@pezkuwi/util-crypto 14.0.2 → 14.0.4

package/ed25519/sign.d.ts

@@ -0,0 +1,16 @@
+import type { Keypair } from '../types.js';
+/**
+ * @name ed25519Sign
+ * @summary Signs a message using the supplied secretKey
+ * @description
+ * Returns message signature of `message`, using the `secretKey`.
+ * @example
+ * <BR>
+ *
+ * ```javascript
+ * import { ed25519Sign } from '@polkadot/util-crypto';
+ *
+ * ed25519Sign([...], [...]); // => [...]
+ * ```
+ */
+export declare function ed25519Sign(message: string | Uint8Array, { publicKey, secretKey }: Partial<Keypair>, onlyJs?: boolean): Uint8Array;

package/ed25519/sign.js

@@ -0,0 +1,30 @@
+import { ed25519 } from '@noble/curves/ed25519';
+import { hasBigInt, u8aToU8a } from '@pezkuwi/util';
+import { ed25519Sign as wasmSign, isReady } from '@pezkuwi/wasm-crypto';
+/**
+ * @name ed25519Sign
+ * @summary Signs a message using the supplied secretKey
+ * @description
+ * Returns message signature of `message`, using the `secretKey`.
+ * @example
+ * <BR>
+ *
+ * ```javascript
+ * import { ed25519Sign } from '@pezkuwi/util-crypto';
+ *
+ * ed25519Sign([...], [...]); // => [...]
+ * ```
+ */
+export function ed25519Sign(message, { publicKey, secretKey }, onlyJs) {
+    if (!secretKey) {
+        throw new Error('Expected a valid secretKey');
+    }
+    else if (!publicKey) {
+        throw new Error('Expected a valid publicKey');
+    }
+    const messageU8a = u8aToU8a(message);
+    const privateU8a = secretKey.subarray(0, 32);
+    return !hasBigInt || (!onlyJs && isReady())
+        ? wasmSign(publicKey, privateU8a, messageU8a)
+        : ed25519.sign(messageU8a, privateU8a);
+}

package/ed25519/verify.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @name ed25519Sign
+ * @summary Verifies the signature on the supplied message.
+ * @description
+ * Verifies the `signature` on `message` with the supplied `publicKey`. Returns `true` on sucess, `false` otherwise.
+ * @example
+ * <BR>
+ *
+ * ```javascript
+ * import { ed25519Verify } from '@polkadot/util-crypto';
+ *
+ * ed25519Verify([...], [...], [...]); // => true/false
+ * ```
+ */
+export declare function ed25519Verify(message: string | Uint8Array, signature: string | Uint8Array, publicKey: string | Uint8Array, onlyJs?: boolean): boolean;

package/ed25519/verify.js

@@ -0,0 +1,36 @@
+import { ed25519 } from '@noble/curves/ed25519';
+import { hasBigInt, u8aToU8a } from '@pezkuwi/util';
+import { ed25519Verify as wasmVerify, isReady } from '@pezkuwi/wasm-crypto';
+/**
+ * @name ed25519Sign
+ * @summary Verifies the signature on the supplied message.
+ * @description
+ * Verifies the `signature` on `message` with the supplied `publicKey`. Returns `true` on sucess, `false` otherwise.
+ * @example
+ * <BR>
+ *
+ * ```javascript
+ * import { ed25519Verify } from '@pezkuwi/util-crypto';
+ *
+ * ed25519Verify([...], [...], [...]); // => true/false
+ * ```
+ */
+export function ed25519Verify(message, signature, publicKey, onlyJs) {
+    const messageU8a = u8aToU8a(message);
+    const publicKeyU8a = u8aToU8a(publicKey);
+    const signatureU8a = u8aToU8a(signature);
+    if (publicKeyU8a.length !== 32) {
+        throw new Error(`Invalid publicKey, received ${publicKeyU8a.length}, expected 32`);
+    }
+    else if (signatureU8a.length !== 64) {
+        throw new Error(`Invalid signature, received ${signatureU8a.length} bytes, expected 64`);
+    }
+    try {
+        return !hasBigInt || (!onlyJs && isReady())
+            ? wasmVerify(signatureU8a, messageU8a, publicKeyU8a)
+            : ed25519.verify(signatureU8a, messageU8a, publicKeyU8a);
+    }
+    catch {
+        return false;
+    }
+}

package/ethereum/encode.d.ts

@@ -0,0 +1,2 @@
+import type { HexString } from '@polkadot/util/types';
+export declare function ethereumEncode(addressOrPublic?: string | Uint8Array): HexString;

package/ethereum/encode.js

@@ -0,0 +1,25 @@
+import { u8aToHex, u8aToU8a } from '@pezkuwi/util';
+import { keccakAsU8a } from '../keccak/index.js';
+import { secp256k1Expand } from '../secp256k1/index.js';
+function getH160(u8a) {
+    if ([33, 65].includes(u8a.length)) {
+        u8a = keccakAsU8a(secp256k1Expand(u8a));
+    }
+    return u8a.slice(-20);
+}
+export function ethereumEncode(addressOrPublic) {
+    if (!addressOrPublic) {
+        return '0x';
+    }
+    const u8aAddress = u8aToU8a(addressOrPublic);
+    if (![20, 32, 33, 65].includes(u8aAddress.length)) {
+        throw new Error(`Invalid address or publicKey provided, received ${u8aAddress.length} bytes input`);
+    }
+    const address = u8aToHex(getH160(u8aAddress), -1, false);
+    const hash = u8aToHex(keccakAsU8a(address), -1, false);
+    let result = '';
+    for (let i = 0; i < 40; i++) {
+        result = `${result}${parseInt(hash[i], 16) > 7 ? address[i].toUpperCase() : address[i]}`;
+    }
+    return `0x${result}`;
+}

package/ethereum/index.d.ts

@@ -0,0 +1,3 @@
+export { ethereumEncode } from './encode.js';
+export { isEthereumAddress } from './isAddress.js';
+export { isEthereumChecksum } from './isChecksum.js';

package/ethereum/index.js

@@ -0,0 +1,3 @@
+export { ethereumEncode } from './encode.js';
+export { isEthereumAddress } from './isAddress.js';
+export { isEthereumChecksum } from './isChecksum.js';

package/ethereum/isAddress.d.ts

@@ -0,0 +1 @@
+export declare function isEthereumAddress(address?: string): boolean;

package/ethereum/isAddress.js

@@ -0,0 +1,11 @@
+import { isHex } from '@pezkuwi/util';
+import { isEthereumChecksum } from './isChecksum.js';
+export function isEthereumAddress(address) {
+    if (!address || address.length !== 42 || !isHex(address)) {
+        return false;
+    }
+    else if (/^(0x)?[0-9a-f]{40}$/.test(address) || /^(0x)?[0-9A-F]{40}$/.test(address)) {
+        return true;
+    }
+    return isEthereumChecksum(address);
+}

package/ethereum/isChecksum.d.ts

@@ -0,0 +1 @@
+export declare function isEthereumChecksum(_address: string): boolean;

package/ethereum/isChecksum.js

@@ -0,0 +1,17 @@
+import { u8aToHex } from '@pezkuwi/util';
+import { keccakAsU8a } from '../keccak/index.js';
+function isInvalidChar(char, byte) {
+    return char !== (byte > 7
+        ? char.toUpperCase()
+        : char.toLowerCase());
+}
+export function isEthereumChecksum(_address) {
+    const address = _address.replace('0x', '');
+    const hash = u8aToHex(keccakAsU8a(address.toLowerCase()), -1, false);
+    for (let i = 0; i < 40; i++) {
+        if (isInvalidChar(address[i], parseInt(hash[i], 16))) {
+            return false;
+        }
+    }
+    return true;
+}

package/hd/ethereum/index.d.ts

@@ -0,0 +1,2 @@
+import type { Keypair } from '../../types.js';
+export declare function hdEthereum(seed: Uint8Array, path?: string): Keypair;

package/hd/ethereum/index.js

@@ -0,0 +1,44 @@
+import { bnToU8a, stringToU8a, u8aConcat } from '@pezkuwi/util';
+import { BN_BE_32_OPTS } from '../../bn.js';
+import { hmacShaAsU8a } from '../../hmac/index.js';
+import { secp256k1PairFromSeed, secp256k1PrivateKeyTweakAdd } from '../../secp256k1/index.js';
+import { HARDENED, hdValidatePath } from '../validatePath.js';
+const MASTER_SECRET = stringToU8a('Bitcoin seed');
+function createCoded(secretKey, chainCode) {
+    return {
+        chainCode,
+        publicKey: secp256k1PairFromSeed(secretKey).publicKey,
+        secretKey
+    };
+}
+function deriveChild(hd, index) {
+    const indexBuffer = bnToU8a(index, BN_BE_32_OPTS);
+    const data = index >= HARDENED
+        ? u8aConcat(new Uint8Array(1), hd.secretKey, indexBuffer)
+        : u8aConcat(hd.publicKey, indexBuffer);
+    try {
+        const I = hmacShaAsU8a(hd.chainCode, data, 512);
+        return createCoded(secp256k1PrivateKeyTweakAdd(hd.secretKey, I.slice(0, 32)), I.slice(32));
+    }
+    catch {
+        // In case parse256(IL) >= n or ki == 0, proceed with the next value for i
+        return deriveChild(hd, index + 1);
+    }
+}
+export function hdEthereum(seed, path = '') {
+    const I = hmacShaAsU8a(MASTER_SECRET, seed, 512);
+    let hd = createCoded(I.slice(0, 32), I.slice(32));
+    if (!path || path === 'm' || path === 'M' || path === "m'" || path === "M'") {
+        return hd;
+    }
+    if (!hdValidatePath(path)) {
+        throw new Error('Invalid derivation path');
+    }
+    const parts = path.split('/').slice(1);
+    for (const p of parts) {
+        hd = deriveChild(hd, parseInt(p, 10) + ((p.length > 1) && p.endsWith("'")
+            ? HARDENED
+            : 0));
+    }
+    return hd;
+}

package/hd/index.d.ts

@@ -0,0 +1,3 @@
+export { hdEthereum } from './ethereum/index.js';
+export { hdLedger } from './ledger/index.js';
+export { hdValidatePath } from './validatePath.js';

package/hd/index.js

@@ -0,0 +1,3 @@
+export { hdEthereum } from './ethereum/index.js';
+export { hdLedger } from './ledger/index.js';
+export { hdValidatePath } from './validatePath.js';

package/hd/ledger/derivePrivate.d.ts

@@ -0,0 +1 @@
+export declare function ledgerDerivePrivate(xprv: Uint8Array, index: number): Uint8Array;

package/hd/ledger/derivePrivate.js

@@ -0,0 +1,12 @@
+import { BN_EIGHT, bnToU8a, u8aConcat, u8aToBn } from '@pezkuwi/util';
+import { BN_LE_32_OPTS, BN_LE_512_OPTS, BN_LE_OPTS } from '../../bn.js';
+import { hmacShaAsU8a } from '../../hmac/index.js';
+export function ledgerDerivePrivate(xprv, index) {
+    const kl = xprv.subarray(0, 32);
+    const kr = xprv.subarray(32, 64);
+    const cc = xprv.subarray(64, 96);
+    const data = u8aConcat([0], kl, kr, bnToU8a(index, BN_LE_32_OPTS));
+    const z = hmacShaAsU8a(cc, data, 512);
+    data[0] = 0x01;
+    return u8aConcat(bnToU8a(u8aToBn(kl, BN_LE_OPTS).iadd(u8aToBn(z.subarray(0, 28), BN_LE_OPTS).imul(BN_EIGHT)), BN_LE_512_OPTS).subarray(0, 32), bnToU8a(u8aToBn(kr, BN_LE_OPTS).iadd(u8aToBn(z.subarray(32, 64), BN_LE_OPTS)), BN_LE_512_OPTS).subarray(0, 32), hmacShaAsU8a(cc, data, 512).subarray(32, 64));
+}

package/hd/ledger/index.d.ts

@@ -0,0 +1,2 @@
+import type { Keypair } from '../../types.js';
+export declare function hdLedger(_mnemonic: string, path: string): Keypair;

package/hd/ledger/index.js

@@ -0,0 +1,30 @@
+import { ed25519PairFromSeed } from '../../ed25519/index.js';
+import { mnemonicValidate } from '../../mnemonic/index.js';
+import { HARDENED, hdValidatePath } from '../validatePath.js';
+import { ledgerDerivePrivate } from './derivePrivate.js';
+import { ledgerMaster } from './master.js';
+export function hdLedger(_mnemonic, path) {
+    const words = _mnemonic
+        .split(' ')
+        .map((s) => s.trim())
+        .filter((s) => s);
+    if (![12, 24, 25].includes(words.length)) {
+        throw new Error('Expected a mnemonic with 24 words (or 25 including a password)');
+    }
+    const [mnemonic, password] = words.length === 25
+        ? [words.slice(0, 24).join(' '), words[24]]
+        : [words.join(' '), ''];
+    if (!mnemonicValidate(mnemonic)) {
+        throw new Error('Invalid mnemonic passed to ledger derivation');
+    }
+    else if (!hdValidatePath(path)) {
+        throw new Error('Invalid derivation path');
+    }
+    const parts = path.split('/').slice(1);
+    let seed = ledgerMaster(mnemonic, password);
+    for (const p of parts) {
+        const n = parseInt(p.replace(/'$/, ''), 10);
+        seed = ledgerDerivePrivate(seed, (n < HARDENED) ? (n + HARDENED) : n);
+    }
+    return ed25519PairFromSeed(seed.slice(0, 32));
+}

package/hd/ledger/master.d.ts

@@ -0,0 +1 @@
+export declare function ledgerMaster(mnemonic: string, password?: string): Uint8Array;

package/hd/ledger/master.js

@@ -0,0 +1,16 @@
+import { u8aConcat } from '@pezkuwi/util';
+import { hmacShaAsU8a } from '../../hmac/index.js';
+import { mnemonicToSeedSync } from '../../mnemonic/bip39.js';
+const ED25519_CRYPTO = 'ed25519 seed';
+export function ledgerMaster(mnemonic, password) {
+    const seed = mnemonicToSeedSync(mnemonic, password);
+    const chainCode = hmacShaAsU8a(ED25519_CRYPTO, new Uint8Array([1, ...seed]), 256);
+    let priv;
+    while (!priv || (priv[31] & 0b0010_0000)) {
+        priv = hmacShaAsU8a(ED25519_CRYPTO, priv || seed, 512);
+    }
+    priv[0] &= 0b1111_1000;
+    priv[31] &= 0b0111_1111;
+    priv[31] |= 0b0100_0000;
+    return u8aConcat(priv, chainCode);
+}

package/hd/validatePath.d.ts

@@ -0,0 +1,2 @@
+export declare const HARDENED = 2147483648;
+export declare function hdValidatePath(path: string): boolean;

package/hd/validatePath.js

@@ -0,0 +1,16 @@
+export const HARDENED = 0x80000000;
+export function hdValidatePath(path) {
+    if (!path.startsWith('m/')) {
+        return false;
+    }
+    const parts = path.split('/').slice(1);
+    for (const p of parts) {
+        const n = /^\d+'?$/.test(p)
+            ? parseInt(p.replace(/'$/, ''), 10)
+            : Number.NaN;
+        if (isNaN(n) || (n >= HARDENED) || (n < 0)) {
+            return false;
+        }
+    }
+    return true;
+}

package/helpers.d.ts

@@ -0,0 +1,12 @@
+import type { HexString } from '@polkadot/util/types';
+export type { HexString } from '@polkadot/util/types';
+interface DualHash {
+    256: (u8a: Uint8Array) => Uint8Array;
+    512: (u8a: Uint8Array) => Uint8Array;
+}
+/** @internal */
+export declare function createAsHex<T extends (...args: never[]) => Uint8Array>(fn: T): (...args: Parameters<T>) => HexString;
+/** @internal */
+export declare function createBitHasher(bitLength: 256 | 512, fn: (data: string | Uint8Array, bitLength: 256 | 512, onlyJs?: boolean) => Uint8Array): (data: string | Uint8Array, onlyJs?: boolean) => Uint8Array;
+/** @internal */
+export declare function createDualHasher(wa: DualHash, js: DualHash): (value: string | Uint8Array, bitLength?: 256 | 512, onlyJs?: boolean) => Uint8Array;

package/helpers.js

@@ -0,0 +1,19 @@
+import { hasBigInt, u8aToHex, u8aToU8a } from '@pezkuwi/util';
+import { isReady } from '@pezkuwi/wasm-crypto';
+/** @internal */
+export function createAsHex(fn) {
+    return (...args) => u8aToHex(fn(...args));
+}
+/** @internal */
+export function createBitHasher(bitLength, fn) {
+    return (data, onlyJs) => fn(data, bitLength, onlyJs);
+}
+/** @internal */
+export function createDualHasher(wa, js) {
+    return (value, bitLength = 256, onlyJs) => {
+        const u8a = u8aToU8a(value);
+        return !hasBigInt || (!onlyJs && isReady())
+            ? wa[bitLength](u8a)
+            : js[bitLength](u8a);
+    };
+}

package/hmac/index.d.ts

@@ -0,0 +1 @@
+export { hmacSha256AsU8a, hmacSha512AsU8a, hmacShaAsU8a } from './shaAsU8a.js';

package/hmac/index.js

@@ -0,0 +1 @@
+export { hmacSha256AsU8a, hmacSha512AsU8a, hmacShaAsU8a } from './shaAsU8a.js';

package/hmac/shaAsU8a.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @name hmacShaAsU8a
+ * @description creates a Hmac Sha (256/512) Uint8Array from the key & data
+ */
+export declare function hmacShaAsU8a(key: Uint8Array | string, data: Uint8Array, bitLength?: 256 | 512, onlyJs?: boolean): Uint8Array;
+/**
+ * @name hmacSha256AsU8a
+ * @description creates a Hmac Sha256 Uint8Array from the key & data
+ */
+export declare const hmacSha256AsU8a: (key: Uint8Array | string, data: Uint8Array, onlyJs?: boolean) => Uint8Array;
+/**
+ * @name hmacSha512AsU8a
+ * @description creates a Hmac Sha512 Uint8Array from the key & data
+ */
+export declare const hmacSha512AsU8a: (key: Uint8Array | string, data: Uint8Array, onlyJs?: boolean) => Uint8Array;

package/{src/hmac/shaAsU8a.ts → hmac/shaAsU8a.js}

@@ -1,46 +1,34 @@
-// Copyright 2017-2025 @polkadot/util-crypto authors & contributors
-// SPDX-License-Identifier: Apache-2.0
-
 import { hmac } from '@noble/hashes/hmac';
 import { sha256 } from '@noble/hashes/sha256';
 import { sha512 } from '@noble/hashes/sha512';
-
 import { hasBigInt, u8aToU8a } from '@pezkuwi/util';
 import { hmacSha256, hmacSha512, isReady } from '@pezkuwi/wasm-crypto';
-
 const JS_HASH = {
-  256: sha256,
-  512: sha512
+    256: sha256,
+    512: sha512
 };
-
 const WA_MHAC = {
-  256: hmacSha256,
-  512: hmacSha512
+    256: hmacSha256,
+    512: hmacSha512
 };
-
-function createSha (bitLength: 256 | 512): (key: Uint8Array | string, data: Uint8Array, onlyJs?: boolean) => Uint8Array {
-  return (key: Uint8Array | string, data: Uint8Array, onlyJs?: boolean): Uint8Array =>
-    hmacShaAsU8a(key, data, bitLength, onlyJs);
+function createSha(bitLength) {
+    return (key, data, onlyJs) => hmacShaAsU8a(key, data, bitLength, onlyJs);
 }
-
 /**
  * @name hmacShaAsU8a
  * @description creates a Hmac Sha (256/512) Uint8Array from the key & data
  */
-export function hmacShaAsU8a (key: Uint8Array | string, data: Uint8Array, bitLength: 256 | 512 = 256, onlyJs?: boolean): Uint8Array {
-  const u8aKey = u8aToU8a(key);
-
-  return !hasBigInt || (!onlyJs && isReady())
-    ? WA_MHAC[bitLength](u8aKey, data)
-    : hmac(JS_HASH[bitLength], u8aKey, data);
+export function hmacShaAsU8a(key, data, bitLength = 256, onlyJs) {
+    const u8aKey = u8aToU8a(key);
+    return !hasBigInt || (!onlyJs && isReady())
+        ? WA_MHAC[bitLength](u8aKey, data)
+        : hmac(JS_HASH[bitLength], u8aKey, data);
 }
-
 /**
  * @name hmacSha256AsU8a
  * @description creates a Hmac Sha256 Uint8Array from the key & data
  */
 export const hmacSha256AsU8a = /*#__PURE__*/ createSha(256);
-
 /**
  * @name hmacSha512AsU8a
  * @description creates a Hmac Sha512 Uint8Array from the key & data

package/index.d.ts

@@ -0,0 +1,2 @@
+import './packageDetect.js';
+export * from './bundle.js';

package/index.js

@@ -0,0 +1,2 @@
+import './packageDetect.js';
+export * from './bundle.js';

package/init.d.ts

@@ -0,0 +1,10 @@
+import type { InitFn, WasmBaseInstance, WasmImports } from './types.js';
+/**
+ * @name createWasmFn
+ * @description
+ * Create a WASM (or ASM.js) creator interface based on the supplied information.
+ *
+ * It will attempt to create a WASM interface first and if this fails or is not available in
+ * the environment, will fallback to attempting to create an ASM.js interface.
+ */
+export declare function createWasmFn<C extends WasmBaseInstance>(root: 'crypto', wasmBytes: null | Uint8Array, asmFn: null | ((wbg: WasmImports) => C)): InitFn<C>;

package/init.js

@@ -0,0 +1,40 @@
+/**
+ * @name createWasmFn
+ * @description
+ * Create a WASM (or ASM.js) creator interface based on the supplied information.
+ *
+ * It will attempt to create a WASM interface first and if this fails or is not available in
+ * the environment, will fallback to attempting to create an ASM.js interface.
+ */
+export function createWasmFn(root, wasmBytes, asmFn) {
+    return async (wbg) => {
+        const result = {
+            error: null,
+            type: 'none',
+            wasm: null
+        };
+        try {
+            if (!wasmBytes?.length) {
+                throw new Error('No WebAssembly provided for initialization');
+            }
+            else if (typeof WebAssembly !== 'object' || typeof WebAssembly.instantiate !== 'function') {
+                throw new Error('WebAssembly is not available in your environment');
+            }
+            const source = await WebAssembly.instantiate(wasmBytes, { wbg });
+            result.wasm = source.instance.exports;
+            result.type = 'wasm';
+        }
+        catch (error) {
+            // if we have a valid supplied asm.js, return that
+            if (typeof asmFn === 'function') {
+                result.wasm = asmFn(wbg);
+                result.type = 'asm';
+            }
+            else {
+                result.error = `FATAL: Unable to initialize @pezkuwi/wasm-${root}:: ${error.message}`;
+                console.error(result.error);
+            }
+        }
+        return result;
+    };
+}

package/json/constants.d.ts

@@ -0,0 +1,6 @@
+import type { EncryptedJsonEncoding, EncryptedJsonVersion } from './types.js';
+export declare const ENCODING: EncryptedJsonEncoding[];
+export declare const ENCODING_NONE: EncryptedJsonEncoding[];
+export declare const ENCODING_VERSION: EncryptedJsonVersion;
+export declare const NONCE_LENGTH = 24;
+export declare const SCRYPT_LENGTH: number;

package/json/constants.js

@@ -0,0 +1,5 @@
+export const ENCODING = ['scrypt', 'xsalsa20-poly1305'];
+export const ENCODING_NONE = ['none'];
+export const ENCODING_VERSION = '3';
+export const NONCE_LENGTH = 24;
+export const SCRYPT_LENGTH = 32 + (3 * 4);

package/json/decrypt.d.ts

@@ -0,0 +1,2 @@
+import type { EncryptedJson } from './types.js';
+export declare function jsonDecrypt({ encoded, encoding }: EncryptedJson, passphrase?: string | null): Uint8Array;

package/json/decrypt.js

@@ -0,0 +1,13 @@
+import { hexToU8a, isHex } from '@pezkuwi/util';
+import { base64Decode } from '../base64/index.js';
+import { jsonDecryptData } from './decryptData.js';
+export function jsonDecrypt({ encoded, encoding }, passphrase) {
+    if (!encoded) {
+        throw new Error('No encrypted data available to decode');
+    }
+    return jsonDecryptData(isHex(encoded)
+        ? hexToU8a(encoded)
+        : base64Decode(encoded), passphrase, Array.isArray(encoding.type)
+        ? encoding.type
+        : [encoding.type]);
+}

package/json/decryptData.d.ts

@@ -0,0 +1,2 @@
+import type { EncryptedJsonEncoding } from './types.js';
+export declare function jsonDecryptData(encrypted?: Uint8Array | null, passphrase?: string | null, encType?: EncryptedJsonEncoding[]): Uint8Array;

package/json/decryptData.js

@@ -0,0 +1,29 @@
+import { stringToU8a, u8aFixLength } from '@pezkuwi/util';
+import { naclDecrypt } from '../nacl/index.js';
+import { scryptEncode, scryptFromU8a } from '../scrypt/index.js';
+import { ENCODING, NONCE_LENGTH, SCRYPT_LENGTH } from './constants.js';
+export function jsonDecryptData(encrypted, passphrase, encType = ENCODING) {
+    if (!encrypted) {
+        throw new Error('No encrypted data available to decode');
+    }
+    else if (encType.includes('xsalsa20-poly1305') && !passphrase) {
+        throw new Error('Password required to decode encrypted data');
+    }
+    let encoded = encrypted;
+    if (passphrase) {
+        let password;
+        if (encType.includes('scrypt')) {
+            const { params, salt } = scryptFromU8a(encrypted);
+            password = scryptEncode(passphrase, salt, params).password;
+            encrypted = encrypted.subarray(SCRYPT_LENGTH);
+        }
+        else {
+            password = stringToU8a(passphrase);
+        }
+        encoded = naclDecrypt(encrypted.subarray(NONCE_LENGTH), encrypted.subarray(0, NONCE_LENGTH), u8aFixLength(password, 256, true));
+    }
+    if (!encoded) {
+        throw new Error('Unable to decode using the supplied passphrase');
+    }
+    return encoded;
+}

package/json/encrypt.d.ts

@@ -0,0 +1,2 @@
+import type { EncryptedJson } from './types.js';
+export declare function jsonEncrypt(data: Uint8Array, contentType: string[], passphrase?: string | null): EncryptedJson;

package/json/encrypt.js

@@ -0,0 +1,15 @@
+import { u8aConcat } from '@pezkuwi/util';
+import { naclEncrypt } from '../nacl/index.js';
+import { scryptEncode, scryptToU8a } from '../scrypt/index.js';
+import { jsonEncryptFormat } from './encryptFormat.js';
+export function jsonEncrypt(data, contentType, passphrase) {
+    let isEncrypted = false;
+    let encoded = data;
+    if (passphrase) {
+        const { params, password, salt } = scryptEncode(passphrase);
+        const { encrypted, nonce } = naclEncrypt(encoded, password.subarray(0, 32));
+        isEncrypted = true;
+        encoded = u8aConcat(scryptToU8a(salt, params), nonce, encrypted);
+    }
+    return jsonEncryptFormat(encoded, contentType, isEncrypted);
+}

package/json/encryptFormat.d.ts

@@ -0,0 +1,2 @@
+import type { EncryptedJson } from './types.js';
+export declare function jsonEncryptFormat(encoded: Uint8Array, contentType: string[], isEncrypted: boolean): EncryptedJson;

package/json/encryptFormat.js

@@ -0,0 +1,14 @@
+import { base64Encode } from '../base64/index.js';
+import { ENCODING, ENCODING_NONE, ENCODING_VERSION } from './constants.js';
+export function jsonEncryptFormat(encoded, contentType, isEncrypted) {
+    return {
+        encoded: base64Encode(encoded),
+        encoding: {
+            content: contentType,
+            type: isEncrypted
+                ? ENCODING
+                : ENCODING_NONE,
+            version: ENCODING_VERSION
+        }
+    };
+}

package/json/index.d.ts

@@ -0,0 +1,4 @@
+export { jsonDecrypt } from './decrypt.js';
+export { jsonDecryptData } from './decryptData.js';
+export { jsonEncrypt } from './encrypt.js';
+export { jsonEncryptFormat } from './encryptFormat.js';

package/json/index.js

@@ -0,0 +1,4 @@
+export { jsonDecrypt } from './decrypt.js';
+export { jsonDecryptData } from './decryptData.js';
+export { jsonEncrypt } from './encrypt.js';
+export { jsonEncryptFormat } from './encryptFormat.js';