@tstdl/base 0.93.177 → 0.93.178

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tstdl/base",
-  "version": "0.93.177",
+  "version": "0.93.178",
   "author": "Patrick Hein",
   "publishConfig": {
     "access": "public"

package/utils/cryptography.d.ts

@@ -86,6 +86,12 @@ export declare function importSymmetricKey(algorithm: SymmetricAlgorithm, length
  * @param extractable whether the key can be used for exportKey
  */
 export declare function importEcdsaKey(curve: EcdsaCurve, key: Key | string, extractable?: boolean): Promise<CryptoKey>;
+/**
+ * Import a HKDF CryptoKey
+ * @param key binary key
+ * @param extractable whether the key can be used for exportKey
+ */
+export declare function importHkdfKey(key: BinaryData<ArrayBuffer> | string, extractable?: boolean): Promise<CryptoKey>;
 /**
  * Import a pbkdf2 CryptoKey
  * @param key binary key
@@ -99,6 +105,15 @@ export declare function importPbkdf2Key(key: BinaryData<ArrayBuffer> | string, e
  * @param usages whether to generate a key for signing, verifiying or both. Defaults to both
  */
 export declare function generateEcdsaKey(curve: EcdsaCurve, extractable?: boolean, usages?: TypedExtract<KeyUsage, 'sign' | 'verify'>[]): Promise<CryptoKeyPair>;
+/**
+ * Convenience wrapper for HKDF derivation
+ * @param baseKey The imported HKDF key
+ * @param lengths Array of lengths for each derived secret
+ * @param info Contextual string to prevent different apps from deriving the same keys
+ * @param salt Optional salt (usually empty if the input key is high-entropy)
+ * @param hash Hash algorithm to use
+ */
+export declare function deriveHkdfSecrets<const Lengths extends readonly number[]>(baseKey: CryptoKey, lengths: Lengths, info?: string | BinaryData<ArrayBuffer>, salt?: BinaryData<ArrayBuffer>, hash?: HashAlgorithm): Promise<Readonly<import("type-fest").If<import("type-fest").IsAny<Lengths["length"]>, Uint8Array<ArrayBuffer>[], import("type-fest").If<import("type-fest").IsNever<Lengths["length"]>, [], number extends import("type-fest").If<import("type-fest").IsNegative<Lengths["length"]>, 0, Lengths["length"]> ? Uint8Array<ArrayBuffer>[] : import("type-fest").If<import("type-fest").IsNegative<Lengths["length"]>, 0, Lengths["length"]> extends infer T ? T extends import("type-fest").If<import("type-fest").IsNegative<Lengths["length"]>, 0, Lengths["length"]> ? T extends 0 ? [] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 1 ? [Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 2 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 3 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 4 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 5 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 6 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 7 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 8 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 9 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : number extends T ? Uint8Array<ArrayBuffer>[] : T extends 10 ? [Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>] : /*elided*/ any : never : never>>>>;
 /**
  * Generates a pbkdf2 CryptoKey
  * @param extractable whether the key can be used for exportKey

package/utils/cryptography.js

@@ -125,6 +125,15 @@ export async function importEcdsaKey(curve, key, extractable = false) {
     }
     return await globalThis.crypto.subtle.importKey('jwk', binaryKey, { name: 'ECDSA', namedCurve: curve }, extractable, ['verify']);
 }
+/**
+ * Import a HKDF CryptoKey
+ * @param key binary key
+ * @param extractable whether the key can be used for exportKey
+ */
+export async function importHkdfKey(key, extractable = false) {
+    const binaryKey = isString(key) ? encodeUtf8(key) : key;
+    return await globalThis.crypto.subtle.importKey('raw', binaryKey, { name: 'HKDF' }, extractable, ['deriveKey', 'deriveBits']);
+}
 /**
  * Import a pbkdf2 CryptoKey
  * @param key binary key
@@ -143,6 +152,19 @@ export async function importPbkdf2Key(key, extractable = false) {
 export async function generateEcdsaKey(curve, extractable = false, usages = ['sign', 'verify']) {
     return await globalThis.crypto.subtle.generateKey({ name: 'ECDSA', namedCurve: curve }, extractable, usages);
 }
+/**
+ * Convenience wrapper for HKDF derivation
+ * @param baseKey The imported HKDF key
+ * @param lengths Array of lengths for each derived secret
+ * @param info Contextual string to prevent different apps from deriving the same keys
+ * @param salt Optional salt (usually empty if the input key is high-entropy)
+ * @param hash Hash algorithm to use
+ */
+export async function deriveHkdfSecrets(baseKey, lengths, info = '', salt = new Uint8Array(), hash = 'SHA-512') {
+    const infoBytes = isString(info) ? encodeUtf8(info) : info;
+    const algorithm = { name: 'HKDF', hash, salt, info: infoBytes };
+    return await deriveBytesMultiple(algorithm, baseKey, lengths);
+}
 /**
  * Generates a pbkdf2 CryptoKey
  * @param extractable whether the key can be used for exportKey