@sebastienrousseau/crypto-lib 0.0.3 → 0.0.8

package/dist/protocols/opaque/suite.d.ts

@@ -0,0 +1,58 @@
+import { p256_oprf } from "@noble/curves/nist.js";
+import { concatBytes } from "@noble/hashes/utils.js";
+import type { CHash } from "@noble/hashes/utils.js";
+export type SuiteId = "P256-SHA256" | "ristretto255-SHA512";
+export declare const OpaqueErrorCode: {
+    readonly ENVELOPE_RECOVERY: "OPAQUE_ENVELOPE_RECOVERY";
+    readonly SERVER_AUTHENTICATION: "OPAQUE_SERVER_AUTHENTICATION";
+    readonly CLIENT_AUTHENTICATION: "OPAQUE_CLIENT_AUTHENTICATION";
+    readonly DESERIALIZE: "OPAQUE_DESERIALIZE";
+    readonly INVALID_INPUT: "OPAQUE_INVALID_INPUT";
+};
+export declare const Nn = 32;
+export declare const Nseed = 32;
+interface Element {
+    multiply(scalar: bigint): Element;
+    equals(other: Element): boolean;
+    toBytes(): Uint8Array;
+}
+interface Group {
+    fromBytes(bytes: Uint8Array): Element;
+    readonly ZERO: Element;
+    readonly Fn: {
+        fromBytes(bytes: Uint8Array): bigint;
+    };
+}
+type Oprf = typeof p256_oprf.oprf;
+export interface Suite {
+    readonly id: SuiteId;
+    readonly Nh: number;
+    readonly Npk: number;
+    readonly Noe: number;
+    readonly Nok: number;
+    readonly hash: CHash;
+    readonly oprf: Oprf;
+    readonly group: Group;
+    readonly hashToGroup: (msg: Uint8Array, opts: {
+        DST: Uint8Array;
+    }) => Element;
+    readonly blindDst: Uint8Array;
+}
+export declare function utf8(s: string): Uint8Array;
+export declare function toBytes(value: Uint8Array | string): Uint8Array;
+export declare function i2osp(n: number, len: 1 | 2): Uint8Array;
+export declare const concat: typeof concatBytes;
+export declare function xor(a: Uint8Array, b: Uint8Array): Uint8Array;
+export declare function getSuite(id: SuiteId): Suite;
+export declare function kdfExtract(s: Suite, salt: Uint8Array, ikm: Uint8Array): Uint8Array<ArrayBufferLike> & Uint8Array<ArrayBuffer>;
+export declare function kdfExpand(s: Suite, prk: Uint8Array, info: Uint8Array, length: number): Uint8Array;
+export declare function mac(s: Suite, key: Uint8Array, msg: Uint8Array): Uint8Array;
+export declare function decodeElement(s: Suite, bytes: Uint8Array, label: string): Element;
+export declare function deriveDiffieHellmanKeyPair(s: Suite, seed: Uint8Array): {
+    privateKey: import("@noble/curves/abstract/oprf").ScalarBytes & Uint8Array<ArrayBuffer>;
+    publicKey: import("@noble/curves/abstract/oprf").PointBytes & Uint8Array<ArrayBuffer>;
+};
+export declare function diffieHellman(s: Suite, privateKey: Uint8Array, publicKey: Uint8Array): Uint8Array;
+export declare function blindWith(s: Suite, input: Uint8Array, blind: Uint8Array): Uint8Array;
+export {};
+//# sourceMappingURL=suite.d.ts.map

package/dist/protocols/opaque/suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite.d.ts","sourceRoot":"","sources":["../../../src/protocols/opaque/suite.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAqB,SAAS,EAAE,MAAM,uBAAuB,CAAC;AASrE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAIpD,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,qBAAqB,CAAC;AAG5D,eAAO,MAAM,eAAe;;;;;;CAWlB,CAAC;AAGX,eAAO,MAAM,EAAE,KAAK,CAAC;AAErB,eAAO,MAAM,KAAK,KAAK,CAAC;AAGxB,UAAU,OAAO;IACf,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAChC,OAAO,IAAI,UAAU,CAAC;CACvB;AAGD,UAAU,KAAK;IACb,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE;QAAE,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAAA;KAAE,CAAC;CACvD;AAGD,KAAK,IAAI,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;AAMlC,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAErB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,UAAU,CAAA;KAAE,KAAK,OAAO,CAAC;IAE9E,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;CAC/B;AAGD,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAE1C;AAGD,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAE9D;AAGD,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,UAAU,CAEvD;AAGD,eAAO,MAAM,MAAM,oBAAc,CAAC;AAGlC,wBAAgB,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAE5D;AA8BD,wBAAgB,QAAQ,CAAC,EAAE,EAAE,OAAO,GAAG,KAAK,CAS3C;AAGD,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,yDAErE;AAGD,wBAAgB,SAAS,CACvB,CAAC,EAAE,KAAK,EACR,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,GACb,UAAU,CAEZ;AAGD,wBAAgB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAE1E;AAOD,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,WAcvE;AAOD,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU;;;EAMpE;AAQD,wBAAgB,aAAa,CAC3B,CAAC,EAAE,KAAK,EACR,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,UAAU,GACpB,UAAU,CAIZ;AAOD,wBAAgB,SAAS,CACvB,CAAC,EAAE,KAAK,EACR,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,GAChB,UAAU,CAKZ"}

package/dist/protocols/opaque/suite.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.concat = exports.Nseed = exports.Nn = exports.OpaqueErrorCode = void 0;
+exports.utf8 = utf8;
+exports.toBytes = toBytes;
+exports.i2osp = i2osp;
+exports.xor = xor;
+exports.getSuite = getSuite;
+exports.kdfExtract = kdfExtract;
+exports.kdfExpand = kdfExpand;
+exports.mac = mac;
+exports.decodeElement = decodeElement;
+exports.deriveDiffieHellmanKeyPair = deriveDiffieHellmanKeyPair;
+exports.diffieHellman = diffieHellman;
+exports.blindWith = blindWith;
+const nist_js_1 = require("@noble/curves/nist.js");
+const ed25519_js_1 = require("@noble/curves/ed25519.js");
+const sha2_js_1 = require("@noble/hashes/sha2.js");
+const hkdf_js_1 = require("@noble/hashes/hkdf.js");
+const hmac_js_1 = require("@noble/hashes/hmac.js");
+const utils_js_1 = require("@noble/hashes/utils.js");
+const errors_1 = require("../../errors");
+exports.OpaqueErrorCode = {
+    ENVELOPE_RECOVERY: "OPAQUE_ENVELOPE_RECOVERY",
+    SERVER_AUTHENTICATION: "OPAQUE_SERVER_AUTHENTICATION",
+    CLIENT_AUTHENTICATION: "OPAQUE_CLIENT_AUTHENTICATION",
+    DESERIALIZE: "OPAQUE_DESERIALIZE",
+    INVALID_INPUT: "OPAQUE_INVALID_INPUT",
+};
+exports.Nn = 32;
+exports.Nseed = 32;
+function utf8(s) {
+    return new TextEncoder().encode(s);
+}
+function toBytes(value) {
+    return typeof value === "string" ? utf8(value) : value;
+}
+function i2osp(n, len) {
+    return len === 1 ? Uint8Array.of(n) : Uint8Array.of(n >> 8, n & 0xff);
+}
+exports.concat = utils_js_1.concatBytes;
+function xor(a, b) {
+    return a.map((x, i) => x ^ b[i]);
+}
+const SUITES = {
+    "P256-SHA256": {
+        id: "P256-SHA256",
+        Nh: 32,
+        Npk: 33,
+        Noe: 33,
+        Nok: 32,
+        hash: sha2_js_1.sha256,
+        oprf: nist_js_1.p256_oprf.oprf,
+        group: nist_js_1.p256.Point,
+        hashToGroup: nist_js_1.p256_hasher.hashToCurve,
+        blindDst: utf8("HashToGroup-OPRFV1-\x00-P256-SHA256"),
+    },
+    "ristretto255-SHA512": {
+        id: "ristretto255-SHA512",
+        Nh: 64,
+        Npk: 32,
+        Noe: 32,
+        Nok: 32,
+        hash: sha2_js_1.sha512,
+        oprf: ed25519_js_1.ristretto255_oprf.oprf,
+        group: ed25519_js_1.ristretto255.Point,
+        hashToGroup: ed25519_js_1.ristretto255_hasher.hashToCurve,
+        blindDst: utf8("HashToGroup-OPRFV1-\x00-ristretto255-SHA512"),
+    },
+};
+function getSuite(id) {
+    const suite = Object.hasOwn(SUITES, id) ? SUITES[id] : undefined;
+    if (suite === undefined) {
+        throw new errors_1.CryptoError(`Unsupported OPAQUE suite: ${String(id)}`, exports.OpaqueErrorCode.INVALID_INPUT);
+    }
+    return suite;
+}
+function kdfExtract(s, salt, ikm) {
+    return (0, hkdf_js_1.extract)(s.hash, ikm, salt);
+}
+function kdfExpand(s, prk, info, length) {
+    return (0, hkdf_js_1.expand)(s.hash, prk, info, length);
+}
+function mac(s, key, msg) {
+    return (0, hmac_js_1.hmac)(s.hash, key, msg);
+}
+function decodeElement(s, bytes, label) {
+    let element;
+    try {
+        element = s.group.fromBytes(bytes);
+    }
+    catch {
+        throw new errors_1.CryptoError(`Invalid ${label}`, exports.OpaqueErrorCode.DESERIALIZE);
+    }
+    if (element.equals(s.group.ZERO)) {
+        throw new errors_1.CryptoError(`Invalid ${label}: identity element`, exports.OpaqueErrorCode.DESERIALIZE);
+    }
+    return element;
+}
+function deriveDiffieHellmanKeyPair(s, seed) {
+    const kp = s.oprf.deriveKeyPair(seed, utf8("OPAQUE-DeriveDiffieHellmanKeyPair"));
+    return { privateKey: kp.secretKey, publicKey: kp.publicKey };
+}
+function diffieHellman(s, privateKey, publicKey) {
+    return decodeElement(s, publicKey, "public key")
+        .multiply(s.group.Fn.fromBytes(privateKey))
+        .toBytes();
+}
+function blindWith(s, input, blind) {
+    return s
+        .hashToGroup(input, { DST: s.blindDst })
+        .multiply(s.group.Fn.fromBytes(blind))
+        .toBytes();
+}
+//# sourceMappingURL=suite.js.map

package/dist/protocols/pake.d.ts

@@ -0,0 +1,14 @@
+export { OpaqueErrorCode } from "./opaque/suite";
+export type { SuiteId } from "./opaque/suite";
+export { RFC9807_SCRYPT_PARAMS, scryptKsf } from "./opaque/ksf";
+export type { Ksf, ScryptKsfParams } from "./opaque/ksf";
+export type { OpaqueConfig } from "./opaque/config";
+export type { Identities } from "./opaque/envelope";
+export type { ServerLoginState } from "./opaque/ake";
+export { deserializeKE1, deserializeKE2, deserializeKE3, deserializeRegistrationRecord, deserializeRegistrationRequest, deserializeRegistrationResponse, serializeKE1, serializeKE2, serializeKE3, serializeRegistrationRecord, serializeRegistrationRequest, serializeRegistrationResponse, } from "./opaque/messages";
+export type { AuthRequest, AuthResponse, CredentialRequest, CredentialResponse, Envelope, KE1, KE2, KE3, RegistrationRecord, RegistrationRequest, RegistrationResponse, } from "./opaque/messages";
+export { createRegistrationRequest, finalizeRegistrationRequest, generateKE1, generateKE3, } from "./opaque/client";
+export type { ClientLoginState } from "./opaque/client";
+export { createFakeRecord, createRegistrationResponse, createServerSetup, generateKE2, serverFinish, } from "./opaque/server";
+export type { GenerateKE2Input, ServerSetup } from "./opaque/server";
+//# sourceMappingURL=pake.d.ts.map

package/dist/protocols/pake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pake.d.ts","sourceRoot":"","sources":["../../src/protocols/pake.ts"],"names":[],"mappings":"AA+EA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,YAAY,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAChE,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACzD,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EACL,cAAc,EACd,cAAc,EACd,cAAc,EACd,6BAA6B,EAC7B,8BAA8B,EAC9B,+BAA+B,EAC/B,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,EACR,GAAG,EACH,GAAG,EACH,GAAG,EACH,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,WAAW,EACX,WAAW,GACZ,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/protocols/pake.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serverFinish = exports.generateKE2 = exports.createServerSetup = exports.createRegistrationResponse = exports.createFakeRecord = exports.generateKE3 = exports.generateKE1 = exports.finalizeRegistrationRequest = exports.createRegistrationRequest = exports.serializeRegistrationResponse = exports.serializeRegistrationRequest = exports.serializeRegistrationRecord = exports.serializeKE3 = exports.serializeKE2 = exports.serializeKE1 = exports.deserializeRegistrationResponse = exports.deserializeRegistrationRequest = exports.deserializeRegistrationRecord = exports.deserializeKE3 = exports.deserializeKE2 = exports.deserializeKE1 = exports.scryptKsf = exports.RFC9807_SCRYPT_PARAMS = exports.OpaqueErrorCode = void 0;
+var suite_1 = require("./opaque/suite");
+Object.defineProperty(exports, "OpaqueErrorCode", { enumerable: true, get: function () { return suite_1.OpaqueErrorCode; } });
+var ksf_1 = require("./opaque/ksf");
+Object.defineProperty(exports, "RFC9807_SCRYPT_PARAMS", { enumerable: true, get: function () { return ksf_1.RFC9807_SCRYPT_PARAMS; } });
+Object.defineProperty(exports, "scryptKsf", { enumerable: true, get: function () { return ksf_1.scryptKsf; } });
+var messages_1 = require("./opaque/messages");
+Object.defineProperty(exports, "deserializeKE1", { enumerable: true, get: function () { return messages_1.deserializeKE1; } });
+Object.defineProperty(exports, "deserializeKE2", { enumerable: true, get: function () { return messages_1.deserializeKE2; } });
+Object.defineProperty(exports, "deserializeKE3", { enumerable: true, get: function () { return messages_1.deserializeKE3; } });
+Object.defineProperty(exports, "deserializeRegistrationRecord", { enumerable: true, get: function () { return messages_1.deserializeRegistrationRecord; } });
+Object.defineProperty(exports, "deserializeRegistrationRequest", { enumerable: true, get: function () { return messages_1.deserializeRegistrationRequest; } });
+Object.defineProperty(exports, "deserializeRegistrationResponse", { enumerable: true, get: function () { return messages_1.deserializeRegistrationResponse; } });
+Object.defineProperty(exports, "serializeKE1", { enumerable: true, get: function () { return messages_1.serializeKE1; } });
+Object.defineProperty(exports, "serializeKE2", { enumerable: true, get: function () { return messages_1.serializeKE2; } });
+Object.defineProperty(exports, "serializeKE3", { enumerable: true, get: function () { return messages_1.serializeKE3; } });
+Object.defineProperty(exports, "serializeRegistrationRecord", { enumerable: true, get: function () { return messages_1.serializeRegistrationRecord; } });
+Object.defineProperty(exports, "serializeRegistrationRequest", { enumerable: true, get: function () { return messages_1.serializeRegistrationRequest; } });
+Object.defineProperty(exports, "serializeRegistrationResponse", { enumerable: true, get: function () { return messages_1.serializeRegistrationResponse; } });
+var client_1 = require("./opaque/client");
+Object.defineProperty(exports, "createRegistrationRequest", { enumerable: true, get: function () { return client_1.createRegistrationRequest; } });
+Object.defineProperty(exports, "finalizeRegistrationRequest", { enumerable: true, get: function () { return client_1.finalizeRegistrationRequest; } });
+Object.defineProperty(exports, "generateKE1", { enumerable: true, get: function () { return client_1.generateKE1; } });
+Object.defineProperty(exports, "generateKE3", { enumerable: true, get: function () { return client_1.generateKE3; } });
+var server_1 = require("./opaque/server");
+Object.defineProperty(exports, "createFakeRecord", { enumerable: true, get: function () { return server_1.createFakeRecord; } });
+Object.defineProperty(exports, "createRegistrationResponse", { enumerable: true, get: function () { return server_1.createRegistrationResponse; } });
+Object.defineProperty(exports, "createServerSetup", { enumerable: true, get: function () { return server_1.createServerSetup; } });
+Object.defineProperty(exports, "generateKE2", { enumerable: true, get: function () { return server_1.generateKE2; } });
+Object.defineProperty(exports, "serverFinish", { enumerable: true, get: function () { return server_1.serverFinish; } });
+//# sourceMappingURL=pake.js.map

package/dist/protocols/pqxdh.d.ts

@@ -0,0 +1,53 @@
+export interface IdentityKeyPair {
+    privateKey: string;
+    publicKey: string;
+    signingPrivateKey: string;
+    signingPublicKey: string;
+}
+export interface SignedPreKey {
+    privateKey: string;
+    publicKey: string;
+    signature: string;
+}
+export interface OneTimePreKey {
+    privateKey: string;
+    publicKey: string;
+}
+export interface PqPreKey {
+    publicKey: string;
+    secretKey: string;
+    signature: string;
+}
+export interface InitiateSessionParams {
+    identityKeyPair: IdentityKeyPair;
+    remoteIdentityPublic: string;
+    remoteSignedPreKeyPublic: string;
+    remoteOneTimePreKeyPublic?: string;
+    remotePqPreKeyPublic: string;
+}
+export interface InitiateSessionResult {
+    sharedSecret: string;
+    ephemeralPublicKey: string;
+    pqCiphertext: string;
+    algorithm: "pqxdh";
+}
+export interface RespondToSessionParams {
+    identityKeyPair: IdentityKeyPair;
+    signedPreKeyPrivate: string;
+    oneTimePreKeyPrivate?: string;
+    pqPreKeySecret: string;
+    remoteIdentityPublic: string;
+    remoteEphemeralPublic: string;
+    pqCiphertext: string;
+}
+export interface RespondToSessionResult {
+    sharedSecret: string;
+    algorithm: "pqxdh";
+}
+export declare function generateIdentityKeyPair(): IdentityKeyPair;
+export declare function generateSignedPreKey(identitySigningPrivate: string): SignedPreKey;
+export declare function generateOneTimePreKey(): OneTimePreKey;
+export declare function generatePqPreKey(identitySigningPrivate: string): PqPreKey;
+export declare function initiateSession(params: InitiateSessionParams): InitiateSessionResult;
+export declare function respondToSession(params: RespondToSessionParams): RespondToSessionResult;
+//# sourceMappingURL=pqxdh.d.ts.map

package/dist/protocols/pqxdh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pqxdh.d.ts","sourceRoot":"","sources":["../../src/protocols/pqxdh.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,eAAe;IAE9B,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;IAElB,iBAAiB,EAAE,MAAM,CAAC;IAE1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAGD,MAAM,WAAW,YAAY;IAE3B,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,aAAa;IAE5B,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,QAAQ;IAEvB,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,qBAAqB;IAEpC,eAAe,EAAE,eAAe,CAAC;IAEjC,oBAAoB,EAAE,MAAM,CAAC;IAE7B,wBAAwB,EAAE,MAAM,CAAC;IAEjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAEnC,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,qBAAqB;IAEpC,YAAY,EAAE,MAAM,CAAC;IAErB,kBAAkB,EAAE,MAAM,CAAC;IAE3B,YAAY,EAAE,MAAM,CAAC;IAErB,SAAS,EAAE,OAAO,CAAC;CACpB;AAGD,MAAM,WAAW,sBAAsB;IAErC,eAAe,EAAE,eAAe,CAAC;IAEjC,mBAAmB,EAAE,MAAM,CAAC;IAE5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,cAAc,EAAE,MAAM,CAAC;IAEvB,oBAAoB,EAAE,MAAM,CAAC;IAE7B,qBAAqB,EAAE,MAAM,CAAC;IAE9B,YAAY,EAAE,MAAM,CAAC;CACtB;AAGD,MAAM,WAAW,sBAAsB;IAErC,YAAY,EAAE,MAAM,CAAC;IAErB,SAAS,EAAE,OAAO,CAAC;CACpB;AA0BD,wBAAgB,uBAAuB,IAAI,eAAe,CAYzD;AAQD,wBAAgB,oBAAoB,CAClC,sBAAsB,EAAE,MAAM,GAC7B,YAAY,CAWd;AAKD,wBAAgB,qBAAqB,IAAI,aAAa,CAQrD;AAKD,wBAAgB,gBAAgB,CAAC,sBAAsB,EAAE,MAAM,GAAG,QAAQ,CAezE;AAUD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,qBAAqB,GAC5B,qBAAqB,CAqEvB;AAQD,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,GAC7B,sBAAsB,CA+DxB"}

package/dist/protocols/pqxdh.js

@@ -0,0 +1,143 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateIdentityKeyPair = generateIdentityKeyPair;
+exports.generateSignedPreKey = generateSignedPreKey;
+exports.generateOneTimePreKey = generateOneTimePreKey;
+exports.generatePqPreKey = generatePqPreKey;
+exports.initiateSession = initiateSession;
+exports.respondToSession = respondToSession;
+const ed25519_js_1 = require("@noble/curves/ed25519.js");
+const ml_kem_js_1 = require("@noble/post-quantum/ml-kem.js");
+const hkdf_js_1 = require("@noble/hashes/hkdf.js");
+const sha2_js_1 = require("@noble/hashes/sha2.js");
+const utils_js_1 = require("@noble/ciphers/utils.js");
+const HEX_RE = /^[0-9a-fA-F]*$/;
+function hexToBytes(hex, label) {
+    if (!HEX_RE.test(hex)) {
+        throw new Error(`Invalid hex string for ${label}`);
+    }
+    return Buffer.from(hex, "hex");
+}
+const PQXDH_INFO = new TextEncoder().encode("pqxdh-v1");
+function generateIdentityKeyPair() {
+    const x25519Priv = (0, utils_js_1.randomBytes)(32);
+    const x25519Pub = ed25519_js_1.x25519.getPublicKey(x25519Priv);
+    const signingPriv = (0, utils_js_1.randomBytes)(32);
+    const signingPub = ed25519_js_1.ed25519.getPublicKey(signingPriv);
+    return {
+        privateKey: Buffer.from(x25519Priv).toString("hex"),
+        publicKey: Buffer.from(x25519Pub).toString("hex"),
+        signingPrivateKey: Buffer.from(signingPriv).toString("hex"),
+        signingPublicKey: Buffer.from(signingPub).toString("hex"),
+    };
+}
+function generateSignedPreKey(identitySigningPrivate) {
+    const sigKey = hexToBytes(identitySigningPrivate, "identitySigningPrivate");
+    const prePriv = (0, utils_js_1.randomBytes)(32);
+    const prePub = ed25519_js_1.x25519.getPublicKey(prePriv);
+    const signature = ed25519_js_1.ed25519.sign(prePub, sigKey);
+    return {
+        privateKey: Buffer.from(prePriv).toString("hex"),
+        publicKey: Buffer.from(prePub).toString("hex"),
+        signature: Buffer.from(signature).toString("hex"),
+    };
+}
+function generateOneTimePreKey() {
+    const priv = (0, utils_js_1.randomBytes)(32);
+    const pub = ed25519_js_1.x25519.getPublicKey(priv);
+    return {
+        privateKey: Buffer.from(priv).toString("hex"),
+        publicKey: Buffer.from(pub).toString("hex"),
+    };
+}
+function generatePqPreKey(identitySigningPrivate) {
+    const sigKey = hexToBytes(identitySigningPrivate, "identitySigningPrivate");
+    const { publicKey, secretKey } = ml_kem_js_1.ml_kem768.keygen();
+    const signature = ed25519_js_1.ed25519.sign((0, sha2_js_1.sha256)(publicKey), sigKey);
+    return {
+        publicKey: Buffer.from(publicKey).toString("hex"),
+        secretKey: Buffer.from(secretKey).toString("hex"),
+        signature: Buffer.from(signature).toString("hex"),
+    };
+}
+function initiateSession(params) {
+    const { identityKeyPair, remoteIdentityPublic, remoteSignedPreKeyPublic, remoteOneTimePreKeyPublic, remotePqPreKeyPublic, } = params;
+    const ikPriv = hexToBytes(identityKeyPair.privateKey, "identityPrivateKey");
+    const remoteIkPub = hexToBytes(remoteIdentityPublic, "remoteIdentityPublic");
+    const remoteSPKPub = hexToBytes(remoteSignedPreKeyPublic, "remoteSignedPreKeyPublic");
+    const remotePqPub = hexToBytes(remotePqPreKeyPublic, "remotePqPreKeyPublic");
+    const ephPriv = (0, utils_js_1.randomBytes)(32);
+    const ephPub = ed25519_js_1.x25519.getPublicKey(ephPriv);
+    const dh1 = ed25519_js_1.x25519.getSharedSecret(ikPriv, remoteSPKPub);
+    const dh2 = ed25519_js_1.x25519.getSharedSecret(ephPriv, remoteIkPub);
+    const dh3 = ed25519_js_1.x25519.getSharedSecret(ephPriv, remoteSPKPub);
+    let dh4 = null;
+    if (remoteOneTimePreKeyPublic) {
+        const remoteOPKPub = hexToBytes(remoteOneTimePreKeyPublic, "remoteOneTimePreKeyPublic");
+        dh4 = ed25519_js_1.x25519.getSharedSecret(ephPriv, remoteOPKPub);
+    }
+    const { cipherText: pqCt, sharedSecret: pqShared } = ml_kem_js_1.ml_kem768.encapsulate(remotePqPub);
+    const dhLen = dh1.length + dh2.length + dh3.length;
+    const dh4Len = dh4 ? dh4.length : 0;
+    const totalLen = dhLen + dh4Len + pqShared.length;
+    const combined = new Uint8Array(totalLen);
+    let offset = 0;
+    combined.set(dh1, offset);
+    offset += dh1.length;
+    combined.set(dh2, offset);
+    offset += dh2.length;
+    combined.set(dh3, offset);
+    offset += dh3.length;
+    if (dh4) {
+        combined.set(dh4, offset);
+        offset += dh4.length;
+    }
+    combined.set(pqShared, offset);
+    const sharedSecret = (0, hkdf_js_1.hkdf)(sha2_js_1.sha256, combined, undefined, PQXDH_INFO, 32);
+    return {
+        sharedSecret: Buffer.from(sharedSecret).toString("hex"),
+        ephemeralPublicKey: Buffer.from(ephPub).toString("hex"),
+        pqCiphertext: Buffer.from(pqCt).toString("hex"),
+        algorithm: "pqxdh",
+    };
+}
+function respondToSession(params) {
+    const { identityKeyPair, signedPreKeyPrivate, oneTimePreKeyPrivate, pqPreKeySecret, remoteIdentityPublic, remoteEphemeralPublic, pqCiphertext, } = params;
+    const ikPriv = hexToBytes(identityKeyPair.privateKey, "identityPrivateKey");
+    const spkPriv = hexToBytes(signedPreKeyPrivate, "signedPreKeyPrivate");
+    const pqSecret = hexToBytes(pqPreKeySecret, "pqPreKeySecret");
+    const remoteIkPub = hexToBytes(remoteIdentityPublic, "remoteIdentityPublic");
+    const remoteEphPub = hexToBytes(remoteEphemeralPublic, "remoteEphemeralPublic");
+    const pqCt = hexToBytes(pqCiphertext, "pqCiphertext");
+    const dh1 = ed25519_js_1.x25519.getSharedSecret(spkPriv, remoteIkPub);
+    const dh2 = ed25519_js_1.x25519.getSharedSecret(ikPriv, remoteEphPub);
+    const dh3 = ed25519_js_1.x25519.getSharedSecret(spkPriv, remoteEphPub);
+    let dh4 = null;
+    if (oneTimePreKeyPrivate) {
+        const opkPriv = hexToBytes(oneTimePreKeyPrivate, "oneTimePreKeyPrivate");
+        dh4 = ed25519_js_1.x25519.getSharedSecret(opkPriv, remoteEphPub);
+    }
+    const pqShared = ml_kem_js_1.ml_kem768.decapsulate(pqCt, pqSecret);
+    const dhLen = dh1.length + dh2.length + dh3.length;
+    const dh4Len = dh4 ? dh4.length : 0;
+    const totalLen = dhLen + dh4Len + pqShared.length;
+    const combined = new Uint8Array(totalLen);
+    let offset = 0;
+    combined.set(dh1, offset);
+    offset += dh1.length;
+    combined.set(dh2, offset);
+    offset += dh2.length;
+    combined.set(dh3, offset);
+    offset += dh3.length;
+    if (dh4) {
+        combined.set(dh4, offset);
+        offset += dh4.length;
+    }
+    combined.set(pqShared, offset);
+    const sharedSecret = (0, hkdf_js_1.hkdf)(sha2_js_1.sha256, combined, undefined, PQXDH_INFO, 32);
+    return {
+        sharedSecret: Buffer.from(sharedSecret).toString("hex"),
+        algorithm: "pqxdh",
+    };
+}
+//# sourceMappingURL=pqxdh.js.map

package/dist/protocols/ratchet.d.ts

@@ -0,0 +1,52 @@
+export interface MessageHeader {
+    publicKey: string;
+    previousChainLength: number;
+    messageNumber: number;
+}
+export interface EncryptedMessage {
+    header: MessageHeader;
+    ciphertext: string;
+}
+export interface SymmetricRatchetState {
+    chainKey: string;
+    index: number;
+}
+export interface DoubleRatchetState {
+    sendingRatchetPrivate: string;
+    sendingRatchetPublic: string;
+    receivingRatchetPublic: string | null;
+    rootKey: string;
+    sendingChainKey: string | null;
+    receivingChainKey: string | null;
+    sendingMessageNumber: number;
+    receivingMessageNumber: number;
+    previousChainLength: number;
+    skippedKeys: Record<string, string>;
+}
+export declare class SymmetricRatchet {
+    private _chainKey;
+    private _index;
+    constructor(chainKey: string | Uint8Array, index?: number);
+    get state(): SymmetricRatchetState;
+    next(): {
+        messageKey: Uint8Array;
+        index: number;
+    };
+}
+export declare class DoubleRatchet {
+    private _state;
+    private constructor();
+    get state(): DoubleRatchetState;
+    static initAlice(sharedSecret: string, remoteRatchetPublic: string): DoubleRatchet;
+    static initBob(sharedSecret: string, ourRatchetKeyPair: {
+        privateKey: string;
+        publicKey: string;
+    }): DoubleRatchet;
+    static fromState(state: DoubleRatchetState): DoubleRatchet;
+    encrypt(plaintext: string | Uint8Array): EncryptedMessage;
+    decrypt(header: MessageHeader, ciphertext: string): Uint8Array;
+    private _decryptWithKey;
+    private _dhRatchetStep;
+    private _skipMessages;
+}
+//# sourceMappingURL=ratchet.d.ts.map

package/dist/protocols/ratchet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratchet.d.ts","sourceRoot":"","sources":["../../src/protocols/ratchet.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,aAAa;IAE5B,SAAS,EAAE,MAAM,CAAC;IAElB,mBAAmB,EAAE,MAAM,CAAC;IAE5B,aAAa,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,gBAAgB;IAE/B,MAAM,EAAE,aAAa,CAAC;IAEtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,EAAE,MAAM,CAAC;IAEjB,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,MAAM,WAAW,kBAAkB;IAEjC,qBAAqB,EAAE,MAAM,CAAC;IAE9B,oBAAoB,EAAE,MAAM,CAAC;IAE7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtC,OAAO,EAAE,MAAM,CAAC;IAEhB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjC,oBAAoB,EAAE,MAAM,CAAC;IAE7B,sBAAsB,EAAE,MAAM,CAAC;IAE/B,mBAAmB,EAAE,MAAM,CAAC;IAE5B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAkCD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,MAAM,CAAS;gBAGX,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,KAAK,SAAI;IAOpD,IAAI,KAAK,IAAI,qBAAqB,CAKjC;IAQD,IAAI,IAAI;QAEN,UAAU,EAAE,UAAU,CAAC;QAEvB,KAAK,EAAE,MAAM,CAAC;KACf;CASF;AAYD,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAqB;IAEnC,OAAO;IAKP,IAAI,KAAK,IAAI,kBAAkB,CAE9B;IAQD,MAAM,CAAC,SAAS,CACd,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,GAC1B,aAAa;IAwChB,MAAM,CAAC,OAAO,CACZ,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC3D,aAAa;IAkBhB,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa;IAU1D,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,gBAAgB;IAgDzD,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU;IAwC9D,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,cAAc;IA4CtB,OAAO,CAAC,aAAa;CAiBtB"}