@sebastienrousseau/crypto-lib 0.0.8 → 0.0.24

package/dist/modern/hpke.js

@@ -10,8 +10,10 @@ const hkdf_js_1 = require("@noble/hashes/hkdf.js");
 const sha2_js_1 = require("@noble/hashes/sha2.js");
 const chacha_js_1 = require("@noble/ciphers/chacha.js");
 const aes_js_1 = require("@noble/ciphers/aes.js");
+const ml_kem_js_1 = require("@noble/post-quantum/ml-kem.js");
 const KEM_X25519 = 0x0020;
 const KEM_P256 = 0x0010;
+const KEM_X25519_MLKEM768 = 0x0030;
 const KDF_HKDF_SHA256 = 0x0001;
 const AEAD_AES_128_GCM = 0x0001;
 const AEAD_CHACHA20_POLY1305 = 0x0003;
@@ -31,31 +33,42 @@ function i2osp2(n) {
     return new Uint8Array([(n >> 8) & 0xff, n & 0xff]);
 }
 function concat(...arrays) {
-    const len = arrays.reduce((s, a) => s + a.length, 0);
+    let len = 0;
+    for (let i = 0; i < arrays.length; i++) {
+        len += arrays[i].length;
+    }
     const result = new Uint8Array(len);
     let offset = 0;
-    for (const a of arrays) {
+    for (let i = 0; i < arrays.length; i++) {
+        const a = arrays[i];
         result.set(a, offset);
         offset += a.length;
     }
     return result;
 }
 function suiteParams(kem, aead) {
-    const kemId = kem === "x25519" ? KEM_X25519 : KEM_P256;
-    const aeadId = aead === "chacha20-poly1305" ? AEAD_CHACHA20_POLY1305 : AEAD_AES_128_GCM;
-    const nk = aead === "chacha20-poly1305" ? 32 : 16;
-    const nn = 12;
-    const nSecret = 32;
+    let kemId;
     let nEnc;
     let nSk;
     if (kem === "x25519") {
+        kemId = KEM_X25519;
         nEnc = 32;
         nSk = 32;
     }
-    else {
+    else if (kem === "p256") {
+        kemId = KEM_P256;
         nEnc = 65;
         nSk = 32;
     }
+    else {
+        kemId = KEM_X25519_MLKEM768;
+        nEnc = 1120;
+        nSk = 2432;
+    }
+    const aeadId = aead === "chacha20-poly1305" ? AEAD_CHACHA20_POLY1305 : AEAD_AES_128_GCM;
+    const nk = aead === "chacha20-poly1305" ? 32 : 16;
+    const nn = 12;
+    const nSecret = 32;
     return {
         kemId,
         kdfId: KDF_HKDF_SHA256,
@@ -113,6 +126,40 @@ function dhkemDecap(kem, enc, recipientPriv, params) {
     const recipientPub = kemPublicKey(kem, recipientPriv);
     return extractAndExpand(params, dh, concat(enc, recipientPub));
 }
+function hybridEncap(recipientPub, ephemeralPrivateKey, params) {
+    if (recipientPub.length !== 1216) {
+        throw new Error("Invalid recipient public key length for x25519-ml-kem-768");
+    }
+    const pkX = recipientPub.subarray(0, 32);
+    const pkMlKem = recipientPub.subarray(32);
+    const ephPrivX = ephemeralPrivateKey.subarray(0, 32);
+    const encX = ed25519_js_1.x25519.getPublicKey(ephPrivX);
+    const ssClassical = ed25519_js_1.x25519.getSharedSecret(ephPrivX, pkX);
+    const { cipherText: ctMlKem, sharedSecret: ssMlKem } = ml_kem_js_1.ml_kem768.encapsulate(pkMlKem);
+    const enc = concat(encX, ctMlKem);
+    const ikm = concat(ssClassical, ssMlKem);
+    const sharedSecret = extractAndExpand(params, ikm, concat(enc, recipientPub));
+    return { sharedSecret, enc };
+}
+function hybridDecap(enc, recipientPriv, params) {
+    if (recipientPriv.length !== 2432) {
+        throw new Error("Invalid recipient private key length for x25519-ml-kem-768");
+    }
+    if (enc.length !== 1120) {
+        throw new Error("Invalid encapsulated key length for x25519-ml-kem-768");
+    }
+    const skX = recipientPriv.subarray(0, 32);
+    const skMlKem = recipientPriv.subarray(32);
+    const encX = enc.subarray(0, 32);
+    const ctMlKem = enc.subarray(32);
+    const ssClassical = ed25519_js_1.x25519.getSharedSecret(skX, encX);
+    const ssMlKem = ml_kem_js_1.ml_kem768.decapsulate(ctMlKem, skMlKem);
+    const pkX = ed25519_js_1.x25519.getPublicKey(skX);
+    const pkMlKem = ml_kem_js_1.ml_kem768.getPublicKey(skMlKem);
+    const recipientPub = concat(pkX, pkMlKem);
+    const ikm = concat(ssClassical, ssMlKem);
+    return extractAndExpand(params, ikm, concat(enc, recipientPub));
+}
 function keySchedule(params, sharedSecret, inputs) {
     const suiteId = hpkeSuiteId(params);
     const empty = new Uint8Array(0);
@@ -156,6 +203,15 @@ function aeadOpen(aead, key, nonce, aad, ciphertext) {
     return (0, aes_js_1.gcm)(key, nonce, aad).decrypt(ciphertext);
 }
 function hpkeGenerateKeyPair(kem = "x25519") {
+    if (kem === "x25519-ml-kem-768") {
+        const skX = ed25519_js_1.x25519.utils.randomSecretKey();
+        const pkX = ed25519_js_1.x25519.getPublicKey(skX);
+        const { publicKey: pkMlKem, secretKey: skMlKem } = ml_kem_js_1.ml_kem768.keygen();
+        return {
+            publicKey: bytesToHex(concat(pkX, pkMlKem)),
+            privateKey: bytesToHex(concat(skX, skMlKem)),
+        };
+    }
     const privateKey = kemRandomPrivateKey(kem);
     return {
         publicKey: bytesToHex(kemPublicKey(kem, privateKey)),
@@ -164,7 +220,10 @@ function hpkeGenerateKeyPair(kem = "x25519") {
 }
 function hpkeSeal(options) {
     const kem = options.suite?.kem ?? "x25519";
-    const sealed = hpkeSealWithEphemeral(options, kemRandomPrivateKey(kem));
+    const ephemeralPrivateKey = kem === "x25519-ml-kem-768"
+        ? ed25519_js_1.x25519.utils.randomSecretKey()
+        : kemRandomPrivateKey(kem);
+    const sealed = hpkeSealWithEphemeral(options, ephemeralPrivateKey);
     return {
         ciphertext: sealed.ciphertext,
         encapsulatedKey: sealed.encapsulatedKey,
@@ -178,7 +237,9 @@ function hpkeSealWithEphemeral(options, ephemeralPrivateKey) {
     const plaintext = hexToBytes(options.plaintext);
     const aad = options.aad ? hexToBytes(options.aad) : new Uint8Array(0);
     const inputs = scheduleInputs(options);
-    const { sharedSecret, enc } = dhkemEncap(kem, recipientPub, ephemeralPrivateKey, params);
+    const { sharedSecret, enc } = kem === "x25519-ml-kem-768"
+        ? hybridEncap(recipientPub, ephemeralPrivateKey, params)
+        : dhkemEncap(kem, recipientPub, ephemeralPrivateKey, params);
     const ks = keySchedule(params, sharedSecret, inputs);
     const ct = aeadSeal(aead, ks.key, ks.baseNonce, aad, plaintext);
     return {
@@ -199,7 +260,9 @@ function hpkeOpen(options) {
     const ciphertext = hexToBytes(options.ciphertext);
     const aad = options.aad ? hexToBytes(options.aad) : new Uint8Array(0);
     const inputs = scheduleInputs(options);
-    const sharedSecret = dhkemDecap(kem, enc, recipientPriv, params);
+    const sharedSecret = kem === "x25519-ml-kem-768"
+        ? hybridDecap(enc, recipientPriv, params)
+        : dhkemDecap(kem, enc, recipientPriv, params);
     const { key, baseNonce } = keySchedule(params, sharedSecret, inputs);
     const pt = aeadOpen(aead, key, baseNonce, aad, ciphertext);
     return { plaintext: bytesToHex(pt) };

package/dist/modern/index.d.ts

@@ -34,7 +34,7 @@ export declare const SUPPORTED_ALGORITHMS: {
     readonly kdf: readonly ["scrypt", "hkdf-sha256", "pbkdf2-sha256", "argon2id", "argon2i", "argon2d"];
     readonly mac: readonly ["hmac-sha256", "hmac-sha384", "hmac-sha512", "hmac-sha3-256", "hmac-sha3-512", "kmac-128", "kmac-256"];
     readonly signing: readonly ["ed25519", "ed448", "ecdsa-p256", "ecdsa-p384", "schnorr", "ml-dsa-44", "ml-dsa-65", "ml-dsa-87", "slh-dsa-sha2-128f", "slh-dsa-sha2-128s", "slh-dsa-sha2-192f", "slh-dsa-sha2-192s", "slh-dsa-sha2-256f", "slh-dsa-sha2-256s", "slh-dsa-shake-128f", "slh-dsa-shake-128s", "slh-dsa-shake-192f", "slh-dsa-shake-192s", "slh-dsa-shake-256f", "slh-dsa-shake-256s", "ed25519-ml-dsa-44", "ed25519-ml-dsa-65", "ed25519-ml-dsa-87", "fn-dsa-512", "fn-dsa-1024"];
-    readonly keyExchange: readonly ["x25519", "x448", "ecdh-p256", "ecdh-p384", "x25519-ml-kem-512", "x25519-ml-kem-768", "x25519-ml-kem-1024", "p256-ml-kem-768", "x448-ml-kem-1024", "hpke-x25519-chacha20", "hpke-x25519-aes128gcm", "hpke-p256-aes128gcm"];
+    readonly keyExchange: readonly ["x25519", "x448", "ecdh-p256", "ecdh-p384", "x25519-ml-kem-512", "x25519-ml-kem-768", "x25519-ml-kem-1024", "p256-ml-kem-768", "x448-ml-kem-1024", "hpke-x25519-chacha20", "hpke-x25519-aes128gcm", "hpke-p256-aes128gcm", "hpke-x25519-ml-kem-768-chacha20", "hpke-x25519-ml-kem-768-aes128gcm"];
     readonly postQuantum: readonly ["ml-kem-512", "ml-kem-768", "ml-kem-1024", "ml-dsa-44", "ml-dsa-65", "ml-dsa-87", "slh-dsa-sha2-128f", "slh-dsa-sha2-128s", "slh-dsa-sha2-192f", "slh-dsa-sha2-192s", "slh-dsa-sha2-256f", "slh-dsa-sha2-256s", "slh-dsa-shake-128f", "slh-dsa-shake-128s", "slh-dsa-shake-192f", "slh-dsa-shake-192s", "slh-dsa-shake-256f", "slh-dsa-shake-256s", "fn-dsa-512", "fn-dsa-1024"];
 };
 //# sourceMappingURL=index.d.ts.map

package/dist/modern/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/modern/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAElD,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,OAAO,CAAC;AAEf,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,OAAO,CAAC;AAEf,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAE/C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAElD,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAEvE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE1E,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAE/D,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAE/D,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,MAAM,CAAC;AAEd,YAAY,EACV,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,MAAM,CAAC;AAGd,OAAO,EACL,WAAW,EACX,gBAAgB,IAAI,UAAU,EAC9B,gBAAgB,IAAI,UAAU,EAC9B,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,EAC3B,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,sBAAsB,IAAI,gBAAgB,EAC1C,sBAAsB,IAAI,gBAAgB,EAC1C,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,WAAW,EACX,SAAS,EACT,WAAW,EACX,UAAU,EACV,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE/D,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAExE,YAAY,EACV,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,WAAW,EACX,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,OAAO,CAAC;AAEf,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,OAAO,CAAC;AAGf,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE7E,YAAY,EACV,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,mBAAmB,EACnB,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,QAAQ,EACR,UAAU,EACV,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,sBAAsB,EACtB,WAAW,EACX,aAAa,GACd,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEjE,YAAY,EACV,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,GACf,MAAM,QAAQ,CAAC;AAKhB,eAAO,MAAM,oBAAoB;;;;;;;;CAwGvB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/modern/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAElD,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,OAAO,CAAC;AAEf,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,OAAO,CAAC;AAEf,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAE/C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAElD,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAEvE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE1E,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAE/D,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAE/D,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,MAAM,CAAC;AAEd,YAAY,EACV,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,MAAM,CAAC;AAGd,OAAO,EACL,WAAW,EACX,gBAAgB,IAAI,UAAU,EAC9B,gBAAgB,IAAI,UAAU,EAC9B,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,EAC3B,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,sBAAsB,IAAI,gBAAgB,EAC1C,sBAAsB,IAAI,gBAAgB,EAC1C,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,WAAW,EACX,SAAS,EACT,WAAW,EACX,UAAU,EACV,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE/D,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAExE,YAAY,EACV,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,WAAW,EACX,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,OAAO,CAAC;AAEf,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,OAAO,CAAC;AAGf,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE7E,YAAY,EACV,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,mBAAmB,EACnB,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,QAAQ,EACR,UAAU,EACV,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,sBAAsB,EACtB,WAAW,EACX,aAAa,GACd,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEjE,YAAY,EACV,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,GACf,MAAM,QAAQ,CAAC;AAKhB,eAAO,MAAM,oBAAoB;;;;;;;;CA0GvB,CAAC"}

package/dist/modern/index.js

@@ -167,6 +167,8 @@ exports.SUPPORTED_ALGORITHMS = {
         "hpke-x25519-chacha20",
         "hpke-x25519-aes128gcm",
         "hpke-p256-aes128gcm",
+        "hpke-x25519-ml-kem-768-chacha20",
+        "hpke-x25519-ml-kem-768-aes128gcm",
     ],
     postQuantum: [
         "ml-kem-512",

package/dist/modern/kdf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kdf.d.ts","sourceRoot":"","sources":["../../src/modern/kdf.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,cAAc,qDAIjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAG3D,MAAM,WAAW,gBAAgB;IAE/B,SAAS,EAAE,YAAY,CAAC;IAExB,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC;IAE9B,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAE3B,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,MAAM,CAAC,EAAE;QAEP,CAAC,CAAC,EAAE,MAAM,CAAC;QAEX,CAAC,CAAC,EAAE,MAAM,CAAC;QAEX,CAAC,CAAC,EAAE,MAAM,CAAC;QAEX,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;KAC5B,CAAC;CACH;AAGD,MAAM,WAAW,SAAS;IAExB,UAAU,EAAE,MAAM,CAAC;IAEnB,IAAI,EAAE,MAAM,CAAC;IAEb,SAAS,EAAE,YAAY,CAAC;IAExB,SAAS,EAAE,MAAM,CAAC;CACnB;AAuBD,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAyC9D"}
+{"version":3,"file":"kdf.d.ts","sourceRoot":"","sources":["../../src/modern/kdf.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,cAAc,qDAIjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAG3D,MAAM,WAAW,gBAAgB;IAE/B,SAAS,EAAE,YAAY,CAAC;IAExB,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC;IAE9B,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAE3B,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,MAAM,CAAC,EAAE;QAEP,CAAC,CAAC,EAAE,MAAM,CAAC;QAEX,CAAC,CAAC,EAAE,MAAM,CAAC;QAEX,CAAC,CAAC,EAAE,MAAM,CAAC;QAEX,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;KAC5B,CAAC;CACH;AAGD,MAAM,WAAW,SAAS;IAExB,UAAU,EAAE,MAAM,CAAC;IAEnB,IAAI,EAAE,MAAM,CAAC;IAEb,SAAS,EAAE,YAAY,CAAC;IAExB,SAAS,EAAE,MAAM,CAAC;CACnB;AA4DD,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CA4B9D"}

package/dist/modern/kdf.js

@@ -25,6 +25,25 @@ function toBytes(input, encoding = "utf8") {
     }
     return Buffer.from(input, "utf8");
 }
+function deriveScrypt(password, salt, keyLength, params) {
+    const N = params.N ?? 131072;
+    const r = params.r ?? 8;
+    const p = params.p ?? 1;
+    (0, cost_limits_1.checkScryptCosts)(N, r, p);
+    return (0, scrypt_js_1.scrypt)(password, salt, { N, r, p, dkLen: keyLength });
+}
+function deriveHkdf(password, salt, keyLength, params) {
+    const info = params.info ? toBytes(params.info, "utf8") : undefined;
+    return (0, hkdf_js_1.hkdf)(sha2_js_1.sha256, password, salt, info, keyLength);
+}
+function derivePbkdf2(password, salt, keyLength, params) {
+    const iterations = params.iterations ?? 600000;
+    (0, cost_limits_1.checkPbkdf2Iterations)(iterations);
+    return (0, pbkdf2_js_1.pbkdf2)(sha2_js_1.sha256, password, salt, {
+        c: iterations,
+        dkLen: keyLength,
+    });
+}
 function kdfDerive(options) {
     const password = toBytes(options.password, "utf8");
     const salt = options.salt ? toBytes(options.salt, "hex") : (0, utils_js_1.randomBytes)(16);
@@ -32,28 +51,15 @@ function kdfDerive(options) {
     const params = options.params ?? {};
     let derived;
     switch (options.algorithm) {
-        case "scrypt": {
-            const N = params.N ?? 131072;
-            const r = params.r ?? 8;
-            const p = params.p ?? 1;
-            (0, cost_limits_1.checkScryptCosts)(N, r, p);
-            derived = (0, scrypt_js_1.scrypt)(password, salt, { N, r, p, dkLen: keyLength });
+        case "scrypt":
+            derived = deriveScrypt(password, salt, keyLength, params);
             break;
-        }
-        case "hkdf-sha256": {
-            const info = params.info ? toBytes(params.info, "utf8") : undefined;
-            derived = (0, hkdf_js_1.hkdf)(sha2_js_1.sha256, password, salt, info, keyLength);
+        case "hkdf-sha256":
+            derived = deriveHkdf(password, salt, keyLength, params);
             break;
-        }
-        case "pbkdf2-sha256": {
-            const iterations = params.iterations ?? 600000;
-            (0, cost_limits_1.checkPbkdf2Iterations)(iterations);
-            derived = (0, pbkdf2_js_1.pbkdf2)(sha2_js_1.sha256, password, salt, {
-                c: iterations,
-                dkLen: keyLength,
-            });
+        case "pbkdf2-sha256":
+            derived = derivePbkdf2(password, salt, keyLength, params);
             break;
-        }
         default:
             throw new Error(`Unsupported KDF algorithm: ${options.algorithm}`);
     }

package/dist/streaming/index.d.ts

@@ -2,6 +2,10 @@ export { createHasher, STREAM_HASH_ALGORITHMS } from "./stream-hash";
 export type { StreamingHasher, StreamHashAlgorithm } from "./stream-hash";
 export { streamEncrypt, streamDecrypt } from "./stream-aead";
 export type { StreamEncryptOptions, StreamEncryptResult, StreamDecryptOptions, } from "./stream-aead";
-export { createEncryptStream, createDecryptStream, createHashStream, WEB_STREAM_HASH_ALGORITHMS, } from "./web-streams";
-export type { WebStreamHashAlgorithm, HashStreamResult, EncryptStreamOptions, DecryptStreamOptions, CryptoTransformStream, } from "./web-streams";
+export { createEncryptStream, createDecryptStream, createHashStream, createPqEncryptStream, createPqDecryptStream, createMultiPqEncryptStream, createMultiPqDecryptStream, WEB_STREAM_HASH_ALGORITHMS, } from "./web-streams";
+export type { WebStreamHashAlgorithm, HashStreamResult, EncryptStreamOptions, DecryptStreamOptions, PqEncryptStreamOptions, PqDecryptStreamOptions, MultiPqEncryptStreamOptions, MultiPqDecryptStreamOptions, CryptoTransformStream, } from "./web-streams";
+export { streamPqEncrypt, streamPqDecrypt, PQ_STREAM_HEADER_LEN, } from "./stream-pq-aead";
+export type { StreamPqEncryptOptions, StreamPqEncryptResult, StreamPqDecryptOptions, } from "./stream-pq-aead";
+export { streamMultiPqEncrypt, streamMultiPqDecrypt, MULTI_PQ_STREAM_MAGIC, MULTI_PQ_STREAM_VERSION, MULTI_PQ_PREFIX_LEN, CEK_LEN, WRAPPED_CEK_LEN, SLOT_FIXED_OVERHEAD, } from "./stream-multi-pq-aead";
+export type { MultiPqRecipient, StreamMultiPqEncryptOptions, StreamMultiPqEncryptResult, StreamMultiPqDecryptOptions, StreamMultiPqDecryptResult, } from "./stream-multi-pq-aead";
 //# sourceMappingURL=index.d.ts.map

package/dist/streaming/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/streaming/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAErE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE7D,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/streaming/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAErE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE7D,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,OAAO,EACP,eAAe,EACf,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC"}

package/dist/streaming/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WEB_STREAM_HASH_ALGORITHMS = exports.createHashStream = exports.createDecryptStream = exports.createEncryptStream = exports.streamDecrypt = exports.streamEncrypt = exports.STREAM_HASH_ALGORITHMS = exports.createHasher = void 0;
+exports.SLOT_FIXED_OVERHEAD = exports.WRAPPED_CEK_LEN = exports.CEK_LEN = exports.MULTI_PQ_PREFIX_LEN = exports.MULTI_PQ_STREAM_VERSION = exports.MULTI_PQ_STREAM_MAGIC = exports.streamMultiPqDecrypt = exports.streamMultiPqEncrypt = exports.PQ_STREAM_HEADER_LEN = exports.streamPqDecrypt = exports.streamPqEncrypt = exports.WEB_STREAM_HASH_ALGORITHMS = exports.createMultiPqDecryptStream = exports.createMultiPqEncryptStream = exports.createPqDecryptStream = exports.createPqEncryptStream = exports.createHashStream = exports.createDecryptStream = exports.createEncryptStream = exports.streamDecrypt = exports.streamEncrypt = exports.STREAM_HASH_ALGORITHMS = exports.createHasher = void 0;
 var stream_hash_1 = require("./stream-hash");
 Object.defineProperty(exports, "createHasher", { enumerable: true, get: function () { return stream_hash_1.createHasher; } });
 Object.defineProperty(exports, "STREAM_HASH_ALGORITHMS", { enumerable: true, get: function () { return stream_hash_1.STREAM_HASH_ALGORITHMS; } });
@@ -11,5 +11,22 @@ var web_streams_1 = require("./web-streams");
 Object.defineProperty(exports, "createEncryptStream", { enumerable: true, get: function () { return web_streams_1.createEncryptStream; } });
 Object.defineProperty(exports, "createDecryptStream", { enumerable: true, get: function () { return web_streams_1.createDecryptStream; } });
 Object.defineProperty(exports, "createHashStream", { enumerable: true, get: function () { return web_streams_1.createHashStream; } });
+Object.defineProperty(exports, "createPqEncryptStream", { enumerable: true, get: function () { return web_streams_1.createPqEncryptStream; } });
+Object.defineProperty(exports, "createPqDecryptStream", { enumerable: true, get: function () { return web_streams_1.createPqDecryptStream; } });
+Object.defineProperty(exports, "createMultiPqEncryptStream", { enumerable: true, get: function () { return web_streams_1.createMultiPqEncryptStream; } });
+Object.defineProperty(exports, "createMultiPqDecryptStream", { enumerable: true, get: function () { return web_streams_1.createMultiPqDecryptStream; } });
 Object.defineProperty(exports, "WEB_STREAM_HASH_ALGORITHMS", { enumerable: true, get: function () { return web_streams_1.WEB_STREAM_HASH_ALGORITHMS; } });
+var stream_pq_aead_1 = require("./stream-pq-aead");
+Object.defineProperty(exports, "streamPqEncrypt", { enumerable: true, get: function () { return stream_pq_aead_1.streamPqEncrypt; } });
+Object.defineProperty(exports, "streamPqDecrypt", { enumerable: true, get: function () { return stream_pq_aead_1.streamPqDecrypt; } });
+Object.defineProperty(exports, "PQ_STREAM_HEADER_LEN", { enumerable: true, get: function () { return stream_pq_aead_1.PQ_STREAM_HEADER_LEN; } });
+var stream_multi_pq_aead_1 = require("./stream-multi-pq-aead");
+Object.defineProperty(exports, "streamMultiPqEncrypt", { enumerable: true, get: function () { return stream_multi_pq_aead_1.streamMultiPqEncrypt; } });
+Object.defineProperty(exports, "streamMultiPqDecrypt", { enumerable: true, get: function () { return stream_multi_pq_aead_1.streamMultiPqDecrypt; } });
+Object.defineProperty(exports, "MULTI_PQ_STREAM_MAGIC", { enumerable: true, get: function () { return stream_multi_pq_aead_1.MULTI_PQ_STREAM_MAGIC; } });
+Object.defineProperty(exports, "MULTI_PQ_STREAM_VERSION", { enumerable: true, get: function () { return stream_multi_pq_aead_1.MULTI_PQ_STREAM_VERSION; } });
+Object.defineProperty(exports, "MULTI_PQ_PREFIX_LEN", { enumerable: true, get: function () { return stream_multi_pq_aead_1.MULTI_PQ_PREFIX_LEN; } });
+Object.defineProperty(exports, "CEK_LEN", { enumerable: true, get: function () { return stream_multi_pq_aead_1.CEK_LEN; } });
+Object.defineProperty(exports, "WRAPPED_CEK_LEN", { enumerable: true, get: function () { return stream_multi_pq_aead_1.WRAPPED_CEK_LEN; } });
+Object.defineProperty(exports, "SLOT_FIXED_OVERHEAD", { enumerable: true, get: function () { return stream_multi_pq_aead_1.SLOT_FIXED_OVERHEAD; } });
 //# sourceMappingURL=index.js.map

package/dist/streaming/stream-multi-pq-aead.d.ts

@@ -0,0 +1,35 @@
+export declare const MULTI_PQ_STREAM_MAGIC: Uint8Array<ArrayBuffer>;
+export declare const MULTI_PQ_STREAM_VERSION = 1;
+export declare const MULTI_PQ_PREFIX_LEN = 35;
+export declare const CEK_LEN = 32;
+export declare const WRAPPED_CEK_LEN: number;
+export declare const SLOT_FIXED_OVERHEAD: number;
+export interface MultiPqRecipient {
+    recipientId: string;
+    recipientX25519Public: string | Uint8Array;
+    recipientMlKemPublic: string | Uint8Array;
+}
+export interface StreamMultiPqEncryptOptions {
+    recipients: MultiPqRecipient[];
+    plaintext: Uint8Array;
+    chunkSize?: number | undefined;
+}
+export interface StreamMultiPqEncryptResult {
+    ciphertext: Uint8Array;
+    algorithm: "multi-x25519-ml-kem-768-xchacha20-poly1305-stream";
+    recipientCount: number;
+}
+export interface StreamMultiPqDecryptOptions {
+    recipientId?: string | undefined;
+    recipientX25519Secret: string | Uint8Array;
+    recipientMlKemSecret: string | Uint8Array;
+    ciphertext: Uint8Array;
+    chunkSize?: number | undefined;
+}
+export interface StreamMultiPqDecryptResult {
+    plaintext: Uint8Array;
+    recipientId: string;
+}
+export declare function streamMultiPqEncrypt(options: StreamMultiPqEncryptOptions): StreamMultiPqEncryptResult;
+export declare function streamMultiPqDecrypt(options: StreamMultiPqDecryptOptions): StreamMultiPqDecryptResult;
+//# sourceMappingURL=stream-multi-pq-aead.d.ts.map

package/dist/streaming/stream-multi-pq-aead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-multi-pq-aead.d.ts","sourceRoot":"","sources":["../../src/streaming/stream-multi-pq-aead.ts"],"names":[],"mappings":"AAoCA,eAAO,MAAM,qBAAqB,yBAA2C,CAAC;AAG9E,eAAO,MAAM,uBAAuB,IAAO,CAAC;AAG5C,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAGtC,eAAO,MAAM,OAAO,KAAK,CAAC;AAG1B,eAAO,MAAM,eAAe,QAAoB,CAAC;AAGjD,eAAO,MAAM,mBAAmB,QACiC,CAAC;AAOlE,MAAM,WAAW,gBAAgB;IAE/B,WAAW,EAAE,MAAM,CAAC;IAEpB,qBAAqB,EAAE,MAAM,GAAG,UAAU,CAAC;IAE3C,oBAAoB,EAAE,MAAM,GAAG,UAAU,CAAC;CAC3C;AAGD,MAAM,WAAW,2BAA2B;IAE1C,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAE/B,SAAS,EAAE,UAAU,CAAC;IAEtB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAGD,MAAM,WAAW,0BAA0B;IAEzC,UAAU,EAAE,UAAU,CAAC;IAEvB,SAAS,EAAE,mDAAmD,CAAC;IAE/D,cAAc,EAAE,MAAM,CAAC;CACxB;AAGD,MAAM,WAAW,2BAA2B;IAE1C,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEjC,qBAAqB,EAAE,MAAM,GAAG,UAAU,CAAC;IAE3C,oBAAoB,EAAE,MAAM,GAAG,UAAU,CAAC;IAE1C,UAAU,EAAE,UAAU,CAAC;IAEvB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAGD,MAAM,WAAW,0BAA0B;IAEzC,SAAS,EAAE,UAAU,CAAC;IAEtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAgLD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,2BAA2B,GACnC,0BAA0B,CAsD5B;AAwND,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,2BAA2B,GACnC,0BAA0B,CAyC5B"}