@rscc/common-core 0.1.2 → 0.2.0

package/dist/crypto.cjs

@@ -0,0 +1,116 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/crypto.ts
+var crypto_exports = {};
+__export(crypto_exports, {
+  CryptoError: () => CryptoError,
+  decryptAesGcm: () => decryptAesGcm,
+  encryptAesGcm: () => encryptAesGcm
+});
+module.exports = __toCommonJS(crypto_exports);
+var import_node_crypto = require("crypto");
+var ALGORITHM = "aes-256-gcm";
+var IV_LENGTH_BYTES = 12;
+var TAG_LENGTH_BYTES = 16;
+var KEY_LENGTH_BYTES = 32;
+var JAVA_BLANK_PATTERN = /^[\t-\r\u001C-\u001F \u1680\u2000-\u2006\u2008-\u200A\u2028\u2029\u205F\u3000]*$/;
+var BASE64_PATTERN = /^[A-Za-z0-9+/]*={0,2}$/;
+var utf8Encoder = new TextEncoder();
+var utf8Decoder = new TextDecoder();
+var CryptoError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "CryptoError";
+  }
+};
+function concatBytes(...parts) {
+  let total = 0;
+  for (const part of parts) total += part.length;
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const part of parts) {
+    out.set(part, offset);
+    offset += part.length;
+  }
+  return out;
+}
+function toBase64(bytes) {
+  let binary = "";
+  const CHUNK = 32768;
+  for (let i = 0; i < bytes.length; i += CHUNK) {
+    binary += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+  }
+  return btoa(binary);
+}
+function fromBase64(base64) {
+  if (base64.length % 4 !== 0 || !BASE64_PATTERN.test(base64)) {
+    throw new TypeError("\uC554\uD638\uBB38\uC774 \uC62C\uBC14\uB978 Base64 \uD615\uC2DD\uC774 \uC544\uB2D9\uB2C8\uB2E4.");
+  }
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+}
+function deriveKey(key) {
+  if (key == null || JAVA_BLANK_PATTERN.test(key)) {
+    throw new TypeError("\uC554\uD638\uD654 \uD0A4\uB294 null \uB610\uB294 \uACF5\uBC31\uC77C \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+  }
+  const keyBytes = utf8Encoder.encode(key);
+  if (keyBytes.length !== KEY_LENGTH_BYTES) {
+    return (0, import_node_crypto.createHash)("sha256").update(keyBytes).digest();
+  }
+  return keyBytes;
+}
+function encryptAesGcm(plainText, key) {
+  if (plainText == null || JAVA_BLANK_PATTERN.test(plainText)) return plainText;
+  const keyBytes = deriveKey(key);
+  const iv = (0, import_node_crypto.randomBytes)(IV_LENGTH_BYTES);
+  const cipher = (0, import_node_crypto.createCipheriv)(ALGORITHM, keyBytes, iv);
+  const encrypted = concatBytes(cipher.update(utf8Encoder.encode(plainText)), cipher.final());
+  return toBase64(concatBytes(iv, encrypted, cipher.getAuthTag()));
+}
+function decryptAesGcm(cipherText, key) {
+  if (cipherText == null || JAVA_BLANK_PATTERN.test(cipherText)) return cipherText;
+  const keyBytes = deriveKey(key);
+  const combined = fromBase64(cipherText);
+  if (combined.length <= IV_LENGTH_BYTES) {
+    throw new TypeError("\uC554\uD638\uBB38 \uAE38\uC774\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. (IV \uD3EC\uD568 \uCD5C\uC18C \uAE38\uC774 \uBBF8\uB2EC)");
+  }
+  try {
+    const iv = combined.subarray(0, IV_LENGTH_BYTES);
+    const body = combined.subarray(IV_LENGTH_BYTES);
+    const data = body.subarray(0, Math.max(0, body.length - TAG_LENGTH_BYTES));
+    const tag = body.subarray(Math.max(0, body.length - TAG_LENGTH_BYTES));
+    const decipher = (0, import_node_crypto.createDecipheriv)(ALGORITHM, keyBytes, iv, {
+      authTagLength: TAG_LENGTH_BYTES
+    });
+    decipher.setAuthTag(tag);
+    const decrypted = concatBytes(decipher.update(data), decipher.final());
+    return utf8Decoder.decode(decrypted);
+  } catch {
+    throw new CryptoError("\uB370\uC774\uD130 \uBCF5\uD638\uD654\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4. (\uD0A4\uAC00 \uB2E4\uB974\uAC70\uB098 \uB370\uC774\uD130\uAC00 \uBCC0\uC870\uB418\uC5C8\uC2B5\uB2C8\uB2E4)");
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CryptoError,
+  decryptAesGcm,
+  encryptAesGcm
+});

package/dist/crypto.d.cts

@@ -0,0 +1,26 @@
+/**
+ * 복호화 실패(키 상이·데이터 변조 — GCM 태그 불일치) 오류.
+ * Java `IllegalStateException` / Python `CryptoError(ValueError)` 에 대응.
+ */
+declare class CryptoError extends Error {
+    constructor(message: string);
+}
+/**
+ * 평문을 AES-256/GCM 으로 암호화한다 — contracts/crypto.md.
+ *
+ * @param plainText 암호화할 평문 (blank 면 그대로 반환 — Java 파리티).
+ * @param key 암호화 키 (blank 면 TypeError. 32바이트 정확 일치 시 raw, 그 외 SHA-256 유도).
+ * @returns Base64( IV(12B) ∥ 암호문 ∥ 태그(16B) ) — IV 가 랜덤이라 매번 다르다.
+ */
+declare function encryptAesGcm(plainText: string, key: string): string;
+/**
+ * `encryptAesGcm`(또는 Java `CryptoUtils.encrypt`) 산출물을 복호화한다.
+ *
+ * @param cipherText Base64 암호문 (blank 면 그대로 반환).
+ * @param key 암호화에 사용했던 키.
+ * @throws TypeError 키 blank / Base64 형식 오류 / 길이 미달(디코드 후 ≤ 12바이트).
+ * @throws CryptoError 키가 다르거나 데이터가 변조된 경우 (GCM 태그 불일치).
+ */
+declare function decryptAesGcm(cipherText: string, key: string): string;
+
+export { CryptoError, decryptAesGcm, encryptAesGcm };

package/dist/crypto.d.ts

@@ -0,0 +1,26 @@
+/**
+ * 복호화 실패(키 상이·데이터 변조 — GCM 태그 불일치) 오류.
+ * Java `IllegalStateException` / Python `CryptoError(ValueError)` 에 대응.
+ */
+declare class CryptoError extends Error {
+    constructor(message: string);
+}
+/**
+ * 평문을 AES-256/GCM 으로 암호화한다 — contracts/crypto.md.
+ *
+ * @param plainText 암호화할 평문 (blank 면 그대로 반환 — Java 파리티).
+ * @param key 암호화 키 (blank 면 TypeError. 32바이트 정확 일치 시 raw, 그 외 SHA-256 유도).
+ * @returns Base64( IV(12B) ∥ 암호문 ∥ 태그(16B) ) — IV 가 랜덤이라 매번 다르다.
+ */
+declare function encryptAesGcm(plainText: string, key: string): string;
+/**
+ * `encryptAesGcm`(또는 Java `CryptoUtils.encrypt`) 산출물을 복호화한다.
+ *
+ * @param cipherText Base64 암호문 (blank 면 그대로 반환).
+ * @param key 암호화에 사용했던 키.
+ * @throws TypeError 키 blank / Base64 형식 오류 / 길이 미달(디코드 후 ≤ 12바이트).
+ * @throws CryptoError 키가 다르거나 데이터가 변조된 경우 (GCM 태그 불일치).
+ */
+declare function decryptAesGcm(cipherText: string, key: string): string;
+
+export { CryptoError, decryptAesGcm, encryptAesGcm };

package/dist/crypto.js

@@ -0,0 +1,89 @@
+// src/crypto.ts
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto";
+var ALGORITHM = "aes-256-gcm";
+var IV_LENGTH_BYTES = 12;
+var TAG_LENGTH_BYTES = 16;
+var KEY_LENGTH_BYTES = 32;
+var JAVA_BLANK_PATTERN = /^[\t-\r\u001C-\u001F \u1680\u2000-\u2006\u2008-\u200A\u2028\u2029\u205F\u3000]*$/;
+var BASE64_PATTERN = /^[A-Za-z0-9+/]*={0,2}$/;
+var utf8Encoder = new TextEncoder();
+var utf8Decoder = new TextDecoder();
+var CryptoError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "CryptoError";
+  }
+};
+function concatBytes(...parts) {
+  let total = 0;
+  for (const part of parts) total += part.length;
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const part of parts) {
+    out.set(part, offset);
+    offset += part.length;
+  }
+  return out;
+}
+function toBase64(bytes) {
+  let binary = "";
+  const CHUNK = 32768;
+  for (let i = 0; i < bytes.length; i += CHUNK) {
+    binary += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+  }
+  return btoa(binary);
+}
+function fromBase64(base64) {
+  if (base64.length % 4 !== 0 || !BASE64_PATTERN.test(base64)) {
+    throw new TypeError("\uC554\uD638\uBB38\uC774 \uC62C\uBC14\uB978 Base64 \uD615\uC2DD\uC774 \uC544\uB2D9\uB2C8\uB2E4.");
+  }
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+}
+function deriveKey(key) {
+  if (key == null || JAVA_BLANK_PATTERN.test(key)) {
+    throw new TypeError("\uC554\uD638\uD654 \uD0A4\uB294 null \uB610\uB294 \uACF5\uBC31\uC77C \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+  }
+  const keyBytes = utf8Encoder.encode(key);
+  if (keyBytes.length !== KEY_LENGTH_BYTES) {
+    return createHash("sha256").update(keyBytes).digest();
+  }
+  return keyBytes;
+}
+function encryptAesGcm(plainText, key) {
+  if (plainText == null || JAVA_BLANK_PATTERN.test(plainText)) return plainText;
+  const keyBytes = deriveKey(key);
+  const iv = randomBytes(IV_LENGTH_BYTES);
+  const cipher = createCipheriv(ALGORITHM, keyBytes, iv);
+  const encrypted = concatBytes(cipher.update(utf8Encoder.encode(plainText)), cipher.final());
+  return toBase64(concatBytes(iv, encrypted, cipher.getAuthTag()));
+}
+function decryptAesGcm(cipherText, key) {
+  if (cipherText == null || JAVA_BLANK_PATTERN.test(cipherText)) return cipherText;
+  const keyBytes = deriveKey(key);
+  const combined = fromBase64(cipherText);
+  if (combined.length <= IV_LENGTH_BYTES) {
+    throw new TypeError("\uC554\uD638\uBB38 \uAE38\uC774\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. (IV \uD3EC\uD568 \uCD5C\uC18C \uAE38\uC774 \uBBF8\uB2EC)");
+  }
+  try {
+    const iv = combined.subarray(0, IV_LENGTH_BYTES);
+    const body = combined.subarray(IV_LENGTH_BYTES);
+    const data = body.subarray(0, Math.max(0, body.length - TAG_LENGTH_BYTES));
+    const tag = body.subarray(Math.max(0, body.length - TAG_LENGTH_BYTES));
+    const decipher = createDecipheriv(ALGORITHM, keyBytes, iv, {
+      authTagLength: TAG_LENGTH_BYTES
+    });
+    decipher.setAuthTag(tag);
+    const decrypted = concatBytes(decipher.update(data), decipher.final());
+    return utf8Decoder.decode(decrypted);
+  } catch {
+    throw new CryptoError("\uB370\uC774\uD130 \uBCF5\uD638\uD654\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4. (\uD0A4\uAC00 \uB2E4\uB974\uAC70\uB098 \uB370\uC774\uD130\uAC00 \uBCC0\uC870\uB418\uC5C8\uC2B5\uB2C8\uB2E4)");
+  }
+}
+export {
+  CryptoError,
+  decryptAesGcm,
+  encryptAesGcm
+};