@suveren/gateway 0.39.0 → 0.41.0

package/node_modules/@hpke/common/esm/src/hash/sha3.js

@@ -555,13 +555,6 @@ export class Keccak {
     }
 }
 const genKeccak = (suffix, blockLen, outputLen, info = {}) => createHasher(() => new Keccak(blockLen, suffix, outputLen), info);
-// /** SHA3-224 hash function. */
-// export const sha3_224: CHash = /* @__PURE__ */ genKeccak(
-//   0x06,
-//   144,
-//   28,
-//   /* @__PURE__ */ oidNist(0x07),
-// );
 /** SHA3-256 hash function. Different from keccak-256. */
 export const sha3_256 = /* @__PURE__ */ genKeccak(0x06, 136, 32, 
 /* @__PURE__ */ oidNist(0x08));
@@ -588,11 +581,3 @@ genShake(0x1f, 168, 16, /* @__PURE__ */ oidNist(0x0b));
 export const shake256 = 
 /* @__PURE__ */
 genShake(0x1f, 136, 32, /* @__PURE__ */ oidNist(0x0c));
-// /** SHAKE128 XOF with 256-bit output (NIST version). */
-// export const shake128_32: CHashXOF<Keccak, ShakeOpts> =
-//   /* @__PURE__ */
-//   genShake(0x1f, 168, 32, /* @__PURE__ */ oidNist(0x0b));
-// /** SHAKE256 XOF with 512-bit output (NIST version). */
-// export const shake256_64: CHashXOF<Keccak, ShakeOpts> =
-//   /* @__PURE__ */
-//   genShake(0x1f, 136, 64, /* @__PURE__ */ oidNist(0x0c));

package/node_modules/@hpke/common/esm/src/kdfs/hkdf.d.ts

@@ -8,7 +8,8 @@ export declare class HkdfNative extends NativeAlgorithm implements KdfInterface
     readonly hashSize: number;
     protected _suiteId: Uint8Array;
     protected readonly algHash: HmacKeyGenParams;
-    constructor();
+    protected readonly _fallbackExtract: ((salt: Uint8Array, ikm: Uint8Array) => Uint8Array) | undefined;
+    constructor(fallbackExtract?: (salt: Uint8Array, ikm: Uint8Array) => Uint8Array);
     init(suiteId: Uint8Array): void;
     buildLabeledIkm(label: Uint8Array, ikm: Uint8Array): Uint8Array;
     buildLabeledInfo(label: Uint8Array, info: Uint8Array, len: number): Uint8Array;

package/node_modules/@hpke/common/esm/src/kdfs/hkdf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../../../src/src/kdfs/hkdf.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAIlE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAalD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,UAAU,CAEZ;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,WAAW,CASb;AAED,qBAAa,UAAW,SAAQ,eAAgB,YAAW,YAAY;IACrE,SAAgB,EAAE,EAAE,KAAK,CAAoB;IAC7C,SAAgB,QAAQ,EAAE,MAAM,CAAK;IACrC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAS;IACvC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAI1C;;IAMK,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI/B,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU;IAY/D,gBAAgB,CACrB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,UAAU;IAaA,OAAO,CAClB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,WAAW,CAAC;IAuBV,MAAM,CACjB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IA+CV,gBAAgB,CAC3B,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAsBV,cAAc,CACzB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,WAAW,CAAC;IAOV,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAQvB,SAAS,CAAC,UAAU,IAAI,IAAI;CAK7B;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH"}
+{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../../../src/src/kdfs/hkdf.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAIlE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAalD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,UAAU,CAEZ;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,WAAW,CASb;AAED,qBAAa,UAAW,SAAQ,eAAgB,YAAW,YAAY;IACrE,SAAgB,EAAE,EAAE,KAAK,CAAoB;IAC7C,SAAgB,QAAQ,EAAE,MAAM,CAAK;IACrC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAS;IACvC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAI1C;IACF,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAC/B,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,KAAK,UAAU,CAAC,GACnD,SAAS,CAAC;gBAGZ,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,KAAK,UAAU;IAM9D,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI/B,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU;IAY/D,gBAAgB,CACrB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,UAAU;IAaA,OAAO,CAClB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,WAAW,CAAC;IA6BV,MAAM,CACjB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IA+CV,gBAAgB,CAC3B,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAsBV,cAAc,CACzB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,WAAW,CAAC;IAOV,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAQvB,SAAS,CAAC,UAAU,IAAI,IAAI;CAK7B;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH"}

package/node_modules/@hpke/common/esm/src/kdfs/hkdf.js

@@ -26,7 +26,7 @@ export function toArrayBuffer(input) {
     return new Uint8Array(input).slice().buffer;
 }
 export class HkdfNative extends NativeAlgorithm {
-    constructor() {
+    constructor(fallbackExtract) {
         super();
         Object.defineProperty(this, "id", {
             enumerable: true,
@@ -56,6 +56,13 @@ export class HkdfNative extends NativeAlgorithm {
                 length: 256,
             }
         });
+        Object.defineProperty(this, "_fallbackExtract", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this._fallbackExtract = fallbackExtract;
     }
     init(suiteId) {
         this._suiteId = suiteId;
@@ -84,10 +91,13 @@ export class HkdfNative extends NativeAlgorithm {
         const saltBuf = salt.byteLength === 0
             ? new ArrayBuffer(this.hashSize)
             : toArrayBuffer(salt);
+        const ikmBuf = toArrayBuffer(ikm);
         if (saltBuf.byteLength !== this.hashSize) {
+            if (this._fallbackExtract !== undefined) {
+                return this._fallbackExtract(new Uint8Array(saltBuf), new Uint8Array(ikmBuf)).buffer;
+            }
             throw new InvalidParamError("The salt length must be the same as the hashSize");
         }
-        const ikmBuf = toArrayBuffer(ikm);
         const key = await this._api.importKey("raw", saltBuf, this.algHash, false, [
             "sign",
         ]);

package/node_modules/@hpke/common/esm/src/kems/dhkemPrimitives/xCurve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"xCurve.d.ts","sourceRoot":"","sources":["../../../../src/src/kems/dhkemPrimitives/xCurve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE;;;;;GAKG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAS;IACzB,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC;IACjC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;gBAGnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,YAAY;IASb,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQlD,oBAAoB,CAC/B,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQd,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQnD,qBAAqB,CAChC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQR,SAAS,CACpB,MAAM,EAAE,KAAK,GAAG,KAAK,EACrB,GAAG,EAAE,WAAW,GAAG,UAAU,EAC7B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,SAAS,CAAC;IAeR,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC;IAgBzC,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,aAAa,CAAC;IA6BlB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAWnD,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAa7D,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,UAAU;CAwCnB"}
+{"version":3,"file":"xCurve.d.ts","sourceRoot":"","sources":["../../../../src/src/kems/dhkemPrimitives/xCurve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE;;;;;GAKG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAS;IACzB,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC;IACjC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;gBAGnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,YAAY;IASb,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQlD,oBAAoB,CAC/B,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQd,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQnD,qBAAqB,CAChC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQR,SAAS,CACpB,MAAM,EAAE,KAAK,GAAG,KAAK,EACrB,GAAG,EAAE,WAAW,GAAG,UAAU,EAC7B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,SAAS,CAAC;IAeR,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC;IA0BzC,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,aAAa,CAAC;IA6BlB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAWnD,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAa7D,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,UAAU;CAwCnB"}

package/node_modules/@hpke/common/esm/src/kems/dhkemPrimitives/xCurve.js

@@ -2,7 +2,7 @@ import { EMPTY } from "../../consts.js";
 import { DeriveKeyPairError, DeserializeError, NotSupportedError, SerializeError, } from "../../errors.js";
 import { toArrayBuffer } from "../../kdfs/hkdf.js";
 import { KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, } from "../../interfaces/dhkemPrimitives.js";
-import { base64UrlToBytes } from "../../utils/misc.js";
+import { base64UrlToBytes, loadCrypto } from "../../utils/misc.js";
 import { XCryptoKey } from "../../xCryptoKey.js";
 /**
  * Base DhkemPrimitives implementation for Montgomery curves (X25519/X448).
@@ -97,9 +97,20 @@ export class XCurveDhkemPrimitives {
     }
     async generateKeyPair() {
         try {
-            const rawSk = await this._curve.utils.randomSecretKey();
+            let rawSk;
+            try {
+                rawSk = this._curve.utils.randomSecretKey();
+            }
+            catch {
+                // Sync crypto not available (e.g., Node.js <= v18 ESM); async fallback
+                const cryptoApi = await loadCrypto();
+                const fallbackRawSk = new Uint8Array(this._nSk);
+                cryptoApi.getRandomValues(fallbackRawSk);
+                rawSk = fallbackRawSk;
+            }
             const sk = new XCryptoKey(this._algName, rawSk, "private", KEM_USAGES);
-            const pk = await this.derivePublicKey(sk);
+            const rawPk = this._curve.getPublicKey(rawSk);
+            const pk = new XCryptoKey(this._algName, rawPk, "public");
             return { publicKey: pk, privateKey: sk };
         }
         catch (e) {

package/node_modules/@hpke/common/esm/src/utils/misc.d.ts

@@ -52,6 +52,12 @@ export declare function bytesToHex(v: Uint8Array): string;
  */
 export declare function kemToKeyGenAlgorithm(kem: KemId): KeyAlgorithm;
 export declare function loadSubtleCrypto(): Promise<SubtleCrypto>;
+/**
+ * Returns the Crypto object synchronously.
+ * Uses globalThis.crypto on modern runtimes, with a CJS require("crypto")
+ * fallback for Node.js <= v18. The result is cached after the first call.
+ */
+export declare function getCrypto(): Crypto;
 export declare function loadCrypto(): Promise<Crypto>;
 /**
  * XOR for Uint8Array.

package/node_modules/@hpke/common/esm/src/utils/misc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"misc.d.ts","sourceRoot":"","sources":["../../../src/src/utils/misc.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,eAAO,MAAM,QAAQ,QAAO,OAE0B,CAAC;AAEvD;;;GAGG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAOhC;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,MAAO,OAAO,KAAG,CAAC,IAAI,aAIE,CAAC;AAErD;;GAEG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,UAAU,CAatD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAK/D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQtD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAKtD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAWhD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,KAAK,GAAG,YAAY,CAuB7D;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,CAAC,CAa9D;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAalD;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAS5D"}
+{"version":3,"file":"misc.d.ts","sourceRoot":"","sources":["../../../src/src/utils/misc.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,eAAO,MAAM,QAAQ,QAAO,OAE0B,CAAC;AAEvD;;;GAGG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAOhC;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,MAAO,OAAO,KAAG,CAAC,IAAI,aAIE,CAAC;AAErD;;GAEG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,UAAU,CAatD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAK/D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQtD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAKtD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAWhD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,KAAK,GAAG,YAAY,CAuB7D;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,CAAC,CAa9D;AAKD;;;;GAIG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAqBlC;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAclD;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAS5D"}

package/node_modules/@hpke/common/esm/src/utils/misc.js

@@ -146,19 +146,52 @@ export async function loadSubtleCrypto() {
         throw new Error("Failed to load SubtleCrypto");
     }
 }
-export async function loadCrypto() {
+/** Cached reference to the Crypto object for synchronous access. */
+let _cryptoApi;
+/**
+ * Returns the Crypto object synchronously.
+ * Uses globalThis.crypto on modern runtimes, with a CJS require("crypto")
+ * fallback for Node.js <= v18. The result is cached after the first call.
+ */
+export function getCrypto() {
+    if (_cryptoApi)
+        return _cryptoApi;
+    // Modern runtimes: Deno, browsers, Node.js >= 17.6, Bun, Cloudflare Workers
     if (typeof dntShim.dntGlobalThis !== "undefined" && globalThis.crypto !== undefined) {
-        // Browsers, Node.js >= v19, Cloudflare Workers, Bun, etc.
-        return globalThis.crypto;
+        _cryptoApi = globalThis.crypto;
+        return _cryptoApi;
     }
-    // Node.js <= v18
+    // Node.js <= v18 CJS fallback: require is a module-local binding in CJS
+    // (not on globalThis), so we reference it directly.
     try {
-        // @ts-ignore: to ignore "crypto"
-        const { webcrypto } = await import("crypto"); // node:crypto
-        return webcrypto;
-    }
-    catch (_e) {
-        throw new Error("failed to load Crypto");
+        // @ts-ignore: require exists in CJS builds via dnt
+        if (typeof require === "function") {
+            // @ts-ignore: require exists in CJS builds via dnt
+            const { webcrypto } = require("crypto");
+            _cryptoApi = webcrypto;
+            return _cryptoApi;
+        }
+    }
+    catch {
+        // ignore
+    }
+    throw new Error("crypto.getRandomValues must be defined");
+}
+export async function loadCrypto() {
+    try {
+        return getCrypto();
+    }
+    catch {
+        // ESM fallback for Node.js <= v18 (require not available)
+        try {
+            // @ts-ignore: to ignore "crypto"
+            const { webcrypto } = await import("crypto"); // node:crypto
+            _cryptoApi = webcrypto;
+            return _cryptoApi;
+        }
+        catch (_e) {
+            throw new Error("failed to load Crypto");
+        }
     }
 }
 /**

package/node_modules/@hpke/common/esm/src/utils/noble.d.ts

@@ -110,7 +110,7 @@ export interface Signer extends CryptoKeys {
     verify: (sig: Uint8Array, msg: Uint8Array, publicKey: Uint8Array) => boolean;
 }
 /** Cryptographically secure PRNG. Uses internal OS-level `crypto.getRandomValues`. */
-export declare function randomBytesAsync(bytesLength?: number): Promise<Uint8Array>;
+export declare function randomBytes(bytesLength?: number): Uint8Array;
 export declare function oidNist(suffix: number): {
     oid: Uint8Array;
 };

package/node_modules/@hpke/common/esm/src/utils/noble.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"noble.d.ts","sourceRoot":"","sources":["../../../src/src/utils/noble.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAUH,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,UAAU,CAGnD;AAED,6CAA6C;AAC7C,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,IAAI,CAK3D;AAED,uCAAuC;AACvC,wBAAgB,MAAM,CACpB,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,GAAE,MAAW,GACjB,UAAU,CAWZ;AAID,gEAAgE;AAChE,wBAAgB,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,UAAO,GAAG,IAAI,CAKjE;AAED,kDAAkD;AAClD,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,GAAG,IAAI,CAMrD;AAUD,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,iBAAiB,GACjB,UAAU,GACV,WAAW,GACX,UAAU,GACV,WAAW,GACX,UAAU,CAAC;AAEf,kCAAkC;AAClC,wBAAgB,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,WAAW,CAMhD;AAED,gEAAgE;AAChE,wBAAgB,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAInD;AAQD,4EAA4E;AAC5E,eAAO,MAAM,IAAI,EAAE,OAAsD,CAAC;AAE1E,yCAAyC;AACzC,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO7C;AACD,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,kBAAkB;AAClB,eAAO,MAAM,YAAY,EAAE,OAAO,SAAqB,CAAC;AACxD,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,CAKxD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,WAAW,GAAG,WAAW,CAEtD;AAED,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CAEpD;AAED,mEAAmE;AACnE,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAiCD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAUpD;AAWD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAyBlD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAGnD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAGhE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgB/C;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWlD;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEzD;AACD,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEzD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAM3E;AACD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAE3E;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAEvD;AAED,2CAA2C;AAC3C,wBAAgB,WAAW,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAc/D;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAYtD;AAOD,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,EACb,CAAC,EAAE,MAAM,EACT,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,IAAI,CAWN;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACnC,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACrC,IAAI,CAmBN;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,MAAM,EAAE,CACN,IAAI,CAAC,EAAE,UAAU,KACd;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;IACtD,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC;CACrD;AAED,qEAAqE;AACrE,MAAM,WAAW,MAAO,SAAQ,UAAU;IAExC,OAAO,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,IAAI,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC;IAC7D,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC;CAC9E;AAaD,sFAAsF;AACtF,wBAAsB,gBAAgB,CAAC,WAAW,SAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAK5E;AAGD,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,UAAU,CAAA;CAAE,CAgB3D"}
+{"version":3,"file":"noble.d.ts","sourceRoot":"","sources":["../../../src/src/utils/noble.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAUH,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,UAAU,CAGnD;AAED,6CAA6C;AAC7C,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,IAAI,CAK3D;AAED,uCAAuC;AACvC,wBAAgB,MAAM,CACpB,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,GAAE,MAAW,GACjB,UAAU,CAWZ;AAID,gEAAgE;AAChE,wBAAgB,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,UAAO,GAAG,IAAI,CAKjE;AAED,kDAAkD;AAClD,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,GAAG,IAAI,CAMrD;AAUD,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,iBAAiB,GACjB,UAAU,GACV,WAAW,GACX,UAAU,GACV,WAAW,GACX,UAAU,CAAC;AAEf,kCAAkC;AAClC,wBAAgB,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,WAAW,CAMhD;AAED,gEAAgE;AAChE,wBAAgB,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAInD;AAQD,4EAA4E;AAC5E,eAAO,MAAM,IAAI,EAAE,OAAsC,CAAC;AAE1D,yCAAyC;AACzC,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO7C;AACD,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,kBAAkB;AAClB,eAAO,MAAM,YAAY,EAAE,OAAO,SAAqB,CAAC;AACxD,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,CAKxD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,WAAW,GAAG,WAAW,CAEtD;AAED,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CAEpD;AAED,mEAAmE;AACnE,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAiCD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAUpD;AAWD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAyBlD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAGnD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAGhE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgB/C;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWlD;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEzD;AACD,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAOzD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAM3E;AACD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAU3E;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAEvD;AAED,2CAA2C;AAC3C,wBAAgB,WAAW,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAc/D;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAYtD;AAOD,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,EACb,CAAC,EAAE,MAAM,EACT,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,IAAI,CAWN;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACnC,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACrC,IAAI,CAmBN;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,MAAM,EAAE,CACN,IAAI,CAAC,EAAE,UAAU,KACd;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;IACtD,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC;CACrD;AAED,qEAAqE;AACrE,MAAM,WAAW,MAAO,SAAQ,UAAU;IAExC,OAAO,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,IAAI,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC;IAC7D,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC;CAC9E;AAaD,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,WAAW,SAAK,GAAG,UAAU,CAExD;AAGD,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,UAAU,CAAA;CAAE,CAgB3D"}

package/node_modules/@hpke/common/esm/src/utils/noble.js

@@ -11,8 +11,8 @@
  * Hex, bytes and number utilities.
  * @module
  */
-import { loadCrypto } from "./misc.js";
 import { N_0 } from "../consts.js";
+import { getCrypto } from "./misc.js";
 /** Checks if something is Uint8Array. Be careful: nodejs Buffer will return true. */
 export function isBytes(a) {
     return a instanceof Uint8Array ||
@@ -79,7 +79,7 @@ export function clean(...arrays) {
 const _endianTestBuffer = /* @__PURE__ */ new Uint32Array([0x11223344]);
 const _endianTestBytes = /* @__PURE__ */ new Uint8Array(_endianTestBuffer.buffer);
 /** Is current platform little-endian? Most are. Big-Endian platform: IBM */
-export const isLE = /* @__PURE__ */ _endianTestBytes[0] === 0x44;
+export const isLE = _endianTestBytes[0] === 0x44;
 /** The byte swap operation for uint32 */
 export function byteSwap(word) {
     return (((word << 24) & 0xff000000) |
@@ -119,7 +119,7 @@ typeof Uint8Array.from([]).toHex === "function" &&
     typeof Uint8Array.fromHex === "function")();
 // Array where index 0xf0 (240) is mapped to string 'f0'
 const hexes = /* @__PURE__ */ Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, "0"));
-const HEX_TO_BIGINT = /* @__PURE__ */ [
+const HEX_TO_BIGINT = [
     0n,
     1n,
     2n,
@@ -246,7 +246,12 @@ export function bytesToNumberBE(bytes) {
     return hexToNumber(bytesToHex(bytes));
 }
 export function bytesToNumberLE(bytes) {
-    return hexToNumber(bytesToHex(copyBytes(abytes(bytes)).reverse()));
+    abytes(bytes);
+    let result = N_0;
+    for (let i = bytes.length - 1; i >= 0; i--) {
+        result = (result << 8n) | BigInt(bytes[i]);
+    }
+    return result;
 }
 export function numberToBytesBE(n, len) {
     anumber(len);
@@ -257,7 +262,16 @@ export function numberToBytesBE(n, len) {
     return res;
 }
 export function numberToBytesLE(n, len) {
-    return numberToBytesBE(n, len).reverse();
+    anumber(len);
+    let v = BigInt(abignumer(n));
+    const result = new Uint8Array(len);
+    for (let i = 0; i < len; i++) {
+        result[i] = Number(v & 0xffn);
+        v >>= 8n;
+    }
+    if (v !== N_0)
+        throw new Error("number too large");
+    return result;
 }
 /**
  * Copies Uint8Array. We can't use u8a.slice(), because u8a can be Buffer,
@@ -345,11 +359,8 @@ export function validateObject(object, fields = {}, optFields = {}) {
 //   return cr.getRandomValues(new Uint8Array(bytesLength));
 // }
 /** Cryptographically secure PRNG. Uses internal OS-level `crypto.getRandomValues`. */
-export async function randomBytesAsync(bytesLength = 32) {
-    const api = await loadCrypto();
-    const rnd = new Uint8Array(bytesLength);
-    api.getRandomValues(rnd);
-    return rnd;
+export function randomBytes(bytesLength = 32) {
+    return getCrypto().getRandomValues(new Uint8Array(bytesLength));
 }
 // 06 09 60 86 48 01 65 03 04 02
 export function oidNist(suffix) {

package/node_modules/@hpke/common/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hpke/common",
-  "version": "1.10.1",
+  "version": "1.11.0",
   "description": "A Hybrid Public Key Encryption (HPKE) internal-use common module for @hpke family modules.",
   "keywords": [
     "hpke",
@@ -30,6 +30,10 @@
     },
     "./package.json": "./package.json"
   },
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/sponsors/dajiaji"
+  },
   "sideEffects": false,
   "engines": {
     "node": ">=16.0.0"

package/node_modules/@hpke/common/script/src/curve/montgomery.d.ts

@@ -12,7 +12,7 @@ export type CurveType = {
     type: "x25519" | "x448";
     adjustScalarBytes: (bytes: Uint8Array) => Uint8Array;
     powPminus2: (x: bigint) => bigint;
-    randomBytes?: (bytesLength?: number) => Promise<Uint8Array>;
+    randomBytes?: (bytesLength?: number) => Uint8Array;
 };
 export type MontgomeryECDH = {
     scalarMult: (scalar: Uint8Array, u: Uint8Array) => Uint8Array;
@@ -20,7 +20,7 @@ export type MontgomeryECDH = {
     getSharedSecret: (secretKeyA: Uint8Array, publicKeyB: Uint8Array) => Uint8Array;
     getPublicKey: (secretKey: Uint8Array) => Uint8Array;
     utils: {
-        randomSecretKey: (seed?: Uint8Array) => Promise<Uint8Array>;
+        randomSecretKey: (seed?: Uint8Array) => Uint8Array;
     };
     GuBytes: Uint8Array;
     lengths: CurveLengths;

package/node_modules/@hpke/common/script/src/curve/montgomery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"montgomery.d.ts","sourceRoot":"","sources":["../../../src/src/curve/montgomery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAI7D,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,iBAAiB,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,UAAU,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,KAAK,UAAU,CAAC;IAC9D,cAAc,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,UAAU,CAAC;IACnD,eAAe,EAAE,CACf,UAAU,EAAE,UAAU,EACtB,UAAU,EAAE,UAAU,KACnB,UAAU,CAAC;IAChB,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC;IACpD,KAAK,EAAE;QACL,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;KAC7D,CAAC;IACF,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,CACN,IAAI,CAAC,EAAE,UAAU,KACd;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;CACvD,CAAC;AAUF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,GAAG,cAAc,CA4I9D"}
+{"version":3,"file":"montgomery.d.ts","sourceRoot":"","sources":["../../../src/src/curve/montgomery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAI7D,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,iBAAiB,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,UAAU,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,UAAU,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,KAAK,UAAU,CAAC;IAC9D,cAAc,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,UAAU,CAAC;IACnD,eAAe,EAAE,CACf,UAAU,EAAE,UAAU,EACtB,UAAU,EAAE,UAAU,KACnB,UAAU,CAAC;IAChB,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC;IACpD,KAAK,EAAE;QACL,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,KAAK,UAAU,CAAC;KACpD,CAAC;IACF,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,CACN,IAAI,CAAC,EAAE,UAAU,KACd;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;CACvD,CAAC;AAUF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,GAAG,cAAc,CAqJ9D"}

package/node_modules/@hpke/common/script/src/curve/montgomery.js

@@ -42,8 +42,8 @@
         const is25519 = type === "x25519";
         if (!is25519 && type !== "x448")
             throw new Error("invalid type");
-        const randomBytes_ = rand || noble_js_1.randomBytesAsync;
-        const montgomeryBits = is25519 ? 255n : 448n;
+        const randomBytes_ = rand || noble_js_1.randomBytes;
+        const montgomeryBits = is25519 ? 255 : 448;
         const fieldLen = is25519 ? 32 : 56;
         const Gu = is25519 ? 9n : 5n;
         // RFC 7748 #5:
@@ -62,17 +62,20 @@
         function encodeU(u) {
             return (0, noble_js_1.numberToBytesLE)(modP(u), fieldLen);
         }
+        // Mask for clearing bit 255 (x25519): (1n << 255n) - 1n
+        const uMask = is25519 ? (consts_js_1.N_1 << 255n) - consts_js_1.N_1 : consts_js_1.N_0;
         function decodeU(u) {
-            const _u = (0, noble_js_1.copyBytes)((0, noble_js_1.abytes)(u, fieldLen, "uCoordinate"));
+            (0, noble_js_1.abytes)(u, fieldLen, "uCoordinate");
+            let n = (0, noble_js_1.bytesToNumberLE)(u);
             // RFC: When receiving such an array, implementations of X25519
             // (but not X448) MUST mask the most significant bit in the final byte.
             if (is25519)
-                _u[31] &= 127; // 0b0111_1111
+                n &= uMask;
             // RFC: Implementations MUST accept non-canonical values and process them as
             // if they had been reduced modulo the field prime.  The non-canonical
             // values are 2^255 - 19 through 2^255 - 1 for X25519 and 2^448 - 2^224
             // - 1 through 2^448 - 1 for X448.
-            return modP((0, noble_js_1.bytesToNumberLE)(_u));
+            return modP(n);
         }
         function decodeScalar(scalar) {
             return (0, noble_js_1.bytesToNumberLE)(adjustScalarBytes((0, noble_js_1.copyBytes)((0, noble_js_1.abytes)(scalar, fieldLen, "scalar"))));
@@ -86,24 +89,21 @@
                 throw new Error("invalid private or public key received");
             return encodeU(pu);
         }
+        // Pre-decoded base point u-coordinate (avoids redundant decode on every call)
+        const GuDecoded = modP(Gu);
         // Computes public key from private. By doing scalar multiplication of base point.
         function scalarMultBase(scalar) {
-            return scalarMult(scalar, GuBytes);
+            const pu = montgomeryLadder(GuDecoded, decodeScalar(scalar));
+            if (pu === consts_js_1.N_0)
+                throw new Error("invalid private or public key received");
+            return encodeU(pu);
         }
         const getPublicKey = scalarMultBase;
         const getSharedSecret = scalarMult;
-        // cswap from RFC7748 "example code"
-        function cswap(swap, x_2, x_3) {
-            // dummy = mask(swap) AND (x_2 XOR x_3)
-            // Where mask(swap) is the all-1 or all-0 word of the same length as x_2
-            // and x_3, computed, e.g., as mask(swap) = 0 - swap.
-            const dummy = modP(swap * (x_2 - x_3));
-            x_2 = modP(x_2 - dummy); // x_2 = x_2 XOR dummy
-            x_3 = modP(x_3 + dummy); // x_3 = x_3 XOR dummy
-            return { x_2, x_3 };
-        }
         /**
          * Montgomery x-only multiplication ladder.
+         * cswap is inlined to avoid per-iteration object allocations.
+         * Loop counter uses number instead of bigint to avoid BigInt arithmetic overhead.
          * @param pointU u coordinate (x) on Montgomery Curve 25519
          * @param scalar by which the point would be multiplied
          * @returns new Point on Montgomery curve
@@ -118,11 +118,19 @@
             let x_3 = u;
             let z_3 = consts_js_1.N_1;
             let swap = consts_js_1.N_0;
-            for (let t = montgomeryBits - 1n; t >= consts_js_1.N_0; t--) {
-                const k_t = (k >> t) & consts_js_1.N_1;
+            let dummy;
+            for (let t = montgomeryBits - 1; t >= 0; t--) {
+                const k_t = (k >> BigInt(t)) & consts_js_1.N_1;
                 swap ^= k_t;
-                ({ x_2, x_3 } = cswap(swap, x_2, x_3));
-                ({ x_2: z_2, x_3: z_3 } = cswap(swap, z_2, z_3));
+                // Masked cswap (best-effort constant-time for BigInt).
+                // Only dummy needs modP; x/z reductions are deferred to the
+                // subsequent multiplications in the ladder body.
+                dummy = modP(swap * (x_2 - x_3));
+                x_2 -= dummy;
+                x_3 += dummy;
+                dummy = modP(swap * (z_2 - z_3));
+                z_2 -= dummy;
+                z_3 += dummy;
                 swap = k_t;
                 const A = x_2 + z_2;
                 const AA = modP(A * A);
@@ -138,10 +146,17 @@
                 x_3 = modP(dacb * dacb);
                 z_3 = modP(x_1 * modP(da_cb * da_cb));
                 x_2 = modP(AA * BB);
-                z_2 = modP(E * (AA + modP(a24 * E)));
+                // a24 is small (17-bit for x25519, 16-bit for x448), so a24 * E adds
+                // only ~17 bits beyond P — negligible impact on the outer multiplication.
+                z_2 = modP(E * (AA + a24 * E));
             }
-            ({ x_2, x_3 } = cswap(swap, x_2, x_3));
-            ({ x_2: z_2, x_3: z_3 } = cswap(swap, z_2, z_3));
+            // Final masked cswap
+            dummy = modP(swap * (x_2 - x_3));
+            x_2 -= dummy;
+            x_3 += dummy;
+            dummy = modP(swap * (z_2 - z_3));
+            z_2 -= dummy;
+            z_3 += dummy;
             const z2 = powPminus2(z_2); // `Fp.pow(x, P - N_2)` is much slower equivalent
             return modP(x_2 * z2); // Return x_2 * (z_2^(p - 2))
         }
@@ -150,9 +165,9 @@
             publicKey: fieldLen,
             seed: fieldLen,
         };
-        const randomSecretKey = async (seed) => {
+        const randomSecretKey = (seed) => {
             if (seed === undefined) {
-                seed = await randomBytes_(fieldLen);
+                seed = randomBytes_(fieldLen);
             }
             (0, noble_js_1.abytes)(seed, lengths.seed, "seed");
             return seed;

package/node_modules/@hpke/common/script/src/hash/sha3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sha3.d.ts","sourceRoot":"","sources":["../../../src/src/hash/sha3.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwBH,OAAO,EACL,KAAK,KAAK,EACV,KAAK,QAAQ,EAEb,KAAK,IAAI,EAET,KAAK,OAAO,EACb,MAAM,WAAW,CAAC;AA4CnB,kFAAkF;AAClF,wBAAgB,OAAO,CACrB,CAAC,EAAE,WAAW,EACd,MAAM,GAAE,MAAW,EACnB,CAAC,CAAC,EAAE,WAAW,GACd,IAAI,CAySN;AAED,8BAA8B;AAC9B,qBAAa,MAAO,YAAW,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;IAC1D,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC;IAC5B,SAAS,CAAC,GAAG,SAAK;IAClB,SAAS,CAAC,MAAM,SAAK;IACrB,SAAS,CAAC,QAAQ,UAAS;IAC3B,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;IAC/B,SAAS,CAAC,SAAS,UAAS;IAC5B,OAAO,CAAC,EAAE,CAAuB;IAE1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,SAAS,UAAS;IAC5B,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;gBAIvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,UAAQ,EACjB,MAAM,GAAE,MAAW;IAiBrB,KAAK,IAAI,MAAM;IAGf,0DAA0D;IAC1D,KAAK,IAAI,IAAI;IAOb,SAAS,CAAC,MAAM,IAAI,IAAI;IAOxB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAK9B,qFAAqF;IACrF,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAUpC,SAAS,CAAC,MAAM,IAAI,IAAI;IAUxB,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAKhD,yFAAyF;IACzF,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAa5C,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAOpC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU;IAI9B,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAOvC,MAAM,IAAI,UAAU;IAGpB,OAAO,IAAI,IAAI;IAIf,UAAU,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;CAehC;AAiBD,yDAAyD;AACzD,eAAO,MAAM,QAAQ,EAAE,KAKtB,CAAC;AAEF,8BAA8B;AAC9B,eAAO,MAAM,QAAQ,EAAE,KAKtB,CAAC;AAEF,8BAA8B;AAC9B,eAAO,MAAM,QAAQ,EAAE,KAKtB,CAAC;AAEF,gCAAgC;AAChC,eAAO,MAAM,UAAU,EAAE,KAAgD,CAAC;AAC1E,yDAAyD;AACzD,eAAO,MAAM,UAAU,EAAE,KAAgD,CAAC;AAC1E,gCAAgC;AAChC,eAAO,MAAM,UAAU,EAAE,KAAgD,CAAC;AAC1E,gCAAgC;AAChC,eAAO,MAAM,UAAU,EAAE,KAA+C,CAAC;AAEzE,MAAM,MAAM,SAAS,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAmB3C,0CAA0C;AAC1C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAEO,CAAC;AACzD,0CAA0C;AAC1C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAEO,CAAC"}
+{"version":3,"file":"sha3.d.ts","sourceRoot":"","sources":["../../../src/src/hash/sha3.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwBH,OAAO,EACL,KAAK,KAAK,EACV,KAAK,QAAQ,EAEb,KAAK,IAAI,EAET,KAAK,OAAO,EACb,MAAM,WAAW,CAAC;AA4CnB,kFAAkF;AAClF,wBAAgB,OAAO,CACrB,CAAC,EAAE,WAAW,EACd,MAAM,GAAE,MAAW,EACnB,CAAC,CAAC,EAAE,WAAW,GACd,IAAI,CAySN;AAED,8BAA8B;AAC9B,qBAAa,MAAO,YAAW,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;IAC1D,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC;IAC5B,SAAS,CAAC,GAAG,SAAK;IAClB,SAAS,CAAC,MAAM,SAAK;IACrB,SAAS,CAAC,QAAQ,UAAS;IAC3B,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;IAC/B,SAAS,CAAC,SAAS,UAAS;IAC5B,OAAO,CAAC,EAAE,CAAuB;IAE1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,SAAS,UAAS;IAC5B,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;gBAIvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,UAAQ,EACjB,MAAM,GAAE,MAAW;IAiBrB,KAAK,IAAI,MAAM;IAGf,0DAA0D;IAC1D,KAAK,IAAI,IAAI;IAOb,SAAS,CAAC,MAAM,IAAI,IAAI;IAOxB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAK9B,qFAAqF;IACrF,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAUpC,SAAS,CAAC,MAAM,IAAI,IAAI;IAUxB,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAKhD,yFAAyF;IACzF,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAa5C,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAOpC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU;IAI9B,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU;IAOvC,MAAM,IAAI,UAAU;IAGpB,OAAO,IAAI,IAAI;IAIf,UAAU,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;CAehC;AASD,yDAAyD;AACzD,eAAO,MAAM,QAAQ,EAAE,KAKtB,CAAC;AAEF,8BAA8B;AAC9B,eAAO,MAAM,QAAQ,EAAE,KAKtB,CAAC;AAEF,8BAA8B;AAC9B,eAAO,MAAM,QAAQ,EAAE,KAKtB,CAAC;AAEF,gCAAgC;AAChC,eAAO,MAAM,UAAU,EAAE,KAAgD,CAAC;AAC1E,yDAAyD;AACzD,eAAO,MAAM,UAAU,EAAE,KAAgD,CAAC;AAC1E,gCAAgC;AAChC,eAAO,MAAM,UAAU,EAAE,KAAgD,CAAC;AAC1E,gCAAgC;AAChC,eAAO,MAAM,UAAU,EAAE,KAA+C,CAAC;AAEzE,MAAM,MAAM,SAAS,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAmB3C,0CAA0C;AAC1C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAEO,CAAC;AACzD,0CAA0C;AAC1C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAEO,CAAC"}

package/node_modules/@hpke/common/script/src/hash/sha3.js

@@ -569,13 +569,6 @@
     }
     exports.Keccak = Keccak;
     const genKeccak = (suffix, blockLen, outputLen, info = {}) => (0, hash_js_1.createHasher)(() => new Keccak(blockLen, suffix, outputLen), info);
-    // /** SHA3-224 hash function. */
-    // export const sha3_224: CHash = /* @__PURE__ */ genKeccak(
-    //   0x06,
-    //   144,
-    //   28,
-    //   /* @__PURE__ */ oidNist(0x07),
-    // );
     /** SHA3-256 hash function. Different from keccak-256. */
     exports.sha3_256 = genKeccak(0x06, 136, 32, 
     /* @__PURE__ */ (0, noble_js_1.oidNist)(0x08));
@@ -603,11 +596,3 @@
     /* @__PURE__ */
     genShake(0x1f, 136, 32, /* @__PURE__ */ (0, noble_js_1.oidNist)(0x0c));
 });
-// /** SHAKE128 XOF with 256-bit output (NIST version). */
-// export const shake128_32: CHashXOF<Keccak, ShakeOpts> =
-//   /* @__PURE__ */
-//   genShake(0x1f, 168, 32, /* @__PURE__ */ oidNist(0x0b));
-// /** SHAKE256 XOF with 512-bit output (NIST version). */
-// export const shake256_64: CHashXOF<Keccak, ShakeOpts> =
-//   /* @__PURE__ */
-//   genShake(0x1f, 136, 64, /* @__PURE__ */ oidNist(0x0c));

package/node_modules/@hpke/common/script/src/kdfs/hkdf.d.ts

@@ -8,7 +8,8 @@ export declare class HkdfNative extends NativeAlgorithm implements KdfInterface
     readonly hashSize: number;
     protected _suiteId: Uint8Array;
     protected readonly algHash: HmacKeyGenParams;
-    constructor();
+    protected readonly _fallbackExtract: ((salt: Uint8Array, ikm: Uint8Array) => Uint8Array) | undefined;
+    constructor(fallbackExtract?: (salt: Uint8Array, ikm: Uint8Array) => Uint8Array);
     init(suiteId: Uint8Array): void;
     buildLabeledIkm(label: Uint8Array, ikm: Uint8Array): Uint8Array;
     buildLabeledInfo(label: Uint8Array, info: Uint8Array, len: number): Uint8Array;

package/node_modules/@hpke/common/script/src/kdfs/hkdf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../../../src/src/kdfs/hkdf.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAIlE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAalD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,UAAU,CAEZ;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,WAAW,CASb;AAED,qBAAa,UAAW,SAAQ,eAAgB,YAAW,YAAY;IACrE,SAAgB,EAAE,EAAE,KAAK,CAAoB;IAC7C,SAAgB,QAAQ,EAAE,MAAM,CAAK;IACrC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAS;IACvC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAI1C;;IAMK,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI/B,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU;IAY/D,gBAAgB,CACrB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,UAAU;IAaA,OAAO,CAClB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,WAAW,CAAC;IAuBV,MAAM,CACjB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IA+CV,gBAAgB,CAC3B,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAsBV,cAAc,CACzB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,WAAW,CAAC;IAOV,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAQvB,SAAS,CAAC,UAAU,IAAI,IAAI;CAK7B;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH"}
+{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../../../src/src/kdfs/hkdf.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAIlE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAalD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,UAAU,CAEZ;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,eAAe,GAAG,eAAe,GACvC,WAAW,CASb;AAED,qBAAa,UAAW,SAAQ,eAAgB,YAAW,YAAY;IACrE,SAAgB,EAAE,EAAE,KAAK,CAAoB;IAC7C,SAAgB,QAAQ,EAAE,MAAM,CAAK;IACrC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAS;IACvC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAI1C;IACF,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAC/B,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,KAAK,UAAU,CAAC,GACnD,SAAS,CAAC;gBAGZ,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,KAAK,UAAU;IAM9D,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI/B,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU;IAY/D,gBAAgB,CACrB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,UAAU;IAaA,OAAO,CAClB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,WAAW,CAAC;IA6BV,MAAM,CACjB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IA+CV,gBAAgB,CAC3B,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAsBV,cAAc,CACzB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,WAAW,CAAC;IAOV,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,EACtC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAQvB,SAAS,CAAC,UAAU,IAAI,IAAI;CAK7B;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,gCAAgC;IACvB,EAAE,EAAE,KAAK,CAAoB;IACtC,SAAS;IACA,QAAQ,EAAE,MAAM,CAAM;IAC/B,8CAA8C;IACrC,OAAO,EAAE,gBAAgB,CAIhC;CACH"}

package/node_modules/@hpke/common/script/src/kdfs/hkdf.js

@@ -40,7 +40,7 @@
         return new Uint8Array(input).slice().buffer;
     }
     class HkdfNative extends algorithm_js_1.NativeAlgorithm {
-        constructor() {
+        constructor(fallbackExtract) {
             super();
             Object.defineProperty(this, "id", {
                 enumerable: true,
@@ -70,6 +70,13 @@
                     length: 256,
                 }
             });
+            Object.defineProperty(this, "_fallbackExtract", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            this._fallbackExtract = fallbackExtract;
         }
         init(suiteId) {
             this._suiteId = suiteId;
@@ -98,10 +105,13 @@
             const saltBuf = salt.byteLength === 0
                 ? new ArrayBuffer(this.hashSize)
                 : toArrayBuffer(salt);
+            const ikmBuf = toArrayBuffer(ikm);
             if (saltBuf.byteLength !== this.hashSize) {
+                if (this._fallbackExtract !== undefined) {
+                    return this._fallbackExtract(new Uint8Array(saltBuf), new Uint8Array(ikmBuf)).buffer;
+                }
                 throw new errors_js_1.InvalidParamError("The salt length must be the same as the hashSize");
             }
-            const ikmBuf = toArrayBuffer(ikm);
             const key = await this._api.importKey("raw", saltBuf, this.algHash, false, [
                 "sign",
             ]);

package/node_modules/@hpke/common/script/src/kems/dhkemPrimitives/xCurve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"xCurve.d.ts","sourceRoot":"","sources":["../../../../src/src/kems/dhkemPrimitives/xCurve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE;;;;;GAKG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAS;IACzB,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC;IACjC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;gBAGnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,YAAY;IASb,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQlD,oBAAoB,CAC/B,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQd,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQnD,qBAAqB,CAChC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQR,SAAS,CACpB,MAAM,EAAE,KAAK,GAAG,KAAK,EACrB,GAAG,EAAE,WAAW,GAAG,UAAU,EAC7B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,SAAS,CAAC;IAeR,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC;IAgBzC,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,aAAa,CAAC;IA6BlB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAWnD,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAa7D,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,UAAU;CAwCnB"}
+{"version":3,"file":"xCurve.d.ts","sourceRoot":"","sources":["../../../../src/src/kems/dhkemPrimitives/xCurve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE;;;;;GAKG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAS;IACzB,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC;IACjC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;gBAGnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,YAAY;IASb,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQlD,oBAAoB,CAC/B,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQd,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAQnD,qBAAqB,CAChC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IAQR,SAAS,CACpB,MAAM,EAAE,KAAK,GAAG,KAAK,EACrB,GAAG,EAAE,WAAW,GAAG,UAAU,EAC7B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,SAAS,CAAC;IAeR,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC;IA0BzC,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,aAAa,CAAC;IA6BlB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAWnD,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAa7D,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,UAAU;CAwCnB"}

package/node_modules/@hpke/common/script/src/kems/dhkemPrimitives/xCurve.js

@@ -109,9 +109,20 @@
         }
         async generateKeyPair() {
             try {
-                const rawSk = await this._curve.utils.randomSecretKey();
+                let rawSk;
+                try {
+                    rawSk = this._curve.utils.randomSecretKey();
+                }
+                catch {
+                    // Sync crypto not available (e.g., Node.js <= v18 ESM); async fallback
+                    const cryptoApi = await (0, misc_js_1.loadCrypto)();
+                    const fallbackRawSk = new Uint8Array(this._nSk);
+                    cryptoApi.getRandomValues(fallbackRawSk);
+                    rawSk = fallbackRawSk;
+                }
                 const sk = new xCryptoKey_js_1.XCryptoKey(this._algName, rawSk, "private", dhkemPrimitives_js_1.KEM_USAGES);
-                const pk = await this.derivePublicKey(sk);
+                const rawPk = this._curve.getPublicKey(rawSk);
+                const pk = new xCryptoKey_js_1.XCryptoKey(this._algName, rawPk, "public");
                 return { publicKey: pk, privateKey: sk };
             }
             catch (e) {