@opentdf/sdk 0.11.0 → 0.12.0-beta.112

package/dist/web/tdf3/src/crypto/index.js

@@ -3,1012 +3,31 @@
  *
  * @private
  */
-import { Algorithms } from '../ciphers/index.js';
-import { Binary } from '../binary.js';
-import { MIN_ASYMMETRIC_KEY_SIZE_BITS, } from './declarations.js';
-import { ConfigurationError, DecryptError } from '../../../src/errors.js';
-import { formatAsPem, removePemFormatting } from './crypto-utils.js';
-import { encodeArrayBuffer as hexEncode } from '../../../src/encodings/hex.js';
-import { decodeArrayBuffer as base64Decode } from '../../../src/encodings/base64.js';
-import { exportSPKI, importX509 } from 'jose';
-import { toJwsAlg, guessAlgorithmName, guessCurveName, } from '../../../src/crypto/pemPublicToCrypto.js';
-import { keySplit, keyMerge } from '../utils/keysplit.js';
-// Used to pass into native crypto functions
-const ENC_DEC_METHODS = ['encrypt', 'decrypt'];
-const SIGN_VERIFY_METHODS = ['sign', 'verify'];
+import { decrypt, digest, encrypt, generateKey, hex2Ab, hmac, importSymmetricKey, mergeSymmetricKeys, randomBytes, randomBytesAsHex, verifyHmac, } from './core/symmetric.js';
+import { keySplit } from '../utils/keysplit.js';
+import { unwrapSymmetricKey, wrapSymmetricKey } from './core/keys.js';
+import { decryptWithPrivateKey, encryptWithPublicKey, generateKeyPair, generateSigningKeyPair, rsaOaepSha1, rsaPkcs1Sha256, } from './core/rsa.js';
+import { deriveKeyFromECDH, generateECKeyPair } from './core/ec.js';
+import { sign, verify } from './core/signing.js';
+import { exportPrivateKeyPem, exportPublicKeyJwk, exportPublicKeyPem, extractPublicKeyPem, importPrivateKey, importPublicKey, jwkToPublicKeyPem, parsePublicKeyPem, publicKeyPemToJwk, } from './core/key-format.js';
 export const isSupported = typeof globalThis?.crypto !== 'undefined';
 export const method = 'http://www.w3.org/2001/04/xmlenc#aes256-cbc';
 export const name = 'BrowserNativeCryptoService';
-/**
- * Get a DOMString representing the algorithm to use for an
- * asymmetric key generation.
- */
-export function rsaOaepSha1(modulusLength = MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-    if (!modulusLength || modulusLength < MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-        throw new ConfigurationError('Invalid key size requested');
-    }
-    return {
-        name: 'RSA-OAEP',
-        hash: {
-            name: 'SHA-1',
-        },
-        modulusLength,
-        publicExponent: new Uint8Array([0x01, 0x00, 0x01]), // 24 bit representation of 65537
-    };
-}
-export function rsaPkcs1Sha256(modulusLength = MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-    if (!modulusLength || modulusLength < MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-        throw new ConfigurationError('Invalid key size requested');
-    }
-    return {
-        name: 'RSASSA-PKCS1-v1_5',
-        hash: {
-            name: 'SHA-256',
-        },
-        modulusLength,
-        publicExponent: new Uint8Array([0x01, 0x00, 0x01]), // 24 bit representation of 65537
-    };
-}
-/**
- * Generate a random symmetric key (opaque).
- * @param length - Key length in bytes (default 32 for AES-256)
- * @return Opaque symmetric key
- */
-export async function generateKey(length) {
-    const keyBytes = await randomBytes(length || 32);
-    return wrapSymmetricKey(keyBytes);
-}
-// ============================================================
-// Opaque Key Wrapping/Unwrapping Helpers
-// ============================================================
-/**
- * Wrap a CryptoKey as an opaque PublicKey.
- * @internal
- */
-function wrapPublicKey(key, algorithm) {
-    const result = {
-        _brand: 'PublicKey',
-        algorithm,
-        _internal: key,
-    };
-    if (algorithm.startsWith('rsa:')) {
-        result.modulusBits = parseInt(algorithm.split(':')[1], 10);
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curvePart = algorithm.split(':')[1];
-        result.curve =
-            curvePart === 'secp256r1'
-                ? 'P-256'
-                : curvePart === 'secp384r1'
-                    ? 'P-384'
-                    : curvePart === 'secp521r1'
-                        ? 'P-521'
-                        : undefined;
-    }
-    return result;
-}
-/**
- * Wrap a CryptoKey as an opaque PrivateKey.
- * @internal
- */
-function wrapPrivateKey(key, algorithm) {
-    const result = {
-        _brand: 'PrivateKey',
-        algorithm,
-        _internal: key,
-    };
-    if (algorithm.startsWith('rsa:')) {
-        result.modulusBits = parseInt(algorithm.split(':')[1], 10);
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curvePart = algorithm.split(':')[1];
-        result.curve =
-            curvePart === 'secp256r1'
-                ? 'P-256'
-                : curvePart === 'secp384r1'
-                    ? 'P-384'
-                    : curvePart === 'secp521r1'
-                        ? 'P-521'
-                        : undefined;
-    }
-    return result;
-}
-/**
- * Unwrap an opaque key to get the internal CryptoKey.
- * @internal
- */
-function unwrapKey(key) {
-    return key._internal;
-}
-/**
- * Wrap raw key bytes as an opaque SymmetricKey.
- * @internal
- */
-function wrapSymmetricKey(keyBytes) {
-    return {
-        _brand: 'SymmetricKey',
-        length: keyBytes.length * 8, // bits
-        _internal: keyBytes,
-    };
-}
-/**
- * Unwrap an opaque SymmetricKey to get raw bytes.
- * @internal
- */
-function unwrapSymmetricKey(key) {
-    return key._internal;
-}
-/**
- * Generate an RSA key pair
- * @see    {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey}
- * @param  size in bits
- */
-export async function generateKeyPair(size) {
-    const keySize = size || MIN_ASYMMETRIC_KEY_SIZE_BITS;
-    const algoDomString = rsaOaepSha1(keySize);
-    const keyPair = await crypto.subtle.generateKey(algoDomString, true, ENC_DEC_METHODS);
-    // Map to supported algorithm sizes
-    let algorithm;
-    if (keySize === 2048) {
-        algorithm = 'rsa:2048';
-    }
-    else if (keySize === 4096) {
-        algorithm = 'rsa:4096';
-    }
-    else {
-        throw new ConfigurationError(`Unsupported RSA key size: ${keySize}. Only 2048 and 4096 are supported.`);
-    }
-    return {
-        publicKey: wrapPublicKey(keyPair.publicKey, algorithm),
-        privateKey: wrapPrivateKey(keyPair.privateKey, algorithm),
-    };
-}
-/**
- * Generate an RSA key pair suitable for signatures
- * @see    {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey}
- */
-export async function generateSigningKeyPair() {
-    const rsaParams = rsaPkcs1Sha256(2048);
-    const keyPair = await crypto.subtle.generateKey(rsaParams, true, SIGN_VERIFY_METHODS);
-    const algorithm = 'rsa:2048';
-    return {
-        publicKey: wrapPublicKey(keyPair.publicKey, algorithm),
-        privateKey: wrapPrivateKey(keyPair.privateKey, algorithm),
-    };
-}
-/**
- * Encrypt using a public key (RSA-OAEP).
- * Accepts Binary or SymmetricKey for key wrapping.
- * @param payload Payload to encrypt (Binary) or symmetric key to wrap (SymmetricKey)
- * @param publicKey Opaque public key
- * @return Encrypted payload
- */
-export async function encryptWithPublicKey(payload, publicKey) {
-    let payloadBuffer;
-    // Handle SymmetricKey unwrapping
-    if ('_brand' in payload && payload._brand === 'SymmetricKey') {
-        // Pass Uint8Array directly — Web Crypto respects byteOffset/byteLength on typed array views.
-        payloadBuffer = unwrapSymmetricKey(payload);
-    }
-    else {
-        // Binary payload
-        payloadBuffer = payload.asArrayBuffer();
-    }
-    const cryptoKey = unwrapKey(publicKey);
-    const result = await crypto.subtle.encrypt({ name: 'RSA-OAEP' }, cryptoKey, payloadBuffer);
-    return Binary.fromArrayBuffer(result);
-}
-export async function randomBytes(byteLength) {
-    const r = new Uint8Array(byteLength);
-    crypto.getRandomValues(r);
-    return r;
-}
-/**
- * Returns a promise to the encryption key as a binary string.
- *
- * Note: This function should almost never fail as it includes a fallback
- * if for some reason the native generate key fails.
- *
- * @param length The key length, defaults to 256
- *
- * @returns The hex string.
- */
-export async function randomBytesAsHex(length) {
-    // Create a typed array of the correct length to fill
-    const r = new Uint8Array(length);
-    crypto.getRandomValues(r);
-    return hexEncode(r.buffer);
-}
-/**
- * Decrypt a public-key encrypted payload with a private key
- * @param  encryptedPayload  Payload to decrypt
- * @param  privateKey        Opaque private key
- * @return Decrypted payload
- */
-export async function decryptWithPrivateKey(encryptedPayload, privateKey) {
-    console.assert(typeof encryptedPayload === 'object', 'encryptedPayload must be object');
-    const cryptoKey = unwrapKey(privateKey);
-    const payload = await crypto.subtle.decrypt({ name: 'RSA-OAEP' }, cryptoKey, encryptedPayload.asArrayBuffer());
-    const bufferView = new Uint8Array(payload);
-    return Binary.fromArrayBuffer(bufferView.buffer);
-}
-/**
- * Decrypt content synchronously
- * @param payload The payload to decrypt
- * @param key     The symmetric encryption key (opaque)
- * @param iv      The initialization vector
- * @param algorithm The algorithm to use for encryption
- * @param authTag The authentication tag for authenticated crypto.
- */
-export function decrypt(payload, key, iv, algorithm, authTag) {
-    return _doDecrypt(payload, key, iv, algorithm, authTag);
-}
-/**
- * Encrypt content synchronously
- * @param payload   The payload to encrypt
- * @param key       The encryption key
- * @param iv        The initialization vector
- * @param algorithm The algorithm to use for encryption
- */
-export function encrypt(payload, key, iv, algorithm) {
-    return _doEncrypt(payload, key, iv, algorithm);
-}
-async function _doEncrypt(payload, key, iv, algorithm) {
-    console.assert(payload != null);
-    console.assert(key != null);
-    console.assert(iv != null);
-    // Handle both Binary and SymmetricKey payloads
-    let payloadBuffer;
-    if ('_brand' in payload && payload._brand === 'SymmetricKey') {
-        // Pass Uint8Array directly — Web Crypto respects byteOffset/byteLength on typed array views.
-        payloadBuffer = unwrapSymmetricKey(payload);
-    }
-    else {
-        // Binary payload
-        payloadBuffer = payload.asArrayBuffer();
-    }
-    const algoDomString = getSymmetricAlgoDomString(iv, algorithm);
-    // Unwrap symmetric key to get raw bytes
-    const keyBytes = unwrapSymmetricKey(key);
-    const importedKey = await _importKey(keyBytes, algoDomString);
-    const encrypted = await crypto.subtle.encrypt(algoDomString, importedKey, payloadBuffer);
-    if (algoDomString.name === 'AES-GCM') {
-        return {
-            payload: Binary.fromArrayBuffer(encrypted.slice(0, -16)),
-            authTag: Binary.fromArrayBuffer(encrypted.slice(-16)),
-        };
-    }
-    return {
-        payload: Binary.fromArrayBuffer(encrypted),
-    };
-}
-async function _doDecrypt(payload, key, iv, algorithm, authTag) {
-    console.assert(payload != null);
-    console.assert(key != null);
-    console.assert(iv != null);
-    let payloadBuffer = payload.asArrayBuffer();
-    // Concat the the auth tag to the payload for decryption
-    if (authTag) {
-        const authTagBuffer = authTag.asArrayBuffer();
-        const gcmPayload = new Uint8Array(payloadBuffer.byteLength + authTagBuffer.byteLength);
-        gcmPayload.set(new Uint8Array(payloadBuffer), 0);
-        gcmPayload.set(new Uint8Array(authTagBuffer), payloadBuffer.byteLength);
-        payloadBuffer = gcmPayload.buffer;
-    }
-    const algoDomString = getSymmetricAlgoDomString(iv, algorithm);
-    // Unwrap symmetric key to get raw bytes
-    const keyBytes = unwrapSymmetricKey(key);
-    const importedKey = await _importKey(keyBytes, algoDomString);
-    algoDomString.iv = iv.asArrayBuffer();
-    const decrypted = await crypto.subtle
-        .decrypt(algoDomString, importedKey, payloadBuffer)
-        // Catching this error so we can specifically check for OperationError
-        .catch((err) => {
-        if (err.name === 'OperationError') {
-            throw new DecryptError(err);
-        }
-        throw err;
-    });
-    return { payload: Binary.fromArrayBuffer(decrypted) };
-}
-function _importKey(keyBytes, algorithm) {
-    return crypto.subtle.importKey('raw', keyBytes, algorithm, true, ENC_DEC_METHODS);
-}
-/**
- * Get a DOMString representing the algorithm to use for a crypto
- * operation. Defaults to AES-CBC.
- * @param  {String|undefined} algorithm
- * @return {DOMString} Algorithm to use
- */
-function getSymmetricAlgoDomString(iv, algorithm) {
-    let nativeAlgorithm = 'AES-CBC';
-    if (algorithm === Algorithms.AES_256_GCM) {
-        nativeAlgorithm = 'AES-GCM';
-    }
-    return {
-        name: nativeAlgorithm,
-        iv: iv.asArrayBuffer(),
-    };
-}
-/**
- * Create a SHA256 hash. Code refrenced from MDN:
- * https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/digest
- * @param  content  String content
- * @return Hex hash
- */
-/**
- * Create an ArrayBuffer from a hex string.
- * https://developers.google.com/web/updates/2012/06/How-to-convert-ArrayBuffer-to-and-from-String?hl=en
- * @param  hex - Hex string
- */
-export function hex2Ab(hex) {
-    const buffer = new ArrayBuffer(hex.length / 2);
-    const bufferView = new Uint8Array(buffer);
-    for (let i = 0; i < hex.length; i += 2) {
-        bufferView[i / 2] = parseInt(hex.substr(i, 2), 16);
-    }
-    return buffer;
-}
-/**
- * Get the Web Crypto algorithm parameters for a signing algorithm.
- */
-function getSigningAlgorithmParams(algorithm) {
-    switch (algorithm) {
-        case 'RS256':
-            return {
-                importParams: { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' },
-                signParams: 'RSASSA-PKCS1-v1_5',
-            };
-        case 'ES256':
-            return {
-                importParams: { name: 'ECDSA', namedCurve: 'P-256' },
-                signParams: { name: 'ECDSA', hash: 'SHA-256' },
-            };
-        case 'ES384':
-            return {
-                importParams: { name: 'ECDSA', namedCurve: 'P-384' },
-                signParams: { name: 'ECDSA', hash: 'SHA-384' },
-            };
-        case 'ES512':
-            return {
-                importParams: { name: 'ECDSA', namedCurve: 'P-521' },
-                signParams: { name: 'ECDSA', hash: 'SHA-512' },
-            };
-        default:
-            throw new ConfigurationError(`Unsupported signing algorithm: ${algorithm}`);
-    }
-}
-/**
- * Convert IEEE P1363 signature format (used by WebCrypto ECDSA) to DER format (used by JWT).
- * RS256 signatures don't need conversion.
- */
-function ieeeP1363ToDer(signature, algorithm) {
-    if (algorithm === 'RS256') {
-        return signature;
-    }
-    // IEEE P1363: r || s where each is padded to key size
-    const halfLen = signature.length / 2;
-    const r = signature.slice(0, halfLen);
-    const s = signature.slice(halfLen);
-    // Remove leading zeros but keep one if the high bit is set
-    const trimLeadingZeros = (arr) => {
-        let i = 0;
-        while (i < arr.length - 1 && arr[i] === 0)
-            i++;
-        return arr.slice(i);
-    };
-    let rTrimmed = trimLeadingZeros(r);
-    let sTrimmed = trimLeadingZeros(s);
-    // Add leading zero if high bit is set (to keep positive in DER)
-    if (rTrimmed[0] & 0x80) {
-        const padded = new Uint8Array(rTrimmed.length + 1);
-        padded.set(rTrimmed, 1);
-        rTrimmed = padded;
-    }
-    if (sTrimmed[0] & 0x80) {
-        const padded = new Uint8Array(sTrimmed.length + 1);
-        padded.set(sTrimmed, 1);
-        sTrimmed = padded;
-    }
-    // DER SEQUENCE: 0x30 [length] [r INTEGER] [s INTEGER]
-    // INTEGER: 0x02 [length] [value]
-    const rDer = new Uint8Array([0x02, rTrimmed.length, ...rTrimmed]);
-    const sDer = new Uint8Array([0x02, sTrimmed.length, ...sTrimmed]);
-    const seqLen = rDer.length + sDer.length;
-    // DER length: short-form for < 128, long-form (0x81 nn) for 128-255.
-    // ECDSA sequences never exceed 255 bytes for any supported curve.
-    const lenBytes = seqLen < 128 ? new Uint8Array([seqLen]) : new Uint8Array([0x81, seqLen]);
-    const result = new Uint8Array(1 + lenBytes.length + seqLen);
-    result[0] = 0x30;
-    result.set(lenBytes, 1);
-    result.set(rDer, 1 + lenBytes.length);
-    result.set(sDer, 1 + lenBytes.length + rDer.length);
-    return result;
-}
-/**
- * Convert DER signature format (used by JWT) to IEEE P1363 format (used by WebCrypto ECDSA).
- * RS256 signatures don't need conversion.
- */
-function derToIeeeP1363(signature, algorithm) {
-    if (algorithm === 'RS256') {
-        return signature;
-    }
-    // Determine the expected component length based on algorithm
-    let componentLen;
-    switch (algorithm) {
-        case 'ES256':
-            componentLen = 32;
-            break;
-        case 'ES384':
-            componentLen = 48;
-            break;
-        case 'ES512':
-            componentLen = 66;
-            break;
-        default:
-            throw new ConfigurationError(`Unsupported algorithm for DER conversion: ${algorithm}`);
-    }
-    // Parse DER: SEQUENCE { INTEGER r, INTEGER s }
-    if (signature[0] !== 0x30) {
-        throw new ConfigurationError('Invalid DER signature: expected SEQUENCE');
-    }
-    // Skip SEQUENCE tag, then parse DER length (short- or long-form).
-    let offset = 1;
-    if (signature[offset] & 0x80) {
-        // Long-form: low 7 bits = number of subsequent length bytes.
-        const lenBytesCount = signature[offset] & 0x7f;
-        if (lenBytesCount === 0 || lenBytesCount > 4) {
-            throw new ConfigurationError('Invalid DER signature: invalid long-form length');
-        }
-        offset += 1 + lenBytesCount;
-        if (offset > signature.length) {
-            throw new ConfigurationError('Invalid DER signature: length bytes exceed signature length');
-        }
-    }
-    else {
-        // Short-form: single length byte.
-        offset += 1;
-    }
-    // Parse r INTEGER
-    if (signature[offset] !== 0x02) {
-        throw new ConfigurationError('Invalid DER signature: expected INTEGER for r');
-    }
-    const rLen = signature[offset + 1];
-    offset += 2;
-    let r = signature.slice(offset, offset + rLen);
-    offset += rLen;
-    // Parse s INTEGER
-    if (signature[offset] !== 0x02) {
-        throw new ConfigurationError('Invalid DER signature: expected INTEGER for s');
-    }
-    const sLen = signature[offset + 1];
-    offset += 2;
-    let s = signature.slice(offset, offset + sLen);
-    // Remove leading zero padding if present
-    if (r[0] === 0 && r.length > componentLen) {
-        r = r.slice(1);
-    }
-    if (s[0] === 0 && s.length > componentLen) {
-        s = s.slice(1);
-    }
-    // Pad to component length
-    const result = new Uint8Array(componentLen * 2);
-    result.set(r, componentLen - r.length);
-    result.set(s, componentLen * 2 - s.length);
-    return result;
-}
-/**
- * Sign data with an asymmetric private key.
- */
-export async function sign(data, privateKey, algorithm) {
-    const { signParams } = getSigningAlgorithmParams(algorithm);
-    // Unwrap the internal CryptoKey
-    const key = unwrapKey(privateKey);
-    // Sign the data
-    const signature = await crypto.subtle.sign(signParams, key, data);
-    // Convert from IEEE P1363 to DER for EC algorithms
-    return ieeeP1363ToDer(new Uint8Array(signature), algorithm);
-}
-/**
- * Verify signature with an asymmetric public key.
- */
-export async function verify(data, signature, publicKey, algorithm) {
-    const { signParams } = getSigningAlgorithmParams(algorithm);
-    // Unwrap the internal CryptoKey
-    const key = unwrapKey(publicKey);
-    // Convert from DER to IEEE P1363 for EC algorithms
-    const ieeeSignature = derToIeeeP1363(signature, algorithm);
-    // Verify the signature
-    return crypto.subtle.verify(signParams, key, ieeeSignature, data);
-}
-/**
- * Compute hash digest.
- */
-export async function digest(algorithm, data) {
-    // Validate algorithm and map to Web Crypto name
-    const validAlgorithms = ['SHA-256', 'SHA-384', 'SHA-512'];
-    if (!validAlgorithms.includes(algorithm)) {
-        throw new ConfigurationError(`Unsupported hash algorithm: ${algorithm}`);
-    }
-    const hashBuffer = await crypto.subtle.digest(algorithm, data);
-    return new Uint8Array(hashBuffer);
-}
-/**
- * Extract PEM public key from X.509 certificate or return PEM key as-is.
- *
- * @param certOrPem - A PEM-encoded X.509 certificate or public key
- * @param jwaAlgorithm - JWA algorithm hint for certificate parsing (RS256, RS512, ES256, ES384, ES512).
- *                       If not provided for a certificate, will attempt to auto-detect from OIDs.
- */
-export async function extractPublicKeyPem(certOrPem, jwaAlgorithm) {
-    // If it's a certificate, extract the public key
-    if (certOrPem.includes('-----BEGIN CERTIFICATE-----')) {
-        let alg = jwaAlgorithm;
-        if (!alg) {
-            // Auto-detect algorithm from certificate OIDs
-            const certBody = certOrPem.replace(/-----(BEGIN|END) CERTIFICATE-----|\s/g, '');
-            const certBytes = base64Decode(certBody);
-            const hex = hexEncode(certBytes);
-            alg = toJwsAlg(hex);
-        }
-        const cert = await importX509(certOrPem, alg, { extractable: true });
-        return exportSPKI(cert);
-    }
-    // If it's already a PEM public key, return as-is
-    if (certOrPem.includes('-----BEGIN PUBLIC KEY-----')) {
-        return certOrPem;
-    }
-    throw new ConfigurationError('Input must be a PEM-encoded certificate or public key');
-}
-/**
- * Map ECCurve to Web Crypto named curve.
- */
-function curveToNamedCurve(curve) {
-    switch (curve) {
-        case 'P-256':
-            return 'P-256';
-        case 'P-384':
-            return 'P-384';
-        case 'P-521':
-            return 'P-521';
-        default:
-            throw new ConfigurationError(`Unsupported curve: ${curve}`);
-    }
-}
-/**
- * Generate an EC key pair for ECDH key agreement.
- */
-export async function generateECKeyPair(curve = 'P-256') {
-    const namedCurve = curveToNamedCurve(curve);
-    // Generate key pair for ECDH key agreement
-    const keyPair = await crypto.subtle.generateKey({ name: 'ECDH', namedCurve }, true, [
-        'deriveBits',
-    ]);
-    // Map to KeyAlgorithm literal type
-    let algorithm;
-    switch (namedCurve) {
-        case 'P-256':
-            algorithm = 'ec:secp256r1';
-            break;
-        case 'P-384':
-            algorithm = 'ec:secp384r1';
-            break;
-        case 'P-521':
-            algorithm = 'ec:secp521r1';
-            break;
-        default:
-            throw new ConfigurationError(`Unsupported curve: ${namedCurve}`);
-    }
-    return {
-        publicKey: wrapPublicKey(keyPair.publicKey, algorithm),
-        privateKey: wrapPrivateKey(keyPair.privateKey, algorithm),
-    };
-}
-/**
- * Supported EC curves.
- */
-const SUPPORTED_EC_CURVES = ['P-256', 'P-384', 'P-521'];
-/**
- * Decode base64url string and return byte length.
- * Uses the existing base64 decoder which handles both standard and URL-safe encoding.
- */
-function base64urlByteLength(base64url) {
-    // Add padding if needed (base64url omits padding)
-    const padding = (4 - (base64url.length % 4)) % 4;
-    const padded = base64url + '='.repeat(padding);
-    return base64Decode(padded).byteLength;
-}
-/**
- * Extract EC curve from a public key by parsing ASN.1 OIDs.
- * Reuses the existing guessCurveName function that checks for curve OIDs.
- */
-function extractEcCurveFromPublicKey(keyData) {
-    // Convert to hex for OID parsing
-    const hexKey = hexEncode(keyData);
-    // Use existing OID parser (returns 'P-256', 'P-384', or 'P-521')
-    const curveName = guessCurveName(hexKey);
-    return curveName;
-}
-/**
- * Perform ECDH key agreement followed by HKDF key derivation.
- * Returns opaque symmetric key for symmetric encryption.
- */
-export async function deriveKeyFromECDH(privateKey, publicKey, hkdfParams) {
-    // Unwrap the internal CryptoKeys
-    const privateKeyCrypto = unwrapKey(privateKey);
-    const publicKeyCrypto = unwrapKey(publicKey);
-    // Get curve from key metadata
-    const curve = publicKey.curve;
-    if (!curve) {
-        throw new ConfigurationError('EC curve not found on public key');
-    }
-    // Determine bits based on curve
-    const curveBits = {
-        'P-256': 256,
-        'P-384': 384,
-        'P-521': 528, // P-521 derives 528 bits (66 bytes)
-    };
-    const bits = curveBits[curve];
-    // Perform ECDH to get shared secret
-    const sharedSecret = await crypto.subtle.deriveBits({ name: 'ECDH', public: publicKeyCrypto }, privateKeyCrypto, bits);
-    // Import shared secret as HKDF key material
-    const hkdfKey = await crypto.subtle.importKey('raw', sharedSecret, 'HKDF', false, ['deriveKey']);
-    // Derive the final key using HKDF
-    const keyLength = hkdfParams.keyLength ?? 256;
-    const derivedKey = await crypto.subtle.deriveKey({
-        name: 'HKDF',
-        hash: hkdfParams.hash,
-        salt: hkdfParams.salt,
-        info: hkdfParams.info ?? new Uint8Array(0),
-    }, hkdfKey, { name: 'AES-GCM', length: keyLength }, true, ['encrypt', 'decrypt']);
-    // Export the derived key as raw bytes and wrap as SymmetricKey
-    const keyBytes = await crypto.subtle.exportKey('raw', derivedKey);
-    return wrapSymmetricKey(new Uint8Array(keyBytes));
-}
-/**
- * Compute HMAC-SHA256 of data with a symmetric key.
- */
-export async function hmac(data, key) {
-    // Unwrap symmetric key to get raw bytes
-    const keyBytes = unwrapSymmetricKey(key);
-    const cryptoKey = await crypto.subtle.importKey('raw', keyBytes, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
-    const signature = await crypto.subtle.sign('HMAC', cryptoKey, data);
-    return new Uint8Array(signature);
-}
-/**
- * Verify HMAC-SHA256. Standalone utility — not part of CryptoService interface.
- */
-export async function verifyHmac(data, signature, key) {
-    const keyBytes = unwrapSymmetricKey(key);
-    const cryptoKey = await crypto.subtle.importKey('raw', keyBytes, { name: 'HMAC', hash: 'SHA-256' }, false, ['verify']);
-    return crypto.subtle.verify('HMAC', cryptoKey, signature, data);
-}
-/**
- * Extract RSA modulus bit length by importing key and exporting as JWK.
- * Uses Web Crypto's built-in ASN.1 parsing for robustness.
- */
-async function extractRsaModulusBitLength(keyData) {
-    const key = await crypto.subtle.importKey('spki', keyData, { name: 'RSA-OAEP', hash: 'SHA-256' }, true, // extractable
-    ['encrypt']);
-    const jwk = await crypto.subtle.exportKey('jwk', key);
-    if (!jwk.n) {
-        throw new ConfigurationError('Invalid RSA key: missing modulus');
-    }
-    // JWK 'n' is base64url-encoded modulus
-    // Decode and count bytes, multiply by 8 for bits
-    return base64urlByteLength(jwk.n) * 8;
-}
-/**
- * Import and validate a PEM public key, returning algorithm info.
- * Uses JWK export for robust key parameter detection.
- */
-export async function parsePublicKeyPem(pem) {
-    // First extract public key if it's a certificate
-    let publicKeyPem = pem;
-    if (pem.includes('-----BEGIN CERTIFICATE-----')) {
-        publicKeyPem = await extractPublicKeyPem(pem);
-    }
-    if (!publicKeyPem.includes('-----BEGIN PUBLIC KEY-----')) {
-        throw new ConfigurationError('Input must be a PEM-encoded public key or certificate');
-    }
-    const keyData = base64Decode(removePemFormatting(publicKeyPem));
-    // Try RSA first - use JWK export to get modulus size
-    try {
-        const modulusBits = await extractRsaModulusBitLength(keyData);
-        let algorithm;
-        if (modulusBits < MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-            throw new ConfigurationError(`RSA key size ${modulusBits} bits is below the minimum of ${MIN_ASYMMETRIC_KEY_SIZE_BITS} bits`);
-        }
-        else if (modulusBits <= 2048) {
-            algorithm = 'rsa:2048';
-        }
-        else if (modulusBits <= 4096) {
-            algorithm = 'rsa:4096';
-        }
-        else {
-            throw new ConfigurationError(`Unsupported RSA key size: ${modulusBits} bits`);
-        }
-        return { algorithm, pem: publicKeyPem };
-    }
-    catch (e) {
-        // If it's our own ConfigurationError, rethrow
-        if (e instanceof ConfigurationError) {
-            throw e;
-        }
-        // Not an RSA key, try EC next
-    }
-    // Try EC - parse curve from OID
-    try {
-        const detectedCurve = extractEcCurveFromPublicKey(keyData);
-        const curveMap = {
-            'P-256': 'ec:secp256r1',
-            'P-384': 'ec:secp384r1',
-            'P-521': 'ec:secp521r1',
-        };
-        return { algorithm: curveMap[detectedCurve], pem: publicKeyPem };
-    }
-    catch {
-        // Not a valid EC key
-    }
-    throw new ConfigurationError('Unable to determine public key algorithm - unsupported key type');
-}
-/**
- * Convert a JWK (JSON Web Key) to PEM format.
- */
-export async function jwkToPublicKeyPem(jwk) {
-    let key;
-    if (jwk.kty === 'RSA') {
-        // RSA key
-        key = await crypto.subtle.importKey('jwk', jwk, { name: 'RSA-OAEP', hash: 'SHA-256' }, true, [
-            'encrypt',
-        ]);
-    }
-    else if (jwk.kty === 'EC') {
-        // EC key
-        const crv = jwk.crv;
-        if (!crv || !['P-256', 'P-384', 'P-521'].includes(crv)) {
-            throw new ConfigurationError(`Unsupported EC curve: ${crv}`);
-        }
-        key = await crypto.subtle.importKey('jwk', jwk, { name: 'ECDH', namedCurve: crv }, true, []);
-    }
-    else {
-        throw new ConfigurationError(`Unsupported JWK key type: ${jwk.kty}`);
-    }
-    const spkiBuffer = await crypto.subtle.exportKey('spki', key);
-    return formatAsPem(spkiBuffer, 'PUBLIC KEY');
-}
-/**
- * Convert a PEM public key to JWK format.
- * Returns only public key components (no private key data).
- */
-export async function publicKeyPemToJwk(publicKeyPem) {
-    const keyDataBase64 = removePemFormatting(publicKeyPem);
-    const keyBuffer = base64Decode(keyDataBase64);
-    const hex = hexEncode(keyBuffer);
-    // Detect key type using OID
-    const algorithmName = guessAlgorithmName(hex);
-    if (algorithmName === 'ECDH' || algorithmName === 'ECDSA') {
-        // EC key - detect curve from OID
-        const namedCurve = guessCurveName(hex);
-        const key = await crypto.subtle.importKey('spki', keyBuffer, { name: 'ECDSA', namedCurve }, true, ['verify']);
-        const jwk = await crypto.subtle.exportKey('jwk', key);
-        // Return only public key components
-        const { kty, crv, x, y } = jwk;
-        return { kty, crv, x, y };
-    }
-    else {
-        // RSA key
-        const key = await crypto.subtle.importKey('spki', keyBuffer, { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' }, true, ['verify']);
-        const jwk = await crypto.subtle.exportKey('jwk', key);
-        // Return only public key components
-        const { kty, e, n } = jwk;
-        return { kty, e, n };
-    }
-}
-// ============================================================
-// Key Import Functions (PEM → Opaque)
-// ============================================================
-/**
- * Import a PEM public key as an opaque key.
- */
-export async function importPublicKey(pem, options) {
-    const { usage = 'encrypt', extractable = true, algorithmHint } = options;
-    // Detect algorithm from PEM; also normalises certificates → plain SPKI PEM.
-    const keyInfo = await parsePublicKeyPem(pem);
-    const algorithm = algorithmHint || keyInfo.algorithm;
-    // Use keyInfo.pem (normalised SPKI) not the original pem, which may be a certificate.
-    // Passing raw X.509 DER bytes to crypto.subtle.importKey('spki') would throw DataError.
-    const keyData = removePemFormatting(keyInfo.pem);
-    const keyBuffer = base64Decode(keyData);
-    // Determine Web Crypto algorithm and usages based on key type and usage
-    let cryptoAlgorithm;
-    let keyUsages;
-    if (algorithm.startsWith('rsa:')) {
-        if (usage === 'encrypt') {
-            cryptoAlgorithm = rsaOaepSha1();
-            keyUsages = ['encrypt'];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' };
-            keyUsages = ['verify'];
-        }
-        else {
-            throw new ConfigurationError('RSA keys only support usage: encrypt or sign');
-        }
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curve = algorithm.split(':')[1];
-        const namedCurve = curve === 'secp256r1'
-            ? 'P-256'
-            : curve === 'secp384r1'
-                ? 'P-384'
-                : curve === 'secp521r1'
-                    ? 'P-521'
-                    : (() => {
-                        throw new ConfigurationError(`Unsupported EC curve: ${curve}`);
-                    })();
-        if (usage === 'derive') {
-            cryptoAlgorithm = { name: 'ECDH', namedCurve };
-            keyUsages = [];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'ECDSA', namedCurve };
-            keyUsages = ['verify'];
-        }
-        else {
-            throw new ConfigurationError('EC keys only support usage: derive or sign');
-        }
-    }
-    else {
-        throw new ConfigurationError(`Unsupported algorithm: ${algorithm}`);
-    }
-    // Import as CryptoKey
-    const cryptoKey = await crypto.subtle.importKey('spki', keyBuffer, cryptoAlgorithm, extractable, keyUsages);
-    return wrapPublicKey(cryptoKey, algorithm);
-}
-/**
- * Import a PEM private key as an opaque key.
- */
-export async function importPrivateKey(pem, options) {
-    const { usage = 'encrypt', extractable = true, algorithmHint } = options;
-    // Detect algorithm from PEM structure (similar to public key detection)
-    // For now, use algorithmHint if provided, otherwise detect from key structure
-    let algorithm;
-    const keyData = removePemFormatting(pem);
-    const keyBuffer = base64Decode(keyData);
-    if (algorithmHint) {
-        algorithm = algorithmHint;
-    }
-    else {
-        // PKCS#8 PrivateKeyInfo embeds the same AlgorithmIdentifier OIDs as SPKI,
-        // so guessAlgorithmName / guessCurveName work on private key bytes too.
-        const hex = hexEncode(keyBuffer);
-        const algorithmName = guessAlgorithmName(hex); // throws on unrecognised OID
-        if (algorithmName === 'ECDH' || algorithmName === 'ECDSA') {
-            const namedCurve = guessCurveName(hex);
-            const curveMap = {
-                'P-256': 'ec:secp256r1',
-                'P-384': 'ec:secp384r1',
-                'P-521': 'ec:secp521r1',
-            };
-            const mapped = curveMap[namedCurve];
-            if (!mapped)
-                throw new ConfigurationError(`Unsupported EC curve in private key: ${namedCurve}`);
-            algorithm = mapped;
-        }
-        else {
-            // RSA — determine key size by importing and reading modulus length from JWK
-            const tempKey = await crypto.subtle.importKey('pkcs8', keyBuffer, { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' }, true, ['sign']);
-            const jwk = await crypto.subtle.exportKey('jwk', tempKey);
-            if (!jwk.n) {
-                throw new ConfigurationError('Invalid RSA private key: missing modulus');
-            }
-            const modulusBits = base64urlByteLength(jwk.n) * 8;
-            if (modulusBits < MIN_ASYMMETRIC_KEY_SIZE_BITS) {
-                throw new ConfigurationError(`RSA key size ${modulusBits} bits is below the minimum of ${MIN_ASYMMETRIC_KEY_SIZE_BITS} bits`);
-            }
-            algorithm = modulusBits <= 2048 ? 'rsa:2048' : 'rsa:4096';
-        }
-    }
-    // Determine Web Crypto algorithm and usages
-    let cryptoAlgorithm;
-    let keyUsages;
-    if (algorithm.startsWith('rsa:')) {
-        if (usage === 'encrypt') {
-            cryptoAlgorithm = rsaOaepSha1();
-            keyUsages = ['decrypt'];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' };
-            keyUsages = ['sign'];
-        }
-        else {
-            throw new ConfigurationError('RSA keys only support usage: encrypt or sign');
-        }
-    }
-    else if (algorithm.startsWith('ec:')) {
-        const curve = algorithm.split(':')[1];
-        const namedCurve = curve === 'secp256r1'
-            ? 'P-256'
-            : curve === 'secp384r1'
-                ? 'P-384'
-                : curve === 'secp521r1'
-                    ? 'P-521'
-                    : (() => {
-                        throw new ConfigurationError(`Unsupported EC curve: ${curve}`);
-                    })();
-        if (usage === 'derive') {
-            cryptoAlgorithm = { name: 'ECDH', namedCurve };
-            keyUsages = ['deriveBits'];
-        }
-        else if (usage === 'sign') {
-            cryptoAlgorithm = { name: 'ECDSA', namedCurve };
-            keyUsages = ['sign'];
-        }
-        else {
-            throw new ConfigurationError('EC keys only support usage: derive or sign');
-        }
-    }
-    else {
-        throw new ConfigurationError(`Unsupported algorithm: ${algorithm}`);
-    }
-    // Import as CryptoKey
-    const cryptoKey = await crypto.subtle.importKey('pkcs8', keyBuffer, cryptoAlgorithm, extractable, keyUsages);
-    return wrapPrivateKey(cryptoKey, algorithm);
-}
-// ============================================================
-// Key Export Functions (Opaque → PEM/JWK)
-// ============================================================
-/**
- * Export an opaque public key to PEM format.
- */
-export async function exportPublicKeyPem(key) {
-    const cryptoKey = unwrapKey(key);
-    const keyBuffer = await crypto.subtle.exportKey('spki', cryptoKey);
-    return formatAsPem(keyBuffer, 'PUBLIC KEY');
-}
-/**
- * Export an opaque private key to PEM format.
- * ONLY USE FOR TESTING/DEVELOPMENT. Private keys should NOT be exportable in secure environments.
- */
-export async function exportPrivateKeyPem(key) {
-    const cryptoKey = unwrapKey(key);
-    const keyBuffer = await crypto.subtle.exportKey('pkcs8', cryptoKey);
-    return formatAsPem(keyBuffer, 'PRIVATE KEY');
-}
-/**
- * Export an opaque public key to JWK format.
- */
-export async function exportPublicKeyJwk(key) {
-    const cryptoKey = unwrapKey(key);
-    return await crypto.subtle.exportKey('jwk', cryptoKey);
-}
-/**
- * Import raw key bytes as an opaque symmetric key.
- * Used for external keys (e.g., unwrapped from KAS).
- */
-export async function importSymmetricKey(keyBytes) {
-    return wrapSymmetricKey(keyBytes);
-}
 /**
  * Split a symmetric key into N shares using XOR secret sharing.
  * Key bytes are extracted internally for splitting.
  * HSM implementations cannot extract bytes and should throw ConfigurationError.
+ *
+ * NOTE: This wrapper lives in index.ts (instead of core/symmetric.ts) because it
+ * needs DefaultCryptoService for keySplit() randomness. Moving it to core/symmetric
+ * would require importing DefaultCryptoService and create a circular dependency.
  */
 export async function splitSymmetricKey(key, numShares) {
     const keyBytes = unwrapSymmetricKey(key);
     const splits = await keySplit(keyBytes, numShares, DefaultCryptoService);
     return splits.map(wrapSymmetricKey);
 }
-/**
- * Merge symmetric key shares back into the original key using XOR.
- * Key bytes are extracted internally for merging.
- */
-export async function mergeSymmetricKeys(shares) {
-    const splitBytes = shares.map(unwrapSymmetricKey);
-    const merged = keyMerge(splitBytes);
-    return wrapSymmetricKey(merged);
-}
+export { decrypt, decryptWithPrivateKey, deriveKeyFromECDH, digest, encrypt, encryptWithPublicKey, exportPrivateKeyPem, exportPublicKeyJwk, exportPublicKeyPem, extractPublicKeyPem, generateECKeyPair, generateKey, generateKeyPair, generateSigningKeyPair, hex2Ab, hmac, importPrivateKey, importPublicKey, importSymmetricKey, jwkToPublicKeyPem, mergeSymmetricKeys, parsePublicKeyPem, publicKeyPemToJwk, randomBytes, randomBytesAsHex, rsaOaepSha1, rsaPkcs1Sha256, sign, verify, verifyHmac, };
 export const DefaultCryptoService = {
     name,
     method,
@@ -1039,4 +58,4 @@ export const DefaultCryptoService = {
     splitSymmetricKey,
     verify,
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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