@vercel/cli-auth 0.3.12 → 0.3.14-snapshot-dd15927e8ded

package/linux-tpm.ts

@@ -0,0 +1,371 @@
+// Seals a secret with this Linux machine's TPM 2.0, by sending TPM commands
+// to the kernel's resource manager (`/dev/tpmrm0`) directly, so there's no
+// native code or library (tpm2-tss) to install.
+//
+// The secret goes into a sealed data object under the owner hierarchy's
+// storage key. The TPM derives that storage key from a seed that never
+// leaves it, the same way every time, so nothing is kept in the TPM: what we
+// save is the object's public area and its private area, which the TPM
+// encrypted with that storage key and which only this TPM can load.
+//
+// The commands use password sessions with empty passwords, without
+// parameter encryption, so the secret crosses the bus between the CPU and a
+// discrete TPM in the clear when it's sealed and unsealed. That's within
+// what sealing protects against (a copied login), not a physical attacker.
+//
+// Buffers that held the secret are zeroed once they're used. That's best
+// effort: JavaScript can keep other copies, and the caller turns the secret
+// into a key.
+
+import { closeSync, existsSync, openSync, readSync, writeSync } from 'node:fs';
+
+export const TPM_DEVICE = '/dev/tpmrm0';
+
+/** A connection to a TPM: sends a command and returns its response. */
+export interface TpmConnection {
+  transmit(command: Buffer): Buffer;
+  close(): void;
+}
+
+export type ConnectTpm = () => TpmConnection;
+
+// Constants from the TPM 2.0 Library spec, Part 2.
+const TPM_ST_NO_SESSIONS = 0x8001;
+const TPM_ST_SESSIONS = 0x8002;
+const TPM_CC_CREATE_PRIMARY = 0x131;
+const TPM_CC_CREATE = 0x153;
+const TPM_CC_LOAD = 0x157;
+const TPM_CC_UNSEAL = 0x15e;
+const TPM_CC_FLUSH_CONTEXT = 0x165;
+const TPM_RH_OWNER = 0x40000001;
+const TPM_RS_PW = 0x40000009;
+const TPM_ALG_AES = 0x0006;
+const TPM_ALG_KEYEDHASH = 0x0008;
+const TPM_ALG_SHA256 = 0x000b;
+const TPM_ALG_NULL = 0x0010;
+const TPM_ALG_ECC = 0x0023;
+const TPM_ALG_CFB = 0x0043;
+const TPM_ECC_NIST_P256 = 0x0003;
+const FIXED_TPM = 1 << 1;
+const FIXED_PARENT = 1 << 4;
+const SENSITIVE_DATA_ORIGIN = 1 << 5;
+const USER_WITH_AUTH = 1 << 6;
+const NO_DA = 1 << 10;
+const RESTRICTED = 1 << 16;
+const DECRYPT = 1 << 17;
+// The TPM is busy: send the command again.
+const TPM_RC_RETRY = 0x922;
+const TPM_RC_YIELDED = 0x908;
+const TPM_RC_TESTING = 0x90a;
+const MAX_RETRIES = 10;
+// How long to wait before sending a command again, times the attempt.
+const RETRY_DELAY_MS = 50;
+// Format-one response codes (bit 7 set) carry an error number in their low
+// six bits: TPM_RC_BAD_AUTH and TPM_RC_AUTH_FAIL mean a wrong password.
+const RC_FMT1 = 0x080;
+const RC_BAD_AUTH = 0x022;
+const RC_AUTH_FAIL = 0x00e;
+const MAX_RESPONSE_SIZE = 4096;
+
+// The storage key's template: the TCG's standard ECC P-256 SRK template, so
+// the TPM derives the same key from the owner seed every time.
+const STORAGE_KEY_TEMPLATE = tpm2b(
+  concat([
+    u16(TPM_ALG_ECC),
+    u16(TPM_ALG_SHA256),
+    u32(
+      FIXED_TPM |
+        FIXED_PARENT |
+        SENSITIVE_DATA_ORIGIN |
+        USER_WITH_AUTH |
+        NO_DA |
+        RESTRICTED |
+        DECRYPT
+    ),
+    tpm2b(Buffer.alloc(0)), // authPolicy
+    u16(TPM_ALG_AES),
+    u16(128),
+    u16(TPM_ALG_CFB),
+    u16(TPM_ALG_NULL), // scheme
+    u16(TPM_ECC_NIST_P256),
+    u16(TPM_ALG_NULL), // kdf
+    tpm2b(Buffer.alloc(0)), // unique.x
+    tpm2b(Buffer.alloc(0)), // unique.y
+  ])
+);
+
+// The sealed object's template: data only this TPM can load, and only under
+// this storage key, unsealed with an empty password.
+const SEALED_OBJECT_TEMPLATE = tpm2b(
+  concat([
+    u16(TPM_ALG_KEYEDHASH),
+    u16(TPM_ALG_SHA256),
+    u32(FIXED_TPM | FIXED_PARENT | USER_WITH_AUTH | NO_DA),
+    tpm2b(Buffer.alloc(0)), // authPolicy
+    u16(TPM_ALG_NULL), // scheme
+    tpm2b(Buffer.alloc(0)), // unique
+  ])
+);
+
+export class LinuxTpmError extends Error {
+  constructor(
+    what: string,
+    readonly rc: number,
+    reason = ''
+  ) {
+    super(`${reason}${what} failed with 0x${rc.toString(16)}.`);
+  }
+}
+
+/** This user isn't allowed to open the TPM device. */
+export class TpmAccessError extends Error {
+  constructor() {
+    super(
+      `Your user can't open ${TPM_DEVICE}. The group that owns it (usually tss) can, but joining it gives your user access to the rest of the TPM too, so only join it if that's fine on this machine.`
+    );
+  }
+}
+
+/** Whether this machine has a TPM the kernel exposes to user space. */
+export function hasLinuxTpm(): boolean {
+  return existsSync(TPM_DEVICE);
+}
+
+/**
+ * Seal `secret` with this machine's TPM. Returns the sealed object's public
+ * area and its private area, encrypted by the TPM, both as TPM2B structures.
+ */
+export function sealWithLinuxTpm(
+  secret: Buffer,
+  connect: ConnectTpm = connectToDevice
+): { public: Buffer; private: Buffer } {
+  return withStorageKey(connect, (tpm, parent) => {
+    const data = tpm2b(secret);
+    const body = concat([tpm2b(Buffer.alloc(0)), data]);
+    const sensitive = tpm2b(body);
+    const cmd = command(TPM_CC_CREATE, parent, [
+      sensitive,
+      SEALED_OBJECT_TEMPLATE,
+      tpm2b(Buffer.alloc(0)), // outsideInfo
+      u32(0), // creationPCR
+    ]);
+    for (const copy of [data, body, sensitive]) {
+      copy.fill(0);
+    }
+    let response: Buffer;
+    try {
+      response = send(tpm, 'TPM2_Create', cmd);
+    } finally {
+      cmd.fill(0);
+    }
+    // Header, then parameterSize, then outPrivate and outPublic.
+    const sealedPrivate = readTpm2b(response, 14);
+    const sealedPublic = readTpm2b(response, 14 + sealedPrivate.length);
+    return { public: sealedPublic, private: sealedPrivate };
+  });
+}
+
+/** Unseal what `sealWithLinuxTpm` sealed, with this machine's TPM. */
+export function unsealWithLinuxTpm(
+  sealed: { public: Buffer; private: Buffer },
+  connect: ConnectTpm = connectToDevice
+): Buffer {
+  return withStorageKey(connect, (tpm, parent) => {
+    const object = send(
+      tpm,
+      'TPM2_Load',
+      command(TPM_CC_LOAD, parent, [sealed.private, sealed.public])
+    ).readUInt32BE(10);
+    try {
+      const response = send(
+        tpm,
+        'TPM2_Unseal',
+        command(TPM_CC_UNSEAL, object, [])
+      );
+      const outData = readTpm2b(response, 14);
+      const secret = Buffer.from(new Uint8Array(outData.subarray(2)));
+      outData.fill(0);
+      response.fill(0);
+      return secret;
+    } finally {
+      flush(tpm, object);
+    }
+  });
+}
+
+function withStorageKey<T>(
+  connect: ConnectTpm,
+  fn: (tpm: TpmConnection, parent: number) => T
+): T {
+  const tpm = connect();
+  try {
+    let parent: number;
+    try {
+      parent = send(
+        tpm,
+        'TPM2_CreatePrimary',
+        command(TPM_CC_CREATE_PRIMARY, TPM_RH_OWNER, [
+          // inSensitive: no password, no data.
+          tpm2b(concat([tpm2b(Buffer.alloc(0)), tpm2b(Buffer.alloc(0))])),
+          STORAGE_KEY_TEMPLATE,
+          tpm2b(Buffer.alloc(0)), // outsideInfo
+          u32(0), // creationPCR
+        ])
+      ).readUInt32BE(10);
+    } catch (error) {
+      if (error instanceof LinuxTpmError && isWrongPassword(error.rc)) {
+        throw new LinuxTpmError(
+          'TPM2_CreatePrimary',
+          error.rc,
+          "This TPM's owner hierarchy has a password, which the CLI doesn't use: "
+        );
+      }
+      throw error;
+    }
+    try {
+      return fn(tpm, parent);
+    } finally {
+      flush(tpm, parent);
+    }
+  } finally {
+    // The resource manager also flushes what this connection loaded.
+    tpm.close();
+  }
+}
+
+function isWrongPassword(rc: number): boolean {
+  const error = rc & 0x3f;
+  return (
+    (rc & RC_FMT1) !== 0 && (error === RC_BAD_AUTH || error === RC_AUTH_FAIL)
+  );
+}
+
+function flush(tpm: TpmConnection, handle: number): void {
+  try {
+    const body = u32(handle);
+    send(
+      tpm,
+      'TPM2_FlushContext',
+      concat([
+        u16(TPM_ST_NO_SESSIONS),
+        u32(10 + body.length),
+        u32(TPM_CC_FLUSH_CONTEXT),
+        body,
+      ])
+    );
+  } catch {
+    // Closing the connection flushes it anyway.
+  }
+}
+
+// A command with one handle, authorized by an empty password.
+function command(code: number, handle: number, parameters: Buffer[]): Buffer {
+  const auth = concat([
+    u32(TPM_RS_PW),
+    tpm2b(Buffer.alloc(0)), // nonce
+    Buffer.from([0]), // sessionAttributes
+    tpm2b(Buffer.alloc(0)), // password
+  ]);
+  const body = concat([u32(handle), u32(auth.length), auth, ...parameters]);
+  const cmd = concat([
+    u16(TPM_ST_SESSIONS),
+    u32(10 + body.length),
+    u32(code),
+    body,
+  ]);
+  // It may hold a secret.
+  body.fill(0);
+  return cmd;
+}
+
+function send(tpm: TpmConnection, what: string, cmd: Buffer): Buffer {
+  for (let attempt = 0; ; attempt++) {
+    const response = tpm.transmit(cmd);
+    if (response.length < 10 || response.readUInt32BE(2) !== response.length) {
+      throw new Error(`${what} returned a malformed response.`);
+    }
+    const rc = response.readUInt32BE(6);
+    if (rc === 0) {
+      return response;
+    }
+    const busy =
+      rc === TPM_RC_RETRY || rc === TPM_RC_YIELDED || rc === TPM_RC_TESTING;
+    if (!busy || attempt >= MAX_RETRIES) {
+      throw new LinuxTpmError(what, rc);
+    }
+    sleep(RETRY_DELAY_MS * (attempt + 1));
+  }
+}
+
+// Wait without returning to the event loop: every TPM call is synchronous.
+function sleep(ms: number): void {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+
+function connectToDevice(): TpmConnection {
+  let fd: number;
+  try {
+    fd = openSync(TPM_DEVICE, 'r+');
+  } catch (error) {
+    const code = (error as NodeJS.ErrnoException).code;
+    if (code === 'EACCES' || code === 'EPERM') {
+      throw new TpmAccessError();
+    }
+    throw error;
+  }
+  return {
+    transmit(cmd) {
+      writeSync(fd, view(cmd));
+      // The kernel returns the whole response in one read.
+      const response = Buffer.alloc(MAX_RESPONSE_SIZE);
+      const size = readSync(fd, view(response), 0, response.length, null);
+      const result = Buffer.from(new Uint8Array(response.subarray(0, size)));
+      response.fill(0);
+      return result;
+    },
+    close() {
+      closeSync(fd);
+    },
+  };
+}
+
+// A TPM2B structure (a 16-bit size, then that many bytes) at `offset`,
+// including its size.
+function readTpm2b(buffer: Buffer, offset: number): Buffer {
+  const end = offset + 2 + buffer.readUInt16BE(offset);
+  if (end > buffer.length) {
+    throw new Error('The TPM returned a truncated response.');
+  }
+  return Buffer.from(new Uint8Array(buffer.subarray(offset, end)));
+}
+
+function tpm2b(bytes: Buffer): Buffer {
+  return concat([u16(bytes.length), bytes]);
+}
+
+function concat(parts: Buffer[]): Buffer {
+  const result = Buffer.alloc(parts.reduce((size, p) => size + p.length, 0));
+  let offset = 0;
+  for (const part of parts) {
+    result.set(part, offset);
+    offset += part.length;
+  }
+  return result;
+}
+
+// A view `fs` accepts, whichever `@types/node` is installed.
+function view(buffer: Buffer): Uint8Array {
+  return new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.length);
+}
+
+function u16(value: number): Buffer {
+  const bytes = Buffer.alloc(2);
+  bytes.writeUInt16BE(value);
+  return bytes;
+}
+
+function u32(value: number): Buffer {
+  const bytes = Buffer.alloc(4);
+  bytes.writeUInt32BE(value >>> 0);
+  return bytes;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vercel/cli-auth",
   "description": "Used by Vercel's CLIs to handle authentication",
-  "version": "0.3.12",
+  "version": "0.3.14-snapshot-dd15927e8ded",
   "publishConfig": {
     "access": "public"
   },
@@ -23,7 +23,7 @@
     "async-listen": "3.0.0",
     "open": "8.4.0",
     "zod": "4.1.11",
-    "@vercel/cli-config": "0.3.3"
+    "@vercel/cli-config": "0.3.5-snapshot-dd15927e8ded"
   },
   "devDependencies": {
     "@types/node": "20.11.0",
@@ -39,10 +39,14 @@
       ]
     }
   },
+  "optionalDependencies": {
+    "koffi": "3.3.3"
+  },
   "scripts": {
     "build": "pnpm clear && tsc -b",
     "clear": "rm -rf *.js *.d.ts *.js.map tsconfig.tsbuildinfo",
     "test": "vitest",
+    "test-unit": "vitest run",
     "typecheck": "tsc --noEmit"
   }
 }

package/secure-enclave.d.ts

@@ -0,0 +1,18 @@
+export type Pointer = bigint;
+/** The Secure Enclave can't use the key while this Mac is locked. */
+export declare class SecureEnclaveLockedError extends Error {
+}
+/**
+ * Create a key in this Mac's Secure Enclave and seal `secret` with it.
+ * Returns the key as wrapped by the Secure Enclave, and the sealed secret.
+ */
+export declare function createSecureEnclaveKey(secret: Buffer): {
+    wrapped: Buffer;
+    sealed: Buffer;
+};
+/**
+ * Unseal what `createSecureEnclaveKey` sealed, with the key `wrapped` by
+ * this Mac's Secure Enclave. The Secure Enclave's private key never leaves
+ * it. Fails while the Mac is locked.
+ */
+export declare function unsealWithSecureEnclaveKey(wrapped: Buffer, sealed: Buffer): Buffer;

package/secure-enclave.js

@@ -0,0 +1,180 @@
+"use strict";
+// Seals a secret with a P-256 key that lives in this Mac's Secure Enclave,
+// through the Security framework's C API (called with koffi, so there's no
+// native code to build). Sealing is ECIES (ECDH with the Secure Enclave key,
+// then AES-GCM), so only that key can unseal it. The key is created outside
+// the keychain, so it needs no keychain entitlement and works from any
+// binary, `node` included. What we save is the key as wrapped by this Mac's
+// Secure Enclave (`kSecAttrTokenOID`), which only it can unwrap: a copy of
+// the file can't unseal anything anywhere else.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecureEnclaveLockedError = void 0;
+exports.createSecureEnclaveKey = createSecureEnclaveKey;
+exports.unsealWithSecureEnclaveKey = unsealWithSecureEnclaveKey;
+const koffi_1 = require("./koffi");
+const CORE_FOUNDATION = '/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation';
+const SECURITY = '/System/Library/Frameworks/Security.framework/Security';
+const kCFStringEncodingUTF8 = 0x08000100;
+const kCFNumberSInt32Type = 3;
+const kSecAccessControlPrivateKeyUsage = 1 << 30;
+// `SecBase.h` errSecInteractionNotAllowed: the key can't be used while this
+// Mac is locked (`kSecAttrAccessibleWhenUnlockedThisDeviceOnly`).
+const errSecInteractionNotAllowed = -25308;
+/** The Secure Enclave can't use the key while this Mac is locked. */
+class SecureEnclaveLockedError extends Error {
+}
+exports.SecureEnclaveLockedError = SecureEnclaveLockedError;
+let api;
+function loadApi(koffi) {
+    const cf = koffi.load(CORE_FOUNDATION);
+    const sec = koffi.load(SECURITY);
+    // The value of an exported constant, such as a `CFStringRef`.
+    const constant = (lib, name) => koffi.decode(lib.symbol(name), 'void *');
+    return {
+        koffi,
+        CFRelease: cf.func('void CFRelease(void *cf)'),
+        CFDictionaryCreateMutable: cf.func('void *CFDictionaryCreateMutable(void *allocator, long capacity, void *keyCallBacks, void *valueCallBacks)'),
+        CFDictionarySetValue: cf.func('void CFDictionarySetValue(void *dict, void *key, void *value)'),
+        CFDictionaryGetValue: cf.func('void *CFDictionaryGetValue(void *dict, void *key)'),
+        CFDataCreate: cf.func('void *CFDataCreate(void *allocator, const uint8_t *bytes, long length)'),
+        CFDataGetLength: cf.func('long CFDataGetLength(void *data)'),
+        CFDataGetBytePtr: cf.func('void *CFDataGetBytePtr(void *data)'),
+        CFNumberCreate: cf.func('void *CFNumberCreate(void *allocator, long type, const int32_t *value)'),
+        CFStringCreateWithCString: cf.func('void *CFStringCreateWithCString(void *allocator, const char *str, uint32_t encoding)'),
+        CFErrorGetCode: cf.func('long CFErrorGetCode(void *error)'),
+        SecAccessControlCreateWithFlags: sec.func('void *SecAccessControlCreateWithFlags(void *allocator, void *protection, unsigned long flags, _Out_ void **error)'),
+        SecKeyCreateRandomKey: sec.func('void *SecKeyCreateRandomKey(void *parameters, _Out_ void **error)'),
+        SecKeyCreateWithData: sec.func('void *SecKeyCreateWithData(void *keyData, void *attributes, _Out_ void **error)'),
+        SecKeyCopyAttributes: sec.func('void *SecKeyCopyAttributes(void *key)'),
+        SecKeyCopyPublicKey: sec.func('void *SecKeyCopyPublicKey(void *key)'),
+        SecKeyCreateEncryptedData: sec.func('void *SecKeyCreateEncryptedData(void *key, void *algorithm, void *plaintext, _Out_ void **error)'),
+        SecKeyCreateDecryptedData: sec.func('void *SecKeyCreateDecryptedData(void *key, void *algorithm, void *ciphertext, _Out_ void **error)'),
+        keyCallBacks: cf.symbol('kCFTypeDictionaryKeyCallBacks'),
+        valueCallBacks: cf.symbol('kCFTypeDictionaryValueCallBacks'),
+        kCFBooleanFalse: constant(cf, 'kCFBooleanFalse'),
+        kSecAttrKeyType: constant(sec, 'kSecAttrKeyType'),
+        kSecAttrKeyTypeECSECPrimeRandom: constant(sec, 'kSecAttrKeyTypeECSECPrimeRandom'),
+        kSecAttrKeySizeInBits: constant(sec, 'kSecAttrKeySizeInBits'),
+        kSecAttrKeyClass: constant(sec, 'kSecAttrKeyClass'),
+        kSecAttrKeyClassPrivate: constant(sec, 'kSecAttrKeyClassPrivate'),
+        kSecAttrTokenID: constant(sec, 'kSecAttrTokenID'),
+        kSecAttrTokenIDSecureEnclave: constant(sec, 'kSecAttrTokenIDSecureEnclave'),
+        kSecPrivateKeyAttrs: constant(sec, 'kSecPrivateKeyAttrs'),
+        kSecAttrIsPermanent: constant(sec, 'kSecAttrIsPermanent'),
+        kSecAttrAccessControl: constant(sec, 'kSecAttrAccessControl'),
+        kSecAttrAccessibleWhenUnlockedThisDeviceOnly: constant(sec, 'kSecAttrAccessibleWhenUnlockedThisDeviceOnly'),
+        kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA256AESGCM: constant(sec, 'kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA256AESGCM'),
+    };
+}
+/**
+ * Runs `fn` with an `own` function that records each Core Foundation object
+ * `fn` creates, and releases them all when it returns or throws.
+ */
+function withObjects(fn) {
+    const a = (api ??= loadApi((0, koffi_1.loadKoffi)()));
+    const objects = [];
+    try {
+        return fn(a, (object, what) => {
+            if (!object) {
+                throw new Error(`${what} failed.`);
+            }
+            objects.push(object);
+            return object;
+        });
+    }
+    finally {
+        for (const object of objects.reverse()) {
+            a.CFRelease(object);
+        }
+    }
+}
+/** Calls a function that reports failure with a `CFErrorRef` out argument. */
+function check(a, what, call) {
+    const error = [null];
+    const result = call(error);
+    if (!result && error[0]) {
+        const code = a.CFErrorGetCode(error[0]);
+        a.CFRelease(error[0]);
+        const message = `${what} failed with error ${code}.`;
+        if (Number(code) === errSecInteractionNotAllowed) {
+            throw new SecureEnclaveLockedError(message);
+        }
+        throw new Error(message);
+    }
+    return result;
+}
+function dictionary(a, own, entries) {
+    const dict = own(a.CFDictionaryCreateMutable(null, 0, a.keyCallBacks, a.valueCallBacks), 'CFDictionaryCreateMutable');
+    for (const [key, value] of entries) {
+        a.CFDictionarySetValue(dict, key, value);
+    }
+    return dict;
+}
+function toData(a, own, bytes) {
+    return own(a.CFDataCreate(null, bytes, bytes.length), 'CFDataCreate');
+}
+function fromData(a, data) {
+    const length = Number(a.CFDataGetLength(data));
+    if (length === 0) {
+        return Buffer.alloc(0);
+    }
+    // Copy out of the CFData before it's released.
+    return Buffer.from(new Uint8Array(a.koffi.view(a.CFDataGetBytePtr(data), length)));
+}
+// Not exported by the SDK headers: the attribute that holds a Secure Enclave
+// key's wrapped form, which CryptoKit calls `dataRepresentation`.
+function tokenOid(a, own) {
+    return own(a.CFStringCreateWithCString(null, 'toid', kCFStringEncodingUTF8), 'CFStringCreateWithCString');
+}
+/**
+ * Create a key in this Mac's Secure Enclave and seal `secret` with it.
+ * Returns the key as wrapped by the Secure Enclave, and the sealed secret.
+ */
+function createSecureEnclaveKey(secret) {
+    return withObjects((a, own) => {
+        const accessControl = own(check(a, 'SecAccessControlCreateWithFlags', error => a.SecAccessControlCreateWithFlags(null, a.kSecAttrAccessibleWhenUnlockedThisDeviceOnly, kSecAccessControlPrivateKeyUsage, error)), 'SecAccessControlCreateWithFlags');
+        const keySize = own(a.CFNumberCreate(null, kCFNumberSInt32Type, Int32Array.of(256)), 'CFNumberCreate');
+        const parameters = dictionary(a, own, [
+            [a.kSecAttrKeyType, a.kSecAttrKeyTypeECSECPrimeRandom],
+            [a.kSecAttrKeySizeInBits, keySize],
+            [a.kSecAttrTokenID, a.kSecAttrTokenIDSecureEnclave],
+            [
+                a.kSecPrivateKeyAttrs,
+                dictionary(a, own, [
+                    // Not in the keychain, which would need a keychain entitlement.
+                    [a.kSecAttrIsPermanent, a.kCFBooleanFalse],
+                    [a.kSecAttrAccessControl, accessControl],
+                ]),
+            ],
+        ]);
+        const key = own(check(a, 'SecKeyCreateRandomKey', error => a.SecKeyCreateRandomKey(parameters, error)), 'SecKeyCreateRandomKey');
+        const attributes = own(a.SecKeyCopyAttributes(key), 'SecKeyCopyAttributes');
+        const wrapped = a.CFDictionaryGetValue(attributes, tokenOid(a, own));
+        if (!wrapped) {
+            throw new Error("The Secure Enclave didn't return the wrapped key.");
+        }
+        const publicKey = own(a.SecKeyCopyPublicKey(key), 'SecKeyCopyPublicKey');
+        const sealed = own(check(a, 'SecKeyCreateEncryptedData', error => a.SecKeyCreateEncryptedData(publicKey, a.kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA256AESGCM, toData(a, own, secret), error)), 'SecKeyCreateEncryptedData');
+        return { wrapped: fromData(a, wrapped), sealed: fromData(a, sealed) };
+    });
+}
+/**
+ * Unseal what `createSecureEnclaveKey` sealed, with the key `wrapped` by
+ * this Mac's Secure Enclave. The Secure Enclave's private key never leaves
+ * it. Fails while the Mac is locked.
+ */
+function unsealWithSecureEnclaveKey(wrapped, sealed) {
+    return withObjects((a, own) => {
+        const attributes = dictionary(a, own, [
+            [a.kSecAttrKeyType, a.kSecAttrKeyTypeECSECPrimeRandom],
+            [a.kSecAttrKeyClass, a.kSecAttrKeyClassPrivate],
+            [a.kSecAttrTokenID, a.kSecAttrTokenIDSecureEnclave],
+            [tokenOid(a, own), toData(a, own, wrapped)],
+        ]);
+        // With a token ID the key comes from the attributes, not `keyData`.
+        const key = own(check(a, 'SecKeyCreateWithData', error => a.SecKeyCreateWithData(toData(a, own, new Uint8Array(0)), attributes, error)), 'SecKeyCreateWithData');
+        const secret = own(check(a, 'SecKeyCreateDecryptedData', error => a.SecKeyCreateDecryptedData(key, a.kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA256AESGCM, toData(a, own, sealed), error)), 'SecKeyCreateDecryptedData');
+        return fromData(a, secret);
+    });
+}
+//# sourceMappingURL=secure-enclave.js.map

package/secure-enclave.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-enclave.js","sourceRoot":"","sources":["secure-enclave.ts"],"names":[],"mappings":";AAAA,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,uEAAuE;AACvE,4EAA4E;AAC5E,2EAA2E;AAC3E,gDAAgD;;;AAiMhD,wDA6DC;AAOD,gEAmCC;AAtSD,mCAAgD;AAIhD,MAAM,eAAe,GACnB,oEAAoE,CAAC;AACvE,MAAM,QAAQ,GAAG,wDAAwD,CAAC;AAE1E,MAAM,qBAAqB,GAAG,UAAU,CAAC;AACzC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,gCAAgC,GAAG,CAAC,IAAI,EAAE,CAAC;AACjD,4EAA4E;AAC5E,kEAAkE;AAClE,MAAM,2BAA2B,GAAG,CAAC,KAAK,CAAC;AAE3C,qEAAqE;AACrE,MAAa,wBAAyB,SAAQ,KAAK;CAAG;AAAtD,4DAAsD;AAEtD,IAAI,GAA2C,CAAC;AAEhD,SAAS,OAAO,CAAC,KAAY;IAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,CAAC,GAAc,EAAE,IAAY,EAAW,EAAE,CACzD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE3C,OAAO;QACL,KAAK;QACL,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC;QAC9C,yBAAyB,EAAE,EAAE,CAAC,IAAI,CAChC,2GAA2G,CAC5G;QACD,oBAAoB,EAAE,EAAE,CAAC,IAAI,CAC3B,+DAA+D,CAChE;QACD,oBAAoB,EAAE,EAAE,CAAC,IAAI,CAC3B,mDAAmD,CACpD;QACD,YAAY,EAAE,EAAE,CAAC,IAAI,CACnB,wEAAwE,CACzE;QACD,eAAe,EAAE,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC;QAC5D,gBAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC;QAC/D,cAAc,EAAE,EAAE,CAAC,IAAI,CACrB,wEAAwE,CACzE;QACD,yBAAyB,EAAE,EAAE,CAAC,IAAI,CAChC,sFAAsF,CACvF;QACD,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC;QAC3D,+BAA+B,EAAE,GAAG,CAAC,IAAI,CACvC,mHAAmH,CACpH;QACD,qBAAqB,EAAE,GAAG,CAAC,IAAI,CAC7B,mEAAmE,CACpE;QACD,oBAAoB,EAAE,GAAG,CAAC,IAAI,CAC5B,iFAAiF,CAClF;QACD,oBAAoB,EAAE,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC;QACvE,mBAAmB,EAAE,GAAG,CAAC,IAAI,CAAC,sCAAsC,CAAC;QACrE,yBAAyB,EAAE,GAAG,CAAC,IAAI,CACjC,kGAAkG,CACnG;QACD,yBAAyB,EAAE,GAAG,CAAC,IAAI,CACjC,mGAAmG,CACpG;QACD,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,+BAA+B,CAAY;QACnE,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAY;QACvE,eAAe,EAAE,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;QAChD,eAAe,EAAE,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;QACjD,+BAA+B,EAAE,QAAQ,CACvC,GAAG,EACH,iCAAiC,CAClC;QACD,qBAAqB,EAAE,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;QAC7D,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;QACnD,uBAAuB,EAAE,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;QACjE,eAAe,EAAE,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;QACjD,4BAA4B,EAAE,QAAQ,CAAC,GAAG,EAAE,8BAA8B,CAAC;QAC3E,mBAAmB,EAAE,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;QACzD,mBAAmB,EAAE,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;QACzD,qBAAqB,EAAE,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;QAC7D,4CAA4C,EAAE,QAAQ,CACpD,GAAG,EACH,8CAA8C,CAC/C;QACD,iEAAiE,EAAE,QAAQ,CACzE,GAAG,EACH,mEAAmE,CACpE;KACF,CAAC;AACJ,CAAC;AAID;;;GAGG;AACH,SAAS,WAAW,CAClB,EAAyE;IAEzE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,IAAA,iBAAS,GAAE,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,KAAK,CACZ,CAAM,EACN,IAAY,EACZ,IAAiD;IAEjD,MAAM,KAAK,GAAqB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,IAAI,sBAAsB,IAAI,GAAG,CAAC;QACrD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,2BAA2B,EAAE,CAAC;YACjD,MAAM,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CACjB,CAAM,EACN,GAAsD,EACtD,OAA6B;IAE7B,MAAM,IAAI,GAAG,GAAG,CACd,CAAC,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,EACtE,2BAA2B,CAC5B,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CACb,CAAM,EACN,GAAsD,EACtD,KAA0B;IAE1B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAM,EAAE,IAAa;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,+CAA+C;IAC/C,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,kEAAkE;AAClE,SAAS,QAAQ,CACf,CAAM,EACN,GAAsD;IAEtD,OAAO,GAAG,CACR,CAAC,CAAC,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,qBAAqB,CAAC,EAChE,2BAA2B,CAC5B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAc;IAInD,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,aAAa,GAAG,GAAG,CACvB,KAAK,CAAC,CAAC,EAAE,iCAAiC,EAAE,KAAK,CAAC,EAAE,CAClD,CAAC,CAAC,+BAA+B,CAC/B,IAAI,EACJ,CAAC,CAAC,4CAA4C,EAC9C,gCAAgC,EAChC,KAAK,CACN,CACF,EACD,iCAAiC,CAClC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CACjB,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAC/D,gBAAgB,CACjB,CAAC;QACF,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE;YACpC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,+BAA+B,CAAC;YACtD,CAAC,CAAC,CAAC,qBAAqB,EAAE,OAAO,CAAC;YAClC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,4BAA4B,CAAC;YACnD;gBACE,CAAC,CAAC,mBAAmB;gBACrB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE;oBACjB,gEAAgE;oBAChE,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,eAAe,CAAC;oBAC1C,CAAC,CAAC,CAAC,qBAAqB,EAAE,aAAa,CAAC;iBACzC,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CACb,KAAK,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,EAAE,CACxC,CAAC,CAAC,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,CAC3C,EACD,uBAAuB,CACxB,CAAC;QAEF,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,GAAG,CAChB,KAAK,CAAC,CAAC,EAAE,2BAA2B,EAAE,KAAK,CAAC,EAAE,CAC5C,CAAC,CAAC,yBAAyB,CACzB,SAAS,EACT,CAAC,CAAC,iEAAiE,EACnE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EACtB,KAAK,CACN,CACF,EACD,2BAA2B,CAC5B,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,OAAe,EACf,MAAc;IAEd,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE;YACpC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,+BAA+B,CAAC;YACtD,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,uBAAuB,CAAC;YAC/C,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,4BAA4B,CAAC;YACnD,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;SAC5C,CAAC,CAAC;QACH,oEAAoE;QACpE,MAAM,GAAG,GAAG,GAAG,CACb,KAAK,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,CACvC,CAAC,CAAC,oBAAoB,CACpB,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,EACjC,UAAU,EACV,KAAK,CACN,CACF,EACD,sBAAsB,CACvB,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,CAChB,KAAK,CAAC,CAAC,EAAE,2BAA2B,EAAE,KAAK,CAAC,EAAE,CAC5C,CAAC,CAAC,yBAAyB,CACzB,GAAG,EACH,CAAC,CAAC,iEAAiE,EACnE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EACtB,KAAK,CACN,CACF,EACD,2BAA2B,CAC5B,CAAC;QACF,OAAO,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}