@secrecy/lib 1.86.4-fix-md5.1 → 1.86.4-fix-crypto.1

package/dist/types/crypto/data.d.ts

@@ -1,8 +1,18 @@
 export interface EncryptedFile {
     data: Uint8Array<ArrayBuffer>;
-    /** md5 of the ciphertext. No digest of the plaintext is ever computed. */
+    md5: string;
     md5Encrypted: string;
 }
+export interface DecryptSecretStreamOptions {
+    /**
+     * Accept a stream whose last chunk is not tagged `TAG_FINAL`.
+     * Streams produced before the final tag was always set (size multiple of
+     * CHUNK_SIZE) lack it, so a truncation at a chunk boundary is undetectable
+     * for them: only enable this when the caller verifies the decrypted content
+     * independently (e.g. against a known digest).
+     */
+    allowMissingFinalTag?: boolean;
+}
 export declare function secretStreamKeygen(): Uint8Array;
 export declare const CHUNK_SIZE = 8192;
 export interface SecretStreamProgress {
@@ -19,6 +29,6 @@ export declare function encryptSecretStream(key: Uint8Array, data: Uint8Array<Ar
 /**
  * Decrypt a secretstream produced by `encryptSecretStream`. Throws if any
  * chunk fails authentication, if data follows the `TAG_FINAL` chunk, or if the
- * stream ends without it (truncation).
+ * stream ends without it (truncation) unless `allowMissingFinalTag` is set.
  */
-export declare function decryptSecretStream(key: Uint8Array, data: Uint8Array<ArrayBuffer>, progress?: (progress: SecretStreamProgress) => Promise<void>, signal?: AbortSignal): Promise<Uint8Array<ArrayBuffer>>;
+export declare function decryptSecretStream(key: Uint8Array, data: Uint8Array<ArrayBuffer>, progress?: (progress: SecretStreamProgress) => Promise<void>, signal?: AbortSignal, options?: DecryptSecretStreamOptions): Promise<Uint8Array<ArrayBuffer>>;

package/dist/types/crypto/domain.d.ts

@@ -19,6 +19,7 @@ export declare function encryptDataAndKey({ data, currentIdentity, keyPairs, pro
     encryptedDataKey?: Uint8Array<ArrayBufferLike>;
     encryptedData: Uint8Array<ArrayBuffer>;
     dataKey: Uint8Array<ArrayBufferLike>;
+    md5Data: string;
     md5Encrypted: string;
 }>;
 export declare function buildBytesFromApiData({ dataContent, totalBytes, progressParts, onDownloadProgress, signal, }: {

package/dist/types/crypto/helpers.d.ts

@@ -5,8 +5,12 @@ export declare function derivePassword(password: string, salt: Uint8Array<ArrayB
  * `version (1 byte) || salt || nonce || secretbox(key)`.
  */
 export declare function encryptKeyWithPassword(key: Uint8Array, password: string): Uint8Array;
-/** Unwrap a data key produced by `encryptKeyWithPassword`. */
-export declare function decryptKeyWithPassword(wrapped: Uint8Array, password: string): Uint8Array;
+/**
+ * Unwrap a data key produced by `encryptKeyWithPassword`. Also reads the
+ * legacy format (`nonce || secretbox(key)`) whose salt was derived from the
+ * password and the plaintext md5, hence `legacyMd5`.
+ */
+export declare function decryptKeyWithPassword(wrapped: Uint8Array, password: string, legacyMd5: string): Uint8Array;
 export declare function encryptName(name: string, nameKey: string): Promise<string>;
 export declare function generateAndEncryptNameAndKey(args: {
     name: string;

package/dist/types/crypto/index.d.ts

@@ -1,9 +1,15 @@
-import { type StringKeyPair } from '../sodium.js';
 export declare function encryptCryptoBox(data: Uint8Array, publicKeyBob: string, privateKeyAlice: string): Uint8Array;
-export declare function generateCryptoBoxKeyPair(): StringKeyPair;
+export declare function generateCryptoBoxKeyPair(): {
+    publicKey: string;
+    privateKey: string;
+    keyType: string;
+};
 export declare function decryptCryptoBox(data: Uint8Array, publicKeyAlice: string, privateKeyBob: string): Uint8Array;
 export declare function generateSecretBoxKey(): string;
 export declare function encryptSecretBox(data: Uint8Array, key: string): Uint8Array;
 export declare function decryptSecretBox(data: Uint8Array, key: string): Uint8Array;
 export declare function encryptAnonymous(data: Uint8Array, receiverPublicKey: string): Uint8Array;
-export declare function decryptAnonymous(data: Uint8Array, { privateKey, publicKey }: Omit<StringKeyPair, 'keyType'>): Uint8Array;
+export declare function decryptAnonymous(data: Uint8Array, { privateKey, publicKey }: {
+    privateKey: string;
+    publicKey: string;
+}): Uint8Array;

package/dist/types/sodium.d.ts

@@ -1,8 +1,3 @@
 import sodium from 'libsodium-wrappers-sumo';
 export declare function setup(): Promise<void>;
 export { sodium };
-export type StringKeyPair = {
-    publicKey: string;
-    privateKey: string;
-    keyType: string;
-};

package/dist/types/versioning.d.ts

@@ -1 +1 @@
-export declare const SECRECY_LIB_VERSION = "0.0.0-development";
+export declare const SECRECY_LIB_VERSION = "1.86.4-fix-crypto.1";