@suveren/gateway 0.39.0 → 0.41.0

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/cipherSuiteNative.js

@@ -0,0 +1,340 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "@hpke/common", "./exporterContext.js", "./recipientContext.js", "./senderContext.js"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.CipherSuiteNative = void 0;
+    const common_1 = require("@hpke/common");
+    const exporterContext_js_1 = require("./exporterContext.js");
+    const recipientContext_js_1 = require("./recipientContext.js");
+    const senderContext_js_1 = require("./senderContext.js");
+    // b"base_nonce"
+    // deno-fmt-ignore
+    const LABEL_BASE_NONCE = new Uint8Array([
+        98, 97, 115, 101, 95, 110, 111, 110, 99, 101,
+    ]);
+    // b"exp"
+    const LABEL_EXP = new Uint8Array([101, 120, 112]);
+    // b"info_hash"
+    // deno-fmt-ignore
+    const LABEL_INFO_HASH = new Uint8Array([
+        105, 110, 102, 111, 95, 104, 97, 115, 104,
+    ]);
+    // b"key"
+    const LABEL_KEY = new Uint8Array([107, 101, 121]);
+    // b"psk_id_hash"
+    // deno-fmt-ignore
+    const LABEL_PSK_ID_HASH = new Uint8Array([
+        112, 115, 107, 95, 105, 100, 95, 104, 97, 115, 104,
+    ]);
+    // b"secret"
+    const LABEL_SECRET = new Uint8Array([115, 101, 99, 114, 101, 116]);
+    // b"HPKE"
+    // deno-fmt-ignore
+    const SUITE_ID_HEADER_HPKE = new Uint8Array([
+        72, 80, 75, 69, 0, 0, 0, 0, 0, 0,
+    ]);
+    /**
+     * The Hybrid Public Key Encryption (HPKE) ciphersuite,
+     * which is implemented using only
+     * {@link https://www.w3.org/TR/WebCryptoAPI/ | Web Cryptography API}.
+     *
+     * This is the super class of {@link CipherSuite} and the same as
+     * {@link https://jsr.io/@hpke/core/doc/~/CipherSuite | @hpke/core#CipherSuite} as follows:
+     * which supports only the ciphersuites that can be implemented on the native
+     * {@link https://www.w3.org/TR/WebCryptoAPI/ | Web Cryptography API}.
+     * Therefore, the following cryptographic algorithms are not supported for now:
+     *   - DHKEM(X25519, HKDF-SHA256)
+     *   - DHKEM(X448, HKDF-SHA512)
+     *   - ChaCha20Poly1305
+     *
+     * In addtion, the HKDF functions contained in this class can only derive
+     * keys of the same length as the `hashSize`.
+     *
+     * If you want to use the unsupported cryptographic algorithms
+     * above or derive keys longer than the `hashSize`,
+     * please use {@link CipherSuite}.
+     *
+     * This class provides following functions:
+     *
+     * - Creates encryption contexts both for senders and recipients.
+     *   - {@link createSenderContext}
+     *   - {@link createRecipientContext}
+     * - Provides single-shot encryption API.
+     *   - {@link seal}
+     *   - {@link open}
+     *
+     * The calling of the constructor of this class is the starting
+     * point for HPKE operations for both senders and recipients.
+     *
+     * @example Use only ciphersuites supported by Web Cryptography API.
+     *
+     * ```ts
+     * import {
+     *   Aes128Gcm,
+     *   DhkemP256HkdfSha256,
+     *   HkdfSha256,
+     *   CipherSuite,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP256HkdfSha256(),
+     *   kdf: new HkdfSha256(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     *
+     * @example Use a ciphersuite which is currently not supported by Web Cryptography API.
+     *
+     * ```ts
+     * import { Aes128Gcm, HkdfSha256, CipherSuite } from "@hpke/core";
+     * // Use an extension module.
+     * import { DhkemX25519HkdfSha256 } from "@hpke/dhkem-x25519";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemX25519HkdfSha256(),
+     *   kdf: new HkdfSha256(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     */
+    class CipherSuiteNative extends common_1.NativeAlgorithm {
+        /**
+         * @param params A set of parameters for building a cipher suite.
+         *
+         * If the error occurred, throws {@link InvalidParamError}.
+         *
+         * @throws {@link InvalidParamError}
+         */
+        constructor(params) {
+            super();
+            Object.defineProperty(this, "_kem", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            Object.defineProperty(this, "_kdf", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            Object.defineProperty(this, "_aead", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            Object.defineProperty(this, "_suiteId", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            // KEM
+            if (typeof params.kem === "number") {
+                throw new common_1.InvalidParamError("KemId cannot be used");
+            }
+            this._kem = params.kem;
+            // KDF
+            if (typeof params.kdf === "number") {
+                throw new common_1.InvalidParamError("KdfId cannot be used");
+            }
+            this._kdf = params.kdf;
+            // AEAD
+            if (typeof params.aead === "number") {
+                throw new common_1.InvalidParamError("AeadId cannot be used");
+            }
+            this._aead = params.aead;
+            this._suiteId = new Uint8Array(SUITE_ID_HEADER_HPKE);
+            this._suiteId.set((0, common_1.i2Osp)(this._kem.id, 2), 4);
+            this._suiteId.set((0, common_1.i2Osp)(this._kdf.id, 2), 6);
+            this._suiteId.set((0, common_1.i2Osp)(this._aead.id, 2), 8);
+            this._kdf.init(this._suiteId);
+        }
+        /**
+         * Gets the KEM context of the ciphersuite.
+         */
+        get kem() {
+            return this._kem;
+        }
+        /**
+         * Gets the KDF context of the ciphersuite.
+         */
+        get kdf() {
+            return this._kdf;
+        }
+        /**
+         * Gets the AEAD context of the ciphersuite.
+         */
+        get aead() {
+            return this._aead;
+        }
+        /**
+         * Creates an encryption context for a sender.
+         *
+         * If the error occurred, throws {@link DecapError} | {@link ValidationError}.
+         *
+         * @param params A set of parameters for the sender encryption context.
+         * @returns A sender encryption context.
+         * @throws {@link EncapError}, {@link ValidationError}
+         */
+        async createSenderContext(params) {
+            this._validateInputLength(params);
+            await this._setup();
+            const dh = await this._kem.encap(params);
+            let mode;
+            if (params.psk !== undefined) {
+                mode = params.senderKey !== undefined ? common_1.Mode.AuthPsk : common_1.Mode.Psk;
+            }
+            else {
+                mode = params.senderKey !== undefined ? common_1.Mode.Auth : common_1.Mode.Base;
+            }
+            return await this._keyScheduleS(mode, dh.sharedSecret, dh.enc, params);
+        }
+        /**
+         * Creates an encryption context for a recipient.
+         *
+         * If the error occurred, throws {@link DecapError}
+         * | {@link DeserializeError} | {@link ValidationError}.
+         *
+         * @param params A set of parameters for the recipient encryption context.
+         * @returns A recipient encryption context.
+         * @throws {@link DecapError}, {@link DeserializeError}, {@link ValidationError}
+         */
+        async createRecipientContext(params) {
+            this._validateInputLength(params);
+            await this._setup();
+            const sharedSecret = await this._kem.decap(params);
+            let mode;
+            if (params.psk !== undefined) {
+                mode = params.senderPublicKey !== undefined ? common_1.Mode.AuthPsk : common_1.Mode.Psk;
+            }
+            else {
+                mode = params.senderPublicKey !== undefined ? common_1.Mode.Auth : common_1.Mode.Base;
+            }
+            return await this._keyScheduleR(mode, sharedSecret, params);
+        }
+        /**
+         * Encrypts a message to a recipient.
+         *
+         * If the error occurred, throws `EncapError` | `MessageLimitReachedError` | `SealError` | `ValidationError`.
+         *
+         * @param params A set of parameters for building a sender encryption context.
+         * @param pt A plain text as bytes to be encrypted.
+         * @param aad Additional authenticated data as bytes fed by an application.
+         * @returns A cipher text and an encapsulated key as bytes.
+         * @throws {@link EncapError}, {@link MessageLimitReachedError}, {@link SealError}, {@link ValidationError}
+         */
+        async seal(params, pt, aad = common_1.EMPTY.buffer) {
+            const ctx = await this.createSenderContext(params);
+            return {
+                ct: await ctx.seal(pt, aad),
+                enc: ctx.enc,
+            };
+        }
+        /**
+         * Decrypts a message from a sender.
+         *
+         * If the error occurred, throws `DecapError` | `DeserializeError` | `OpenError` | `ValidationError`.
+         *
+         * @param params A set of parameters for building a recipient encryption context.
+         * @param ct An encrypted text as bytes to be decrypted.
+         * @param aad Additional authenticated data as bytes fed by an application.
+         * @returns A decrypted plain text as bytes.
+         * @throws {@link DecapError}, {@link DeserializeError}, {@link OpenError}, {@link ValidationError}
+         */
+        async open(params, ct, aad = common_1.EMPTY.buffer) {
+            const ctx = await this.createRecipientContext(params);
+            return await ctx.open(ct, aad);
+        }
+        // private verifyPskInputs(mode: Mode, params: KeyScheduleParams) {
+        //   const gotPsk = (params.psk !== undefined);
+        //   const gotPskId = (params.psk !== undefined && params.psk.id.byteLength > 0);
+        //   if (gotPsk !== gotPskId) {
+        //     throw new Error('Inconsistent PSK inputs');
+        //   }
+        //   if (gotPsk && (mode === Mode.Base || mode === Mode.Auth)) {
+        //     throw new Error('PSK input provided when not needed');
+        //   }
+        //   if (!gotPsk && (mode === Mode.Psk || mode === Mode.AuthPsk)) {
+        //     throw new Error('Missing required PSK input');
+        //   }
+        //   return;
+        // }
+        async _keySchedule(mode, sharedSecret, params) {
+            // Currently, there is no point in executing this function
+            // because this hpke library does not allow users to explicitly specify the mode.
+            //
+            // this.verifyPskInputs(mode, params);
+            const pskId = params.psk === undefined
+                ? common_1.EMPTY
+                : (0, common_1.toUint8Array)(params.psk.id);
+            const pskIdHash = await this._kdf.labeledExtract(common_1.EMPTY, LABEL_PSK_ID_HASH, pskId);
+            const info = params.info === undefined ? common_1.EMPTY : (0, common_1.toUint8Array)(params.info);
+            const infoHash = await this._kdf.labeledExtract(common_1.EMPTY, LABEL_INFO_HASH, info);
+            const keyScheduleContext = new Uint8Array(1 + pskIdHash.byteLength + infoHash.byteLength);
+            keyScheduleContext.set(new Uint8Array([mode]), 0);
+            keyScheduleContext.set(new Uint8Array(pskIdHash), 1);
+            keyScheduleContext.set(new Uint8Array(infoHash), 1 + pskIdHash.byteLength);
+            const psk = params.psk === undefined ? common_1.EMPTY : (0, common_1.toUint8Array)(params.psk.key);
+            const ikm = this._kdf.buildLabeledIkm(LABEL_SECRET, psk);
+            const exporterSecretInfo = this._kdf.buildLabeledInfo(LABEL_EXP, keyScheduleContext, this._kdf.hashSize);
+            const exporterSecret = await this._kdf.extractAndExpand(sharedSecret, ikm, exporterSecretInfo, this._kdf.hashSize);
+            if (this._aead.id === common_1.AeadId.ExportOnly) {
+                return { aead: this._aead, exporterSecret: exporterSecret };
+            }
+            const keyInfo = this._kdf.buildLabeledInfo(LABEL_KEY, keyScheduleContext, this._aead.keySize);
+            const key = await this._kdf.extractAndExpand(sharedSecret, ikm, keyInfo, this._aead.keySize);
+            const baseNonceInfo = this._kdf.buildLabeledInfo(LABEL_BASE_NONCE, keyScheduleContext, this._aead.nonceSize);
+            const baseNonce = await this._kdf.extractAndExpand(sharedSecret, ikm, baseNonceInfo, this._aead.nonceSize);
+            return {
+                aead: this._aead,
+                exporterSecret: exporterSecret,
+                key: key,
+                baseNonce: new Uint8Array(baseNonce),
+                seq: 0,
+            };
+        }
+        async _keyScheduleS(mode, sharedSecret, enc, params) {
+            const res = await this._keySchedule(mode, sharedSecret, params);
+            if (res.key === undefined) {
+                return new exporterContext_js_1.SenderExporterContextImpl(this._api, this._kdf, res.exporterSecret, enc);
+            }
+            return new senderContext_js_1.SenderContextImpl(this._api, this._kdf, res, enc);
+        }
+        async _keyScheduleR(mode, sharedSecret, params) {
+            const res = await this._keySchedule(mode, sharedSecret, params);
+            if (res.key === undefined) {
+                return new exporterContext_js_1.RecipientExporterContextImpl(this._api, this._kdf, res.exporterSecret);
+            }
+            return new recipientContext_js_1.RecipientContextImpl(this._api, this._kdf, res);
+        }
+        _validateInputLength(params) {
+            if (params.info !== undefined &&
+                params.info.byteLength > common_1.INFO_LENGTH_LIMIT) {
+                throw new common_1.InvalidParamError("Too long info");
+            }
+            if (params.psk !== undefined) {
+                if (params.psk.key.byteLength < common_1.MINIMUM_PSK_LENGTH) {
+                    throw new common_1.InvalidParamError(`PSK must have at least ${common_1.MINIMUM_PSK_LENGTH} bytes`);
+                }
+                if (params.psk.key.byteLength > common_1.INPUT_LENGTH_LIMIT) {
+                    throw new common_1.InvalidParamError("Too long psk.key");
+                }
+                if (params.psk.id.byteLength > common_1.INPUT_LENGTH_LIMIT) {
+                    throw new common_1.InvalidParamError("Too long psk.id");
+                }
+            }
+            return;
+        }
+    }
+    exports.CipherSuiteNative = CipherSuiteNative;
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/encryptionContext.d.ts

@@ -0,0 +1,15 @@
+import type { AeadInterface, KdfInterface } from "@hpke/common";
+import type { AeadParams } from "./interfaces/aeadParams.js";
+import type { KeyInfo } from "./interfaces/keyInfo.js";
+import { ExporterContextImpl } from "./exporterContext.js";
+export declare class EncryptionContextImpl extends ExporterContextImpl {
+    protected _aead: AeadInterface;
+    protected _nK: number;
+    protected _nN: number;
+    protected _nT: number;
+    protected _ctx: KeyInfo;
+    constructor(api: SubtleCrypto, kdf: KdfInterface, params: AeadParams);
+    protected computeNonce(k: KeyInfo): ArrayBuffer;
+    protected incrementSeq(k: KeyInfo): void;
+}
+//# sourceMappingURL=encryptionContext.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/encryptionContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptionContext.d.ts","sourceRoot":"","sources":["../../src/src/encryptionContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,qBAAa,qBAAsB,SAAQ,mBAAmB;IAE5D,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC;IAE/B,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC;IAEtB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC;IAEtB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC;IAEtB,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEZ,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU;IAsBpE,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,WAAW;IAK/C,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO;CAQlC"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/encryptionContext.js

@@ -0,0 +1,82 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "@hpke/common", "./exporterContext.js"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.EncryptionContextImpl = void 0;
+    const common_1 = require("@hpke/common");
+    const exporterContext_js_1 = require("./exporterContext.js");
+    class EncryptionContextImpl extends exporterContext_js_1.ExporterContextImpl {
+        constructor(api, kdf, params) {
+            super(api, kdf, params.exporterSecret);
+            // AEAD id.
+            Object.defineProperty(this, "_aead", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            // The length in bytes of a key for the algorithm.
+            Object.defineProperty(this, "_nK", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            // The length in bytes of a nonce for the algorithm.
+            Object.defineProperty(this, "_nN", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            // The length in bytes of an authentication tag for the algorithm.
+            Object.defineProperty(this, "_nT", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            // The end-to-end encryption key information.
+            Object.defineProperty(this, "_ctx", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            if (params.key === undefined || params.baseNonce === undefined ||
+                params.seq === undefined) {
+                throw new Error("Required parameters are missing");
+            }
+            this._aead = params.aead;
+            this._nK = this._aead.keySize;
+            this._nN = this._aead.nonceSize;
+            this._nT = this._aead.tagSize;
+            const key = this._aead.createEncryptionContext(params.key);
+            this._ctx = {
+                key: key,
+                baseNonce: params.baseNonce,
+                seq: params.seq,
+            };
+        }
+        computeNonce(k) {
+            const seqBytes = (0, common_1.i2Osp)(k.seq, k.baseNonce.byteLength);
+            return (0, common_1.xor)(k.baseNonce, seqBytes).buffer;
+        }
+        incrementSeq(k) {
+            // if (this.seq >= (1 << (8 * this.baseNonce.byteLength)) - 1) {
+            if (k.seq > Number.MAX_SAFE_INTEGER) {
+                throw new common_1.MessageLimitReachedError("Message limit reached");
+            }
+            k.seq += 1;
+            return;
+        }
+    }
+    exports.EncryptionContextImpl = EncryptionContextImpl;
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/exporterContext.d.ts

@@ -0,0 +1,19 @@
+import type { KdfInterface } from "@hpke/common";
+import type { Encapsulator } from "./interfaces/encapsulator.js";
+import type { EncryptionContext } from "./interfaces/encryptionContext.js";
+export declare class ExporterContextImpl implements EncryptionContext {
+    protected _api: SubtleCrypto;
+    protected readonly exporterSecret: ArrayBuffer;
+    private _kdf;
+    constructor(api: SubtleCrypto, kdf: KdfInterface, exporterSecret: ArrayBuffer);
+    seal(_data: ArrayBufferLike | ArrayBufferView, _aad: ArrayBufferLike | ArrayBufferView): Promise<ArrayBuffer>;
+    open(_data: ArrayBufferLike | ArrayBufferView, _aad: ArrayBufferLike | ArrayBufferView): Promise<ArrayBuffer>;
+    export(exporterContext: ArrayBufferLike | ArrayBufferView, len: number): Promise<ArrayBuffer>;
+}
+export declare class RecipientExporterContextImpl extends ExporterContextImpl {
+}
+export declare class SenderExporterContextImpl extends ExporterContextImpl implements Encapsulator {
+    readonly enc: ArrayBuffer;
+    constructor(api: SubtleCrypto, kdf: KdfInterface, exporterSecret: ArrayBuffer, enc: ArrayBuffer);
+}
+//# sourceMappingURL=exporterContext.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/exporterContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exporterContext.d.ts","sourceRoot":"","sources":["../../src/src/exporterContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAO3E,qBAAa,mBAAoB,YAAW,iBAAiB;IAC3D,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC;IAC7B,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC;IAC/C,OAAO,CAAC,IAAI,CAAe;gBAGzB,GAAG,EAAE,YAAY,EACjB,GAAG,EAAE,YAAY,EACjB,cAAc,EAAE,WAAW;IAOhB,IAAI,CACf,KAAK,EAAE,eAAe,GAAG,eAAe,EACxC,IAAI,EAAE,eAAe,GAAG,eAAe,GACtC,OAAO,CAAC,WAAW,CAAC;IAIV,IAAI,CACf,KAAK,EAAE,eAAe,GAAG,eAAe,EACxC,IAAI,EAAE,eAAe,GAAG,eAAe,GACtC,OAAO,CAAC,WAAW,CAAC;IAIV,MAAM,CACjB,eAAe,EAAE,eAAe,GAAG,eAAe,EAClD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;CAgBxB;AAED,qBAAa,4BAA6B,SAAQ,mBAAmB;CAAG;AAExE,qBAAa,yBAA0B,SAAQ,mBAC7C,YAAW,YAAY;IACvB,SAAgB,GAAG,EAAE,WAAW,CAAC;gBAG/B,GAAG,EAAE,YAAY,EACjB,GAAG,EAAE,YAAY,EACjB,cAAc,EAAE,WAAW,EAC3B,GAAG,EAAE,WAAW;CAMnB"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/exporterContext.js

@@ -0,0 +1,78 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "@hpke/common", "./utils/emitNotSupported.js"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.SenderExporterContextImpl = exports.RecipientExporterContextImpl = exports.ExporterContextImpl = void 0;
+    const common_1 = require("@hpke/common");
+    const emitNotSupported_js_1 = require("./utils/emitNotSupported.js");
+    // b"sec"
+    const LABEL_SEC = new Uint8Array([115, 101, 99]);
+    class ExporterContextImpl {
+        constructor(api, kdf, exporterSecret) {
+            Object.defineProperty(this, "_api", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            Object.defineProperty(this, "exporterSecret", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            Object.defineProperty(this, "_kdf", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            this._api = api;
+            this._kdf = kdf;
+            this.exporterSecret = exporterSecret;
+        }
+        async seal(_data, _aad) {
+            return await (0, emitNotSupported_js_1.emitNotSupported)();
+        }
+        async open(_data, _aad) {
+            return await (0, emitNotSupported_js_1.emitNotSupported)();
+        }
+        async export(exporterContext, len) {
+            const rawExporterContext = (0, common_1.toArrayBuffer)(exporterContext);
+            if (rawExporterContext.byteLength > common_1.INPUT_LENGTH_LIMIT) {
+                throw new common_1.InvalidParamError("Too long exporter context");
+            }
+            try {
+                return await this._kdf.labeledExpand(this.exporterSecret, LABEL_SEC, new Uint8Array(rawExporterContext), len);
+            }
+            catch (e) {
+                throw new common_1.ExportError(e);
+            }
+        }
+    }
+    exports.ExporterContextImpl = ExporterContextImpl;
+    class RecipientExporterContextImpl extends ExporterContextImpl {
+    }
+    exports.RecipientExporterContextImpl = RecipientExporterContextImpl;
+    class SenderExporterContextImpl extends ExporterContextImpl {
+        constructor(api, kdf, exporterSecret, enc) {
+            super(api, kdf, exporterSecret);
+            Object.defineProperty(this, "enc", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            this.enc = enc;
+            return;
+        }
+    }
+    exports.SenderExporterContextImpl = SenderExporterContextImpl;
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/aeadParams.d.ts

@@ -0,0 +1,17 @@
+import type { AeadInterface } from "@hpke/common";
+/**
+ * The AEAD parameters for building a encryption context.
+ */
+export interface AeadParams {
+    /** The Aead indentifier. */
+    aead: AeadInterface;
+    /** A secret used for the secret export interface. */
+    exporterSecret: ArrayBuffer;
+    /** A secret key. */
+    key?: ArrayBuffer;
+    /** A base nonce. */
+    baseNonce?: Uint8Array;
+    /** A sequence number. */
+    seq?: number;
+}
+//# sourceMappingURL=aeadParams.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/aeadParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aeadParams.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/aeadParams.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,4BAA4B;IAC5B,IAAI,EAAE,aAAa,CAAC;IAEpB,qDAAqD;IACrD,cAAc,EAAE,WAAW,CAAC;IAE5B,oBAAoB;IACpB,GAAG,CAAC,EAAE,WAAW,CAAC;IAElB,oBAAoB;IACpB,SAAS,CAAC,EAAE,UAAU,CAAC;IAEvB,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/aeadParams.js

@@ -0,0 +1,12 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/cipherSuiteParams.d.ts

@@ -0,0 +1,13 @@
+import type { AeadId, AeadInterface, KdfId, KdfInterface, KemId, KemInterface } from "@hpke/common";
+/**
+ * The parameters used to configure the `CipherSuite`.
+ */
+export interface CipherSuiteParams {
+    /** The KEM (Key Encapsulation Mechanism) identifier or the KEM object. */
+    kem: KemId | KemInterface;
+    /** The KDF (Key Derivation Function) identifier or the KDF object. */
+    kdf: KdfId | KdfInterface;
+    /** The AEAD (Authenticated Encryption with Addtional Data) identifier or the AEAD object. */
+    aead: AeadId | AeadInterface;
+}
+//# sourceMappingURL=cipherSuiteParams.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/cipherSuiteParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cipherSuiteParams.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/cipherSuiteParams.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EACN,aAAa,EACb,KAAK,EACL,YAAY,EACZ,KAAK,EACL,YAAY,EACb,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,GAAG,EAAE,KAAK,GAAG,YAAY,CAAC;IAE1B,sEAAsE;IACtE,GAAG,EAAE,KAAK,GAAG,YAAY,CAAC;IAE1B,6FAA6F;IAC7F,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;CAC9B"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/cipherSuiteParams.js

@@ -0,0 +1,12 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/encapsulator.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The sender specific interface for an encryption context.
+ */
+export interface Encapsulator {
+    /** The encapsulated key generated by the sender. */
+    enc: ArrayBuffer;
+}
+//# sourceMappingURL=encapsulator.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/encapsulator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encapsulator.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/encapsulator.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,GAAG,EAAE,WAAW,CAAC;CAClB"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/interfaces/encapsulator.js

@@ -0,0 +1,12 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+});