@signalapp/libsignal-client 0.18.0 → 0.19.2

package/Native.d.ts

@@ -65,7 +65,7 @@ export function Cds2ClientState_CompleteHandshake(cli: Wrapper<Cds2ClientState>,
 export function Cds2ClientState_EstablishedRecv(cli: Wrapper<Cds2ClientState>, receivedCiphertext: Buffer): Buffer;
 export function Cds2ClientState_EstablishedSend(cli: Wrapper<Cds2ClientState>, plaintextToSend: Buffer): Buffer;
 export function Cds2ClientState_InitialRequest(obj: Wrapper<Cds2ClientState>): Buffer;
-export function Cds2ClientState_New(mrenclave: Buffer, caCert: Buffer, attestationMsg: Buffer, earliestValidTimestamp: Timestamp): Cds2ClientState;
+export function Cds2ClientState_New(mrenclave: Buffer, attestationMsg: Buffer, currentTimestamp: Timestamp): Cds2ClientState;
 export function CiphertextMessage_FromPlaintextContent(m: Wrapper<PlaintextContent>): CiphertextMessage;
 export function CiphertextMessage_Serialize(obj: Wrapper<CiphertextMessage>): Buffer;
 export function CiphertextMessage_Type(msg: Wrapper<CiphertextMessage>): number;
@@ -104,6 +104,7 @@ export function HsmEnclaveClient_EstablishedRecv(cli: Wrapper<HsmEnclaveClient>,
 export function HsmEnclaveClient_EstablishedSend(cli: Wrapper<HsmEnclaveClient>, plaintextToSend: Buffer): Buffer;
 export function HsmEnclaveClient_InitialRequest(obj: Wrapper<HsmEnclaveClient>): Buffer;
 export function HsmEnclaveClient_New(trustedPublicKey: Buffer, trustedCodeHashes: Buffer): HsmEnclaveClient;
+export function IdentityKeyPair_Deserialize(buffer: Buffer): {publicKey:PublicKey,privateKey:PrivateKey};
 export function IdentityKeyPair_Serialize(publicKey: Wrapper<PublicKey>, privateKey: Wrapper<PrivateKey>): Buffer;
 export function IdentityKeyPair_SignAlternateIdentity(publicKey: Wrapper<PublicKey>, privateKey: Wrapper<PrivateKey>, otherIdentity: Wrapper<PublicKey>): Buffer;
 export function IdentityKey_VerifyAlternateIdentity(publicKey: Wrapper<PublicKey>, otherIdentity: Wrapper<PublicKey>, signature: Buffer): boolean;

package/dist/index.d.ts

@@ -81,6 +81,7 @@ export declare class IdentityKeyPair {
     readonly privateKey: PrivateKey;
     constructor(publicKey: PublicKey, privateKey: PrivateKey);
     static generate(): IdentityKeyPair;
+    static deserialize(buffer: Buffer): IdentityKeyPair;
     serialize(): Buffer;
     signAlternateIdentity(other: PublicKey): Buffer;
 }
@@ -324,7 +325,7 @@ export declare function sealedSenderDecryptToUsmc(message: Buffer, identityStore
 export declare class Cds2Client {
     readonly _nativeHandle: Native.Cds2ClientState;
     private constructor();
-    static new_NOT_FOR_PRODUCTION(mrenclave: Buffer, trustedCaCert: Buffer, attestationMsg: Buffer, earliestValidTimestamp: Date): Cds2Client;
+    static new(mrenclave: Buffer, attestationMsg: Buffer, currentTimestamp: Date): Cds2Client;
     initialRequest(): Buffer;
     completeHandshake(buffer: Buffer): void;
     establishedSend(buffer: Buffer): Buffer;

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 //
-// Copyright 2020-2021 Signal Messenger, LLC.
+// Copyright 2020-2022 Signal Messenger, LLC.
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
@@ -195,6 +195,10 @@ class IdentityKeyPair {
         const privateKey = PrivateKey.generate();
         return new IdentityKeyPair(privateKey.getPublicKey(), privateKey);
     }
+    static deserialize(buffer) {
+        const { privateKey, publicKey } = Native.IdentityKeyPair_Deserialize(buffer);
+        return new IdentityKeyPair(PublicKey._fromNativeHandle(publicKey), PrivateKey._fromNativeHandle(privateKey));
+    }
     serialize() {
         return Native.IdentityKeyPair_Serialize(this.publicKey, this.privateKey);
     }
@@ -855,8 +859,8 @@ class Cds2Client {
     constructor(nativeHandle) {
         this._nativeHandle = nativeHandle;
     }
-    static new_NOT_FOR_PRODUCTION(mrenclave, trustedCaCert, attestationMsg, earliestValidTimestamp) {
-        return new Cds2Client(Native.Cds2ClientState_New(mrenclave, trustedCaCert, attestationMsg, earliestValidTimestamp.getTime()));
+    static new(mrenclave, attestationMsg, currentTimestamp) {
+        return new Cds2Client(Native.Cds2ClientState_New(mrenclave, attestationMsg, currentTimestamp.getTime()));
     }
     initialRequest() {
         return Native.Cds2ClientState_InitialRequest(this);

package/dist/zkgroup/index.d.ts

@@ -6,6 +6,8 @@ export { default as ServerZkAuthOperations } from './auth/ServerZkAuthOperations
 export { default as AuthCredential } from './auth/AuthCredential';
 export { default as AuthCredentialResponse } from './auth/AuthCredentialResponse';
 export { default as AuthCredentialPresentation } from './auth/AuthCredentialPresentation';
+export { default as AuthCredentialWithPni } from './auth/AuthCredentialWithPni';
+export { default as AuthCredentialWithPniResponse } from './auth/AuthCredentialWithPniResponse';
 export { default as ClientZkGroupCipher } from './groups/ClientZkGroupCipher';
 export { default as GroupIdentifier } from './groups/GroupIdentifier';
 export { default as GroupMasterKey } from './groups/GroupMasterKey';
@@ -23,6 +25,8 @@ export { default as ProfileKeyCredentialRequest } from './profiles/ProfileKeyCre
 export { default as ProfileKeyCredentialRequestContext } from './profiles/ProfileKeyCredentialRequestContext';
 export { default as ProfileKeyCredentialResponse } from './profiles/ProfileKeyCredentialResponse';
 export { default as ProfileKeyVersion } from './profiles/ProfileKeyVersion';
+export { default as ExpiringProfileKeyCredential } from './profiles/ExpiringProfileKeyCredential';
+export { default as ExpiringProfileKeyCredentialResponse } from './profiles/ExpiringProfileKeyCredentialResponse';
 export { default as PniCredential } from './profiles/PniCredential';
 export { default as PniCredentialPresentation } from './profiles/PniCredentialPresentation';
 export { default as PniCredentialRequestContext } from './profiles/PniCredentialRequestContext';

package/dist/zkgroup/index.js

@@ -4,7 +4,7 @@
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ReceiptSerial = exports.ReceiptCredentialResponse = exports.ReceiptCredentialRequestContext = exports.ReceiptCredentialRequest = exports.ReceiptCredentialPresentation = exports.ReceiptCredential = exports.ServerZkReceiptOperations = exports.ClientZkReceiptOperations = exports.PniCredentialResponse = exports.PniCredentialRequestContext = exports.PniCredentialPresentation = exports.PniCredential = exports.ProfileKeyVersion = exports.ProfileKeyCredentialResponse = exports.ProfileKeyCredentialRequestContext = exports.ProfileKeyCredentialRequest = exports.ProfileKeyCredentialPresentation = exports.ProfileKeyCredential = exports.ProfileKeyCommitment = exports.ProfileKey = exports.ServerZkProfileOperations = exports.ClientZkProfileOperations = exports.UuidCiphertext = exports.ProfileKeyCiphertext = exports.GroupSecretParams = exports.GroupPublicParams = exports.GroupMasterKey = exports.GroupIdentifier = exports.ClientZkGroupCipher = exports.AuthCredentialPresentation = exports.AuthCredentialResponse = exports.AuthCredential = exports.ServerZkAuthOperations = exports.ClientZkAuthOperations = exports.NotarySignature = exports.ServerSecretParams = exports.ServerPublicParams = void 0;
+exports.ReceiptSerial = exports.ReceiptCredentialResponse = exports.ReceiptCredentialRequestContext = exports.ReceiptCredentialRequest = exports.ReceiptCredentialPresentation = exports.ReceiptCredential = exports.ServerZkReceiptOperations = exports.ClientZkReceiptOperations = exports.PniCredentialResponse = exports.PniCredentialRequestContext = exports.PniCredentialPresentation = exports.PniCredential = exports.ExpiringProfileKeyCredentialResponse = exports.ExpiringProfileKeyCredential = exports.ProfileKeyVersion = exports.ProfileKeyCredentialResponse = exports.ProfileKeyCredentialRequestContext = exports.ProfileKeyCredentialRequest = exports.ProfileKeyCredentialPresentation = exports.ProfileKeyCredential = exports.ProfileKeyCommitment = exports.ProfileKey = exports.ServerZkProfileOperations = exports.ClientZkProfileOperations = exports.UuidCiphertext = exports.ProfileKeyCiphertext = exports.GroupSecretParams = exports.GroupPublicParams = exports.GroupMasterKey = exports.GroupIdentifier = exports.ClientZkGroupCipher = exports.AuthCredentialWithPniResponse = exports.AuthCredentialWithPni = exports.AuthCredentialPresentation = exports.AuthCredentialResponse = exports.AuthCredential = exports.ServerZkAuthOperations = exports.ClientZkAuthOperations = exports.NotarySignature = exports.ServerSecretParams = exports.ServerPublicParams = void 0;
 // Root
 var ServerPublicParams_1 = require("./ServerPublicParams");
 Object.defineProperty(exports, "ServerPublicParams", { enumerable: true, get: function () { return ServerPublicParams_1.default; } });
@@ -23,6 +23,10 @@ var AuthCredentialResponse_1 = require("./auth/AuthCredentialResponse");
 Object.defineProperty(exports, "AuthCredentialResponse", { enumerable: true, get: function () { return AuthCredentialResponse_1.default; } });
 var AuthCredentialPresentation_1 = require("./auth/AuthCredentialPresentation");
 Object.defineProperty(exports, "AuthCredentialPresentation", { enumerable: true, get: function () { return AuthCredentialPresentation_1.default; } });
+var AuthCredentialWithPni_1 = require("./auth/AuthCredentialWithPni");
+Object.defineProperty(exports, "AuthCredentialWithPni", { enumerable: true, get: function () { return AuthCredentialWithPni_1.default; } });
+var AuthCredentialWithPniResponse_1 = require("./auth/AuthCredentialWithPniResponse");
+Object.defineProperty(exports, "AuthCredentialWithPniResponse", { enumerable: true, get: function () { return AuthCredentialWithPniResponse_1.default; } });
 // Groups
 var ClientZkGroupCipher_1 = require("./groups/ClientZkGroupCipher");
 Object.defineProperty(exports, "ClientZkGroupCipher", { enumerable: true, get: function () { return ClientZkGroupCipher_1.default; } });
@@ -59,6 +63,10 @@ var ProfileKeyCredentialResponse_1 = require("./profiles/ProfileKeyCredentialRes
 Object.defineProperty(exports, "ProfileKeyCredentialResponse", { enumerable: true, get: function () { return ProfileKeyCredentialResponse_1.default; } });
 var ProfileKeyVersion_1 = require("./profiles/ProfileKeyVersion");
 Object.defineProperty(exports, "ProfileKeyVersion", { enumerable: true, get: function () { return ProfileKeyVersion_1.default; } });
+var ExpiringProfileKeyCredential_1 = require("./profiles/ExpiringProfileKeyCredential");
+Object.defineProperty(exports, "ExpiringProfileKeyCredential", { enumerable: true, get: function () { return ExpiringProfileKeyCredential_1.default; } });
+var ExpiringProfileKeyCredentialResponse_1 = require("./profiles/ExpiringProfileKeyCredentialResponse");
+Object.defineProperty(exports, "ExpiringProfileKeyCredentialResponse", { enumerable: true, get: function () { return ExpiringProfileKeyCredentialResponse_1.default; } });
 var PniCredential_1 = require("./profiles/PniCredential");
 Object.defineProperty(exports, "PniCredential", { enumerable: true, get: function () { return PniCredential_1.default; } });
 var PniCredentialPresentation_1 = require("./profiles/PniCredentialPresentation");

package/dist/zkgroup/profiles/ClientZkProfileOperations.d.ts

@@ -18,15 +18,30 @@ export default class ClientZkProfileOperations {
     constructor(serverPublicParams: ServerPublicParams);
     createProfileKeyCredentialRequestContext(uuid: UUIDType, profileKey: ProfileKey): ProfileKeyCredentialRequestContext;
     createProfileKeyCredentialRequestContextWithRandom(random: Buffer, uuid: UUIDType, profileKey: ProfileKey): ProfileKeyCredentialRequestContext;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialRequestContext(aci: UUIDType, pni: UUIDType, profileKey: ProfileKey): PniCredentialRequestContext;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialRequestContextWithRandom(random: Buffer, aci: UUIDType, pni: UUIDType, profileKey: ProfileKey): PniCredentialRequestContext;
     receiveProfileKeyCredential(profileKeyCredentialRequestContext: ProfileKeyCredentialRequestContext, profileKeyCredentialResponse: ProfileKeyCredentialResponse): ProfileKeyCredential;
     receiveExpiringProfileKeyCredential(profileKeyCredentialRequestContext: ProfileKeyCredentialRequestContext, profileKeyCredentialResponse: ExpiringProfileKeyCredentialResponse, now?: Date): ExpiringProfileKeyCredential;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     receivePniCredential(requestContext: PniCredentialRequestContext, response: PniCredentialResponse): PniCredential;
     createProfileKeyCredentialPresentation(groupSecretParams: GroupSecretParams, profileKeyCredential: ProfileKeyCredential): ProfileKeyCredentialPresentation;
     createProfileKeyCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, profileKeyCredential: ProfileKeyCredential): ProfileKeyCredentialPresentation;
     createExpiringProfileKeyCredentialPresentation(groupSecretParams: GroupSecretParams, profileKeyCredential: ExpiringProfileKeyCredential): ProfileKeyCredentialPresentation;
     createExpiringProfileKeyCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, profileKeyCredential: ExpiringProfileKeyCredential): ProfileKeyCredentialPresentation;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialPresentation(groupSecretParams: GroupSecretParams, credential: PniCredential): PniCredentialPresentation;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, credential: PniCredential): PniCredentialPresentation;
 }

package/dist/zkgroup/profiles/ClientZkProfileOperations.js

@@ -26,10 +26,16 @@ class ClientZkProfileOperations {
     createProfileKeyCredentialRequestContextWithRandom(random, uuid, profileKey) {
         return new ProfileKeyCredentialRequestContext_1.default(Native.ServerPublicParams_CreateProfileKeyCredentialRequestContextDeterministic(this.serverPublicParams.getContents(), random, (0, UUIDUtil_1.fromUUID)(uuid), profileKey.getContents()));
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialRequestContext(aci, pni, profileKey) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.createPniCredentialRequestContextWithRandom(random, aci, pni, profileKey);
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialRequestContextWithRandom(random, aci, pni, profileKey) {
         return new PniCredentialRequestContext_1.default(Native.ServerPublicParams_CreatePniCredentialRequestContextDeterministic(this.serverPublicParams.getContents(), random, (0, UUIDUtil_1.fromUUID)(aci), (0, UUIDUtil_1.fromUUID)(pni), profileKey.getContents()));
     }
@@ -39,6 +45,9 @@ class ClientZkProfileOperations {
     receiveExpiringProfileKeyCredential(profileKeyCredentialRequestContext, profileKeyCredentialResponse, now = new Date()) {
         return new ExpiringProfileKeyCredential_1.default(Native.ServerPublicParams_ReceiveExpiringProfileKeyCredential(this.serverPublicParams.getContents(), profileKeyCredentialRequestContext.getContents(), profileKeyCredentialResponse.getContents(), Math.floor(now.getTime() / 1000)));
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     receivePniCredential(requestContext, response) {
         return new PniCredential_1.default(Native.ServerPublicParams_ReceivePniCredential(this.serverPublicParams.getContents(), requestContext.getContents(), response.getContents()));
     }
@@ -56,10 +65,16 @@ class ClientZkProfileOperations {
     createExpiringProfileKeyCredentialPresentationWithRandom(random, groupSecretParams, profileKeyCredential) {
         return new ProfileKeyCredentialPresentation_1.default(Native.ServerPublicParams_CreateExpiringProfileKeyCredentialPresentationDeterministic(this.serverPublicParams.getContents(), random, groupSecretParams.getContents(), profileKeyCredential.getContents()));
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialPresentation(groupSecretParams, credential) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.createPniCredentialPresentationWithRandom(random, groupSecretParams, credential);
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     createPniCredentialPresentationWithRandom(random, groupSecretParams, credential) {
         return new PniCredentialPresentation_1.default(Native.ServerPublicParams_CreatePniCredentialPresentationDeterministic(this.serverPublicParams.getContents(), random, groupSecretParams.getContents(), credential.getContents()));
     }

package/dist/zkgroup/profiles/ServerZkProfileOperations.d.ts

@@ -16,8 +16,17 @@ export default class ServerZkProfileOperations {
     issueProfileKeyCredentialWithRandom(random: Buffer, profileKeyCredentialRequest: ProfileKeyCredentialRequest, uuid: UUIDType, profileKeyCommitment: ProfileKeyCommitment): ProfileKeyCredentialResponse;
     issueExpiringProfileKeyCredential(profileKeyCredentialRequest: ProfileKeyCredentialRequest, uuid: UUIDType, profileKeyCommitment: ProfileKeyCommitment, expirationInSeconds: number): ExpiringProfileKeyCredentialResponse;
     issueExpiringProfileKeyCredentialWithRandom(random: Buffer, profileKeyCredentialRequest: ProfileKeyCredentialRequest, uuid: UUIDType, profileKeyCommitment: ProfileKeyCommitment, expirationInSeconds: number): ExpiringProfileKeyCredentialResponse;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     issuePniCredential(profileKeyCredentialRequest: ProfileKeyCredentialRequest, aci: UUIDType, pni: UUIDType, profileKeyCommitment: ProfileKeyCommitment): PniCredentialResponse;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     issuePniCredentialWithRandom(random: Buffer, profileKeyCredentialRequest: ProfileKeyCredentialRequest, aci: UUIDType, pni: UUIDType, profileKeyCommitment: ProfileKeyCommitment): PniCredentialResponse;
     verifyProfileKeyCredentialPresentation(groupPublicParams: GroupPublicParams, profileKeyCredentialPresentation: ProfileKeyCredentialPresentation, now?: Date): void;
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     verifyPniCredentialPresentation(groupPublicParams: GroupPublicParams, presentation: PniCredentialPresentation): void;
 }

package/dist/zkgroup/profiles/ServerZkProfileOperations.js

@@ -29,16 +29,25 @@ class ServerZkProfileOperations {
     issueExpiringProfileKeyCredentialWithRandom(random, profileKeyCredentialRequest, uuid, profileKeyCommitment, expirationInSeconds) {
         return new ExpiringProfileKeyCredentialResponse_1.default(Native.ServerSecretParams_IssueExpiringProfileKeyCredentialDeterministic(this.serverSecretParams.getContents(), random, profileKeyCredentialRequest.getContents(), (0, UUIDUtil_1.fromUUID)(uuid), profileKeyCommitment.getContents(), expirationInSeconds));
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     issuePniCredential(profileKeyCredentialRequest, aci, pni, profileKeyCommitment) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.issuePniCredentialWithRandom(random, profileKeyCredentialRequest, aci, pni, profileKeyCommitment);
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     issuePniCredentialWithRandom(random, profileKeyCredentialRequest, aci, pni, profileKeyCommitment) {
         return new PniCredentialResponse_1.default(Native.ServerSecretParams_IssuePniCredentialDeterministic(this.serverSecretParams.getContents(), random, profileKeyCredentialRequest.getContents(), (0, UUIDUtil_1.fromUUID)(aci), (0, UUIDUtil_1.fromUUID)(pni), profileKeyCommitment.getContents()));
     }
     verifyProfileKeyCredentialPresentation(groupPublicParams, profileKeyCredentialPresentation, now = new Date()) {
         Native.ServerSecretParams_VerifyProfileKeyCredentialPresentation(this.serverSecretParams.getContents(), groupPublicParams.getContents(), profileKeyCredentialPresentation.getContents(), Math.floor(now.getTime() / 1000));
     }
+    /**
+     * @deprecated Superseded by AuthCredentialWithPni + ProfileKeyCredential
+     */
     verifyPniCredentialPresentation(groupPublicParams, presentation) {
         Native.ServerSecretParams_VerifyPniCredentialPresentation(this.serverSecretParams.getContents(), groupPublicParams.getContents(), presentation.getContents());
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signalapp/libsignal-client",
-  "version": "0.18.0",
+  "version": "0.19.2",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",