@signalapp/libsignal-client 0.26.0 → 0.28.0

package/Native.d.ts

@@ -35,6 +35,12 @@ export abstract class SignedPreKeyStore {
   _getSignedPreKey(signedPreKeyId: number): Promise<SignedPreKeyRecord>;
 }
 
+export abstract class KyberPreKeyStore {
+  _saveKyberPreKey(kyberPreKeyId: number, record: KyberPreKeyRecord): Promise<void>;
+  _getKyberPreKey(kyberPreKeyId: number): Promise<KyberPreKeyRecord>;
+  _markKyberPreKeyUsed(kyberPreKeyId: number): Promise<void>;
+}
+
 export abstract class SenderKeyStore {
   _saveSenderKey(sender: ProtocolAddress, distributionId: Uuid, record: SenderKeyRecord): Promise<void>;
   _getSenderKey(sender: ProtocolAddress, distributionId: Uuid): Promise<SenderKeyRecord | null>;
@@ -141,6 +147,23 @@ export function IncrementalMac_CalculateChunkSize(dataSize: number): number;
 export function IncrementalMac_Finalize(mac: Wrapper<IncrementalMac>): Buffer;
 export function IncrementalMac_Initialize(key: Buffer, chunkSize: number): IncrementalMac;
 export function IncrementalMac_Update(mac: Wrapper<IncrementalMac>, bytes: Buffer, offset: number, length: number): Buffer;
+export function KyberKeyPair_Generate(): KyberKeyPair;
+export function KyberKeyPair_GetPublicKey(keyPair: Wrapper<KyberKeyPair>): KyberPublicKey;
+export function KyberKeyPair_GetSecretKey(keyPair: Wrapper<KyberKeyPair>): KyberSecretKey;
+export function KyberPreKeyRecord_Deserialize(data: Buffer): KyberPreKeyRecord;
+export function KyberPreKeyRecord_GetId(obj: Wrapper<KyberPreKeyRecord>): number;
+export function KyberPreKeyRecord_GetKeyPair(obj: Wrapper<KyberPreKeyRecord>): KyberKeyPair;
+export function KyberPreKeyRecord_GetPublicKey(obj: Wrapper<KyberPreKeyRecord>): KyberPublicKey;
+export function KyberPreKeyRecord_GetSecretKey(obj: Wrapper<KyberPreKeyRecord>): KyberSecretKey;
+export function KyberPreKeyRecord_GetSignature(obj: Wrapper<KyberPreKeyRecord>): Buffer;
+export function KyberPreKeyRecord_GetTimestamp(obj: Wrapper<KyberPreKeyRecord>): Timestamp;
+export function KyberPreKeyRecord_New(id: number, timestamp: Timestamp, keyPair: Wrapper<KyberKeyPair>, signature: Buffer): KyberPreKeyRecord;
+export function KyberPreKeyRecord_Serialize(obj: Wrapper<KyberPreKeyRecord>): Buffer;
+export function KyberPublicKey_Deserialize(data: Buffer): KyberPublicKey;
+export function KyberPublicKey_Equals(lhs: Wrapper<KyberPublicKey>, rhs: Wrapper<KyberPublicKey>): boolean;
+export function KyberPublicKey_Serialize(obj: Wrapper<KyberPublicKey>): Buffer;
+export function KyberSecretKey_Deserialize(data: Buffer): KyberSecretKey;
+export function KyberSecretKey_Serialize(obj: Wrapper<KyberSecretKey>): Buffer;
 export function Mp4Sanitizer_Sanitize(input: InputStream, len: Buffer): Promise<SanitizedMetadata>;
 export function PlaintextContent_Deserialize(data: Buffer): PlaintextContent;
 export function PlaintextContent_FromDecryptionErrorMessage(m: Wrapper<DecryptionErrorMessage>): PlaintextContent;
@@ -148,13 +171,16 @@ export function PlaintextContent_GetBody(obj: Wrapper<PlaintextContent>): Buffer
 export function PlaintextContent_Serialize(obj: Wrapper<PlaintextContent>): Buffer;
 export function PreKeyBundle_GetDeviceId(obj: Wrapper<PreKeyBundle>): number;
 export function PreKeyBundle_GetIdentityKey(p: Wrapper<PreKeyBundle>): PublicKey;
+export function PreKeyBundle_GetKyberPreKeyId(obj: Wrapper<PreKeyBundle>): number | null;
+export function PreKeyBundle_GetKyberPreKeyPublic(bundle: Wrapper<PreKeyBundle>): KyberPublicKey | null;
+export function PreKeyBundle_GetKyberPreKeySignature(bundle: Wrapper<PreKeyBundle>): Buffer;
 export function PreKeyBundle_GetPreKeyId(obj: Wrapper<PreKeyBundle>): number | null;
 export function PreKeyBundle_GetPreKeyPublic(obj: Wrapper<PreKeyBundle>): PublicKey | null;
 export function PreKeyBundle_GetRegistrationId(obj: Wrapper<PreKeyBundle>): number;
 export function PreKeyBundle_GetSignedPreKeyId(obj: Wrapper<PreKeyBundle>): number;
 export function PreKeyBundle_GetSignedPreKeyPublic(obj: Wrapper<PreKeyBundle>): PublicKey;
 export function PreKeyBundle_GetSignedPreKeySignature(obj: Wrapper<PreKeyBundle>): Buffer;
-export function PreKeyBundle_New(registrationId: number, deviceId: number, prekeyId: number | null, prekey: Wrapper<PublicKey> | null, signedPrekeyId: number, signedPrekey: Wrapper<PublicKey>, signedPrekeySignature: Buffer, identityKey: Wrapper<PublicKey>): PreKeyBundle;
+export function PreKeyBundle_New(registrationId: number, deviceId: number, prekeyId: number | null, prekey: Wrapper<PublicKey> | null, signedPrekeyId: number, signedPrekey: Wrapper<PublicKey>, signedPrekeySignature: Buffer, identityKey: Wrapper<PublicKey>, kyberPrekeyId: number | null, kyberPrekey: Wrapper<KyberPublicKey> | null, kyberPrekeySignature: Buffer): PreKeyBundle;
 export function PreKeyRecord_Deserialize(data: Buffer): PreKeyRecord;
 export function PreKeyRecord_GetId(obj: Wrapper<PreKeyRecord>): number;
 export function PreKeyRecord_GetPrivateKey(obj: Wrapper<PreKeyRecord>): PrivateKey;
@@ -214,7 +240,7 @@ export function SealedSenderDecryptionResult_GetDeviceId(obj: Wrapper<SealedSend
 export function SealedSenderDecryptionResult_GetSenderE164(obj: Wrapper<SealedSenderDecryptionResult>): string | null;
 export function SealedSenderDecryptionResult_GetSenderUuid(obj: Wrapper<SealedSenderDecryptionResult>): string;
 export function SealedSenderDecryptionResult_Message(obj: Wrapper<SealedSenderDecryptionResult>): Buffer;
-export function SealedSender_DecryptMessage(message: Buffer, trustRoot: Wrapper<PublicKey>, timestamp: Timestamp, localE164: string | null, localUuid: string, localDeviceId: number, sessionStore: SessionStore, identityStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore): Promise<SealedSenderDecryptionResult>;
+export function SealedSender_DecryptMessage(message: Buffer, trustRoot: Wrapper<PublicKey>, timestamp: Timestamp, localE164: string | null, localUuid: string, localDeviceId: number, sessionStore: SessionStore, identityStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore, kyberPrekeyStore: KyberPreKeyStore): Promise<SealedSenderDecryptionResult>;
 export function SealedSender_DecryptToUsmc(ctext: Buffer, identityStore: IdentityKeyStore, ctx: null): Promise<UnidentifiedSenderMessageContent>;
 export function SealedSender_Encrypt(destination: Wrapper<ProtocolAddress>, content: Wrapper<UnidentifiedSenderMessageContent>, identityKeyStore: IdentityKeyStore, ctx: null): Promise<Buffer>;
 export function SealedSender_MultiRecipientEncrypt(recipients: Wrapper<ProtocolAddress>[], recipientSessions: Wrapper<SessionRecord>[], content: Wrapper<UnidentifiedSenderMessageContent>, identityKeyStore: IdentityKeyStore, ctx: null): Promise<Buffer>;
@@ -280,8 +306,13 @@ export function ServerSecretParams_SignDeterministic(params: Serialized<ServerSe
 export function ServerSecretParams_VerifyAuthCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, groupPublicParams: Serialized<GroupPublicParams>, presentationBytes: Buffer, currentTimeInSeconds: Timestamp): void;
 export function ServerSecretParams_VerifyProfileKeyCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, groupPublicParams: Serialized<GroupPublicParams>, presentationBytes: Buffer, currentTimeInSeconds: Timestamp): void;
 export function ServerSecretParams_VerifyReceiptCredentialPresentation(serverSecretParams: Serialized<ServerSecretParams>, presentation: Serialized<ReceiptCredentialPresentation>): void;
+export function ServiceId_ParseFromServiceIdBinary(input: Buffer): Buffer;
+export function ServiceId_ParseFromServiceIdString(input: string): Buffer;
+export function ServiceId_ServiceIdBinary(value: Buffer): Buffer;
+export function ServiceId_ServiceIdLog(value: Buffer): string;
+export function ServiceId_ServiceIdString(value: Buffer): string;
 export function SessionBuilder_ProcessPreKeyBundle(bundle: Wrapper<PreKeyBundle>, protocolAddress: Wrapper<ProtocolAddress>, sessionStore: SessionStore, identityKeyStore: IdentityKeyStore, ctx: null): Promise<void>;
-export function SessionCipher_DecryptPreKeySignalMessage(message: Wrapper<PreKeySignalMessage>, protocolAddress: Wrapper<ProtocolAddress>, sessionStore: SessionStore, identityKeyStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore, ctx: null): Promise<Buffer>;
+export function SessionCipher_DecryptPreKeySignalMessage(message: Wrapper<PreKeySignalMessage>, protocolAddress: Wrapper<ProtocolAddress>, sessionStore: SessionStore, identityKeyStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore, kyberPrekeyStore: KyberPreKeyStore, ctx: null): Promise<Buffer>;
 export function SessionCipher_DecryptSignalMessage(message: Wrapper<SignalMessage>, protocolAddress: Wrapper<ProtocolAddress>, sessionStore: SessionStore, identityKeyStore: IdentityKeyStore, ctx: null): Promise<Buffer>;
 export function SessionCipher_EncryptMessage(ptext: Buffer, protocolAddress: Wrapper<ProtocolAddress>, sessionStore: SessionStore, identityKeyStore: IdentityKeyStore, ctx: null): Promise<CiphertextMessage>;
 export function SessionRecord_ArchiveCurrentState(sessionRecord: Wrapper<SessionRecord>): void;
@@ -319,6 +350,8 @@ export function UnidentifiedSenderMessageContent_GetMsgType(m: Wrapper<Unidentif
 export function UnidentifiedSenderMessageContent_GetSenderCert(m: Wrapper<UnidentifiedSenderMessageContent>): SenderCertificate;
 export function UnidentifiedSenderMessageContent_New(message: Wrapper<CiphertextMessage>, sender: Wrapper<SenderCertificate>, contentHint: number, groupId: Buffer | null): UnidentifiedSenderMessageContent;
 export function UnidentifiedSenderMessageContent_Serialize(obj: Wrapper<UnidentifiedSenderMessageContent>): Buffer;
+export function UsernameLink_Create(username: string): Buffer;
+export function UsernameLink_DecryptUsername(entropy: Buffer, encryptedUsername: Buffer): string;
 export function Username_CandidatesFrom(nickname: string, minLen: number, maxLen: number): string;
 export function Username_Hash(username: string): Buffer;
 export function Username_Proof(username: string, randomness: Buffer): Buffer;
@@ -343,6 +376,10 @@ interface GroupPublicParams { readonly __type: unique symbol; }
 interface GroupSecretParams { readonly __type: unique symbol; }
 interface HsmEnclaveClient { readonly __type: unique symbol; }
 interface IncrementalMac { readonly __type: unique symbol; }
+interface KyberKeyPair { readonly __type: unique symbol; }
+interface KyberPreKeyRecord { readonly __type: unique symbol; }
+interface KyberPublicKey { readonly __type: unique symbol; }
+interface KyberSecretKey { readonly __type: unique symbol; }
 interface PlaintextContent { readonly __type: unique symbol; }
 interface PreKeyBundle { readonly __type: unique symbol; }
 interface PreKeyRecord { readonly __type: unique symbol; }

package/dist/Address.d.ts

@@ -1,4 +1,36 @@
+/// <reference types="node" />
 import * as Native from '../Native';
+declare enum ServiceIdKind {
+    Aci = 0,
+    Pni = 1
+}
+type ThisType<T extends {
+    prototype: unknown;
+}> = T['prototype'];
+export declare class ServiceId extends Object {
+    private readonly serviceIdFixedWidthBinary;
+    protected constructor(serviceIdFixedWidthBinary: Buffer);
+    protected static fromUuidBytesAndKind<T extends typeof ServiceId>(this: T, uuidBytes: ArrayLike<number>, kind: ServiceIdKind): ThisType<T>;
+    getServiceIdBinary(): Buffer;
+    getServiceIdString(): string;
+    toString(): string;
+    private static parseFromServiceIdFixedWidthBinary;
+    static parseFromServiceIdBinary(serviceIdBinary: Buffer): ServiceId;
+    static parseFromServiceIdString(serviceIdString: string): ServiceId;
+    getRawUuid(): string;
+    getRawUuidBytes(): Buffer;
+    isEqual(other: ServiceId): boolean;
+}
+export declare class Aci extends ServiceId {
+    private readonly __type?;
+    static fromUuid(uuidString: string): Aci;
+    static fromUuidBytes(uuidBytes: ArrayLike<number>): Aci;
+}
+export declare class Pni extends ServiceId {
+    private readonly __type?;
+    static fromUuid(uuidString: string): Pni;
+    static fromUuidBytes(uuidBytes: ArrayLike<number>): Pni;
+}
 export declare class ProtocolAddress {
     readonly _nativeHandle: Native.ProtocolAddress;
     private constructor();
@@ -7,3 +39,4 @@ export declare class ProtocolAddress {
     name(): string;
     deviceId(): number;
 }
+export {};

package/dist/Address.js

@@ -4,8 +4,83 @@
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProtocolAddress = void 0;
+exports.ProtocolAddress = exports.Pni = exports.Aci = exports.ServiceId = void 0;
 const Native = require("../Native");
+const uuid = require("uuid");
+var ServiceIdKind;
+(function (ServiceIdKind) {
+    ServiceIdKind[ServiceIdKind["Aci"] = 0] = "Aci";
+    ServiceIdKind[ServiceIdKind["Pni"] = 1] = "Pni";
+})(ServiceIdKind || (ServiceIdKind = {}));
+const SERVICE_ID_FIXED_WIDTH_BINARY_LEN = 17;
+class ServiceId extends Object {
+    constructor(serviceIdFixedWidthBinary) {
+        super();
+        if (serviceIdFixedWidthBinary.length != SERVICE_ID_FIXED_WIDTH_BINARY_LEN) {
+            throw new TypeError('invalid Service-Id-FixedWidthBinary');
+        }
+        this.serviceIdFixedWidthBinary = serviceIdFixedWidthBinary;
+    }
+    static fromUuidBytesAndKind(uuidBytes, kind) {
+        const buffer = Buffer.alloc(SERVICE_ID_FIXED_WIDTH_BINARY_LEN);
+        buffer[0] = kind;
+        buffer.set(uuidBytes, 1);
+        return new this(buffer);
+    }
+    getServiceIdBinary() {
+        return Native.ServiceId_ServiceIdBinary(this.serviceIdFixedWidthBinary);
+    }
+    getServiceIdString() {
+        return Native.ServiceId_ServiceIdString(this.serviceIdFixedWidthBinary);
+    }
+    toString() {
+        return Native.ServiceId_ServiceIdLog(this.serviceIdFixedWidthBinary);
+    }
+    static parseFromServiceIdFixedWidthBinary(serviceIdFixedWidthBinary) {
+        switch (serviceIdFixedWidthBinary[0]) {
+            case ServiceIdKind.Aci:
+                return new Aci(serviceIdFixedWidthBinary);
+            case ServiceIdKind.Pni:
+                return new Pni(serviceIdFixedWidthBinary);
+            default:
+                throw new TypeError('unknown type in Service-Id-FixedWidthBinary');
+        }
+    }
+    static parseFromServiceIdBinary(serviceIdBinary) {
+        return ServiceId.parseFromServiceIdFixedWidthBinary(Native.ServiceId_ParseFromServiceIdBinary(serviceIdBinary));
+    }
+    static parseFromServiceIdString(serviceIdString) {
+        return ServiceId.parseFromServiceIdFixedWidthBinary(Native.ServiceId_ParseFromServiceIdString(serviceIdString));
+    }
+    getRawUuid() {
+        return uuid.stringify(this.serviceIdFixedWidthBinary, 1);
+    }
+    getRawUuidBytes() {
+        return Buffer.from(this.serviceIdFixedWidthBinary.buffer, 1);
+    }
+    isEqual(other) {
+        return this.serviceIdFixedWidthBinary.equals(other.serviceIdFixedWidthBinary);
+    }
+}
+exports.ServiceId = ServiceId;
+class Aci extends ServiceId {
+    static fromUuid(uuidString) {
+        return this.fromUuidBytes(uuid.parse(uuidString));
+    }
+    static fromUuidBytes(uuidBytes) {
+        return super.fromUuidBytesAndKind(uuidBytes, ServiceIdKind.Aci);
+    }
+}
+exports.Aci = Aci;
+class Pni extends ServiceId {
+    static fromUuid(uuidString) {
+        return this.fromUuidBytes(uuid.parse(uuidString));
+    }
+    static fromUuidBytes(uuidBytes) {
+        return super.fromUuidBytesAndKind(uuidBytes, ServiceIdKind.Pni);
+    }
+}
+exports.Pni = Pni;
 class ProtocolAddress {
     constructor(handle) {
         this._nativeHandle = handle;

package/dist/Errors.d.ts

@@ -17,7 +17,10 @@ export declare enum ErrorCode {
     NicknameTooLong = 13,
     IoError = 14,
     InvalidMediaInput = 15,
-    UnsupportedMediaInput = 16
+    UnsupportedMediaInput = 16,
+    InputDataTooLong = 17,
+    InvalidEntropyDataLength = 18,
+    InvalidUsernameLinkEncryptedData = 19
 }
 export declare class LibSignalErrorBase extends Error {
     readonly code: ErrorCode;
@@ -72,6 +75,15 @@ export type NicknameTooShortError = LibSignalErrorCommon & {
 export type NicknameTooLongError = LibSignalErrorCommon & {
     code: ErrorCode.NicknameTooLong;
 };
+export type InputDataTooLong = LibSignalErrorCommon & {
+    code: ErrorCode.InputDataTooLong;
+};
+export type InvalidEntropyDataLength = LibSignalErrorCommon & {
+    code: ErrorCode.InvalidEntropyDataLength;
+};
+export type InvalidUsernameLinkEncryptedData = LibSignalErrorCommon & {
+    code: ErrorCode.InvalidUsernameLinkEncryptedData;
+};
 export type IoError = LibSignalErrorCommon & {
     code: ErrorCode.IoError;
 };
@@ -81,4 +93,4 @@ export type InvalidMediaInputError = LibSignalErrorCommon & {
 export type UnsupportedMediaInputError = LibSignalErrorCommon & {
     code: ErrorCode.UnsupportedMediaInput;
 };
-export type LibSignalError = GenericError | DuplicatedMessageError | SealedSenderSelfSendError | UntrustedIdentityError | InvalidRegistrationIdError | VerificationFailedError | InvalidSessionError | InvalidSenderKeySessionError | CannotBeEmptyError | CannotStartWithDigitError | MissingSeparatorError | BadNicknameCharacterError | NicknameTooShortError | NicknameTooLongError | IoError | InvalidMediaInputError | UnsupportedMediaInputError;
+export type LibSignalError = GenericError | DuplicatedMessageError | SealedSenderSelfSendError | UntrustedIdentityError | InvalidRegistrationIdError | VerificationFailedError | InvalidSessionError | InvalidSenderKeySessionError | CannotBeEmptyError | CannotStartWithDigitError | MissingSeparatorError | BadNicknameCharacterError | NicknameTooShortError | NicknameTooLongError | InputDataTooLong | InvalidEntropyDataLength | InvalidUsernameLinkEncryptedData | IoError | InvalidMediaInputError | UnsupportedMediaInputError;

package/dist/Errors.js

@@ -25,6 +25,9 @@ var ErrorCode;
     ErrorCode[ErrorCode["IoError"] = 14] = "IoError";
     ErrorCode[ErrorCode["InvalidMediaInput"] = 15] = "InvalidMediaInput";
     ErrorCode[ErrorCode["UnsupportedMediaInput"] = 16] = "UnsupportedMediaInput";
+    ErrorCode[ErrorCode["InputDataTooLong"] = 17] = "InputDataTooLong";
+    ErrorCode[ErrorCode["InvalidEntropyDataLength"] = 18] = "InvalidEntropyDataLength";
+    ErrorCode[ErrorCode["InvalidUsernameLinkEncryptedData"] = 19] = "InvalidUsernameLinkEncryptedData";
 })(ErrorCode = exports.ErrorCode || (exports.ErrorCode = {}));
 class LibSignalErrorBase extends Error {
     constructor(message, name, operation, extraProps) {

package/dist/index.d.ts

@@ -79,6 +79,28 @@ export declare class PrivateKey {
     agree(other_key: PublicKey): Buffer;
     getPublicKey(): PublicKey;
 }
+export declare class KEMPublicKey {
+    readonly _nativeHandle: Native.KyberPublicKey;
+    private constructor();
+    static _fromNativeHandle(handle: Native.KyberPublicKey): KEMPublicKey;
+    static deserialize(buf: Buffer): KEMPublicKey;
+    serialize(): Buffer;
+}
+export declare class KEMSecretKey {
+    readonly _nativeHandle: Native.KyberSecretKey;
+    private constructor();
+    static _fromNativeHandle(handle: Native.KyberSecretKey): KEMSecretKey;
+    static deserialize(buf: Buffer): KEMSecretKey;
+    serialize(): Buffer;
+}
+export declare class KEMKeyPair {
+    readonly _nativeHandle: Native.KyberKeyPair;
+    private constructor();
+    static _fromNativeHandle(handle: Native.KyberKeyPair): KEMKeyPair;
+    static generate(): KEMKeyPair;
+    getPublicKey(): KEMPublicKey;
+    getSecretKey(): KEMSecretKey;
+}
 export declare class IdentityKeyPair {
     readonly publicKey: PublicKey;
     readonly privateKey: PrivateKey;
@@ -91,7 +113,7 @@ export declare class IdentityKeyPair {
 export declare class PreKeyBundle {
     readonly _nativeHandle: Native.PreKeyBundle;
     private constructor();
-    static new(registration_id: number, device_id: number, prekey_id: number | null, prekey: PublicKey | null, signed_prekey_id: number, signed_prekey: PublicKey, signed_prekey_signature: Buffer, identity_key: PublicKey): PreKeyBundle;
+    static new(registration_id: number, device_id: number, prekey_id: number | null, prekey: PublicKey | null, signed_prekey_id: number, signed_prekey: PublicKey, signed_prekey_signature: Buffer, identity_key: PublicKey, kyber_prekey_id?: number | null, kyber_prekey?: KEMPublicKey | null, kyber_prekey_signature?: Buffer | null): PreKeyBundle;
     deviceId(): number;
     identityKey(): PublicKey;
     preKeyId(): number | null;
@@ -100,6 +122,9 @@ export declare class PreKeyBundle {
     signedPreKeyId(): number;
     signedPreKeyPublic(): PublicKey;
     signedPreKeySignature(): Buffer;
+    kyberPreKeyId(): number | null;
+    kyberPreKeyPublic(): KEMPublicKey | null;
+    kyberPreKeySignature(): Buffer | null;
 }
 export declare class PreKeyRecord {
     readonly _nativeHandle: Native.PreKeyRecord;
@@ -125,6 +150,20 @@ export declare class SignedPreKeyRecord {
     signature(): Buffer;
     timestamp(): number;
 }
+export declare class KyberPreKeyRecord {
+    readonly _nativeHandle: Native.KyberPreKeyRecord;
+    private constructor();
+    static _fromNativeHandle(nativeHandle: Native.KyberPreKeyRecord): KyberPreKeyRecord;
+    static new(id: number, timestamp: number, keyPair: KEMKeyPair, signature: Buffer): KyberPreKeyRecord;
+    serialize(): Buffer;
+    static deserialize(buffer: Buffer): KyberPreKeyRecord;
+    id(): number;
+    keyPair(): KEMKeyPair;
+    publicKey(): KEMPublicKey;
+    secretKey(): KEMSecretKey;
+    signature(): Buffer;
+    timestamp(): number;
+}
 export declare class SignalMessage {
     readonly _nativeHandle: Native.SignalMessage;
     private constructor();
@@ -266,6 +305,14 @@ export declare abstract class SignedPreKeyStore implements Native.SignedPreKeySt
     abstract saveSignedPreKey(id: number, record: SignedPreKeyRecord): Promise<void>;
     abstract getSignedPreKey(id: number): Promise<SignedPreKeyRecord>;
 }
+export declare abstract class KyberPreKeyStore implements Native.KyberPreKeyStore {
+    _saveKyberPreKey(kyberPreKeyId: number, record: Native.KyberPreKeyRecord): Promise<void>;
+    _getKyberPreKey(kyberPreKeyId: number): Promise<Native.KyberPreKeyRecord>;
+    _markKyberPreKeyUsed(kyberPreKeyId: number): Promise<void>;
+    abstract saveKyberPreKey(kyberPreKeyId: number, record: KyberPreKeyRecord): Promise<void>;
+    abstract getKyberPreKey(kyberPreKeyId: number): Promise<KyberPreKeyRecord>;
+    abstract markKyberPreKeyUsed(kyberPreKeyId: number): Promise<void>;
+}
 export declare abstract class SenderKeyStore implements Native.SenderKeyStore {
     _saveSenderKey(sender: Native.ProtocolAddress, distributionId: Native.Uuid, record: Native.SenderKeyRecord): Promise<void>;
     _getSenderKey(sender: Native.ProtocolAddress, distributionId: Native.Uuid): Promise<Native.SenderKeyRecord | null>;
@@ -318,12 +365,12 @@ export declare class DecryptionErrorMessage {
 export declare function processPreKeyBundle(bundle: PreKeyBundle, address: ProtocolAddress, sessionStore: SessionStore, identityStore: IdentityKeyStore): Promise<void>;
 export declare function signalEncrypt(message: Buffer, address: ProtocolAddress, sessionStore: SessionStore, identityStore: IdentityKeyStore): Promise<CiphertextMessage>;
 export declare function signalDecrypt(message: SignalMessage, address: ProtocolAddress, sessionStore: SessionStore, identityStore: IdentityKeyStore): Promise<Buffer>;
-export declare function signalDecryptPreKey(message: PreKeySignalMessage, address: ProtocolAddress, sessionStore: SessionStore, identityStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore): Promise<Buffer>;
+export declare function signalDecryptPreKey(message: PreKeySignalMessage, address: ProtocolAddress, sessionStore: SessionStore, identityStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore, kyberPrekeyStore: KyberPreKeyStore): Promise<Buffer>;
 export declare function sealedSenderEncryptMessage(message: Buffer, address: ProtocolAddress, senderCert: SenderCertificate, sessionStore: SessionStore, identityStore: IdentityKeyStore): Promise<Buffer>;
 export declare function sealedSenderEncrypt(content: UnidentifiedSenderMessageContent, address: ProtocolAddress, identityStore: IdentityKeyStore): Promise<Buffer>;
 export declare function sealedSenderMultiRecipientEncrypt(content: UnidentifiedSenderMessageContent, recipients: ProtocolAddress[], identityStore: IdentityKeyStore, sessionStore: SessionStore): Promise<Buffer>;
 export declare function sealedSenderMultiRecipientMessageForSingleRecipient(message: Buffer): Buffer;
-export declare function sealedSenderDecryptMessage(message: Buffer, trustRoot: PublicKey, timestamp: number, localE164: string | null, localUuid: string, localDeviceId: number, sessionStore: SessionStore, identityStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore): Promise<SealedSenderDecryptionResult>;
+export declare function sealedSenderDecryptMessage(message: Buffer, trustRoot: PublicKey, timestamp: number, localE164: string | null, localUuid: string, localDeviceId: number, sessionStore: SessionStore, identityStore: IdentityKeyStore, prekeyStore: PreKeyStore, signedPrekeyStore: SignedPreKeyStore, kyberPrekeyStore: KyberPreKeyStore): Promise<SealedSenderDecryptionResult>;
 export declare function sealedSenderDecryptToUsmc(message: Buffer, identityStore: IdentityKeyStore): Promise<UnidentifiedSenderMessageContent>;
 export declare class Cds2Client {
     readonly _nativeHandle: Native.SgxClientState;

package/dist/index.js

@@ -27,8 +27,8 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Cds2Client = exports.sealedSenderDecryptToUsmc = exports.sealedSenderDecryptMessage = exports.sealedSenderMultiRecipientMessageForSingleRecipient = exports.sealedSenderMultiRecipientEncrypt = exports.sealedSenderEncrypt = exports.sealedSenderEncryptMessage = exports.signalDecryptPreKey = exports.signalDecrypt = exports.signalEncrypt = exports.processPreKeyBundle = exports.DecryptionErrorMessage = exports.PlaintextContent = exports.CiphertextMessage = exports.SealedSenderDecryptionResult = exports.groupDecrypt = exports.groupEncrypt = exports.SenderKeyStore = exports.SignedPreKeyStore = exports.PreKeyStore = exports.IdentityKeyStore = exports.SessionStore = exports.UnidentifiedSenderMessageContent = exports.SenderKeyMessage = exports.processSenderKeyDistributionMessage = exports.SenderKeyDistributionMessage = exports.SenderCertificate = exports.SenderKeyRecord = exports.ServerCertificate = exports.SessionRecord = exports.PreKeySignalMessage = exports.SignalMessage = exports.SignedPreKeyRecord = exports.PreKeyRecord = exports.PreKeyBundle = exports.IdentityKeyPair = exports.PrivateKey = exports.PublicKey = exports.Aes256GcmSiv = exports.Fingerprint = exports.DisplayableFingerprint = exports.ScannableFingerprint = exports.hkdf = exports.HKDF = exports.ContentHint = exports.Direction = exports.CiphertextMessageType = exports.Mp4Sanitizer = exports.io = exports.usernames = void 0;
-exports.initLogger = exports.LogLevel = exports.HsmEnclaveClient = void 0;
+exports.sealedSenderEncrypt = exports.sealedSenderEncryptMessage = exports.signalDecryptPreKey = exports.signalDecrypt = exports.signalEncrypt = exports.processPreKeyBundle = exports.DecryptionErrorMessage = exports.PlaintextContent = exports.CiphertextMessage = exports.SealedSenderDecryptionResult = exports.groupDecrypt = exports.groupEncrypt = exports.SenderKeyStore = exports.KyberPreKeyStore = exports.SignedPreKeyStore = exports.PreKeyStore = exports.IdentityKeyStore = exports.SessionStore = exports.UnidentifiedSenderMessageContent = exports.SenderKeyMessage = exports.processSenderKeyDistributionMessage = exports.SenderKeyDistributionMessage = exports.SenderCertificate = exports.SenderKeyRecord = exports.ServerCertificate = exports.SessionRecord = exports.PreKeySignalMessage = exports.SignalMessage = exports.KyberPreKeyRecord = exports.SignedPreKeyRecord = exports.PreKeyRecord = exports.PreKeyBundle = exports.IdentityKeyPair = exports.KEMKeyPair = exports.KEMSecretKey = exports.KEMPublicKey = exports.PrivateKey = exports.PublicKey = exports.Aes256GcmSiv = exports.Fingerprint = exports.DisplayableFingerprint = exports.ScannableFingerprint = exports.hkdf = exports.HKDF = exports.ContentHint = exports.Direction = exports.CiphertextMessageType = exports.Mp4Sanitizer = exports.io = exports.usernames = void 0;
+exports.initLogger = exports.LogLevel = exports.HsmEnclaveClient = exports.Cds2Client = exports.sealedSenderDecryptToUsmc = exports.sealedSenderDecryptMessage = exports.sealedSenderMultiRecipientMessageForSingleRecipient = exports.sealedSenderMultiRecipientEncrypt = void 0;
 const uuid = require("uuid");
 const Errors = require("./Errors");
 __exportStar(require("./Errors"), exports);
@@ -190,6 +190,54 @@ class PrivateKey {
     }
 }
 exports.PrivateKey = PrivateKey;
+class KEMPublicKey {
+    constructor(handle) {
+        this._nativeHandle = handle;
+    }
+    static _fromNativeHandle(handle) {
+        return new KEMPublicKey(handle);
+    }
+    static deserialize(buf) {
+        return new KEMPublicKey(Native.KyberPublicKey_Deserialize(buf));
+    }
+    serialize() {
+        return Native.KyberPublicKey_Serialize(this);
+    }
+}
+exports.KEMPublicKey = KEMPublicKey;
+class KEMSecretKey {
+    constructor(handle) {
+        this._nativeHandle = handle;
+    }
+    static _fromNativeHandle(handle) {
+        return new KEMSecretKey(handle);
+    }
+    static deserialize(buf) {
+        return new KEMSecretKey(Native.KyberSecretKey_Deserialize(buf));
+    }
+    serialize() {
+        return Native.KyberSecretKey_Serialize(this);
+    }
+}
+exports.KEMSecretKey = KEMSecretKey;
+class KEMKeyPair {
+    constructor(handle) {
+        this._nativeHandle = handle;
+    }
+    static _fromNativeHandle(handle) {
+        return new KEMKeyPair(handle);
+    }
+    static generate() {
+        return new KEMKeyPair(Native.KyberKeyPair_Generate());
+    }
+    getPublicKey() {
+        return KEMPublicKey._fromNativeHandle(Native.KyberKeyPair_GetPublicKey(this));
+    }
+    getSecretKey() {
+        return KEMSecretKey._fromNativeHandle(Native.KyberKeyPair_GetSecretKey(this));
+    }
+}
+exports.KEMKeyPair = KEMKeyPair;
 class IdentityKeyPair {
     constructor(publicKey, privateKey) {
         this.publicKey = publicKey;
@@ -215,10 +263,10 @@ class PreKeyBundle {
     constructor(handle) {
         this._nativeHandle = handle;
     }
-    static new(registration_id, device_id, prekey_id, prekey, signed_prekey_id, signed_prekey, signed_prekey_signature, identity_key) {
+    static new(registration_id, device_id, prekey_id, prekey, signed_prekey_id, signed_prekey, signed_prekey_signature, identity_key, kyber_prekey_id, kyber_prekey, kyber_prekey_signature) {
         return new PreKeyBundle(Native.PreKeyBundle_New(registration_id, device_id, prekey_id, prekey != null ? prekey : null, 
         //prekey?,
-        signed_prekey_id, signed_prekey, signed_prekey_signature, identity_key));
+        signed_prekey_id, signed_prekey, signed_prekey_signature, identity_key, kyber_prekey_id !== null && kyber_prekey_id !== void 0 ? kyber_prekey_id : null, kyber_prekey !== null && kyber_prekey !== void 0 ? kyber_prekey : null, kyber_prekey_signature !== null && kyber_prekey_signature !== void 0 ? kyber_prekey_signature : Buffer.alloc(0)));
     }
     deviceId() {
         return Native.PreKeyBundle_GetDeviceId(this);
@@ -250,6 +298,17 @@ class PreKeyBundle {
     signedPreKeySignature() {
         return Native.PreKeyBundle_GetSignedPreKeySignature(this);
     }
+    kyberPreKeyId() {
+        return Native.PreKeyBundle_GetKyberPreKeyId(this);
+    }
+    kyberPreKeyPublic() {
+        const handle = Native.PreKeyBundle_GetKyberPreKeyPublic(this);
+        return handle == null ? null : KEMPublicKey._fromNativeHandle(handle);
+    }
+    kyberPreKeySignature() {
+        const buf = Native.PreKeyBundle_GetKyberPreKeySignature(this);
+        return buf.length == 0 ? null : buf;
+    }
 }
 exports.PreKeyBundle = PreKeyBundle;
 class PreKeyRecord {
@@ -312,6 +371,42 @@ class SignedPreKeyRecord {
     }
 }
 exports.SignedPreKeyRecord = SignedPreKeyRecord;
+class KyberPreKeyRecord {
+    constructor(handle) {
+        this._nativeHandle = handle;
+    }
+    static _fromNativeHandle(nativeHandle) {
+        return new KyberPreKeyRecord(nativeHandle);
+    }
+    static new(id, timestamp, keyPair, signature) {
+        return new KyberPreKeyRecord(Native.KyberPreKeyRecord_New(id, timestamp, keyPair, signature));
+    }
+    serialize() {
+        return Native.KyberPreKeyRecord_Serialize(this);
+    }
+    static deserialize(buffer) {
+        return new KyberPreKeyRecord(Native.KyberPreKeyRecord_Deserialize(buffer));
+    }
+    id() {
+        return Native.KyberPreKeyRecord_GetId(this);
+    }
+    keyPair() {
+        return KEMKeyPair._fromNativeHandle(Native.KyberPreKeyRecord_GetKeyPair(this));
+    }
+    publicKey() {
+        return KEMPublicKey._fromNativeHandle(Native.KyberPreKeyRecord_GetPublicKey(this));
+    }
+    secretKey() {
+        return KEMSecretKey._fromNativeHandle(Native.KyberPreKeyRecord_GetSecretKey(this));
+    }
+    signature() {
+        return Native.KyberPreKeyRecord_GetSignature(this);
+    }
+    timestamp() {
+        return Native.KyberPreKeyRecord_GetTimestamp(this);
+    }
+}
+exports.KyberPreKeyRecord = KyberPreKeyRecord;
 class SignalMessage {
     constructor(handle) {
         this._nativeHandle = handle;
@@ -676,6 +771,25 @@ class SignedPreKeyStore {
     }
 }
 exports.SignedPreKeyStore = SignedPreKeyStore;
+class KyberPreKeyStore {
+    _saveKyberPreKey(kyberPreKeyId, record) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.saveKyberPreKey(kyberPreKeyId, KyberPreKeyRecord._fromNativeHandle(record));
+        });
+    }
+    _getKyberPreKey(kyberPreKeyId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const prekey = yield this.getKyberPreKey(kyberPreKeyId);
+            return prekey._nativeHandle;
+        });
+    }
+    _markKyberPreKeyUsed(kyberPreKeyId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.markKyberPreKeyUsed(kyberPreKeyId);
+        });
+    }
+}
+exports.KyberPreKeyStore = KyberPreKeyStore;
 class SenderKeyStore {
     _saveSenderKey(sender, distributionId, record) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -817,8 +931,8 @@ function signalDecrypt(message, address, sessionStore, identityStore) {
     return Native.SessionCipher_DecryptSignalMessage(message, address, sessionStore, identityStore, null);
 }
 exports.signalDecrypt = signalDecrypt;
-function signalDecryptPreKey(message, address, sessionStore, identityStore, prekeyStore, signedPrekeyStore) {
-    return Native.SessionCipher_DecryptPreKeySignalMessage(message, address, sessionStore, identityStore, prekeyStore, signedPrekeyStore, null);
+function signalDecryptPreKey(message, address, sessionStore, identityStore, prekeyStore, signedPrekeyStore, kyberPrekeyStore) {
+    return Native.SessionCipher_DecryptPreKeySignalMessage(message, address, sessionStore, identityStore, prekeyStore, signedPrekeyStore, kyberPrekeyStore, null);
 }
 exports.signalDecryptPreKey = signalDecryptPreKey;
 function sealedSenderEncryptMessage(message, address, senderCert, sessionStore, identityStore) {
@@ -845,9 +959,9 @@ function sealedSenderMultiRecipientMessageForSingleRecipient(message) {
     return Native.SealedSender_MultiRecipientMessageForSingleRecipient(message);
 }
 exports.sealedSenderMultiRecipientMessageForSingleRecipient = sealedSenderMultiRecipientMessageForSingleRecipient;
-function sealedSenderDecryptMessage(message, trustRoot, timestamp, localE164, localUuid, localDeviceId, sessionStore, identityStore, prekeyStore, signedPrekeyStore) {
+function sealedSenderDecryptMessage(message, trustRoot, timestamp, localE164, localUuid, localDeviceId, sessionStore, identityStore, prekeyStore, signedPrekeyStore, kyberPrekeyStore) {
     return __awaiter(this, void 0, void 0, function* () {
-        const ssdr = yield Native.SealedSender_DecryptMessage(message, trustRoot, timestamp, localE164, localUuid, localDeviceId, sessionStore, identityStore, prekeyStore, signedPrekeyStore);
+        const ssdr = yield Native.SealedSender_DecryptMessage(message, trustRoot, timestamp, localE164, localUuid, localDeviceId, sessionStore, identityStore, prekeyStore, signedPrekeyStore, kyberPrekeyStore);
         return SealedSenderDecryptionResult._fromNativeHandle(ssdr);
     });
 }

package/dist/usernames.d.ts

@@ -3,4 +3,11 @@ export declare function generateCandidates(nickname: string, minNicknameLength:
 export declare function hash(username: string): Buffer;
 export declare function generateProof(username: string): Buffer;
 export declare function generateProofWithRandom(username: string, random: Buffer): Buffer;
+export declare class UsernameLink {
+    readonly entropy: Buffer;
+    readonly encryptedUsername: Buffer;
+    constructor(entropy: Buffer, encryptedUsername: Buffer);
+    decryptUsername(): string;
+}
+export declare function createUsernameLink(username: string): UsernameLink;
 export declare function verifyProof(proof: Buffer, hash: Buffer): void;

package/dist/usernames.js

@@ -4,7 +4,7 @@
 // SPDX-License-Identifier: AGPL-3.0-only
 //
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyProof = exports.generateProofWithRandom = exports.generateProof = exports.hash = exports.generateCandidates = void 0;
+exports.verifyProof = exports.createUsernameLink = exports.UsernameLink = exports.generateProofWithRandom = exports.generateProof = exports.hash = exports.generateCandidates = void 0;
 /* eslint @typescript-eslint/no-shadow: ["error", { "allow": ["hash"] }] */
 const crypto_1 = require("crypto");
 const Constants_1 = require("./zkgroup/internal/Constants");
@@ -26,6 +26,23 @@ function generateProofWithRandom(username, random) {
     return Native.Username_Proof(username, random);
 }
 exports.generateProofWithRandom = generateProofWithRandom;
+class UsernameLink {
+    constructor(entropy, encryptedUsername) {
+        this.entropy = entropy;
+        this.encryptedUsername = encryptedUsername;
+    }
+    decryptUsername() {
+        return Native.UsernameLink_DecryptUsername(this.entropy, this.encryptedUsername);
+    }
+}
+exports.UsernameLink = UsernameLink;
+function createUsernameLink(username) {
+    const usernameLinkData = Native.UsernameLink_Create(username);
+    const entropy = usernameLinkData.slice(0, 32);
+    const encryptedUsername = usernameLinkData.slice(32);
+    return new UsernameLink(entropy, encryptedUsername);
+}
+exports.createUsernameLink = createUsernameLink;
 // Only for testing. Will throw on failure.
 function verifyProof(proof, hash) {
     Native.Username_Verify(proof, hash);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signalapp/libsignal-client",
-  "version": "0.26.0",
+  "version": "0.28.0",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -32,6 +32,7 @@
     "@types/bindings": "^1.3.0",
     "@types/chai": "^4.3.1",
     "@types/chai-as-promised": "^7.1.3",
+    "@types/chance": "^1.1.3",
     "@types/mocha": "^5.2.7",
     "@types/node": "16.18.3",
     "@types/uuid": "^8.3.0",
@@ -39,6 +40,7 @@
     "@typescript-eslint/parser": "^5.47.0",
     "chai": "^4.2.0",
     "chai-as-promised": "^7.1.1",
+    "chance": "^1.1.11",
     "eslint": "^8.30.0",
     "eslint-config-prettier": "^8.5.0",
     "eslint-plugin-header": "^3.1.0",