@suveren/gateway 0.40.0 → 0.41.0

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/cipherSuiteParams.d.ts

@@ -0,0 +1,13 @@
+import type { AeadId, AeadInterface, KdfId, KdfInterface, KemId, KemInterface } from "@hpke/common";
+/**
+ * The parameters used to configure the `CipherSuite`.
+ */
+export interface CipherSuiteParams {
+    /** The KEM (Key Encapsulation Mechanism) identifier or the KEM object. */
+    kem: KemId | KemInterface;
+    /** The KDF (Key Derivation Function) identifier or the KDF object. */
+    kdf: KdfId | KdfInterface;
+    /** The AEAD (Authenticated Encryption with Addtional Data) identifier or the AEAD object. */
+    aead: AeadId | AeadInterface;
+}
+//# sourceMappingURL=cipherSuiteParams.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/cipherSuiteParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cipherSuiteParams.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/cipherSuiteParams.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EACN,aAAa,EACb,KAAK,EACL,YAAY,EACZ,KAAK,EACL,YAAY,EACb,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,GAAG,EAAE,KAAK,GAAG,YAAY,CAAC;IAE1B,sEAAsE;IACtE,GAAG,EAAE,KAAK,GAAG,YAAY,CAAC;IAE1B,6FAA6F;IAC7F,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;CAC9B"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/cipherSuiteParams.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/encapsulator.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The sender specific interface for an encryption context.
+ */
+export interface Encapsulator {
+    /** The encapsulated key generated by the sender. */
+    enc: ArrayBuffer;
+}
+//# sourceMappingURL=encapsulator.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/encapsulator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encapsulator.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/encapsulator.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,GAAG,EAAE,WAAW,CAAC;CAClB"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/encapsulator.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/encryptionContext.d.ts

@@ -0,0 +1,40 @@
+import type { Exporter } from "./exporter.js";
+/**
+ * The encryption context interface for a recipient and a sender.
+ */
+export interface EncryptionContext extends Exporter {
+    /**
+     * Encrypts data.
+     *
+     * If the error occurred, throws `SealError` | `MessageLimitReachedError`.
+     *
+     * @param data A plain text as bytes to be encrypted.
+     * @param aad Additional authenticated data as bytes fed by an application.
+     * @returns A cipher text as bytes.
+     * @throws {@link MessageLimitReachedError}, {@link SealError}
+     */
+    seal(data: ArrayBufferLike | ArrayBufferView, aad?: ArrayBufferLike | ArrayBufferView): Promise<ArrayBuffer>;
+    /**
+     * Decrypts data.
+     *
+     * If the error occurred, throws `OpenError`.
+     *
+     * @param data An encrypted text as bytes to be decrypted.
+     * @param aad Additional authenticated data as bytes fed by an application.
+     * @returns A decrypted plain text as bytes.
+     * @throws {@link OpenError}
+     */
+    open(data: ArrayBufferLike | ArrayBufferView, aad?: ArrayBufferLike | ArrayBufferView): Promise<ArrayBuffer>;
+}
+/**
+ * The recipient encryption context.
+ */
+export type RecipientContext = EncryptionContext;
+/**
+ * The sender encryption context.
+ */
+export interface SenderContext extends EncryptionContext {
+    /** The encapsulated key generated by the sender. */
+    enc: ArrayBuffer;
+}
+//# sourceMappingURL=encryptionContext.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/encryptionContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptionContext.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/encryptionContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,QAAQ;IACjD;;;;;;;;;OASG;IACH,IAAI,CACF,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,CAAC,EAAE,eAAe,GAAG,eAAe,GACtC,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB;;;;;;;;;OASG;IACH,IAAI,CACF,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,CAAC,EAAE,eAAe,GAAG,eAAe,GACtC,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,oDAAoD;IACpD,GAAG,EAAE,WAAW,CAAC;CAClB"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/encryptionContext.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/exporter.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The exporter interface.
+ */
+export interface Exporter {
+    /**
+     * Exports a secret using a variable-length pseudorandom function.
+     *
+     * If the error occurred, throws `ExportError`.
+     *
+     * @param exporterContext An exporter context string as bytes. The maximum length is 128 bytes.
+     * @param len A desired length in bytes of the output secret.
+     * @returns A secret string as bytes.
+     * @throws {@link ExportError}
+     */
+    export(exporterContext: ArrayBufferLike | ArrayBufferView, len: number): Promise<ArrayBuffer>;
+}
+//# sourceMappingURL=exporter.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/exporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exporter.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/exporter.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;;;;;OASG;IACH,MAAM,CACJ,eAAe,EAAE,eAAe,GAAG,eAAe,EAClD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/exporter.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/keyInfo.d.ts

@@ -0,0 +1,7 @@
+import type { AeadEncryptionContext } from "@hpke/common";
+export interface KeyInfo {
+    key: AeadEncryptionContext;
+    baseNonce: Uint8Array;
+    seq: number;
+}
+//# sourceMappingURL=keyInfo.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/keyInfo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyInfo.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/keyInfo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,qBAAqB,CAAC;IAC3B,SAAS,EAAE,UAAU,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/keyInfo.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/responses.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The response of the single-shot seal API.
+ */
+export interface CipherSuiteSealResponse {
+    /** The ciphertext as bytes. */
+    ct: ArrayBuffer;
+    /** The encapsulated key. */
+    enc: ArrayBuffer;
+}
+//# sourceMappingURL=responses.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../../src/src/interfaces/responses.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,+BAA+B;IAC/B,EAAE,EAAE,WAAW,CAAC;IAChB,4BAA4B;IAC5B,GAAG,EAAE,WAAW,CAAC;CAClB"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/interfaces/responses.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemNative.d.ts

@@ -0,0 +1,26 @@
+import { Dhkem, KemId } from "@hpke/common";
+export declare class DhkemP256HkdfSha256Native extends Dhkem {
+    id: KemId;
+    secretSize: number;
+    encSize: number;
+    publicKeySize: number;
+    privateKeySize: number;
+    constructor();
+}
+export declare class DhkemP384HkdfSha384Native extends Dhkem {
+    id: KemId;
+    secretSize: number;
+    encSize: number;
+    publicKeySize: number;
+    privateKeySize: number;
+    constructor();
+}
+export declare class DhkemP521HkdfSha512Native extends Dhkem {
+    id: KemId;
+    secretSize: number;
+    encSize: number;
+    publicKeySize: number;
+    privateKeySize: number;
+    constructor();
+}
+//# sourceMappingURL=dhkemNative.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemNative.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dhkemNative.d.ts","sourceRoot":"","sources":["../../../src/src/kems/dhkemNative.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAKL,KAAK,EACN,MAAM,cAAc,CAAC;AAEtB,qBAAa,yBAA0B,SAAQ,KAAK;IACzC,EAAE,EAAE,KAAK,CAA6B;IACtC,UAAU,EAAE,MAAM,CAAM;IACxB,OAAO,EAAE,MAAM,CAAM;IACrB,aAAa,EAAE,MAAM,CAAM;IAC3B,cAAc,EAAE,MAAM,CAAM;;CAOtC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACzC,EAAE,EAAE,KAAK,CAA6B;IACtC,UAAU,EAAE,MAAM,CAAM;IACxB,OAAO,EAAE,MAAM,CAAM;IACrB,aAAa,EAAE,MAAM,CAAM;IAC3B,cAAc,EAAE,MAAM,CAAM;;CAOtC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACzC,EAAE,EAAE,KAAK,CAA6B;IACtC,UAAU,EAAE,MAAM,CAAM;IACxB,OAAO,EAAE,MAAM,CAAO;IACtB,aAAa,EAAE,MAAM,CAAO;IAC5B,cAAc,EAAE,MAAM,CAAM;;CAOtC"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemNative.js

@@ -0,0 +1,112 @@
+import { Dhkem, Ec, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, KemId, } from "@hpke/common";
+export class DhkemP256HkdfSha256Native extends Dhkem {
+    constructor() {
+        const kdf = new HkdfSha256Native();
+        const prim = new Ec(KemId.DhkemP256HkdfSha256, kdf);
+        super(KemId.DhkemP256HkdfSha256, prim, kdf);
+        Object.defineProperty(this, "id", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: KemId.DhkemP256HkdfSha256
+        });
+        Object.defineProperty(this, "secretSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 32
+        });
+        Object.defineProperty(this, "encSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 65
+        });
+        Object.defineProperty(this, "publicKeySize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 65
+        });
+        Object.defineProperty(this, "privateKeySize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 32
+        });
+    }
+}
+export class DhkemP384HkdfSha384Native extends Dhkem {
+    constructor() {
+        const kdf = new HkdfSha384Native();
+        const prim = new Ec(KemId.DhkemP384HkdfSha384, kdf);
+        super(KemId.DhkemP384HkdfSha384, prim, kdf);
+        Object.defineProperty(this, "id", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: KemId.DhkemP384HkdfSha384
+        });
+        Object.defineProperty(this, "secretSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 48
+        });
+        Object.defineProperty(this, "encSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 97
+        });
+        Object.defineProperty(this, "publicKeySize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 97
+        });
+        Object.defineProperty(this, "privateKeySize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 48
+        });
+    }
+}
+export class DhkemP521HkdfSha512Native extends Dhkem {
+    constructor() {
+        const kdf = new HkdfSha512Native();
+        const prim = new Ec(KemId.DhkemP521HkdfSha512, kdf);
+        super(KemId.DhkemP521HkdfSha512, prim, kdf);
+        Object.defineProperty(this, "id", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: KemId.DhkemP521HkdfSha512
+        });
+        Object.defineProperty(this, "secretSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 64
+        });
+        Object.defineProperty(this, "encSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 133
+        });
+        Object.defineProperty(this, "publicKeySize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 133
+        });
+        Object.defineProperty(this, "privateKeySize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 64
+        });
+    }
+}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemPrimitives/x25519.d.ts

@@ -0,0 +1,24 @@
+import type { DhkemPrimitives, KdfInterface } from "@hpke/common";
+import { NativeAlgorithm } from "@hpke/common";
+export declare class X25519 extends NativeAlgorithm implements DhkemPrimitives {
+    private _hkdf;
+    private _alg;
+    private _nPk;
+    private _nSk;
+    private _nDh;
+    private _pkcs8AlgId;
+    constructor(hkdf: KdfInterface);
+    serializePublicKey(key: CryptoKey): Promise<ArrayBuffer>;
+    deserializePublicKey(key: ArrayBufferLike | ArrayBufferView): Promise<CryptoKey>;
+    serializePrivateKey(key: CryptoKey): Promise<ArrayBuffer>;
+    deserializePrivateKey(key: ArrayBufferLike | ArrayBufferView): Promise<CryptoKey>;
+    importKey(format: "raw" | "jwk", key: ArrayBuffer | JsonWebKey, isPublic: boolean): Promise<CryptoKey>;
+    generateKeyPair(): Promise<CryptoKeyPair>;
+    deriveKeyPair(ikm: ArrayBufferLike | ArrayBufferView): Promise<CryptoKeyPair>;
+    derivePublicKey(key: CryptoKey): Promise<CryptoKey>;
+    dh(sk: CryptoKey, pk: CryptoKey): Promise<ArrayBuffer>;
+    private _importRawKey;
+    private _importJWK;
+    private _deserializePkcs8Key;
+}
+//# sourceMappingURL=x25519.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemPrimitives/x25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519.d.ts","sourceRoot":"","sources":["../../../../src/src/kems/dhkemPrimitives/x25519.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAElE,OAAO,EAQL,eAAe,EAIhB,MAAM,cAAc,CAAC;AAgBtB,qBAAa,MAAO,SAAQ,eAAgB,YAAW,eAAe;IACpE,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,WAAW,CAAa;gBAEpB,IAAI,EAAE,YAAY;IAUjB,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IASxD,oBAAoB,CAC/B,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IASR,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAazD,qBAAqB,CAChC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IASR,SAAS,CACpB,MAAM,EAAE,KAAK,GAAG,KAAK,EACrB,GAAG,EAAE,WAAW,GAAG,UAAU,EAC7B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,SAAS,CAAC;IAgBR,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC;IAazC,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,aAAa,CAAC;IA2BZ,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IA4CnD,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;YAiBrD,aAAa;YAsBb,UAAU;YAkCV,oBAAoB;CAcnC"}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemPrimitives/x25519.js

@@ -0,0 +1,214 @@
+import { base64UrlToBytes, DeriveKeyPairError, DeserializeError, EMPTY, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, NativeAlgorithm, NotSupportedError, SerializeError, toArrayBuffer, } from "@hpke/common";
+const ALG_NAME = "X25519";
+// deno-fmt-ignore
+const PKCS8_ALG_ID_X25519 = new Uint8Array([
+    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06,
+    0x03, 0x2b, 0x65, 0x6e, 0x04, 0x22, 0x04, 0x20,
+]);
+const BASE_POINT_X25519 = /* @__PURE__ */ (() => {
+    const p = new Uint8Array(32);
+    p[0] = 9;
+    return p;
+})();
+export class X25519 extends NativeAlgorithm {
+    constructor(hkdf) {
+        super();
+        Object.defineProperty(this, "_hkdf", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "_alg", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "_nPk", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "_nSk", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "_nDh", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "_pkcs8AlgId", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this._alg = { name: ALG_NAME };
+        this._hkdf = hkdf;
+        this._nPk = 32;
+        this._nSk = 32;
+        this._nDh = 32;
+        this._pkcs8AlgId = PKCS8_ALG_ID_X25519;
+    }
+    async serializePublicKey(key) {
+        await this._setup();
+        try {
+            return await this._api.exportKey("raw", key);
+        }
+        catch (e) {
+            throw new SerializeError(e);
+        }
+    }
+    async deserializePublicKey(key) {
+        await this._setup();
+        try {
+            return await this._importRawKey(toArrayBuffer(key), true);
+        }
+        catch (e) {
+            throw new DeserializeError(e);
+        }
+    }
+    async serializePrivateKey(key) {
+        await this._setup();
+        try {
+            const jwk = await this._api.exportKey("jwk", key);
+            if (!("d" in jwk)) {
+                throw new Error("Not private key");
+            }
+            return base64UrlToBytes(jwk["d"]).buffer;
+        }
+        catch (e) {
+            throw new SerializeError(e);
+        }
+    }
+    async deserializePrivateKey(key) {
+        await this._setup();
+        try {
+            return await this._importRawKey(toArrayBuffer(key), false);
+        }
+        catch (e) {
+            throw new DeserializeError(e);
+        }
+    }
+    async importKey(format, key, isPublic) {
+        await this._setup();
+        try {
+            if (format === "raw") {
+                return await this._importRawKey(key, isPublic);
+            }
+            // jwk
+            if (key instanceof ArrayBuffer) {
+                throw new Error("Invalid jwk key format");
+            }
+            return await this._importJWK(key, isPublic);
+        }
+        catch (e) {
+            throw new DeserializeError(e);
+        }
+    }
+    async generateKeyPair() {
+        await this._setup();
+        try {
+            return await this._api.generateKey(ALG_NAME, true, KEM_USAGES);
+        }
+        catch (e) {
+            throw new NotSupportedError(e);
+        }
+    }
+    async deriveKeyPair(ikm) {
+        await this._setup();
+        try {
+            const rawIkm = toArrayBuffer(ikm);
+            const dkpPrk = await this._hkdf.labeledExtract(EMPTY, LABEL_DKP_PRK, new Uint8Array(rawIkm));
+            const rawSk = await this._hkdf.labeledExpand(dkpPrk, LABEL_SK, EMPTY, this._nSk);
+            const rawSkBytes = new Uint8Array(rawSk);
+            const sk = await this._deserializePkcs8Key(rawSkBytes);
+            rawSkBytes.fill(0);
+            return {
+                privateKey: sk,
+                publicKey: await this.derivePublicKey(sk),
+            };
+        }
+        catch (e) {
+            throw new DeriveKeyPairError(e);
+        }
+    }
+    async derivePublicKey(key) {
+        await this._setup();
+        try {
+            const jwk = await this._api.exportKey("jwk", key);
+            delete jwk["d"];
+            delete jwk["key_ops"];
+            return await this._api.importKey("jwk", jwk, this._alg, true, []);
+        }
+        catch {
+            try {
+                // Firefox fails to export JWK from some imported X25519 private keys.
+                const bp = await this._api.importKey("raw", BASE_POINT_X25519.buffer, this._alg, true, []);
+                const bits = await this._api.deriveBits({
+                    name: ALG_NAME,
+                    public: bp,
+                }, key, this._nPk * 8);
+                return await this._api.importKey("raw", bits, this._alg, true, []);
+            }
+            catch (e) {
+                throw new DeserializeError(e);
+            }
+        }
+    }
+    async dh(sk, pk) {
+        await this._setup();
+        try {
+            const bits = await this._api.deriveBits({
+                name: ALG_NAME,
+                public: pk,
+            }, sk, this._nDh * 8);
+            return bits;
+        }
+        catch (e) {
+            throw new SerializeError(e);
+        }
+    }
+    async _importRawKey(key, isPublic) {
+        if (isPublic && key.byteLength !== this._nPk) {
+            throw new Error("Invalid public key for the ciphersuite");
+        }
+        if (!isPublic && key.byteLength !== this._nSk) {
+            throw new Error("Invalid private key for the ciphersuite");
+        }
+        if (isPublic) {
+            return await this._api.importKey("raw", key, this._alg, true, []);
+        }
+        return await this._deserializePkcs8Key(new Uint8Array(key));
+    }
+    async _importJWK(key, isPublic) {
+        if (typeof key.kty === "undefined" || key.kty !== "OKP") {
+            throw new Error(`Invalid kty: ${key.crv}`);
+        }
+        if (typeof key.crv === "undefined" || key.crv !== ALG_NAME) {
+            throw new Error(`Invalid crv: ${key.crv}`);
+        }
+        if (isPublic) {
+            if (typeof key.d !== "undefined") {
+                throw new Error("Invalid key: `d` should not be set");
+            }
+            return await this._api.importKey("jwk", key, this._alg, true, []);
+        }
+        if (typeof key.d === "undefined") {
+            throw new Error("Invalid key: `d` not found");
+        }
+        return await this._api.importKey("jwk", key, this._alg, true, KEM_USAGES);
+    }
+    async _deserializePkcs8Key(k) {
+        const pkcs8Key = new Uint8Array(this._pkcs8AlgId.length + k.length);
+        pkcs8Key.set(this._pkcs8AlgId, 0);
+        pkcs8Key.set(k, this._pkcs8AlgId.length);
+        return await this._api.importKey("pkcs8", pkcs8Key, this._alg, true, KEM_USAGES);
+    }
+}

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemPrimitives/x448.d.ts

@@ -0,0 +1,24 @@
+import type { DhkemPrimitives, KdfInterface } from "@hpke/common";
+import { NativeAlgorithm } from "@hpke/common";
+export declare class X448 extends NativeAlgorithm implements DhkemPrimitives {
+    private _hkdf;
+    private _alg;
+    private _nPk;
+    private _nSk;
+    private _nDh;
+    private _pkcs8AlgId;
+    constructor(hkdf: KdfInterface);
+    serializePublicKey(key: CryptoKey): Promise<ArrayBuffer>;
+    deserializePublicKey(key: ArrayBufferLike | ArrayBufferView): Promise<CryptoKey>;
+    serializePrivateKey(key: CryptoKey): Promise<ArrayBuffer>;
+    deserializePrivateKey(key: ArrayBufferLike | ArrayBufferView): Promise<CryptoKey>;
+    importKey(format: "raw" | "jwk", key: ArrayBuffer | JsonWebKey, isPublic: boolean): Promise<CryptoKey>;
+    generateKeyPair(): Promise<CryptoKeyPair>;
+    deriveKeyPair(ikm: ArrayBufferLike | ArrayBufferView): Promise<CryptoKeyPair>;
+    derivePublicKey(key: CryptoKey): Promise<CryptoKey>;
+    dh(sk: CryptoKey, pk: CryptoKey): Promise<ArrayBuffer>;
+    private _importRawKey;
+    private _importJWK;
+    private _deserializePkcs8Key;
+}
+//# sourceMappingURL=x448.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/esm/src/kems/dhkemPrimitives/x448.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x448.d.ts","sourceRoot":"","sources":["../../../../src/src/kems/dhkemPrimitives/x448.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAElE,OAAO,EAQL,eAAe,EAIhB,MAAM,cAAc,CAAC;AAgBtB,qBAAa,IAAK,SAAQ,eAAgB,YAAW,eAAe;IAClE,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,WAAW,CAAa;gBAEpB,IAAI,EAAE,YAAY;IAUjB,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IASxD,oBAAoB,CAC/B,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IASR,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAazD,qBAAqB,CAChC,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,SAAS,CAAC;IASR,SAAS,CACpB,MAAM,EAAE,KAAK,GAAG,KAAK,EACrB,GAAG,EAAE,WAAW,GAAG,UAAU,EAC7B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,SAAS,CAAC;IAgBR,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC;IAazC,aAAa,CACxB,GAAG,EAAE,eAAe,GAAG,eAAe,GACrC,OAAO,CAAC,aAAa,CAAC;IA2BZ,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IA4CnD,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;YAiBrD,aAAa;YAsBb,UAAU;YAkCV,oBAAoB;CAcnC"}