@reallyme/crypto 0.1.3 → 0.1.5

package/dist/aead.d.ts

@@ -1,5 +1,8 @@
 import type { ReallyMeAeadAlgorithm } from "./algorithms.js";
 export declare const AEAD_KEY_LENGTH = 32;
+export declare const AES_128_GCM_KEY_LENGTH = 16;
+export declare const AES_192_GCM_KEY_LENGTH = 24;
+export declare const AES_256_GCM_KEY_LENGTH = 32;
 export declare const AEAD_NONCE_LENGTH = 12;
 export declare const XCHACHA20_POLY1305_NONCE_LENGTH = 24;
 export declare const AEAD_TAG_LENGTH = 16;

package/dist/aead.js

@@ -5,32 +5,53 @@ import { ReallyMeCryptoError } from "./errors.js";
 import { ensureBytes } from "./validateBytes.js";
 import { requireReallyMeWasmProvider } from "./wasmProvider.js";
 export const AEAD_KEY_LENGTH = 32;
+export const AES_128_GCM_KEY_LENGTH = 16;
+export const AES_192_GCM_KEY_LENGTH = 24;
+export const AES_256_GCM_KEY_LENGTH = 32;
 export const AEAD_NONCE_LENGTH = 12;
 export const XCHACHA20_POLY1305_NONCE_LENGTH = 24;
 export const AEAD_TAG_LENGTH = 16;
 const aeadSuite = (algorithm) => {
     const provider = requireReallyMeWasmProvider();
     switch (algorithm) {
+        case "AES-128-GCM":
+            return {
+                keyLength: AES_128_GCM_KEY_LENGTH,
+                nonceLength: AEAD_NONCE_LENGTH,
+                seal: provider.aes128GcmSeal,
+                open: provider.aes128GcmOpen,
+            };
+        case "AES-192-GCM":
+            return {
+                keyLength: AES_192_GCM_KEY_LENGTH,
+                nonceLength: AEAD_NONCE_LENGTH,
+                seal: provider.aes192GcmSeal,
+                open: provider.aes192GcmOpen,
+            };
         case "AES-256-GCM":
             return {
+                keyLength: AES_256_GCM_KEY_LENGTH,
                 nonceLength: AEAD_NONCE_LENGTH,
                 seal: provider.aes256GcmSeal,
                 open: provider.aes256GcmOpen,
             };
         case "AES-256-GCM-SIV":
             return {
+                keyLength: AES_256_GCM_KEY_LENGTH,
                 nonceLength: AEAD_NONCE_LENGTH,
                 seal: provider.aes256GcmSivSeal,
                 open: provider.aes256GcmSivOpen,
             };
         case "ChaCha20-Poly1305":
             return {
+                keyLength: AES_256_GCM_KEY_LENGTH,
                 nonceLength: AEAD_NONCE_LENGTH,
                 seal: provider.chacha20Poly1305Seal,
                 open: provider.chacha20Poly1305Open,
             };
         case "XChaCha20-Poly1305":
             return {
+                keyLength: AES_256_GCM_KEY_LENGTH,
                 nonceLength: XCHACHA20_POLY1305_NONCE_LENGTH,
                 seal: provider.xchacha20Poly1305Seal,
                 open: provider.xchacha20Poly1305Open,
@@ -46,13 +67,13 @@ const requireBytesOutput = (value) => {
 export const ReallyMeAead = {
     seal(algorithm, key, nonce, aad, plaintext) {
         const suite = aeadSuite(algorithm);
-        ensureBytes(key, AEAD_KEY_LENGTH);
+        ensureBytes(key, suite.keyLength);
         ensureBytes(nonce, suite.nonceLength);
         return requireBytesOutput(suite.seal(key, nonce, aad, plaintext));
     },
     open(algorithm, key, nonce, aad, ciphertextWithTag) {
         const suite = aeadSuite(algorithm);
-        ensureBytes(key, AEAD_KEY_LENGTH);
+        ensureBytes(key, suite.keyLength);
         ensureBytes(nonce, suite.nonceLength);
         if (ciphertextWithTag.length < AEAD_TAG_LENGTH) {
             throw new ReallyMeCryptoError("invalid-input");

package/dist/algorithms.d.ts

@@ -2,15 +2,15 @@ export declare const REALLYME_SIGNATURE_ALGORITHMS: readonly ["Ed25519", "ECDSA-
 export type ReallyMeSignatureAlgorithm = (typeof REALLYME_SIGNATURE_ALGORITHMS)[number];
 export declare const REALLYME_HASH_ALGORITHMS: readonly ["SHA2-256", "SHA2-384", "SHA2-512", "SHA3-224", "SHA3-256", "SHA3-384", "SHA3-512"];
 export type ReallyMeHashAlgorithm = (typeof REALLYME_HASH_ALGORITHMS)[number];
-export declare const REALLYME_AEAD_ALGORITHMS: readonly ["AES-256-GCM", "AES-256-GCM-SIV", "ChaCha20-Poly1305", "XChaCha20-Poly1305"];
+export declare const REALLYME_AEAD_ALGORITHMS: readonly ["AES-128-GCM", "AES-192-GCM", "AES-256-GCM", "AES-256-GCM-SIV", "ChaCha20-Poly1305", "XChaCha20-Poly1305"];
 export type ReallyMeAeadAlgorithm = (typeof REALLYME_AEAD_ALGORITHMS)[number];
 export declare const REALLYME_KEM_ALGORITHMS: readonly ["ML-KEM-512", "ML-KEM-768", "ML-KEM-1024", "X-Wing-768", "X-Wing-1024"];
 export type ReallyMeKemAlgorithm = (typeof REALLYME_KEM_ALGORITHMS)[number];
-export declare const REALLYME_KEY_AGREEMENT_ALGORITHMS: readonly ["X25519", "P-256-ECDH"];
+export declare const REALLYME_KEY_AGREEMENT_ALGORITHMS: readonly ["X25519", "P-256-ECDH", "P-384-ECDH", "P-521-ECDH"];
 export type ReallyMeKeyAgreementAlgorithm = (typeof REALLYME_KEY_AGREEMENT_ALGORITHMS)[number];
 export declare const REALLYME_MAC_ALGORITHMS: readonly ["HMAC-SHA-256", "HMAC-SHA-512"];
 export type ReallyMeMacAlgorithm = (typeof REALLYME_MAC_ALGORITHMS)[number];
-export declare const REALLYME_KDF_ALGORITHMS: readonly ["HKDF-SHA256", "Argon2id", "PBKDF2-HMAC-SHA-256", "PBKDF2-HMAC-SHA-512"];
+export declare const REALLYME_KDF_ALGORITHMS: readonly ["HKDF-SHA256", "Argon2id", "PBKDF2-HMAC-SHA-256", "PBKDF2-HMAC-SHA-512", "JWA-CONCAT-KDF-SHA256"];
 export type ReallyMeKdfAlgorithm = (typeof REALLYME_KDF_ALGORITHMS)[number];
 export declare const REALLYME_KEY_WRAP_ALGORITHMS: readonly ["AES-256-KW"];
 export type ReallyMeKeyWrapAlgorithm = (typeof REALLYME_KEY_WRAP_ALGORITHMS)[number];

package/dist/algorithms.js

@@ -31,6 +31,8 @@ export const REALLYME_HASH_ALGORITHMS = [
     "SHA3-512",
 ];
 export const REALLYME_AEAD_ALGORITHMS = [
+    "AES-128-GCM",
+    "AES-192-GCM",
     "AES-256-GCM",
     "AES-256-GCM-SIV",
     "ChaCha20-Poly1305",
@@ -46,6 +48,8 @@ export const REALLYME_KEM_ALGORITHMS = [
 export const REALLYME_KEY_AGREEMENT_ALGORITHMS = [
     "X25519",
     "P-256-ECDH",
+    "P-384-ECDH",
+    "P-521-ECDH",
 ];
 export const REALLYME_MAC_ALGORITHMS = [
     "HMAC-SHA-256",
@@ -56,6 +60,7 @@ export const REALLYME_KDF_ALGORITHMS = [
     "Argon2id",
     "PBKDF2-HMAC-SHA-256",
     "PBKDF2-HMAC-SHA-512",
+    "JWA-CONCAT-KDF-SHA256",
 ];
 export const REALLYME_KEY_WRAP_ALGORITHMS = ["AES-256-KW"];
 export const REALLYME_HPKE_SUITES = [

package/dist/cryptoFacade.d.ts

@@ -33,6 +33,7 @@ export declare const ReallyMeCrypto: {
     readonly verifyMac: (algorithm: ReallyMeMacAlgorithm, tag: Uint8Array, key: Uint8Array, message: Uint8Array) => boolean;
     readonly deriveKey: (algorithm: ReallyMeKdfAlgorithm, password: Uint8Array, salt: Uint8Array, iterations: number, outputLength: number) => Uint8Array;
     readonly deriveHkdf: (algorithm: ReallyMeKdfAlgorithm, inputKeyMaterial: Uint8Array, salt: Uint8Array, info: Uint8Array, outputLength: number) => Uint8Array;
+    readonly deriveJwaConcatKdfSha256: (algorithm: ReallyMeKdfAlgorithm, sharedSecret: Uint8Array, algorithmId: Uint8Array, partyUInfo: Uint8Array, partyVInfo: Uint8Array, outputLength: number) => Uint8Array;
     readonly wrapKey: (algorithm: ReallyMeKeyWrapAlgorithm, wrappingKey: Uint8Array, keyToWrap: Uint8Array) => Uint8Array;
     readonly unwrapKey: (algorithm: ReallyMeKeyWrapAlgorithm, wrappingKey: Uint8Array, wrappedKey: Uint8Array) => Uint8Array;
     readonly generateKeyPair: (algorithm: ReallyMeSignatureAlgorithm) => ReallyMeSignatureKeyPair;

package/dist/cryptoFacade.js

@@ -11,12 +11,15 @@ import { ReallyMeCryptoError } from "./errors.js";
 import { ReallyMeHkdf } from "./hkdf.js";
 import { ReallyMeHmac } from "./hmac.js";
 import { ReallyMeHpke } from "./hpke.js";
+import { ReallyMeJwaConcatKdf } from "./jwaConcatKdf.js";
 import { ReallyMeMlDsa } from "./mlDsa.js";
 import { ReallyMeMlKem } from "./mlKem.js";
 import { ReallyMeP256Ecdsa } from "./p256Ecdsa.js";
 import { ReallyMeP256Ecdh } from "./p256Ecdh.js";
 import { ReallyMeP384Ecdsa } from "./p384Ecdsa.js";
+import { ReallyMeP384Ecdh } from "./p384Ecdh.js";
 import { ReallyMeP521Ecdsa } from "./p521Ecdsa.js";
+import { ReallyMeP521Ecdh } from "./p521Ecdh.js";
 import { ReallyMePbkdf2 } from "./pbkdf2.js";
 import { ReallyMeRsa } from "./rsa.js";
 import { ReallyMeSecp256k1 } from "./secp256k1.js";
@@ -57,6 +60,8 @@ export const ReallyMeCrypto = {
     },
     seal(algorithm, key, nonce, aad, plaintext) {
         switch (algorithm) {
+            case "AES-128-GCM":
+            case "AES-192-GCM":
             case "AES-256-GCM":
             case "AES-256-GCM-SIV":
             case "ChaCha20-Poly1305":
@@ -68,6 +73,8 @@ export const ReallyMeCrypto = {
     },
     open(algorithm, key, nonce, aad, ciphertextWithTag) {
         switch (algorithm) {
+            case "AES-128-GCM":
+            case "AES-192-GCM":
             case "AES-256-GCM":
             case "AES-256-GCM-SIV":
             case "ChaCha20-Poly1305":
@@ -117,6 +124,20 @@ export const ReallyMeCrypto = {
                 return ReallyMeHkdf.deriveSha256(inputKeyMaterial, salt, info, outputLength);
             case "Argon2id":
             case "PBKDF2-HMAC-SHA-256":
+            case "PBKDF2-HMAC-SHA-512":
+            case "JWA-CONCAT-KDF-SHA256":
+                throw new ReallyMeCryptoError("unsupported-algorithm");
+            default:
+                throw new ReallyMeCryptoError("unsupported-algorithm");
+        }
+    },
+    deriveJwaConcatKdfSha256(algorithm, sharedSecret, algorithmId, partyUInfo, partyVInfo, outputLength) {
+        switch (algorithm) {
+            case "JWA-CONCAT-KDF-SHA256":
+                return ReallyMeJwaConcatKdf.deriveSha256(sharedSecret, algorithmId, partyUInfo, partyVInfo, outputLength);
+            case "Argon2id":
+            case "HKDF-SHA256":
+            case "PBKDF2-HMAC-SHA-256":
             case "PBKDF2-HMAC-SHA-512":
                 throw new ReallyMeCryptoError("unsupported-algorithm");
             default:
@@ -165,6 +186,9 @@ export const ReallyMeCrypto = {
         }
     },
     deriveKeyPair(algorithm, secretKey) {
+        // Import an existing secret and reconstruct its public key. Do not use
+        // this as key generation from passwords or other low-entropy input; use
+        // generateKeyPair for new keys, or a protocol-approved KDF before import.
         if (algorithm === ED25519) {
             return ReallyMeEd25519.deriveKeyPair(secretKey);
         }
@@ -183,6 +207,10 @@ export const ReallyMeCrypto = {
             case "ML-DSA-65":
             case "ML-DSA-87":
                 return ReallyMeMlDsa.deriveKeyPair(algorithm, secretKey);
+            case "SLH-DSA-SHA2-128s":
+                // SLH-DSA deterministic derivation uses three FIPS seed components,
+                // so it deliberately does not fit this single-secret import shape.
+                throw new ReallyMeCryptoError("unsupported-algorithm");
             default:
                 throw new ReallyMeCryptoError("unsupported-algorithm");
         }
@@ -255,6 +283,10 @@ export const ReallyMeCrypto = {
                 return ReallyMeX25519.deriveSharedSecret(publicKey, secretKey);
             case "P-256-ECDH":
                 return ReallyMeP256Ecdh.deriveSharedSecret(publicKey, secretKey);
+            case "P-384-ECDH":
+                return ReallyMeP384Ecdh.deriveSharedSecret(publicKey, secretKey);
+            case "P-521-ECDH":
+                return ReallyMeP521Ecdh.deriveSharedSecret(publicKey, secretKey);
             default:
                 throw new ReallyMeCryptoError("unsupported-algorithm");
         }
@@ -265,6 +297,10 @@ export const ReallyMeCrypto = {
                 return ReallyMeX25519.deriveKeyPair(secretKey);
             case "P-256-ECDH":
                 return ReallyMeP256Ecdh.deriveKeyPair(secretKey);
+            case "P-384-ECDH":
+                return ReallyMeP384Ecdh.deriveKeyPair(secretKey);
+            case "P-521-ECDH":
+                return ReallyMeP521Ecdh.deriveKeyPair(secretKey);
             default:
                 throw new ReallyMeCryptoError("unsupported-algorithm");
         }

package/dist/ed25519.d.ts

@@ -16,7 +16,12 @@ export declare const ReallyMeEd25519: {
         publicKey: Uint8Array;
         secretKey: Uint8Array;
     };
-    /** Derives the Ed25519 keypair from a 32-byte seed. */
+    /**
+     * Reconstructs an Ed25519 keypair from stored 32-byte secret material.
+     *
+     * This is an import path, not password-based key generation. Use
+     * `generateKeyPair` for fresh keys.
+     */
     readonly deriveKeyPair: (secretKey: Uint8Array) => {
         publicKey: Uint8Array;
         secretKey: Uint8Array;

package/dist/ed25519.js

@@ -24,7 +24,12 @@ export const ReallyMeEd25519 = {
             secretKey,
         };
     },
-    /** Derives the Ed25519 keypair from a 32-byte seed. */
+    /**
+     * Reconstructs an Ed25519 keypair from stored 32-byte secret material.
+     *
+     * This is an import path, not password-based key generation. Use
+     * `generateKeyPair` for fresh keys.
+     */
     deriveKeyPair(secretKey) {
         return {
             publicKey: this.derivePublicKey(secretKey),

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { ReallyMeCryptoError } from "./errors.js";
 export type { ReallyMeCryptoErrorCode } from "./errors.js";
 export { REALLYME_AEAD_ALGORITHMS, REALLYME_HASH_ALGORITHMS, REALLYME_HPKE_SUITES, REALLYME_KDF_ALGORITHMS, REALLYME_KEM_ALGORITHMS, REALLYME_KEY_AGREEMENT_ALGORITHMS, REALLYME_KEY_WRAP_ALGORITHMS, REALLYME_MAC_ALGORITHMS, REALLYME_SIGNATURE_ALGORITHMS, } from "./algorithms.js";
 export type { ReallyMeAeadAlgorithm, ReallyMeHashAlgorithm, ReallyMeHpkeSuite, ReallyMeKdfAlgorithm, ReallyMeKemAlgorithm, ReallyMeKeyAgreementAlgorithm, ReallyMeKeyWrapAlgorithm, ReallyMeMacAlgorithm, ReallyMeSignatureAlgorithm, } from "./algorithms.js";
-export { AEAD_KEY_LENGTH, AEAD_NONCE_LENGTH, AEAD_TAG_LENGTH, ReallyMeAead, XCHACHA20_POLY1305_NONCE_LENGTH, } from "./aead.js";
+export { AEAD_KEY_LENGTH, AEAD_NONCE_LENGTH, AEAD_TAG_LENGTH, AES_128_GCM_KEY_LENGTH, AES_192_GCM_KEY_LENGTH, AES_256_GCM_KEY_LENGTH, ReallyMeAead, XCHACHA20_POLY1305_NONCE_LENGTH, } from "./aead.js";
 export { AES_256_KW_KEK_LENGTH, AES_KW_BLOCK_LENGTH, AES_KW_INTEGRITY_CHECK_LENGTH, AES_KW_MAX_KEY_DATA_LENGTH, AES_KW_MIN_KEY_DATA_LENGTH, AES_KW_MIN_WRAPPED_KEY_LENGTH, ReallyMeAesKw, } from "./aesKw.js";
 export { ARGON2ID_DERIVED_KEY_LENGTH, ARGON2ID_SALT_MAX_LENGTH, ARGON2ID_SALT_MIN_LENGTH, ARGON2ID_V1, ARGON2ID_V2, ReallyMeArgon2id, } from "./argon2id.js";
 export { BIP340_SCHNORR_AUX_RAND_LENGTH, BIP340_SCHNORR_MESSAGE_LENGTH, BIP340_SCHNORR_PUBLIC_KEY_LENGTH, BIP340_SCHNORR_SECRET_KEY_LENGTH, BIP340_SCHNORR_SIGNATURE_LENGTH, ReallyMeBip340Schnorr, } from "./bip340Schnorr.js";
@@ -25,10 +25,13 @@ export type { ReallyMeHpkeSealedMessage, ReallyMeKeyAgreementKeyPair, ReallyMeKe
 export { ReallyMeDigest } from "./digest.js";
 export { ED25519_PUBLIC_KEY_LENGTH, ED25519_SECRET_KEY_LENGTH, ED25519_SIGNATURE_LENGTH, ReallyMeEd25519, } from "./ed25519.js";
 export { HKDF_MAX_INPUT_LENGTH, HKDF_MAX_OUTPUT_LENGTH, HKDF_MIN_INPUT_KEY_MATERIAL_LENGTH, HKDF_MIN_OUTPUT_LENGTH, ReallyMeHkdf, } from "./hkdf.js";
+export { JWA_CONCAT_KDF_MAX_INFO_LENGTH, JWA_CONCAT_KDF_MAX_OUTPUT_LENGTH, JWA_CONCAT_KDF_MAX_SHARED_SECRET_LENGTH, JWA_CONCAT_KDF_MIN_OUTPUT_LENGTH, JWA_CONCAT_KDF_SHA256_DIGEST_LENGTH, ReallyMeJwaConcatKdf, } from "./jwaConcatKdf.js";
 export { HMAC_MAX_KEY_LENGTH, HMAC_SHA256_TAG_LENGTH, HMAC_SHA512_TAG_LENGTH, ReallyMeHmac, } from "./hmac.js";
 export { P256_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH, P256_ECDH_SECRET_KEY_LENGTH, P256_ECDH_SHARED_SECRET_LENGTH, ReallyMeP256Ecdh, } from "./p256Ecdh.js";
 export { P256_ECDSA_COMPACT_SIGNATURE_LENGTH, P256_ECDSA_COMPRESSED_PUBLIC_KEY_LENGTH, P256_ECDSA_DER_SIGNATURE_MAX_LENGTH, P256_ECDSA_SECRET_KEY_LENGTH, ReallyMeP256Ecdsa, } from "./p256Ecdsa.js";
+export { P384_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH, P384_ECDH_SECRET_KEY_LENGTH, P384_ECDH_SHARED_SECRET_LENGTH, ReallyMeP384Ecdh, } from "./p384Ecdh.js";
 export { P384_ECDSA_COMPACT_SIGNATURE_LENGTH, P384_ECDSA_COMPRESSED_PUBLIC_KEY_LENGTH, P384_ECDSA_DER_SIGNATURE_MAX_LENGTH, P384_ECDSA_SECRET_KEY_LENGTH, ReallyMeP384Ecdsa, } from "./p384Ecdsa.js";
+export { P521_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH, P521_ECDH_SECRET_KEY_LENGTH, P521_ECDH_SHARED_SECRET_LENGTH, ReallyMeP521Ecdh, } from "./p521Ecdh.js";
 export { P521_ECDSA_COMPACT_SIGNATURE_LENGTH, P521_ECDSA_COMPRESSED_PUBLIC_KEY_LENGTH, P521_ECDSA_DER_SIGNATURE_MAX_LENGTH, P521_ECDSA_SECRET_KEY_LENGTH, ReallyMeP521Ecdsa, } from "./p521Ecdsa.js";
 export { PBKDF2_MAX_INPUT_LENGTH, PBKDF2_MAX_OUTPUT_LENGTH, PBKDF2_MIN_INPUT_LENGTH, PBKDF2_MIN_ITERATIONS, PBKDF2_MIN_OUTPUT_LENGTH, PBKDF2_RECOMMENDED_MIN_ITERATIONS_SHA256, PBKDF2_RECOMMENDED_MIN_ITERATIONS_SHA512, ReallyMePbkdf2, } from "./pbkdf2.js";
 export { ReallyMeSecp256k1, SECP256K1_COMPRESSED_PUBLIC_KEY_LENGTH, SECP256K1_SECRET_KEY_LENGTH, SECP256K1_SIGNATURE_LENGTH, } from "./secp256k1.js";

package/dist/index.js

@@ -3,7 +3,7 @@
 // SPDX-License-Identifier: Apache-2.0
 export { ReallyMeCryptoError } from "./errors.js";
 export { REALLYME_AEAD_ALGORITHMS, REALLYME_HASH_ALGORITHMS, REALLYME_HPKE_SUITES, REALLYME_KDF_ALGORITHMS, REALLYME_KEM_ALGORITHMS, REALLYME_KEY_AGREEMENT_ALGORITHMS, REALLYME_KEY_WRAP_ALGORITHMS, REALLYME_MAC_ALGORITHMS, REALLYME_SIGNATURE_ALGORITHMS, } from "./algorithms.js";
-export { AEAD_KEY_LENGTH, AEAD_NONCE_LENGTH, AEAD_TAG_LENGTH, ReallyMeAead, XCHACHA20_POLY1305_NONCE_LENGTH, } from "./aead.js";
+export { AEAD_KEY_LENGTH, AEAD_NONCE_LENGTH, AEAD_TAG_LENGTH, AES_128_GCM_KEY_LENGTH, AES_192_GCM_KEY_LENGTH, AES_256_GCM_KEY_LENGTH, ReallyMeAead, XCHACHA20_POLY1305_NONCE_LENGTH, } from "./aead.js";
 export { AES_256_KW_KEK_LENGTH, AES_KW_BLOCK_LENGTH, AES_KW_INTEGRITY_CHECK_LENGTH, AES_KW_MAX_KEY_DATA_LENGTH, AES_KW_MIN_KEY_DATA_LENGTH, AES_KW_MIN_WRAPPED_KEY_LENGTH, ReallyMeAesKw, } from "./aesKw.js";
 export { ARGON2ID_DERIVED_KEY_LENGTH, ARGON2ID_SALT_MAX_LENGTH, ARGON2ID_SALT_MIN_LENGTH, ARGON2ID_V1, ARGON2ID_V2, ReallyMeArgon2id, } from "./argon2id.js";
 export { BIP340_SCHNORR_AUX_RAND_LENGTH, BIP340_SCHNORR_MESSAGE_LENGTH, BIP340_SCHNORR_PUBLIC_KEY_LENGTH, BIP340_SCHNORR_SECRET_KEY_LENGTH, BIP340_SCHNORR_SIGNATURE_LENGTH, ReallyMeBip340Schnorr, } from "./bip340Schnorr.js";
@@ -18,10 +18,13 @@ export { ReallyMeCrypto } from "./cryptoFacade.js";
 export { ReallyMeDigest } from "./digest.js";
 export { ED25519_PUBLIC_KEY_LENGTH, ED25519_SECRET_KEY_LENGTH, ED25519_SIGNATURE_LENGTH, ReallyMeEd25519, } from "./ed25519.js";
 export { HKDF_MAX_INPUT_LENGTH, HKDF_MAX_OUTPUT_LENGTH, HKDF_MIN_INPUT_KEY_MATERIAL_LENGTH, HKDF_MIN_OUTPUT_LENGTH, ReallyMeHkdf, } from "./hkdf.js";
+export { JWA_CONCAT_KDF_MAX_INFO_LENGTH, JWA_CONCAT_KDF_MAX_OUTPUT_LENGTH, JWA_CONCAT_KDF_MAX_SHARED_SECRET_LENGTH, JWA_CONCAT_KDF_MIN_OUTPUT_LENGTH, JWA_CONCAT_KDF_SHA256_DIGEST_LENGTH, ReallyMeJwaConcatKdf, } from "./jwaConcatKdf.js";
 export { HMAC_MAX_KEY_LENGTH, HMAC_SHA256_TAG_LENGTH, HMAC_SHA512_TAG_LENGTH, ReallyMeHmac, } from "./hmac.js";
 export { P256_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH, P256_ECDH_SECRET_KEY_LENGTH, P256_ECDH_SHARED_SECRET_LENGTH, ReallyMeP256Ecdh, } from "./p256Ecdh.js";
 export { P256_ECDSA_COMPACT_SIGNATURE_LENGTH, P256_ECDSA_COMPRESSED_PUBLIC_KEY_LENGTH, P256_ECDSA_DER_SIGNATURE_MAX_LENGTH, P256_ECDSA_SECRET_KEY_LENGTH, ReallyMeP256Ecdsa, } from "./p256Ecdsa.js";
+export { P384_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH, P384_ECDH_SECRET_KEY_LENGTH, P384_ECDH_SHARED_SECRET_LENGTH, ReallyMeP384Ecdh, } from "./p384Ecdh.js";
 export { P384_ECDSA_COMPACT_SIGNATURE_LENGTH, P384_ECDSA_COMPRESSED_PUBLIC_KEY_LENGTH, P384_ECDSA_DER_SIGNATURE_MAX_LENGTH, P384_ECDSA_SECRET_KEY_LENGTH, ReallyMeP384Ecdsa, } from "./p384Ecdsa.js";
+export { P521_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH, P521_ECDH_SECRET_KEY_LENGTH, P521_ECDH_SHARED_SECRET_LENGTH, ReallyMeP521Ecdh, } from "./p521Ecdh.js";
 export { P521_ECDSA_COMPACT_SIGNATURE_LENGTH, P521_ECDSA_COMPRESSED_PUBLIC_KEY_LENGTH, P521_ECDSA_DER_SIGNATURE_MAX_LENGTH, P521_ECDSA_SECRET_KEY_LENGTH, ReallyMeP521Ecdsa, } from "./p521Ecdsa.js";
 export { PBKDF2_MAX_INPUT_LENGTH, PBKDF2_MAX_OUTPUT_LENGTH, PBKDF2_MIN_INPUT_LENGTH, PBKDF2_MIN_ITERATIONS, PBKDF2_MIN_OUTPUT_LENGTH, PBKDF2_RECOMMENDED_MIN_ITERATIONS_SHA256, PBKDF2_RECOMMENDED_MIN_ITERATIONS_SHA512, ReallyMePbkdf2, } from "./pbkdf2.js";
 export { ReallyMeSecp256k1, SECP256K1_COMPRESSED_PUBLIC_KEY_LENGTH, SECP256K1_SECRET_KEY_LENGTH, SECP256K1_SIGNATURE_LENGTH, } from "./secp256k1.js";

package/dist/jwaConcatKdf.d.ts

@@ -0,0 +1,8 @@
+export declare const JWA_CONCAT_KDF_SHA256_DIGEST_LENGTH = 32;
+export declare const JWA_CONCAT_KDF_MAX_SHARED_SECRET_LENGTH = 4096;
+export declare const JWA_CONCAT_KDF_MAX_INFO_LENGTH = 4096;
+export declare const JWA_CONCAT_KDF_MIN_OUTPUT_LENGTH = 1;
+export declare const JWA_CONCAT_KDF_MAX_OUTPUT_LENGTH = 4096;
+export declare const ReallyMeJwaConcatKdf: {
+    deriveSha256(sharedSecret: Uint8Array, algorithmId: Uint8Array, partyUInfo: Uint8Array, partyVInfo: Uint8Array, outputLength: number): Uint8Array;
+};

package/dist/jwaConcatKdf.js

@@ -0,0 +1,72 @@
+// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+//
+// SPDX-License-Identifier: Apache-2.0
+import { sha256 } from "@noble/hashes/sha2.js";
+import { ReallyMeCryptoError } from "./errors.js";
+export const JWA_CONCAT_KDF_SHA256_DIGEST_LENGTH = 32;
+export const JWA_CONCAT_KDF_MAX_SHARED_SECRET_LENGTH = 4096;
+export const JWA_CONCAT_KDF_MAX_INFO_LENGTH = 4096;
+export const JWA_CONCAT_KDF_MIN_OUTPUT_LENGTH = 1;
+export const JWA_CONCAT_KDF_MAX_OUTPUT_LENGTH = 4096;
+export const ReallyMeJwaConcatKdf = {
+    deriveSha256(sharedSecret, algorithmId, partyUInfo, partyVInfo, outputLength) {
+        validate(sharedSecret, algorithmId, partyUInfo, partyVInfo, outputLength);
+        const outputBits = outputLength * 8;
+        const otherInfo = buildOtherInfo(algorithmId, partyUInfo, partyVInfo, outputBits);
+        const reps = Math.ceil(outputLength / JWA_CONCAT_KDF_SHA256_DIGEST_LENGTH);
+        const derived = new Uint8Array(reps * JWA_CONCAT_KDF_SHA256_DIGEST_LENGTH);
+        for (let counter = 1; counter <= reps; counter += 1) {
+            const counterBytes = uint32be(counter);
+            const digest = sha256(concatBytes(counterBytes, sharedSecret, otherInfo));
+            derived.set(digest, (counter - 1) * JWA_CONCAT_KDF_SHA256_DIGEST_LENGTH);
+            counterBytes.fill(0);
+        }
+        const output = derived.slice(0, outputLength);
+        derived.fill(0);
+        otherInfo.fill(0);
+        return output;
+    },
+};
+function validate(sharedSecret, algorithmId, partyUInfo, partyVInfo, outputLength) {
+    if (sharedSecret.length === 0 ||
+        sharedSecret.length > JWA_CONCAT_KDF_MAX_SHARED_SECRET_LENGTH ||
+        algorithmId.length === 0 ||
+        algorithmId.length > JWA_CONCAT_KDF_MAX_INFO_LENGTH ||
+        partyUInfo.length > JWA_CONCAT_KDF_MAX_INFO_LENGTH ||
+        partyVInfo.length > JWA_CONCAT_KDF_MAX_INFO_LENGTH ||
+        !Number.isInteger(outputLength) ||
+        outputLength < JWA_CONCAT_KDF_MIN_OUTPUT_LENGTH ||
+        outputLength > JWA_CONCAT_KDF_MAX_OUTPUT_LENGTH) {
+        throw new ReallyMeCryptoError("invalid-input");
+    }
+}
+function buildOtherInfo(algorithmId, partyUInfo, partyVInfo, outputBits) {
+    return concatBytes(lengthPrefixed(algorithmId), lengthPrefixed(partyUInfo), lengthPrefixed(partyVInfo), uint32be(outputBits));
+}
+function lengthPrefixed(bytes) {
+    return concatBytes(uint32be(bytes.length), bytes);
+}
+function uint32be(value) {
+    if (!Number.isInteger(value) || value < 0 || value > 0xffffffff) {
+        throw new ReallyMeCryptoError("invalid-input");
+    }
+    const output = new Uint8Array(4);
+    output[0] = Math.floor(value / 0x1000000);
+    output[1] = Math.floor(value / 0x10000) & 0xff;
+    output[2] = Math.floor(value / 0x100) & 0xff;
+    output[3] = value & 0xff;
+    return output;
+}
+function concatBytes(...parts) {
+    let length = 0;
+    for (const part of parts) {
+        length += part.length;
+    }
+    const output = new Uint8Array(length);
+    let offset = 0;
+    for (const part of parts) {
+        output.set(part, offset);
+        offset += part.length;
+    }
+    return output;
+}

package/dist/mlDsa.js

@@ -67,6 +67,8 @@ export const ReallyMeMlDsa = {
         return readKeyPair(suite.generateKeyPair(), suite);
     },
     deriveKeyPair(algorithm, secretKey) {
+        // Import an existing FIPS 204 seed and reconstruct its public key. Do not
+        // feed passwords or other low-entropy material here.
         const suite = mlDsaSuite(algorithm);
         ensureBytes(secretKey, ML_DSA_SECRET_KEY_LENGTH);
         return readKeyPair(suite.deriveKeyPair(secretKey), suite);

package/dist/mlKem.js

@@ -71,6 +71,8 @@ export const ReallyMeMlKem = {
         return readKeyPair(suite.generateKeyPair(), suite);
     },
     deriveKeyPair(algorithm, secretKey) {
+        // Import an existing FIPS 203 seed-form secret and reconstruct its public
+        // key. Do not feed passwords or other low-entropy material here.
         const suite = mlKemSuite(algorithm);
         ensureBytes(secretKey, ML_KEM_SECRET_KEY_LENGTH);
         return readKeyPair(suite.deriveKeyPair(secretKey), suite);

package/dist/p384Ecdh.d.ts

@@ -0,0 +1,22 @@
+/**
+ * P-384 ECDH backed by @noble/curves.
+ *
+ * Public keys at the SDK boundary are compressed SEC1. The primitive returns
+ * the raw 48-byte ECDH x-coordinate; protocols must apply a labelled KDF that
+ * binds algorithm and party context before using it as key material.
+ */
+export declare const P384_ECDH_SECRET_KEY_LENGTH = 48;
+export declare const P384_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH = 49;
+export declare const P384_ECDH_SHARED_SECRET_LENGTH = 48;
+export declare const ReallyMeP384Ecdh: {
+    readonly generateKeyPair: () => {
+        publicKey: Uint8Array;
+        secretKey: Uint8Array;
+    };
+    readonly deriveKeyPair: (secretKey: Uint8Array) => {
+        publicKey: Uint8Array;
+        secretKey: Uint8Array;
+    };
+    readonly derivePublicKey: (secretKey: Uint8Array) => Uint8Array;
+    readonly deriveSharedSecret: (publicKey: Uint8Array, secretKey: Uint8Array) => Uint8Array;
+};

package/dist/p384Ecdh.js

@@ -0,0 +1,53 @@
+// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+//
+// SPDX-License-Identifier: Apache-2.0
+import { p384 } from "@noble/curves/nist.js";
+import { ReallyMeCryptoError } from "./errors.js";
+/**
+ * P-384 ECDH backed by @noble/curves.
+ *
+ * Public keys at the SDK boundary are compressed SEC1. The primitive returns
+ * the raw 48-byte ECDH x-coordinate; protocols must apply a labelled KDF that
+ * binds algorithm and party context before using it as key material.
+ */
+export const P384_ECDH_SECRET_KEY_LENGTH = 48;
+export const P384_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH = 49;
+export const P384_ECDH_SHARED_SECRET_LENGTH = 48;
+export const ReallyMeP384Ecdh = {
+    generateKeyPair() {
+        const secretKey = p384.utils.randomSecretKey();
+        return {
+            publicKey: p384.getPublicKey(secretKey, true),
+            secretKey,
+        };
+    },
+    deriveKeyPair(secretKey) {
+        return {
+            publicKey: this.derivePublicKey(secretKey),
+            secretKey: secretKey.slice(),
+        };
+    },
+    derivePublicKey(secretKey) {
+        if (secretKey.length !== P384_ECDH_SECRET_KEY_LENGTH) {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+        try {
+            return p384.getPublicKey(secretKey, true);
+        }
+        catch {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+    },
+    deriveSharedSecret(publicKey, secretKey) {
+        if (publicKey.length !== P384_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH ||
+            secretKey.length !== P384_ECDH_SECRET_KEY_LENGTH) {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+        try {
+            return p384.getSharedSecret(secretKey, publicKey, false).slice(1, 49);
+        }
+        catch {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+    },
+};

package/dist/p521Ecdh.d.ts

@@ -0,0 +1,22 @@
+/**
+ * P-521 ECDH backed by @noble/curves.
+ *
+ * Public keys at the SDK boundary are compressed SEC1. The primitive returns
+ * the raw 66-byte ECDH x-coordinate; protocols must apply a labelled KDF that
+ * binds algorithm and party context before using it as key material.
+ */
+export declare const P521_ECDH_SECRET_KEY_LENGTH = 66;
+export declare const P521_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH = 67;
+export declare const P521_ECDH_SHARED_SECRET_LENGTH = 66;
+export declare const ReallyMeP521Ecdh: {
+    readonly generateKeyPair: () => {
+        publicKey: Uint8Array;
+        secretKey: Uint8Array;
+    };
+    readonly deriveKeyPair: (secretKey: Uint8Array) => {
+        publicKey: Uint8Array;
+        secretKey: Uint8Array;
+    };
+    readonly derivePublicKey: (secretKey: Uint8Array) => Uint8Array;
+    readonly deriveSharedSecret: (publicKey: Uint8Array, secretKey: Uint8Array) => Uint8Array;
+};

package/dist/p521Ecdh.js

@@ -0,0 +1,53 @@
+// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+//
+// SPDX-License-Identifier: Apache-2.0
+import { p521 } from "@noble/curves/nist.js";
+import { ReallyMeCryptoError } from "./errors.js";
+/**
+ * P-521 ECDH backed by @noble/curves.
+ *
+ * Public keys at the SDK boundary are compressed SEC1. The primitive returns
+ * the raw 66-byte ECDH x-coordinate; protocols must apply a labelled KDF that
+ * binds algorithm and party context before using it as key material.
+ */
+export const P521_ECDH_SECRET_KEY_LENGTH = 66;
+export const P521_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH = 67;
+export const P521_ECDH_SHARED_SECRET_LENGTH = 66;
+export const ReallyMeP521Ecdh = {
+    generateKeyPair() {
+        const secretKey = p521.utils.randomSecretKey();
+        return {
+            publicKey: p521.getPublicKey(secretKey, true),
+            secretKey,
+        };
+    },
+    deriveKeyPair(secretKey) {
+        return {
+            publicKey: this.derivePublicKey(secretKey),
+            secretKey: secretKey.slice(),
+        };
+    },
+    derivePublicKey(secretKey) {
+        if (secretKey.length !== P521_ECDH_SECRET_KEY_LENGTH) {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+        try {
+            return p521.getPublicKey(secretKey, true);
+        }
+        catch {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+    },
+    deriveSharedSecret(publicKey, secretKey) {
+        if (publicKey.length !== P521_ECDH_COMPRESSED_PUBLIC_KEY_LENGTH ||
+            secretKey.length !== P521_ECDH_SECRET_KEY_LENGTH) {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+        try {
+            return p521.getSharedSecret(secretKey, publicKey, false).slice(1, 67);
+        }
+        catch {
+            throw new ReallyMeCryptoError("invalid-input");
+        }
+    },
+};

package/dist/proto/generated/reallyme/crypto/v1/crypto_pb.d.ts

@@ -286,7 +286,15 @@ export declare enum KeyAgreementAlgorithm {
     /**
      * @generated from enum value: KEY_AGREEMENT_ALGORITHM_P256_ECDH = 2;
      */
-    P256_ECDH = 2
+    P256_ECDH = 2,
+    /**
+     * @generated from enum value: KEY_AGREEMENT_ALGORITHM_P384_ECDH = 3;
+     */
+    P384_ECDH = 3,
+    /**
+     * @generated from enum value: KEY_AGREEMENT_ALGORITHM_P521_ECDH = 4;
+     */
+    P521_ECDH = 4
 }
 /**
  * Describes the enum reallyme.crypto.v1.KeyAgreementAlgorithm.
@@ -376,7 +384,15 @@ export declare enum AeadAlgorithm {
     /**
      * @generated from enum value: AEAD_ALGORITHM_XCHACHA20_POLY1305 = 4;
      */
-    XCHACHA20_POLY1305 = 4
+    XCHACHA20_POLY1305 = 4,
+    /**
+     * @generated from enum value: AEAD_ALGORITHM_AES_128_GCM = 5;
+     */
+    AES_128_GCM = 5,
+    /**
+     * @generated from enum value: AEAD_ALGORITHM_AES_192_GCM = 6;
+     */
+    AES_192_GCM = 6
 }
 /**
  * Describes the enum reallyme.crypto.v1.AeadAlgorithm.
@@ -474,7 +490,11 @@ export declare enum KdfAlgorithm {
     /**
      * @generated from enum value: KDF_ALGORITHM_PBKDF2_HMAC_SHA512 = 4;
      */
-    PBKDF2_HMAC_SHA512 = 4
+    PBKDF2_HMAC_SHA512 = 4,
+    /**
+     * @generated from enum value: KDF_ALGORITHM_JWA_CONCAT_KDF_SHA256 = 5;
+     */
+    JWA_CONCAT_KDF_SHA256 = 5
 }
 /**
  * Describes the enum reallyme.crypto.v1.KdfAlgorithm.

package/dist/proto/generated/reallyme/crypto/v1/crypto_pb.js

@@ -5,7 +5,7 @@ import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
 /**
  * Describes the file reallyme/crypto/v1/crypto.proto.
  */
-export const file_reallyme_crypto_v1_crypto = /*@__PURE__*/ fileDesc("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");
+export const file_reallyme_crypto_v1_crypto = /*@__PURE__*/ fileDesc("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");
 /**
  * Describes the message reallyme.crypto.v1.CryptoAlgorithmIdentifier.
  * Use `create(CryptoAlgorithmIdentifierSchema)` to create a new message.
@@ -184,6 +184,14 @@ export var KeyAgreementAlgorithm;
      * @generated from enum value: KEY_AGREEMENT_ALGORITHM_P256_ECDH = 2;
      */
     KeyAgreementAlgorithm[KeyAgreementAlgorithm["P256_ECDH"] = 2] = "P256_ECDH";
+    /**
+     * @generated from enum value: KEY_AGREEMENT_ALGORITHM_P384_ECDH = 3;
+     */
+    KeyAgreementAlgorithm[KeyAgreementAlgorithm["P384_ECDH"] = 3] = "P384_ECDH";
+    /**
+     * @generated from enum value: KEY_AGREEMENT_ALGORITHM_P521_ECDH = 4;
+     */
+    KeyAgreementAlgorithm[KeyAgreementAlgorithm["P521_ECDH"] = 4] = "P521_ECDH";
 })(KeyAgreementAlgorithm || (KeyAgreementAlgorithm = {}));
 /**
  * Describes the enum reallyme.crypto.v1.KeyAgreementAlgorithm.
@@ -277,6 +285,14 @@ export var AeadAlgorithm;
      * @generated from enum value: AEAD_ALGORITHM_XCHACHA20_POLY1305 = 4;
      */
     AeadAlgorithm[AeadAlgorithm["XCHACHA20_POLY1305"] = 4] = "XCHACHA20_POLY1305";
+    /**
+     * @generated from enum value: AEAD_ALGORITHM_AES_128_GCM = 5;
+     */
+    AeadAlgorithm[AeadAlgorithm["AES_128_GCM"] = 5] = "AES_128_GCM";
+    /**
+     * @generated from enum value: AEAD_ALGORITHM_AES_192_GCM = 6;
+     */
+    AeadAlgorithm[AeadAlgorithm["AES_192_GCM"] = 6] = "AES_192_GCM";
 })(AeadAlgorithm || (AeadAlgorithm = {}));
 /**
  * Describes the enum reallyme.crypto.v1.AeadAlgorithm.
@@ -378,6 +394,10 @@ export var KdfAlgorithm;
      * @generated from enum value: KDF_ALGORITHM_PBKDF2_HMAC_SHA512 = 4;
      */
     KdfAlgorithm[KdfAlgorithm["PBKDF2_HMAC_SHA512"] = 4] = "PBKDF2_HMAC_SHA512";
+    /**
+     * @generated from enum value: KDF_ALGORITHM_JWA_CONCAT_KDF_SHA256 = 5;
+     */
+    KdfAlgorithm[KdfAlgorithm["JWA_CONCAT_KDF_SHA256"] = 5] = "JWA_CONCAT_KDF_SHA256";
 })(KdfAlgorithm || (KdfAlgorithm = {}));
 /**
  * Describes the enum reallyme.crypto.v1.KdfAlgorithm.

package/dist/proto.js

@@ -126,6 +126,10 @@ export const hashAlgorithmToProto = (value) => {
 };
 export const aeadAlgorithmFromProto = (value) => {
     switch (value) {
+        case AeadAlgorithm.AES_128_GCM:
+            return "AES-128-GCM";
+        case AeadAlgorithm.AES_192_GCM:
+            return "AES-192-GCM";
         case AeadAlgorithm.AES_256_GCM:
             return "AES-256-GCM";
         case AeadAlgorithm.AES_256_GCM_SIV:
@@ -140,6 +144,10 @@ export const aeadAlgorithmFromProto = (value) => {
 };
 export const aeadAlgorithmToProto = (value) => {
     switch (value) {
+        case "AES-128-GCM":
+            return AeadAlgorithm.AES_128_GCM;
+        case "AES-192-GCM":
+            return AeadAlgorithm.AES_192_GCM;
         case "AES-256-GCM":
             return AeadAlgorithm.AES_256_GCM;
         case "AES-256-GCM-SIV":
@@ -186,6 +194,10 @@ export const keyAgreementAlgorithmFromProto = (value) => {
             return "X25519";
         case KeyAgreementAlgorithm.P256_ECDH:
             return "P-256-ECDH";
+        case KeyAgreementAlgorithm.P384_ECDH:
+            return "P-384-ECDH";
+        case KeyAgreementAlgorithm.P521_ECDH:
+            return "P-521-ECDH";
         default:
             throw new ReallyMeCryptoError("unsupported-algorithm");
     }
@@ -196,6 +208,10 @@ export const keyAgreementAlgorithmToProto = (value) => {
             return KeyAgreementAlgorithm.X25519;
         case "P-256-ECDH":
             return KeyAgreementAlgorithm.P256_ECDH;
+        case "P-384-ECDH":
+            return KeyAgreementAlgorithm.P384_ECDH;
+        case "P-521-ECDH":
+            return KeyAgreementAlgorithm.P521_ECDH;
     }
 };
 export const macAlgorithmFromProto = (value) => {
@@ -226,6 +242,8 @@ export const kdfAlgorithmFromProto = (value) => {
             return "PBKDF2-HMAC-SHA-256";
         case KdfAlgorithm.PBKDF2_HMAC_SHA512:
             return "PBKDF2-HMAC-SHA-512";
+        case KdfAlgorithm.JWA_CONCAT_KDF_SHA256:
+            return "JWA-CONCAT-KDF-SHA256";
         default:
             throw new ReallyMeCryptoError("unsupported-algorithm");
     }
@@ -240,6 +258,8 @@ export const kdfAlgorithmToProto = (value) => {
             return KdfAlgorithm.PBKDF2_HMAC_SHA256;
         case "PBKDF2-HMAC-SHA-512":
             return KdfAlgorithm.PBKDF2_HMAC_SHA512;
+        case "JWA-CONCAT-KDF-SHA256":
+            return KdfAlgorithm.JWA_CONCAT_KDF_SHA256;
     }
 };
 export const keyWrapAlgorithmFromProto = (value) => {

package/dist/wasm/reallyme_crypto_wasm.js

@@ -1,5 +1,69 @@
 /* @ts-self-types="./reallyme_crypto_wasm.d.ts" */
 
+/**
+ * Open and authenticate an AES-128-GCM `ciphertext || tag`.
+ * @param {Uint8Array} key
+ * @param {Uint8Array} nonce
+ * @param {Uint8Array} aad
+ * @param {Uint8Array} ciphertext
+ * @returns {Uint8Array}
+ */
+export function aes128GcmOpen(key, nonce, aad, ciphertext) {
+    const ret = wasm.aes128GcmOpen(key, nonce, aad, ciphertext);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
+/**
+ * Seal plaintext with AES-128-GCM and return `ciphertext || tag`.
+ * @param {Uint8Array} key
+ * @param {Uint8Array} nonce
+ * @param {Uint8Array} aad
+ * @param {Uint8Array} plaintext
+ * @returns {Uint8Array}
+ */
+export function aes128GcmSeal(key, nonce, aad, plaintext) {
+    const ret = wasm.aes128GcmSeal(key, nonce, aad, plaintext);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
+/**
+ * Open and authenticate an AES-192-GCM `ciphertext || tag`.
+ * @param {Uint8Array} key
+ * @param {Uint8Array} nonce
+ * @param {Uint8Array} aad
+ * @param {Uint8Array} ciphertext
+ * @returns {Uint8Array}
+ */
+export function aes192GcmOpen(key, nonce, aad, ciphertext) {
+    const ret = wasm.aes192GcmOpen(key, nonce, aad, ciphertext);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
+/**
+ * Seal plaintext with AES-192-GCM and return `ciphertext || tag`.
+ * @param {Uint8Array} key
+ * @param {Uint8Array} nonce
+ * @param {Uint8Array} aad
+ * @param {Uint8Array} plaintext
+ * @returns {Uint8Array}
+ */
+export function aes192GcmSeal(key, nonce, aad, plaintext) {
+    const ret = wasm.aes192GcmSeal(key, nonce, aad, plaintext);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
 /**
  * Open and authenticate an AES-256-GCM `ciphertext || tag`.
  * @param {Uint8Array} key

package/dist/wasmModuleTypes.d.ts

@@ -4,6 +4,10 @@ export type ReallyMeWasmInitOutput = Readonly<{
 export declare function initSync(module: {
     module: Uint8Array;
 }): ReallyMeWasmInitOutput;
+export declare function aes128GcmOpen(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, ciphertextWithTag: Uint8Array): Uint8Array;
+export declare function aes128GcmSeal(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, plaintext: Uint8Array): Uint8Array;
+export declare function aes192GcmOpen(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, ciphertextWithTag: Uint8Array): Uint8Array;
+export declare function aes192GcmSeal(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, plaintext: Uint8Array): Uint8Array;
 export declare function aes256GcmOpen(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, ciphertextWithTag: Uint8Array): Uint8Array;
 export declare function aes256GcmSeal(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, plaintext: Uint8Array): Uint8Array;
 export declare function aes256GcmSivOpen(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, ciphertextWithTag: Uint8Array): Uint8Array;

package/dist/wasmProvider.d.ts

@@ -16,10 +16,15 @@ type HpkeOpenFn = (suite: number, recipientSecretKey: Uint8Array, encapsulatedKe
 type HpkeSealFn = (suite: number, recipientPublicKey: Uint8Array, info: Uint8Array, aad: Uint8Array, plaintext: Uint8Array) => unknown;
 type HpkeSealDerandFn = (suite: number, recipientPublicKey: Uint8Array, encapsulationRandomness: Uint8Array, info: Uint8Array, aad: Uint8Array, plaintext: Uint8Array) => unknown;
 type DeriveKeypairFn = (secretKey: Uint8Array) => unknown;
+type SlhDsaDeriveKeypairFn = (skSeed: Uint8Array, skPrf: Uint8Array, pkSeed: Uint8Array) => unknown;
 type EncapsulateFn = (publicKey: Uint8Array) => unknown;
 type EncapsulateDerandFn = (publicKey: Uint8Array, seed: Uint8Array) => unknown;
 type DecapsulateFn = (ciphertext: Uint8Array, secretKey: Uint8Array) => unknown;
 export type ReallyMeWasmProvider = Readonly<{
+    aes128GcmSeal: AeadFn;
+    aes128GcmOpen: AeadFn;
+    aes192GcmSeal: AeadFn;
+    aes192GcmOpen: AeadFn;
     aes256GcmSeal: AeadFn;
     aes256GcmOpen: AeadFn;
     aes256GcmSivSeal: AeadFn;
@@ -73,7 +78,7 @@ export type ReallyMeWasmProvider = Readonly<{
     mlKem1024EncapsulateDerand: EncapsulateDerandFn;
     mlKem1024Decapsulate: DecapsulateFn;
     slhDsaSha2128sGenerateKeypair: GenerateKeypairFn;
-    slhDsaSha2128sDeriveKeypair: SignatureVerifyFn;
+    slhDsaSha2128sDeriveKeypair: SlhDsaDeriveKeypairFn;
     slhDsaSha2128sSign: SignatureSignFn;
     slhDsaSha2128sVerify: SignatureVerifyFn;
     rsaVerifyPkcs1v15: RsaPkcs1v15VerifyFn;

package/dist/wasmProvider.js

@@ -64,6 +64,10 @@ const function3 = (module, name) => {
     const callable = requireFunction(module, name);
     return (first, second, third) => callable(first, second, third);
 };
+const deriveSlhDsaFunction3 = (module, name) => {
+    const callable = requireFunction(module, name);
+    return (skSeed, skPrf, pkSeed) => callable(skSeed, skPrf, pkSeed);
+};
 const function4 = (module, name) => {
     const callable = requireFunction(module, name);
     return (first, second, third, fourth) => callable(first, second, third, fourth);
@@ -95,6 +99,10 @@ const rsaPssVerifyFunction = (module, name) => {
 export const installReallyMeWasmProvider = (module) => {
     const providerModule = requireObject(module);
     installedProvider = {
+        aes128GcmSeal: function4(providerModule, "aes128GcmSeal"),
+        aes128GcmOpen: function4(providerModule, "aes128GcmOpen"),
+        aes192GcmSeal: function4(providerModule, "aes192GcmSeal"),
+        aes192GcmOpen: function4(providerModule, "aes192GcmOpen"),
         aes256GcmSeal: function4(providerModule, "aes256GcmSeal"),
         aes256GcmOpen: function4(providerModule, "aes256GcmOpen"),
         aes256GcmSivSeal: function4(providerModule, "aes256GcmSivSeal"),
@@ -148,7 +156,7 @@ export const installReallyMeWasmProvider = (module) => {
         mlKem1024EncapsulateDerand: function2(providerModule, "mlKem1024EncapsulateDerand"),
         mlKem1024Decapsulate: function2(providerModule, "mlKem1024Decapsulate"),
         slhDsaSha2128sGenerateKeypair: function0(providerModule, "slhDsaSha2128sGenerateKeypair"),
-        slhDsaSha2128sDeriveKeypair: function3(providerModule, "slhDsaSha2128sDeriveKeypair"),
+        slhDsaSha2128sDeriveKeypair: deriveSlhDsaFunction3(providerModule, "slhDsaSha2128sDeriveKeypair"),
         slhDsaSha2128sSign: function2(providerModule, "slhDsaSha2128sSign"),
         slhDsaSha2128sVerify: function3(providerModule, "slhDsaSha2128sVerify"),
         rsaVerifyPkcs1v15: rsaPkcs1v15VerifyFunction(providerModule, "rsaVerifyPkcs1v15"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reallyme/crypto",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "ReallyMe crypto SDK for TypeScript/JavaScript with an explicit, pinned provider set.",
   "license": "Apache-2.0",
   "type": "module",
@@ -28,7 +28,7 @@
     "README.md"
   ],
   "scripts": {
-    "build": "npm run build:wasm && tsc",
+    "build": "node scripts/clean-dist.mjs && npm run build:wasm && tsc",
     "build:ts": "tsc",
     "build:wasm": "node scripts/build-wasm.mjs",
     "typecheck": "tsc --noEmit",

package/dist/verifySignature.d.ts

@@ -1 +0,0 @@
-export declare const verifySignatureResult: (valid: boolean) => void;

package/dist/verifySignature.js

@@ -1,9 +0,0 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
-//
-// SPDX-License-Identifier: Apache-2.0
-import { ReallyMeCryptoError } from "./errors.js";
-export const verifySignatureResult = (valid) => {
-    if (!valid) {
-        throw new ReallyMeCryptoError("invalid-signature");
-    }
-};