACA;EACF;EAEA,OAAOC,QAAQ,CAAC,CAAC;AACnB","ignoreList":[]}