@reallyme/crypto 0.2.0 → 0.3.1

package/dist/xWing.js

@@ -2,15 +2,12 @@
 //
 // SPDX-License-Identifier: Apache-2.0
 import { ReallyMeCryptoError } from "./errors.js";
-import { ensureBytes, readByteArrayProperty } from "./validateBytes.js";
+import { ensureBytes, readIndependentByteArrayProperty, readIndependentProviderBytes, } from "./validateBytes.js";
 import { requireReallyMeWasmProvider } from "./wasmProvider.js";
 export const X_WING_SECRET_KEY_LENGTH = 32;
-export const X_WING_ENCAPSULATION_SEED_LENGTH = 64;
 export const X_WING_SHARED_SECRET_LENGTH = 32;
 export const X_WING_768_PUBLIC_KEY_LENGTH = 1_216;
 export const X_WING_768_CIPHERTEXT_LENGTH = 1_120;
-export const X_WING_1024_PUBLIC_KEY_LENGTH = 1_600;
-export const X_WING_1024_CIPHERTEXT_LENGTH = 1_600;
 const xWingSuite = (algorithm) => {
     return xWingSuiteWithProvider(algorithm, requireReallyMeWasmProvider());
 };
@@ -27,31 +24,24 @@ const xWingSuiteWithProvider = (algorithm, provider) => {
                 generateKeypair: provider.xWing768GenerateKeypair,
                 deriveKeypair: provider.xWing768DeriveKeypair,
                 encapsulate: provider.xWing768Encapsulate,
-                encapsulateDerand: provider.xWing768EncapsulateDerand,
                 decapsulate: provider.xWing768Decapsulate,
             };
         }
-        case "X-Wing-1024": {
-            return {
-                publicKeyLength: X_WING_1024_PUBLIC_KEY_LENGTH,
-                ciphertextLength: X_WING_1024_CIPHERTEXT_LENGTH,
-                generateKeypair: provider.xWing1024GenerateKeypair,
-                deriveKeypair: provider.xWing1024DeriveKeypair,
-                encapsulate: provider.xWing1024Encapsulate,
-                encapsulateDerand: provider.xWing1024EncapsulateDerand,
-                decapsulate: provider.xWing1024Decapsulate,
-            };
-        }
     }
 };
-const readKeyPair = (value, suite) => ({
-    publicKey: readByteArrayProperty(value, "publicKey", suite.publicKeyLength),
-    secretKey: readByteArrayProperty(value, "secretKey", X_WING_SECRET_KEY_LENGTH),
-});
-const readEncapsulation = (value, suite) => ({
-    ciphertext: readByteArrayProperty(value, "ciphertext", suite.ciphertextLength),
-    sharedSecret: readByteArrayProperty(value, "sharedSecret", X_WING_SHARED_SECRET_LENGTH),
-});
+const readKeyPair = (value, suite, inputs = []) => {
+    const publicKey = readIndependentByteArrayProperty(value, "publicKey", suite.publicKeyLength, inputs);
+    const secretKey = readIndependentByteArrayProperty(value, "secretKey", X_WING_SECRET_KEY_LENGTH, [...inputs, publicKey]);
+    return { publicKey, secretKey };
+};
+const readEncapsulation = (value, suite, inputs) => {
+    const ciphertext = readIndependentByteArrayProperty(value, "ciphertext", suite.ciphertextLength, inputs);
+    const sharedSecret = readIndependentByteArrayProperty(value, "sharedSecret", X_WING_SHARED_SECRET_LENGTH, [...inputs, ciphertext]);
+    return { ciphertext, sharedSecret };
+};
+const readSharedSecret = (value, inputs) => {
+    return readIndependentProviderBytes(value, X_WING_SHARED_SECRET_LENGTH, inputs);
+};
 export const ReallyMeXWing = {
     generateKeyPair(algorithm) {
         const suite = xWingSuite(algorithm);
@@ -64,55 +54,33 @@ export const ReallyMeXWing = {
     deriveKeyPair(algorithm, secretKey) {
         ensureBytes(secretKey, X_WING_SECRET_KEY_LENGTH);
         const suite = xWingSuite(algorithm);
-        return readKeyPair(suite.deriveKeypair(secretKey), suite);
+        return readKeyPair(suite.deriveKeypair(secretKey), suite, [secretKey]);
     },
     deriveKeyPairWithProvider(provider, algorithm, secretKey) {
         ensureBytes(secretKey, X_WING_SECRET_KEY_LENGTH);
         const suite = xWingSuiteWithProvider(algorithm, provider);
-        return readKeyPair(suite.deriveKeypair(secretKey), suite);
+        return readKeyPair(suite.deriveKeypair(secretKey), suite, [secretKey]);
     },
     encapsulate(algorithm, publicKey) {
         const suite = xWingSuite(algorithm);
         ensureBytes(publicKey, suite.publicKeyLength);
-        return readEncapsulation(suite.encapsulate(publicKey), suite);
+        return readEncapsulation(suite.encapsulate(publicKey), suite, [publicKey]);
     },
     encapsulateWithProvider(provider, algorithm, publicKey) {
         const suite = xWingSuiteWithProvider(algorithm, provider);
         ensureBytes(publicKey, suite.publicKeyLength);
-        return readEncapsulation(suite.encapsulate(publicKey), suite);
+        return readEncapsulation(suite.encapsulate(publicKey), suite, [publicKey]);
     },
     decapsulate(algorithm, ciphertext, secretKey) {
         const suite = xWingSuite(algorithm);
         ensureBytes(ciphertext, suite.ciphertextLength);
         ensureBytes(secretKey, X_WING_SECRET_KEY_LENGTH);
-        const sharedSecret = suite.decapsulate(ciphertext, secretKey);
-        if (!(sharedSecret instanceof Uint8Array)) {
-            throw new ReallyMeCryptoError("provider-failure");
-        }
-        ensureBytes(sharedSecret, X_WING_SHARED_SECRET_LENGTH);
-        return sharedSecret;
+        return readSharedSecret(suite.decapsulate(ciphertext, secretKey), [ciphertext, secretKey]);
     },
     decapsulateWithProvider(provider, algorithm, ciphertext, secretKey) {
         const suite = xWingSuiteWithProvider(algorithm, provider);
         ensureBytes(ciphertext, suite.ciphertextLength);
         ensureBytes(secretKey, X_WING_SECRET_KEY_LENGTH);
-        const sharedSecret = suite.decapsulate(ciphertext, secretKey);
-        if (!(sharedSecret instanceof Uint8Array)) {
-            throw new ReallyMeCryptoError("provider-failure");
-        }
-        ensureBytes(sharedSecret, X_WING_SHARED_SECRET_LENGTH);
-        return sharedSecret;
+        return readSharedSecret(suite.decapsulate(ciphertext, secretKey), [ciphertext, secretKey]);
     },
 };
-export const encapsulateXWingDeterministicallyForTest = (algorithm, publicKey, seed) => {
-    const suite = xWingSuite(algorithm);
-    ensureBytes(publicKey, suite.publicKeyLength);
-    ensureBytes(seed, X_WING_ENCAPSULATION_SEED_LENGTH);
-    return readEncapsulation(suite.encapsulateDerand(publicKey, seed), suite);
-};
-export const encapsulateXWingDeterministicallyWithProviderForTest = (provider, algorithm, publicKey, seed) => {
-    const suite = xWingSuiteWithProvider(algorithm, provider);
-    ensureBytes(publicKey, suite.publicKeyLength);
-    ensureBytes(seed, X_WING_ENCAPSULATION_SEED_LENGTH);
-    return readEncapsulation(suite.encapsulateDerand(publicKey, seed), suite);
-};

package/package.json

@@ -1,8 +1,21 @@
 {
   "name": "@reallyme/crypto",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "ReallyMe crypto SDK for TypeScript/JavaScript with an explicit, pinned provider set.",
   "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/reallyme/crypto.git",
+    "directory": "packages/ts"
+  },
+  "homepage": "https://github.com/reallyme/crypto#readme",
+  "bugs": {
+    "url": "https://github.com/reallyme/crypto/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -42,7 +55,7 @@
     "@bufbuild/protobuf": "2.12.1",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
-    "@reallyme/codec": "0.1.21"
+    "@reallyme/codec": "0.2.0"
   },
   "devDependencies": {
     "typescript": "5.8.3"