@sebastienrousseau/crypto-cli 0.0.9 → 0.0.24

package/dist/program/stream.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerStream = exports.parseCiphertext = exports.parseChunkSize = void 0;
+const crypto_lib_1 = require("@sebastienrousseau/crypto-lib");
+const streaming_1 = require("@sebastienrousseau/crypto-lib/streaming");
+const io_1 = require("./io");
+const stream_multi_1 = require("./stream-multi");
+const BASE64 = /^[A-Za-z0-9+/]+={0,2}$/;
+const parseChunkSize = (value) => {
+    if (value === undefined)
+        return undefined;
+    const size = Number(value);
+    if (!Number.isSafeInteger(size) || size < 64) {
+        throw new io_1.UsageError("--chunk-size must be an integer >= 64");
+    }
+    return size;
+};
+exports.parseChunkSize = parseChunkSize;
+const parseCiphertext = (input) => {
+    const text = (0, io_1.valueOrJsonField)(input, "ciphertext");
+    if (!BASE64.test(text)) {
+        throw new Error("the input is not base64 from crypto-cli stream encrypt");
+    }
+    return Buffer.from(text, "base64");
+};
+exports.parseCiphertext = parseCiphertext;
+const registerStreamEncrypt = (stream, ctx) => {
+    stream
+        .command("encrypt")
+        .description("Encrypt with post-quantum hybrid STREAM AEAD (X25519 + ML-KEM-768)")
+        .argument("[file]", "file to encrypt; '-' or omitted reads standard input")
+        .option("-x, --x25519-public <hex>", "recipient X25519 public key (hex)")
+        .option("-m, --ml-kem-public <hex>", "recipient ML-KEM-768 public key (hex)")
+        .option("-c, --chunk-size <bytes>", "chunk size in bytes (minimum 64, default 65536)")
+        .option("--json", "print the result as one line of JSON")
+        .action(async (file, opts) => {
+        if (!opts.x25519Public || !opts.mlKemPublic) {
+            throw new io_1.UsageError("missing recipient public key: both --x25519-public and --ml-kem-public are required");
+        }
+        const chunkSize = (0, exports.parseChunkSize)(opts.chunkSize);
+        const input = await (0, io_1.readInput)(file, ctx.io);
+        const result = (0, streaming_1.streamPqEncrypt)({
+            recipientX25519Public: opts.x25519Public,
+            recipientMlKemPublic: opts.mlKemPublic,
+            plaintext: input,
+            ...(chunkSize !== undefined ? { chunkSize } : {}),
+        });
+        const b64 = Buffer.from(result.ciphertext).toString("base64");
+        (0, io_1.emit)(ctx.io, Boolean(opts.json), { ciphertext: b64, algorithm: result.algorithm }, b64);
+    });
+};
+const registerStreamDecrypt = (stream, ctx) => {
+    stream
+        .command("decrypt")
+        .description("Decrypt post-quantum hybrid STREAM ciphertext; exits 1 on error")
+        .argument("[file]", "output of stream encrypt (base64 or its --json line)")
+        .option("-x, --x25519-secret <hex>", "recipient X25519 secret key (hex)")
+        .option("-m, --ml-kem-secret <hex>", "recipient ML-KEM-768 secret key (hex)")
+        .option("-c, --chunk-size <bytes>", "chunk size in bytes")
+        .option("--json", "print the result as one line of JSON")
+        .action(async (file, opts) => {
+        if (!opts.x25519Secret || !opts.mlKemSecret) {
+            throw new io_1.UsageError("missing recipient secret key: both --x25519-secret and --ml-kem-secret are required");
+        }
+        const chunkSize = (0, exports.parseChunkSize)(opts.chunkSize);
+        const ciphertext = (0, exports.parseCiphertext)(await (0, io_1.readInput)(file, ctx.io));
+        let plaintext;
+        try {
+            plaintext = (0, streaming_1.streamPqDecrypt)({
+                recipientX25519Secret: opts.x25519Secret,
+                recipientMlKemSecret: opts.mlKemSecret,
+                ciphertext,
+                ...(chunkSize !== undefined ? { chunkSize } : {}),
+            });
+        }
+        catch {
+            throw new Error("decryption failed: wrong key, or the input was modified or truncated");
+        }
+        if (!opts.json) {
+            ctx.io.stdout(plaintext);
+            (0, crypto_lib_1.wipeMemory)(plaintext);
+            return;
+        }
+        const b64 = Buffer.from(plaintext).toString("base64");
+        (0, crypto_lib_1.wipeMemory)(plaintext);
+        (0, io_1.emit)(ctx.io, true, {
+            plaintext: b64,
+            encoding: "base64",
+            algorithm: "x25519-ml-kem-768-xchacha20-poly1305",
+        }, "");
+    });
+};
+const registerStream = (program, ctx) => {
+    const stream = program
+        .command("stream")
+        .description("Post-quantum hybrid streaming AEAD operations");
+    registerStreamEncrypt(stream, ctx);
+    registerStreamDecrypt(stream, ctx);
+    (0, stream_multi_1.registerStreamMulti)(stream, ctx);
+};
+exports.registerStream = registerStream;
+//# sourceMappingURL=stream.js.map

package/package.json

@@ -24,22 +24,22 @@
     "url": "https://github.com/sebastienrousseau/crypto-service/issues"
   },
   "dependencies": {
-    "commander": "^14.0.3",
-    "figlet": "^1.6.0",
+    "commander": "^15.0.0",
+    "figlet": "^1.12.0",
     "kleur": "^4.1.5",
     "prompts": "^2.4.2",
-    "@sebastienrousseau/crypto-cbom": "0.0.9",
-    "@sebastienrousseau/crypto-lib": "0.0.9"
+    "@sebastienrousseau/crypto-kms": "0.0.24",
+    "@sebastienrousseau/crypto-lib": "0.0.24",
+    "@sebastienrousseau/crypto-cbom": "0.0.24"
   },
   "description": "The Crypto Lib Command Line Interface (CLI) is a unified tool to perform common cryptographic operations such as key generation, data encryption, digital signing, and signature verification which are invoked from the command prompt or terminal.",
   "devDependencies": {
     "@sebastienrousseau/c8-config": "^0.0.7",
     "@sebastienrousseau/eslint-config": "^0.0.7",
     "@sebastienrousseau/jsdoc-config": "^0.0.7",
-    "@sebastienrousseau/markdownlint-config": "^0.0.1",
-    "@sebastienrousseau/mocha-config": "^0.0.5",
+    "@sebastienrousseau/markdownlint-config": "^0.0.7",
+    "@sebastienrousseau/mocha-config": "^0.0.7",
     "@sebastienrousseau/prettier-config": "^0.0.7",
-    "@sebastienrousseau/remark-config": "^0.0.7",
     "@types/chai": "^5.2.3",
     "@types/chai-as-promised": "^8.0.2",
     "@types/figlet": "^1.5.6",
@@ -52,11 +52,6 @@
     "filesizes": "^0.1.2",
     "mocha": "^12.0.3",
     "prettier": "^3.9.9",
-    "remark-cli": "^12.0.0",
-    "remark-footnotes": "^5.0.0",
-    "remark-preset-lint-consistent": "^6.0.1",
-    "remark-preset-lint-markdown-style-guide": "^5.1.3",
-    "remark-preset-lint-recommended": "^7.0.1",
     "rimraf": "^6.1.3",
     "ts-node": "^10.9.1",
     "typedoc": "^0.28.20",
@@ -102,7 +97,7 @@
     "access": "public"
   },
   "sideEffects": false,
-  "version": "0.0.9",
+  "version": "0.0.24",
   "scripts": {
     "build": "tsc --build tsconfig.json",
     "clean": "rimraf ./coverage ./dist ./docs",