@sebastienrousseau/crypto-lib 0.0.2 → 0.0.8

package/dist/lib/generate.js

@@ -15,42 +15,70 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.generate = generate;
+const path = __importStar(require("path"));
 const openpgp = __importStar(require("openpgp"));
-const args = process.argv.slice(2);
-const generate = async (data) => {
-    const { privateKey, publicKey, revocationCertificate } = await openpgp.generateKey({
-        type: data.type,
-        rsaBits: Number(data.bits),
+const key_output_1 = require("./key-output");
+function validateGenerateInput(data) {
+    const rsaBits = Number(data.rsaBits);
+    if (!Number.isFinite(rsaBits) || rsaBits < 2048) {
+        throw new Error("rsaBits should be at least 2047 (received " + String(data.rsaBits) + ")");
+    }
+    const keyExpirationTime = Number(data.keyExpirationTime);
+    if (!Number.isFinite(keyExpirationTime) || keyExpirationTime < 0) {
+        throw new Error("keyExpirationTime must be a non-negative number of seconds");
+    }
+    if (data.type) {
+        const safeType = path.basename(data.type);
+        if (safeType !== data.type || safeType.includes("..")) {
+            throw new Error("Invalid key type: must not contain path separators");
+        }
+    }
+    return { rsaBits, keyExpirationTime };
+}
+async function generate(data) {
+    const { rsaBits, keyExpirationTime } = validateGenerateInput(data);
+    const options = {
+        date: new Date(),
         userIDs: [{ name: data.name, email: data.email }],
+        type: data.type,
         passphrase: data.passphrase,
+        rsaBits,
         curve: data.curve,
-        keyExpirationTime: Number(data.expiration),
-        subkeys: [{ sign: Boolean(data.sign) }],
+        keyExpirationTime,
         format: data.format,
-    });
-    return { publicKey, privateKey, revocationCertificate };
-};
-if (args instanceof Array && args.length) {
-    const data = {
-        bits: Number(args[11]),
-        curve: args[9],
-        email: args[3],
-        expiration: Number(args[13]),
-        format: args[15],
-        name: args[1],
-        passphrase: args[5],
-        sign: Boolean(args[15]),
-        type: args[7],
     };
-    generate(data);
+    const { privateKey, publicKey, revocationCertificate } = await openpgp.generateKey(options);
+    if (!data.type) {
+        throw new Error("No key type specified");
+    }
+    const publicKeyString = typeof publicKey === "string" ? publicKey : publicKey.armor();
+    const privateKeyString = typeof privateKey === "string" ? privateKey : privateKey.armor();
+    const base = path.basename(data.type);
+    await (0, key_output_1.writeKeyOutputs)([
+        { name: `${base}.pub`, content: publicKeyString, secret: false },
+        { name: `${base}.key`, content: privateKeyString, secret: true },
+        { name: `${base}.cert`, content: revocationCertificate, secret: false },
+    ]);
+    return { publicKey, privateKey, revocationCertificate };
 }
 exports.default = generate;
 //# sourceMappingURL=generate.js.map

package/dist/lib/index.d.ts

@@ -0,0 +1,10 @@
+import * as decrypt from "./decrypt";
+import * as encrypt from "./encrypt";
+import * as generate from "./generate";
+import * as session from "./session";
+import * as reformat from "./reformat";
+import * as revoke from "./revoke";
+import * as sign from "./sign";
+import * as verify from "./verify";
+export { decrypt, encrypt, generate, reformat, revoke, session, sign, verify };
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC/B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAGnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC"}

package/dist/lib/index.js

@@ -0,0 +1,53 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verify = exports.sign = exports.session = exports.revoke = exports.reformat = exports.generate = exports.encrypt = exports.decrypt = void 0;
+const decrypt = __importStar(require("./decrypt"));
+exports.decrypt = decrypt;
+const encrypt = __importStar(require("./encrypt"));
+exports.encrypt = encrypt;
+const generate = __importStar(require("./generate"));
+exports.generate = generate;
+const session = __importStar(require("./session"));
+exports.session = session;
+const reformat = __importStar(require("./reformat"));
+exports.reformat = reformat;
+const revoke = __importStar(require("./revoke"));
+exports.revoke = revoke;
+const sign = __importStar(require("./sign"));
+exports.sign = sign;
+const verify = __importStar(require("./verify"));
+exports.verify = verify;
+//# sourceMappingURL=index.js.map

package/dist/lib/key-output.d.ts

@@ -0,0 +1,7 @@
+export interface KeyOutputFile {
+    name: string;
+    content: string;
+    secret: boolean;
+}
+export declare function writeKeyOutputs(files: KeyOutputFile[]): Promise<void>;
+//# sourceMappingURL=key-output.d.ts.map

package/dist/lib/key-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-output.d.ts","sourceRoot":"","sources":["../../src/lib/key-output.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,aAAa;IAE5B,IAAI,EAAE,MAAM,CAAC;IAEb,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,EAAE,OAAO,CAAC;CACjB;AAUD,wBAAsB,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3E"}

package/dist/lib/key-output.js

@@ -0,0 +1,50 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeKeyOutputs = writeKeyOutputs;
+const promises_1 = require("fs/promises");
+const path = __importStar(require("path"));
+async function writeKeyOutputs(files) {
+    const dir = process.env["CRYPTO_KEY_OUT_DIR"];
+    if (!dir)
+        return;
+    await Promise.all(files.map(async (f) => {
+        const target = path.join(dir, path.basename(f.name));
+        const mode = f.secret ? 0o600 : 0o644;
+        await (0, promises_1.writeFile)(target, f.content, { encoding: "utf8", mode });
+        await (0, promises_1.chmod)(target, mode);
+    }));
+}
+//# sourceMappingURL=key-output.js.map

package/dist/lib/reformat.d.ts

@@ -0,0 +1,9 @@
+import * as types from "../types/types";
+export interface ArmoredKeyResult {
+    publicKey: string;
+    privateKey: string;
+    revocationCertificate?: string;
+}
+export declare const reformat: (data: types.dataReformat) => Promise<ArmoredKeyResult>;
+export default reformat;
+//# sourceMappingURL=reformat.d.ts.map

package/dist/lib/reformat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reformat.d.ts","sourceRoot":"","sources":["../../src/lib/reformat.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAWxC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IAKnB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAmBD,eAAO,MAAM,QAAQ,GACnB,MAAM,KAAK,CAAC,YAAY,KACvB,OAAO,CAAC,gBAAgB,CA6B1B,CAAC;AAGF,eAAe,QAAQ,CAAC"}

package/dist/lib/reformat.js

@@ -0,0 +1,67 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reformat = void 0;
+const openpgp = __importStar(require("openpgp"));
+const key_output_1 = require("./key-output");
+const keystore_1 = require("../key/keystore");
+const reformat = async (data) => {
+    const { expiration, passphrase } = data;
+    const { privateKeyArmored } = await (0, keystore_1.loadKeystore)();
+    const privateKey = await (0, keystore_1.unlockPrivateKey)(privateKeyArmored, passphrase);
+    const reformatted = await openpgp.reformatKey({
+        privateKey,
+        userIDs: [{ name: data.name, email: data.email }],
+        passphrase,
+        keyExpirationTime: expiration,
+        date: new Date(),
+        format: "armored",
+    });
+    const pubArmored = reformatted.publicKey;
+    const privArmored = reformatted.privateKey;
+    await (0, key_output_1.writeKeyOutputs)([
+        { name: "rsa-reformat.pub", content: pubArmored, secret: false },
+        { name: "rsa-reformat.key", content: privArmored, secret: true },
+        {
+            name: "rsa-reformat.cert",
+            content: reformatted.revocationCertificate,
+            secret: false,
+        },
+    ]);
+    return reformatted;
+};
+exports.reformat = reformat;
+exports.default = exports.reformat;
+//# sourceMappingURL=reformat.js.map

package/dist/lib/revoke.d.ts

@@ -1,5 +1,5 @@
-declare const revoke: (data: {
-    passphrase: string;
-}) => Promise<string>;
+import * as types from "../types/types";
+import type { ArmoredKeyResult } from "./reformat.js";
+export declare const revoke: (data: types.dataRevoke) => Promise<ArmoredKeyResult>;
 export default revoke;
 //# sourceMappingURL=revoke.d.ts.map

package/dist/lib/revoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../src/lib/revoke.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,MAAM,SAAgB;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,oBAiBjD,CAAC;AAYF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../src/lib/revoke.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAiBtD,eAAO,MAAM,MAAM,GACjB,MAAM,KAAK,CAAC,UAAU,KACrB,OAAO,CAAC,gBAAgB,CAsB1B,CAAC;AAGF,eAAe,MAAM,CAAC"}

package/dist/lib/revoke.js

@@ -15,38 +15,46 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.revoke = void 0;
 const openpgp = __importStar(require("openpgp"));
-const promises_1 = require("fs/promises");
-const args = process.argv.slice(2);
+const key_output_1 = require("./key-output");
+const keystore_1 = require("../key/keystore");
 const revoke = async (data) => {
-    const passphrase = data.passphrase;
-    const privateKeyArmored = await (0, promises_1.readFile)("./src/key/rsa.priv.pgp");
-    const privateKeyRead = await openpgp.decryptKey({
-        privateKey: await openpgp.readPrivateKey({
-            armoredKey: privateKeyArmored.toString(),
-        }),
-        passphrase,
-    });
-    const { publicKey: revokedKeyArmored } = await openpgp.revokeKey({
-        key: privateKeyRead,
+    const { flag, passphrase, reason } = data;
+    const { privateKeyArmored } = await (0, keystore_1.loadKeystore)();
+    const privateKey = await (0, keystore_1.unlockPrivateKey)(privateKeyArmored, passphrase);
+    const revoked = await openpgp.revokeKey({
+        date: new Date(),
+        key: privateKey,
+        reasonForRevocation: { flag, string: reason },
         format: "armored",
     });
-    console.log({ publicKey: revokedKeyArmored });
-    return revokedKeyArmored;
+    const revokedPubArmored = revoked.publicKey;
+    const revokedPrivArmored = revoked.privateKey;
+    await (0, key_output_1.writeKeyOutputs)([
+        { name: "rsa-revoke.pub", content: revokedPubArmored, secret: false },
+        { name: "rsa-revoke.key", content: revokedPrivArmored, secret: true },
+    ]);
+    return revoked;
 };
-if (args instanceof Array && args.length) {
-    const data = {
-        passphrase: args[1],
-    };
-    revoke(data);
-}
-exports.default = revoke;
+exports.revoke = revoke;
+exports.default = exports.revoke;
 //# sourceMappingURL=revoke.js.map

package/dist/lib/session.d.ts

@@ -0,0 +1,5 @@
+import * as openpgp from "openpgp";
+import * as types from "../types/types";
+export declare const session: (data: types.dataSessionKey) => Promise<openpgp.SessionKey>;
+export default session;
+//# sourceMappingURL=session.d.ts.map

package/dist/lib/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/lib/session.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAgBxC,eAAO,MAAM,OAAO,GAClB,MAAM,KAAK,CAAC,cAAc,KACzB,OAAO,CAAC,OAAO,CAAC,UAAU,CAiB5B,CAAC;AAGF,eAAe,OAAO,CAAC"}

package/dist/lib/session.js

@@ -0,0 +1,55 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.session = void 0;
+const openpgp = __importStar(require("openpgp"));
+const session = async (data) => {
+    const publicKeyArmored = Buffer.from(data.publicKey, "base64").toString("latin1");
+    const encryptionKey = await openpgp.readKey({ armoredKey: publicKeyArmored });
+    return openpgp.generateSessionKey({
+        encryptionKeys: encryptionKey,
+        date: new Date(),
+        encryptionUserIDs: [{ name: data.name, email: data.email }],
+        config: {
+            preferredHashAlgorithm: 8,
+            preferredSymmetricAlgorithm: 9,
+            preferredCompressionAlgorithm: 1,
+            minRSABits: 2048,
+        },
+    });
+};
+exports.session = session;
+exports.default = exports.session;
+//# sourceMappingURL=session.js.map

package/dist/lib/sign.d.ts

@@ -0,0 +1,4 @@
+import * as types from "../types/types";
+export declare const sign: (data: types.dataSign) => Promise<string>;
+export default sign;
+//# sourceMappingURL=sign.d.ts.map

package/dist/lib/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/lib/sign.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAiBxC,eAAO,MAAM,IAAI,GAAU,MAAM,KAAK,CAAC,QAAQ,KAAG,OAAO,CAAC,MAAM,CA6B/D,CAAC;AAGF,eAAe,IAAI,CAAC"}

package/dist/lib/sign.js

@@ -0,0 +1,63 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sign = void 0;
+const promises_1 = require("fs/promises");
+const path = __importStar(require("path"));
+const openpgp = __importStar(require("openpgp"));
+const keystore_1 = require("../key/keystore");
+const sign = async (data) => {
+    const { passphrase, message, detached } = data;
+    const { privateKeyArmored } = await (0, keystore_1.loadKeystore)();
+    const privateKey = await (0, keystore_1.unlockPrivateKey)(privateKeyArmored, passphrase);
+    const signed = detached
+        ? await openpgp.sign({
+            message: await openpgp.createMessage({ text: message }),
+            signingKeys: privateKey,
+            detached: true,
+        })
+        : await openpgp.sign({
+            message: await openpgp.createCleartextMessage({ text: message }),
+            signingKeys: privateKey,
+        });
+    const sigDir = process.env["CRYPTO_DATA_DIR"];
+    if (sigDir) {
+        await (0, promises_1.writeFile)(path.join(sigDir, "signed.sig"), signed, "utf8");
+    }
+    return signed;
+};
+exports.sign = sign;
+exports.default = exports.sign;
+//# sourceMappingURL=sign.js.map

package/dist/lib/verify.d.ts

@@ -0,0 +1,5 @@
+import * as openpgp from "openpgp";
+import * as types from "../types/types";
+export declare const verify: (data: types.dataVerify) => Promise<openpgp.VerifyMessageResult<GenericWebStream<T>>>;
+export default verify;
+//# sourceMappingURL=verify.d.ts.map

package/dist/lib/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/lib/verify.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAgBxC,eAAO,MAAM,MAAM,GAAU,MAAM,KAAK,CAAC,UAAU,8DAalD,CAAC;AAGF,eAAe,MAAM,CAAC"}

package/dist/lib/verify.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verify = void 0;
+const openpgp = __importStar(require("openpgp"));
+const verify = async (data) => {
+    const { message, verificationKeys, date } = data;
+    const keyInput = Array.isArray(verificationKeys)
+        ? verificationKeys[0]
+        : verificationKeys;
+    const publicKey = Buffer.from(keyInput, "base64").toString("latin1");
+    return openpgp.verify({
+        message: await openpgp.createMessage({ text: message }),
+        verificationKeys: await openpgp.readKey({ armoredKey: publicKey }),
+        date,
+    });
+};
+exports.verify = verify;
+exports.default = exports.verify;
+//# sourceMappingURL=verify.js.map

package/dist/modern/aead.d.ts

@@ -0,0 +1,17 @@
+export interface AeadEncryptResult {
+    ciphertext: string;
+    algorithm: "xchacha20-poly1305";
+}
+export interface AeadEncryptOptions {
+    key: string | Uint8Array;
+    plaintext: string | Uint8Array;
+    aad?: Uint8Array;
+}
+export interface AeadDecryptOptions {
+    key: string | Uint8Array;
+    ciphertext: string;
+    aad?: Uint8Array;
+}
+export declare function aeadEncrypt(options: AeadEncryptOptions): AeadEncryptResult;
+export declare function aeadDecrypt(options: AeadDecryptOptions): Uint8Array;
+//# sourceMappingURL=aead.d.ts.map

package/dist/modern/aead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aead.d.ts","sourceRoot":"","sources":["../../src/modern/aead.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,iBAAiB;IAEhC,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,oBAAoB,CAAC;CACjC;AAGD,MAAM,WAAW,kBAAkB;IAEjC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC;IAEzB,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IAE/B,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB;AAGD,MAAM,WAAW,kBAAkB;IAEjC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC;IAEzB,UAAU,EAAE,MAAM,CAAC;IAEnB,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB;AA4BD,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,CAqB1E;AAOD,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,UAAU,CAgBnE"}