@smartledger/keys 1.4.0 → 1.5.1

package/dist/cjs/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAkBpD;AAED;;GAEG;;;;AACH,wBAEE"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAoBpD;AAED;;GAEG;;;;AACH,wBAEE"}

package/dist/cjs/browser.js

@@ -33,10 +33,12 @@ Object.defineProperty(exports, "InMemoryKeyStorage", { enumerable: true, get: fu
 async function createKeySDK() {
     const storage = new crypto_1.InMemoryKeyStorage();
     const keyRegistry = new crypto_1.KeyRegistry(storage);
-    // Initialize suite registry with both ECDSA and ML-DSA
+    // Initialize suite registry with ECDSA and all ML-DSA variants
     const suiteRegistry = new crypto_1.SignatureSuiteRegistry();
     suiteRegistry.register(new crypto_1.BsvEcdsaSuite());
-    suiteRegistry.register(new crypto_1.MlDsaSuite());
+    suiteRegistry.register(new crypto_1.MlDsa44Suite()); // Level 2 (AES-128 equivalent)
+    suiteRegistry.register(new crypto_1.MlDsa65Suite()); // Level 3 (AES-192 equivalent) - also 'ml-dsa-65' default
+    suiteRegistry.register(new crypto_1.MlDsa87Suite()); // Level 5 (AES-256 equivalent)
     const sdk = new sdk_js_1.DefaultKeySDK({
         keyRegistry,
         suiteRegistry,

package/dist/cjs/browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;AAoBH,oCAkBC;AApCD,qCAAyC;AACzC,gDAM6B;AAG7B,wCAAwC;AACxC,6CAA2B;AAC3B,8CAAyD;AAAhD,4GAAA,kBAAkB,OAAA;AAE3B;;;GAGG;AACI,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,IAAI,2BAAkB,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,oBAAW,CAAC,OAAO,CAAC,CAAC;IAE7C,uDAAuD;IACvD,MAAM,aAAa,GAAG,IAAI,+BAAsB,EAAE,CAAC;IACnD,aAAa,CAAC,QAAQ,CAAC,IAAI,sBAAa,EAAE,CAAC,CAAC;IAC5C,aAAa,CAAC,QAAQ,CAAC,IAAI,mBAAU,EAAE,CAAC,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,sBAAa,CAAC;QAC5B,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IAEH,2CAA2C;IAC3C,kEAAkE;IAElE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,kBAAe;IACb,YAAY;CACb,CAAC;AAEF,8BAA8B;AAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IACjC,MAAc,CAAC,SAAS,GAAG;QAC1B,YAAY;KACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;AAsBH,oCAoBC;AAxCD,qCAAyC;AACzC,gDAQ6B;AAG7B,wCAAwC;AACxC,6CAA2B;AAC3B,8CAAyD;AAAhD,4GAAA,kBAAkB,OAAA;AAE3B;;;GAGG;AACI,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,IAAI,2BAAkB,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,oBAAW,CAAC,OAAO,CAAC,CAAC;IAE7C,+DAA+D;IAC/D,MAAM,aAAa,GAAG,IAAI,+BAAsB,EAAE,CAAC;IACnD,aAAa,CAAC,QAAQ,CAAC,IAAI,sBAAa,EAAE,CAAC,CAAC;IAC5C,aAAa,CAAC,QAAQ,CAAC,IAAI,qBAAY,EAAE,CAAC,CAAC,CAAC,+BAA+B;IAC3E,aAAa,CAAC,QAAQ,CAAC,IAAI,qBAAY,EAAE,CAAC,CAAC,CAAC,0DAA0D;IACtG,aAAa,CAAC,QAAQ,CAAC,IAAI,qBAAY,EAAE,CAAC,CAAC,CAAC,+BAA+B;IAE3E,MAAM,GAAG,GAAG,IAAI,sBAAa,CAAC;QAC5B,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IAEH,2CAA2C;IAC3C,kEAAkE;IAElE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,kBAAe;IACb,YAAY;CACb,CAAC;AAEF,8BAA8B;AAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IACjC,MAAc,CAAC,SAAS,GAAG;QAC1B,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/esm/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAkBpD;AAED;;GAEG;;;;AACH,wBAEE"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAoBpD;AAED;;GAEG;;;;AACH,wBAEE"}

package/dist/esm/browser.js

@@ -3,7 +3,7 @@
  * Includes WASM initialization and browser-compatible exports
  */
 import { DefaultKeySDK } from './sdk.js';
-import { InMemoryKeyStorage, KeyRegistry, SignatureSuiteRegistry, BsvEcdsaSuite, MlDsaSuite, } from '@smartledger/crypto';
+import { InMemoryKeyStorage, KeyRegistry, SignatureSuiteRegistry, BsvEcdsaSuite, MlDsa44Suite, MlDsa65Suite, MlDsa87Suite, } from '@smartledger/crypto';
 // Re-export all types for browser usage
 export * from './types.js';
 export { InMemoryKeyStorage } from '@smartledger/crypto';
@@ -14,10 +14,12 @@ export { InMemoryKeyStorage } from '@smartledger/crypto';
 export async function createKeySDK() {
     const storage = new InMemoryKeyStorage();
     const keyRegistry = new KeyRegistry(storage);
-    // Initialize suite registry with both ECDSA and ML-DSA
+    // Initialize suite registry with ECDSA and all ML-DSA variants
     const suiteRegistry = new SignatureSuiteRegistry();
     suiteRegistry.register(new BsvEcdsaSuite());
-    suiteRegistry.register(new MlDsaSuite());
+    suiteRegistry.register(new MlDsa44Suite()); // Level 2 (AES-128 equivalent)
+    suiteRegistry.register(new MlDsa65Suite()); // Level 3 (AES-192 equivalent) - also 'ml-dsa-65' default
+    suiteRegistry.register(new MlDsa87Suite()); // Level 5 (AES-256 equivalent)
     const sdk = new DefaultKeySDK({
         keyRegistry,
         suiteRegistry,

package/dist/esm/browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,UAAU,GACX,MAAM,qBAAqB,CAAC;AAG7B,wCAAwC;AACxC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IAE7C,uDAAuD;IACvD,MAAM,aAAa,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACnD,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;IAC5C,aAAa,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC;QAC5B,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IAEH,2CAA2C;IAC3C,kEAAkE;IAElE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,eAAe;IACb,YAAY;CACb,CAAC;AAEF,8BAA8B;AAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IACjC,MAAc,CAAC,SAAS,GAAG;QAC1B,YAAY;KACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,GACb,MAAM,qBAAqB,CAAC;AAG7B,wCAAwC;AACxC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IAE7C,+DAA+D;IAC/D,MAAM,aAAa,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACnD,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;IAC5C,aAAa,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,+BAA+B;IAC3E,aAAa,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,0DAA0D;IACtG,aAAa,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,+BAA+B;IAE3E,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC;QAC5B,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IAEH,2CAA2C;IAC3C,kEAAkE;IAElE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,eAAe;IACb,YAAY;CACb,CAAC;AAEF,8BAA8B;AAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IACjC,MAAc,CAAC,SAAS,GAAG;QAC1B,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/lumen-keys.js

@@ -10313,13 +10313,16 @@ zoo`.split("\n");
     }
     return dilithiumLib;
   }
-  var MlDsa87Suite = class {
+  var ML_DSA_SIZES = {
+    "ml-dsa-44": { publicKey: 1312, privateKey: 2560, signature: 2420 },
+    "ml-dsa-65": { publicKey: 1952, privateKey: 4032, signature: 3309 },
+    "ml-dsa-87": { publicKey: 2592, privateKey: 4864, signature: 4627 }
+  };
+  var BaseMlDsaSuite = class {
     constructor() {
-      __publicField(this, "suiteId", "ml-dsa-87");
       __publicField(this, "version", "1.0.0");
       __publicField(this, "capabilities", {});
     }
-    // No capabilities yet, reserved for future (custom KDF, etc.)
     async generateKeypair() {
       try {
         const dilithium2 = await getDilithium();
@@ -10329,7 +10332,7 @@ zoo`.split("\n");
           privateKey: new Uint8Array(keypair.privateKey)
         };
       } catch (error) {
-        throw new Error(`ML-DSA-87 key generation failed: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`${this.suiteId} key generation failed: ${error instanceof Error ? error.message : String(error)}`);
       }
     }
     async sign(privateKey, message) {
@@ -10338,7 +10341,7 @@ zoo`.split("\n");
         const signature = await dilithium2.signDetached(Buffer.from(message), Buffer.from(privateKey));
         return new Uint8Array(signature);
       } catch (error) {
-        throw new Error(`ML-DSA-87 signing failed: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`${this.suiteId} signing failed: ${error instanceof Error ? error.message : String(error)}`);
       }
     }
     async verify(publicKey, message, signature) {
@@ -10354,8 +10357,8 @@ zoo`.split("\n");
     }
     importPublicKey(encoded) {
       const bytes = hexToBytes(encoded);
-      if (bytes.length !== 2592) {
-        throw new Error(`ML-DSA-87 public key must be 2592 bytes, got ${bytes.length}`);
+      if (bytes.length !== this.sizes.publicKey) {
+        throw new Error(`${this.suiteId} public key must be ${this.sizes.publicKey} bytes, got ${bytes.length}`);
       }
       return bytes;
     }
@@ -10364,38 +10367,37 @@ zoo`.split("\n");
     }
     importPrivateKey(encoded) {
       const bytes = hexToBytes(encoded);
-      if (bytes.length !== 4864) {
-        throw new Error(`ML-DSA-87 private key must be 4864 bytes, got ${bytes.length}`);
+      if (bytes.length !== this.sizes.privateKey) {
+        throw new Error(`${this.suiteId} private key must be ${this.sizes.privateKey} bytes, got ${bytes.length}`);
       }
       return bytes;
     }
   };
-  var MlDsaSuite = class {
+  var MlDsa44Suite = class extends BaseMlDsaSuite {
     constructor() {
-      __publicField(this, "suiteId", "ml-dsa-65");
-      __publicField(this, "version", "1.0.0");
-      __publicField(this, "impl", new MlDsa87Suite());
-    }
-    async generateKeypair() {
-      return this.impl.generateKeypair();
+      super(...arguments);
+      __publicField(this, "suiteId", "ml-dsa-44");
     }
-    async sign(privateKey, message) {
-      return this.impl.sign(privateKey, message);
+    get sizes() {
+      return ML_DSA_SIZES["ml-dsa-44"];
     }
-    async verify(publicKey, message, signature) {
-      return this.impl.verify(publicKey, message, signature);
-    }
-    exportPublicKey(pub) {
-      return this.impl.exportPublicKey(pub);
+  };
+  var MlDsa65Suite = class extends BaseMlDsaSuite {
+    constructor() {
+      super(...arguments);
+      __publicField(this, "suiteId", "ml-dsa-65");
     }
-    importPublicKey(encoded) {
-      return this.impl.importPublicKey(encoded);
+    get sizes() {
+      return ML_DSA_SIZES["ml-dsa-65"];
     }
-    exportPrivateKey(priv) {
-      return this.impl.exportPrivateKey(priv);
+  };
+  var MlDsa87Suite = class extends BaseMlDsaSuite {
+    constructor() {
+      super(...arguments);
+      __publicField(this, "suiteId", "ml-dsa-87");
     }
-    importPrivateKey(encoded) {
-      return this.impl.importPrivateKey(encoded);
+    get sizes() {
+      return ML_DSA_SIZES["ml-dsa-87"];
     }
   };
 
@@ -10787,7 +10789,9 @@ Consider using one of these suites or remove the derivationContext option.` : `N
     const keyRegistry = new KeyRegistry(storage);
     const suiteRegistry = new SignatureSuiteRegistry();
     suiteRegistry.register(new BsvEcdsaSuite());
-    suiteRegistry.register(new MlDsaSuite());
+    suiteRegistry.register(new MlDsa44Suite());
+    suiteRegistry.register(new MlDsa65Suite());
+    suiteRegistry.register(new MlDsa87Suite());
     const sdk = new DefaultKeySDK({
       keyRegistry,
       suiteRegistry