@opentdf/sdk 0.9.0-beta.91 → 0.9.0-beta.93

package/dist/types/tdf3/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../tdf3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EACL,KAAK,aAAa,EAClB,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,KAAK,SAAS,EACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,UAAU,EAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EACL,KAAK,OAAO,EACZ,QAAQ,EACR,KAAK,qBAAqB,EAC3B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChG,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,YAAY,EACV,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,OAAO,EACP,aAAa,EACb,aAAa,EACb,aAAa,EACb,UAAU,EACV,UAAU,EACV,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,SAAS,GACV,CAAC;AAEF,OAAO,EACL,YAAY,EACZ,UAAU,EACV,aAAa,EACb,MAAM,EACN,MAAM,EACN,YAAY,EACZ,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,MAAM,EACN,WAAW,EACX,OAAO,EACP,QAAQ,EACR,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,OAAO,GACR,CAAC;AAEF,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,IAAI,EACT,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,OAAO,GACR,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../tdf3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EACL,KAAK,aAAa,EAClB,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,KAAK,SAAS,EACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EACL,KAAK,OAAO,EACZ,QAAQ,EACR,KAAK,qBAAqB,EAC3B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChG,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,YAAY,EACV,aAAa,EACb,YAAY,EACZ,0BAA0B,EAC1B,YAAY,EACZ,OAAO,EACP,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,uBAAuB,EACvB,OAAO,EACP,oBAAoB,EACpB,aAAa,EACb,uBAAuB,EACvB,aAAa,EACb,UAAU,EACV,UAAU,EACV,OAAO,EACP,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,yBAAyB,GAC1B,CAAC;AAEF,OAAO,EACL,YAAY,EACZ,UAAU,EACV,aAAa,EACb,MAAM,EACN,MAAM,EACN,YAAY,EACZ,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,MAAM,EACN,WAAW,EACX,OAAO,EACP,QAAQ,EACR,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,OAAO,GACR,CAAC;AAEF,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEjF,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,IAAI,EACT,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,OAAO,GACR,MAAM,mBAAmB,CAAC"}

package/dist/types/tdf3/src/assertions.d.ts

@@ -1,3 +1,4 @@
+import { type CryptoService, type PrivateKey, type PublicKey, type SymmetricKey } from './crypto/declarations.js';
 export type AssertionKeyAlg = 'ES256' | 'RS256' | 'HS256';
 export type AssertionType = 'handling' | 'other';
 export type Scope = 'tdo' | 'payload';
@@ -27,28 +28,42 @@ export type AssertionPayload = {
 /**
  * Computes the SHA-256 hash of the assertion object, excluding the 'binding' and 'hash' properties.
  *
+ * @param a - The assertion to hash
+ * @param cryptoService - The crypto service to use for hashing
  * @returns the hexadecimal string representation of the hash
  */
-export declare function hash(a: Assertion): Promise<string>;
+export declare function hash(a: Assertion, cryptoService: CryptoService): Promise<string>;
 export declare function isAssertionConfig(obj: unknown): obj is AssertionConfig;
 /**
  * Verifies the signature of the assertion using the provided key.
  *
- * @param {AssertionKey} key - The key used for verification.
- * @returns {Promise<[string, string]>} A promise that resolves to a tuple containing the assertion hash and signature.
- * @throws {Error} If the verification fails.
+ * @param thiz - The assertion to verify.
+ * @param aggregateHash - The aggregate hash for integrity checking.
+ * @param key - The key used for verification.
+ * @param isLegacyTDF - Whether this is a legacy TDF format.
+ * @param cryptoService - The crypto service to use for verification.
+ * @throws {InvalidFileError} If the verification fails.
+ * @throws {IntegrityError} If the integrity check fails.
  */
-export declare function verify(thiz: Assertion, aggregateHash: Uint8Array, key: AssertionKey, isLegacyTDF: boolean): Promise<void>;
+export declare function verify(thiz: Assertion, aggregateHash: Uint8Array, key: AssertionKey, isLegacyTDF: boolean, cryptoService: CryptoService): Promise<void>;
 /**
  * Creates an Assertion object with the specified properties.
+ *
+ * @param aggregateHash - The aggregate hash for the assertion.
+ * @param assertionConfig - The configuration for the assertion.
+ * @param cryptoService - The crypto service to use for signing.
+ * @param targetVersion - The target TDF spec version.
+ * @returns The created assertion.
  */
+export declare function CreateAssertion(aggregateHash: Uint8Array | string, assertionConfig: AssertionConfig, cryptoService: CryptoService, targetVersion?: string): Promise<Assertion>;
 /**
- * Creates an Assertion object with the specified properties.
+ * Key used for signing or verifying assertions.
+ * For asymmetric algorithms (RS256, ES256): PEM string, PrivateKey (for signing), or PublicKey (for verification).
+ * For symmetric algorithms (HS256): Uint8Array or SymmetricKey (opaque).
  */
-export declare function CreateAssertion(aggregateHash: Uint8Array | string, assertionConfig: AssertionConfig, targetVersion?: string): Promise<Assertion>;
 export type AssertionKey = {
     alg: AssertionKeyAlg;
-    key: CryptoKey | Uint8Array;
+    key: string | Uint8Array | PrivateKey | PublicKey | SymmetricKey;
 };
 export type AssertionConfig = {
     id: string;

package/dist/types/tdf3/src/assertions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assertions.d.ts","sourceRoot":"","sources":["../../../../tdf3/src/assertions.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAC1D,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,OAAO,CAAC;AACjD,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AACtC,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,aAAa,CAAC;AACzD,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC;AAGlC,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAGF,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAGF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAOxD;AAiCD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,eAAe,CAmBtE;AAED;;;;;;GAMG;AACH,wBAAsB,MAAM,CAC1B,IAAI,EAAE,SAAS,EACf,aAAa,EAAE,UAAU,EACzB,GAAG,EAAE,YAAY,EACjB,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAED;;GAEG;AACH;;GAEG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,UAAU,GAAG,MAAM,EAClC,eAAe,EAAE,eAAe,EAChC,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CAyCpB;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,SAAS,GAAG,UAAU,CAAC;CAC7B,CAAC;AAIF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,CAAC,EAAE,YAAY,CAAC;CAC3B,CAAC;AAGF,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACpC,CAAC;AAcF;;GAEG;AACH,wBAAgB,gCAAgC,IAAI,eAAe,CA+BlE"}
+{"version":3,"file":"assertions.d.ts","sourceRoot":"","sources":["../../../../tdf3/src/assertions.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAGlC,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAC1D,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,OAAO,CAAC;AACjD,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AACtC,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,aAAa,CAAC;AACzD,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC;AAGlC,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAGF,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAGF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAsB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtF;AA6DD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,eAAe,CAmBtE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,MAAM,CAC1B,IAAI,EAAE,SAAS,EACf,aAAa,EAAE,UAAU,EACzB,GAAG,EAAE,YAAY,EACjB,WAAW,EAAE,OAAO,EACpB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,IAAI,CAAC,CAyDf;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,UAAU,GAAG,MAAM,EAClC,eAAe,EAAE,eAAe,EAChC,aAAa,EAAE,aAAa,EAC5B,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CAyCpB;AAQD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;CAClE,CAAC;AAIF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,CAAC,EAAE,YAAY,CAAC;CAC3B,CAAC;AAGF,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACpC,CAAC;AAcF;;GAEG;AACH,wBAAgB,gCAAgC,IAAI,eAAe,CA+BlE"}

package/dist/types/tdf3/src/ciphers/aes-gcm-cipher.d.ts

@@ -1,6 +1,6 @@
 import { Binary } from '../binary.js';
 import { SymmetricCipher } from './symmetric-cipher-base.js';
-import { type CryptoService, type DecryptResult, type EncryptResult } from '../crypto/declarations.js';
+import { type CryptoService, type DecryptResult, type EncryptResult, type SymmetricKey } from '../crypto/declarations.js';
 export declare class AesGcmCipher extends SymmetricCipher {
     constructor(cryptoService: CryptoService);
     /**
@@ -8,11 +8,11 @@ export declare class AesGcmCipher extends SymmetricCipher {
      * result from the crypto service and construct the payload automatically from
      * it's parts.  There is no need to process the payload.
      */
-    encrypt(payload: Binary, key: Binary, iv: Binary): Promise<EncryptResult>;
+    encrypt(payload: Binary, key: SymmetricKey, iv: Binary): Promise<EncryptResult>;
     /**
      * Encrypts the payload using AES w/ CBC mode
      * @returns
      */
-    decrypt(buffer: ArrayBuffer, key: Binary, iv?: Binary): Promise<DecryptResult>;
+    decrypt(buffer: ArrayBuffer, key: SymmetricKey, iv?: Binary): Promise<DecryptResult>;
 }
 //# sourceMappingURL=aes-gcm-cipher.d.ts.map

package/dist/types/tdf3/src/ciphers/aes-gcm-cipher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aes-gcm-cipher.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/ciphers/aes-gcm-cipher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,2BAA2B,CAAC;AAyBnC,qBAAa,YAAa,SAAQ,eAAe;gBACnC,aAAa,EAAE,aAAa;IAOxC;;;;OAIG;IACY,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAYxF;;;OAGG;IAEY,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAW9F"}
+{"version":3,"file":"aes-gcm-cipher.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/ciphers/aes-gcm-cipher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,2BAA2B,CAAC;AAyBnC,qBAAa,YAAa,SAAQ,eAAe;gBACnC,aAAa,EAAE,aAAa;IAOxC;;;;OAIG;IACY,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAY9F;;;OAGG;IAEY,OAAO,CACpB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,YAAY,EACjB,EAAE,CAAC,EAAE,MAAM,GACV,OAAO,CAAC,aAAa,CAAC;CAW1B"}

package/dist/types/tdf3/src/ciphers/symmetric-cipher-base.d.ts

@@ -1,5 +1,5 @@
 import { type Binary } from '../binary.js';
-import { type CryptoService, type DecryptResult, type EncryptResult } from '../crypto/declarations.js';
+import { type CryptoService, type DecryptResult, type EncryptResult, type SymmetricKey } from '../crypto/declarations.js';
 export declare abstract class SymmetricCipher {
     cryptoService: CryptoService;
     name?: string;
@@ -7,8 +7,8 @@ export declare abstract class SymmetricCipher {
     keyLength?: number;
     constructor(cryptoService: CryptoService);
     generateInitializationVector(): Promise<string>;
-    generateKey(): Promise<string>;
-    abstract encrypt(payload: Binary, key: Binary, iv: Binary): Promise<EncryptResult>;
-    abstract decrypt(payload: Uint8Array, key: Binary, iv?: Binary): Promise<DecryptResult>;
+    generateKey(): Promise<SymmetricKey>;
+    abstract encrypt(payload: Binary, key: SymmetricKey, iv: Binary): Promise<EncryptResult>;
+    abstract decrypt(payload: Uint8Array, key: SymmetricKey, iv?: Binary): Promise<DecryptResult>;
 }
 //# sourceMappingURL=symmetric-cipher-base.d.ts.map

package/dist/types/tdf3/src/ciphers/symmetric-cipher-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"symmetric-cipher-base.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/ciphers/symmetric-cipher-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,2BAA2B,CAAC;AAEnC,8BAAsB,eAAe;IACnC,aAAa,EAAE,aAAa,CAAC;IAE7B,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEP,aAAa,EAAE,aAAa;IAIlC,4BAA4B,IAAI,OAAO,CAAC,MAAM,CAAC;IAO/C,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAOpC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAElF,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CACxF"}
+{"version":3,"file":"symmetric-cipher-base.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/ciphers/symmetric-cipher-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,2BAA2B,CAAC;AAGnC,8BAAsB,eAAe;IACnC,aAAa,EAAE,aAAa,CAAC;IAE7B,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEP,aAAa,EAAE,aAAa;IAIlC,4BAA4B,IAAI,OAAO,CAAC,MAAM,CAAC;IAQ/C,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAO1C,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAExF,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAC9F"}

package/dist/types/tdf3/src/client/builders.d.ts

@@ -1,7 +1,7 @@
 import { AttributeObject, KeyInfo, Policy } from '../models/index.js';
 import { type Metadata } from '../tdf.js';
 import { Binary } from '../binary.js';
-import { PemKeyPair } from '../crypto/declarations.js';
+import { PemKeyPair, type SymmetricKey } from '../crypto/declarations.js';
 import { DecoratedReadableStream } from './DecoratedReadableStream.js';
 import { type Chunker } from '../../../src/seekable.js';
 import { AssertionConfig, AssertionVerificationKeys } from '../assertions.js';
@@ -302,7 +302,7 @@ declare class EncryptParamsBuilder {
      */
     withSystemMetadataAssertion(systemMetadataAssertion: boolean): EncryptParamsBuilder;
 }
-export type DecryptKeyMiddleware = (key: Binary) => Promise<Binary>;
+export type DecryptKeyMiddleware = (key: SymmetricKey) => Promise<SymmetricKey>;
 export type DecryptStreamMiddleware = (stream: DecoratedReadableStream) => Promise<DecoratedReadableStream>;
 export type DecryptSource = {
     type: 'buffer';

package/dist/types/tdf3/src/client/builders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/client/builders.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEhF,eAAO,MAAM,oBAAoB,EAAE,MAAoB,CAAC;AACxD,MAAM,MAAM,KAAK,GAAG;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC;IAC1C,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IACjE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CACpC,MAAM,EAAE,uBAAuB,KAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,UAAU,CAAA;KAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAG7C,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AASF;;;GAGG;AACH,cAAM,oBAAoB;IACxB,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAG9B,MAAM,GAAE,OAAO,CAAC,aAAa,CAQ5B;IAKH,eAAe,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,SAAS;IAItD;;;OAGG;IACH,eAAe,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC;IAStD;;;;OAIG;IACH,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,oBAAoB;IAW9E;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM;IAa9B;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB;IAKtD;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,GAAE,OAAc;IAKzC;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,WAAW;IAUhC;;;OAGG;IACH,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAKxC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,WAAW,EAAE,WAAW;IAI7C;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,oBAAoB;IAKrE,aAAa,IAAI,KAAK,CAAC,YAAY,CAAC;IAIpC;;OAEG;IACH,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,eAAe,CAAC,EAAE;IAwBvD;;;;OAIG;IACH,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,oBAAoB;IAKrE;;;OAGG;IACH,kBAAkB,IAAI,KAAK,CAAC,QAAQ,CAAC;IAIrC;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE;IAQlC;;;;;OAKG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB;IAK1D;;;;;OAKG;IACH,WAAW,IAAI,aAAa,CAAC,UAAU,CAAC;IAIxC;;;;;OAKG;IACH,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC;IAI/C;;;;;;;OAOG;IACH,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC;IAKhD,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC,WAAW,CAAC,QAAQ,EAAE,MAAM;IAQ5B,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAKpD,QAAQ,IAAI,OAAO;IAInB,SAAS;IAIT,UAAU;IAIV,WAAW,IAAI,oBAAoB;IAKnC,UAAU,IAAI,oBAAoB;IAKlC;;;;;;;;OAQG;IACH,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAIzC;;;;;;;;OAQG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM;IAOpC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAK5D;;OAEG;IACH,aAAa,IAAI,OAAO;IAIxB;;OAEG;IACH,aAAa;IAIb;;OAEG;IACH,cAAc,IAAI,oBAAoB;IAItC;;;;;;OAMG;IACH,YAAY,IAAI,OAAO;IAIvB;;;;;OAKG;IACH,YAAY;IAIZ;;;;;;OAMG;IACH,aAAa,IAAI,oBAAoB;IAKrC;;OAEG;IACH,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC;;;;OAIG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM;IAI5B;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAKpD,SAAS,CAAC,OAAO,EAAE,aAAa;;oBA1bpB,MAAM;gBACV,cAAc,CAAC,UAAU,CAAC;eAC3B;YAAE,OAAO,EAAE,UAAU,CAAA;SAAE;wBACd,OAAO;gBACf,KAAK;mBACF,QAAQ;kBACT,aAAa;qBACV,MAAM;mBAER,MAAM;qBACJ,MAAM;wBACH,oBAAoB;oBACxB,SAAS,EAAE;2BACJ,uBAAuB;2BACvB,eAAe,EAAE;kCACV,OAAO;6BACZ,MAAM;+BAGJ,qBAAqB;iBAGnC,OAAO;kBAEN,OAAO;yBAEA,MAAM;;IAoavB;;;;OAIG;IACH,KAAK,IAAI,QAAQ,CAAC,aAAa,CAAC;IAIhC;;;;;OAKG;IACH,cAAc,CAAC,gBAAgB,EAAE,eAAe,EAAE,GAAG,oBAAoB;IAKzE;;;;;;;OAOG;IACH,2BAA2B,CAAC,uBAAuB,EAAE,OAAO,GAAG,oBAAoB;CAIpF;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEpE,MAAM,MAAM,uBAAuB,GAAG,CACpC,MAAM,EAAE,uBAAuB,KAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAC7C,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,cAAM,oBAAoB;IACxB,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAEpB,OAAO,GAAE,OAAO,CAAC,aAAa,CAAM;IAMhD,eAAe,IAAI,aAAa,GAAG,SAAS;IAI5C;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,UAAU;IAIlC;;;OAGG;IACH,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAK1C;;;;OAIG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM;IAOxB;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAKhC;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC;IAIlD;;;OAGG;IACH,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI;IAW1D;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM;IAI9B;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtC;;;;OAIG;IACH,aAAa,CAAC,MAAM,EAAE,IAAI;IAO1B;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI;IAKlC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,WAAW,EAAE,WAAW;IAI7C;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAKrD,kCAAkC;IAClC,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,oBAAoB;IAKxD;;;;;OAKG;IACH,6BAA6B,CAC3B,yBAAyB,EAAE,yBAAyB,GACnD,oBAAoB;IAKvB,SAAS,CAAC,OAAO,EAAE,aAAa;gBA1LxB,aAAa;oBACT,eAAe;wBACX,oBAAoB;2BACjB,uBAAuB;oCACd,yBAAyB;2BAClC,MAAM;6BACJ,OAAO;+BACL,qBAAqB;oCAChB,MAAM,EAAE;;IAsLpC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB;IAKzD;;;;OAIG;IACH,KAAK,IAAI,QAAQ,CAAC,aAAa,CAAC;CAMjC;AAED,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/client/builders.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC,OAAO,EAAE,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEhF,eAAO,MAAM,oBAAoB,EAAE,MAAoB,CAAC;AACxD,MAAM,MAAM,KAAK,GAAG;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC;IAC1C,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IACjE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CACpC,MAAM,EAAE,uBAAuB,KAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,UAAU,CAAA;KAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAG7C,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AASF;;;GAGG;AACH,cAAM,oBAAoB;IACxB,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAG9B,MAAM,GAAE,OAAO,CAAC,aAAa,CAQ5B;IAKH,eAAe,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,SAAS;IAItD;;;OAGG;IACH,eAAe,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC;IAStD;;;;OAIG;IACH,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,oBAAoB;IAW9E;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM;IAa9B;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB;IAKtD;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,GAAE,OAAc;IAKzC;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,WAAW;IAUhC;;;OAGG;IACH,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAKxC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,WAAW,EAAE,WAAW;IAI7C;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,oBAAoB;IAKrE,aAAa,IAAI,KAAK,CAAC,YAAY,CAAC;IAIpC;;OAEG;IACH,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,eAAe,CAAC,EAAE;IAwBvD;;;;OAIG;IACH,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,oBAAoB;IAKrE;;;OAGG;IACH,kBAAkB,IAAI,KAAK,CAAC,QAAQ,CAAC;IAIrC;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE;IAQlC;;;;;OAKG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB;IAK1D;;;;;OAKG;IACH,WAAW,IAAI,aAAa,CAAC,UAAU,CAAC;IAIxC;;;;;OAKG;IACH,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC;IAI/C;;;;;;;OAOG;IACH,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC;IAKhD,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC,WAAW,CAAC,QAAQ,EAAE,MAAM;IAQ5B,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAKpD,QAAQ,IAAI,OAAO;IAInB,SAAS;IAIT,UAAU;IAIV,WAAW,IAAI,oBAAoB;IAKnC,UAAU,IAAI,oBAAoB;IAKlC;;;;;;;;OAQG;IACH,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAIzC;;;;;;;;OAQG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM;IAOpC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAK5D;;OAEG;IACH,aAAa,IAAI,OAAO;IAIxB;;OAEG;IACH,aAAa;IAIb;;OAEG;IACH,cAAc,IAAI,oBAAoB;IAItC;;;;;;OAMG;IACH,YAAY,IAAI,OAAO;IAIvB;;;;;OAKG;IACH,YAAY;IAIZ;;;;;;OAMG;IACH,aAAa,IAAI,oBAAoB;IAKrC;;OAEG;IACH,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC;;;;OAIG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM;IAI5B;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAKpD,SAAS,CAAC,OAAO,EAAE,aAAa;;oBA1bpB,MAAM;gBACV,cAAc,CAAC,UAAU,CAAC;eAC3B;YAAE,OAAO,EAAE,UAAU,CAAA;SAAE;wBACd,OAAO;gBACf,KAAK;mBACF,QAAQ;kBACT,aAAa;qBACV,MAAM;mBAER,MAAM;qBACJ,MAAM;wBACH,oBAAoB;oBACxB,SAAS,EAAE;2BACJ,uBAAuB;2BACvB,eAAe,EAAE;kCACV,OAAO;6BACZ,MAAM;+BAGJ,qBAAqB;iBAGnC,OAAO;kBAEN,OAAO;yBAEA,MAAM;;IAoavB;;;;OAIG;IACH,KAAK,IAAI,QAAQ,CAAC,aAAa,CAAC;IAIhC;;;;;OAKG;IACH,cAAc,CAAC,gBAAgB,EAAE,eAAe,EAAE,GAAG,oBAAoB;IAKzE;;;;;;;OAOG;IACH,2BAA2B,CAAC,uBAAuB,EAAE,OAAO,GAAG,oBAAoB;CAIpF;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAEhF,MAAM,MAAM,uBAAuB,GAAG,CACpC,MAAM,EAAE,uBAAuB,KAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAC7C,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,cAAM,oBAAoB;IACxB,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAEpB,OAAO,GAAE,OAAO,CAAC,aAAa,CAAM;IAMhD,eAAe,IAAI,aAAa,GAAG,SAAS;IAI5C;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,UAAU;IAIlC;;;OAGG;IACH,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAK1C;;;;OAIG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM;IAOxB;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAKhC;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC;IAIlD;;;OAGG;IACH,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI;IAW1D;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM;IAI9B;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtC;;;;OAIG;IACH,aAAa,CAAC,MAAM,EAAE,IAAI;IAO1B;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI;IAKlC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,WAAW,EAAE,WAAW;IAI7C;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAKrD,kCAAkC;IAClC,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,oBAAoB;IAKxD;;;;;OAKG;IACH,6BAA6B,CAC3B,yBAAyB,EAAE,yBAAyB,GACnD,oBAAoB;IAKvB,SAAS,CAAC,OAAO,EAAE,aAAa;gBA1LxB,aAAa;oBACT,eAAe;wBACX,oBAAoB;2BACjB,uBAAuB;oCACd,yBAAyB;2BAClC,MAAM;6BACJ,OAAO;+BACL,qBAAqB;oCAChB,MAAM,EAAE;;IAsLpC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB;IAKzD;;;;OAIG;IACH,KAAK,IAAI,QAAQ,CAAC,aAAa,CAAC;CAMjC;AAED,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/types/tdf3/src/client/index.d.ts

@@ -4,12 +4,13 @@ import { type AuthProvider, HttpRequest, withHeaders } from '../../../src/auth/a
 import { type DecryptParams, DecryptParamsBuilder, type DecryptSource, type EncryptParams, EncryptParamsBuilder } from './builders.js';
 import { DecoratedReadableStream } from './DecoratedReadableStream.js';
 import { type KasPublicKeyInfo, OriginAllowList } from '../../../src/access.js';
-export declare const resolveKasInfo: (pem: string, uri: string, kid?: string) => Promise<KasPublicKeyInfo>;
+import { type KeyPair } from '../crypto/declarations.js';
+export declare const resolveKasInfo: (pem: string, uri: string, cryptoService: CryptoService, kid?: string) => Promise<KasPublicKeyInfo>;
 export interface ClientConfig {
     cryptoService?: CryptoService;
     clientId?: string;
     dpopEnabled?: boolean;
-    dpopKeys?: Promise<CryptoKeyPair>;
+    dpopKeys?: Promise<KeyPair>;
     kasEndpoint: string;
     /**
      * Service to use to look up ABAC. Used during autoconfigure. Defaults to
@@ -45,8 +46,8 @@ export interface ClientConfig {
 export declare function createSessionKeys({ authProvider, cryptoService, dpopKeys, }: {
     authProvider?: AuthProvider;
     cryptoService: CryptoService;
-    dpopKeys?: Promise<CryptoKeyPair>;
-}): Promise<CryptoKeyPair>;
+    dpopKeys?: Promise<KeyPair>;
+}): Promise<KeyPair>;
 type KasKeyInfoCache = [
     ...Parameters<typeof fetchKasPublicKey>,
     keyInfoPromise: ReturnType<typeof fetchKasPublicKey>
@@ -88,7 +89,7 @@ export declare class Client {
     /**
      * Session binding keys. Used for DPoP and signed request bodies.
      */
-    readonly dpopKeys: Promise<CryptoKeyPair>;
+    readonly dpopKeys: Promise<KeyPair>;
     readonly dpopEnabled: boolean;
     readonly clientConfig: ClientConfig;
     /**

package/dist/types/tdf3/src/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/client/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAGL,iBAAiB,EAKlB,MAAM,WAAW,CAAC;AAInB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,KAAK,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAQxF,OAAO,EACL,KAAK,aAAa,EAClB,oBAAoB,EACpB,KAAK,aAAa,EAIlB,KAAK,aAAa,EAClB,oBAAoB,EAGrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAEL,KAAK,gBAAgB,EAErB,eAAe,EAChB,MAAM,wBAAwB,CAAC;AA+BhC,eAAO,MAAM,cAAc,GACzB,KAAK,MAAM,EACX,KAAK,MAAM,EACX,MAAM,MAAM,KACX,OAAO,CAAC,gBAAgB,CAU1B,CAAC;AAsCF,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;IAErC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAQD,wBAAsB,iBAAiB,CAAC,EACtC,YAAY,EAEZ,aAAa,EACb,QAAQ,GACT,EAAE;IACD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CACnC,GAAG,OAAO,CAAC,aAAa,CAAC,CAmBzB;AAgCD,KAAK,eAAe,GAAG;IACrB,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC;IACvC,cAAc,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC;CACrD,EAAE,CAAC;AAEJ,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,EACtB,GAAG,MAAM,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,oCAmBhD;AAED,QAAA,MAAM,oBAAoB,GACxB,OAAO,eAAe,EACtB,GAAG,QAAQ,UAAU,CAAC,OAAO,iBAAiB,CAAC,KAC9C,UAAU,CAAC,OAAO,iBAAiB,CAQrC,CAAC;AAkDF,qBAAa,MAAM;IACjB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC;IAExC;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,EAAE,MAAM,EAAE,CAAC;IAE7C;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAM;IAE/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IAErC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAE1C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC;;;;;;;;;OASG;gBACS,MAAM,EAAE,YAAY;IAuFhC,uHAAuH;IACvH,uBAAuB,CACrB,GAAG,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACjD,UAAU,CAAC,OAAO,oBAAoB,CAAC;IAI1C;;;;;;;;;;;;;;OAcG;IACG,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA8PpE;;;;;;;;;;;OAWG;IACG,OAAO,CAAC,EACZ,MAAM,EACN,SAAS,EACT,aAA0C,EAC1C,gBAAoE,EACpE,yBAAyB,EACzB,kBAAkB,EAClB,gBAAoB,EACpB,oBAAoB,EACpB,yBAA8B,GAC/B,EAAE,aAAa,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAyCnD;;;;;;;;;OASG;IACG,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,EAAE,aAAa,CAAA;KAAE;IASjD,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,EAAE,aAAa,CAAA;KAAE;CAI1D;AAED,YAAY,EAAE,YAAY,EAAE,CAAC;AAE7B,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/client/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAGL,iBAAiB,EAKlB,MAAM,WAAW,CAAC;AAInB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,KAAK,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAGxF,OAAO,EACL,KAAK,aAAa,EAClB,oBAAoB,EACpB,KAAK,aAAa,EAIlB,KAAK,aAAa,EAClB,oBAAoB,EAGrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAEL,KAAK,gBAAgB,EACrB,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,KAAK,OAAO,EAAqB,MAAM,2BAA2B,CAAC;AA2B5E,eAAO,MAAM,cAAc,GACzB,KAAK,MAAM,EACX,KAAK,MAAM,EACX,eAAe,aAAa,EAC5B,MAAM,MAAM,KACX,OAAO,CAAC,gBAAgB,CAQ1B,CAAC;AAsCF,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;IAErC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAQD,wBAAsB,iBAAiB,CAAC,EACtC,YAAY,EACZ,aAAa,EACb,QAAQ,GACT,EAAE;IACD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CAenB;AAgCD,KAAK,eAAe,GAAG;IACrB,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC;IACvC,cAAc,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC;CACrD,EAAE,CAAC;AAEJ,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,EACtB,GAAG,MAAM,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,oCAmBhD;AAED,QAAA,MAAM,oBAAoB,GACxB,OAAO,eAAe,EACtB,GAAG,QAAQ,UAAU,CAAC,OAAO,iBAAiB,CAAC,KAC9C,UAAU,CAAC,OAAO,iBAAiB,CAQrC,CAAC;AAgDF,qBAAa,MAAM;IACjB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC;IAExC;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,EAAE,MAAM,EAAE,CAAC;IAE7C;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAM;IAE/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IAErC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAE1C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC;;;;;;;;;OASG;gBACS,MAAM,EAAE,YAAY;IA6FhC,uHAAuH;IACvH,uBAAuB,CACrB,GAAG,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACjD,UAAU,CAAC,OAAO,oBAAoB,CAAC;IAI1C;;;;;;;;;;;;;;OAcG;IACG,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAwQpE;;;;;;;;;;;OAWG;IACG,OAAO,CAAC,EACZ,MAAM,EACN,SAAS,EACT,aAAgD,EAChD,gBAAoE,EACpE,yBAAyB,EACzB,kBAAkB,EAClB,gBAAoB,EACpB,oBAAoB,EACpB,yBAA8B,GAC/B,EAAE,aAAa,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAyCnD;;;;;;;;;OASG;IACG,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,EAAE,aAAa,CAAA;KAAE;IASjD,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,EAAE,aAAa,CAAA;KAAE;CAI1D;AAED,YAAY,EAAE,YAAY,EAAE,CAAC;AAE7B,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC"}

package/dist/types/tdf3/src/crypto/crypto-utils.d.ts

@@ -1,4 +1,4 @@
-import { type AnyKeyPair, type PemKeyPair } from './declarations.js';
+import { type PemKeyPair } from './declarations.js';
 /**
  * Validates a specified key size
  * @param size in bits requested
@@ -28,7 +28,17 @@ export declare const formatAsPem: (bytes: ArrayBuffer, label: string) => string;
  * @return String with formatting removed
  */
 export declare const removePemFormatting: (input: string) => string;
-export declare const isPemKeyPair: (i: AnyKeyPair) => i is PemKeyPair;
-export declare const isCryptoKeyPair: (i: AnyKeyPair) => i is CryptoKeyPair;
-export declare const toCryptoKeyPair: (input: AnyKeyPair) => Promise<CryptoKeyPair>;
+/**
+ * Type guard to check if a key pair is a PemKeyPair.
+ */
+export declare const isPemKeyPair: (i: PemKeyPair | CryptoKeyPair) => i is PemKeyPair;
+/**
+ * Type guard to check if a key pair is a CryptoKeyPair.
+ */
+export declare const isCryptoKeyPair: (i: PemKeyPair | CryptoKeyPair) => i is CryptoKeyPair;
+/**
+ * Convert a PemKeyPair to CryptoKeyPair for internal use.
+ * This is needed when interfacing with APIs that still require CryptoKey objects.
+ */
+export declare const toCryptoKeyPair: (input: PemKeyPair) => Promise<CryptoKeyPair>;
 //# sourceMappingURL=crypto-utils.d.ts.map

package/dist/types/tdf3/src/crypto/crypto-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-utils.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/crypto/crypto-utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGrE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAI,MAAM,MAAM,GAAG,SAAS,EAAE,UAAU,MAAM,KAAG,OAWrF,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,WAAW,EAAE,OAAO,MAAM,KAAG,MAc/D,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,MAWnD,CAAC;AAKF,eAAO,MAAM,YAAY,GAAI,GAAG,UAAU,KAAG,CAAC,IAAI,UAcjD,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,GAAG,UAAU,KAAG,CAAC,IAAI,aASpD,CAAC;AAEF,eAAO,MAAM,eAAe,GAAU,OAAO,UAAU,KAAG,OAAO,CAAC,aAAa,CAgB9E,CAAC"}
+{"version":3,"file":"crypto-utils.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/crypto/crypto-utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAI,MAAM,MAAM,GAAG,SAAS,EAAE,UAAU,MAAM,KAAG,OAWrF,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,WAAW,EAAE,OAAO,MAAM,KAAG,MAc/D,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,MAWnD,CAAC;AAKF;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,GAAG,UAAU,GAAG,aAAa,KAAG,CAAC,IAAI,UAcjE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,GAAI,GAAG,UAAU,GAAG,aAAa,KAAG,CAAC,IAAI,aASpE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAU,OAAO,UAAU,KAAG,OAAO,CAAC,aAAa,CAa9E,CAAC"}

package/dist/types/tdf3/src/crypto/declarations.d.ts

@@ -11,50 +11,315 @@ export type DecryptResult = {
 };
 /**
  * PEM formatted keypair.
+ * Used for import/export compatibility. Internal code should use KeyPair (opaque keys).
  */
 export type PemKeyPair = {
     publicKey: string;
     privateKey: string;
 };
+/**
+ * Key algorithm identifier combining key type and parameters.
+ */
+export type KeyAlgorithm = 'rsa:2048' | 'rsa:4096' | 'ec:secp256r1' | 'ec:secp384r1' | 'ec:secp521r1';
+/**
+ * Options for key generation and import.
+ */
+export type KeyOptions = {
+    /**
+     * Key usage: 'encrypt' for RSA-OAEP, 'sign' for RSA/ECDSA signing, 'derive' for ECDH.
+     * If not specified, defaults based on the generation method or key type.
+     */
+    usage?: 'encrypt' | 'sign' | 'derive';
+    /**
+     * Whether keys can be exported. Defaults to true.
+     * HSM-backed implementations may force false for private keys.
+     */
+    extractable?: boolean;
+    /**
+     * Optional algorithm hint for import validation.
+     * Helps disambiguate or validate imported keys.
+     */
+    algorithmHint?: KeyAlgorithm;
+};
+/**
+ * Opaque public key - internal representation hidden.
+ * Code outside CryptoService treats this as a token.
+ *
+ * Includes metadata for algorithm selection without needing CryptoService calls.
+ */
+export type PublicKey = {
+    readonly _brand: 'PublicKey';
+    /** Algorithm identifier (e.g., 'rsa:2048', 'ec:secp256r1') */
+    readonly algorithm: KeyAlgorithm;
+    /** RSA modulus bit length (only for RSA keys) */
+    readonly modulusBits?: number;
+    /** EC curve name (only for EC keys) */
+    readonly curve?: ECCurve;
+};
+/**
+ * Opaque private key - internal representation hidden.
+ * Code outside CryptoService treats this as a token.
+ *
+ * Includes metadata for algorithm selection without needing CryptoService calls.
+ */
+export type PrivateKey = {
+    readonly _brand: 'PrivateKey';
+    /** Algorithm identifier (e.g., 'rsa:2048', 'ec:secp256r1') */
+    readonly algorithm: KeyAlgorithm;
+    /** RSA modulus bit length (only for RSA keys) */
+    readonly modulusBits?: number;
+    /** EC curve name (only for EC keys) */
+    readonly curve?: ECCurve;
+};
+/**
+ * Opaque key pair with matching algorithms.
+ */
+export type KeyPair = {
+    readonly publicKey: PublicKey;
+    readonly privateKey: PrivateKey;
+};
 /**
  * The minimum acceptable asymetric key size, currently 2^11.
  */
 export declare const MIN_ASYMMETRIC_KEY_SIZE_BITS = 2048;
-export type AnyKeyPair = PemKeyPair | CryptoKeyPair;
+/**
+ * Opaque symmetric key - internal representation hidden.
+ * Code outside CryptoService treats this as a token.
+ * Used for AES encryption/decryption.
+ *
+ * Includes metadata for key length without needing CryptoService calls.
+ */
+export type SymmetricKey = {
+    readonly _brand: 'SymmetricKey';
+    /** Key length in bits (e.g., 256 for AES-256) */
+    readonly length: number;
+};
+/**
+ * Elliptic curves supported for ECDH/ECDSA operations.
+ */
+export type ECCurve = 'P-256' | 'P-384' | 'P-521';
+/**
+ * Asymmetric signing algorithms (require PEM keys).
+ */
+export type AsymmetricSigningAlgorithm = 'RS256' | 'ES256' | 'ES384' | 'ES512';
+/**
+ * Symmetric signing algorithm (requires raw key bytes).
+ */
+export type SymmetricSigningAlgorithm = 'HS256';
+/**
+ * All supported signing algorithms.
+ */
+export type SigningAlgorithm = AsymmetricSigningAlgorithm | SymmetricSigningAlgorithm;
+/**
+ * Supported hash algorithms.
+ */
+export type HashAlgorithm = 'SHA-256' | 'SHA-384' | 'SHA-512';
+/**
+ * Parameters for HKDF key derivation.
+ */
+export type HkdfParams = {
+    /** Hash algorithm to use for HKDF. */
+    hash: HashAlgorithm;
+    /** Salt for HKDF (can be empty Uint8Array). */
+    salt: Uint8Array;
+    /** Optional info/context for HKDF. */
+    info?: Uint8Array;
+    /** Desired key length in bits. Defaults to 256. */
+    keyLength?: number;
+};
+/**
+ * Public key information returned from parsePublicKeyPem.
+ */
+export type PublicKeyInfo = {
+    /** Detected algorithm of the key. */
+    algorithm: 'rsa:2048' | 'rsa:4096' | 'ec:secp256r1' | 'ec:secp384r1' | 'ec:secp521r1';
+    /** Normalized PEM string. */
+    pem: string;
+};
 export type CryptoService = {
     /** Track which crypto implementation we are using */
     name: string;
     /** Default algorithm identifier. */
     method: AlgorithmUrn;
-    /** Convert or narrow from AnyKeyPair to PemKeyPair */
-    cryptoToPemPair: (keys: AnyKeyPair) => Promise<PemKeyPair>;
     /**
      * Try to decrypt content with the default or handed algorithm. Throws on
      * most failure, if auth tagging is implemented for example.
      */
-    decrypt: (payload: Binary, key: Binary, iv: Binary, algorithm?: AlgorithmUrn, authTag?: Binary) => Promise<DecryptResult>;
-    decryptWithPrivateKey: (encryptedPayload: Binary, privateKey: string) => Promise<Binary>;
+    decrypt: (payload: Binary, key: SymmetricKey, iv: Binary, algorithm?: AlgorithmUrn, authTag?: Binary) => Promise<DecryptResult>;
+    decryptWithPrivateKey: (encryptedPayload: Binary, privateKey: PrivateKey) => Promise<Binary>;
     /**
      * Encrypt content with the default or handed algorithm.
+     * Accepts Binary or SymmetricKey as payload (for key wrapping with symmetric keys).
      */
-    encrypt: (payload: Binary, key: Binary, iv: Binary, algorithm?: AlgorithmUrn) => Promise<EncryptResult>;
-    encryptWithPublicKey: (payload: Binary, publicKey: string) => Promise<Binary>;
-    /** Get length random bytes as a hex-encoded string. */
-    generateInitializationVector: (length?: number) => Promise<string>;
-    /** Get length random bytes as a hex-encoded string. */
-    generateKey: (length?: number) => Promise<string>;
+    encrypt: (payload: Binary | SymmetricKey, key: SymmetricKey, iv: Binary, algorithm?: AlgorithmUrn) => Promise<EncryptResult>;
     /**
-     * Generate an RSA key pair
+     * Encrypt with asymmetric public key (RSA-OAEP).
+     * Accepts Binary or SymmetricKey for key wrapping.
+     */
+    encryptWithPublicKey: (payload: Binary | SymmetricKey, publicKey: PublicKey) => Promise<Binary>;
+    /** Generate symmetric AES key (opaque, never hex string). */
+    generateKey: (length?: number) => Promise<SymmetricKey>;
+    /**
+     * Generate an RSA key pair for encryption/decryption.
      * @param size in bits, defaults to a reasonable size for the default method
+     * @returns Opaque key pair
      */
-    generateKeyPair: (size?: number) => Promise<AnyKeyPair>;
-    generateSigningKeyPair: () => Promise<AnyKeyPair>;
+    generateKeyPair: (size?: number) => Promise<KeyPair>;
     /**
-     * Create an HMAC SHA256 hash
+     * Generate an RSA key pair for signing/verification.
+     * @returns Opaque key pair
      */
-    hmac: (key: string, content: string) => Promise<string>;
+    generateSigningKeyPair: () => Promise<KeyPair>;
     randomBytes: (byteLength: number) => Promise<Uint8Array>;
-    /** Compute the hex-encoded SHA hash of a UTF-16 encoded string. */
-    sha256: (content: string) => Promise<string>;
+    /**
+     * Sign data with an asymmetric private key.
+     * @param data - Data to sign
+     * @param privateKey - Opaque private key
+     * @param algorithm - Signing algorithm (RS256, ES256, ES384, ES512)
+     */
+    sign: (data: Uint8Array, privateKey: PrivateKey, algorithm: AsymmetricSigningAlgorithm) => Promise<Uint8Array>;
+    /**
+     * Verify signature with an asymmetric public key.
+     * @param data - Original data that was signed
+     * @param signature - Signature to verify
+     * @param publicKey - Opaque public key
+     * @param algorithm - Must match algorithm used for signing
+     */
+    verify: (data: Uint8Array, signature: Uint8Array, publicKey: PublicKey, algorithm: AsymmetricSigningAlgorithm) => Promise<boolean>;
+    /**
+     * Compute HMAC-SHA256 of data with a symmetric key.
+     * @param data - Data to authenticate
+     * @param key - Opaque symmetric key
+     * @returns Raw HMAC bytes
+     */
+    hmac: (data: Uint8Array, key: SymmetricKey) => Promise<Uint8Array>;
+    /**
+     * Verify HMAC-SHA256.
+     * @param data - Original data that was authenticated
+     * @param signature - HMAC to verify
+     * @param key - Opaque symmetric key
+     */
+    verifyHmac: (data: Uint8Array, signature: Uint8Array, key: SymmetricKey) => Promise<boolean>;
+    /**
+     * Compute hash digest.
+     * @param algorithm - Hash algorithm to use (SHA-256, SHA-384, SHA-512)
+     * @param data - Data to hash
+     */
+    digest: (algorithm: HashAlgorithm, data: Uint8Array) => Promise<Uint8Array>;
+    /**
+     * Generate an EC key pair for ECDH key agreement.
+     * @param curve - Elliptic curve to use (defaults to P-256)
+     * @throws ConfigurationError if EC operations not supported
+     */
+    generateECKeyPair: (curve?: ECCurve) => Promise<KeyPair>;
+    /**
+     * Perform ECDH key agreement followed by HKDF key derivation.
+     * Returns opaque symmetric key suitable for symmetric encryption.
+     *
+     * @param privateKey - Opaque EC private key
+     * @param publicKey - Opaque EC public key of other party
+     * @param hkdfParams - Parameters for HKDF derivation
+     * @returns Opaque symmetric key
+     * @throws ConfigurationError if EC operations not supported
+     */
+    deriveKeyFromECDH: (privateKey: PrivateKey, publicKey: PublicKey, hkdfParams: HkdfParams) => Promise<SymmetricKey>;
+    /**
+     * Import a PEM public key as an opaque key.
+     * @param pem - PEM-encoded public key
+     * @param options - Import options (usage required for RSA keys to disambiguate encrypt vs sign)
+     * @returns Opaque public key with metadata
+     */
+    importPublicKey: (pem: string, options: KeyOptions) => Promise<PublicKey>;
+    /**
+     * Import a PEM private key as an opaque key.
+     * Optional - intended for use in tests or by downstream integrators who need to bring
+     * their own PEM key material. Main SDK code should use opaque PrivateKey objects directly.
+     * @param pem - PEM-encoded private key
+     * @param options - Import options (usage required for RSA keys to disambiguate encrypt vs sign)
+     * @returns Opaque private key with metadata
+     */
+    importPrivateKey?: (pem: string, options: KeyOptions) => Promise<PrivateKey>;
+    /**
+     * Parse and validate a PEM public key, returning algorithm info.
+     *
+     * @param pem - PEM-encoded public key or X.509 certificate
+     * @returns Validated PEM and detected algorithm
+     * @throws ConfigurationError if key format invalid or algorithm not supported
+     */
+    parsePublicKeyPem: (pem: string) => Promise<PublicKeyInfo>;
+    /**
+     * Export an opaque public key to PEM format.
+     * @param key - Opaque public key
+     * @returns PEM-encoded public key (SPKI format)
+     */
+    exportPublicKeyPem: (key: PublicKey) => Promise<string>;
+    /**
+     * OPTIONAL -- ONLY USE FOR TESTING/DEVELOPMENT. Private keys should NOT be exportable in secure environments.
+     * Export an opaque private key to PEM format.
+     * @param key - Opaque private key
+     * @returns PEM-encoded private key (PKCS8 format)
+     */
+    exportPrivateKeyPem?: (key: PrivateKey) => Promise<string>;
+    /**
+     * Export an opaque public key to JWK format.
+     * @param key - Opaque public key
+     * @returns JWK representation
+     */
+    exportPublicKeyJwk: (key: PublicKey) => Promise<JsonWebKey>;
+    /**
+     * Extract PEM public key from X.509 certificate or return PEM key as-is.
+     *
+     * Used to normalize KAS public keys which may be provided as either:
+     * - X.509 certificates (-----BEGIN CERTIFICATE-----)
+     * - Raw PEM public keys (-----BEGIN PUBLIC KEY-----)
+     *
+     * For certificates, jwaAlgorithm must be provided to correctly parse the key
+     * (e.g., 'RS256', 'RS512', 'ES256', 'ES384', 'ES512'). For raw PEM keys,
+     * the algorithm parameter is ignored.
+     *
+     * @param certOrPem - PEM-encoded public key or X.509 certificate
+     * @param jwaAlgorithm - JWA algorithm for certificate parsing (required for certificates)
+     * @returns PEM-encoded public key (SPKI format)
+     * @throws Error if input is not valid PEM or certificate
+     */
+    extractPublicKeyPem: (certOrPem: string, jwaAlgorithm?: string) => Promise<string>;
+    /**
+     * Convert a JWK (JSON Web Key) public key to PEM format.
+     * Supports both RSA and EC keys.
+     *
+     * @param jwk - JSON Web Key object
+     * @returns PEM-encoded public key
+     * @throws ConfigurationError if JWK format invalid
+     */
+    jwkToPublicKeyPem: (jwk: JsonWebKey) => Promise<string>;
+    /**
+     * Import raw key bytes as an opaque symmetric key.
+     * Used for external keys (e.g., unwrapped from KAS).
+     * @param keyBytes - Raw key bytes
+     * @returns Opaque symmetric key
+     */
+    importSymmetricKey: (keyBytes: Uint8Array) => Promise<SymmetricKey>;
+    /**
+     * Split a symmetric key into N shares using XOR secret sharing.
+     *
+     * DefaultCryptoService: Uses keySplit() utility (extracts bytes internally)
+     * HSM implementations: Must use native splitting OR throw ConfigurationError
+     *
+     * @param key - Symmetric key to split
+     * @param numShares - Number of shares to create
+     * @returns Array of opaque key shares
+     * @throws ConfigurationError if not supported by the implementation
+     *
+     * Note: Multi-KAS may not be available in all secure environments (single KAS only)
+     */
+    splitSymmetricKey: (key: SymmetricKey, numShares: number) => Promise<SymmetricKey[]>;
+    /**
+     * Merge symmetric key shares back into the original key using XOR.
+     *
+     * @param shares - Array of key shares (from splitSymmetricKey)
+     * @returns Merged symmetric key
+     * @throws ConfigurationError if not supported by the implementation
+     */
+    mergeSymmetricKeys: (shares: SymmetricKey[]) => Promise<SymmetricKey>;
 };
 //# sourceMappingURL=declarations.d.ts.map

package/dist/types/tdf3/src/crypto/declarations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"declarations.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/crypto/declarations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG;IAC1B,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;AAEpD,MAAM,MAAM,aAAa,GAAG;IAC1B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IAEb,oCAAoC;IACpC,MAAM,EAAE,YAAY,CAAC;IAErB,sDAAsD;IACtD,eAAe,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3D;;;OAGG;IACH,OAAO,EAAE,CACP,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,SAAS,CAAC,EAAE,YAAY,EACxB,OAAO,CAAC,EAAE,MAAM,KACb,OAAO,CAAC,aAAa,CAAC,CAAC;IAE5B,qBAAqB,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzF;;OAEG;IACH,OAAO,EAAE,CACP,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,SAAS,CAAC,EAAE,YAAY,KACrB,OAAO,CAAC,aAAa,CAAC,CAAC;IAE5B,oBAAoB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9E,uDAAuD;IACvD,4BAA4B,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnE,uDAAuD;IACvD,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAElD;;;OAGG;IACH,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAExD,sBAAsB,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IAElD;;OAEG;IACH,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzD,mEAAmE;IACnE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C,CAAC"}
+{"version":3,"file":"declarations.d.ts","sourceRoot":"","sources":["../../../../../tdf3/src/crypto/declarations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG;IAC1B,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,UAAU,GACV,UAAU,GACV,cAAc,GACd,cAAc,GACd,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAEtC;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAElD;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAEhD;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,0BAA0B,GAAG,yBAAyB,CAAC;AAEtF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,sCAAsC;IACtC,IAAI,EAAE,aAAa,CAAC;IACpB,+CAA+C;IAC/C,IAAI,EAAE,UAAU,CAAC;IACjB,sCAAsC;IACtC,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,qCAAqC;IACrC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,cAAc,GAAG,cAAc,GAAG,cAAc,CAAC;IACtF,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IAEb,oCAAoC;IACpC,MAAM,EAAE,YAAY,CAAC;IAErB;;;OAGG;IACH,OAAO,EAAE,CACP,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,YAAY,EACjB,EAAE,EAAE,MAAM,EACV,SAAS,CAAC,EAAE,YAAY,EACxB,OAAO,CAAC,EAAE,MAAM,KACb,OAAO,CAAC,aAAa,CAAC,CAAC;IAE5B,qBAAqB,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7F;;;OAGG;IACH,OAAO,EAAE,CACP,OAAO,EAAE,MAAM,GAAG,YAAY,EAC9B,GAAG,EAAE,YAAY,EACjB,EAAE,EAAE,MAAM,EACV,SAAS,CAAC,EAAE,YAAY,KACrB,OAAO,CAAC,aAAa,CAAC,CAAC;IAE5B;;;OAGG;IACH,oBAAoB,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,SAAS,EAAE,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhG,6DAA6D;IAC7D,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAExD;;;;OAIG;IACH,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAErD;;;OAGG;IACH,sBAAsB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAE/C,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzD;;;;;OAKG;IACH,IAAI,EAAE,CACJ,IAAI,EAAE,UAAU,EAChB,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,0BAA0B,KAClC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzB;;;;;;OAMG;IACH,MAAM,EAAE,CACN,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,0BAA0B,KAClC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB;;;;;OAKG;IACH,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnE;;;;;OAKG;IACH,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7F;;;;OAIG;IACH,MAAM,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAE5E;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzD;;;;;;;;;OASG;IACH,iBAAiB,EAAE,CACjB,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,KACnB,OAAO,CAAC,YAAY,CAAC,CAAC;IAI3B;;;;;OAKG;IACH,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1E;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAE7E;;;;;;OAMG;IACH,iBAAiB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAI3D;;;;OAIG;IACH,kBAAkB,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D;;;;OAIG;IACH,kBAAkB,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAE5D;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnF;;;;;;;OAOG;IACH,iBAAiB,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAIxD;;;;;OAKG;IACH,kBAAkB,EAAE,CAAC,QAAQ,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAEpE;;;;;;;;;;;;OAYG;IACH,iBAAiB,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAErF;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CACvE,CAAC"}