@stoex/wallet-crypto 0.1.0

package/dist/index.d.mts

@@ -0,0 +1,37 @@
+/**
+ * AES-256-GCM 암호화
+ * @param plaintext - 암호화할 평문 (개인키 등)
+ * @param keyHex   - 32바이트 마스터 키 (64자 hex 문자열)
+ * @returns 저장 가능한 암호화 문자열 "iv:authTag:encrypted"
+ */
+declare function encryptKey(plaintext: string, keyHex: string): string;
+/**
+ * AES-256-GCM 복호화
+ * @param stored  - encryptKey()의 반환값 "iv:authTag:encrypted"
+ * @param keyHex  - 32바이트 마스터 키 (64자 hex)
+ * @returns 복호화된 평문
+ */
+declare function decryptKey(stored: string, keyHex: string): string;
+/**
+ * 랜덤 32바이트 마스터 키 생성 (hex 문자열)
+ * 최초 설정 시 1회 생성 후 환경변수에 저장.
+ */
+declare function generateMasterKey(): string;
+/**
+ * EVM 지갑 생성
+ * @returns privateKey (0x...), address (0x...)
+ */
+declare function generateWallet(): {
+    privateKey: `0x${string}`;
+    address: `0x${string}`;
+};
+/**
+ * 지갑 생성 + 개인키 즉시 암호화
+ * DB 저장용 원스텝 헬퍼
+ */
+declare function generateAndEncryptWallet(keyHex: string): {
+    address: `0x${string}`;
+    privkey_enc: string;
+};
+
+export { decryptKey, encryptKey, generateAndEncryptWallet, generateMasterKey, generateWallet };

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * AES-256-GCM 암호화
+ * @param plaintext - 암호화할 평문 (개인키 등)
+ * @param keyHex   - 32바이트 마스터 키 (64자 hex 문자열)
+ * @returns 저장 가능한 암호화 문자열 "iv:authTag:encrypted"
+ */
+declare function encryptKey(plaintext: string, keyHex: string): string;
+/**
+ * AES-256-GCM 복호화
+ * @param stored  - encryptKey()의 반환값 "iv:authTag:encrypted"
+ * @param keyHex  - 32바이트 마스터 키 (64자 hex)
+ * @returns 복호화된 평문
+ */
+declare function decryptKey(stored: string, keyHex: string): string;
+/**
+ * 랜덤 32바이트 마스터 키 생성 (hex 문자열)
+ * 최초 설정 시 1회 생성 후 환경변수에 저장.
+ */
+declare function generateMasterKey(): string;
+/**
+ * EVM 지갑 생성
+ * @returns privateKey (0x...), address (0x...)
+ */
+declare function generateWallet(): {
+    privateKey: `0x${string}`;
+    address: `0x${string}`;
+};
+/**
+ * 지갑 생성 + 개인키 즉시 암호화
+ * DB 저장용 원스텝 헬퍼
+ */
+declare function generateAndEncryptWallet(keyHex: string): {
+    address: `0x${string}`;
+    privkey_enc: string;
+};
+
+export { decryptKey, encryptKey, generateAndEncryptWallet, generateMasterKey, generateWallet };

package/dist/index.js

@@ -0,0 +1,87 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  decryptKey: () => decryptKey,
+  encryptKey: () => encryptKey,
+  generateAndEncryptWallet: () => generateAndEncryptWallet,
+  generateMasterKey: () => generateMasterKey,
+  generateWallet: () => generateWallet
+});
+module.exports = __toCommonJS(index_exports);
+var import_crypto = require("crypto");
+var import_accounts = require("viem/accounts");
+var ALGO = "aes-256-gcm";
+function encryptKey(plaintext, keyHex) {
+  if (!keyHex || keyHex.length < 64) {
+    throw new Error("keyHex\uB294 32\uBC14\uC774\uD2B8(64\uC790 hex)\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4");
+  }
+  const key = Buffer.from(keyHex, "hex");
+  const iv = (0, import_crypto.randomBytes)(12);
+  const cipher = (0, import_crypto.createCipheriv)(ALGO, key, iv);
+  const encrypted = Buffer.concat([
+    cipher.update(plaintext, "utf8"),
+    cipher.final()
+  ]);
+  const authTag = cipher.getAuthTag();
+  return [
+    iv.toString("hex"),
+    authTag.toString("hex"),
+    encrypted.toString("hex")
+  ].join(":");
+}
+function decryptKey(stored, keyHex) {
+  if (!keyHex || keyHex.length < 64) {
+    throw new Error("keyHex\uB294 32\uBC14\uC774\uD2B8(64\uC790 hex)\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4");
+  }
+  const [ivHex, authTagHex, encHex] = stored.split(":");
+  if (!ivHex || !authTagHex || !encHex) {
+    throw new Error("\uC798\uBABB\uB41C \uC554\uD638\uD654 \uD615\uC2DD \u2014 encryptKey() \uCD9C\uB825\uAC12\uB9CC \uC0AC\uC6A9\uD558\uC138\uC694");
+  }
+  const key = Buffer.from(keyHex, "hex");
+  const decipher = (0, import_crypto.createDecipheriv)(ALGO, key, Buffer.from(ivHex, "hex"));
+  decipher.setAuthTag(Buffer.from(authTagHex, "hex"));
+  return Buffer.concat([
+    decipher.update(Buffer.from(encHex, "hex")),
+    decipher.final()
+  ]).toString("utf8");
+}
+function generateMasterKey() {
+  return (0, import_crypto.randomBytes)(32).toString("hex");
+}
+function generateWallet() {
+  const privateKey = (0, import_accounts.generatePrivateKey)();
+  const address = (0, import_accounts.privateKeyToAddress)(privateKey);
+  return { privateKey, address };
+}
+function generateAndEncryptWallet(keyHex) {
+  const { privateKey, address } = generateWallet();
+  const privkey_enc = encryptKey(privateKey, keyHex);
+  return { address, privkey_enc };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  decryptKey,
+  encryptKey,
+  generateAndEncryptWallet,
+  generateMasterKey,
+  generateWallet
+});

package/dist/index.mjs

@@ -0,0 +1,58 @@
+// src/index.ts
+import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
+import { generatePrivateKey, privateKeyToAddress } from "viem/accounts";
+var ALGO = "aes-256-gcm";
+function encryptKey(plaintext, keyHex) {
+  if (!keyHex || keyHex.length < 64) {
+    throw new Error("keyHex\uB294 32\uBC14\uC774\uD2B8(64\uC790 hex)\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4");
+  }
+  const key = Buffer.from(keyHex, "hex");
+  const iv = randomBytes(12);
+  const cipher = createCipheriv(ALGO, key, iv);
+  const encrypted = Buffer.concat([
+    cipher.update(plaintext, "utf8"),
+    cipher.final()
+  ]);
+  const authTag = cipher.getAuthTag();
+  return [
+    iv.toString("hex"),
+    authTag.toString("hex"),
+    encrypted.toString("hex")
+  ].join(":");
+}
+function decryptKey(stored, keyHex) {
+  if (!keyHex || keyHex.length < 64) {
+    throw new Error("keyHex\uB294 32\uBC14\uC774\uD2B8(64\uC790 hex)\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4");
+  }
+  const [ivHex, authTagHex, encHex] = stored.split(":");
+  if (!ivHex || !authTagHex || !encHex) {
+    throw new Error("\uC798\uBABB\uB41C \uC554\uD638\uD654 \uD615\uC2DD \u2014 encryptKey() \uCD9C\uB825\uAC12\uB9CC \uC0AC\uC6A9\uD558\uC138\uC694");
+  }
+  const key = Buffer.from(keyHex, "hex");
+  const decipher = createDecipheriv(ALGO, key, Buffer.from(ivHex, "hex"));
+  decipher.setAuthTag(Buffer.from(authTagHex, "hex"));
+  return Buffer.concat([
+    decipher.update(Buffer.from(encHex, "hex")),
+    decipher.final()
+  ]).toString("utf8");
+}
+function generateMasterKey() {
+  return randomBytes(32).toString("hex");
+}
+function generateWallet() {
+  const privateKey = generatePrivateKey();
+  const address = privateKeyToAddress(privateKey);
+  return { privateKey, address };
+}
+function generateAndEncryptWallet(keyHex) {
+  const { privateKey, address } = generateWallet();
+  const privkey_enc = encryptKey(privateKey, keyHex);
+  return { address, privkey_enc };
+}
+export {
+  decryptKey,
+  encryptKey,
+  generateAndEncryptWallet,
+  generateMasterKey,
+  generateWallet
+};

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@stoex/wallet-crypto",
+  "version": "0.1.0",
+  "description": "AES-256-GCM private key encryption and ETH wallet generation for custody services",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": ["dist", "src"],
+  "scripts": {
+    "build": "tsup src/index.ts --format esm,cjs --dts --clean --tsconfig tsconfig.json",
+    "dev": "tsup src/index.ts --format esm,cjs --dts --watch --tsconfig tsconfig.json"
+  },
+  "keywords": ["wallet", "custody", "aes-gcm", "encryption", "ethereum", "evm"],
+  "license": "MIT",
+  "peerDependencies": {
+    "viem": ">=2"
+  },
+  "devDependencies": {
+    "tsup": "^8",
+    "typescript": "^5"
+  }
+}

package/src/index.ts

@@ -0,0 +1,92 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
+import { generatePrivateKey, privateKeyToAddress } from "viem/accounts";
+
+const ALGO = "aes-256-gcm";
+
+// 저장 형식: iv(24자 hex) + ":" + authTag(32자 hex) + ":" + encrypted(hex)
+
+/**
+ * AES-256-GCM 암호화
+ * @param plaintext - 암호화할 평문 (개인키 등)
+ * @param keyHex   - 32바이트 마스터 키 (64자 hex 문자열)
+ * @returns 저장 가능한 암호화 문자열 "iv:authTag:encrypted"
+ */
+export function encryptKey(plaintext: string, keyHex: string): string {
+  if (!keyHex || keyHex.length < 64) {
+    throw new Error("keyHex는 32바이트(64자 hex)가 필요합니다");
+  }
+  const key = Buffer.from(keyHex, "hex");
+  const iv  = randomBytes(12); // GCM 표준 96-bit IV
+
+  const cipher = createCipheriv(ALGO, key, iv);
+  const encrypted = Buffer.concat([
+    cipher.update(plaintext, "utf8"),
+    cipher.final(),
+  ]);
+  const authTag = cipher.getAuthTag();
+
+  return [
+    iv.toString("hex"),
+    authTag.toString("hex"),
+    encrypted.toString("hex"),
+  ].join(":");
+}
+
+/**
+ * AES-256-GCM 복호화
+ * @param stored  - encryptKey()의 반환값 "iv:authTag:encrypted"
+ * @param keyHex  - 32바이트 마스터 키 (64자 hex)
+ * @returns 복호화된 평문
+ */
+export function decryptKey(stored: string, keyHex: string): string {
+  if (!keyHex || keyHex.length < 64) {
+    throw new Error("keyHex는 32바이트(64자 hex)가 필요합니다");
+  }
+  const [ivHex, authTagHex, encHex] = stored.split(":");
+  if (!ivHex || !authTagHex || !encHex) {
+    throw new Error("잘못된 암호화 형식 — encryptKey() 출력값만 사용하세요");
+  }
+
+  const key      = Buffer.from(keyHex, "hex");
+  const decipher = createDecipheriv(ALGO, key, Buffer.from(ivHex, "hex"));
+  decipher.setAuthTag(Buffer.from(authTagHex, "hex"));
+
+  return Buffer.concat([
+    decipher.update(Buffer.from(encHex, "hex")),
+    decipher.final(),
+  ]).toString("utf8");
+}
+
+/**
+ * 랜덤 32바이트 마스터 키 생성 (hex 문자열)
+ * 최초 설정 시 1회 생성 후 환경변수에 저장.
+ */
+export function generateMasterKey(): string {
+  return randomBytes(32).toString("hex");
+}
+
+/**
+ * EVM 지갑 생성
+ * @returns privateKey (0x...), address (0x...)
+ */
+export function generateWallet(): {
+  privateKey: `0x${string}`;
+  address:    `0x${string}`;
+} {
+  const privateKey = generatePrivateKey();
+  const address    = privateKeyToAddress(privateKey);
+  return { privateKey, address };
+}
+
+/**
+ * 지갑 생성 + 개인키 즉시 암호화
+ * DB 저장용 원스텝 헬퍼
+ */
+export function generateAndEncryptWallet(keyHex: string): {
+  address:     `0x${string}`;
+  privkey_enc: string;
+} {
+  const { privateKey, address } = generateWallet();
+  const privkey_enc = encryptKey(privateKey, keyHex);
+  return { address, privkey_enc };
+}