@vex-chat/crypto 11.0.0 → 12.0.0

package/src/__tests__/cryptoProfile.ts

@@ -1,74 +0,0 @@
-/**
- * Copyright (c) 2020-2026 Vex Heavy Industries LLC
- * Licensed under AGPL-3.0. See LICENSE for details.
- * Commercial licenses available at vex.wtf
- */
-
-import {
-    getCryptoProfile,
-    setCryptoProfile,
-    xDH,
-    xMakeNonce,
-    xRandomBytes,
-    XUtils,
-} from "../index.js";
-
-afterEach(() => {
-    setCryptoProfile("tweetnacl");
-});
-
-test("crypto profile defaults to tweetnacl", () => {
-    expect(getCryptoProfile()).toBe("tweetnacl");
-});
-
-test("fips profile rejects nacl-coupled operations", () => {
-    setCryptoProfile("fips");
-
-    const myPrivateKey = XUtils.decodeHex(
-        "918ed243e2c6c507168b20e8b167cff33a10c30e99e8defe28dc2147f5cce703",
-    );
-    const theirPublicKey = XUtils.decodeHex(
-        "6f4cc1ffc4009bd4f94628ba5922e40afa3491f0daa43ec9da0f7dc39bb1c026",
-    );
-
-    expect(() => xDH(myPrivateKey, theirPublicKey)).toThrow(
-        'Crypto profile "fips" does not implement xDH yet.',
-    );
-});
-
-test("fips profile still supports random bytes", () => {
-    setCryptoProfile("fips");
-
-    const bytes = xRandomBytes(32);
-    const nonce = xMakeNonce();
-
-    expect(bytes.length).toBe(32);
-    expect(nonce.length).toBe(24);
-});
-
-test("local storage keys are purpose-separated from identity keys", () => {
-    const identity = new Uint8Array(64).fill(7);
-    const tweetnacl = XUtils.deriveLocalAtRestAesKey(identity, "tweetnacl");
-    const fips = XUtils.deriveLocalAtRestAesKey(identity, "fips");
-
-    expect(tweetnacl).toHaveLength(32);
-    expect(tweetnacl).not.toEqual(identity.slice(0, 32));
-    expect(fips).not.toEqual(tweetnacl);
-});
-
-test("switching back to tweetnacl restores behavior", () => {
-    const myPrivateKey = XUtils.decodeHex(
-        "918ed243e2c6c507168b20e8b167cff33a10c30e99e8defe28dc2147f5cce703",
-    );
-    const theirPublicKey = XUtils.decodeHex(
-        "6f4cc1ffc4009bd4f94628ba5922e40afa3491f0daa43ec9da0f7dc39bb1c026",
-    );
-    const correctDerivedKey =
-        "19a8594bdcf875ec9d4b8b9615ea8b73a0b327bb64b8f727dd2dee3a603a2230";
-
-    setCryptoProfile("fips");
-    setCryptoProfile("tweetnacl");
-
-    const derived = XUtils.encodeHex(xDH(myPrivateKey, theirPublicKey));
-    expect(derived).toBe(correctDerivedKey);
-});

package/src/__tests__/cryptoProfileScope.test.ts

@@ -1,77 +0,0 @@
-/**
- * Copyright (c) 2020-2026 Vex Heavy Industries LLC
- * Licensed under AGPL-3.0. See LICENSE for details.
- * Commercial licenses available at vex.wtf
- */
-
-import {
-    enterCryptoProfileScope,
-    getCryptoProfile,
-    leaveCryptoProfileScope,
-    setCryptoProfile,
-    xBoxKeyPairAsync,
-    xDHAsync,
-    xSecretboxAsync,
-    xSecretboxOpenAsync,
-    XUtils,
-} from "../index.js";
-
-afterEach(() => {
-    setCryptoProfile("tweetnacl");
-});
-
-test("leaveCryptoProfileScope without enter throws", () => {
-    setCryptoProfile("tweetnacl");
-    expect(() => {
-        leaveCryptoProfileScope();
-    }).toThrow(
-        /leaveCryptoProfileScope called without a matching enterCryptoProfileScope/,
-    );
-});
-
-test("nested enter/leave restores outer profile", () => {
-    setCryptoProfile("tweetnacl");
-    enterCryptoProfileScope("fips");
-    expect(getCryptoProfile()).toBe("fips");
-    enterCryptoProfileScope("fips");
-    expect(getCryptoProfile()).toBe("fips");
-    leaveCryptoProfileScope();
-    expect(getCryptoProfile()).toBe("fips");
-    leaveCryptoProfileScope();
-    expect(getCryptoProfile()).toBe("tweetnacl");
-});
-
-test("concurrent fips scopes: overlapping decrypts stay on fips", async () => {
-    setCryptoProfile("tweetnacl");
-    enterCryptoProfileScope("fips");
-    const alice = await xBoxKeyPairAsync();
-    const bob = await xBoxKeyPairAsync();
-    const shared = await xDHAsync(alice.secretKey, bob.publicKey);
-    const nonce = new Uint8Array(24);
-    nonce.set(crypto.getRandomValues(new Uint8Array(24)));
-    const plaintext = XUtils.decodeUTF8("concurrent-scope");
-    const ciphertext = await xSecretboxAsync(plaintext, nonce, shared);
-    leaveCryptoProfileScope();
-    expect(getCryptoProfile()).toBe("tweetnacl");
-
-    const decryptOnce = async (delayMs: number): Promise<string> => {
-        enterCryptoProfileScope("fips");
-        try {
-            if (delayMs > 0) {
-                await new Promise((r) => setTimeout(r, delayMs));
-            }
-            const opened = await xSecretboxOpenAsync(ciphertext, nonce, shared);
-            if (opened === null) {
-                throw new Error("Expected decrypt under stacked fips scope.");
-            }
-            return XUtils.encodeUTF8(opened);
-        } finally {
-            leaveCryptoProfileScope();
-        }
-    };
-
-    const [a, b] = await Promise.all([decryptOnce(0), decryptOnce(15)]);
-    expect(a).toBe("concurrent-scope");
-    expect(b).toBe("concurrent-scope");
-    expect(getCryptoProfile()).toBe("tweetnacl");
-});