@session.js/blinded-session-id 1.0.1 → 1.0.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Viktor Shchelochkov <hi@hloth.dev> (https://hloth.dev)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -37,4 +37,8 @@ Use Session messenger programmatically with [Session.js](https://github.com/sess
 
 ## Donate
 
-[hloth.dev/donate](https://hloth.dev/donate)
+[hloth.dev/donate](https://hloth.dev/donate) · Tor: [hlothdevzkti6suoksy7lcy7hmpxnr3msu5waokzaslsi2mnx5ouu4qd.onion/donate](http://hlothdevzkti6suoksy7lcy7hmpxnr3msu5waokzaslsi2mnx5ouu4qd.onion/donate)
+
+## License
+
+[MIT](./LICENSE)

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export declare function crypto_sign_curve25519_pk_to_ed25519(pk: Uint8Array): Uint8Array;
 export declare const convertToEd25519Key: (key: string) => string;
 export declare const convertToX25519Key: (key: string) => string;
+export declare function crypto_core_ed25519_scalar_reduce(scalar: Uint8Array): Uint8Array;
 export declare const generateKA: (sessionId: string, serverPk: string) => Uint8Array;
 export declare const generateBlindedKeys: (sessionId: string, serverPk: string) => Uint8Array[];
 export declare const blindSessionId: ({ sessionId, serverPk }: {

package/dist/index.js

@@ -1,9 +1,41 @@
 // Huge thanks to li0ard for this code
 // CREDIT: https://github.com/theinfinityway/session_id/
 /* eslint-disable prefer-const */
-import { cloneDeep } from 'lodash';
-import sodium from 'libsodium-wrappers-sumo';
-await sodium.ready;
+import { ed25519 } from "@noble/curves/ed25519.js";
+import { bytesToHex, hexToBytes } from "@noble/curves/utils.js";
+import { blake2b } from "@noble/hashes/blake2.js";
+import { mod } from "@noble/curves/abstract/modular.js";
+function bytesToNumberLE(bytes) {
+    let value = 0n;
+    for (let i = bytes.length - 1; i >= 0; i--) {
+        value = (value << 8n) + BigInt(bytes[i]);
+    }
+    return value;
+}
+function numberToBytesLE(num, length) {
+    const out = new Uint8Array(length);
+    let n = num;
+    for (let i = 0; i < length; i++) {
+        out[i] = Number(n & 0xffn);
+        n >>= 8n;
+    }
+    return out;
+}
+function ed25519ScalarmultNoClamp(scalar32, point32) {
+    if (scalar32.length !== 32) {
+        throw new Error(`ed25519ScalarmultNoClamp: expected 32-byte scalar, got ${scalar32.length}`);
+    }
+    if (point32.length !== 32) {
+        throw new Error(`ed25519ScalarmultNoClamp: expected 32-byte point, got ${point32.length}`);
+    }
+    const L = ed25519.Point.Fn.ORDER;
+    const s = bytesToNumberLE(scalar32) % L;
+    const P = ed25519.Point.fromBytes(point32);
+    if (P.isSmallOrder()) {
+        throw new Error("ed25519ScalarmultNoClamp: invalid point (small order)");
+    }
+    return P.multiply(s).toBytes();
+}
 function gf(init) {
     let i, r = new Float64Array(16);
     if (init)
@@ -507,27 +539,34 @@ function convertPublicKey(pk) {
     return z;
 }
 export const convertToEd25519Key = (key) => {
-    const inbin = sodium.from_hex(key);
+    const inbin = hexToBytes(key);
     const xEd25519Key = crypto_sign_curve25519_pk_to_ed25519(inbin);
-    return sodium.to_hex(xEd25519Key);
+    return bytesToHex(xEd25519Key);
 };
 export const convertToX25519Key = (key) => {
-    const inbin = sodium.from_hex(key);
-    const xEd25519Key = sodium.crypto_sign_ed25519_pk_to_curve25519(inbin);
-    return sodium.to_hex(xEd25519Key);
+    const inbin = hexToBytes(key);
+    const xEd25519Key = ed25519.utils.toMontgomery(inbin);
+    return bytesToHex(xEd25519Key);
 };
 function combineKeys(lhsKeyBytes, rhsKeyBytes) {
-    return sodium.crypto_scalarmult_ed25519_noclamp(lhsKeyBytes, rhsKeyBytes);
+    return ed25519ScalarmultNoClamp(lhsKeyBytes, rhsKeyBytes);
+}
+export function crypto_core_ed25519_scalar_reduce(scalar) {
+    const scalarNum = bytesToNumberLE(scalar);
+    const result = mod(scalarNum, ed25519.Point.Fn.ORDER);
+    return numberToBytesLE(result, 32);
 }
 const generateBlindingFactor = (serverPk) => {
-    const hexServerPk = sodium.from_hex(serverPk);
-    const serverPkHash = sodium.crypto_generichash(64, hexServerPk);
-    return sodium.crypto_core_ed25519_scalar_reduce(serverPkHash);
+    const hexServerPk = hexToBytes(serverPk);
+    const serverPkHash = blake2b(hexServerPk, {
+        dkLen: 64,
+    });
+    return crypto_core_ed25519_scalar_reduce(serverPkHash);
 };
 export const generateKA = (sessionId, serverPk) => {
     const sessionIdNoPrefix = sessionId.substring(2);
     const kBytes = generateBlindingFactor(serverPk);
-    const xEd25519Key = sodium.from_hex(convertToEd25519Key(sessionIdNoPrefix));
+    const xEd25519Key = hexToBytes(convertToEd25519Key(sessionIdNoPrefix));
     const kA = combineKeys(kBytes, xEd25519Key);
     return kA;
 };
@@ -535,14 +574,16 @@ export const generateBlindedKeys = (sessionId, serverPk) => {
     const kA = generateKA(sessionId, serverPk);
     const key1 = kA;
     const modifiedByte = kA[31] & 0x7F;
-    const key2 = Buffer.concat([kA.slice(0, 31), Buffer.from([modifiedByte])]);
+    const key2 = new Uint8Array(32);
+    key2.set(kA.slice(0, 31), 0);
+    key2[31] = modifiedByte;
     return [key1, key2];
 };
 export const blindSessionId = ({ sessionId, serverPk }) => {
     const [key1, key2] = generateBlindedKeys(sessionId, serverPk);
     const isKey2 = key1[31] & 0x80;
     if (isKey2) {
-        return '15' + sodium.to_hex(key2);
+        return '15' + bytesToHex(key2);
     }
-    return '15' + sodium.to_hex(key1);
+    return '15' + bytesToHex(key1);
 };

package/package.json

@@ -1,36 +1,37 @@
 {
   "name": "@session.js/blinded-session-id",
-  "version": "1.0.1",
+  "type": "module",
+  "description": "Utility JavaScript library with methods to work with Session's blinded Session ID",
+  "version": "1.0.3",
+  "author": "Viktor Shchelochkov <hi@hloth.dev> (https://hloth.dev)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
-  "author": "Viktor Shchelochkov <hi@hloth.dev> (https://hloth.dev)",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/sessionjs/blinded-session-id.git"
+    "url": "git+https://git.hloth.dev/session.js/blinded-session-id.git"
   },
   "bugs": {
-    "url": "https://github.com/sessionjs/blinded-session-id/issues"
+    "url": "https://git.hloth.dev/session.js/blinded-session-id/issues"
   },
-  "homepage": "https://github.com/sessionjs/blinded-session-id#readme",
-  "description": "Utility JavaScript library with methods to work with Session's blinded Session ID",
-  "type": "module",
-  "devDependencies": {
-    "@types/bun": "^1.1.6",
-    "@types/libsodium-wrappers-sumo": "^0.7.8",
-    "@types/lodash": "^4.17.7"
+  "homepage": "https://git.hloth.dev/session.js/blinded-session-id#readme",
+  "license": "MIT",
+  "funding": "https://hloth.dev/donate",
+  "scripts": {
+    "build": "rm -rf dist && tsc --project tsconfig.build.json"
   },
   "files": [
     "dist/index.js",
     "dist/index.d.ts"
   ],
-  "scripts": {
-    "build": "rm -rf dist && tsc --project tsconfig.build.json"
+  "dependencies": {
+    "@noble/curves": "^2.0.1",
+    "@noble/hashes": "^2.0.1"
   },
   "peerDependencies": {
     "typescript": "^5.0.0"
   },
-  "dependencies": {
-    "libsodium-wrappers-sumo": "^0.7.13",
-    "lodash": "^4.17.21"
+  "devDependencies": {
+    "@types/bun": "^1.1.6",
+    "@types/lodash": "^4.17.7"
   }
 }