@opentdf/sdk 0.11.0 → 0.12.0-beta.112

package/dist/cjs/tdf3/src/crypto/index.js

@@ -5,1072 +5,90 @@
  * @private
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DefaultCryptoService = exports.name = exports.method = exports.isSupported = void 0;
-exports.rsaOaepSha1 = rsaOaepSha1;
-exports.rsaPkcs1Sha256 = rsaPkcs1Sha256;
-exports.generateKey = generateKey;
-exports.generateKeyPair = generateKeyPair;
-exports.generateSigningKeyPair = generateSigningKeyPair;
-exports.encryptWithPublicKey = encryptWithPublicKey;
-exports.randomBytes = randomBytes;
-exports.randomBytesAsHex = randomBytesAsHex;
-exports.decryptWithPrivateKey = decryptWithPrivateKey;
-exports.decrypt = decrypt;
-exports.encrypt = encrypt;
-exports.hex2Ab = hex2Ab;
-exports.sign = sign;
-exports.verify = verify;
-exports.digest = digest;
-exports.extractPublicKeyPem = extractPublicKeyPem;
-exports.generateECKeyPair = generateECKeyPair;
-exports.deriveKeyFromECDH = deriveKeyFromECDH;
-exports.hmac = hmac;
-exports.verifyHmac = verifyHmac;
-exports.parsePublicKeyPem = parsePublicKeyPem;
-exports.jwkToPublicKeyPem = jwkToPublicKeyPem;
-exports.publicKeyPemToJwk = publicKeyPemToJwk;
-exports.importPublicKey = importPublicKey;
-exports.importPrivateKey = importPrivateKey;
-exports.exportPublicKeyPem = exportPublicKeyPem;
-exports.exportPrivateKeyPem = exportPrivateKeyPem;
-exports.exportPublicKeyJwk = exportPublicKeyJwk;
-exports.importSymmetricKey = importSymmetricKey;
+exports.DefaultCryptoService = exports.verifyHmac = exports.verify = exports.sign = exports.rsaPkcs1Sha256 = exports.rsaOaepSha1 = exports.randomBytesAsHex = exports.randomBytes = exports.publicKeyPemToJwk = exports.parsePublicKeyPem = exports.mergeSymmetricKeys = exports.jwkToPublicKeyPem = exports.importSymmetricKey = exports.importPublicKey = exports.importPrivateKey = exports.hmac = exports.hex2Ab = exports.generateSigningKeyPair = exports.generateKeyPair = exports.generateKey = exports.generateECKeyPair = exports.extractPublicKeyPem = exports.exportPublicKeyPem = exports.exportPublicKeyJwk = exports.exportPrivateKeyPem = exports.encryptWithPublicKey = exports.encrypt = exports.digest = exports.deriveKeyFromECDH = exports.decryptWithPrivateKey = exports.decrypt = exports.name = exports.method = exports.isSupported = void 0;
 exports.splitSymmetricKey = splitSymmetricKey;
-exports.mergeSymmetricKeys = mergeSymmetricKeys;
-const index_js_1 = require("../ciphers/index.js");
-const binary_js_1 = require("../binary.js");
-const declarations_js_1 = require("./declarations.js");
-const errors_js_1 = require("../../../src/errors.js");
-const crypto_utils_js_1 = require("./crypto-utils.js");
-const hex_js_1 = require("../../../src/encodings/hex.js");
-const base64_js_1 = require("../../../src/encodings/base64.js");
-const jose_1 = require("jose");
-const pemPublicToCrypto_js_1 = require("../../../src/crypto/pemPublicToCrypto.js");
+const symmetric_js_1 = require("./core/symmetric.js");
+Object.defineProperty(exports, "decrypt", { enumerable: true, get: function () { return symmetric_js_1.decrypt; } });
+Object.defineProperty(exports, "digest", { enumerable: true, get: function () { return symmetric_js_1.digest; } });
+Object.defineProperty(exports, "encrypt", { enumerable: true, get: function () { return symmetric_js_1.encrypt; } });
+Object.defineProperty(exports, "generateKey", { enumerable: true, get: function () { return symmetric_js_1.generateKey; } });
+Object.defineProperty(exports, "hex2Ab", { enumerable: true, get: function () { return symmetric_js_1.hex2Ab; } });
+Object.defineProperty(exports, "hmac", { enumerable: true, get: function () { return symmetric_js_1.hmac; } });
+Object.defineProperty(exports, "importSymmetricKey", { enumerable: true, get: function () { return symmetric_js_1.importSymmetricKey; } });
+Object.defineProperty(exports, "mergeSymmetricKeys", { enumerable: true, get: function () { return symmetric_js_1.mergeSymmetricKeys; } });
+Object.defineProperty(exports, "randomBytes", { enumerable: true, get: function () { return symmetric_js_1.randomBytes; } });
+Object.defineProperty(exports, "randomBytesAsHex", { enumerable: true, get: function () { return symmetric_js_1.randomBytesAsHex; } });
+Object.defineProperty(exports, "verifyHmac", { enumerable: true, get: function () { return symmetric_js_1.verifyHmac; } });
 const keysplit_js_1 = require("../utils/keysplit.js");
-// Used to pass into native crypto functions
-const ENC_DEC_METHODS = ['encrypt', 'decrypt'];
-const SIGN_VERIFY_METHODS = ['sign', 'verify'];
+const keys_js_1 = require("./core/keys.js");
+const rsa_js_1 = require("./core/rsa.js");
+Object.defineProperty(exports, "decryptWithPrivateKey", { enumerable: true, get: function () { return rsa_js_1.decryptWithPrivateKey; } });
+Object.defineProperty(exports, "encryptWithPublicKey", { enumerable: true, get: function () { return rsa_js_1.encryptWithPublicKey; } });
+Object.defineProperty(exports, "generateKeyPair", { enumerable: true, get: function () { return rsa_js_1.generateKeyPair; } });
+Object.defineProperty(exports, "generateSigningKeyPair", { enumerable: true, get: function () { return rsa_js_1.generateSigningKeyPair; } });
+Object.defineProperty(exports, "rsaOaepSha1", { enumerable: true, get: function () { return rsa_js_1.rsaOaepSha1; } });
+Object.defineProperty(exports, "rsaPkcs1Sha256", { enumerable: true, get: function () { return rsa_js_1.rsaPkcs1Sha256; } });
+const ec_js_1 = require("./core/ec.js");
+Object.defineProperty(exports, "deriveKeyFromECDH", { enumerable: true, get: function () { return ec_js_1.deriveKeyFromECDH; } });
+Object.defineProperty(exports, "generateECKeyPair", { enumerable: true, get: function () { return ec_js_1.generateECKeyPair; } });
+const signing_js_1 = require("./core/signing.js");
+Object.defineProperty(exports, "sign", { enumerable: true, get: function () { return signing_js_1.sign; } });
+Object.defineProperty(exports, "verify", { enumerable: true, get: function () { return signing_js_1.verify; } });
+const key_format_js_1 = require("./core/key-format.js");
+Object.defineProperty(exports, "exportPrivateKeyPem", { enumerable: true, get: function () { return key_format_js_1.exportPrivateKeyPem; } });
+Object.defineProperty(exports, "exportPublicKeyJwk", { enumerable: true, get: function () { return key_format_js_1.exportPublicKeyJwk; } });
+Object.defineProperty(exports, "exportPublicKeyPem", { enumerable: true, get: function () { return key_format_js_1.exportPublicKeyPem; } });
+Object.defineProperty(exports, "extractPublicKeyPem", { enumerable: true, get: function () { return key_format_js_1.extractPublicKeyPem; } });
+Object.defineProperty(exports, "importPrivateKey", { enumerable: true, get: function () { return key_format_js_1.importPrivateKey; } });
+Object.defineProperty(exports, "importPublicKey", { enumerable: true, get: function () { return key_format_js_1.importPublicKey; } });
+Object.defineProperty(exports, "jwkToPublicKeyPem", { enumerable: true, get: function () { return key_format_js_1.jwkToPublicKeyPem; } });
+Object.defineProperty(exports, "parsePublicKeyPem", { enumerable: true, get: function () { return key_format_js_1.parsePublicKeyPem; } });
+Object.defineProperty(exports, "publicKeyPemToJwk", { enumerable: true, get: function () { return key_format_js_1.publicKeyPemToJwk; } });
 exports.isSupported = typeof globalThis?.crypto !== 'undefined';
 exports.method = 'http://www.w3.org/2001/04/xmlenc#aes256-cbc';
 exports.name = 'BrowserNativeCryptoService';
-/**
- * Get a DOMString representing the algorithm to use for an
- * asymmetric key generation.
- */
-function rsaOaepSha1(modulusLength = declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-    if (!modulusLength || modulusLength < declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-        throw new errors_js_1.ConfigurationError('Invalid key size requested');
-    }
-    return {
-        name: 'RSA-OAEP',
-        hash: {
-            name: 'SHA-1',
-        },
-        modulusLength,
-        publicExponent: new Uint8Array([0x01, 0x00, 0x01]), // 24 bit representation of 65537
-    };
-}
-function rsaPkcs1Sha256(modulusLength = declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-    if (!modulusLength || modulusLength < declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-        throw new errors_js_1.ConfigurationError('Invalid key size requested');
-    }
-    return {
-        name: 'RSASSA-PKCS1-v1_5',
-        hash: {
-            name: 'SHA-256',
-        },
-        modulusLength,
-        publicExponent: new Uint8Array([0x01, 0x00, 0x01]), // 24 bit representation of 65537
-    };
-}
-/**
- * Generate a random symmetric key (opaque).
- * @param length - Key length in bytes (default 32 for AES-256)
- * @return Opaque symmetric key
- */
-async function generateKey(length) {
-    const keyBytes = await randomBytes(length || 32);
-    return wrapSymmetricKey(keyBytes);
-}
-// ============================================================
-// Opaque Key Wrapping/Unwrapping Helpers
-// ============================================================
-/**
- * Wrap a CryptoKey as an opaque PublicKey.
- * @internal
- */
-function wrapPublicKey(key, algorithm) {
-    const result = {
-        _brand: 'PublicKey',
-        algorithm,
-        _internal: key,
-    };
-    if (algorithm.startsWith('rsa:')) {
-        result.modulusBits = parseInt(algorithm.split(':')[1], 10);
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curvePart = algorithm.split(':')[1];
-        result.curve =
-            curvePart === 'secp256r1'
-                ? 'P-256'
-                : curvePart === 'secp384r1'
-                    ? 'P-384'
-                    : curvePart === 'secp521r1'
-                        ? 'P-521'
-                        : undefined;
-    }
-    return result;
-}
-/**
- * Wrap a CryptoKey as an opaque PrivateKey.
- * @internal
- */
-function wrapPrivateKey(key, algorithm) {
-    const result = {
-        _brand: 'PrivateKey',
-        algorithm,
-        _internal: key,
-    };
-    if (algorithm.startsWith('rsa:')) {
-        result.modulusBits = parseInt(algorithm.split(':')[1], 10);
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curvePart = algorithm.split(':')[1];
-        result.curve =
-            curvePart === 'secp256r1'
-                ? 'P-256'
-                : curvePart === 'secp384r1'
-                    ? 'P-384'
-                    : curvePart === 'secp521r1'
-                        ? 'P-521'
-                        : undefined;
-    }
-    return result;
-}
-/**
- * Unwrap an opaque key to get the internal CryptoKey.
- * @internal
- */
-function unwrapKey(key) {
-    return key._internal;
-}
-/**
- * Wrap raw key bytes as an opaque SymmetricKey.
- * @internal
- */
-function wrapSymmetricKey(keyBytes) {
-    return {
-        _brand: 'SymmetricKey',
-        length: keyBytes.length * 8, // bits
-        _internal: keyBytes,
-    };
-}
-/**
- * Unwrap an opaque SymmetricKey to get raw bytes.
- * @internal
- */
-function unwrapSymmetricKey(key) {
-    return key._internal;
-}
-/**
- * Generate an RSA key pair
- * @see    {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey}
- * @param  size in bits
- */
-async function generateKeyPair(size) {
-    const keySize = size || declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS;
-    const algoDomString = rsaOaepSha1(keySize);
-    const keyPair = await crypto.subtle.generateKey(algoDomString, true, ENC_DEC_METHODS);
-    // Map to supported algorithm sizes
-    let algorithm;
-    if (keySize === 2048) {
-        algorithm = 'rsa:2048';
-    }
-    else if (keySize === 4096) {
-        algorithm = 'rsa:4096';
-    }
-    else {
-        throw new errors_js_1.ConfigurationError(`Unsupported RSA key size: ${keySize}. Only 2048 and 4096 are supported.`);
-    }
-    return {
-        publicKey: wrapPublicKey(keyPair.publicKey, algorithm),
-        privateKey: wrapPrivateKey(keyPair.privateKey, algorithm),
-    };
-}
-/**
- * Generate an RSA key pair suitable for signatures
- * @see    {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey}
- */
-async function generateSigningKeyPair() {
-    const rsaParams = rsaPkcs1Sha256(2048);
-    const keyPair = await crypto.subtle.generateKey(rsaParams, true, SIGN_VERIFY_METHODS);
-    const algorithm = 'rsa:2048';
-    return {
-        publicKey: wrapPublicKey(keyPair.publicKey, algorithm),
-        privateKey: wrapPrivateKey(keyPair.privateKey, algorithm),
-    };
-}
-/**
- * Encrypt using a public key (RSA-OAEP).
- * Accepts Binary or SymmetricKey for key wrapping.
- * @param payload Payload to encrypt (Binary) or symmetric key to wrap (SymmetricKey)
- * @param publicKey Opaque public key
- * @return Encrypted payload
- */
-async function encryptWithPublicKey(payload, publicKey) {
-    let payloadBuffer;
-    // Handle SymmetricKey unwrapping
-    if ('_brand' in payload && payload._brand === 'SymmetricKey') {
-        // Pass Uint8Array directly — Web Crypto respects byteOffset/byteLength on typed array views.
-        payloadBuffer = unwrapSymmetricKey(payload);
-    }
-    else {
-        // Binary payload
-        payloadBuffer = payload.asArrayBuffer();
-    }
-    const cryptoKey = unwrapKey(publicKey);
-    const result = await crypto.subtle.encrypt({ name: 'RSA-OAEP' }, cryptoKey, payloadBuffer);
-    return binary_js_1.Binary.fromArrayBuffer(result);
-}
-async function randomBytes(byteLength) {
-    const r = new Uint8Array(byteLength);
-    crypto.getRandomValues(r);
-    return r;
-}
-/**
- * Returns a promise to the encryption key as a binary string.
- *
- * Note: This function should almost never fail as it includes a fallback
- * if for some reason the native generate key fails.
- *
- * @param length The key length, defaults to 256
- *
- * @returns The hex string.
- */
-async function randomBytesAsHex(length) {
-    // Create a typed array of the correct length to fill
-    const r = new Uint8Array(length);
-    crypto.getRandomValues(r);
-    return (0, hex_js_1.encodeArrayBuffer)(r.buffer);
-}
-/**
- * Decrypt a public-key encrypted payload with a private key
- * @param  encryptedPayload  Payload to decrypt
- * @param  privateKey        Opaque private key
- * @return Decrypted payload
- */
-async function decryptWithPrivateKey(encryptedPayload, privateKey) {
-    console.assert(typeof encryptedPayload === 'object', 'encryptedPayload must be object');
-    const cryptoKey = unwrapKey(privateKey);
-    const payload = await crypto.subtle.decrypt({ name: 'RSA-OAEP' }, cryptoKey, encryptedPayload.asArrayBuffer());
-    const bufferView = new Uint8Array(payload);
-    return binary_js_1.Binary.fromArrayBuffer(bufferView.buffer);
-}
-/**
- * Decrypt content synchronously
- * @param payload The payload to decrypt
- * @param key     The symmetric encryption key (opaque)
- * @param iv      The initialization vector
- * @param algorithm The algorithm to use for encryption
- * @param authTag The authentication tag for authenticated crypto.
- */
-function decrypt(payload, key, iv, algorithm, authTag) {
-    return _doDecrypt(payload, key, iv, algorithm, authTag);
-}
-/**
- * Encrypt content synchronously
- * @param payload   The payload to encrypt
- * @param key       The encryption key
- * @param iv        The initialization vector
- * @param algorithm The algorithm to use for encryption
- */
-function encrypt(payload, key, iv, algorithm) {
-    return _doEncrypt(payload, key, iv, algorithm);
-}
-async function _doEncrypt(payload, key, iv, algorithm) {
-    console.assert(payload != null);
-    console.assert(key != null);
-    console.assert(iv != null);
-    // Handle both Binary and SymmetricKey payloads
-    let payloadBuffer;
-    if ('_brand' in payload && payload._brand === 'SymmetricKey') {
-        // Pass Uint8Array directly — Web Crypto respects byteOffset/byteLength on typed array views.
-        payloadBuffer = unwrapSymmetricKey(payload);
-    }
-    else {
-        // Binary payload
-        payloadBuffer = payload.asArrayBuffer();
-    }
-    const algoDomString = getSymmetricAlgoDomString(iv, algorithm);
-    // Unwrap symmetric key to get raw bytes
-    const keyBytes = unwrapSymmetricKey(key);
-    const importedKey = await _importKey(keyBytes, algoDomString);
-    const encrypted = await crypto.subtle.encrypt(algoDomString, importedKey, payloadBuffer);
-    if (algoDomString.name === 'AES-GCM') {
-        return {
-            payload: binary_js_1.Binary.fromArrayBuffer(encrypted.slice(0, -16)),
-            authTag: binary_js_1.Binary.fromArrayBuffer(encrypted.slice(-16)),
-        };
-    }
-    return {
-        payload: binary_js_1.Binary.fromArrayBuffer(encrypted),
-    };
-}
-async function _doDecrypt(payload, key, iv, algorithm, authTag) {
-    console.assert(payload != null);
-    console.assert(key != null);
-    console.assert(iv != null);
-    let payloadBuffer = payload.asArrayBuffer();
-    // Concat the the auth tag to the payload for decryption
-    if (authTag) {
-        const authTagBuffer = authTag.asArrayBuffer();
-        const gcmPayload = new Uint8Array(payloadBuffer.byteLength + authTagBuffer.byteLength);
-        gcmPayload.set(new Uint8Array(payloadBuffer), 0);
-        gcmPayload.set(new Uint8Array(authTagBuffer), payloadBuffer.byteLength);
-        payloadBuffer = gcmPayload.buffer;
-    }
-    const algoDomString = getSymmetricAlgoDomString(iv, algorithm);
-    // Unwrap symmetric key to get raw bytes
-    const keyBytes = unwrapSymmetricKey(key);
-    const importedKey = await _importKey(keyBytes, algoDomString);
-    algoDomString.iv = iv.asArrayBuffer();
-    const decrypted = await crypto.subtle
-        .decrypt(algoDomString, importedKey, payloadBuffer)
-        // Catching this error so we can specifically check for OperationError
-        .catch((err) => {
-        if (err.name === 'OperationError') {
-            throw new errors_js_1.DecryptError(err);
-        }
-        throw err;
-    });
-    return { payload: binary_js_1.Binary.fromArrayBuffer(decrypted) };
-}
-function _importKey(keyBytes, algorithm) {
-    return crypto.subtle.importKey('raw', keyBytes, algorithm, true, ENC_DEC_METHODS);
-}
-/**
- * Get a DOMString representing the algorithm to use for a crypto
- * operation. Defaults to AES-CBC.
- * @param  {String|undefined} algorithm
- * @return {DOMString} Algorithm to use
- */
-function getSymmetricAlgoDomString(iv, algorithm) {
-    let nativeAlgorithm = 'AES-CBC';
-    if (algorithm === index_js_1.Algorithms.AES_256_GCM) {
-        nativeAlgorithm = 'AES-GCM';
-    }
-    return {
-        name: nativeAlgorithm,
-        iv: iv.asArrayBuffer(),
-    };
-}
-/**
- * Create a SHA256 hash. Code refrenced from MDN:
- * https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/digest
- * @param  content  String content
- * @return Hex hash
- */
-/**
- * Create an ArrayBuffer from a hex string.
- * https://developers.google.com/web/updates/2012/06/How-to-convert-ArrayBuffer-to-and-from-String?hl=en
- * @param  hex - Hex string
- */
-function hex2Ab(hex) {
-    const buffer = new ArrayBuffer(hex.length / 2);
-    const bufferView = new Uint8Array(buffer);
-    for (let i = 0; i < hex.length; i += 2) {
-        bufferView[i / 2] = parseInt(hex.substr(i, 2), 16);
-    }
-    return buffer;
-}
-/**
- * Get the Web Crypto algorithm parameters for a signing algorithm.
- */
-function getSigningAlgorithmParams(algorithm) {
-    switch (algorithm) {
-        case 'RS256':
-            return {
-                importParams: { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' },
-                signParams: 'RSASSA-PKCS1-v1_5',
-            };
-        case 'ES256':
-            return {
-                importParams: { name: 'ECDSA', namedCurve: 'P-256' },
-                signParams: { name: 'ECDSA', hash: 'SHA-256' },
-            };
-        case 'ES384':
-            return {
-                importParams: { name: 'ECDSA', namedCurve: 'P-384' },
-                signParams: { name: 'ECDSA', hash: 'SHA-384' },
-            };
-        case 'ES512':
-            return {
-                importParams: { name: 'ECDSA', namedCurve: 'P-521' },
-                signParams: { name: 'ECDSA', hash: 'SHA-512' },
-            };
-        default:
-            throw new errors_js_1.ConfigurationError(`Unsupported signing algorithm: ${algorithm}`);
-    }
-}
-/**
- * Convert IEEE P1363 signature format (used by WebCrypto ECDSA) to DER format (used by JWT).
- * RS256 signatures don't need conversion.
- */
-function ieeeP1363ToDer(signature, algorithm) {
-    if (algorithm === 'RS256') {
-        return signature;
-    }
-    // IEEE P1363: r || s where each is padded to key size
-    const halfLen = signature.length / 2;
-    const r = signature.slice(0, halfLen);
-    const s = signature.slice(halfLen);
-    // Remove leading zeros but keep one if the high bit is set
-    const trimLeadingZeros = (arr) => {
-        let i = 0;
-        while (i < arr.length - 1 && arr[i] === 0)
-            i++;
-        return arr.slice(i);
-    };
-    let rTrimmed = trimLeadingZeros(r);
-    let sTrimmed = trimLeadingZeros(s);
-    // Add leading zero if high bit is set (to keep positive in DER)
-    if (rTrimmed[0] & 0x80) {
-        const padded = new Uint8Array(rTrimmed.length + 1);
-        padded.set(rTrimmed, 1);
-        rTrimmed = padded;
-    }
-    if (sTrimmed[0] & 0x80) {
-        const padded = new Uint8Array(sTrimmed.length + 1);
-        padded.set(sTrimmed, 1);
-        sTrimmed = padded;
-    }
-    // DER SEQUENCE: 0x30 [length] [r INTEGER] [s INTEGER]
-    // INTEGER: 0x02 [length] [value]
-    const rDer = new Uint8Array([0x02, rTrimmed.length, ...rTrimmed]);
-    const sDer = new Uint8Array([0x02, sTrimmed.length, ...sTrimmed]);
-    const seqLen = rDer.length + sDer.length;
-    // DER length: short-form for < 128, long-form (0x81 nn) for 128-255.
-    // ECDSA sequences never exceed 255 bytes for any supported curve.
-    const lenBytes = seqLen < 128 ? new Uint8Array([seqLen]) : new Uint8Array([0x81, seqLen]);
-    const result = new Uint8Array(1 + lenBytes.length + seqLen);
-    result[0] = 0x30;
-    result.set(lenBytes, 1);
-    result.set(rDer, 1 + lenBytes.length);
-    result.set(sDer, 1 + lenBytes.length + rDer.length);
-    return result;
-}
-/**
- * Convert DER signature format (used by JWT) to IEEE P1363 format (used by WebCrypto ECDSA).
- * RS256 signatures don't need conversion.
- */
-function derToIeeeP1363(signature, algorithm) {
-    if (algorithm === 'RS256') {
-        return signature;
-    }
-    // Determine the expected component length based on algorithm
-    let componentLen;
-    switch (algorithm) {
-        case 'ES256':
-            componentLen = 32;
-            break;
-        case 'ES384':
-            componentLen = 48;
-            break;
-        case 'ES512':
-            componentLen = 66;
-            break;
-        default:
-            throw new errors_js_1.ConfigurationError(`Unsupported algorithm for DER conversion: ${algorithm}`);
-    }
-    // Parse DER: SEQUENCE { INTEGER r, INTEGER s }
-    if (signature[0] !== 0x30) {
-        throw new errors_js_1.ConfigurationError('Invalid DER signature: expected SEQUENCE');
-    }
-    // Skip SEQUENCE tag, then parse DER length (short- or long-form).
-    let offset = 1;
-    if (signature[offset] & 0x80) {
-        // Long-form: low 7 bits = number of subsequent length bytes.
-        const lenBytesCount = signature[offset] & 0x7f;
-        if (lenBytesCount === 0 || lenBytesCount > 4) {
-            throw new errors_js_1.ConfigurationError('Invalid DER signature: invalid long-form length');
-        }
-        offset += 1 + lenBytesCount;
-        if (offset > signature.length) {
-            throw new errors_js_1.ConfigurationError('Invalid DER signature: length bytes exceed signature length');
-        }
-    }
-    else {
-        // Short-form: single length byte.
-        offset += 1;
-    }
-    // Parse r INTEGER
-    if (signature[offset] !== 0x02) {
-        throw new errors_js_1.ConfigurationError('Invalid DER signature: expected INTEGER for r');
-    }
-    const rLen = signature[offset + 1];
-    offset += 2;
-    let r = signature.slice(offset, offset + rLen);
-    offset += rLen;
-    // Parse s INTEGER
-    if (signature[offset] !== 0x02) {
-        throw new errors_js_1.ConfigurationError('Invalid DER signature: expected INTEGER for s');
-    }
-    const sLen = signature[offset + 1];
-    offset += 2;
-    let s = signature.slice(offset, offset + sLen);
-    // Remove leading zero padding if present
-    if (r[0] === 0 && r.length > componentLen) {
-        r = r.slice(1);
-    }
-    if (s[0] === 0 && s.length > componentLen) {
-        s = s.slice(1);
-    }
-    // Pad to component length
-    const result = new Uint8Array(componentLen * 2);
-    result.set(r, componentLen - r.length);
-    result.set(s, componentLen * 2 - s.length);
-    return result;
-}
-/**
- * Sign data with an asymmetric private key.
- */
-async function sign(data, privateKey, algorithm) {
-    const { signParams } = getSigningAlgorithmParams(algorithm);
-    // Unwrap the internal CryptoKey
-    const key = unwrapKey(privateKey);
-    // Sign the data
-    const signature = await crypto.subtle.sign(signParams, key, data);
-    // Convert from IEEE P1363 to DER for EC algorithms
-    return ieeeP1363ToDer(new Uint8Array(signature), algorithm);
-}
-/**
- * Verify signature with an asymmetric public key.
- */
-async function verify(data, signature, publicKey, algorithm) {
-    const { signParams } = getSigningAlgorithmParams(algorithm);
-    // Unwrap the internal CryptoKey
-    const key = unwrapKey(publicKey);
-    // Convert from DER to IEEE P1363 for EC algorithms
-    const ieeeSignature = derToIeeeP1363(signature, algorithm);
-    // Verify the signature
-    return crypto.subtle.verify(signParams, key, ieeeSignature, data);
-}
-/**
- * Compute hash digest.
- */
-async function digest(algorithm, data) {
-    // Validate algorithm and map to Web Crypto name
-    const validAlgorithms = ['SHA-256', 'SHA-384', 'SHA-512'];
-    if (!validAlgorithms.includes(algorithm)) {
-        throw new errors_js_1.ConfigurationError(`Unsupported hash algorithm: ${algorithm}`);
-    }
-    const hashBuffer = await crypto.subtle.digest(algorithm, data);
-    return new Uint8Array(hashBuffer);
-}
-/**
- * Extract PEM public key from X.509 certificate or return PEM key as-is.
- *
- * @param certOrPem - A PEM-encoded X.509 certificate or public key
- * @param jwaAlgorithm - JWA algorithm hint for certificate parsing (RS256, RS512, ES256, ES384, ES512).
- *                       If not provided for a certificate, will attempt to auto-detect from OIDs.
- */
-async function extractPublicKeyPem(certOrPem, jwaAlgorithm) {
-    // If it's a certificate, extract the public key
-    if (certOrPem.includes('-----BEGIN CERTIFICATE-----')) {
-        let alg = jwaAlgorithm;
-        if (!alg) {
-            // Auto-detect algorithm from certificate OIDs
-            const certBody = certOrPem.replace(/-----(BEGIN|END) CERTIFICATE-----|\s/g, '');
-            const certBytes = (0, base64_js_1.decodeArrayBuffer)(certBody);
-            const hex = (0, hex_js_1.encodeArrayBuffer)(certBytes);
-            alg = (0, pemPublicToCrypto_js_1.toJwsAlg)(hex);
-        }
-        const cert = await (0, jose_1.importX509)(certOrPem, alg, { extractable: true });
-        return (0, jose_1.exportSPKI)(cert);
-    }
-    // If it's already a PEM public key, return as-is
-    if (certOrPem.includes('-----BEGIN PUBLIC KEY-----')) {
-        return certOrPem;
-    }
-    throw new errors_js_1.ConfigurationError('Input must be a PEM-encoded certificate or public key');
-}
-/**
- * Map ECCurve to Web Crypto named curve.
- */
-function curveToNamedCurve(curve) {
-    switch (curve) {
-        case 'P-256':
-            return 'P-256';
-        case 'P-384':
-            return 'P-384';
-        case 'P-521':
-            return 'P-521';
-        default:
-            throw new errors_js_1.ConfigurationError(`Unsupported curve: ${curve}`);
-    }
-}
-/**
- * Generate an EC key pair for ECDH key agreement.
- */
-async function generateECKeyPair(curve = 'P-256') {
-    const namedCurve = curveToNamedCurve(curve);
-    // Generate key pair for ECDH key agreement
-    const keyPair = await crypto.subtle.generateKey({ name: 'ECDH', namedCurve }, true, [
-        'deriveBits',
-    ]);
-    // Map to KeyAlgorithm literal type
-    let algorithm;
-    switch (namedCurve) {
-        case 'P-256':
-            algorithm = 'ec:secp256r1';
-            break;
-        case 'P-384':
-            algorithm = 'ec:secp384r1';
-            break;
-        case 'P-521':
-            algorithm = 'ec:secp521r1';
-            break;
-        default:
-            throw new errors_js_1.ConfigurationError(`Unsupported curve: ${namedCurve}`);
-    }
-    return {
-        publicKey: wrapPublicKey(keyPair.publicKey, algorithm),
-        privateKey: wrapPrivateKey(keyPair.privateKey, algorithm),
-    };
-}
-/**
- * Supported EC curves.
- */
-const SUPPORTED_EC_CURVES = ['P-256', 'P-384', 'P-521'];
-/**
- * Decode base64url string and return byte length.
- * Uses the existing base64 decoder which handles both standard and URL-safe encoding.
- */
-function base64urlByteLength(base64url) {
-    // Add padding if needed (base64url omits padding)
-    const padding = (4 - (base64url.length % 4)) % 4;
-    const padded = base64url + '='.repeat(padding);
-    return (0, base64_js_1.decodeArrayBuffer)(padded).byteLength;
-}
-/**
- * Extract EC curve from a public key by parsing ASN.1 OIDs.
- * Reuses the existing guessCurveName function that checks for curve OIDs.
- */
-function extractEcCurveFromPublicKey(keyData) {
-    // Convert to hex for OID parsing
-    const hexKey = (0, hex_js_1.encodeArrayBuffer)(keyData);
-    // Use existing OID parser (returns 'P-256', 'P-384', or 'P-521')
-    const curveName = (0, pemPublicToCrypto_js_1.guessCurveName)(hexKey);
-    return curveName;
-}
-/**
- * Perform ECDH key agreement followed by HKDF key derivation.
- * Returns opaque symmetric key for symmetric encryption.
- */
-async function deriveKeyFromECDH(privateKey, publicKey, hkdfParams) {
-    // Unwrap the internal CryptoKeys
-    const privateKeyCrypto = unwrapKey(privateKey);
-    const publicKeyCrypto = unwrapKey(publicKey);
-    // Get curve from key metadata
-    const curve = publicKey.curve;
-    if (!curve) {
-        throw new errors_js_1.ConfigurationError('EC curve not found on public key');
-    }
-    // Determine bits based on curve
-    const curveBits = {
-        'P-256': 256,
-        'P-384': 384,
-        'P-521': 528, // P-521 derives 528 bits (66 bytes)
-    };
-    const bits = curveBits[curve];
-    // Perform ECDH to get shared secret
-    const sharedSecret = await crypto.subtle.deriveBits({ name: 'ECDH', public: publicKeyCrypto }, privateKeyCrypto, bits);
-    // Import shared secret as HKDF key material
-    const hkdfKey = await crypto.subtle.importKey('raw', sharedSecret, 'HKDF', false, ['deriveKey']);
-    // Derive the final key using HKDF
-    const keyLength = hkdfParams.keyLength ?? 256;
-    const derivedKey = await crypto.subtle.deriveKey({
-        name: 'HKDF',
-        hash: hkdfParams.hash,
-        salt: hkdfParams.salt,
-        info: hkdfParams.info ?? new Uint8Array(0),
-    }, hkdfKey, { name: 'AES-GCM', length: keyLength }, true, ['encrypt', 'decrypt']);
-    // Export the derived key as raw bytes and wrap as SymmetricKey
-    const keyBytes = await crypto.subtle.exportKey('raw', derivedKey);
-    return wrapSymmetricKey(new Uint8Array(keyBytes));
-}
-/**
- * Compute HMAC-SHA256 of data with a symmetric key.
- */
-async function hmac(data, key) {
-    // Unwrap symmetric key to get raw bytes
-    const keyBytes = unwrapSymmetricKey(key);
-    const cryptoKey = await crypto.subtle.importKey('raw', keyBytes, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
-    const signature = await crypto.subtle.sign('HMAC', cryptoKey, data);
-    return new Uint8Array(signature);
-}
-/**
- * Verify HMAC-SHA256. Standalone utility — not part of CryptoService interface.
- */
-async function verifyHmac(data, signature, key) {
-    const keyBytes = unwrapSymmetricKey(key);
-    const cryptoKey = await crypto.subtle.importKey('raw', keyBytes, { name: 'HMAC', hash: 'SHA-256' }, false, ['verify']);
-    return crypto.subtle.verify('HMAC', cryptoKey, signature, data);
-}
-/**
- * Extract RSA modulus bit length by importing key and exporting as JWK.
- * Uses Web Crypto's built-in ASN.1 parsing for robustness.
- */
-async function extractRsaModulusBitLength(keyData) {
-    const key = await crypto.subtle.importKey('spki', keyData, { name: 'RSA-OAEP', hash: 'SHA-256' }, true, // extractable
-    ['encrypt']);
-    const jwk = await crypto.subtle.exportKey('jwk', key);
-    if (!jwk.n) {
-        throw new errors_js_1.ConfigurationError('Invalid RSA key: missing modulus');
-    }
-    // JWK 'n' is base64url-encoded modulus
-    // Decode and count bytes, multiply by 8 for bits
-    return base64urlByteLength(jwk.n) * 8;
-}
-/**
- * Import and validate a PEM public key, returning algorithm info.
- * Uses JWK export for robust key parameter detection.
- */
-async function parsePublicKeyPem(pem) {
-    // First extract public key if it's a certificate
-    let publicKeyPem = pem;
-    if (pem.includes('-----BEGIN CERTIFICATE-----')) {
-        publicKeyPem = await extractPublicKeyPem(pem);
-    }
-    if (!publicKeyPem.includes('-----BEGIN PUBLIC KEY-----')) {
-        throw new errors_js_1.ConfigurationError('Input must be a PEM-encoded public key or certificate');
-    }
-    const keyData = (0, base64_js_1.decodeArrayBuffer)((0, crypto_utils_js_1.removePemFormatting)(publicKeyPem));
-    // Try RSA first - use JWK export to get modulus size
-    try {
-        const modulusBits = await extractRsaModulusBitLength(keyData);
-        let algorithm;
-        if (modulusBits < declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-            throw new errors_js_1.ConfigurationError(`RSA key size ${modulusBits} bits is below the minimum of ${declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS} bits`);
-        }
-        else if (modulusBits <= 2048) {
-            algorithm = 'rsa:2048';
-        }
-        else if (modulusBits <= 4096) {
-            algorithm = 'rsa:4096';
-        }
-        else {
-            throw new errors_js_1.ConfigurationError(`Unsupported RSA key size: ${modulusBits} bits`);
-        }
-        return { algorithm, pem: publicKeyPem };
-    }
-    catch (e) {
-        // If it's our own ConfigurationError, rethrow
-        if (e instanceof errors_js_1.ConfigurationError) {
-            throw e;
-        }
-        // Not an RSA key, try EC next
-    }
-    // Try EC - parse curve from OID
-    try {
-        const detectedCurve = extractEcCurveFromPublicKey(keyData);
-        const curveMap = {
-            'P-256': 'ec:secp256r1',
-            'P-384': 'ec:secp384r1',
-            'P-521': 'ec:secp521r1',
-        };
-        return { algorithm: curveMap[detectedCurve], pem: publicKeyPem };
-    }
-    catch {
-        // Not a valid EC key
-    }
-    throw new errors_js_1.ConfigurationError('Unable to determine public key algorithm - unsupported key type');
-}
-/**
- * Convert a JWK (JSON Web Key) to PEM format.
- */
-async function jwkToPublicKeyPem(jwk) {
-    let key;
-    if (jwk.kty === 'RSA') {
-        // RSA key
-        key = await crypto.subtle.importKey('jwk', jwk, { name: 'RSA-OAEP', hash: 'SHA-256' }, true, [
-            'encrypt',
-        ]);
-    }
-    else if (jwk.kty === 'EC') {
-        // EC key
-        const crv = jwk.crv;
-        if (!crv || !['P-256', 'P-384', 'P-521'].includes(crv)) {
-            throw new errors_js_1.ConfigurationError(`Unsupported EC curve: ${crv}`);
-        }
-        key = await crypto.subtle.importKey('jwk', jwk, { name: 'ECDH', namedCurve: crv }, true, []);
-    }
-    else {
-        throw new errors_js_1.ConfigurationError(`Unsupported JWK key type: ${jwk.kty}`);
-    }
-    const spkiBuffer = await crypto.subtle.exportKey('spki', key);
-    return (0, crypto_utils_js_1.formatAsPem)(spkiBuffer, 'PUBLIC KEY');
-}
-/**
- * Convert a PEM public key to JWK format.
- * Returns only public key components (no private key data).
- */
-async function publicKeyPemToJwk(publicKeyPem) {
-    const keyDataBase64 = (0, crypto_utils_js_1.removePemFormatting)(publicKeyPem);
-    const keyBuffer = (0, base64_js_1.decodeArrayBuffer)(keyDataBase64);
-    const hex = (0, hex_js_1.encodeArrayBuffer)(keyBuffer);
-    // Detect key type using OID
-    const algorithmName = (0, pemPublicToCrypto_js_1.guessAlgorithmName)(hex);
-    if (algorithmName === 'ECDH' || algorithmName === 'ECDSA') {
-        // EC key - detect curve from OID
-        const namedCurve = (0, pemPublicToCrypto_js_1.guessCurveName)(hex);
-        const key = await crypto.subtle.importKey('spki', keyBuffer, { name: 'ECDSA', namedCurve }, true, ['verify']);
-        const jwk = await crypto.subtle.exportKey('jwk', key);
-        // Return only public key components
-        const { kty, crv, x, y } = jwk;
-        return { kty, crv, x, y };
-    }
-    else {
-        // RSA key
-        const key = await crypto.subtle.importKey('spki', keyBuffer, { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' }, true, ['verify']);
-        const jwk = await crypto.subtle.exportKey('jwk', key);
-        // Return only public key components
-        const { kty, e, n } = jwk;
-        return { kty, e, n };
-    }
-}
-// ============================================================
-// Key Import Functions (PEM → Opaque)
-// ============================================================
-/**
- * Import a PEM public key as an opaque key.
- */
-async function importPublicKey(pem, options) {
-    const { usage = 'encrypt', extractable = true, algorithmHint } = options;
-    // Detect algorithm from PEM; also normalises certificates → plain SPKI PEM.
-    const keyInfo = await parsePublicKeyPem(pem);
-    const algorithm = algorithmHint || keyInfo.algorithm;
-    // Use keyInfo.pem (normalised SPKI) not the original pem, which may be a certificate.
-    // Passing raw X.509 DER bytes to crypto.subtle.importKey('spki') would throw DataError.
-    const keyData = (0, crypto_utils_js_1.removePemFormatting)(keyInfo.pem);
-    const keyBuffer = (0, base64_js_1.decodeArrayBuffer)(keyData);
-    // Determine Web Crypto algorithm and usages based on key type and usage
-    let cryptoAlgorithm;
-    let keyUsages;
-    if (algorithm.startsWith('rsa:')) {
-        if (usage === 'encrypt') {
-            cryptoAlgorithm = rsaOaepSha1();
-            keyUsages = ['encrypt'];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' };
-            keyUsages = ['verify'];
-        }
-        else {
-            throw new errors_js_1.ConfigurationError('RSA keys only support usage: encrypt or sign');
-        }
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curve = algorithm.split(':')[1];
-        const namedCurve = curve === 'secp256r1'
-            ? 'P-256'
-            : curve === 'secp384r1'
-                ? 'P-384'
-                : curve === 'secp521r1'
-                    ? 'P-521'
-                    : (() => {
-                        throw new errors_js_1.ConfigurationError(`Unsupported EC curve: ${curve}`);
-                    })();
-        if (usage === 'derive') {
-            cryptoAlgorithm = { name: 'ECDH', namedCurve };
-            keyUsages = [];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'ECDSA', namedCurve };
-            keyUsages = ['verify'];
-        }
-        else {
-            throw new errors_js_1.ConfigurationError('EC keys only support usage: derive or sign');
-        }
-    }
-    else {
-        throw new errors_js_1.ConfigurationError(`Unsupported algorithm: ${algorithm}`);
-    }
-    // Import as CryptoKey
-    const cryptoKey = await crypto.subtle.importKey('spki', keyBuffer, cryptoAlgorithm, extractable, keyUsages);
-    return wrapPublicKey(cryptoKey, algorithm);
-}
-/**
- * Import a PEM private key as an opaque key.
- */
-async function importPrivateKey(pem, options) {
-    const { usage = 'encrypt', extractable = true, algorithmHint } = options;
-    // Detect algorithm from PEM structure (similar to public key detection)
-    // For now, use algorithmHint if provided, otherwise detect from key structure
-    let algorithm;
-    const keyData = (0, crypto_utils_js_1.removePemFormatting)(pem);
-    const keyBuffer = (0, base64_js_1.decodeArrayBuffer)(keyData);
-    if (algorithmHint) {
-        algorithm = algorithmHint;
-    }
-    else {
-        // PKCS#8 PrivateKeyInfo embeds the same AlgorithmIdentifier OIDs as SPKI,
-        // so guessAlgorithmName / guessCurveName work on private key bytes too.
-        const hex = (0, hex_js_1.encodeArrayBuffer)(keyBuffer);
-        const algorithmName = (0, pemPublicToCrypto_js_1.guessAlgorithmName)(hex); // throws on unrecognised OID
-        if (algorithmName === 'ECDH' || algorithmName === 'ECDSA') {
-            const namedCurve = (0, pemPublicToCrypto_js_1.guessCurveName)(hex);
-            const curveMap = {
-                'P-256': 'ec:secp256r1',
-                'P-384': 'ec:secp384r1',
-                'P-521': 'ec:secp521r1',
-            };
-            const mapped = curveMap[namedCurve];
-            if (!mapped)
-                throw new errors_js_1.ConfigurationError(`Unsupported EC curve in private key: ${namedCurve}`);
-            algorithm = mapped;
-        }
-        else {
-            // RSA — determine key size by importing and reading modulus length from JWK
-            const tempKey = await crypto.subtle.importKey('pkcs8', keyBuffer, { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' }, true, ['sign']);
-            const jwk = await crypto.subtle.exportKey('jwk', tempKey);
-            if (!jwk.n) {
-                throw new errors_js_1.ConfigurationError('Invalid RSA private key: missing modulus');
-            }
-            const modulusBits = base64urlByteLength(jwk.n) * 8;
-            if (modulusBits < declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-                throw new errors_js_1.ConfigurationError(`RSA key size ${modulusBits} bits is below the minimum of ${declarations_js_1.MIN_ASYMMETRIC_KEY_SIZE_BITS} bits`);
-            }
-            algorithm = modulusBits <= 2048 ? 'rsa:2048' : 'rsa:4096';
-        }
-    }
-    // Determine Web Crypto algorithm and usages
-    let cryptoAlgorithm;
-    let keyUsages;
-    if (algorithm.startsWith('rsa:')) {
-        if (usage === 'encrypt') {
-            cryptoAlgorithm = rsaOaepSha1();
-            keyUsages = ['decrypt'];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' };
-            keyUsages = ['sign'];
-        }
-        else {
-            throw new errors_js_1.ConfigurationError('RSA keys only support usage: encrypt or sign');
-        }
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curve = algorithm.split(':')[1];
-        const namedCurve = curve === 'secp256r1'
-            ? 'P-256'
-            : curve === 'secp384r1'
-                ? 'P-384'
-                : curve === 'secp521r1'
-                    ? 'P-521'
-                    : (() => {
-                        throw new errors_js_1.ConfigurationError(`Unsupported EC curve: ${curve}`);
-                    })();
-        if (usage === 'derive') {
-            cryptoAlgorithm = { name: 'ECDH', namedCurve };
-            keyUsages = ['deriveBits'];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'ECDSA', namedCurve };
-            keyUsages = ['sign'];
-        }
-        else {
-            throw new errors_js_1.ConfigurationError('EC keys only support usage: derive or sign');
-        }
-    }
-    else {
-        throw new errors_js_1.ConfigurationError(`Unsupported algorithm: ${algorithm}`);
-    }
-    // Import as CryptoKey
-    const cryptoKey = await crypto.subtle.importKey('pkcs8', keyBuffer, cryptoAlgorithm, extractable, keyUsages);
-    return wrapPrivateKey(cryptoKey, algorithm);
-}
-// ============================================================
-// Key Export Functions (Opaque → PEM/JWK)
-// ============================================================
-/**
- * Export an opaque public key to PEM format.
- */
-async function exportPublicKeyPem(key) {
-    const cryptoKey = unwrapKey(key);
-    const keyBuffer = await crypto.subtle.exportKey('spki', cryptoKey);
-    return (0, crypto_utils_js_1.formatAsPem)(keyBuffer, 'PUBLIC KEY');
-}
-/**
- * Export an opaque private key to PEM format.
- * ONLY USE FOR TESTING/DEVELOPMENT. Private keys should NOT be exportable in secure environments.
- */
-async function exportPrivateKeyPem(key) {
-    const cryptoKey = unwrapKey(key);
-    const keyBuffer = await crypto.subtle.exportKey('pkcs8', cryptoKey);
-    return (0, crypto_utils_js_1.formatAsPem)(keyBuffer, 'PRIVATE KEY');
-}
-/**
- * Export an opaque public key to JWK format.
- */
-async function exportPublicKeyJwk(key) {
-    const cryptoKey = unwrapKey(key);
-    return await crypto.subtle.exportKey('jwk', cryptoKey);
-}
-/**
- * Import raw key bytes as an opaque symmetric key.
- * Used for external keys (e.g., unwrapped from KAS).
- */
-async function importSymmetricKey(keyBytes) {
-    return wrapSymmetricKey(keyBytes);
-}
 /**
  * Split a symmetric key into N shares using XOR secret sharing.
  * Key bytes are extracted internally for splitting.
  * HSM implementations cannot extract bytes and should throw ConfigurationError.
+ *
+ * NOTE: This wrapper lives in index.ts (instead of core/symmetric.ts) because it
+ * needs DefaultCryptoService for keySplit() randomness. Moving it to core/symmetric
+ * would require importing DefaultCryptoService and create a circular dependency.
  */
 async function splitSymmetricKey(key, numShares) {
-    const keyBytes = unwrapSymmetricKey(key);
+    const keyBytes = (0, keys_js_1.unwrapSymmetricKey)(key);
     const splits = await (0, keysplit_js_1.keySplit)(keyBytes, numShares, exports.DefaultCryptoService);
-    return splits.map(wrapSymmetricKey);
-}
-/**
- * Merge symmetric key shares back into the original key using XOR.
- * Key bytes are extracted internally for merging.
- */
-async function mergeSymmetricKeys(shares) {
-    const splitBytes = shares.map(unwrapSymmetricKey);
-    const merged = (0, keysplit_js_1.keyMerge)(splitBytes);
-    return wrapSymmetricKey(merged);
+    return splits.map(keys_js_1.wrapSymmetricKey);
 }
 exports.DefaultCryptoService = {
     name: exports.name,
     method: exports.method,
-    decrypt,
-    decryptWithPrivateKey,
-    deriveKeyFromECDH,
-    digest,
-    encrypt,
-    encryptWithPublicKey,
-    exportPublicKeyJwk,
-    exportPrivateKeyPem,
-    exportPublicKeyPem,
-    extractPublicKeyPem,
-    generateECKeyPair,
-    generateKey,
-    generateKeyPair,
-    generateSigningKeyPair,
-    importPrivateKey,
-    importPublicKey,
-    importSymmetricKey,
-    jwkToPublicKeyPem,
-    mergeSymmetricKeys,
-    parsePublicKeyPem,
-    randomBytes,
-    hmac,
-    verifyHmac,
-    sign,
+    decrypt: symmetric_js_1.decrypt,
+    decryptWithPrivateKey: rsa_js_1.decryptWithPrivateKey,
+    deriveKeyFromECDH: ec_js_1.deriveKeyFromECDH,
+    digest: symmetric_js_1.digest,
+    encrypt: symmetric_js_1.encrypt,
+    encryptWithPublicKey: rsa_js_1.encryptWithPublicKey,
+    exportPublicKeyJwk: key_format_js_1.exportPublicKeyJwk,
+    exportPrivateKeyPem: key_format_js_1.exportPrivateKeyPem,
+    exportPublicKeyPem: key_format_js_1.exportPublicKeyPem,
+    extractPublicKeyPem: key_format_js_1.extractPublicKeyPem,
+    generateECKeyPair: ec_js_1.generateECKeyPair,
+    generateKey: symmetric_js_1.generateKey,
+    generateKeyPair: rsa_js_1.generateKeyPair,
+    generateSigningKeyPair: rsa_js_1.generateSigningKeyPair,
+    importPrivateKey: key_format_js_1.importPrivateKey,
+    importPublicKey: key_format_js_1.importPublicKey,
+    importSymmetricKey: symmetric_js_1.importSymmetricKey,
+    jwkToPublicKeyPem: key_format_js_1.jwkToPublicKeyPem,
+    mergeSymmetricKeys: symmetric_js_1.mergeSymmetricKeys,
+    parsePublicKeyPem: key_format_js_1.parsePublicKeyPem,
+    randomBytes: symmetric_js_1.randomBytes,
+    hmac: symmetric_js_1.hmac,
+    verifyHmac: symmetric_js_1.verifyHmac,
+    sign: signing_js_1.sign,
     splitSymmetricKey,
-    verify,
+    verify: signing_js_1.verify,
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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