@omnituum/pqc-shared 0.3.1 → 0.4.1

package/dist/crypto/index.cjs

@@ -3,6 +3,8 @@
 var sha2_js = require('@noble/hashes/sha2.js');
 var hmac_js = require('@noble/hashes/hmac.js');
 var nacl = require('tweetnacl');
+var mlKem_js = require('@noble/post-quantum/ml-kem.js');
+var envelopeRegistry = require('@omnituum/envelope-registry');
 var blake3_js = require('@noble/hashes/blake3.js');
 var chacha_js = require('@noble/ciphers/chacha.js');
 var hkdf_js = require('@noble/hashes/hkdf.js');
@@ -198,78 +200,42 @@ function x25519SharedSecret(ourSecretKey, theirPublicKey) {
 function deriveKeyFromShared(shared, salt, info) {
   return hkdfSha256(shared, { salt: u8(salt), info: u8(info), length: 32 });
 }
-var kyberModule = null;
-async function loadKyber() {
-  if (kyberModule) return kyberModule;
-  try {
-    const m = await import('kyber-crystals');
-    const k = m.default ?? m;
-    kyberModule = k.kyber ?? k;
-    return kyberModule;
-  } catch (e) {
-    console.warn("[Kyber] Failed to load kyber-crystals:", e);
-    return null;
-  }
-}
+var KYBER_SUITE = "ML-KEM-1024-FIPS203";
+var KYBER_PUBLIC_KEY_SIZE = 1568;
+var KYBER_SECRET_KEY_SIZE = 3168;
+var KYBER_CIPHERTEXT_SIZE = 1568;
+var KYBER_SHARED_SECRET_SIZE = 32;
+var KYBER_SEED_SIZE = 64;
 async function isKyberAvailable() {
-  const mod = await loadKyber();
-  return mod !== null;
+  return true;
 }
 async function generateKyberKeypair() {
-  try {
-    const mod = await loadKyber();
-    if (!mod) return null;
-    if (mod?.ready?.then) {
-      await mod.ready;
-    }
-    const fn = mod?.keypair ?? mod?.keyPair ?? mod?.generateKeyPair ?? null;
-    if (typeof fn !== "function") {
-      console.warn("[Kyber] No keypair function found");
-      return null;
-    }
-    const kp = await fn.call(mod);
-    const pub = kp?.publicKey ?? kp?.public ?? kp?.pk;
-    const priv = kp?.privateKey ?? kp?.secretKey ?? kp?.secret ?? kp?.sk;
-    if (!pub || !priv) {
-      console.warn("[Kyber] Invalid keypair result");
-      return null;
-    }
-    return {
-      publicB64: b64(new Uint8Array(pub)),
-      secretB64: b64(new Uint8Array(priv))
-    };
-  } catch (e) {
-    console.warn("[Kyber] Key generation failed:", e);
-    return null;
+  const seed = randN(64);
+  const kp = mlKem_js.ml_kem1024.keygen(seed);
+  return {
+    publicB64: b64(kp.publicKey),
+    secretB64: b64(kp.secretKey)
+  };
+}
+function generateKyberKeypairFromSeed(seed) {
+  if (seed.length !== 64) {
+    throw new Error("Kyber seed must be 64 bytes");
   }
+  const kp = mlKem_js.ml_kem1024.keygen(seed);
+  return { publicKey: kp.publicKey, secretKey: kp.secretKey };
 }
 async function kyberEncapsulate(pubKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.encrypt) {
-    throw new Error("Kyber encrypt not available");
-  }
   const pk = ub64(pubKeyB64);
-  const r = await kyber.encrypt(pk);
-  const ctRaw = r?.ciphertext ?? r?.cyphertext ?? r?.ct ?? r?.bytes?.ciphertext ?? r?.bytes?.cyphertext ?? r?.bytes?.ct ?? (Array.isArray(r) ? r[0] : void 0);
-  const ssRaw = r?.key ?? r?.sharedSecret ?? r?.secret ?? r?.bytes?.key ?? r?.bytes?.sharedSecret ?? (Array.isArray(r) ? r[1] : void 0);
-  if (!ctRaw || !ssRaw) {
-    throw new Error("Kyber encapsulate failed: missing ciphertext or shared secret");
-  }
+  const enc = mlKem_js.ml_kem1024.encapsulate(pk);
   return {
-    ciphertext: new Uint8Array(ctRaw),
-    sharedSecret: new Uint8Array(ssRaw)
+    ciphertext: enc.cipherText,
+    sharedSecret: enc.sharedSecret
   };
 }
 async function kyberDecapsulate(kemCiphertextB64, secretKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.decrypt && !kyber?.decapsulate) {
-    throw new Error("Kyber decrypt/decapsulate not available");
-  }
   const ct = ub64(kemCiphertextB64);
   const sk = ub64(secretKeyB64);
-  const r = kyber.decrypt ? await kyber.decrypt(ct, sk) : await kyber.decapsulate(ct, sk);
-  const key = r && (r.key ?? r.sharedSecret) ? r.key ?? r.sharedSecret : r;
-  return new Uint8Array(key);
+  return mlKem_js.ml_kem1024.decapsulate(ct, sk);
 }
 function kyberWrapKey(sharedSecret, msgKey32) {
   if (msgKey32.length !== 32) {
@@ -278,10 +244,7 @@ function kyberWrapKey(sharedSecret, msgKey32) {
   const kek = sha256(sharedSecret);
   const nonce = globalThis.crypto.getRandomValues(new Uint8Array(24));
   const wrapped = nacl__default.default.secretbox(msgKey32, nonce, kek);
-  return {
-    nonce: b64(nonce),
-    wrapped: b64(wrapped)
-  };
+  return { nonce: b64(nonce), wrapped: b64(wrapped) };
 }
 function kyberUnwrapKey(sharedSecret, nonceB64, wrappedB64) {
   const kek = sha256(sharedSecret);
@@ -344,7 +307,7 @@ async function dilithiumSign(message, secretKeyB64) {
   }
   const sk = fromB64(secretKeyB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
-  const signature = mod.sign(sk, msg);
+  const signature = mod.sign(msg, sk);
   return {
     signature: toB64(signature),
     algorithm: "ML-DSA-65"
@@ -355,7 +318,7 @@ async function dilithiumSignRaw(message, secretKey) {
   if (!mod) {
     throw new Error("Dilithium library not available");
   }
-  return mod.sign(secretKey, message);
+  return mod.sign(message, secretKey);
 }
 async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const mod = await loadDilithium();
@@ -366,7 +329,7 @@ async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const sig = fromB64(signatureB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
   try {
-    return mod.verify(pk, msg, sig);
+    return mod.verify(sig, msg, pk);
   } catch {
     return false;
   }
@@ -377,7 +340,7 @@ async function dilithiumVerifyRaw(message, signature, publicKey) {
     throw new Error("Dilithium library not available");
   }
   try {
-    return mod.verify(publicKey, message, signature);
+    return mod.verify(signature, message, publicKey);
   } catch {
     return false;
   }
@@ -386,10 +349,8 @@ var DILITHIUM_PUBLIC_KEY_SIZE = 1952;
 var DILITHIUM_SECRET_KEY_SIZE = 4032;
 var DILITHIUM_SIGNATURE_SIZE = 3309;
 var DILITHIUM_ALGORITHM = "ML-DSA-65";
-
-// src/version.ts
-var ENVELOPE_VERSION = "omnituum.hybrid.v1";
-var ENVELOPE_VERSION_LEGACY = "pqc-demo.hybrid.v1";
+var ENVELOPE_VERSION = envelopeRegistry.OMNI_VERSIONS.HYBRID_V1;
+var ENVELOPE_VERSION_LEGACY = envelopeRegistry.DEPRECATED_VERSIONS.PQC_DEMO_HYBRID_V1;
 var ENVELOPE_SUITE = "x25519+kyber768";
 var ENVELOPE_AEAD = "xsalsa20poly1305";
 var SUPPORTED_ENVELOPE_VERSIONS = [
@@ -733,6 +694,12 @@ exports.HKDF_SHA256_MAX_OUTPUT = HKDF_SHA256_MAX_OUTPUT;
 exports.HKDF_SHA256_OUTPUT_SIZE = HKDF_SHA256_OUTPUT_SIZE;
 exports.HKDF_SHA512_MAX_OUTPUT = HKDF_SHA512_MAX_OUTPUT;
 exports.HKDF_SHA512_OUTPUT_SIZE = HKDF_SHA512_OUTPUT_SIZE;
+exports.KYBER_CIPHERTEXT_SIZE = KYBER_CIPHERTEXT_SIZE;
+exports.KYBER_PUBLIC_KEY_SIZE = KYBER_PUBLIC_KEY_SIZE;
+exports.KYBER_SECRET_KEY_SIZE = KYBER_SECRET_KEY_SIZE;
+exports.KYBER_SEED_SIZE = KYBER_SEED_SIZE;
+exports.KYBER_SHARED_SECRET_SIZE = KYBER_SHARED_SECRET_SIZE;
+exports.KYBER_SUITE = KYBER_SUITE;
 exports.POLY1305_TAG_SIZE = POLY1305_TAG_SIZE;
 exports.SECRETBOX_KEY_SIZE = SECRETBOX_KEY_SIZE;
 exports.SECRETBOX_NONCE_SIZE = SECRETBOX_NONCE_SIZE;
@@ -763,6 +730,7 @@ exports.generateDilithiumKeypair = generateDilithiumKeypair;
 exports.generateDilithiumKeypairFromSeed = generateDilithiumKeypairFromSeed;
 exports.generateHybridIdentity = generateHybridIdentity;
 exports.generateKyberKeypair = generateKyberKeypair;
+exports.generateKyberKeypairFromSeed = generateKyberKeypairFromSeed;
 exports.generateX25519Keypair = generateX25519Keypair;
 exports.generateX25519KeypairFromSeed = generateX25519KeypairFromSeed;
 exports.getPublicKeys = getPublicKeys;

package/dist/crypto/index.d.cts

@@ -1,11 +1,24 @@
-import { E as ENVELOPE_VERSION, f as ENVELOPE_SUITE, g as ENVELOPE_AEAD } from '../version-BygzPVGs.cjs';
+import { OmniHybridV1 } from '@omnituum/envelope-registry';
 import * as _noble_ciphers_utils_js from '@noble/ciphers/utils.js';
 
 /**
- * Omnituum PQC Shared - Kyber ML-KEM-768
+ * Omnituum PQC Shared — Kyber (ML-KEM-1024, FIPS 203)
  *
- * Browser-compatible Kyber operations using kyber-crystals.
- * NIST Level 3 security - quantum-resistant.
+ * Backend: @noble/post-quantum `ml_kem1024`. NIST FIPS 203 (final, 2024).
+ *
+ * Wire-format note: previous releases (<= 0.3.x) of this package were backed by
+ * `kyber-crystals`, which implements an earlier draft of Kyber and is NOT
+ * interoperable with FIPS 203 — see `tests/interop/historical/` and
+ * `package-docs/GAPS_AND_TASKS.md` (PQC-02 result). 0.4.0 is an intentional
+ * clean break: legacy draft-Kyber material cannot be read by this version.
+ *
+ * Sizes (ML-KEM-1024):
+ *   publicKey  1568 bytes
+ *   secretKey  3168 bytes
+ *   ciphertext 1568 bytes
+ *   sharedSecret 32 bytes
+ *
+ * Suite tag for new material: "ML-KEM-1024-FIPS203".
  */
 interface KyberKeypair {
     publicKey: Uint8Array;
@@ -19,29 +32,44 @@ interface KyberEncapsulation {
     ciphertext: Uint8Array;
     sharedSecret: Uint8Array;
 }
+/** Canonical suite identifier for new material produced by this package. */
+declare const KYBER_SUITE: "ML-KEM-1024-FIPS203";
+type KyberSuite = typeof KYBER_SUITE;
+/** ML-KEM-1024 public key size (bytes). */
+declare const KYBER_PUBLIC_KEY_SIZE = 1568;
+/** ML-KEM-1024 secret key size (bytes). */
+declare const KYBER_SECRET_KEY_SIZE = 3168;
+/** ML-KEM-1024 ciphertext size (bytes). */
+declare const KYBER_CIPHERTEXT_SIZE = 1568;
+/** ML-KEM-1024 shared-secret size (bytes). */
+declare const KYBER_SHARED_SECRET_SIZE = 32;
+/** Seed size accepted by `generateKyberKeypairFromSeed` (bytes). */
+declare const KYBER_SEED_SIZE = 64;
+/**
+ * @deprecated Always returns true. Retained for API stability across the
+ * 0.3.x → 0.4.x cut. The noble backend is statically imported and always
+ * present; there is no runtime feature-detection path.
+ */
 declare function isKyberAvailable(): Promise<boolean>;
 /**
- * Generate a Kyber ML-KEM-768 keypair.
+ * Generate a fresh ML-KEM-1024 keypair using a cryptographically random seed.
  */
 declare function generateKyberKeypair(): Promise<KyberKeypairB64 | null>;
 /**
- * Encapsulate a shared secret using Kyber ML-KEM-768.
+ * Derive a deterministic ML-KEM-1024 keypair from a 64-byte seed.
+ * Same seed → byte-identical keypair, across runtimes (Node, browser).
+ *
+ * The seed is passed verbatim to the FIPS 203 keygen. Callers that need
+ * domain separation between Kyber and other key types must apply it
+ * upstream (e.g. via SHA-256 with a domain tag) before calling.
  */
+declare function generateKyberKeypairFromSeed(seed: Uint8Array): KyberKeypair;
 declare function kyberEncapsulate(pubKeyB64: string): Promise<KyberEncapsulation>;
-/**
- * Decapsulate a shared secret using Kyber ML-KEM-768.
- */
 declare function kyberDecapsulate(kemCiphertextB64: string, secretKeyB64: string): Promise<Uint8Array>;
-/**
- * Wrap a message key using Kyber shared secret.
- */
 declare function kyberWrapKey(sharedSecret: Uint8Array, msgKey32: Uint8Array): {
     nonce: string;
     wrapped: string;
 };
-/**
- * Unwrap a message key using Kyber shared secret.
- */
 declare function kyberUnwrapKey(sharedSecret: Uint8Array, nonceB64: string, wrappedB64: string): Uint8Array | null;
 
 /**
@@ -87,38 +115,13 @@ interface HybridSecretKeys {
     /** Kyber secret key (base64) */
     kyberSecB64: string;
 }
-interface HybridEnvelope {
-    /** Version identifier (FROZEN - see pqc-docs/specs/envelope.v1.md) */
-    v: typeof ENVELOPE_VERSION;
-    /** Algorithm suite */
-    suite: typeof ENVELOPE_SUITE;
-    /** AEAD algorithm */
-    aead: typeof ENVELOPE_AEAD;
-    /** X25519 ephemeral public key (hex) */
-    x25519Epk: string;
-    /** X25519 wrapped content key */
-    x25519Wrap: {
-        nonce: string;
-        wrapped: string;
-    };
-    /** Kyber KEM ciphertext (base64) */
-    kyberKemCt: string;
-    /** Kyber wrapped content key */
-    kyberWrap: {
-        nonce: string;
-        wrapped: string;
-    };
-    /** Content encryption nonce (base64) */
-    contentNonce: string;
-    /** Encrypted content (base64) */
-    ciphertext: string;
-    /** Metadata */
-    meta: {
-        createdAt: string;
+
+type HybridEnvelope = Omit<OmniHybridV1, 'meta'> & {
+    meta: OmniHybridV1['meta'] & {
         senderName?: string;
         senderId?: string;
     };
-}
+};
 /**
  * Generate a new hybrid identity with both X25519 and Kyber keys.
  */
@@ -638,4 +641,4 @@ declare const BOX_KEY_SIZE: number;
 /** NaCl box nonce size (24 bytes) */
 declare const BOX_NONCE_SIZE: number;
 
-export { BLAKE3_BLOCK_SIZE, BLAKE3_KEY_LENGTH, BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, type Blake3Options, type BoxPayload, CHACHA20_KEY_SIZE, CHACHA20_NONCE_SIZE, type ChaChaPayload, type ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, type DilithiumKeypair, type DilithiumKeypairB64, type DilithiumSignature, HKDF_SHA256_MAX_OUTPUT, HKDF_SHA256_OUTPUT_SIZE, HKDF_SHA512_MAX_OUTPUT, HKDF_SHA512_OUTPUT_SIZE, type HkdfHash, type HkdfOptions, type HybridEnvelope, type HybridIdentity, type HybridPublicKeys, type HybridSecretKeys, type KyberEncapsulation, type KyberKeypair, type KyberKeypairB64, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, type SecretboxPayload, type X25519Keypair, type X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, rotateHybridIdentity, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt };
+export { BLAKE3_BLOCK_SIZE, BLAKE3_KEY_LENGTH, BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, type Blake3Options, type BoxPayload, CHACHA20_KEY_SIZE, CHACHA20_NONCE_SIZE, type ChaChaPayload, type ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, type DilithiumKeypair, type DilithiumKeypairB64, type DilithiumSignature, HKDF_SHA256_MAX_OUTPUT, HKDF_SHA256_OUTPUT_SIZE, HKDF_SHA512_MAX_OUTPUT, HKDF_SHA512_OUTPUT_SIZE, type HkdfHash, type HkdfOptions, type HybridEnvelope, type HybridIdentity, type HybridPublicKeys, type HybridSecretKeys, KYBER_CIPHERTEXT_SIZE, KYBER_PUBLIC_KEY_SIZE, KYBER_SECRET_KEY_SIZE, KYBER_SEED_SIZE, KYBER_SHARED_SECRET_SIZE, KYBER_SUITE, type KyberEncapsulation, type KyberKeypair, type KyberKeypairB64, type KyberSuite, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, type SecretboxPayload, type X25519Keypair, type X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateKyberKeypairFromSeed, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, rotateHybridIdentity, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt };

package/dist/crypto/index.d.ts

@@ -1,11 +1,24 @@
-import { E as ENVELOPE_VERSION, f as ENVELOPE_SUITE, g as ENVELOPE_AEAD } from '../version-BygzPVGs.js';
+import { OmniHybridV1 } from '@omnituum/envelope-registry';
 import * as _noble_ciphers_utils_js from '@noble/ciphers/utils.js';
 
 /**
- * Omnituum PQC Shared - Kyber ML-KEM-768
+ * Omnituum PQC Shared — Kyber (ML-KEM-1024, FIPS 203)
  *
- * Browser-compatible Kyber operations using kyber-crystals.
- * NIST Level 3 security - quantum-resistant.
+ * Backend: @noble/post-quantum `ml_kem1024`. NIST FIPS 203 (final, 2024).
+ *
+ * Wire-format note: previous releases (<= 0.3.x) of this package were backed by
+ * `kyber-crystals`, which implements an earlier draft of Kyber and is NOT
+ * interoperable with FIPS 203 — see `tests/interop/historical/` and
+ * `package-docs/GAPS_AND_TASKS.md` (PQC-02 result). 0.4.0 is an intentional
+ * clean break: legacy draft-Kyber material cannot be read by this version.
+ *
+ * Sizes (ML-KEM-1024):
+ *   publicKey  1568 bytes
+ *   secretKey  3168 bytes
+ *   ciphertext 1568 bytes
+ *   sharedSecret 32 bytes
+ *
+ * Suite tag for new material: "ML-KEM-1024-FIPS203".
  */
 interface KyberKeypair {
     publicKey: Uint8Array;
@@ -19,29 +32,44 @@ interface KyberEncapsulation {
     ciphertext: Uint8Array;
     sharedSecret: Uint8Array;
 }
+/** Canonical suite identifier for new material produced by this package. */
+declare const KYBER_SUITE: "ML-KEM-1024-FIPS203";
+type KyberSuite = typeof KYBER_SUITE;
+/** ML-KEM-1024 public key size (bytes). */
+declare const KYBER_PUBLIC_KEY_SIZE = 1568;
+/** ML-KEM-1024 secret key size (bytes). */
+declare const KYBER_SECRET_KEY_SIZE = 3168;
+/** ML-KEM-1024 ciphertext size (bytes). */
+declare const KYBER_CIPHERTEXT_SIZE = 1568;
+/** ML-KEM-1024 shared-secret size (bytes). */
+declare const KYBER_SHARED_SECRET_SIZE = 32;
+/** Seed size accepted by `generateKyberKeypairFromSeed` (bytes). */
+declare const KYBER_SEED_SIZE = 64;
+/**
+ * @deprecated Always returns true. Retained for API stability across the
+ * 0.3.x → 0.4.x cut. The noble backend is statically imported and always
+ * present; there is no runtime feature-detection path.
+ */
 declare function isKyberAvailable(): Promise<boolean>;
 /**
- * Generate a Kyber ML-KEM-768 keypair.
+ * Generate a fresh ML-KEM-1024 keypair using a cryptographically random seed.
  */
 declare function generateKyberKeypair(): Promise<KyberKeypairB64 | null>;
 /**
- * Encapsulate a shared secret using Kyber ML-KEM-768.
+ * Derive a deterministic ML-KEM-1024 keypair from a 64-byte seed.
+ * Same seed → byte-identical keypair, across runtimes (Node, browser).
+ *
+ * The seed is passed verbatim to the FIPS 203 keygen. Callers that need
+ * domain separation between Kyber and other key types must apply it
+ * upstream (e.g. via SHA-256 with a domain tag) before calling.
  */
+declare function generateKyberKeypairFromSeed(seed: Uint8Array): KyberKeypair;
 declare function kyberEncapsulate(pubKeyB64: string): Promise<KyberEncapsulation>;
-/**
- * Decapsulate a shared secret using Kyber ML-KEM-768.
- */
 declare function kyberDecapsulate(kemCiphertextB64: string, secretKeyB64: string): Promise<Uint8Array>;
-/**
- * Wrap a message key using Kyber shared secret.
- */
 declare function kyberWrapKey(sharedSecret: Uint8Array, msgKey32: Uint8Array): {
     nonce: string;
     wrapped: string;
 };
-/**
- * Unwrap a message key using Kyber shared secret.
- */
 declare function kyberUnwrapKey(sharedSecret: Uint8Array, nonceB64: string, wrappedB64: string): Uint8Array | null;
 
 /**
@@ -87,38 +115,13 @@ interface HybridSecretKeys {
     /** Kyber secret key (base64) */
     kyberSecB64: string;
 }
-interface HybridEnvelope {
-    /** Version identifier (FROZEN - see pqc-docs/specs/envelope.v1.md) */
-    v: typeof ENVELOPE_VERSION;
-    /** Algorithm suite */
-    suite: typeof ENVELOPE_SUITE;
-    /** AEAD algorithm */
-    aead: typeof ENVELOPE_AEAD;
-    /** X25519 ephemeral public key (hex) */
-    x25519Epk: string;
-    /** X25519 wrapped content key */
-    x25519Wrap: {
-        nonce: string;
-        wrapped: string;
-    };
-    /** Kyber KEM ciphertext (base64) */
-    kyberKemCt: string;
-    /** Kyber wrapped content key */
-    kyberWrap: {
-        nonce: string;
-        wrapped: string;
-    };
-    /** Content encryption nonce (base64) */
-    contentNonce: string;
-    /** Encrypted content (base64) */
-    ciphertext: string;
-    /** Metadata */
-    meta: {
-        createdAt: string;
+
+type HybridEnvelope = Omit<OmniHybridV1, 'meta'> & {
+    meta: OmniHybridV1['meta'] & {
         senderName?: string;
         senderId?: string;
     };
-}
+};
 /**
  * Generate a new hybrid identity with both X25519 and Kyber keys.
  */
@@ -638,4 +641,4 @@ declare const BOX_KEY_SIZE: number;
 /** NaCl box nonce size (24 bytes) */
 declare const BOX_NONCE_SIZE: number;
 
-export { BLAKE3_BLOCK_SIZE, BLAKE3_KEY_LENGTH, BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, type Blake3Options, type BoxPayload, CHACHA20_KEY_SIZE, CHACHA20_NONCE_SIZE, type ChaChaPayload, type ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, type DilithiumKeypair, type DilithiumKeypairB64, type DilithiumSignature, HKDF_SHA256_MAX_OUTPUT, HKDF_SHA256_OUTPUT_SIZE, HKDF_SHA512_MAX_OUTPUT, HKDF_SHA512_OUTPUT_SIZE, type HkdfHash, type HkdfOptions, type HybridEnvelope, type HybridIdentity, type HybridPublicKeys, type HybridSecretKeys, type KyberEncapsulation, type KyberKeypair, type KyberKeypairB64, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, type SecretboxPayload, type X25519Keypair, type X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, rotateHybridIdentity, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt };
+export { BLAKE3_BLOCK_SIZE, BLAKE3_KEY_LENGTH, BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, type Blake3Options, type BoxPayload, CHACHA20_KEY_SIZE, CHACHA20_NONCE_SIZE, type ChaChaPayload, type ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, type DilithiumKeypair, type DilithiumKeypairB64, type DilithiumSignature, HKDF_SHA256_MAX_OUTPUT, HKDF_SHA256_OUTPUT_SIZE, HKDF_SHA512_MAX_OUTPUT, HKDF_SHA512_OUTPUT_SIZE, type HkdfHash, type HkdfOptions, type HybridEnvelope, type HybridIdentity, type HybridPublicKeys, type HybridSecretKeys, KYBER_CIPHERTEXT_SIZE, KYBER_PUBLIC_KEY_SIZE, KYBER_SECRET_KEY_SIZE, KYBER_SEED_SIZE, KYBER_SHARED_SECRET_SIZE, KYBER_SUITE, type KyberEncapsulation, type KyberKeypair, type KyberKeypairB64, type KyberSuite, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, type SecretboxPayload, type X25519Keypair, type X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateKyberKeypairFromSeed, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, rotateHybridIdentity, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt };

package/dist/crypto/index.js

@@ -1,6 +1,8 @@
 import { sha256 as sha256$1, sha512 } from '@noble/hashes/sha2.js';
 import { hmac } from '@noble/hashes/hmac.js';
 import nacl from 'tweetnacl';
+import { ml_kem1024 } from '@noble/post-quantum/ml-kem.js';
+import { OMNI_VERSIONS, DEPRECATED_VERSIONS } from '@omnituum/envelope-registry';
 import { blake3 as blake3$1 } from '@noble/hashes/blake3.js';
 import { chacha20poly1305, xchacha20poly1305 } from '@noble/ciphers/chacha.js';
 import { hkdf, extract, expand } from '@noble/hashes/hkdf.js';
@@ -192,78 +194,42 @@ function x25519SharedSecret(ourSecretKey, theirPublicKey) {
 function deriveKeyFromShared(shared, salt, info) {
   return hkdfSha256(shared, { salt: u8(salt), info: u8(info), length: 32 });
 }
-var kyberModule = null;
-async function loadKyber() {
-  if (kyberModule) return kyberModule;
-  try {
-    const m = await import('kyber-crystals');
-    const k = m.default ?? m;
-    kyberModule = k.kyber ?? k;
-    return kyberModule;
-  } catch (e) {
-    console.warn("[Kyber] Failed to load kyber-crystals:", e);
-    return null;
-  }
-}
+var KYBER_SUITE = "ML-KEM-1024-FIPS203";
+var KYBER_PUBLIC_KEY_SIZE = 1568;
+var KYBER_SECRET_KEY_SIZE = 3168;
+var KYBER_CIPHERTEXT_SIZE = 1568;
+var KYBER_SHARED_SECRET_SIZE = 32;
+var KYBER_SEED_SIZE = 64;
 async function isKyberAvailable() {
-  const mod = await loadKyber();
-  return mod !== null;
+  return true;
 }
 async function generateKyberKeypair() {
-  try {
-    const mod = await loadKyber();
-    if (!mod) return null;
-    if (mod?.ready?.then) {
-      await mod.ready;
-    }
-    const fn = mod?.keypair ?? mod?.keyPair ?? mod?.generateKeyPair ?? null;
-    if (typeof fn !== "function") {
-      console.warn("[Kyber] No keypair function found");
-      return null;
-    }
-    const kp = await fn.call(mod);
-    const pub = kp?.publicKey ?? kp?.public ?? kp?.pk;
-    const priv = kp?.privateKey ?? kp?.secretKey ?? kp?.secret ?? kp?.sk;
-    if (!pub || !priv) {
-      console.warn("[Kyber] Invalid keypair result");
-      return null;
-    }
-    return {
-      publicB64: b64(new Uint8Array(pub)),
-      secretB64: b64(new Uint8Array(priv))
-    };
-  } catch (e) {
-    console.warn("[Kyber] Key generation failed:", e);
-    return null;
+  const seed = randN(64);
+  const kp = ml_kem1024.keygen(seed);
+  return {
+    publicB64: b64(kp.publicKey),
+    secretB64: b64(kp.secretKey)
+  };
+}
+function generateKyberKeypairFromSeed(seed) {
+  if (seed.length !== 64) {
+    throw new Error("Kyber seed must be 64 bytes");
   }
+  const kp = ml_kem1024.keygen(seed);
+  return { publicKey: kp.publicKey, secretKey: kp.secretKey };
 }
 async function kyberEncapsulate(pubKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.encrypt) {
-    throw new Error("Kyber encrypt not available");
-  }
   const pk = ub64(pubKeyB64);
-  const r = await kyber.encrypt(pk);
-  const ctRaw = r?.ciphertext ?? r?.cyphertext ?? r?.ct ?? r?.bytes?.ciphertext ?? r?.bytes?.cyphertext ?? r?.bytes?.ct ?? (Array.isArray(r) ? r[0] : void 0);
-  const ssRaw = r?.key ?? r?.sharedSecret ?? r?.secret ?? r?.bytes?.key ?? r?.bytes?.sharedSecret ?? (Array.isArray(r) ? r[1] : void 0);
-  if (!ctRaw || !ssRaw) {
-    throw new Error("Kyber encapsulate failed: missing ciphertext or shared secret");
-  }
+  const enc = ml_kem1024.encapsulate(pk);
   return {
-    ciphertext: new Uint8Array(ctRaw),
-    sharedSecret: new Uint8Array(ssRaw)
+    ciphertext: enc.cipherText,
+    sharedSecret: enc.sharedSecret
   };
 }
 async function kyberDecapsulate(kemCiphertextB64, secretKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.decrypt && !kyber?.decapsulate) {
-    throw new Error("Kyber decrypt/decapsulate not available");
-  }
   const ct = ub64(kemCiphertextB64);
   const sk = ub64(secretKeyB64);
-  const r = kyber.decrypt ? await kyber.decrypt(ct, sk) : await kyber.decapsulate(ct, sk);
-  const key = r && (r.key ?? r.sharedSecret) ? r.key ?? r.sharedSecret : r;
-  return new Uint8Array(key);
+  return ml_kem1024.decapsulate(ct, sk);
 }
 function kyberWrapKey(sharedSecret, msgKey32) {
   if (msgKey32.length !== 32) {
@@ -272,10 +238,7 @@ function kyberWrapKey(sharedSecret, msgKey32) {
   const kek = sha256(sharedSecret);
   const nonce = globalThis.crypto.getRandomValues(new Uint8Array(24));
   const wrapped = nacl.secretbox(msgKey32, nonce, kek);
-  return {
-    nonce: b64(nonce),
-    wrapped: b64(wrapped)
-  };
+  return { nonce: b64(nonce), wrapped: b64(wrapped) };
 }
 function kyberUnwrapKey(sharedSecret, nonceB64, wrappedB64) {
   const kek = sha256(sharedSecret);
@@ -338,7 +301,7 @@ async function dilithiumSign(message, secretKeyB64) {
   }
   const sk = fromB64(secretKeyB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
-  const signature = mod.sign(sk, msg);
+  const signature = mod.sign(msg, sk);
   return {
     signature: toB64(signature),
     algorithm: "ML-DSA-65"
@@ -349,7 +312,7 @@ async function dilithiumSignRaw(message, secretKey) {
   if (!mod) {
     throw new Error("Dilithium library not available");
   }
-  return mod.sign(secretKey, message);
+  return mod.sign(message, secretKey);
 }
 async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const mod = await loadDilithium();
@@ -360,7 +323,7 @@ async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const sig = fromB64(signatureB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
   try {
-    return mod.verify(pk, msg, sig);
+    return mod.verify(sig, msg, pk);
   } catch {
     return false;
   }
@@ -371,7 +334,7 @@ async function dilithiumVerifyRaw(message, signature, publicKey) {
     throw new Error("Dilithium library not available");
   }
   try {
-    return mod.verify(publicKey, message, signature);
+    return mod.verify(signature, message, publicKey);
   } catch {
     return false;
   }
@@ -380,10 +343,8 @@ var DILITHIUM_PUBLIC_KEY_SIZE = 1952;
 var DILITHIUM_SECRET_KEY_SIZE = 4032;
 var DILITHIUM_SIGNATURE_SIZE = 3309;
 var DILITHIUM_ALGORITHM = "ML-DSA-65";
-
-// src/version.ts
-var ENVELOPE_VERSION = "omnituum.hybrid.v1";
-var ENVELOPE_VERSION_LEGACY = "pqc-demo.hybrid.v1";
+var ENVELOPE_VERSION = OMNI_VERSIONS.HYBRID_V1;
+var ENVELOPE_VERSION_LEGACY = DEPRECATED_VERSIONS.PQC_DEMO_HYBRID_V1;
 var ENVELOPE_SUITE = "x25519+kyber768";
 var ENVELOPE_AEAD = "xsalsa20poly1305";
 var SUPPORTED_ENVELOPE_VERSIONS = [
@@ -712,4 +673,4 @@ var HKDF_SHA512_OUTPUT_SIZE = 64;
 var HKDF_SHA256_MAX_OUTPUT = 255 * 32;
 var HKDF_SHA512_MAX_OUTPUT = 255 * 64;
 
-export { BLAKE3_BLOCK_SIZE, BLAKE3_KEY_LENGTH, BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, CHACHA20_KEY_SIZE, CHACHA20_NONCE_SIZE, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, HKDF_SHA256_MAX_OUTPUT, HKDF_SHA256_OUTPUT_SIZE, HKDF_SHA512_MAX_OUTPUT, HKDF_SHA512_OUTPUT_SIZE, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, rotateHybridIdentity, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt };
+export { BLAKE3_BLOCK_SIZE, BLAKE3_KEY_LENGTH, BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, CHACHA20_KEY_SIZE, CHACHA20_NONCE_SIZE, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, HKDF_SHA256_MAX_OUTPUT, HKDF_SHA256_OUTPUT_SIZE, HKDF_SHA512_MAX_OUTPUT, HKDF_SHA512_OUTPUT_SIZE, KYBER_CIPHERTEXT_SIZE, KYBER_PUBLIC_KEY_SIZE, KYBER_SECRET_KEY_SIZE, KYBER_SEED_SIZE, KYBER_SHARED_SECRET_SIZE, KYBER_SUITE, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateKyberKeypairFromSeed, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, rotateHybridIdentity, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt };