@vex-chat/crypto 2.0.1 → 2.1.0

package/src/__tests__/cryptoProfile.ts

@@ -0,0 +1,64 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+
+import {
+    getCryptoProfile,
+    setCryptoProfile,
+    xDH,
+    xMakeNonce,
+    xRandomBytes,
+    XUtils,
+} from "../index.js";
+
+afterEach(() => {
+    setCryptoProfile("tweetnacl");
+});
+
+test("crypto profile defaults to tweetnacl", () => {
+    expect(getCryptoProfile()).toBe("tweetnacl");
+});
+
+test("fips profile rejects nacl-coupled operations", () => {
+    setCryptoProfile("fips");
+
+    const myPrivateKey = XUtils.decodeHex(
+        "918ed243e2c6c507168b20e8b167cff33a10c30e99e8defe28dc2147f5cce703",
+    );
+    const theirPublicKey = XUtils.decodeHex(
+        "6f4cc1ffc4009bd4f94628ba5922e40afa3491f0daa43ec9da0f7dc39bb1c026",
+    );
+
+    expect(() => xDH(myPrivateKey, theirPublicKey)).toThrow(
+        'Crypto profile "fips" does not implement xDH yet.',
+    );
+});
+
+test("fips profile still supports random bytes", () => {
+    setCryptoProfile("fips");
+
+    const bytes = xRandomBytes(32);
+    const nonce = xMakeNonce();
+
+    expect(bytes.length).toBe(32);
+    expect(nonce.length).toBe(24);
+});
+
+test("switching back to tweetnacl restores behavior", () => {
+    const myPrivateKey = XUtils.decodeHex(
+        "918ed243e2c6c507168b20e8b167cff33a10c30e99e8defe28dc2147f5cce703",
+    );
+    const theirPublicKey = XUtils.decodeHex(
+        "6f4cc1ffc4009bd4f94628ba5922e40afa3491f0daa43ec9da0f7dc39bb1c026",
+    );
+    const correctDerivedKey =
+        "19a8594bdcf875ec9d4b8b9615ea8b73a0b327bb64b8f727dd2dee3a603a2230";
+
+    setCryptoProfile("fips");
+    setCryptoProfile("tweetnacl");
+
+    const derived = XUtils.encodeHex(xDH(myPrivateKey, theirPublicKey));
+    expect(derived).toBe(correctDerivedKey);
+});

package/src/__tests__/xAsyncProfile.ts

@@ -0,0 +1,69 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+
+import {
+    setCryptoProfile,
+    xBoxKeyPairAsync,
+    xDHAsync,
+    xSecretboxAsync,
+    xSecretboxOpenAsync,
+    xSignAsync,
+    xSignKeyPairAsync,
+    xSignOpenAsync,
+    XUtils,
+} from "../index.js";
+
+afterEach(() => {
+    setCryptoProfile("tweetnacl");
+});
+
+test("tweetnacl async wrappers preserve sign/open semantics", async () => {
+    setCryptoProfile("tweetnacl");
+    const keys = await xSignKeyPairAsync();
+    const message = XUtils.decodeUTF8("hello async");
+    const signed = await xSignAsync(message, keys.secretKey);
+    const opened = await xSignOpenAsync(signed, keys.publicKey);
+
+    if (opened === null) {
+        throw new Error("Expected signed message to verify in tweetnacl mode.");
+    }
+    expect(XUtils.encodeUTF8(opened)).toBe("hello async");
+});
+
+test("fips async sign/open roundtrip", async () => {
+    setCryptoProfile("fips");
+    const keys = await xSignKeyPairAsync();
+    const message = XUtils.decodeUTF8("hello fips");
+    const signed = await xSignAsync(message, keys.secretKey);
+    const opened = await xSignOpenAsync(signed, keys.publicKey);
+
+    if (opened === null) {
+        throw new Error("Expected signed message to verify in fips mode.");
+    }
+    expect(XUtils.encodeUTF8(opened)).toBe("hello fips");
+});
+
+test("fips async ecdh and aes-gcm roundtrip", async () => {
+    setCryptoProfile("fips");
+    const alice = await xBoxKeyPairAsync();
+    const bob = await xBoxKeyPairAsync();
+    const aliceShared = await xDHAsync(alice.secretKey, bob.publicKey);
+    const bobShared = await xDHAsync(bob.secretKey, alice.publicKey);
+
+    expect(XUtils.bytesEqual(aliceShared, bobShared)).toBe(true);
+
+    const nonce = new Uint8Array(24);
+    nonce.set(crypto.getRandomValues(new Uint8Array(24)));
+    const plaintext = XUtils.decodeUTF8("portable fips path");
+
+    const ciphertext = await xSecretboxAsync(plaintext, nonce, aliceShared);
+    const decrypted = await xSecretboxOpenAsync(ciphertext, nonce, bobShared);
+
+    if (decrypted === null) {
+        throw new Error("Expected ciphertext to decrypt in fips mode.");
+    }
+    expect(XUtils.encodeUTF8(decrypted)).toBe("portable fips path");
+});

package/src/__tests__/xConcat.ts

@@ -1,3 +1,9 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+
 import { xConcat, XUtils } from "../index.js";
 
 test("xConcat", () => {

package/src/__tests__/xDH.ts

@@ -1,3 +1,9 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+
 import { xDH, XUtils } from "../index.js";
 
 test("xDH", () => {

package/src/__tests__/xEncode.ts

@@ -1,3 +1,9 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+
 import { xEncode, XUtils } from "../index.js";
 
 test("xEncode", () => {

package/src/__tests__/xHMAC.ts

@@ -1,3 +1,9 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+
 import { createHmac } from "crypto";
 
 import { Packr } from "msgpackr";

package/src/__tests__/xMnemonic.ts

@@ -1,3 +1,9 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+
 import { xMnemonic, XUtils } from "../index.js";
 
 test("xMnemonic", () => {