@talismn/crypto 0.0.0-pr2183-20250930073818 → 0.0.0-pr2275-20251210101511

package/dist/declarations/src/derivation/deriveSr25519.d.ts

@@ -1,4 +1,4 @@
-import { getPublicKey } from "micro-sr25519";
+import { getPublicKey } from "@scure/sr25519";
 import type { Keypair } from "../types";
 export declare const deriveSr25519: (seed: Uint8Array, derivationPath: string) => Keypair;
 export declare const getPublicKeySr25519: typeof getPublicKey;

package/dist/declarations/src/encryption/encryptKemAead.d.ts

@@ -0,0 +1 @@
+export declare const encryptKemAead: (publicKey: Uint8Array, plaintext: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;

package/dist/declarations/src/encryption/index.d.ts

@@ -0,0 +1 @@
+export * from "./encryptKemAead";

package/dist/declarations/src/index.d.ts

@@ -5,3 +5,4 @@ export * from "./address";
 export * from "./utils";
 export * from "./platform";
 export * from "./hashing";
+export * from "./encryption";

package/dist/talismn-crypto.cjs.dev.js

@@ -15,7 +15,10 @@ var scaleTs = require('scale-ts');
 var bip32 = require('@scure/bip32');
 var hmac = require('@noble/hashes/hmac');
 var sha512 = require('@noble/hashes/sha512');
-var microSr25519 = require('micro-sr25519');
+var sr25519 = require('@scure/sr25519');
+var chacha_js = require('@noble/ciphers/chacha.js');
+var utils_js = require('@noble/ciphers/utils.js');
+var mlkem = require('mlkem');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -568,10 +571,13 @@ const getPublicKeySolana = secretKey => {
 const deriveSr25519 = (seed, derivationPath) => {
   const derivations = parseSubstrateDerivations(derivationPath);
   const secretKey = derivations.reduce((secretKey, [type, chainCode]) => {
-    const deriveFn = type === "hard" ? microSr25519.HDKD.secretHard : microSr25519.HDKD.secretSoft;
+    const deriveFn = type === "hard" ? sr25519.HDKD.secretHard : sr25519.HDKD.secretSoft;
     const code = createChainCode(chainCode);
-    return deriveFn(secretKey, code, utils.randomBytes);
-  }, microSr25519.secretFromSeed(seed));
+    if (type === "hard") return deriveFn(secretKey, code);
+
+    // Soft derivations need fresh randomness; @scure/sr25519 expects the bytes, not a generator
+    return deriveFn(secretKey, code, utils.randomBytes(32));
+  }, sr25519.secretFromSeed(seed));
   const publicKey = getPublicKeySr25519(secretKey);
   return {
     type: "sr25519",
@@ -580,7 +586,7 @@ const deriveSr25519 = (seed, derivationPath) => {
     address: addressFromPublicKey(publicKey, "ss58")
   };
 };
-const getPublicKeySr25519 = microSr25519.getPublicKey;
+const getPublicKeySr25519 = sr25519.getPublicKey;
 
 const deriveKeypair = (seed, derivationPath, curve) => {
   switch (curve) {
@@ -700,6 +706,20 @@ const getAccountPlatformFromAddress = address => {
   return getAccountPlatformFromEncoding(encoding);
 };
 
+const encryptKemAead = async (publicKey, plaintext) => {
+  const kem = new mlkem.MlKem768();
+  const [kemCt, sharedSecret] = await kem.encap(publicKey);
+  if (sharedSecret.length !== 32) {
+    throw new Error(`Expected 32-byte shared secret, got ${sharedSecret.length}`);
+  }
+  const nonce = crypto.getRandomValues(new Uint8Array(24));
+  const aead = chacha_js.xchacha20poly1305(sharedSecret, nonce);
+  const aeadCt = aead.encrypt(plaintext);
+  const kemLen = new Uint8Array(2);
+  new DataView(kemLen.buffer).setUint16(0, kemCt.length, true);
+  return utils_js.concatBytes(kemLen, kemCt, nonce, aeadCt);
+};
+
 Object.defineProperty(exports, "base58", {
   enumerable: true,
   get: function () { return base.base58; }
@@ -736,6 +756,7 @@ exports.encodeAddressEthereum = encodeAddressEthereum;
 exports.encodeAddressSolana = encodeAddressSolana;
 exports.encodeAddressSs58 = encodeAddressSs58;
 exports.encodeAnyAddress = encodeAnyAddress;
+exports.encryptKemAead = encryptKemAead;
 exports.entropyToMnemonic = entropyToMnemonic;
 exports.entropyToSeed = entropyToSeed;
 exports.fromBase58Check = fromBase58Check;

package/dist/talismn-crypto.cjs.prod.js

@@ -15,7 +15,10 @@ var scaleTs = require('scale-ts');
 var bip32 = require('@scure/bip32');
 var hmac = require('@noble/hashes/hmac');
 var sha512 = require('@noble/hashes/sha512');
-var microSr25519 = require('micro-sr25519');
+var sr25519 = require('@scure/sr25519');
+var chacha_js = require('@noble/ciphers/chacha.js');
+var utils_js = require('@noble/ciphers/utils.js');
+var mlkem = require('mlkem');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -568,10 +571,13 @@ const getPublicKeySolana = secretKey => {
 const deriveSr25519 = (seed, derivationPath) => {
   const derivations = parseSubstrateDerivations(derivationPath);
   const secretKey = derivations.reduce((secretKey, [type, chainCode]) => {
-    const deriveFn = type === "hard" ? microSr25519.HDKD.secretHard : microSr25519.HDKD.secretSoft;
+    const deriveFn = type === "hard" ? sr25519.HDKD.secretHard : sr25519.HDKD.secretSoft;
     const code = createChainCode(chainCode);
-    return deriveFn(secretKey, code, utils.randomBytes);
-  }, microSr25519.secretFromSeed(seed));
+    if (type === "hard") return deriveFn(secretKey, code);
+
+    // Soft derivations need fresh randomness; @scure/sr25519 expects the bytes, not a generator
+    return deriveFn(secretKey, code, utils.randomBytes(32));
+  }, sr25519.secretFromSeed(seed));
   const publicKey = getPublicKeySr25519(secretKey);
   return {
     type: "sr25519",
@@ -580,7 +586,7 @@ const deriveSr25519 = (seed, derivationPath) => {
     address: addressFromPublicKey(publicKey, "ss58")
   };
 };
-const getPublicKeySr25519 = microSr25519.getPublicKey;
+const getPublicKeySr25519 = sr25519.getPublicKey;
 
 const deriveKeypair = (seed, derivationPath, curve) => {
   switch (curve) {
@@ -700,6 +706,20 @@ const getAccountPlatformFromAddress = address => {
   return getAccountPlatformFromEncoding(encoding);
 };
 
+const encryptKemAead = async (publicKey, plaintext) => {
+  const kem = new mlkem.MlKem768();
+  const [kemCt, sharedSecret] = await kem.encap(publicKey);
+  if (sharedSecret.length !== 32) {
+    throw new Error(`Expected 32-byte shared secret, got ${sharedSecret.length}`);
+  }
+  const nonce = crypto.getRandomValues(new Uint8Array(24));
+  const aead = chacha_js.xchacha20poly1305(sharedSecret, nonce);
+  const aeadCt = aead.encrypt(plaintext);
+  const kemLen = new Uint8Array(2);
+  new DataView(kemLen.buffer).setUint16(0, kemCt.length, true);
+  return utils_js.concatBytes(kemLen, kemCt, nonce, aeadCt);
+};
+
 Object.defineProperty(exports, "base58", {
   enumerable: true,
   get: function () { return base.base58; }
@@ -736,6 +756,7 @@ exports.encodeAddressEthereum = encodeAddressEthereum;
 exports.encodeAddressSolana = encodeAddressSolana;
 exports.encodeAddressSs58 = encodeAddressSs58;
 exports.encodeAnyAddress = encodeAnyAddress;
+exports.encryptKemAead = encryptKemAead;
 exports.entropyToMnemonic = entropyToMnemonic;
 exports.entropyToSeed = entropyToSeed;
 exports.fromBase58Check = fromBase58Check;

package/dist/talismn-crypto.esm.js

@@ -15,7 +15,10 @@ import { Tuple, str, Bytes, u32 } from 'scale-ts';
 import { HDKey } from '@scure/bip32';
 import { hmac } from '@noble/hashes/hmac';
 import { sha512 } from '@noble/hashes/sha512';
-import { getPublicKey, HDKD, secretFromSeed } from 'micro-sr25519';
+import { getPublicKey, HDKD, secretFromSeed } from '@scure/sr25519';
+import { xchacha20poly1305 } from '@noble/ciphers/chacha.js';
+import { concatBytes } from '@noble/ciphers/utils.js';
+import { MlKem768 } from 'mlkem';
 
 const pbkdf2 = async (hash, entropy, salt, iterations, outputLenBytes) => {
   // NOTE: react-native-quick-crypto (our `global.crypto` polyfill on Talisman Mobile) doesn't support `crypto.subtle.deriveKey`.
@@ -566,7 +569,10 @@ const deriveSr25519 = (seed, derivationPath) => {
   const secretKey = derivations.reduce((secretKey, [type, chainCode]) => {
     const deriveFn = type === "hard" ? HDKD.secretHard : HDKD.secretSoft;
     const code = createChainCode(chainCode);
-    return deriveFn(secretKey, code, randomBytes);
+    if (type === "hard") return deriveFn(secretKey, code);
+
+    // Soft derivations need fresh randomness; @scure/sr25519 expects the bytes, not a generator
+    return deriveFn(secretKey, code, randomBytes(32));
   }, secretFromSeed(seed));
   const publicKey = getPublicKeySr25519(secretKey);
   return {
@@ -696,4 +702,18 @@ const getAccountPlatformFromAddress = address => {
   return getAccountPlatformFromEncoding(encoding);
 };
 
-export { DEV_MNEMONIC_ETHEREUM, DEV_MNEMONIC_POLKADOT, addressEncodingFromCurve, addressFromMnemonic, addressFromPublicKey, blake2b256, blake2b512, blake3, checksumEthereumAddress, decodeSs58Address, deriveKeypair, detectAddressEncoding, encodeAddressEthereum, encodeAddressSolana, encodeAddressSs58, encodeAnyAddress, entropyToMnemonic, entropyToSeed, fromBase58Check, fromBech32, fromBech32m, generateMnemonic, getAccountPlatformFromAddress, getAccountPlatformFromCurve, getAccountPlatformFromEncoding, getDevSeed, getPublicKeyFromSecret, getSafeHash, isAddressEqual, isAddressValid, isBase58CheckAddress, isBech32Address, isBech32mAddress, isBitcoinAddress, isEthereumAddress, isSolanaAddress, isSs58Address, isValidDerivationPath, isValidMnemonic, mnemonicToEntropy, normalizeAddress, parseSecretKey, pbkdf2, removeHexPrefix };
+const encryptKemAead = async (publicKey, plaintext) => {
+  const kem = new MlKem768();
+  const [kemCt, sharedSecret] = await kem.encap(publicKey);
+  if (sharedSecret.length !== 32) {
+    throw new Error(`Expected 32-byte shared secret, got ${sharedSecret.length}`);
+  }
+  const nonce = crypto.getRandomValues(new Uint8Array(24));
+  const aead = xchacha20poly1305(sharedSecret, nonce);
+  const aeadCt = aead.encrypt(plaintext);
+  const kemLen = new Uint8Array(2);
+  new DataView(kemLen.buffer).setUint16(0, kemCt.length, true);
+  return concatBytes(kemLen, kemCt, nonce, aeadCt);
+};
+
+export { DEV_MNEMONIC_ETHEREUM, DEV_MNEMONIC_POLKADOT, addressEncodingFromCurve, addressFromMnemonic, addressFromPublicKey, blake2b256, blake2b512, blake3, checksumEthereumAddress, decodeSs58Address, deriveKeypair, detectAddressEncoding, encodeAddressEthereum, encodeAddressSolana, encodeAddressSs58, encodeAnyAddress, encryptKemAead, entropyToMnemonic, entropyToSeed, fromBase58Check, fromBech32, fromBech32m, generateMnemonic, getAccountPlatformFromAddress, getAccountPlatformFromCurve, getAccountPlatformFromEncoding, getDevSeed, getPublicKeyFromSecret, getSafeHash, isAddressEqual, isAddressValid, isBase58CheckAddress, isBech32Address, isBech32mAddress, isBitcoinAddress, isEthereumAddress, isSolanaAddress, isSs58Address, isValidDerivationPath, isValidMnemonic, mnemonicToEntropy, normalizeAddress, parseSecretKey, pbkdf2, removeHexPrefix };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@talismn/crypto",
-  "version": "0.0.0-pr2183-20250930073818",
+  "version": "0.0.0-pr2275-20251210101511",
   "author": "Talisman",
   "homepage": "https://talisman.xyz",
   "license": "GPL-3.0-or-later",
@@ -21,14 +21,16 @@
     "node": ">=20"
   },
   "dependencies": {
+    "@noble/ciphers": "2.0.1",
     "@noble/curves": "1.9.2",
     "@noble/hashes": "1.8.0",
     "@scure/base": "1.2.6",
     "@scure/bip32": "1.7.0",
     "@scure/bip39": "1.5.4",
+    "@scure/sr25519": "1.0.0",
     "bech32": "2.0.0",
     "bs58check": "4.0.0",
-    "micro-sr25519": "0.1.3",
+    "mlkem": "2.5.0",
     "scale-ts": "1.6.1"
   },
   "devDependencies": {
@@ -37,8 +39,8 @@
     "jest": "^29.7.0",
     "ts-jest": "^29.2.5",
     "typescript": "^5.6.3",
-    "@talismn/tsconfig": "0.0.0-pr2183-20250930073818",
-    "@talismn/eslint-config": "0.0.3"
+    "@talismn/eslint-config": "0.0.3",
+    "@talismn/tsconfig": "0.0.3"
   },
   "preconstruct": {
     "entrypoints": [