@omnituum/pqc-shared 0.4.1 → 0.6.0

package/dist/fs/index.d.cts

@@ -1,5 +1,5 @@
-import { A as Argon2idParams, f as OQEHeader, H as HybridKeyMaterial, P as PasswordKeyMaterial, g as OQEMetadata, h as AlgorithmSuiteId, O as OQEEncryptResult, c as OQEDecryptResult } from '../decrypt-eSHlbh1j.cjs';
-export { w as ALGORITHM_SUITES, i as DEFAULT_ARGON2ID_PARAMS, D as DecryptOptions, E as EncryptOptions, F as FileInput, p as HybridDecryptOptions, n as HybridEncryptOptions, M as MIN_ARGON2ID_PARAMS, t as OQEError, r as OQEErrorCode, m as OQEMode, v as OQE_FORMAT_VERSION, x as OQE_HEADER_SIZE, u as OQE_MAGIC, q as PasswordDecryptOptions, o as PasswordEncryptOptions, s as ProgressCallback, d as decryptFile, k as decryptFileForSelf, b as decryptFileWithPassword, e as encryptFile, j as encryptFileForSelf, a as encryptFileWithPassword, l as inspectOQEFile, y as toUint8Array } from '../decrypt-eSHlbh1j.cjs';
+import { A as Argon2idParams, f as OQEHeader, H as HybridKeyMaterial, g as HybridKeyMaterialV2, P as PasswordKeyMaterial, h as OQEMetadata, i as AlgorithmSuiteId, O as OQEEncryptResult, c as OQEDecryptResult } from '../decrypt-O1iqFIDL.cjs';
+export { B as ALGORITHM_SUITES, j as DEFAULT_ARGON2ID_PARAMS, D as DecryptOptions, E as EncryptOptions, F as FileInput, r as HybridDecryptOptions, p as HybridEncryptOptions, M as MIN_ARGON2ID_PARAMS, v as OQEError, t as OQEErrorCode, o as OQEMode, z as OQE_FORMAT_VERSION, x as OQE_FORMAT_VERSION_V1, y as OQE_FORMAT_VERSION_V2, I as OQE_HEADER_SIZE, C as OQE_HEADER_SIZE_V1, G as OQE_HEADER_SIZE_V2, w as OQE_MAGIC, s as PasswordDecryptOptions, q as PasswordEncryptOptions, u as ProgressCallback, S as SUPPORTED_OQE_VERSIONS, l as combinedFileKekV2, d as decryptFile, m as decryptFileForSelf, b as decryptFileWithPassword, e as encryptFile, k as encryptFileForSelf, a as encryptFileWithPassword, n as inspectOQEFile, J as toUint8Array } from '../decrypt-O1iqFIDL.cjs';
 
 /**
  * Omnituum FS - Argon2id Key Derivation
@@ -168,17 +168,24 @@ declare function aesDecryptStreaming(encrypted: Uint8Array, key: CryptoKey | Uin
  * Implements a documented, stable binary format for encrypted files.
  */
 
+/** Byte length of a section's fixed header for the given format version. */
+declare function oqeHeaderSize(version: number): number;
 /**
- * Write an OQE file header.
+ * Write an OQE file header. Layout depends on `header.version`: v2 appends a
+ * second 12-byte IV (the content IV) after the metadata IV.
+ *
+ * The returned bytes are also used verbatim as the AES-GCM associated data for
+ * both sections (v2), so every field here — version, suite, flags, lengths and
+ * both IVs — is authenticated and cannot be tampered with undetected.
  *
  * @param header - Header data
- * @returns 30-byte header buffer
+ * @returns Header buffer (30 bytes for v1, 42 bytes for v2)
  */
 declare function writeOQEHeader(header: OQEHeader): Uint8Array;
 /**
- * Parse an OQE file header.
+ * Parse an OQE file header (v1 or v2).
  *
- * @param data - File data (at least 30 bytes)
+ * @param data - File data
  * @returns Parsed header
  * @throws OQEError if header is invalid
  */
@@ -202,6 +209,20 @@ declare function serializeHybridKeyMaterial(km: HybridKeyMaterial): Uint8Array;
  * Parse hybrid mode key material.
  */
 declare function parseHybridKeyMaterial(data: Uint8Array): HybridKeyMaterial;
+/**
+ * Serialize v2 hybrid key material (single AND-combined wrap).
+ *
+ * Format:
+ * - X25519 ephemeral PK (32 bytes)
+ * - Kyber ciphertext length (2 bytes) + Kyber ciphertext (variable)
+ * - Content-key wrap nonce (24 bytes)
+ * - Wrapped content key length (2 bytes) + wrapped content key (variable)
+ */
+declare function serializeHybridKeyMaterialV2(km: HybridKeyMaterialV2): Uint8Array;
+/**
+ * Parse v2 hybrid key material (single AND-combined wrap).
+ */
+declare function parseHybridKeyMaterialV2(data: Uint8Array): HybridKeyMaterialV2;
 /**
  * Serialize password mode key material.
  *
@@ -397,4 +418,4 @@ declare function isFileAPIAvailable(): boolean;
  */
 declare function isDragDropSupported(): boolean;
 
-export { AES_GCM_IV_SIZE, AES_GCM_TAG_SIZE, AES_KEY_SIZE, AlgorithmSuiteId, Argon2idParams, HybridKeyMaterial, OQEDecryptResult, OQEEncryptResult, OQEHeader, OQEMetadata, OQE_EXTENSION, OQE_MIME_TYPE, PasswordKeyMaterial, STREAM_CHUNK_SIZE, addOQEExtension, aesDecrypt, aesDecryptCombined, aesDecryptStreaming, aesEncrypt, aesEncryptCombined, aesEncryptStreaming, assembleOQEFile, benchmarkArgon2, bytesToDataURL, copyToClipboard, createDropZone, createObjectURL, decryptResultToBlob, deriveKeyFromPassword, downloadBlob, downloadBytes, downloadDecryptedFile, downloadEncryptedFile, encryptResultToBlob, estimateArgon2Params, exportAesKey, formatFileSize, generateAesKey, generateArgon2Salt, getAlgorithmName, getFileInfo, importAesKey, isArgon2Available, isBrowser, isDragDropSupported, isFileAPIAvailable, isOQEFile, isWebCryptoAvailable, openFilePicker, openFileToEncrypt, openOQEFilePicker, parseHybridKeyMaterial, parseMetadata, parseOQEFile, parseOQEHeader, parsePasswordKeyMaterial, readFile, readFileAsDataURL, readFileAsText, removeOQEExtension, serializeHybridKeyMaterial, serializeMetadata, serializePasswordKeyMaterial, verifyPassword, writeOQEHeader };
+export { AES_GCM_IV_SIZE, AES_GCM_TAG_SIZE, AES_KEY_SIZE, AlgorithmSuiteId, Argon2idParams, HybridKeyMaterial, HybridKeyMaterialV2, OQEDecryptResult, OQEEncryptResult, OQEHeader, OQEMetadata, OQE_EXTENSION, OQE_MIME_TYPE, PasswordKeyMaterial, STREAM_CHUNK_SIZE, addOQEExtension, aesDecrypt, aesDecryptCombined, aesDecryptStreaming, aesEncrypt, aesEncryptCombined, aesEncryptStreaming, assembleOQEFile, benchmarkArgon2, bytesToDataURL, copyToClipboard, createDropZone, createObjectURL, decryptResultToBlob, deriveKeyFromPassword, downloadBlob, downloadBytes, downloadDecryptedFile, downloadEncryptedFile, encryptResultToBlob, estimateArgon2Params, exportAesKey, formatFileSize, generateAesKey, generateArgon2Salt, getAlgorithmName, getFileInfo, importAesKey, isArgon2Available, isBrowser, isDragDropSupported, isFileAPIAvailable, isOQEFile, isWebCryptoAvailable, openFilePicker, openFileToEncrypt, openOQEFilePicker, oqeHeaderSize, parseHybridKeyMaterial, parseHybridKeyMaterialV2, parseMetadata, parseOQEFile, parseOQEHeader, parsePasswordKeyMaterial, readFile, readFileAsDataURL, readFileAsText, removeOQEExtension, serializeHybridKeyMaterial, serializeHybridKeyMaterialV2, serializeMetadata, serializePasswordKeyMaterial, verifyPassword, writeOQEHeader };

package/dist/fs/index.d.ts

@@ -1,5 +1,5 @@
-import { A as Argon2idParams, f as OQEHeader, H as HybridKeyMaterial, P as PasswordKeyMaterial, g as OQEMetadata, h as AlgorithmSuiteId, O as OQEEncryptResult, c as OQEDecryptResult } from '../decrypt-eSHlbh1j.js';
-export { w as ALGORITHM_SUITES, i as DEFAULT_ARGON2ID_PARAMS, D as DecryptOptions, E as EncryptOptions, F as FileInput, p as HybridDecryptOptions, n as HybridEncryptOptions, M as MIN_ARGON2ID_PARAMS, t as OQEError, r as OQEErrorCode, m as OQEMode, v as OQE_FORMAT_VERSION, x as OQE_HEADER_SIZE, u as OQE_MAGIC, q as PasswordDecryptOptions, o as PasswordEncryptOptions, s as ProgressCallback, d as decryptFile, k as decryptFileForSelf, b as decryptFileWithPassword, e as encryptFile, j as encryptFileForSelf, a as encryptFileWithPassword, l as inspectOQEFile, y as toUint8Array } from '../decrypt-eSHlbh1j.js';
+import { A as Argon2idParams, f as OQEHeader, H as HybridKeyMaterial, g as HybridKeyMaterialV2, P as PasswordKeyMaterial, h as OQEMetadata, i as AlgorithmSuiteId, O as OQEEncryptResult, c as OQEDecryptResult } from '../decrypt-O1iqFIDL.js';
+export { B as ALGORITHM_SUITES, j as DEFAULT_ARGON2ID_PARAMS, D as DecryptOptions, E as EncryptOptions, F as FileInput, r as HybridDecryptOptions, p as HybridEncryptOptions, M as MIN_ARGON2ID_PARAMS, v as OQEError, t as OQEErrorCode, o as OQEMode, z as OQE_FORMAT_VERSION, x as OQE_FORMAT_VERSION_V1, y as OQE_FORMAT_VERSION_V2, I as OQE_HEADER_SIZE, C as OQE_HEADER_SIZE_V1, G as OQE_HEADER_SIZE_V2, w as OQE_MAGIC, s as PasswordDecryptOptions, q as PasswordEncryptOptions, u as ProgressCallback, S as SUPPORTED_OQE_VERSIONS, l as combinedFileKekV2, d as decryptFile, m as decryptFileForSelf, b as decryptFileWithPassword, e as encryptFile, k as encryptFileForSelf, a as encryptFileWithPassword, n as inspectOQEFile, J as toUint8Array } from '../decrypt-O1iqFIDL.js';
 
 /**
  * Omnituum FS - Argon2id Key Derivation
@@ -168,17 +168,24 @@ declare function aesDecryptStreaming(encrypted: Uint8Array, key: CryptoKey | Uin
  * Implements a documented, stable binary format for encrypted files.
  */
 
+/** Byte length of a section's fixed header for the given format version. */
+declare function oqeHeaderSize(version: number): number;
 /**
- * Write an OQE file header.
+ * Write an OQE file header. Layout depends on `header.version`: v2 appends a
+ * second 12-byte IV (the content IV) after the metadata IV.
+ *
+ * The returned bytes are also used verbatim as the AES-GCM associated data for
+ * both sections (v2), so every field here — version, suite, flags, lengths and
+ * both IVs — is authenticated and cannot be tampered with undetected.
  *
  * @param header - Header data
- * @returns 30-byte header buffer
+ * @returns Header buffer (30 bytes for v1, 42 bytes for v2)
  */
 declare function writeOQEHeader(header: OQEHeader): Uint8Array;
 /**
- * Parse an OQE file header.
+ * Parse an OQE file header (v1 or v2).
  *
- * @param data - File data (at least 30 bytes)
+ * @param data - File data
  * @returns Parsed header
  * @throws OQEError if header is invalid
  */
@@ -202,6 +209,20 @@ declare function serializeHybridKeyMaterial(km: HybridKeyMaterial): Uint8Array;
  * Parse hybrid mode key material.
  */
 declare function parseHybridKeyMaterial(data: Uint8Array): HybridKeyMaterial;
+/**
+ * Serialize v2 hybrid key material (single AND-combined wrap).
+ *
+ * Format:
+ * - X25519 ephemeral PK (32 bytes)
+ * - Kyber ciphertext length (2 bytes) + Kyber ciphertext (variable)
+ * - Content-key wrap nonce (24 bytes)
+ * - Wrapped content key length (2 bytes) + wrapped content key (variable)
+ */
+declare function serializeHybridKeyMaterialV2(km: HybridKeyMaterialV2): Uint8Array;
+/**
+ * Parse v2 hybrid key material (single AND-combined wrap).
+ */
+declare function parseHybridKeyMaterialV2(data: Uint8Array): HybridKeyMaterialV2;
 /**
  * Serialize password mode key material.
  *
@@ -397,4 +418,4 @@ declare function isFileAPIAvailable(): boolean;
  */
 declare function isDragDropSupported(): boolean;
 
-export { AES_GCM_IV_SIZE, AES_GCM_TAG_SIZE, AES_KEY_SIZE, AlgorithmSuiteId, Argon2idParams, HybridKeyMaterial, OQEDecryptResult, OQEEncryptResult, OQEHeader, OQEMetadata, OQE_EXTENSION, OQE_MIME_TYPE, PasswordKeyMaterial, STREAM_CHUNK_SIZE, addOQEExtension, aesDecrypt, aesDecryptCombined, aesDecryptStreaming, aesEncrypt, aesEncryptCombined, aesEncryptStreaming, assembleOQEFile, benchmarkArgon2, bytesToDataURL, copyToClipboard, createDropZone, createObjectURL, decryptResultToBlob, deriveKeyFromPassword, downloadBlob, downloadBytes, downloadDecryptedFile, downloadEncryptedFile, encryptResultToBlob, estimateArgon2Params, exportAesKey, formatFileSize, generateAesKey, generateArgon2Salt, getAlgorithmName, getFileInfo, importAesKey, isArgon2Available, isBrowser, isDragDropSupported, isFileAPIAvailable, isOQEFile, isWebCryptoAvailable, openFilePicker, openFileToEncrypt, openOQEFilePicker, parseHybridKeyMaterial, parseMetadata, parseOQEFile, parseOQEHeader, parsePasswordKeyMaterial, readFile, readFileAsDataURL, readFileAsText, removeOQEExtension, serializeHybridKeyMaterial, serializeMetadata, serializePasswordKeyMaterial, verifyPassword, writeOQEHeader };
+export { AES_GCM_IV_SIZE, AES_GCM_TAG_SIZE, AES_KEY_SIZE, AlgorithmSuiteId, Argon2idParams, HybridKeyMaterial, HybridKeyMaterialV2, OQEDecryptResult, OQEEncryptResult, OQEHeader, OQEMetadata, OQE_EXTENSION, OQE_MIME_TYPE, PasswordKeyMaterial, STREAM_CHUNK_SIZE, addOQEExtension, aesDecrypt, aesDecryptCombined, aesDecryptStreaming, aesEncrypt, aesEncryptCombined, aesEncryptStreaming, assembleOQEFile, benchmarkArgon2, bytesToDataURL, copyToClipboard, createDropZone, createObjectURL, decryptResultToBlob, deriveKeyFromPassword, downloadBlob, downloadBytes, downloadDecryptedFile, downloadEncryptedFile, encryptResultToBlob, estimateArgon2Params, exportAesKey, formatFileSize, generateAesKey, generateArgon2Salt, getAlgorithmName, getFileInfo, importAesKey, isArgon2Available, isBrowser, isDragDropSupported, isFileAPIAvailable, isOQEFile, isWebCryptoAvailable, openFilePicker, openFileToEncrypt, openOQEFilePicker, oqeHeaderSize, parseHybridKeyMaterial, parseHybridKeyMaterialV2, parseMetadata, parseOQEFile, parseOQEHeader, parsePasswordKeyMaterial, readFile, readFileAsDataURL, readFileAsText, removeOQEExtension, serializeHybridKeyMaterial, serializeHybridKeyMaterialV2, serializeMetadata, serializePasswordKeyMaterial, verifyPassword, writeOQEHeader };