@oyinlola141/lattice-crypto 0.1.0

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.password.js

@@ -0,0 +1,70 @@
+import { randomBytes, pbkdf2, scrypt, timingSafeEqual } from "node:crypto";
+import { toBytes, toBase64Url, fromBase64Url } from "./nodeCryptoProvider.helper.js";
+export async function hashPassword(password, options) {
+    const algorithm = options?.algorithm ?? "scrypt";
+    const salt = randomBytes(16);
+    let hash;
+    switch (algorithm) {
+        case "scrypt": {
+            const passwordBytes = toBytes(password);
+            hash = await new Promise((resolve, reject) => {
+                scrypt(passwordBytes, salt, 32, {
+                    N: options?.memoryCost ?? 16384,
+                    r: 8,
+                    p: options?.parallelism ?? 1,
+                }, (err, derived) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve(new Uint8Array(derived));
+                    }
+                });
+            });
+            break;
+        }
+        case "argon2id": {
+            throw new TypeError("Argon2id requires the argon2 package.");
+        }
+        case "pbkdf2": {
+            const passwordBytes = toBytes(password);
+            hash = await new Promise((resolve, reject) => {
+                pbkdf2(passwordBytes, salt, options?.timeCost ?? 100_000, 32, "sha256", (err, derived) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve(new Uint8Array(derived));
+                    }
+                });
+            });
+            break;
+        }
+        default:
+            throw new TypeError(`Unsupported password algorithm: ${algorithm}.`);
+    }
+    const saltB64 = toBase64Url(salt);
+    const hashB64 = toBase64Url(hash);
+    return `v1$${algorithm}$${saltB64}$${hashB64}`;
+}
+export async function verifyPassword(password, hash) {
+    const parts = hash.split("$");
+    if (parts.length !== 4 || parts[0] !== "v1") {
+        return false;
+    }
+    const algorithm = parts[1];
+    const saltB64 = parts[2];
+    const expectedHashB64 = parts[3];
+    const salt = fromBase64Url(saltB64);
+    const expectedHash = fromBase64Url(expectedHashB64);
+    const computed = await hashPassword(password, {
+        algorithm: algorithm,
+    });
+    const computedParts = computed.split("$");
+    if (computedParts.length !== 4) {
+        return false;
+    }
+    const computedHash = fromBase64Url(computedParts[3]);
+    return timingSafeEqual(expectedHash, computedHash);
+}
+//# sourceMappingURL=nodeCryptoProvider.password.js.map

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.password.js","sourceRoot":"","sources":["../../../src/node/nodeCryptoProvider/nodeCryptoProvider.password.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAqB,EACrB,OAKC;IAED,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAE7B,IAAI,IAAgB,CAAC;IAErB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CACJ,aAAa,EACb,IAAI,EACJ,EAAE,EACF;oBACE,CAAC,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;oBAC/B,CAAC,EAAE,CAAC;oBACJ,CAAC,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC;iBAC7B,EACD,CAAC,GAAiB,EAAE,OAAe,EAAE,EAAE;oBACrC,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QAED,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC;QAED,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CACJ,aAAa,EACb,IAAI,EACJ,OAAO,EAAE,QAAQ,IAAI,OAAO,EAC5B,EAAE,EACF,QAAQ,EACR,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACf,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QAED;YACE,MAAM,IAAI,SAAS,CACjB,mCAAmC,SAAS,GAAG,CAChD,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAElC,OAAO,MAAM,SAAS,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAqB,EACrB,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAC1B,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAElC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE;QAC5C,SAAS,EAAE,SAAmC;KAC/C,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC;IAEtD,OAAO,eAAe,CACpB,YAAY,EACZ,YAAY,CACb,CAAC;AACJ,CAAC"}

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.random.d.ts

@@ -0,0 +1,4 @@
+export declare function randomBytesImpl(length: number): Promise<Uint8Array>;
+export declare function randomIntImpl(min: number, max: number): Promise<number>;
+export declare function randomUUIDImpl(): Promise<string>;
+//# sourceMappingURL=nodeCryptoProvider.random.d.ts.map

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.random.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.random.d.ts","sourceRoot":"","sources":["../../../src/node/nodeCryptoProvider/nodeCryptoProvider.random.ts"],"names":[],"mappings":"AAEA,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAQzE;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAyB7E;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAWtD"}

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.random.js

@@ -0,0 +1,38 @@
+import { randomBytes } from "node:crypto";
+export async function randomBytesImpl(length) {
+    if (!Number.isInteger(length) || length <= 0) {
+        throw new TypeError("randomBytes length must be a positive integer.");
+    }
+    return new Uint8Array(randomBytes(length));
+}
+export async function randomIntImpl(min, max) {
+    if (!Number.isInteger(min) || !Number.isInteger(max)) {
+        throw new TypeError("randomInt bounds must be integers.");
+    }
+    if (max <= min) {
+        throw new RangeError("max must be greater than min.");
+    }
+    const range = max - min;
+    const bytesNeeded = Math.ceil(Math.log2(range) / 8);
+    const limit = Math.floor(256 ** bytesNeeded / range) * range;
+    while (true) {
+        const bytes = await randomBytesImpl(bytesNeeded);
+        let value = 0;
+        for (let i = 0; i < bytesNeeded; i += 1) {
+            value = (value << 8) | bytes[i];
+        }
+        if (value < limit) {
+            return min + (value % range);
+        }
+    }
+}
+export async function randomUUIDImpl() {
+    const bytes = await randomBytesImpl(16);
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+//# sourceMappingURL=nodeCryptoProvider.random.js.map

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.random.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.random.js","sourceRoot":"","sources":["../../../src/node/nodeCryptoProvider/nodeCryptoProvider.random.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CACjB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW;IAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,WAAW,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;IAE7D,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACnC,CAAC;QAED,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAClB,OAAO,GAAG,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAExC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAErC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC"}

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.signing.d.ts

@@ -0,0 +1,13 @@
+import type { SignatureAlgorithm, CryptoInput } from "../../cryptoProvider/index.js";
+export declare function sign(options: {
+    key: CryptoInput;
+    data: CryptoInput;
+    algorithm?: SignatureAlgorithm;
+}): Promise<Uint8Array>;
+export declare function verify(options: {
+    key: CryptoInput;
+    data: CryptoInput;
+    signature: Uint8Array;
+    algorithm?: SignatureAlgorithm;
+}): Promise<boolean>;
+//# sourceMappingURL=nodeCryptoProvider.signing.d.ts.map

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.signing.d.ts","sourceRoot":"","sources":["../../../src/node/nodeCryptoProvider/nodeCryptoProvider.signing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAIrF,wBAAsB,IAAI,CAAC,OAAO,EAAE;IAClC,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC,GAAG,OAAO,CAAC,UAAU,CAAC,CAYtB;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE;IACpC,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBnB"}

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.signing.js

@@ -0,0 +1,29 @@
+import { createPrivateKey, createPublicKey, createSign, createVerify } from "node:crypto";
+import { toBytes, nodeSignatureAlgorithm } from "./nodeCryptoProvider.helper.js";
+export async function sign(options) {
+    const algorithm = options.algorithm ?? "ed25519";
+    const key = toBytes(options.key);
+    const data = toBytes(options.data);
+    const privateKey = createPrivateKey(key);
+    const sign = createSign(nodeSignatureAlgorithm(algorithm));
+    sign.update(data);
+    sign.end();
+    return new Uint8Array(sign.sign(privateKey));
+}
+export async function verify(options) {
+    const algorithm = options.algorithm ?? "ed25519";
+    const key = toBytes(options.key);
+    const data = toBytes(options.data);
+    const publicKey = createPublicKey(key);
+    if (algorithm === "ed25519") {
+        const verifier = createVerify("Ed25519");
+        verifier.update(data);
+        verifier.verify(publicKey, options.signature);
+        return true;
+    }
+    const verifier = createVerify(nodeSignatureAlgorithm(algorithm));
+    verifier.update(data);
+    verifier.end(options.signature);
+    return verifier.verify(publicKey, options.signature);
+}
+//# sourceMappingURL=nodeCryptoProvider.signing.js.map

package/dist/node/nodeCryptoProvider/nodeCryptoProvider.signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.signing.js","sourceRoot":"","sources":["../../../src/node/nodeCryptoProvider/nodeCryptoProvider.signing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAI1B;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,UAAU,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC,GAAG,EAAE,CAAC;IAEX,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAK5B;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAC3B,sBAAsB,CAAC,SAAS,CAAC,CAClC,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC"}

package/dist/node/nodeCryptoProvider/operations/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @oyinlola141/lattice-crypto/node/nodeCryptoProvider/operations
+ *
+ * Higher-level crypto operations built on primitives: key derivation and password hashing.
+ */
+export { deriveKey } from "./nodeCryptoProvider.derivation.js";
+export { hashPassword, verifyPassword } from "./nodeCryptoProvider.password.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/node/nodeCryptoProvider/operations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/operations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/node/nodeCryptoProvider/operations/index.js

@@ -0,0 +1,8 @@
+/**
+ * @latticejs/crypto/node/nodeCryptoProvider/operations
+ *
+ * Higher-level crypto operations built on primitives: key derivation and password hashing.
+ */
+export { deriveKey } from "./nodeCryptoProvider.derivation.js";
+export { hashPassword, verifyPassword } from "./nodeCryptoProvider.password.js";
+//# sourceMappingURL=index.js.map

package/dist/node/nodeCryptoProvider/operations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/operations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.derivation.d.ts

@@ -0,0 +1,3 @@
+import type { DeriveKeyOptions } from "../../../cryptoProvider/index.js";
+export declare function deriveKey(options: DeriveKeyOptions): Promise<Uint8Array>;
+//# sourceMappingURL=nodeCryptoProvider.derivation.d.ts.map

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.derivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.derivation.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/operations/nodeCryptoProvider.derivation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAuC,MAAM,kCAAkC,CAAC;AAO9G,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAyD9E"}

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.derivation.js

@@ -0,0 +1,45 @@
+import { pbkdf2, scrypt, randomBytes, timingSafeEqual } from "node:crypto";
+import { toBytes, toBase64Url, fromBase64Url } from "../nodeCryptoProvider.helper.js";
+import { cryptoKeyDerivationError, } from "@latticejs/errors";
+export async function deriveKey(options) {
+    const password = toBytes(options.password);
+    const salt = options.salt;
+    switch (options.algorithm) {
+        case "pbkdf2": {
+            return new Promise((resolve, reject) => {
+                const keyLength = options.keyLength ?? 32;
+                pbkdf2(Buffer.from(password), Buffer.from(salt), options.iterations ?? 100_000, keyLength, "sha256", (err, derived) => {
+                    if (err) {
+                        reject(cryptoKeyDerivationError("Key derivation failed.", "pbkdf2"));
+                    }
+                    else {
+                        resolve(new Uint8Array(derived));
+                    }
+                });
+            });
+        }
+        case "scrypt": {
+            return new Promise((resolve, reject) => {
+                const keyLength = options.keyLength ?? 32;
+                scrypt(Buffer.from(password), Buffer.from(salt), keyLength, {
+                    N: options.memoryCost ?? 16384,
+                    r: 8,
+                    p: options.parallelism ?? 1,
+                }, (err, derived) => {
+                    if (err) {
+                        reject(cryptoKeyDerivationError("Key derivation failed.", "scrypt"));
+                    }
+                    else {
+                        resolve(new Uint8Array(derived));
+                    }
+                });
+            });
+        }
+        case "argon2id": {
+            throw new TypeError("Argon2id requires the argon2 package.");
+        }
+        default:
+            throw new TypeError(`Unsupported key derivation algorithm: ${options.algorithm}.`);
+    }
+}
+//# sourceMappingURL=nodeCryptoProvider.derivation.js.map

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.derivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.derivation.js","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/operations/nodeCryptoProvider.derivation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EACL,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC1C,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,OAAO,CAAC,UAAU,IAAI,OAAO,EAC7B,SAAS,EACT,QAAQ,EACR,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACf,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,wBAAwB,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACvE,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC1C,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,SAAS,EACT;oBACE,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;oBAC9B,CAAC,EAAE,CAAC;oBACJ,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC;iBAC5B,EACD,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACf,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,wBAAwB,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACvE,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC;QAED;YACE,MAAM,IAAI,SAAS,CACjB,yCAAyC,OAAO,CAAC,SAAS,GAAG,CAC9D,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.password.d.ts

@@ -0,0 +1,12 @@
+import type { CryptoInput, KeyDerivationAlgorithm } from "../../../cryptoProvider/index.js";
+export declare function hashPassword(password: CryptoInput, options?: {
+    algorithm?: KeyDerivationAlgorithm;
+    memoryCost?: number;
+    timeCost?: number;
+    blockSize?: number;
+    parallelism?: number;
+    keyBytes?: number;
+    salt?: Uint8Array;
+}): Promise<string>;
+export declare function verifyPassword(password: CryptoInput, hash: string): Promise<boolean>;
+//# sourceMappingURL=nodeCryptoProvider.password.d.ts.map

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.password.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/operations/nodeCryptoProvider.password.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAM5F,wBAAsB,YAAY,CAChC,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB,GACA,OAAO,CAAC,MAAM,CAAC,CA2EjB;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,WAAW,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAuClB"}

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.password.js

@@ -0,0 +1,94 @@
+import { randomBytes, pbkdf2, scrypt, timingSafeEqual } from "node:crypto";
+import { toBytes, toBase64Url, fromBase64Url } from "../nodeCryptoProvider.helper.js";
+import { PASSWORD_FORMAT_VERSION } from "../../../cryptoPassword/cryptoPassword.codec.js";
+import { decodePasswordHash } from "../../../cryptoPassword/cryptoPassword.codec.js";
+export async function hashPassword(password, options) {
+    const algorithm = options?.algorithm ?? "scrypt";
+    const salt = options?.salt ?? randomBytes(16);
+    const blockSize = options?.blockSize ?? 8;
+    const keyBytes = options?.keyBytes ?? 32;
+    let hash;
+    switch (algorithm) {
+        case "scrypt": {
+            const passwordBytes = toBytes(password);
+            hash = await new Promise((resolve, reject) => {
+                scrypt(passwordBytes, salt, keyBytes, {
+                    N: options?.memoryCost ?? 16384,
+                    r: blockSize,
+                    p: options?.parallelism ?? 1,
+                }, (err, derived) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve(new Uint8Array(derived));
+                    }
+                });
+            });
+            break;
+        }
+        case "argon2id": {
+            throw new TypeError("Argon2id requires the argon2 package.");
+        }
+        case "pbkdf2": {
+            const passwordBytes = toBytes(password);
+            hash = await new Promise((resolve, reject) => {
+                pbkdf2(passwordBytes, salt, options?.timeCost ?? 100_000, keyBytes, "sha256", (err, derived) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve(new Uint8Array(derived));
+                    }
+                });
+            });
+            break;
+        }
+        default:
+            throw new TypeError(`Unsupported password algorithm: ${algorithm}.`);
+    }
+    const saltB64 = toBase64Url(salt);
+    const hashB64 = toBase64Url(hash);
+    return [
+        PASSWORD_FORMAT_VERSION,
+        algorithm,
+        options?.memoryCost ?? 16384,
+        blockSize,
+        options?.parallelism ?? 1,
+        `${saltB64}.${hashB64}`,
+    ].join("$");
+}
+export async function verifyPassword(password, hash) {
+    const parts = hash.split("$");
+    if (parts.length !== 6 || parts[0] !== "v1") {
+        return false;
+    }
+    const [version, algorithm, costPart, blockSizePart, parallelizationPart, payload] = parts;
+    if (version !== "v1" || !payload) {
+        return false;
+    }
+    const payloadParts = payload.split(".");
+    if (payloadParts.length !== 2) {
+        return false;
+    }
+    const [saltB64] = payloadParts;
+    if (!saltB64) {
+        return false;
+    }
+    const salt = fromBase64Url(saltB64);
+    const computed = await hashPassword(password, {
+        algorithm: algorithm,
+        memoryCost: Number(costPart),
+        blockSize: Number(blockSizePart),
+        parallelism: Number(parallelizationPart),
+        salt,
+    });
+    const computedParts = computed.split("$");
+    if (computedParts.length !== 6) {
+        return false;
+    }
+    const expectedHash = fromBase64Url(computedParts[5].split(".")[1]);
+    const decoded = decodePasswordHash(hash);
+    return timingSafeEqual(decoded.hash, expectedHash);
+}
+//# sourceMappingURL=nodeCryptoProvider.password.js.map

package/dist/node/nodeCryptoProvider/operations/nodeCryptoProvider.password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.password.js","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/operations/nodeCryptoProvider.password.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAqB,EACrB,OAQC;IAED,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;IAEzC,IAAI,IAAgB,CAAC;IAErB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CACJ,aAAa,EACb,IAAI,EACJ,QAAQ,EACR;oBACE,CAAC,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;oBAC/B,CAAC,EAAE,SAAS;oBACZ,CAAC,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC;iBAC7B,EACD,CAAC,GAAiB,EAAE,OAAe,EAAE,EAAE;oBACrC,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QAED,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC;QAED,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CACJ,aAAa,EACb,IAAI,EACJ,OAAO,EAAE,QAAQ,IAAI,OAAO,EAC5B,QAAQ,EACR,QAAQ,EACR,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACf,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QAED;YACE,MAAM,IAAI,SAAS,CACjB,mCAAmC,SAAS,GAAG,CAChD,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAElC,OAAO;QACL,uBAAuB;QACvB,SAAS;QACT,OAAO,EAAE,UAAU,IAAI,KAAK;QAC5B,SAAS;QACT,OAAO,EAAE,WAAW,IAAI,CAAC;QACzB,GAAG,OAAO,IAAI,OAAO,EAAE;KACxB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAqB,EACrB,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IAC1F,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAEpC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE;QAC5C,SAAS,EAAE,SAAmC;QAC9C,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACxC,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAErE,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC"}

package/dist/node/nodeCryptoProvider/primitives/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @oyinlola141/lattice-crypto/node/nodeCryptoProvider/primitives
+ *
+ * Primitive crypto operations: hashing, encryption, signing, and random generation.
+ */
+export { hash, hmac } from "./nodeCryptoProvider.hash.js";
+export { encrypt, decrypt } from "./nodeCryptoProvider.encryption.js";
+export { sign, verify } from "./nodeCryptoProvider.signing.js";
+export { randomBytesImpl, randomIntImpl, randomUUIDImpl } from "./nodeCryptoProvider.random.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/node/nodeCryptoProvider/primitives/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/node/nodeCryptoProvider/primitives/index.js

@@ -0,0 +1,10 @@
+/**
+ * @latticejs/crypto/node/nodeCryptoProvider/primitives
+ *
+ * Primitive crypto operations: hashing, encryption, signing, and random generation.
+ */
+export { hash, hmac } from "./nodeCryptoProvider.hash.js";
+export { encrypt, decrypt } from "./nodeCryptoProvider.encryption.js";
+export { sign, verify } from "./nodeCryptoProvider.signing.js";
+export { randomBytesImpl, randomIntImpl, randomUUIDImpl } from "./nodeCryptoProvider.random.js";
+//# sourceMappingURL=index.js.map

package/dist/node/nodeCryptoProvider/primitives/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.encryption.d.ts

@@ -0,0 +1,13 @@
+import type { CryptoInput, EncryptedData } from "../../../cryptoProvider/index.js";
+export declare function encrypt(options: {
+    key: CryptoInput;
+    plaintext: CryptoInput;
+    associatedData?: CryptoInput;
+    nonce?: Uint8Array;
+}): Promise<EncryptedData>;
+export declare function decrypt(options: {
+    key: CryptoInput;
+    encrypted: EncryptedData;
+    associatedData?: CryptoInput;
+}): Promise<Uint8Array>;
+//# sourceMappingURL=nodeCryptoProvider.encryption.d.ts.map

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.encryption.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/nodeCryptoProvider.encryption.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAuB,WAAW,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAIxG,wBAAsB,OAAO,CAAC,OAAO,EAAE;IACrC,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,EAAE,WAAW,CAAC;IACvB,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB,GAAG,OAAO,CAAC,aAAa,CAAC,CA0BzB;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE;IACrC,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,EAAE,aAAa,CAAC;IACzB,cAAc,CAAC,EAAE,WAAW,CAAC;CAC9B,GAAG,OAAO,CAAC,UAAU,CAAC,CA2BtB"}

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.encryption.js

@@ -0,0 +1,38 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { toBytes } from "../nodeCryptoProvider.helper.js";
+export async function encrypt(options) {
+    const key = toBytes(options.key);
+    const plaintext = toBytes(options.plaintext);
+    const algorithm = "aes-256-gcm";
+    const nonce = options.nonce ?? new Uint8Array(randomBytes(12));
+    const cipher = createCipheriv("aes-256-gcm", key, nonce);
+    if (options.associatedData) {
+        cipher.setAAD(toBytes(options.associatedData));
+    }
+    const ciphertext = Buffer.concat([
+        cipher.update(plaintext),
+        cipher.final(),
+    ]);
+    const tag = cipher.getAuthTag();
+    return Object.freeze({
+        algorithm,
+        ciphertext: new Uint8Array(ciphertext),
+        nonce,
+        tag: new Uint8Array(tag),
+    });
+}
+export async function decrypt(options) {
+    const key = toBytes(options.key);
+    const { ciphertext, nonce, tag } = options.encrypted;
+    const decipher = createDecipheriv(options.encrypted.algorithm, key, nonce);
+    if (options.associatedData) {
+        decipher.setAAD(toBytes(options.associatedData));
+    }
+    decipher.setAuthTag(tag);
+    const decrypted = Buffer.concat([
+        decipher.update(ciphertext),
+        decipher.final(),
+    ]);
+    return new Uint8Array(decrypted);
+}
+//# sourceMappingURL=nodeCryptoProvider.encryption.js.map

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.encryption.js","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/nodeCryptoProvider.encryption.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAK7B;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAwB,aAAa,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAEzD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACxB,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS;QACT,UAAU,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;QACtC,KAAK;QACL,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAI7B;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAErD,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,OAAO,CAAC,SAAS,CAAC,SAAS,EAC3B,GAAG,EACH,KAAK,CAMN,CAAC;IAEF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;IAEH,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC"}

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.hash.d.ts

@@ -0,0 +1,4 @@
+import type { HashAlgorithm, HmacAlgorithm, CryptoInput } from "../../../cryptoProvider/index.js";
+export declare function hash(algorithm: HashAlgorithm, data: CryptoInput): Promise<Uint8Array>;
+export declare function hmac(algorithm: HmacAlgorithm, key: CryptoInput, data: CryptoInput): Promise<Uint8Array>;
+//# sourceMappingURL=nodeCryptoProvider.hash.d.ts.map

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.hash.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/nodeCryptoProvider.hash.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAIlG,wBAAsB,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAK3F;AAED,wBAAsB,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAM7G"}

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.hash.js

@@ -0,0 +1,16 @@
+import { createHash, createHmac } from "node:crypto";
+import { toBytes, nodeHashAlgorithm } from "../nodeCryptoProvider.helper.js";
+export async function hash(algorithm, data) {
+    const normalized = toBytes(data);
+    const hasher = createHash(nodeHashAlgorithm(algorithm));
+    hasher.update(normalized);
+    return new Uint8Array(hasher.digest());
+}
+export async function hmac(algorithm, key, data) {
+    const normalizedKey = toBytes(key);
+    const normalizedData = toBytes(data);
+    const h = createHmac(nodeHashAlgorithm(algorithm), normalizedKey);
+    h.update(normalizedData);
+    return new Uint8Array(h.digest());
+}
+//# sourceMappingURL=nodeCryptoProvider.hash.js.map

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.hash.js","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/nodeCryptoProvider.hash.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAE7E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,SAAwB,EAAE,IAAiB;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,SAAwB,EAAE,GAAgB,EAAE,IAAiB;IACtF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;IAClE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACzB,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.random.d.ts

@@ -0,0 +1,4 @@
+export declare function randomBytesImpl(length: number): Promise<Uint8Array>;
+export declare function randomIntImpl(min: number, max: number): Promise<number>;
+export declare function randomUUIDImpl(): Promise<string>;
+//# sourceMappingURL=nodeCryptoProvider.random.d.ts.map

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.random.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.random.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/nodeCryptoProvider.random.ts"],"names":[],"mappings":"AAEA,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAQzE;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA2B7E;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAWtD"}

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.random.js

@@ -0,0 +1,39 @@
+import { randomBytes } from "node:crypto";
+export async function randomBytesImpl(length) {
+    if (!Number.isInteger(length) || length <= 0) {
+        throw new TypeError("randomBytes length must be a positive integer.");
+    }
+    return new Uint8Array(randomBytes(length));
+}
+export async function randomIntImpl(min, max) {
+    if (!Number.isInteger(min) || !Number.isInteger(max)) {
+        throw new TypeError("randomInt bounds must be integers.");
+    }
+    if (max <= min) {
+        throw new RangeError("max must be greater than min.");
+    }
+    const range = max - min;
+    const bytesNeeded = Math.ceil(Math.log2(range) / 8);
+    const limit = Math.floor(256 ** bytesNeeded / range) * range;
+    while (true) {
+        const bytes = await randomBytesImpl(bytesNeeded);
+        let value = 0;
+        for (let i = 0; i < bytesNeeded; i += 1) {
+            value = (value << 8) | bytes[i];
+        }
+        value = value >>> 0;
+        if (value < limit) {
+            return min + (value % range);
+        }
+    }
+}
+export async function randomUUIDImpl() {
+    const bytes = await randomBytesImpl(16);
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+//# sourceMappingURL=nodeCryptoProvider.random.js.map

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.random.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.random.js","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/nodeCryptoProvider.random.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CACjB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW;IAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,WAAW,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;IAE7D,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACnC,CAAC;QAED,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC;QAEpB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAClB,OAAO,GAAG,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAExC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAErC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC"}

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.signing.d.ts

@@ -0,0 +1,13 @@
+import type { SignatureAlgorithm, CryptoInput } from "../../../cryptoProvider/index.js";
+export declare function sign(options: {
+    key: CryptoInput;
+    data: CryptoInput;
+    algorithm?: SignatureAlgorithm;
+}): Promise<Uint8Array>;
+export declare function verify(options: {
+    key: CryptoInput;
+    data: CryptoInput;
+    signature: Uint8Array;
+    algorithm?: SignatureAlgorithm;
+}): Promise<boolean>;
+//# sourceMappingURL=nodeCryptoProvider.signing.d.ts.map

package/dist/node/nodeCryptoProvider/primitives/nodeCryptoProvider.signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeCryptoProvider.signing.d.ts","sourceRoot":"","sources":["../../../../src/node/nodeCryptoProvider/primitives/nodeCryptoProvider.signing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAWxF,wBAAsB,IAAI,CAAC,OAAO,EAAE;IAClC,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC,GAAG,OAAO,CAAC,UAAU,CAAC,CAgBtB;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE;IACpC,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBnB"}