@pulse-compute/crypto 0.0.0 → 1.0.0-beta.2

package/dist/internal/verification.js

@@ -0,0 +1,273 @@
+import { CRYPTO_RESOURCE_LIMITS, CRYPTO_VERIFICATION_STATUSES, } from '../contracts.js';
+import { copyBytes, exactDataProperties, isOrdinaryObject, ownDataProperty, } from './data.js';
+const REQUEST_KEYS = new Set(['algorithm', 'key', 'data', 'tag']);
+const KEY_KEYS = new Set(['type', 'bytes']);
+const SIGNATURE_REQUEST_KEYS = new Set(['algorithm', 'key', 'data', 'signature']);
+const P256_KEY_KEYS = new Set(['type', 'bytes']);
+const JOSE_REQUEST_KEYS = new Set(['key', 'data', 'signature']);
+const JOSE_KEY_KEYS = new Set(['x', 'y']);
+const BASE64URL = /^[A-Za-z0-9_-]+$/;
+const P256_ORDER = Uint8Array.from([
+    0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00,
+    0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+    0xbc, 0xe6, 0xfa, 0xad, 0xa7, 0x17, 0x9e, 0x84,
+    0xf3, 0xb9, 0xca, 0xc2, 0xfc, 0x63, 0x25, 0x51,
+]);
+const RESULTS = Object.freeze(Object.fromEntries(CRYPTO_VERIFICATION_STATUSES.map((status) => [
+    status,
+    Object.freeze({ status }),
+])));
+export function verificationResult(status) {
+    return RESULTS[status];
+}
+function invalidInput() {
+    return Object.freeze({
+        ok: false,
+        result: verificationResult('invalid-input'),
+    });
+}
+function invalidKey() {
+    return Object.freeze({
+        ok: false,
+        result: verificationResult('invalid-key'),
+    });
+}
+function invalidSignatureInput() {
+    return Object.freeze({
+        ok: false,
+        result: verificationResult('invalid-input'),
+    });
+}
+function invalidSignatureKey() {
+    return Object.freeze({
+        ok: false,
+        result: verificationResult('invalid-key'),
+    });
+}
+function compareBigEndian(left, right) {
+    for (let index = 0; index < left.byteLength; index += 1) {
+        if (left[index] < right[index])
+            return -1;
+        if (left[index] > right[index])
+            return 1;
+    }
+    return 0;
+}
+function validP256Scalar(value) {
+    let nonZero = false;
+    for (const byte of value)
+        nonZero ||= byte !== 0;
+    return nonZero && compareBigEndian(value, P256_ORDER) < 0;
+}
+function validEs256Signature(signature) {
+    return signature.byteLength === CRYPTO_RESOURCE_LIMITS.es256SignatureBytes
+        && validP256Scalar(signature.subarray(0, 32))
+        && validP256Scalar(signature.subarray(32, 64));
+}
+function decodeCanonicalBase64url(value, expectedBytes) {
+    if (typeof value !== 'string'
+        || value.length === 0
+        || value.includes('=')
+        || !BASE64URL.test(value)
+        || value.length % 4 === 1)
+        return undefined;
+    const padded = value.replace(/-/g, '+').replace(/_/g, '/')
+        + '='.repeat((4 - value.length % 4) % 4);
+    let binary;
+    try {
+        binary = atob(padded);
+    }
+    catch {
+        return undefined;
+    }
+    const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    if (bytes.byteLength !== expectedBytes)
+        return undefined;
+    let canonical = '';
+    for (const byte of bytes)
+        canonical += String.fromCharCode(byte);
+    canonical = btoa(canonical)
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/u, '');
+    return canonical === value ? bytes : undefined;
+}
+export function normalizeMacVerifyRequest(value) {
+    if (!isOrdinaryObject(value) || !exactDataProperties(value, REQUEST_KEYS)) {
+        return invalidInput();
+    }
+    const algorithm = ownDataProperty(value, 'algorithm').value;
+    if (algorithm !== 'HS256')
+        return invalidInput();
+    const keyValue = ownDataProperty(value, 'key').value;
+    if (!isOrdinaryObject(keyValue) || !exactDataProperties(keyValue, KEY_KEYS)) {
+        return invalidKey();
+    }
+    if (ownDataProperty(keyValue, 'type').value !== 'hmac-key-bytes') {
+        return invalidKey();
+    }
+    const keyBytes = copyBytes(ownDataProperty(keyValue, 'bytes').value);
+    if (!keyBytes
+        || keyBytes.byteLength < CRYPTO_RESOURCE_LIMITS.hmacKeyBytesMinimum
+        || keyBytes.byteLength > CRYPTO_RESOURCE_LIMITS.hmacKeyBytesMaximum) {
+        return invalidKey();
+    }
+    const data = copyBytes(ownDataProperty(value, 'data').value);
+    const tag = copyBytes(ownDataProperty(value, 'tag').value);
+    if (!data
+        || data.byteLength > CRYPTO_RESOURCE_LIMITS.macDataBytesMaximum
+        || !tag
+        || tag.byteLength !== CRYPTO_RESOURCE_LIMITS.hs256TagBytes) {
+        return invalidInput();
+    }
+    return Object.freeze({
+        ok: true,
+        request: Object.freeze({
+            algorithm,
+            key: Object.freeze({
+                type: 'hmac-key-bytes',
+                bytes: keyBytes,
+            }),
+            data,
+            tag,
+        }),
+    });
+}
+export function normalizeSignatureVerifyRequest(value) {
+    if (!isOrdinaryObject(value)
+        || !exactDataProperties(value, SIGNATURE_REQUEST_KEYS))
+        return invalidSignatureInput();
+    if (ownDataProperty(value, 'algorithm').value !== 'ES256') {
+        return invalidSignatureInput();
+    }
+    const keyValue = ownDataProperty(value, 'key').value;
+    if (!isOrdinaryObject(keyValue)
+        || !exactDataProperties(keyValue, P256_KEY_KEYS)
+        || ownDataProperty(keyValue, 'type').value !== 'p256-public-key-bytes')
+        return invalidSignatureKey();
+    const keyBytes = copyBytes(ownDataProperty(keyValue, 'bytes').value);
+    if (!keyBytes
+        || keyBytes.byteLength !== CRYPTO_RESOURCE_LIMITS.es256PublicKeyBytes)
+        return invalidSignatureKey();
+    const data = copyBytes(ownDataProperty(value, 'data').value);
+    const signature = copyBytes(ownDataProperty(value, 'signature').value);
+    if (!data
+        || data.byteLength > CRYPTO_RESOURCE_LIMITS.es256SigningInputBytesMaximum
+        || !signature
+        || !validEs256Signature(signature)) {
+        keyBytes.fill(0);
+        return invalidSignatureInput();
+    }
+    return Object.freeze({
+        ok: true,
+        request: Object.freeze({
+            algorithm: 'ES256',
+            key: Object.freeze({
+                type: 'p256-public-key-bytes',
+                bytes: keyBytes,
+            }),
+            data,
+            signature,
+        }),
+    });
+}
+export function normalizeEs256JoseVerifyRequest(value) {
+    if (!isOrdinaryObject(value) || !exactDataProperties(value, JOSE_REQUEST_KEYS)) {
+        return invalidSignatureInput();
+    }
+    const keyValue = ownDataProperty(value, 'key').value;
+    if (!isOrdinaryObject(keyValue) || !exactDataProperties(keyValue, JOSE_KEY_KEYS)) {
+        return invalidSignatureKey();
+    }
+    const normalizedKey = normalizeP256PublicKeyCoordinates(keyValue);
+    if (!normalizedKey.ok)
+        return normalizedKey;
+    const signature = decodeCanonicalBase64url(ownDataProperty(value, 'signature').value, CRYPTO_RESOURCE_LIMITS.es256SignatureBytes);
+    if (!signature || !validEs256Signature(signature)) {
+        normalizedKey.key.bytes.fill(0);
+        return invalidSignatureInput();
+    }
+    const data = copyBytes(ownDataProperty(value, 'data').value);
+    if (!data
+        || data.byteLength > CRYPTO_RESOURCE_LIMITS.es256SigningInputBytesMaximum) {
+        normalizedKey.key.bytes.fill(0);
+        return invalidSignatureInput();
+    }
+    return Object.freeze({
+        ok: true,
+        request: Object.freeze({
+            algorithm: 'ES256',
+            key: normalizedKey.key,
+            data,
+            signature,
+        }),
+    });
+}
+export function normalizeP256PublicKeyCoordinates(value) {
+    if (!isOrdinaryObject(value) || !exactDataProperties(value, JOSE_KEY_KEYS)) {
+        return Object.freeze({
+            ok: false,
+            result: verificationResult('invalid-key'),
+        });
+    }
+    const x = decodeCanonicalBase64url(ownDataProperty(value, 'x').value, 32);
+    const y = decodeCanonicalBase64url(ownDataProperty(value, 'y').value, 32);
+    if (!x || !y) {
+        if (x)
+            x.fill(0);
+        if (y)
+            y.fill(0);
+        return Object.freeze({
+            ok: false,
+            result: verificationResult('invalid-key'),
+        });
+    }
+    const keyBytes = new Uint8Array(CRYPTO_RESOURCE_LIMITS.es256PublicKeyBytes);
+    keyBytes.set(x, 0);
+    keyBytes.set(y, 32);
+    x.fill(0);
+    y.fill(0);
+    return Object.freeze({
+        ok: true,
+        key: Object.freeze({
+            type: 'p256-public-key-bytes',
+            bytes: keyBytes,
+        }),
+    });
+}
+export function normalizeVerificationResult(value) {
+    if (!isOrdinaryObject(value) || !exactDataProperties(value, new Set(['status']))) {
+        return verificationResult('realization-failure');
+    }
+    const status = ownDataProperty(value, 'status').value;
+    if (typeof status !== 'string'
+        || !CRYPTO_VERIFICATION_STATUSES.includes(status)) {
+        return verificationResult('realization-failure');
+    }
+    return verificationResult(status);
+}
+export function redactMacVerifyRequest(request) {
+    return Object.freeze({
+        algorithm: request.algorithm,
+        key: Object.freeze({
+            type: 'hmac-key-bytes',
+            compatibleAlgorithms: Object.freeze(['HS256']),
+            identity: '[redacted]',
+        }),
+        data: '[redacted]',
+        tag: '[redacted]',
+    });
+}
+export function redactSignatureVerifyRequest(request) {
+    return Object.freeze({
+        algorithm: request.algorithm,
+        key: Object.freeze({
+            type: 'p256-public-key-bytes',
+            compatibleAlgorithms: Object.freeze(['ES256']),
+            identity: '[redacted]',
+        }),
+        data: '[redacted]',
+        signature: '[redacted]',
+    });
+}
+//# sourceMappingURL=verification.js.map

package/dist/internal/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/internal/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAO7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAClF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACjD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAChE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC;IACjC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CAC/C,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAC9C,4BAA4B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3C,MAAM;IACN,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC,CACH,CAAyE,CAAC;AAoD3E,MAAM,UAAU,kBAAkB,CAChC,MAAgC;IAEhC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,kBAAkB,CAAC,eAAe,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,kBAAkB,CAAC,eAAe,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB,EAAE,KAAiB;IAC3D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,OAAO,KAAK,IAAI,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,IAAI,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAqB;IAChD,OAAO,SAAS,CAAC,UAAU,KAAK,sBAAsB,CAAC,mBAAmB;WACrE,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;WAC1C,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc,EACd,aAAqB;IAErB,IACE,OAAO,KAAK,KAAK,QAAQ;WACtB,KAAK,CAAC,MAAM,KAAK,CAAC;WAClB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;WACnB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;WACtB,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;UACtD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAC3B,MAAM,EACN,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CACvC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjE,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAc;IAEd,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1E,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC;IAC5D,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IAEjD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;QACjE,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;IACrE,IACE,CAAC,QAAQ;WACN,QAAQ,CAAC,UAAU,GAAG,sBAAsB,CAAC,mBAAmB;WAChE,QAAQ,CAAC,UAAU,GAAG,sBAAsB,CAAC,mBAAmB,EACnE,CAAC;QACD,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,IACE,CAAC,IAAI;WACF,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC,mBAAmB;WAC5D,CAAC,GAAG;WACJ,GAAG,CAAC,UAAU,KAAK,sBAAsB,CAAC,aAAa,EAC1D,CAAC;QACD,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,SAAS;YACT,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBACjB,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,QAAQ;aAChB,CAAC;YACF,IAAI;YACJ,GAAG;SACJ,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAAc;IAEd,IACE,CAAC,gBAAgB,CAAC,KAAK,CAAC;WACrB,CAAC,mBAAmB,CAAC,KAAK,EAAE,sBAAsB,CAAC;QACtD,OAAO,qBAAqB,EAAE,CAAC;IACjC,IAAI,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC1D,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC;IACrD,IACE,CAAC,gBAAgB,CAAC,QAAQ,CAAC;WACxB,CAAC,mBAAmB,CAAC,QAAQ,EAAE,aAAa,CAAC;WAC7C,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,KAAK,uBAAuB;QACtE,OAAO,mBAAmB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;IACrE,IACE,CAAC,QAAQ;WACN,QAAQ,CAAC,UAAU,KAAK,sBAAsB,CAAC,mBAAmB;QACrE,OAAO,mBAAmB,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC;IACvE,IACE,CAAC,IAAI;WACF,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC,6BAA6B;WACtE,CAAC,SAAS;WACV,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAClC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,SAAS,EAAE,OAAO;YAClB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,QAAQ;aAChB,CAAC;YACF,IAAI;YACJ,SAAS;SACV,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAA2B;IAE3B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC/E,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;QACjF,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,aAAa,GAAG,iCAAiC,CACrD,QAA+C,CAChD,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC;IAC5C,MAAM,SAAS,GAAG,wBAAwB,CACxC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,KAAK,EACzC,sBAAsB,CAAC,mBAAmB,CAC3C,CAAC;IACF,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,IACE,CAAC,IAAI;WACF,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC,6BAA6B,EACzE,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,SAAS,EAAE,OAAO;YAClB,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,IAAI;YACJ,SAAS;SACV,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAA+B;IAE/B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;QAC3E,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,GAAG,wBAAwB,CAChC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,EACjC,EAAE,CACH,CAAC;IACF,MAAM,CAAC,GAAG,wBAAwB,CAChC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,EACjC,EAAE,CACH,CAAC;IACF,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACb,IAAI,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IAC5E,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,QAAQ;SAChB,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,OAAO,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC;IACtD,IACE,OAAO,MAAM,KAAK,QAAQ;WACvB,CAAE,4BAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxE,CAAC;QACD,OAAO,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAkC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAsD;IAWtD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,gBAAgB;YACtB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAU,CAAC;YACvD,QAAQ,EAAE,YAAY;SACvB,CAAC;QACF,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,YAAY;KAClB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAkE;IAWlE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,uBAAuB;YAC7B,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAU,CAAC;YACvD,QAAQ,EAAE,YAAY;SACvB,CAAC;QACF,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,YAAY;KACxB,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,16 +1,48 @@
 {
   "name": "@pulse-compute/crypto",
-  "version": "0.0.0",
-  "description": "Inert bootstrap placeholder for @pulse-compute/crypto.",
+  "version": "1.0.0-beta.2",
   "license": "Apache-2.0",
+  "engines": {
+    "node": "^22.14.0 || ^24.0.0"
+  },
+  "description": "Provider-neutral cryptographic verification contracts for Pulse.",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./pulsewasm-native": "./pulsewasm.native.cjs",
+    "./provider": "./src/provider.cjs"
+  },
   "files": [
+    "as",
+    "dist",
+    "pulsewasm.native.cjs",
     "README.md",
+    "src/provider.cjs",
     "LICENSE",
     "NOTICE"
   ],
   "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/",
-    "tag": "bootstrap"
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pulse-compute/pulse.git",
+    "directory": "packages/crypto"
+  },
+  "bugs": {
+    "url": "https://github.com/pulse-compute/pulse/issues"
+  },
+  "homepage": "https://pulsecompute.io/v1.0.0-beta.2/packages/crypto/",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "build": "tsc -b",
+    "test": "corepack pnpm --dir ../.. exec vitest run packages/crypto/test",
+    "test:types": "tsc -p tsconfig.types.json --noEmit"
   }
-}
+}

package/pulsewasm.native.cjs

@@ -0,0 +1,127 @@
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const packageManifest = require('./package.json');
+
+const CRYPTO_GUEST_SOURCE_CONTRACT_VERSION = 'pulse.crypto-guest-source.v1';
+const GUEST_UNIT_CONTRIBUTION_VERSION = 'pulse.guest-unit-contribution.v1';
+const sourceRelativeFile = 'as/pulse-hmac-as.ts';
+const sourceFile = path.join(__dirname, sourceRelativeFile);
+
+function sha256(value) {
+  return crypto.createHash('sha256').update(value).digest('hex');
+}
+
+function pulseHmacAssemblyScriptSource(algorithm = 'HS256') {
+  if (!['HS256', 'SHA-256', 'HMAC-SHA256'].includes(algorithm)) throw new TypeError('Unsupported Crypto guest-source algorithm.');
+  const source = fs.readFileSync(sourceFile, 'utf8');
+  return Object.freeze({
+    version: CRYPTO_GUEST_SOURCE_CONTRACT_VERSION,
+    id: 'pulse-hmac-as',
+    owner: '@pulse-compute/crypto',
+    packageVersion: packageManifest.version,
+    realization: 'guest-source:pulse-hmac-as',
+    kind: 'guest-source',
+    backend: 'pulse-hmac-as',
+    backendVersion: 'pulse-hmac-as.v1',
+    algorithm,
+    language: 'assemblyscript',
+    license: 'Apache-2.0',
+    origin: 'package-source',
+    sourceIncluded: true,
+    provenance: Object.freeze([
+      'NIST FIPS 180-4',
+      'RFC 2104',
+      'RFC 4231'
+    ]),
+    sourceFile: sourceRelativeFile,
+    source,
+    sourceBytes: Buffer.byteLength(source),
+    sourceSha256: sha256(source),
+    imports: Object.freeze([]),
+    exports: Object.freeze([
+      'pulse_crypto_hs256_verify',
+      'pulse_crypto_sha256_digest',
+      'pulse_crypto_bytes_frame_v1',
+      'pulse_crypto_sha256_bytes_v1',
+      'pulse_crypto_hmac_sha256_bytes_v1'
+    ]),
+    resourceLimits: Object.freeze({
+      hmacKeyBytesMinimum: 32,
+      hmacKeyBytesMaximum: 4 * 1024,
+      macDataBytesMaximum: 1024 * 1024,
+      hs256TagBytes: 32,
+      byteOperationKeyBytesMaximum: 8192,
+      byteOperationDataBytesMaximum: 32768,
+      byteOperationOutputBytes: 32,
+      byteOperationFrameBytes: 40992
+    }),
+    resultCodes: Object.freeze({
+      valid: 1,
+      invalidAuthenticator: 0,
+      invalidKey: -1,
+      invalidInput: -2,
+      realizationFailure: -3
+    }),
+    comparison: Object.freeze({
+      mode: 'constant-time-full-tag-scan',
+      bytes: 32,
+      earlyMismatchReturn: false
+    }),
+    automaticFallback: false
+  });
+}
+
+function bindNativeDigestMac(moduleExports) {
+  const memory = moduleExports && moduleExports.memory;
+  const names = ['pulse_crypto_bytes_frame_v1', 'pulse_crypto_sha256_bytes_v1', 'pulse_crypto_hmac_sha256_bytes_v1'];
+  if (!(memory instanceof WebAssembly.Memory) || names.some((name) => typeof moduleExports[name] !== 'function')) {
+    throw new TypeError('Native Crypto digest/MAC exports are unavailable.');
+  }
+  const frameBytes = 8192 + 32768 + 32;
+  function run(data, key) {
+    if (!(data instanceof Uint8Array) || data.length > 32768
+      || (key !== undefined && (!(key instanceof Uint8Array) || key.length > 8192))) {
+      throw new TypeError('Native Crypto digest/MAC input exceeds its byte contract.');
+    }
+    const pointer = moduleExports.pulse_crypto_bytes_frame_v1() >>> 0;
+    if (pointer + frameBytes > memory.buffer.byteLength) throw new TypeError('Native Crypto frame is outside memory.');
+    const dataPointer = pointer + 8192;
+    const outputPointer = dataPointer + 32768;
+    try {
+      const view = new Uint8Array(memory.buffer);
+      view.set(data, dataPointer);
+      if (key !== undefined) view.set(key, pointer);
+      const code = key === undefined
+        ? moduleExports.pulse_crypto_sha256_bytes_v1(dataPointer, data.length, outputPointer, 32)
+        : moduleExports.pulse_crypto_hmac_sha256_bytes_v1(pointer, key.length, dataPointer, data.length, outputPointer, 32);
+      if (code !== 1) throw new TypeError('Native Crypto digest/MAC realization failed.');
+      return new Uint8Array(memory.buffer, outputPointer, 32).slice();
+    } finally {
+      // The Wasm allocator can grow memory while hashing: acquire a fresh view.
+      new Uint8Array(memory.buffer, pointer, frameBytes).fill(0);
+    }
+  }
+  return Object.freeze({ sha256: (data) => run(data), hmacSha256: (key, data) => run(data, key) });
+}
+
+function pulseEs256GuestUnit() {
+  return Object.freeze({
+    version: GUEST_UNIT_CONTRIBUTION_VERSION,
+    id: 'pulse.crypto.es256.rustcrypto-p256.v1',
+    manifest: './guests/es256-rustcrypto/pulse.guest-unit.json',
+    owner: packageManifest.name,
+    packageVersion: packageManifest.version,
+    origin: 'package-prebuilt'
+  });
+}
+
+module.exports = Object.freeze({
+  CRYPTO_GUEST_SOURCE_CONTRACT_VERSION,
+  GUEST_UNIT_CONTRIBUTION_VERSION,
+  pulseHmacAssemblyScriptSource,
+  bindNativeDigestMac,
+  pulseEs256GuestUnit
+});

package/src/provider.cjs

@@ -0,0 +1,43 @@
+'use strict';
+
+// Trusted provider byte-output seam. JWT verification keeps its own key limits.
+const IMPLEMENTATIONS = Object.freeze({
+  'SHA-256': 'webcrypto.subtle.sha-256-bytes.v1',
+  'HMAC-SHA256': 'webcrypto.subtle.hmac-sha-256-bytes.v1'
+});
+function snapshot(value, maximum) {
+  if (!(value instanceof Uint8Array) || value.byteLength > maximum) throw new TypeError('Crypto byte input is outside its bound.');
+  return new Uint8Array(value);
+}
+function result(value) {
+  if (!(value instanceof ArrayBuffer) || value.byteLength !== 32) throw new TypeError('Crypto byte output is invalid.');
+  return new Uint8Array(value);
+}
+function bindJavascriptDigestMac(algorithms, subtle = globalThis.crypto && globalThis.crypto.subtle) {
+  if (!Array.isArray(algorithms) || new Set(algorithms).size !== algorithms.length || algorithms.some((name) => !Object.hasOwn(IMPLEMENTATIONS, name))) throw new TypeError('Crypto requires explicit supported byte algorithms.');
+  if (!subtle || algorithms.includes('SHA-256') && typeof subtle.digest !== 'function'
+    || algorithms.includes('HMAC-SHA256') && (typeof subtle.sign !== 'function' || typeof subtle.importKey !== 'function')) throw new TypeError('Selected Web Crypto byte realization is unavailable.');
+  const bytes = {};
+  if (algorithms.includes('SHA-256')) bytes.sha256 = async (input) => {
+    const data = snapshot(input, 32768);
+    try { return result(await subtle.digest({ name: 'SHA-256' }, data)); }
+    finally { data.fill(0); }
+  };
+  if (algorithms.includes('HMAC-SHA256')) bytes.hmacSha256 = async (keyInput, input) => {
+    let key = snapshot(keyInput, 8192);
+    let data;
+    try {
+      data = snapshot(input, 32768);
+      // HMAC pads an empty key to a zero block (RFC 2104). Web Crypto rejects
+      // a zero-length import; the equivalent padded block retains Native parity.
+      if (key.length === 0) key = new Uint8Array(64);
+      const imported = await subtle.importKey('raw', key, { name: 'HMAC', hash: 'SHA-256', length: key.length * 8 }, false, ['sign']);
+      return result(await subtle.sign({ name: 'HMAC' }, imported, data));
+    } finally { key.fill(0); if (data) data.fill(0); }
+  };
+  return Object.freeze({ bytes: Object.freeze(bytes), realization: Object.freeze({
+    target: 'javascript', automaticFallback: false,
+    algorithms: Object.freeze(algorithms.map((algorithm) => Object.freeze({ algorithm, realization: 'runtime-builtin', implementation: IMPLEMENTATIONS[algorithm], available: true, automaticFallback: false })))
+  }) });
+}
+module.exports = Object.freeze({ IMPLEMENTATIONS, bindJavascriptDigestMac });