@omnituum/pqc-shared 0.3.1 → 0.4.1

package/dist/index.cjs

@@ -3,6 +3,8 @@
 var nacl4 = require('tweetnacl');
 var sha2_js = require('@noble/hashes/sha2.js');
 var hmac_js = require('@noble/hashes/hmac.js');
+var mlKem_js = require('@noble/post-quantum/ml-kem.js');
+var envelopeRegistry = require('@omnituum/envelope-registry');
 var hashWasm = require('hash-wasm');
 var blake3_js = require('@noble/hashes/blake3.js');
 var chacha_js = require('@noble/ciphers/chacha.js');
@@ -152,78 +154,42 @@ function x25519SharedSecret(ourSecretKey, theirPublicKey) {
 function deriveKeyFromShared(shared, salt, info) {
   return hkdfSha256(shared, { salt: u8(salt), info: u8(info), length: 32 });
 }
-var kyberModule = null;
-async function loadKyber() {
-  if (kyberModule) return kyberModule;
-  try {
-    const m = await import('kyber-crystals');
-    const k = m.default ?? m;
-    kyberModule = k.kyber ?? k;
-    return kyberModule;
-  } catch (e) {
-    console.warn("[Kyber] Failed to load kyber-crystals:", e);
-    return null;
-  }
-}
+var KYBER_SUITE = "ML-KEM-1024-FIPS203";
+var KYBER_PUBLIC_KEY_SIZE = 1568;
+var KYBER_SECRET_KEY_SIZE = 3168;
+var KYBER_CIPHERTEXT_SIZE = 1568;
+var KYBER_SHARED_SECRET_SIZE = 32;
+var KYBER_SEED_SIZE = 64;
 async function isKyberAvailable() {
-  const mod = await loadKyber();
-  return mod !== null;
+  return true;
 }
 async function generateKyberKeypair() {
-  try {
-    const mod = await loadKyber();
-    if (!mod) return null;
-    if (mod?.ready?.then) {
-      await mod.ready;
-    }
-    const fn = mod?.keypair ?? mod?.keyPair ?? mod?.generateKeyPair ?? null;
-    if (typeof fn !== "function") {
-      console.warn("[Kyber] No keypair function found");
-      return null;
-    }
-    const kp = await fn.call(mod);
-    const pub = kp?.publicKey ?? kp?.public ?? kp?.pk;
-    const priv = kp?.privateKey ?? kp?.secretKey ?? kp?.secret ?? kp?.sk;
-    if (!pub || !priv) {
-      console.warn("[Kyber] Invalid keypair result");
-      return null;
-    }
-    return {
-      publicB64: b64(new Uint8Array(pub)),
-      secretB64: b64(new Uint8Array(priv))
-    };
-  } catch (e) {
-    console.warn("[Kyber] Key generation failed:", e);
-    return null;
+  const seed = randN(64);
+  const kp = mlKem_js.ml_kem1024.keygen(seed);
+  return {
+    publicB64: b64(kp.publicKey),
+    secretB64: b64(kp.secretKey)
+  };
+}
+function generateKyberKeypairFromSeed(seed) {
+  if (seed.length !== 64) {
+    throw new Error("Kyber seed must be 64 bytes");
   }
+  const kp = mlKem_js.ml_kem1024.keygen(seed);
+  return { publicKey: kp.publicKey, secretKey: kp.secretKey };
 }
 async function kyberEncapsulate(pubKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.encrypt) {
-    throw new Error("Kyber encrypt not available");
-  }
   const pk = ub64(pubKeyB64);
-  const r = await kyber.encrypt(pk);
-  const ctRaw = r?.ciphertext ?? r?.cyphertext ?? r?.ct ?? r?.bytes?.ciphertext ?? r?.bytes?.cyphertext ?? r?.bytes?.ct ?? (Array.isArray(r) ? r[0] : void 0);
-  const ssRaw = r?.key ?? r?.sharedSecret ?? r?.secret ?? r?.bytes?.key ?? r?.bytes?.sharedSecret ?? (Array.isArray(r) ? r[1] : void 0);
-  if (!ctRaw || !ssRaw) {
-    throw new Error("Kyber encapsulate failed: missing ciphertext or shared secret");
-  }
+  const enc = mlKem_js.ml_kem1024.encapsulate(pk);
   return {
-    ciphertext: new Uint8Array(ctRaw),
-    sharedSecret: new Uint8Array(ssRaw)
+    ciphertext: enc.cipherText,
+    sharedSecret: enc.sharedSecret
   };
 }
 async function kyberDecapsulate(kemCiphertextB64, secretKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.decrypt && !kyber?.decapsulate) {
-    throw new Error("Kyber decrypt/decapsulate not available");
-  }
   const ct = ub64(kemCiphertextB64);
   const sk = ub64(secretKeyB64);
-  const r = kyber.decrypt ? await kyber.decrypt(ct, sk) : await kyber.decapsulate(ct, sk);
-  const key = r && (r.key ?? r.sharedSecret) ? r.key ?? r.sharedSecret : r;
-  return new Uint8Array(key);
+  return mlKem_js.ml_kem1024.decapsulate(ct, sk);
 }
 function kyberWrapKey(sharedSecret, msgKey32) {
   if (msgKey32.length !== 32) {
@@ -232,10 +198,7 @@ function kyberWrapKey(sharedSecret, msgKey32) {
   const kek = sha256(sharedSecret);
   const nonce = globalThis.crypto.getRandomValues(new Uint8Array(24));
   const wrapped = nacl4__default.default.secretbox(msgKey32, nonce, kek);
-  return {
-    nonce: b64(nonce),
-    wrapped: b64(wrapped)
-  };
+  return { nonce: b64(nonce), wrapped: b64(wrapped) };
 }
 function kyberUnwrapKey(sharedSecret, nonceB64, wrappedB64) {
   const kek = sha256(sharedSecret);
@@ -243,10 +206,8 @@ function kyberUnwrapKey(sharedSecret, nonceB64, wrappedB64) {
   const wrapped = ub64(wrappedB64);
   return nacl4__default.default.secretbox.open(wrapped, nonce, kek) || null;
 }
-
-// src/version.ts
-var ENVELOPE_VERSION = "omnituum.hybrid.v1";
-var ENVELOPE_VERSION_LEGACY = "pqc-demo.hybrid.v1";
+var ENVELOPE_VERSION = envelopeRegistry.OMNI_VERSIONS.HYBRID_V1;
+var ENVELOPE_VERSION_LEGACY = envelopeRegistry.DEPRECATED_VERSIONS.PQC_DEMO_HYBRID_V1;
 var VAULT_VERSION = "omnituum.vault.v1";
 var VAULT_ENCRYPTED_VERSION = "omnituum.vault.enc.v1";
 var VAULT_ENCRYPTED_VERSION_V2 = "omnituum.vault.enc.v2";
@@ -587,7 +548,7 @@ async function dilithiumSign(message, secretKeyB64) {
   }
   const sk = fromB64(secretKeyB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
-  const signature = mod.sign(sk, msg);
+  const signature = mod.sign(msg, sk);
   return {
     signature: toB64(signature),
     algorithm: "ML-DSA-65"
@@ -598,7 +559,7 @@ async function dilithiumSignRaw(message, secretKey) {
   if (!mod) {
     throw new Error("Dilithium library not available");
   }
-  return mod.sign(secretKey, message);
+  return mod.sign(message, secretKey);
 }
 async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const mod = await loadDilithium();
@@ -609,7 +570,7 @@ async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const sig = fromB64(signatureB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
   try {
-    return mod.verify(pk, msg, sig);
+    return mod.verify(sig, msg, pk);
   } catch {
     return false;
   }
@@ -620,7 +581,7 @@ async function dilithiumVerifyRaw(message, signature, publicKey) {
     throw new Error("Dilithium library not available");
   }
   try {
-    return mod.verify(publicKey, message, signature);
+    return mod.verify(signature, message, publicKey);
   } catch {
     return false;
   }
@@ -2046,6 +2007,12 @@ exports.ENVELOPE_SUITE = ENVELOPE_SUITE;
 exports.ENVELOPE_VERSION = ENVELOPE_VERSION;
 exports.KDF_CONFIG_ARGON2ID = KDF_CONFIG_ARGON2ID;
 exports.KDF_CONFIG_PBKDF2 = KDF_CONFIG_PBKDF2;
+exports.KYBER_CIPHERTEXT_SIZE = KYBER_CIPHERTEXT_SIZE;
+exports.KYBER_PUBLIC_KEY_SIZE = KYBER_PUBLIC_KEY_SIZE;
+exports.KYBER_SECRET_KEY_SIZE = KYBER_SECRET_KEY_SIZE;
+exports.KYBER_SEED_SIZE = KYBER_SEED_SIZE;
+exports.KYBER_SHARED_SECRET_SIZE = KYBER_SHARED_SECRET_SIZE;
+exports.KYBER_SUITE = KYBER_SUITE;
 exports.POLY1305_TAG_SIZE = POLY1305_TAG_SIZE;
 exports.SECRETBOX_KEY_SIZE = SECRETBOX_KEY_SIZE;
 exports.SECRETBOX_NONCE_SIZE = SECRETBOX_NONCE_SIZE;
@@ -2101,6 +2068,7 @@ exports.generateDilithiumKeypair = generateDilithiumKeypair;
 exports.generateDilithiumKeypairFromSeed = generateDilithiumKeypairFromSeed;
 exports.generateHybridIdentity = generateHybridIdentity;
 exports.generateKyberKeypair = generateKyberKeypair;
+exports.generateKyberKeypairFromSeed = generateKyberKeypairFromSeed;
 exports.generateSalt = generateSalt;
 exports.generateX25519Keypair = generateX25519Keypair;
 exports.generateX25519KeypairFromSeed = generateX25519KeypairFromSeed;

package/dist/index.d.cts

@@ -1,9 +1,9 @@
-export { BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, BoxPayload, CHACHA20_KEY_SIZE, ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, DilithiumKeypair, DilithiumKeypairB64, DilithiumSignature, HybridEnvelope, HybridIdentity, HybridPublicKeys, HybridSecretKeys, KyberEncapsulation, KyberKeypair, KyberKeypairB64, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, SecretboxPayload, X25519Keypair, X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt } from './crypto/index.cjs';
-export { E as EncryptedVaultFile, H as HybridIdentityRecord, O as OmnituumVault } from './types-Ch0y-n7K.cjs';
+export { BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, BoxPayload, CHACHA20_KEY_SIZE, ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, DilithiumKeypair, DilithiumKeypairB64, DilithiumSignature, HybridEnvelope, HybridIdentity, HybridPublicKeys, HybridSecretKeys, KYBER_CIPHERTEXT_SIZE, KYBER_PUBLIC_KEY_SIZE, KYBER_SECRET_KEY_SIZE, KYBER_SEED_SIZE, KYBER_SHARED_SECRET_SIZE, KYBER_SUITE, KyberEncapsulation, KyberKeypair, KyberKeypairB64, KyberSuite, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, SecretboxPayload, X25519Keypair, X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateKyberKeypairFromSeed, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt } from './crypto/index.cjs';
+export { e as ENVELOPE_AEAD, d as ENVELOPE_SUITE, c as ENVELOPE_VERSION, E as EncryptedVaultFile, H as HybridIdentityRecord, O as OmnituumVault, h as VAULT_ALGORITHM, a as VAULT_ENCRYPTED_VERSION, b as VAULT_ENCRYPTED_VERSION_V2, f as VAULT_KDF, g as VAULT_KDF_V2, V as VAULT_VERSION, j as validateEncryptedVault, i as validateEnvelope, v as validateVault } from './types-CRka8PC7.cjs';
 export { MigrationOptions, MigrationResult, addIdentity, createEmptyVault, createIdentity, decryptVault, encryptVault, getVaultKdfInfo, isV2Vault, migrateEncryptedVault, needsMigration } from './vault/index.cjs';
-export { c as computeIntegrityHash, b as computeKeyFingerprint } from './integrity-Dx9jukMH.cjs';
-export { g as ENVELOPE_AEAD, f as ENVELOPE_SUITE, E as ENVELOPE_VERSION, c as VAULT_ALGORITHM, a as VAULT_ENCRYPTED_VERSION, d as VAULT_ENCRYPTED_VERSION_V2, b as VAULT_KDF, e as VAULT_KDF_V2, V as VAULT_VERSION, i as validateEncryptedVault, h as validateEnvelope, v as validateVault } from './version-BygzPVGs.cjs';
+export { c as computeIntegrityHash, b as computeKeyFingerprint } from './integrity-BenoFsmP.cjs';
 export { D as DecryptOptions, E as EncryptOptions, c as OQEDecryptResult, O as OQEEncryptResult, d as decryptFile, b as decryptFileWithPassword, e as encryptFile, a as encryptFileWithPassword } from './decrypt-eSHlbh1j.cjs';
+import '@omnituum/envelope-registry';
 import '@noble/ciphers/utils.js';
 
 /**

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-export { BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, BoxPayload, CHACHA20_KEY_SIZE, ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, DilithiumKeypair, DilithiumKeypairB64, DilithiumSignature, HybridEnvelope, HybridIdentity, HybridPublicKeys, HybridSecretKeys, KyberEncapsulation, KyberKeypair, KyberKeypairB64, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, SecretboxPayload, X25519Keypair, X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt } from './crypto/index.js';
-export { E as EncryptedVaultFile, H as HybridIdentityRecord, O as OmnituumVault } from './types-61c7Q9ri.js';
+export { BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, BoxPayload, CHACHA20_KEY_SIZE, ClassicalWrap, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, DilithiumKeypair, DilithiumKeypairB64, DilithiumSignature, HybridEnvelope, HybridIdentity, HybridPublicKeys, HybridSecretKeys, KYBER_CIPHERTEXT_SIZE, KYBER_PUBLIC_KEY_SIZE, KYBER_SECRET_KEY_SIZE, KYBER_SEED_SIZE, KYBER_SHARED_SECRET_SIZE, KYBER_SUITE, KyberEncapsulation, KyberKeypair, KyberKeypairB64, KyberSuite, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, SecretboxPayload, X25519Keypair, X25519KeypairHex, XCHACHA20_NONCE_SIZE, assertLen, b64, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, createChaCha20Poly1305, createXChaCha20Poly1305, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateKyberKeypairFromSeed, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getSecretKeys, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, rand12, rand24, rand32, randN, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt } from './crypto/index.js';
+export { e as ENVELOPE_AEAD, d as ENVELOPE_SUITE, c as ENVELOPE_VERSION, E as EncryptedVaultFile, H as HybridIdentityRecord, O as OmnituumVault, h as VAULT_ALGORITHM, a as VAULT_ENCRYPTED_VERSION, b as VAULT_ENCRYPTED_VERSION_V2, f as VAULT_KDF, g as VAULT_KDF_V2, V as VAULT_VERSION, j as validateEncryptedVault, i as validateEnvelope, v as validateVault } from './types-CRka8PC7.js';
 export { MigrationOptions, MigrationResult, addIdentity, createEmptyVault, createIdentity, decryptVault, encryptVault, getVaultKdfInfo, isV2Vault, migrateEncryptedVault, needsMigration } from './vault/index.js';
-export { c as computeIntegrityHash, b as computeKeyFingerprint } from './integrity-CCYjrap3.js';
-export { g as ENVELOPE_AEAD, f as ENVELOPE_SUITE, E as ENVELOPE_VERSION, c as VAULT_ALGORITHM, a as VAULT_ENCRYPTED_VERSION, d as VAULT_ENCRYPTED_VERSION_V2, b as VAULT_KDF, e as VAULT_KDF_V2, V as VAULT_VERSION, i as validateEncryptedVault, h as validateEnvelope, v as validateVault } from './version-BygzPVGs.js';
+export { c as computeIntegrityHash, b as computeKeyFingerprint } from './integrity-D9J98Bty.js';
 export { D as DecryptOptions, E as EncryptOptions, c as OQEDecryptResult, O as OQEEncryptResult, d as decryptFile, b as decryptFileWithPassword, e as encryptFile, a as encryptFileWithPassword } from './decrypt-eSHlbh1j.js';
+import '@omnituum/envelope-registry';
 import '@noble/ciphers/utils.js';
 
 /**

package/dist/index.js

@@ -1,6 +1,8 @@
 import nacl4 from 'tweetnacl';
 import { sha256 as sha256$1, sha512 } from '@noble/hashes/sha2.js';
 import { hmac } from '@noble/hashes/hmac.js';
+import { ml_kem1024 } from '@noble/post-quantum/ml-kem.js';
+import { OMNI_VERSIONS, DEPRECATED_VERSIONS } from '@omnituum/envelope-registry';
 import { argon2id } from 'hash-wasm';
 import { blake3 as blake3$1 } from '@noble/hashes/blake3.js';
 import { chacha20poly1305, xchacha20poly1305 } from '@noble/ciphers/chacha.js';
@@ -146,78 +148,42 @@ function x25519SharedSecret(ourSecretKey, theirPublicKey) {
 function deriveKeyFromShared(shared, salt, info) {
   return hkdfSha256(shared, { salt: u8(salt), info: u8(info), length: 32 });
 }
-var kyberModule = null;
-async function loadKyber() {
-  if (kyberModule) return kyberModule;
-  try {
-    const m = await import('kyber-crystals');
-    const k = m.default ?? m;
-    kyberModule = k.kyber ?? k;
-    return kyberModule;
-  } catch (e) {
-    console.warn("[Kyber] Failed to load kyber-crystals:", e);
-    return null;
-  }
-}
+var KYBER_SUITE = "ML-KEM-1024-FIPS203";
+var KYBER_PUBLIC_KEY_SIZE = 1568;
+var KYBER_SECRET_KEY_SIZE = 3168;
+var KYBER_CIPHERTEXT_SIZE = 1568;
+var KYBER_SHARED_SECRET_SIZE = 32;
+var KYBER_SEED_SIZE = 64;
 async function isKyberAvailable() {
-  const mod = await loadKyber();
-  return mod !== null;
+  return true;
 }
 async function generateKyberKeypair() {
-  try {
-    const mod = await loadKyber();
-    if (!mod) return null;
-    if (mod?.ready?.then) {
-      await mod.ready;
-    }
-    const fn = mod?.keypair ?? mod?.keyPair ?? mod?.generateKeyPair ?? null;
-    if (typeof fn !== "function") {
-      console.warn("[Kyber] No keypair function found");
-      return null;
-    }
-    const kp = await fn.call(mod);
-    const pub = kp?.publicKey ?? kp?.public ?? kp?.pk;
-    const priv = kp?.privateKey ?? kp?.secretKey ?? kp?.secret ?? kp?.sk;
-    if (!pub || !priv) {
-      console.warn("[Kyber] Invalid keypair result");
-      return null;
-    }
-    return {
-      publicB64: b64(new Uint8Array(pub)),
-      secretB64: b64(new Uint8Array(priv))
-    };
-  } catch (e) {
-    console.warn("[Kyber] Key generation failed:", e);
-    return null;
+  const seed = randN(64);
+  const kp = ml_kem1024.keygen(seed);
+  return {
+    publicB64: b64(kp.publicKey),
+    secretB64: b64(kp.secretKey)
+  };
+}
+function generateKyberKeypairFromSeed(seed) {
+  if (seed.length !== 64) {
+    throw new Error("Kyber seed must be 64 bytes");
   }
+  const kp = ml_kem1024.keygen(seed);
+  return { publicKey: kp.publicKey, secretKey: kp.secretKey };
 }
 async function kyberEncapsulate(pubKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.encrypt) {
-    throw new Error("Kyber encrypt not available");
-  }
   const pk = ub64(pubKeyB64);
-  const r = await kyber.encrypt(pk);
-  const ctRaw = r?.ciphertext ?? r?.cyphertext ?? r?.ct ?? r?.bytes?.ciphertext ?? r?.bytes?.cyphertext ?? r?.bytes?.ct ?? (Array.isArray(r) ? r[0] : void 0);
-  const ssRaw = r?.key ?? r?.sharedSecret ?? r?.secret ?? r?.bytes?.key ?? r?.bytes?.sharedSecret ?? (Array.isArray(r) ? r[1] : void 0);
-  if (!ctRaw || !ssRaw) {
-    throw new Error("Kyber encapsulate failed: missing ciphertext or shared secret");
-  }
+  const enc = ml_kem1024.encapsulate(pk);
   return {
-    ciphertext: new Uint8Array(ctRaw),
-    sharedSecret: new Uint8Array(ssRaw)
+    ciphertext: enc.cipherText,
+    sharedSecret: enc.sharedSecret
   };
 }
 async function kyberDecapsulate(kemCiphertextB64, secretKeyB64) {
-  const kyber = await loadKyber();
-  if (!kyber?.decrypt && !kyber?.decapsulate) {
-    throw new Error("Kyber decrypt/decapsulate not available");
-  }
   const ct = ub64(kemCiphertextB64);
   const sk = ub64(secretKeyB64);
-  const r = kyber.decrypt ? await kyber.decrypt(ct, sk) : await kyber.decapsulate(ct, sk);
-  const key = r && (r.key ?? r.sharedSecret) ? r.key ?? r.sharedSecret : r;
-  return new Uint8Array(key);
+  return ml_kem1024.decapsulate(ct, sk);
 }
 function kyberWrapKey(sharedSecret, msgKey32) {
   if (msgKey32.length !== 32) {
@@ -226,10 +192,7 @@ function kyberWrapKey(sharedSecret, msgKey32) {
   const kek = sha256(sharedSecret);
   const nonce = globalThis.crypto.getRandomValues(new Uint8Array(24));
   const wrapped = nacl4.secretbox(msgKey32, nonce, kek);
-  return {
-    nonce: b64(nonce),
-    wrapped: b64(wrapped)
-  };
+  return { nonce: b64(nonce), wrapped: b64(wrapped) };
 }
 function kyberUnwrapKey(sharedSecret, nonceB64, wrappedB64) {
   const kek = sha256(sharedSecret);
@@ -237,10 +200,8 @@ function kyberUnwrapKey(sharedSecret, nonceB64, wrappedB64) {
   const wrapped = ub64(wrappedB64);
   return nacl4.secretbox.open(wrapped, nonce, kek) || null;
 }
-
-// src/version.ts
-var ENVELOPE_VERSION = "omnituum.hybrid.v1";
-var ENVELOPE_VERSION_LEGACY = "pqc-demo.hybrid.v1";
+var ENVELOPE_VERSION = OMNI_VERSIONS.HYBRID_V1;
+var ENVELOPE_VERSION_LEGACY = DEPRECATED_VERSIONS.PQC_DEMO_HYBRID_V1;
 var VAULT_VERSION = "omnituum.vault.v1";
 var VAULT_ENCRYPTED_VERSION = "omnituum.vault.enc.v1";
 var VAULT_ENCRYPTED_VERSION_V2 = "omnituum.vault.enc.v2";
@@ -581,7 +542,7 @@ async function dilithiumSign(message, secretKeyB64) {
   }
   const sk = fromB64(secretKeyB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
-  const signature = mod.sign(sk, msg);
+  const signature = mod.sign(msg, sk);
   return {
     signature: toB64(signature),
     algorithm: "ML-DSA-65"
@@ -592,7 +553,7 @@ async function dilithiumSignRaw(message, secretKey) {
   if (!mod) {
     throw new Error("Dilithium library not available");
   }
-  return mod.sign(secretKey, message);
+  return mod.sign(message, secretKey);
 }
 async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const mod = await loadDilithium();
@@ -603,7 +564,7 @@ async function dilithiumVerify(message, signatureB64, publicKeyB64) {
   const sig = fromB64(signatureB64);
   const msg = typeof message === "string" ? new TextEncoder().encode(message) : message;
   try {
-    return mod.verify(pk, msg, sig);
+    return mod.verify(sig, msg, pk);
   } catch {
     return false;
   }
@@ -614,7 +575,7 @@ async function dilithiumVerifyRaw(message, signature, publicKey) {
     throw new Error("Dilithium library not available");
   }
   try {
-    return mod.verify(publicKey, message, signature);
+    return mod.verify(signature, message, publicKey);
   } catch {
     return false;
   }
@@ -2027,4 +1988,4 @@ function createTunnelSession(keys) {
   };
 }
 
-export { BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, CHACHA20_KEY_SIZE, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, ENVELOPE_AEAD, ENVELOPE_SUITE, ENVELOPE_VERSION, KDF_CONFIG_ARGON2ID, KDF_CONFIG_PBKDF2, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, SecureBuffer, TUNNEL_KEY_SIZE, TUNNEL_NONCE_SIZE, TUNNEL_VERSION, VAULT_ALGORITHM, VAULT_ENCRYPTED_VERSION, VAULT_ENCRYPTED_VERSION_V2, VAULT_KDF, VAULT_KDF_V2, VAULT_VERSION, XCHACHA20_NONCE_SIZE, addIdentity, assertLen, b64, benchmarkKDF, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, computeIntegrityHash, computeKeyFingerprint, constantTimeEqual, createChaCha20Poly1305, createEmptyVault, createIdentity, createSession, createTunnelSession, createXChaCha20Poly1305, decryptFile, decryptFileWithPassword, decryptVault, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, encryptFile, encryptFileWithPassword, encryptVault, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateSalt, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getRecommendedConfig, getSecretKeys, getVaultKdfInfo, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, isSessionTimedOut, isV2Vault, kdfDeriveKey, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, lockSecureSession, migrateEncryptedVault, needsMigration, rand12, rand24, rand32, randN, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, unlockSecureSession, validateEncryptedVault, validateEnvelope, validateVault, withSecureData, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt, zeroAll, zeroMemory };
+export { BLAKE3_OUTPUT_LENGTH, BOX_KEY_SIZE, BOX_NONCE_SIZE, CHACHA20_KEY_SIZE, DILITHIUM_ALGORITHM, DILITHIUM_PUBLIC_KEY_SIZE, DILITHIUM_SECRET_KEY_SIZE, DILITHIUM_SIGNATURE_SIZE, ENVELOPE_AEAD, ENVELOPE_SUITE, ENVELOPE_VERSION, KDF_CONFIG_ARGON2ID, KDF_CONFIG_PBKDF2, KYBER_CIPHERTEXT_SIZE, KYBER_PUBLIC_KEY_SIZE, KYBER_SECRET_KEY_SIZE, KYBER_SEED_SIZE, KYBER_SHARED_SECRET_SIZE, KYBER_SUITE, POLY1305_TAG_SIZE, SECRETBOX_KEY_SIZE, SECRETBOX_NONCE_SIZE, SECRETBOX_OVERHEAD, SecureBuffer, TUNNEL_KEY_SIZE, TUNNEL_NONCE_SIZE, TUNNEL_VERSION, VAULT_ALGORITHM, VAULT_ENCRYPTED_VERSION, VAULT_ENCRYPTED_VERSION_V2, VAULT_KDF, VAULT_KDF_V2, VAULT_VERSION, XCHACHA20_NONCE_SIZE, addIdentity, assertLen, b64, benchmarkKDF, blake3, blake3DeriveKey, blake3Hex, blake3Mac, boxDecrypt, boxEncrypt, boxUnwrapWithX25519, boxWrapWithX25519, chaCha20Poly1305Decrypt, chaCha20Poly1305Encrypt, computeIntegrityHash, computeKeyFingerprint, constantTimeEqual, createChaCha20Poly1305, createEmptyVault, createIdentity, createSession, createTunnelSession, createXChaCha20Poly1305, decryptFile, decryptFileWithPassword, decryptVault, deriveKeyFromShared, dilithiumSign, dilithiumSignRaw, dilithiumVerify, dilithiumVerifyRaw, encryptFile, encryptFileWithPassword, encryptVault, fromB64, fromHex, generateDilithiumKeypair, generateDilithiumKeypairFromSeed, generateHybridIdentity, generateKyberKeypair, generateKyberKeypairFromSeed, generateSalt, generateX25519Keypair, generateX25519KeypairFromSeed, getPublicKeys, getRecommendedConfig, getSecretKeys, getVaultKdfInfo, hkdfDerive, hkdfExpand, hkdfExtract, hkdfSha256, hkdfSplitForNoise, hkdfTripleSplitForNoise, hybridDecrypt, hybridDecryptToString, hybridEncrypt, isDilithiumAvailable, isKyberAvailable, isSessionTimedOut, isV2Vault, kdfDeriveKey, kyberDecapsulate, kyberEncapsulate, kyberUnwrapKey, kyberWrapKey, lockSecureSession, migrateEncryptedVault, needsMigration, rand12, rand24, rand32, randN, secretboxDecrypt, secretboxDecryptString, secretboxEncrypt, secretboxEncryptString, secretboxOpenRaw, secretboxRaw, sha256, sha256String, textDecoder, textEncoder, toB64, toHex, u8, ub64, unlockSecureSession, validateEncryptedVault, validateEnvelope, validateVault, withSecureData, x25519SharedSecret, xChaCha20Poly1305Decrypt, xChaCha20Poly1305Encrypt, zeroAll, zeroMemory };

package/dist/{integrity-Dx9jukMH.d.cts → integrity-BenoFsmP.d.cts}

@@ -1,4 +1,4 @@
-import { H as HybridIdentityRecord } from './types-Ch0y-n7K.cjs';
+import { H as HybridIdentityRecord } from './types-CRka8PC7.cjs';
 
 /**
  * Omnituum PQC Shared - Integrity Verification

package/dist/{integrity-CCYjrap3.d.ts → integrity-D9J98Bty.d.ts}

@@ -1,4 +1,4 @@
-import { H as HybridIdentityRecord } from './types-61c7Q9ri.js';
+import { H as HybridIdentityRecord } from './types-CRka8PC7.js';
 
 /**
  * Omnituum PQC Shared - Integrity Verification

package/dist/{types-61c7Q9ri.d.ts → types-CRka8PC7.d.cts}

@@ -1,4 +1,56 @@
-import { V as VAULT_VERSION, a as VAULT_ENCRYPTED_VERSION, b as VAULT_KDF, c as VAULT_ALGORITHM, d as VAULT_ENCRYPTED_VERSION_V2, e as VAULT_KDF_V2 } from './version-BygzPVGs.js';
+/**
+ * Omnituum PQC Shared - Version Constants & Guards
+ *
+ * FROZEN CONTRACTS: These version strings define the wire format.
+ * Breaking changes require a version bump.
+ *
+ * @see pqc-docs/specs/envelope.v1.md
+ * @see pqc-docs/specs/vault.v1.md
+ * @see pqc-docs/specs/identity.v1.md
+ */
+/** HybridEnvelope version - hybrid encryption format (from registry) */
+declare const ENVELOPE_VERSION: any;
+/** OmnituumVault version - decrypted vault format */
+declare const VAULT_VERSION: "omnituum.vault.v1";
+/** EncryptedVaultFile version - encrypted vault format (PBKDF2) */
+declare const VAULT_ENCRYPTED_VERSION: "omnituum.vault.enc.v1";
+/** EncryptedVaultFile v2 - encrypted vault format (Argon2id) */
+declare const VAULT_ENCRYPTED_VERSION_V2: "omnituum.vault.enc.v2";
+/** Algorithm suite for hybrid encryption */
+declare const ENVELOPE_SUITE: "x25519+kyber768";
+/** AEAD algorithm for envelope content */
+declare const ENVELOPE_AEAD: "xsalsa20poly1305";
+/** KDF for vault encryption (v1) */
+declare const VAULT_KDF: "PBKDF2-SHA256";
+/** KDF for vault encryption (v2) */
+declare const VAULT_KDF_V2: "Argon2id";
+/** Encryption algorithm for vault */
+declare const VAULT_ALGORITHM: "AES-256-GCM";
+/**
+ * Validate envelope structure and version.
+ * Returns detailed validation result.
+ */
+declare function validateEnvelope(envelope: unknown): {
+    valid: boolean;
+    version?: string;
+    errors: string[];
+};
+/**
+ * Validate vault structure and version.
+ */
+declare function validateVault(vault: unknown): {
+    valid: boolean;
+    version?: string;
+    errors: string[];
+};
+/**
+ * Validate encrypted vault structure and version.
+ */
+declare function validateEncryptedVault(encVault: unknown): {
+    valid: boolean;
+    version?: string;
+    errors: string[];
+};
 
 /**
  * Omnituum PQC Shared - Vault Types
@@ -131,4 +183,4 @@ interface VaultSession {
 declare const DEFAULT_VAULT_SETTINGS: VaultSettings;
 declare const PBKDF2_ITERATIONS = 600000;
 
-export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, type VaultSettings as V, type EncryptedVaultFileV2 as a, type VaultSession as b, type EncryptedVaultFileV1 as c, type HealthStatus as d };
+export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, VAULT_VERSION as V, VAULT_ENCRYPTED_VERSION as a, VAULT_ENCRYPTED_VERSION_V2 as b, ENVELOPE_VERSION as c, ENVELOPE_SUITE as d, ENVELOPE_AEAD as e, VAULT_KDF as f, VAULT_KDF_V2 as g, VAULT_ALGORITHM as h, validateEnvelope as i, validateEncryptedVault as j, type EncryptedVaultFileV2 as k, type VaultSettings as l, type VaultSession as m, type EncryptedVaultFileV1 as n, type HealthStatus as o, validateVault as v };

package/dist/{types-Ch0y-n7K.d.cts → types-CRka8PC7.d.ts}

@@ -1,4 +1,56 @@
-import { V as VAULT_VERSION, a as VAULT_ENCRYPTED_VERSION, b as VAULT_KDF, c as VAULT_ALGORITHM, d as VAULT_ENCRYPTED_VERSION_V2, e as VAULT_KDF_V2 } from './version-BygzPVGs.cjs';
+/**
+ * Omnituum PQC Shared - Version Constants & Guards
+ *
+ * FROZEN CONTRACTS: These version strings define the wire format.
+ * Breaking changes require a version bump.
+ *
+ * @see pqc-docs/specs/envelope.v1.md
+ * @see pqc-docs/specs/vault.v1.md
+ * @see pqc-docs/specs/identity.v1.md
+ */
+/** HybridEnvelope version - hybrid encryption format (from registry) */
+declare const ENVELOPE_VERSION: any;
+/** OmnituumVault version - decrypted vault format */
+declare const VAULT_VERSION: "omnituum.vault.v1";
+/** EncryptedVaultFile version - encrypted vault format (PBKDF2) */
+declare const VAULT_ENCRYPTED_VERSION: "omnituum.vault.enc.v1";
+/** EncryptedVaultFile v2 - encrypted vault format (Argon2id) */
+declare const VAULT_ENCRYPTED_VERSION_V2: "omnituum.vault.enc.v2";
+/** Algorithm suite for hybrid encryption */
+declare const ENVELOPE_SUITE: "x25519+kyber768";
+/** AEAD algorithm for envelope content */
+declare const ENVELOPE_AEAD: "xsalsa20poly1305";
+/** KDF for vault encryption (v1) */
+declare const VAULT_KDF: "PBKDF2-SHA256";
+/** KDF for vault encryption (v2) */
+declare const VAULT_KDF_V2: "Argon2id";
+/** Encryption algorithm for vault */
+declare const VAULT_ALGORITHM: "AES-256-GCM";
+/**
+ * Validate envelope structure and version.
+ * Returns detailed validation result.
+ */
+declare function validateEnvelope(envelope: unknown): {
+    valid: boolean;
+    version?: string;
+    errors: string[];
+};
+/**
+ * Validate vault structure and version.
+ */
+declare function validateVault(vault: unknown): {
+    valid: boolean;
+    version?: string;
+    errors: string[];
+};
+/**
+ * Validate encrypted vault structure and version.
+ */
+declare function validateEncryptedVault(encVault: unknown): {
+    valid: boolean;
+    version?: string;
+    errors: string[];
+};
 
 /**
  * Omnituum PQC Shared - Vault Types
@@ -131,4 +183,4 @@ interface VaultSession {
 declare const DEFAULT_VAULT_SETTINGS: VaultSettings;
 declare const PBKDF2_ITERATIONS = 600000;
 
-export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, type VaultSettings as V, type EncryptedVaultFileV2 as a, type VaultSession as b, type EncryptedVaultFileV1 as c, type HealthStatus as d };
+export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, VAULT_VERSION as V, VAULT_ENCRYPTED_VERSION as a, VAULT_ENCRYPTED_VERSION_V2 as b, ENVELOPE_VERSION as c, ENVELOPE_SUITE as d, ENVELOPE_AEAD as e, VAULT_KDF as f, VAULT_KDF_V2 as g, VAULT_ALGORITHM as h, validateEnvelope as i, validateEncryptedVault as j, type EncryptedVaultFileV2 as k, type VaultSettings as l, type VaultSession as m, type EncryptedVaultFileV1 as n, type HealthStatus as o, validateVault as v };

package/dist/utils/index.d.cts

@@ -1,6 +1,5 @@
-export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-Dx9jukMH.cjs';
-import '../types-Ch0y-n7K.cjs';
-import '../version-BygzPVGs.cjs';
+export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-BenoFsmP.cjs';
+import '../types-CRka8PC7.cjs';
 
 /**
  * Omnituum PQC Shared - Entropy & Randomness Utilities

package/dist/utils/index.d.ts

@@ -1,6 +1,5 @@
-export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-CCYjrap3.js';
-import '../types-61c7Q9ri.js';
-import '../version-BygzPVGs.js';
+export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-D9J98Bty.js';
+import '../types-CRka8PC7.js';
 
 /**
  * Omnituum PQC Shared - Entropy & Randomness Utilities