@yielded/crypto 0.0.0-stage → 0.1.0-beta.19

package/dist/internal/node.mjs

@@ -0,0 +1,34 @@
+import { CryptoUnavailable, UnsupportedAlgorithm } from "../Errors.mjs";
+import { makeLayer } from "./layer.mjs";
+import { xchacha } from "./xchacha.mjs";
+import { Effect, Result } from "effect";
+import * as crypto from "node:crypto";
+//#region src/internal/node.ts
+const argon2 = Effect.fnUntraced(function* (input) {
+	if (typeof crypto.argon2 !== "function") return yield* UnsupportedAlgorithm.make({});
+	return yield* Effect.callback((resume) => {
+		const registration = Result.try({
+			try: () => crypto.argon2("argon2id", {
+				message: input.password,
+				nonce: input.salt,
+				parallelism: input.parallelism,
+				memory: input.memoryKiB,
+				passes: input.passes,
+				tagLength: input.length,
+				secret: input.secret,
+				associatedData: input.associatedData
+			}, (error, key) => resume(error === null ? Effect.succeed(key) : Effect.fail(CryptoUnavailable.make({})))),
+			catch: () => CryptoUnavailable.make({})
+		});
+		if (Result.isFailure(registration)) resume(Effect.fail(registration.failure));
+	}).pipe(Effect.uninterruptible);
+});
+/** Node-compatible WebCrypto/Argon2id with the portable XChaCha20-Poly1305 extension. */
+const layer = (limits = {}) => makeLayer(crypto.webcrypto.subtle, limits, {
+	argon2,
+	xchacha
+});
+//#endregion
+export { layer };
+
+//# sourceMappingURL=node.mjs.map

package/dist/internal/node.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.mjs","names":[],"sources":["../../src/internal/node.ts"],"sourcesContent":["import * as crypto from \"node:crypto\";\n\nimport { Effect, Result } from \"effect\";\n\nimport { CryptoUnavailable, UnsupportedAlgorithm } from \"../Errors\";\nimport type { Limits } from \"../Kdf\";\nimport type { Argon2, Argon2Parameters } from \"./kdf\";\nimport { makeLayer } from \"./layer\";\nimport { xchacha } from \"./xchacha\";\n\nconst argon2: Argon2 = Effect.fnUntraced(function* (input: Argon2Parameters) {\n  // Namespace import keeps this module loadable on Node versions without Argon2.\n  if (typeof crypto.argon2 !== \"function\") return yield* UnsupportedAlgorithm.make({});\n\n  // Node cannot cancel this work. Keep borrowed buffers and admission until the\n  // callback completes, including when its caller has requested interruption.\n  return yield* Effect.callback<Uint8Array, CryptoUnavailable>((resume) => {\n    const registration = Result.try({\n      try: () =>\n        crypto.argon2(\n          \"argon2id\",\n          {\n            message: input.password,\n            nonce: input.salt,\n            parallelism: input.parallelism,\n            memory: input.memoryKiB,\n            passes: input.passes,\n            tagLength: input.length,\n            secret: input.secret,\n            associatedData: input.associatedData,\n          },\n          (error, key) =>\n            resume(error === null ? Effect.succeed(key) : Effect.fail(CryptoUnavailable.make({}))),\n        ),\n      catch: () => CryptoUnavailable.make({}),\n    });\n\n    if (Result.isFailure(registration)) resume(Effect.fail(registration.failure));\n  }).pipe(Effect.uninterruptible);\n});\n\n/** Node-compatible WebCrypto/Argon2id with the portable XChaCha20-Poly1305 extension. */\nexport const layer = (limits: Partial<Limits> = {}) =>\n  // Node's declarations include additional key usages absent from lib.dom. The\n  // standard operations used here share the WebCrypto ABI; no payload is cast.\n  makeLayer(crypto.webcrypto.subtle as SubtleCrypto, limits, { argon2, xchacha });\n"],"mappings":";;;;;;AAUA,MAAM,SAAiB,OAAO,WAAW,WAAW,OAAyB;CAE3E,IAAI,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;CAInF,OAAO,OAAO,OAAO,UAAyC,WAAW;EACvE,MAAM,eAAe,OAAO,IAAI;GAC9B,WACE,OAAO,OACL,YACA;IACE,SAAS,MAAM;IACf,OAAO,MAAM;IACb,aAAa,MAAM;IACnB,QAAQ,MAAM;IACd,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,QAAQ,MAAM;IACd,gBAAgB,MAAM;GACxB,IACC,OAAO,QACN,OAAO,UAAU,OAAO,OAAO,QAAQ,GAAG,IAAI,OAAO,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,CACzF;GACF,aAAa,kBAAkB,KAAK,CAAC,CAAC;EACxC,CAAC;EAED,IAAI,OAAO,UAAU,YAAY,GAAG,OAAO,OAAO,KAAK,aAAa,OAAO,CAAC;CAC9E,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe;AAChC,CAAC;;AAGD,MAAa,SAAS,SAA0B,CAAC,MAG/C,UAAU,OAAO,UAAU,QAAwB,QAAQ;CAAE;CAAQ;AAAQ,CAAC"}

package/dist/internal/poly1305.mjs

@@ -0,0 +1,247 @@
+//#region src/internal/poly1305.ts
+/**
+* Adapted from noble-ciphers, Copyright (c) 2022 Paul Miller.
+* MIT; source revision 785181b0772ba84afbe812025714163e4e48262f.
+* Poly1305 arithmetic derives from the public-domain poly1305-donna implementation.
+* See ../../THIRD_PARTY_NOTICES.md for source mapping and licenses.
+*/
+function u8to16(a, i) {
+	return a[i++] & 255 | (a[i++] & 255) << 8;
+}
+var Poly1305 = class {
+	blockLen = 16;
+	outputLen = 16;
+	buffer = /* @__PURE__ */ new Uint8Array(16);
+	r = /* @__PURE__ */ new Uint16Array(10);
+	h = /* @__PURE__ */ new Uint16Array(10);
+	pad = /* @__PURE__ */ new Uint16Array(8);
+	pos = 0;
+	constructor(key) {
+		const t0 = u8to16(key, 0);
+		const t1 = u8to16(key, 2);
+		const t2 = u8to16(key, 4);
+		const t3 = u8to16(key, 6);
+		const t4 = u8to16(key, 8);
+		const t5 = u8to16(key, 10);
+		const t6 = u8to16(key, 12);
+		const t7 = u8to16(key, 14);
+		this.r[0] = t0 & 8191;
+		this.r[1] = (t0 >>> 13 | t1 << 3) & 8191;
+		this.r[2] = (t1 >>> 10 | t2 << 6) & 7939;
+		this.r[3] = (t2 >>> 7 | t3 << 9) & 8191;
+		this.r[4] = (t3 >>> 4 | t4 << 12) & 255;
+		this.r[5] = t4 >>> 1 & 8190;
+		this.r[6] = (t4 >>> 14 | t5 << 2) & 8191;
+		this.r[7] = (t5 >>> 11 | t6 << 5) & 8065;
+		this.r[8] = (t6 >>> 8 | t7 << 8) & 8191;
+		this.r[9] = t7 >>> 5 & 127;
+		for (let i = 0; i < 8; i++) this.pad[i] = u8to16(key, 16 + 2 * i);
+	}
+	process(data, offset, isLast = false) {
+		const hibit = isLast ? 0 : 2048;
+		const { h, r } = this;
+		const r0 = r[0];
+		const r1 = r[1];
+		const r2 = r[2];
+		const r3 = r[3];
+		const r4 = r[4];
+		const r5 = r[5];
+		const r6 = r[6];
+		const r7 = r[7];
+		const r8 = r[8];
+		const r9 = r[9];
+		const t0 = u8to16(data, offset + 0);
+		const t1 = u8to16(data, offset + 2);
+		const t2 = u8to16(data, offset + 4);
+		const t3 = u8to16(data, offset + 6);
+		const t4 = u8to16(data, offset + 8);
+		const t5 = u8to16(data, offset + 10);
+		const t6 = u8to16(data, offset + 12);
+		const t7 = u8to16(data, offset + 14);
+		let h0 = h[0] + (t0 & 8191);
+		let h1 = h[1] + ((t0 >>> 13 | t1 << 3) & 8191);
+		let h2 = h[2] + ((t1 >>> 10 | t2 << 6) & 8191);
+		let h3 = h[3] + ((t2 >>> 7 | t3 << 9) & 8191);
+		let h4 = h[4] + ((t3 >>> 4 | t4 << 12) & 8191);
+		let h5 = h[5] + (t4 >>> 1 & 8191);
+		let h6 = h[6] + ((t4 >>> 14 | t5 << 2) & 8191);
+		let h7 = h[7] + ((t5 >>> 11 | t6 << 5) & 8191);
+		let h8 = h[8] + ((t6 >>> 8 | t7 << 8) & 8191);
+		let h9 = h[9] + (t7 >>> 5 | hibit);
+		let c = 0;
+		let d0 = c + h0 * r0 + h1 * (5 * r9) + h2 * (5 * r8) + h3 * (5 * r7) + h4 * (5 * r6);
+		c = d0 >>> 13;
+		d0 &= 8191;
+		d0 += h5 * (5 * r5) + h6 * (5 * r4) + h7 * (5 * r3) + h8 * (5 * r2) + h9 * (5 * r1);
+		c += d0 >>> 13;
+		d0 &= 8191;
+		let d1 = c + h0 * r1 + h1 * r0 + h2 * (5 * r9) + h3 * (5 * r8) + h4 * (5 * r7);
+		c = d1 >>> 13;
+		d1 &= 8191;
+		d1 += h5 * (5 * r6) + h6 * (5 * r5) + h7 * (5 * r4) + h8 * (5 * r3) + h9 * (5 * r2);
+		c += d1 >>> 13;
+		d1 &= 8191;
+		let d2 = c + h0 * r2 + h1 * r1 + h2 * r0 + h3 * (5 * r9) + h4 * (5 * r8);
+		c = d2 >>> 13;
+		d2 &= 8191;
+		d2 += h5 * (5 * r7) + h6 * (5 * r6) + h7 * (5 * r5) + h8 * (5 * r4) + h9 * (5 * r3);
+		c += d2 >>> 13;
+		d2 &= 8191;
+		let d3 = c + h0 * r3 + h1 * r2 + h2 * r1 + h3 * r0 + h4 * (5 * r9);
+		c = d3 >>> 13;
+		d3 &= 8191;
+		d3 += h5 * (5 * r8) + h6 * (5 * r7) + h7 * (5 * r6) + h8 * (5 * r5) + h9 * (5 * r4);
+		c += d3 >>> 13;
+		d3 &= 8191;
+		let d4 = c + h0 * r4 + h1 * r3 + h2 * r2 + h3 * r1 + h4 * r0;
+		c = d4 >>> 13;
+		d4 &= 8191;
+		d4 += h5 * (5 * r9) + h6 * (5 * r8) + h7 * (5 * r7) + h8 * (5 * r6) + h9 * (5 * r5);
+		c += d4 >>> 13;
+		d4 &= 8191;
+		let d5 = c + h0 * r5 + h1 * r4 + h2 * r3 + h3 * r2 + h4 * r1;
+		c = d5 >>> 13;
+		d5 &= 8191;
+		d5 += h5 * r0 + h6 * (5 * r9) + h7 * (5 * r8) + h8 * (5 * r7) + h9 * (5 * r6);
+		c += d5 >>> 13;
+		d5 &= 8191;
+		let d6 = c + h0 * r6 + h1 * r5 + h2 * r4 + h3 * r3 + h4 * r2;
+		c = d6 >>> 13;
+		d6 &= 8191;
+		d6 += h5 * r1 + h6 * r0 + h7 * (5 * r9) + h8 * (5 * r8) + h9 * (5 * r7);
+		c += d6 >>> 13;
+		d6 &= 8191;
+		let d7 = c + h0 * r7 + h1 * r6 + h2 * r5 + h3 * r4 + h4 * r3;
+		c = d7 >>> 13;
+		d7 &= 8191;
+		d7 += h5 * r2 + h6 * r1 + h7 * r0 + h8 * (5 * r9) + h9 * (5 * r8);
+		c += d7 >>> 13;
+		d7 &= 8191;
+		let d8 = c + h0 * r8 + h1 * r7 + h2 * r6 + h3 * r5 + h4 * r4;
+		c = d8 >>> 13;
+		d8 &= 8191;
+		d8 += h5 * r3 + h6 * r2 + h7 * r1 + h8 * r0 + h9 * (5 * r9);
+		c += d8 >>> 13;
+		d8 &= 8191;
+		let d9 = c + h0 * r9 + h1 * r8 + h2 * r7 + h3 * r6 + h4 * r5;
+		c = d9 >>> 13;
+		d9 &= 8191;
+		d9 += h5 * r4 + h6 * r3 + h7 * r2 + h8 * r1 + h9 * r0;
+		c += d9 >>> 13;
+		d9 &= 8191;
+		c = (c << 2) + c | 0;
+		c = c + d0 | 0;
+		d0 = c & 8191;
+		c = c >>> 13;
+		d1 += c;
+		h[0] = d0;
+		h[1] = d1;
+		h[2] = d2;
+		h[3] = d3;
+		h[4] = d4;
+		h[5] = d5;
+		h[6] = d6;
+		h[7] = d7;
+		h[8] = d8;
+		h[9] = d9;
+	}
+	finalize() {
+		const { h, pad } = this;
+		const g = /* @__PURE__ */ new Uint16Array(10);
+		let c = h[1] >>> 13;
+		h[1] &= 8191;
+		for (let i = 2; i < 10; i++) {
+			h[i] += c;
+			c = h[i] >>> 13;
+			h[i] &= 8191;
+		}
+		h[0] += c * 5;
+		c = h[0] >>> 13;
+		h[0] &= 8191;
+		h[1] += c;
+		c = h[1] >>> 13;
+		h[1] &= 8191;
+		h[2] += c;
+		g[0] = h[0] + 5;
+		c = g[0] >>> 13;
+		g[0] &= 8191;
+		for (let i = 1; i < 10; i++) {
+			g[i] = h[i] + c;
+			c = g[i] >>> 13;
+			g[i] &= 8191;
+		}
+		g[9] -= 8192;
+		let mask = (c ^ 1) - 1;
+		for (let i = 0; i < 10; i++) g[i] &= mask;
+		mask = ~mask;
+		for (let i = 0; i < 10; i++) h[i] = h[i] & mask | g[i];
+		h[0] = (h[0] | h[1] << 13) & 65535;
+		h[1] = (h[1] >>> 3 | h[2] << 10) & 65535;
+		h[2] = (h[2] >>> 6 | h[3] << 7) & 65535;
+		h[3] = (h[3] >>> 9 | h[4] << 4) & 65535;
+		h[4] = (h[4] >>> 12 | h[5] << 1 | h[6] << 14) & 65535;
+		h[5] = (h[6] >>> 2 | h[7] << 11) & 65535;
+		h[6] = (h[7] >>> 5 | h[8] << 8) & 65535;
+		h[7] = (h[8] >>> 8 | h[9] << 5) & 65535;
+		let f = h[0] + pad[0];
+		h[0] = f & 65535;
+		for (let i = 1; i < 8; i++) {
+			f = (h[i] + pad[i] | 0) + (f >>> 16) | 0;
+			h[i] = f & 65535;
+		}
+		g.fill(0);
+	}
+	update(data) {
+		const { buffer, blockLen } = this;
+		const len = data.length;
+		for (let pos = 0; pos < len;) {
+			const take = Math.min(blockLen - this.pos, len - pos);
+			if (take === blockLen) {
+				for (; blockLen <= len - pos; pos += blockLen) this.process(data, pos);
+				continue;
+			}
+			buffer.set(data.subarray(pos, pos + take), this.pos);
+			this.pos += take;
+			pos += take;
+			if (this.pos === blockLen) {
+				this.process(buffer, 0, false);
+				this.pos = 0;
+			}
+		}
+		return this;
+	}
+	destroy() {
+		this.h.fill(0);
+		this.r.fill(0);
+		this.buffer.fill(0);
+		this.pad.fill(0);
+		this.pos = 0;
+	}
+	digestInto(out) {
+		const { buffer, h } = this;
+		let { pos } = this;
+		if (pos) {
+			buffer[pos++] = 1;
+			for (; pos < 16; pos++) buffer[pos] = 0;
+			this.process(buffer, 0, true);
+		}
+		this.finalize();
+		let opos = 0;
+		for (let i = 0; i < 8; i++) {
+			out[opos++] = h[i] >>> 0;
+			out[opos++] = h[i] >>> 8;
+		}
+		return out;
+	}
+	digest() {
+		const { buffer, outputLen } = this;
+		this.digestInto(buffer);
+		const res = buffer.slice(0, outputLen);
+		this.destroy();
+		return res;
+	}
+};
+//#endregion
+export { Poly1305 };
+
+//# sourceMappingURL=poly1305.mjs.map

package/dist/internal/poly1305.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"poly1305.mjs","names":[],"sources":["../../src/internal/poly1305.ts"],"sourcesContent":["/**\n * Adapted from noble-ciphers, Copyright (c) 2022 Paul Miller.\n * MIT; source revision 785181b0772ba84afbe812025714163e4e48262f.\n * Poly1305 arithmetic derives from the public-domain poly1305-donna implementation.\n * See ../../THIRD_PARTY_NOTICES.md for source mapping and licenses.\n */\nfunction u8to16(a: Uint8Array, i: number) {\n  return (a[i++] & 0xff) | ((a[i++] & 0xff) << 8);\n}\n\nexport class Poly1305 {\n  readonly blockLen = 16;\n  readonly outputLen = 16;\n  private buffer = new Uint8Array(16);\n  private r = new Uint16Array(10);\n  private h = new Uint16Array(10);\n  private pad = new Uint16Array(8);\n  private pos = 0;\n\n  constructor(key: Uint8Array) {\n    const t0 = u8to16(key, 0);\n    const t1 = u8to16(key, 2);\n    const t2 = u8to16(key, 4);\n    const t3 = u8to16(key, 6);\n    const t4 = u8to16(key, 8);\n    const t5 = u8to16(key, 10);\n    const t6 = u8to16(key, 12);\n    const t7 = u8to16(key, 14);\n\n    // https://github.com/floodyberry/poly1305-donna/blob/e6ad6e091d30d7f4ec2d4f978be1fcfcbce72781/poly1305-donna-16.h#L47\n    this.r[0] = t0 & 0x1fff;\n    this.r[1] = ((t0 >>> 13) | (t1 << 3)) & 0x1fff;\n    this.r[2] = ((t1 >>> 10) | (t2 << 6)) & 0x1f03;\n    this.r[3] = ((t2 >>> 7) | (t3 << 9)) & 0x1fff;\n    this.r[4] = ((t3 >>> 4) | (t4 << 12)) & 0x00ff;\n    this.r[5] = (t4 >>> 1) & 0x1ffe;\n    this.r[6] = ((t4 >>> 14) | (t5 << 2)) & 0x1fff;\n    this.r[7] = ((t5 >>> 11) | (t6 << 5)) & 0x1f81;\n    this.r[8] = ((t6 >>> 8) | (t7 << 8)) & 0x1fff;\n    this.r[9] = (t7 >>> 5) & 0x007f;\n    for (let i = 0; i < 8; i++) this.pad[i] = u8to16(key, 16 + 2 * i);\n  }\n\n  private process(data: Uint8Array, offset: number, isLast = false) {\n    const hibit = isLast ? 0 : 1 << 11;\n    const { h, r } = this;\n    const r0 = r[0];\n    const r1 = r[1];\n    const r2 = r[2];\n    const r3 = r[3];\n    const r4 = r[4];\n    const r5 = r[5];\n    const r6 = r[6];\n    const r7 = r[7];\n    const r8 = r[8];\n    const r9 = r[9];\n\n    const t0 = u8to16(data, offset + 0);\n    const t1 = u8to16(data, offset + 2);\n    const t2 = u8to16(data, offset + 4);\n    const t3 = u8to16(data, offset + 6);\n    const t4 = u8to16(data, offset + 8);\n    const t5 = u8to16(data, offset + 10);\n    const t6 = u8to16(data, offset + 12);\n    const t7 = u8to16(data, offset + 14);\n\n    let h0 = h[0] + (t0 & 0x1fff);\n    let h1 = h[1] + (((t0 >>> 13) | (t1 << 3)) & 0x1fff);\n    let h2 = h[2] + (((t1 >>> 10) | (t2 << 6)) & 0x1fff);\n    let h3 = h[3] + (((t2 >>> 7) | (t3 << 9)) & 0x1fff);\n    let h4 = h[4] + (((t3 >>> 4) | (t4 << 12)) & 0x1fff);\n    let h5 = h[5] + ((t4 >>> 1) & 0x1fff);\n    let h6 = h[6] + (((t4 >>> 14) | (t5 << 2)) & 0x1fff);\n    let h7 = h[7] + (((t5 >>> 11) | (t6 << 5)) & 0x1fff);\n    let h8 = h[8] + (((t6 >>> 8) | (t7 << 8)) & 0x1fff);\n    let h9 = h[9] + ((t7 >>> 5) | hibit);\n\n    let c = 0;\n\n    let d0 = c + h0 * r0 + h1 * (5 * r9) + h2 * (5 * r8) + h3 * (5 * r7) + h4 * (5 * r6);\n\n    c = d0 >>> 13;\n    d0 &= 0x1fff;\n    d0 += h5 * (5 * r5) + h6 * (5 * r4) + h7 * (5 * r3) + h8 * (5 * r2) + h9 * (5 * r1);\n    c += d0 >>> 13;\n    d0 &= 0x1fff;\n\n    let d1 = c + h0 * r1 + h1 * r0 + h2 * (5 * r9) + h3 * (5 * r8) + h4 * (5 * r7);\n\n    c = d1 >>> 13;\n    d1 &= 0x1fff;\n    d1 += h5 * (5 * r6) + h6 * (5 * r5) + h7 * (5 * r4) + h8 * (5 * r3) + h9 * (5 * r2);\n    c += d1 >>> 13;\n    d1 &= 0x1fff;\n\n    let d2 = c + h0 * r2 + h1 * r1 + h2 * r0 + h3 * (5 * r9) + h4 * (5 * r8);\n\n    c = d2 >>> 13;\n    d2 &= 0x1fff;\n    d2 += h5 * (5 * r7) + h6 * (5 * r6) + h7 * (5 * r5) + h8 * (5 * r4) + h9 * (5 * r3);\n    c += d2 >>> 13;\n    d2 &= 0x1fff;\n\n    let d3 = c + h0 * r3 + h1 * r2 + h2 * r1 + h3 * r0 + h4 * (5 * r9);\n\n    c = d3 >>> 13;\n    d3 &= 0x1fff;\n    d3 += h5 * (5 * r8) + h6 * (5 * r7) + h7 * (5 * r6) + h8 * (5 * r5) + h9 * (5 * r4);\n    c += d3 >>> 13;\n    d3 &= 0x1fff;\n\n    let d4 = c + h0 * r4 + h1 * r3 + h2 * r2 + h3 * r1 + h4 * r0;\n\n    c = d4 >>> 13;\n    d4 &= 0x1fff;\n    d4 += h5 * (5 * r9) + h6 * (5 * r8) + h7 * (5 * r7) + h8 * (5 * r6) + h9 * (5 * r5);\n    c += d4 >>> 13;\n    d4 &= 0x1fff;\n\n    let d5 = c + h0 * r5 + h1 * r4 + h2 * r3 + h3 * r2 + h4 * r1;\n\n    c = d5 >>> 13;\n    d5 &= 0x1fff;\n    d5 += h5 * r0 + h6 * (5 * r9) + h7 * (5 * r8) + h8 * (5 * r7) + h9 * (5 * r6);\n    c += d5 >>> 13;\n    d5 &= 0x1fff;\n\n    let d6 = c + h0 * r6 + h1 * r5 + h2 * r4 + h3 * r3 + h4 * r2;\n\n    c = d6 >>> 13;\n    d6 &= 0x1fff;\n    d6 += h5 * r1 + h6 * r0 + h7 * (5 * r9) + h8 * (5 * r8) + h9 * (5 * r7);\n    c += d6 >>> 13;\n    d6 &= 0x1fff;\n\n    let d7 = c + h0 * r7 + h1 * r6 + h2 * r5 + h3 * r4 + h4 * r3;\n\n    c = d7 >>> 13;\n    d7 &= 0x1fff;\n    d7 += h5 * r2 + h6 * r1 + h7 * r0 + h8 * (5 * r9) + h9 * (5 * r8);\n    c += d7 >>> 13;\n    d7 &= 0x1fff;\n\n    let d8 = c + h0 * r8 + h1 * r7 + h2 * r6 + h3 * r5 + h4 * r4;\n\n    c = d8 >>> 13;\n    d8 &= 0x1fff;\n    d8 += h5 * r3 + h6 * r2 + h7 * r1 + h8 * r0 + h9 * (5 * r9);\n    c += d8 >>> 13;\n    d8 &= 0x1fff;\n\n    let d9 = c + h0 * r9 + h1 * r8 + h2 * r7 + h3 * r6 + h4 * r5;\n\n    c = d9 >>> 13;\n    d9 &= 0x1fff;\n    d9 += h5 * r4 + h6 * r3 + h7 * r2 + h8 * r1 + h9 * r0;\n    c += d9 >>> 13;\n    d9 &= 0x1fff;\n\n    c = ((c << 2) + c) | 0;\n    c = (c + d0) | 0;\n    d0 = c & 0x1fff;\n    c = c >>> 13;\n    d1 += c;\n\n    h[0] = d0;\n    h[1] = d1;\n    h[2] = d2;\n    h[3] = d3;\n    h[4] = d4;\n    h[5] = d5;\n    h[6] = d6;\n    h[7] = d7;\n    h[8] = d8;\n    h[9] = d9;\n  }\n\n  private finalize() {\n    const { h, pad } = this;\n    const g = new Uint16Array(10);\n    let c = h[1] >>> 13;\n\n    h[1] &= 0x1fff;\n    for (let i = 2; i < 10; i++) {\n      h[i] += c;\n      c = h[i] >>> 13;\n      h[i] &= 0x1fff;\n    }\n    h[0] += c * 5;\n    c = h[0] >>> 13;\n    h[0] &= 0x1fff;\n    h[1] += c;\n    c = h[1] >>> 13;\n    h[1] &= 0x1fff;\n    h[2] += c;\n\n    g[0] = h[0] + 5;\n    c = g[0] >>> 13;\n    g[0] &= 0x1fff;\n    for (let i = 1; i < 10; i++) {\n      g[i] = h[i] + c;\n      c = g[i] >>> 13;\n      g[i] &= 0x1fff;\n    }\n    g[9] -= 1 << 13;\n\n    let mask = (c ^ 1) - 1;\n\n    for (let i = 0; i < 10; i++) g[i] &= mask;\n    mask = ~mask;\n    for (let i = 0; i < 10; i++) h[i] = (h[i] & mask) | g[i];\n    h[0] = (h[0] | (h[1] << 13)) & 0xffff;\n    h[1] = ((h[1] >>> 3) | (h[2] << 10)) & 0xffff;\n    h[2] = ((h[2] >>> 6) | (h[3] << 7)) & 0xffff;\n    h[3] = ((h[3] >>> 9) | (h[4] << 4)) & 0xffff;\n    h[4] = ((h[4] >>> 12) | (h[5] << 1) | (h[6] << 14)) & 0xffff;\n    h[5] = ((h[6] >>> 2) | (h[7] << 11)) & 0xffff;\n    h[6] = ((h[7] >>> 5) | (h[8] << 8)) & 0xffff;\n    h[7] = ((h[8] >>> 8) | (h[9] << 5)) & 0xffff;\n\n    let f = h[0] + pad[0];\n\n    h[0] = f & 0xffff;\n    for (let i = 1; i < 8; i++) {\n      f = (((h[i] + pad[i]) | 0) + (f >>> 16)) | 0;\n      h[i] = f & 0xffff;\n    }\n    g.fill(0);\n  }\n  update(data: Uint8Array): this {\n    const { buffer, blockLen } = this;\n    const len = data.length;\n\n    for (let pos = 0; pos < len;) {\n      const take = Math.min(blockLen - this.pos, len - pos);\n\n      // Fast path: we have at least one block in input\n      if (take === blockLen) {\n        for (; blockLen <= len - pos; pos += blockLen) this.process(data, pos);\n        continue;\n      }\n      buffer.set(data.subarray(pos, pos + take), this.pos);\n      this.pos += take;\n      pos += take;\n      if (this.pos === blockLen) {\n        this.process(buffer, 0, false);\n        this.pos = 0;\n      }\n    }\n\n    return this;\n  }\n  destroy(): void {\n    this.h.fill(0);\n    this.r.fill(0);\n    this.buffer.fill(0);\n    this.pad.fill(0);\n    this.pos = 0;\n  }\n  digestInto(out: Uint8Array): Uint8Array {\n    const { buffer, h } = this;\n    let { pos } = this;\n\n    if (pos) {\n      buffer[pos++] = 1;\n      for (; pos < 16; pos++) buffer[pos] = 0;\n      this.process(buffer, 0, true);\n    }\n    this.finalize();\n    let opos = 0;\n\n    for (let i = 0; i < 8; i++) {\n      out[opos++] = h[i] >>> 0;\n      out[opos++] = h[i] >>> 8;\n    }\n\n    return out;\n  }\n  digest(): Uint8Array {\n    const { buffer, outputLen } = this;\n\n    this.digestInto(buffer);\n    const res = buffer.slice(0, outputLen);\n\n    this.destroy();\n\n    return res;\n  }\n}\n"],"mappings":";;;;;;;AAMA,SAAS,OAAO,GAAe,GAAW;CACxC,OAAQ,EAAE,OAAO,OAAU,EAAE,OAAO,QAAS;AAC/C;AAEA,IAAa,WAAb,MAAsB;CACpB,WAAoB;CACpB,YAAqB;CACrB,yBAAiB,IAAI,WAAW,EAAE;CAClC,oBAAY,IAAI,YAAY,EAAE;CAC9B,oBAAY,IAAI,YAAY,EAAE;CAC9B,sBAAc,IAAI,YAAY,CAAC;CAC/B,MAAc;CAEd,YAAY,KAAiB;EAC3B,MAAM,KAAK,OAAO,KAAK,CAAC;EACxB,MAAM,KAAK,OAAO,KAAK,CAAC;EACxB,MAAM,KAAK,OAAO,KAAK,CAAC;EACxB,MAAM,KAAK,OAAO,KAAK,CAAC;EACxB,MAAM,KAAK,OAAO,KAAK,CAAC;EACxB,MAAM,KAAK,OAAO,KAAK,EAAE;EACzB,MAAM,KAAK,OAAO,KAAK,EAAE;EACzB,MAAM,KAAK,OAAO,KAAK,EAAE;EAGzB,KAAK,EAAE,KAAK,KAAK;EACjB,KAAK,EAAE,MAAO,OAAO,KAAO,MAAM,KAAM;EACxC,KAAK,EAAE,MAAO,OAAO,KAAO,MAAM,KAAM;EACxC,KAAK,EAAE,MAAO,OAAO,IAAM,MAAM,KAAM;EACvC,KAAK,EAAE,MAAO,OAAO,IAAM,MAAM,MAAO;EACxC,KAAK,EAAE,KAAM,OAAO,IAAK;EACzB,KAAK,EAAE,MAAO,OAAO,KAAO,MAAM,KAAM;EACxC,KAAK,EAAE,MAAO,OAAO,KAAO,MAAM,KAAM;EACxC,KAAK,EAAE,MAAO,OAAO,IAAM,MAAM,KAAM;EACvC,KAAK,EAAE,KAAM,OAAO,IAAK;EACzB,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK,KAAK,IAAI,KAAK,OAAO,KAAK,KAAK,IAAI,CAAC;CAClE;CAEA,QAAgB,MAAkB,QAAgB,SAAS,OAAO;EAChE,MAAM,QAAQ,SAAS,IAAI;EAC3B,MAAM,EAAE,GAAG,MAAM;EACjB,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EACb,MAAM,KAAK,EAAE;EAEb,MAAM,KAAK,OAAO,MAAM,SAAS,CAAC;EAClC,MAAM,KAAK,OAAO,MAAM,SAAS,CAAC;EAClC,MAAM,KAAK,OAAO,MAAM,SAAS,CAAC;EAClC,MAAM,KAAK,OAAO,MAAM,SAAS,CAAC;EAClC,MAAM,KAAK,OAAO,MAAM,SAAS,CAAC;EAClC,MAAM,KAAK,OAAO,MAAM,SAAS,EAAE;EACnC,MAAM,KAAK,OAAO,MAAM,SAAS,EAAE;EACnC,MAAM,KAAK,OAAO,MAAM,SAAS,EAAE;EAEnC,IAAI,KAAK,EAAE,MAAM,KAAK;EACtB,IAAI,KAAK,EAAE,OAAQ,OAAO,KAAO,MAAM,KAAM;EAC7C,IAAI,KAAK,EAAE,OAAQ,OAAO,KAAO,MAAM,KAAM;EAC7C,IAAI,KAAK,EAAE,OAAQ,OAAO,IAAM,MAAM,KAAM;EAC5C,IAAI,KAAK,EAAE,OAAQ,OAAO,IAAM,MAAM,MAAO;EAC7C,IAAI,KAAK,EAAE,MAAO,OAAO,IAAK;EAC9B,IAAI,KAAK,EAAE,OAAQ,OAAO,KAAO,MAAM,KAAM;EAC7C,IAAI,KAAK,EAAE,OAAQ,OAAO,KAAO,MAAM,KAAM;EAC7C,IAAI,KAAK,EAAE,OAAQ,OAAO,IAAM,MAAM,KAAM;EAC5C,IAAI,KAAK,EAAE,MAAO,OAAO,IAAK;EAE9B,IAAI,IAAI;EAER,IAAI,KAAK,IAAI,KAAK,KAAK,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAEjF,IAAI,OAAO;EACX,MAAM;EACN,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAChF,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAE3E,IAAI,OAAO;EACX,MAAM;EACN,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAChF,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,MAAM,IAAI,MAAM,MAAM,IAAI;EAErE,IAAI,OAAO;EACX,MAAM;EACN,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAChF,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,MAAM,IAAI;EAE/D,IAAI,OAAO;EACX,MAAM;EACN,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAChF,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK;EAE1D,IAAI,OAAO;EACX,MAAM;EACN,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAChF,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK;EAE1D,IAAI,OAAO;EACX,MAAM;EACN,MAAM,KAAK,KAAK,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EAC1E,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK;EAE1D,IAAI,OAAO;EACX,MAAM;EACN,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,IAAI,MAAM,MAAM,IAAI,MAAM,MAAM,IAAI;EACpE,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK;EAE1D,IAAI,OAAO;EACX,MAAM;EACN,MAAM,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,MAAM,IAAI,MAAM,MAAM,IAAI;EAC9D,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK;EAE1D,IAAI,OAAO;EACX,MAAM;EACN,MAAM,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,MAAM,IAAI;EACxD,KAAK,OAAO;EACZ,MAAM;EAEN,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK;EAE1D,IAAI,OAAO;EACX,MAAM;EACN,MAAM,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK;EACnD,KAAK,OAAO;EACZ,MAAM;EAEN,KAAM,KAAK,KAAK,IAAK;EACrB,IAAK,IAAI,KAAM;EACf,KAAK,IAAI;EACT,IAAI,MAAM;EACV,MAAM;EAEN,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;EACP,EAAE,KAAK;CACT;CAEA,WAAmB;EACjB,MAAM,EAAE,GAAG,QAAQ;EACnB,MAAM,oBAAI,IAAI,YAAY,EAAE;EAC5B,IAAI,IAAI,EAAE,OAAO;EAEjB,EAAE,MAAM;EACR,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;GAC3B,EAAE,MAAM;GACR,IAAI,EAAE,OAAO;GACb,EAAE,MAAM;EACV;EACA,EAAE,MAAM,IAAI;EACZ,IAAI,EAAE,OAAO;EACb,EAAE,MAAM;EACR,EAAE,MAAM;EACR,IAAI,EAAE,OAAO;EACb,EAAE,MAAM;EACR,EAAE,MAAM;EAER,EAAE,KAAK,EAAE,KAAK;EACd,IAAI,EAAE,OAAO;EACb,EAAE,MAAM;EACR,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;GAC3B,EAAE,KAAK,EAAE,KAAK;GACd,IAAI,EAAE,OAAO;GACb,EAAE,MAAM;EACV;EACA,EAAE,MAAM;EAER,IAAI,QAAQ,IAAI,KAAK;EAErB,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,EAAE,MAAM;EACrC,OAAO,CAAC;EACR,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,EAAE,KAAM,EAAE,KAAK,OAAQ,EAAE;EACtD,EAAE,MAAM,EAAE,KAAM,EAAE,MAAM,MAAO;EAC/B,EAAE,MAAO,EAAE,OAAO,IAAM,EAAE,MAAM,MAAO;EACvC,EAAE,MAAO,EAAE,OAAO,IAAM,EAAE,MAAM,KAAM;EACtC,EAAE,MAAO,EAAE,OAAO,IAAM,EAAE,MAAM,KAAM;EACtC,EAAE,MAAO,EAAE,OAAO,KAAO,EAAE,MAAM,IAAM,EAAE,MAAM,MAAO;EACtD,EAAE,MAAO,EAAE,OAAO,IAAM,EAAE,MAAM,MAAO;EACvC,EAAE,MAAO,EAAE,OAAO,IAAM,EAAE,MAAM,KAAM;EACtC,EAAE,MAAO,EAAE,OAAO,IAAM,EAAE,MAAM,KAAM;EAEtC,IAAI,IAAI,EAAE,KAAK,IAAI;EAEnB,EAAE,KAAK,IAAI;EACX,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;GAC1B,KAAO,EAAE,KAAK,IAAI,KAAM,MAAM,MAAM,MAAO;GAC3C,EAAE,KAAK,IAAI;EACb;EACA,EAAE,KAAK,CAAC;CACV;CACA,OAAO,MAAwB;EAC7B,MAAM,EAAE,QAAQ,aAAa;EAC7B,MAAM,MAAM,KAAK;EAEjB,KAAK,IAAI,MAAM,GAAG,MAAM,MAAM;GAC5B,MAAM,OAAO,KAAK,IAAI,WAAW,KAAK,KAAK,MAAM,GAAG;GAGpD,IAAI,SAAS,UAAU;IACrB,OAAO,YAAY,MAAM,KAAK,OAAO,UAAU,KAAK,QAAQ,MAAM,GAAG;IACrE;GACF;GACA,OAAO,IAAI,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG;GACnD,KAAK,OAAO;GACZ,OAAO;GACP,IAAI,KAAK,QAAQ,UAAU;IACzB,KAAK,QAAQ,QAAQ,GAAG,KAAK;IAC7B,KAAK,MAAM;GACb;EACF;EAEA,OAAO;CACT;CACA,UAAgB;EACd,KAAK,EAAE,KAAK,CAAC;EACb,KAAK,EAAE,KAAK,CAAC;EACb,KAAK,OAAO,KAAK,CAAC;EAClB,KAAK,IAAI,KAAK,CAAC;EACf,KAAK,MAAM;CACb;CACA,WAAW,KAA6B;EACtC,MAAM,EAAE,QAAQ,MAAM;EACtB,IAAI,EAAE,QAAQ;EAEd,IAAI,KAAK;GACP,OAAO,SAAS;GAChB,OAAO,MAAM,IAAI,OAAO,OAAO,OAAO;GACtC,KAAK,QAAQ,QAAQ,GAAG,IAAI;EAC9B;EACA,KAAK,SAAS;EACd,IAAI,OAAO;EAEX,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;GAC1B,IAAI,UAAU,EAAE,OAAO;GACvB,IAAI,UAAU,EAAE,OAAO;EACzB;EAEA,OAAO;CACT;CACA,SAAqB;EACnB,MAAM,EAAE,QAAQ,cAAc;EAE9B,KAAK,WAAW,MAAM;EACtB,MAAM,MAAM,OAAO,MAAM,GAAG,SAAS;EAErC,KAAK,QAAQ;EAEb,OAAO;CACT;AACF"}

package/dist/internal/signature.mjs

@@ -0,0 +1,140 @@
+import { InvalidInput } from "../Errors.mjs";
+import { PrivateKeyParameters, PublicKeyParameters, SignInput, Signature, VerifyInput } from "../Signature.mjs";
+import { copy, decode, importError, nativeError, withSecret } from "./common.mjs";
+import { Effect, Redacted, Schema } from "effect";
+import { Base64Url } from "effect/encoding";
+//#region src/internal/signature.ts
+const derBytes = Schema.Uint8Array.check(Schema.isMinLength(1), Schema.isMaxLength(16384));
+const RsaAlgorithm = Schema.Struct({ modulusLength: Schema.Int.check(Schema.isGreaterThanOrEqualTo(2048)) });
+const importAlgorithm = (algorithm) => {
+	switch (algorithm) {
+		case "ECDSA-P256-SHA256": return {
+			name: "ECDSA",
+			namedCurve: "P-256"
+		};
+		case "RSA-PSS-SHA256": return {
+			name: "RSA-PSS",
+			hash: "SHA-256"
+		};
+		case "RSASSA-PKCS1-v1_5-SHA256": return {
+			name: "RSASSA-PKCS1-v1_5",
+			hash: "SHA-256"
+		};
+		case "Ed25519": return { name: "Ed25519" };
+	}
+};
+const operationAlgorithm = (algorithm) => {
+	switch (algorithm) {
+		case "ECDSA-P256-SHA256": return {
+			name: "ECDSA",
+			hash: "SHA-256"
+		};
+		case "RSA-PSS-SHA256": return {
+			name: "RSA-PSS",
+			saltLength: 32
+		};
+		case "RSASSA-PKCS1-v1_5-SHA256": return { name: "RSASSA-PKCS1-v1_5" };
+		case "Ed25519": return { name: "Ed25519" };
+	}
+};
+const makeSignature = (subtle) => {
+	const importComponents = Effect.fnUntraced(function* (parameters, usage) {
+		let jwk;
+		switch (parameters.algorithm) {
+			case "ECDSA-P256-SHA256":
+				jwk = {
+					kty: "EC",
+					crv: "P-256",
+					x: Base64Url.encode(parameters.x),
+					y: Base64Url.encode(parameters.y)
+				};
+				break;
+			case "Ed25519":
+				jwk = {
+					kty: "OKP",
+					crv: "Ed25519",
+					x: Base64Url.encode(parameters.x)
+				};
+				break;
+			case "RSASSA-PKCS1-v1_5-SHA256":
+			case "RSA-PSS-SHA256":
+				jwk = {
+					kty: "RSA",
+					n: Base64Url.encode(parameters.n),
+					e: Base64Url.encode(parameters.e)
+				};
+				if ("p" in parameters) {
+					jwk.p = Base64Url.encode(parameters.p);
+					jwk.q = Base64Url.encode(parameters.q);
+					jwk.dp = Base64Url.encode(parameters.dp);
+					jwk.dq = Base64Url.encode(parameters.dq);
+					jwk.qi = Base64Url.encode(parameters.qi);
+				}
+		}
+		if ("d" in parameters) jwk.d = Base64Url.encode(parameters.d);
+		const key = yield* Effect.tryPromise({
+			try: () => subtle.importKey("jwk", jwk, importAlgorithm(parameters.algorithm), true, [usage]),
+			catch: importError
+		});
+		if (parameters.algorithm === "RSA-PSS-SHA256" || parameters.algorithm === "RSASSA-PKCS1-v1_5-SHA256") yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(Effect.mapError(() => InvalidInput.make({ reason: "key" })));
+		return key;
+	});
+	const importKey = Effect.fnUntraced(function* (algorithm, format, material) {
+		yield* decode(derBytes, material, "key");
+		const key = yield* Effect.tryPromise({
+			try: () => subtle.importKey(format, material, importAlgorithm(algorithm), false, [format === "pkcs8" ? "sign" : "verify"]),
+			catch: importError
+		});
+		if (algorithm === "RSA-PSS-SHA256" || algorithm === "RSASSA-PKCS1-v1_5-SHA256") yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(Effect.mapError(() => InvalidInput.make({ reason: "key" })));
+		return key;
+	});
+	return Signature.of({
+		encodePublicKey: Effect.fnUntraced(function* (input) {
+			const parameters = yield* decode(PublicKeyParameters, input, "key");
+			const key = yield* importComponents(parameters, "verify");
+			const encoded = yield* Effect.tryPromise({
+				try: () => subtle.exportKey("spki", key),
+				catch: nativeError
+			});
+			return new Uint8Array(encoded);
+		}),
+		encodePrivateKey: Effect.fnUntraced(function* (input) {
+			const wrapped = yield* decode(Schema.Redacted(PrivateKeyParameters, { disallowJsonEncode: true }), input, "key");
+			const parameters = Redacted.value(wrapped);
+			const key = yield* importComponents(parameters, "sign");
+			const encoded = yield* Effect.tryPromise({
+				try: () => subtle.exportKey("pkcs8", key),
+				catch: nativeError
+			});
+			return Redacted.make(new Uint8Array(encoded));
+		}),
+		sign: Effect.fnUntraced(function* (input) {
+			const value = yield* decode(SignInput, input, "data");
+			const data = yield* copy(value.data);
+			return yield* withSecret(value.privateKey, (material) => Effect.gen(function* () {
+				const key = yield* importKey(value.algorithm, "pkcs8", material);
+				const result = yield* Effect.tryPromise({
+					try: () => subtle.sign(operationAlgorithm(value.algorithm), key, data),
+					catch: nativeError
+				});
+				return new Uint8Array(result);
+			}).pipe(Effect.uninterruptible));
+		}),
+		verify: Effect.fnUntraced(function* (input) {
+			const value = yield* decode(VerifyInput, input, "data");
+			const material = yield* copy(value.publicKey);
+			const data = yield* copy(value.data);
+			const signature = yield* copy(value.signature);
+			const key = yield* importKey(value.algorithm, "spki", material);
+			if ((value.algorithm === "ECDSA-P256-SHA256" || value.algorithm === "Ed25519") && signature.length !== 64) return false;
+			return yield* Effect.tryPromise({
+				try: () => subtle.verify(operationAlgorithm(value.algorithm), key, signature, data),
+				catch: nativeError
+			});
+		})
+	});
+};
+//#endregion
+export { makeSignature };
+
+//# sourceMappingURL=signature.mjs.map

package/dist/internal/signature.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.mjs","names":[],"sources":["../../src/internal/signature.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\nimport { Base64Url } from \"effect/encoding\";\n\nimport { InvalidInput } from \"../Errors\";\nimport {\n  type Algorithm,\n  PrivateKeyParameters,\n  PublicKeyParameters,\n  SignInput,\n  Signature,\n  VerifyInput,\n} from \"../Signature\";\nimport { copy, decode, importError, nativeError, withSecret } from \"./common\";\n\nconst derBytes = Schema.Uint8Array.check(Schema.isMinLength(1), Schema.isMaxLength(16384));\n\nconst RsaAlgorithm = Schema.Struct({\n  modulusLength: Schema.Int.check(Schema.isGreaterThanOrEqualTo(2048)),\n});\n\nconst importAlgorithm = (algorithm: Algorithm) => {\n  switch (algorithm) {\n    case \"ECDSA-P256-SHA256\":\n      return { name: \"ECDSA\", namedCurve: \"P-256\" };\n    case \"RSA-PSS-SHA256\":\n      return { name: \"RSA-PSS\", hash: \"SHA-256\" };\n    case \"RSASSA-PKCS1-v1_5-SHA256\":\n      return { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" };\n    case \"Ed25519\":\n      return { name: \"Ed25519\" };\n  }\n};\n\nconst operationAlgorithm = (algorithm: Algorithm) => {\n  switch (algorithm) {\n    case \"ECDSA-P256-SHA256\":\n      return { name: \"ECDSA\", hash: \"SHA-256\" };\n    case \"RSA-PSS-SHA256\":\n      return { name: \"RSA-PSS\", saltLength: 32 };\n    case \"RSASSA-PKCS1-v1_5-SHA256\":\n      return { name: \"RSASSA-PKCS1-v1_5\" };\n    case \"Ed25519\":\n      return { name: \"Ed25519\" };\n  }\n};\n\nexport const makeSignature = (subtle: SubtleCrypto): Signature[\"Service\"] => {\n  // JOSE owns JWK metadata and policy. The adapter translates validated raw\n  // components through its platform key parser.\n  const importComponents = Effect.fnUntraced(function* (\n    parameters: PublicKeyParameters | PrivateKeyParameters,\n    usage: \"sign\" | \"verify\",\n  ) {\n    let jwk: JsonWebKey;\n\n    switch (parameters.algorithm) {\n      case \"ECDSA-P256-SHA256\":\n        jwk = {\n          kty: \"EC\",\n          crv: \"P-256\",\n          x: Base64Url.encode(parameters.x),\n          y: Base64Url.encode(parameters.y),\n        };\n        break;\n      case \"Ed25519\":\n        jwk = { kty: \"OKP\", crv: \"Ed25519\", x: Base64Url.encode(parameters.x) };\n        break;\n      case \"RSASSA-PKCS1-v1_5-SHA256\":\n      case \"RSA-PSS-SHA256\":\n        jwk = { kty: \"RSA\", n: Base64Url.encode(parameters.n), e: Base64Url.encode(parameters.e) };\n        if (\"p\" in parameters) {\n          jwk.p = Base64Url.encode(parameters.p);\n          jwk.q = Base64Url.encode(parameters.q);\n          jwk.dp = Base64Url.encode(parameters.dp);\n          jwk.dq = Base64Url.encode(parameters.dq);\n          jwk.qi = Base64Url.encode(parameters.qi);\n        }\n    }\n    if (\"d\" in parameters) jwk.d = Base64Url.encode(parameters.d);\n\n    const key = yield* Effect.tryPromise({\n      try: () => subtle.importKey(\"jwk\", jwk, importAlgorithm(parameters.algorithm), true, [usage]),\n      catch: importError,\n    });\n\n    if (\n      parameters.algorithm === \"RSA-PSS-SHA256\" ||\n      parameters.algorithm === \"RSASSA-PKCS1-v1_5-SHA256\"\n    ) {\n      yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(\n        Effect.mapError(() => InvalidInput.make({ reason: \"key\" })),\n      );\n    }\n\n    return key;\n  });\n\n  const importKey = Effect.fnUntraced(function* (\n    algorithm: Algorithm,\n    format: \"pkcs8\" | \"spki\",\n    material: Uint8Array<ArrayBuffer>,\n  ) {\n    yield* decode(derBytes, material, \"key\");\n\n    const key = yield* Effect.tryPromise({\n      try: () =>\n        subtle.importKey(format, material, importAlgorithm(algorithm), false, [\n          format === \"pkcs8\" ? \"sign\" : \"verify\",\n        ]),\n      catch: importError,\n    });\n\n    if (algorithm === \"RSA-PSS-SHA256\" || algorithm === \"RSASSA-PKCS1-v1_5-SHA256\") {\n      // The platform parsed this DER key. Validate its actual modulus, not caller metadata.\n      yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(\n        Effect.mapError(() => InvalidInput.make({ reason: \"key\" })),\n      );\n    }\n\n    return key;\n  });\n\n  return Signature.of({\n    encodePublicKey: Effect.fnUntraced(function* (input) {\n      const parameters = yield* decode(PublicKeyParameters, input, \"key\");\n      const key = yield* importComponents(parameters, \"verify\");\n\n      const encoded = yield* Effect.tryPromise({\n        try: () => subtle.exportKey(\"spki\", key),\n        catch: nativeError,\n      });\n\n      return new Uint8Array(encoded);\n    }),\n    encodePrivateKey: Effect.fnUntraced(function* (input) {\n      const wrapped = yield* decode(\n        Schema.Redacted(PrivateKeyParameters, { disallowJsonEncode: true }),\n        input,\n        \"key\",\n      );\n\n      const parameters = Redacted.value(wrapped);\n      const key = yield* importComponents(parameters, \"sign\");\n\n      const encoded = yield* Effect.tryPromise({\n        try: () => subtle.exportKey(\"pkcs8\", key),\n        catch: nativeError,\n      });\n\n      return Redacted.make(new Uint8Array(encoded));\n    }),\n    sign: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(SignInput, input, \"data\");\n      const data = yield* copy(value.data);\n\n      return yield* withSecret(value.privateKey, (material) =>\n        Effect.gen(function* () {\n          const key = yield* importKey(value.algorithm, \"pkcs8\", material);\n\n          const result = yield* Effect.tryPromise({\n            try: () => subtle.sign(operationAlgorithm(value.algorithm), key, data),\n            catch: nativeError,\n          });\n\n          return new Uint8Array(result);\n        }).pipe(Effect.uninterruptible),\n      );\n    }),\n    verify: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(VerifyInput, input, \"data\");\n      const material = yield* copy(value.publicKey);\n      const data = yield* copy(value.data);\n      const signature = yield* copy(value.signature);\n      const key = yield* importKey(value.algorithm, \"spki\", material);\n\n      if (\n        (value.algorithm === \"ECDSA-P256-SHA256\" || value.algorithm === \"Ed25519\") &&\n        signature.length !== 64\n      )\n        return false;\n\n      return yield* Effect.tryPromise({\n        try: () => subtle.verify(operationAlgorithm(value.algorithm), key, signature, data),\n        catch: nativeError,\n      });\n    }),\n  });\n};\n"],"mappings":";;;;;;AAcA,MAAM,WAAW,OAAO,WAAW,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,KAAK,CAAC;AAEzF,MAAM,eAAe,OAAO,OAAO,EACjC,eAAe,OAAO,IAAI,MAAM,OAAO,uBAAuB,IAAI,CAAC,EACrE,CAAC;AAED,MAAM,mBAAmB,cAAyB;CAChD,QAAQ,WAAR;EACE,KAAK,qBACH,OAAO;GAAE,MAAM;GAAS,YAAY;EAAQ;EAC9C,KAAK,kBACH,OAAO;GAAE,MAAM;GAAW,MAAM;EAAU;EAC5C,KAAK,4BACH,OAAO;GAAE,MAAM;GAAqB,MAAM;EAAU;EACtD,KAAK,WACH,OAAO,EAAE,MAAM,UAAU;CAC7B;AACF;AAEA,MAAM,sBAAsB,cAAyB;CACnD,QAAQ,WAAR;EACE,KAAK,qBACH,OAAO;GAAE,MAAM;GAAS,MAAM;EAAU;EAC1C,KAAK,kBACH,OAAO;GAAE,MAAM;GAAW,YAAY;EAAG;EAC3C,KAAK,4BACH,OAAO,EAAE,MAAM,oBAAoB;EACrC,KAAK,WACH,OAAO,EAAE,MAAM,UAAU;CAC7B;AACF;AAEA,MAAa,iBAAiB,WAA+C;CAG3E,MAAM,mBAAmB,OAAO,WAAW,WACzC,YACA,OACA;EACA,IAAI;EAEJ,QAAQ,WAAW,WAAnB;GACE,KAAK;IACH,MAAM;KACJ,KAAK;KACL,KAAK;KACL,GAAG,UAAU,OAAO,WAAW,CAAC;KAChC,GAAG,UAAU,OAAO,WAAW,CAAC;IAClC;IACA;GACF,KAAK;IACH,MAAM;KAAE,KAAK;KAAO,KAAK;KAAW,GAAG,UAAU,OAAO,WAAW,CAAC;IAAE;IACtE;GACF,KAAK;GACL,KAAK;IACH,MAAM;KAAE,KAAK;KAAO,GAAG,UAAU,OAAO,WAAW,CAAC;KAAG,GAAG,UAAU,OAAO,WAAW,CAAC;IAAE;IACzF,IAAI,OAAO,YAAY;KACrB,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;KACrC,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;KACrC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;KACvC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;KACvC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;IACzC;EACJ;EACA,IAAI,OAAO,YAAY,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;EAE5D,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WAAW,OAAO,UAAU,OAAO,KAAK,gBAAgB,WAAW,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;GAC5F,OAAO;EACT,CAAC;EAED,IACE,WAAW,cAAc,oBACzB,WAAW,cAAc,4BAEzB,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAC7D,OAAO,eAAe,aAAa,KAAK,EAAE,QAAQ,MAAM,CAAC,CAAC,CAC5D;EAGF,OAAO;CACT,CAAC;CAED,MAAM,YAAY,OAAO,WAAW,WAClC,WACA,QACA,UACA;EACA,OAAO,OAAO,UAAU,UAAU,KAAK;EAEvC,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WACE,OAAO,UAAU,QAAQ,UAAU,gBAAgB,SAAS,GAAG,OAAO,CACpE,WAAW,UAAU,SAAS,QAChC,CAAC;GACH,OAAO;EACT,CAAC;EAED,IAAI,cAAc,oBAAoB,cAAc,4BAElD,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAC7D,OAAO,eAAe,aAAa,KAAK,EAAE,QAAQ,MAAM,CAAC,CAAC,CAC5D;EAGF,OAAO;CACT,CAAC;CAED,OAAO,UAAU,GAAG;EAClB,iBAAiB,OAAO,WAAW,WAAW,OAAO;GACnD,MAAM,aAAa,OAAO,OAAO,qBAAqB,OAAO,KAAK;GAClE,MAAM,MAAM,OAAO,iBAAiB,YAAY,QAAQ;GAExD,MAAM,UAAU,OAAO,OAAO,WAAW;IACvC,WAAW,OAAO,UAAU,QAAQ,GAAG;IACvC,OAAO;GACT,CAAC;GAED,OAAO,IAAI,WAAW,OAAO;EAC/B,CAAC;EACD,kBAAkB,OAAO,WAAW,WAAW,OAAO;GACpD,MAAM,UAAU,OAAO,OACrB,OAAO,SAAS,sBAAsB,EAAE,oBAAoB,KAAK,CAAC,GAClE,OACA,KACF;GAEA,MAAM,aAAa,SAAS,MAAM,OAAO;GACzC,MAAM,MAAM,OAAO,iBAAiB,YAAY,MAAM;GAEtD,MAAM,UAAU,OAAO,OAAO,WAAW;IACvC,WAAW,OAAO,UAAU,SAAS,GAAG;IACxC,OAAO;GACT,CAAC;GAED,OAAO,SAAS,KAAK,IAAI,WAAW,OAAO,CAAC;EAC9C,CAAC;EACD,MAAM,OAAO,WAAW,WAAW,OAAO;GACxC,MAAM,QAAQ,OAAO,OAAO,WAAW,OAAO,MAAM;GACpD,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,aAAa,aAC1C,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,UAAU,MAAM,WAAW,SAAS,QAAQ;IAE/D,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WAAW,OAAO,KAAK,mBAAmB,MAAM,SAAS,GAAG,KAAK,IAAI;KACrE,OAAO;IACT,CAAC;IAED,OAAO,IAAI,WAAW,MAAM;GAC9B,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC;EACD,QAAQ,OAAO,WAAW,WAAW,OAAO;GAC1C,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,MAAM;GACtD,MAAM,WAAW,OAAO,KAAK,MAAM,SAAS;GAC5C,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,YAAY,OAAO,KAAK,MAAM,SAAS;GAC7C,MAAM,MAAM,OAAO,UAAU,MAAM,WAAW,QAAQ,QAAQ;GAE9D,KACG,MAAM,cAAc,uBAAuB,MAAM,cAAc,cAChE,UAAU,WAAW,IAErB,OAAO;GAET,OAAO,OAAO,OAAO,WAAW;IAC9B,WAAW,OAAO,OAAO,mBAAmB,MAAM,SAAS,GAAG,KAAK,WAAW,IAAI;IAClF,OAAO;GACT,CAAC;EACH,CAAC;CACH,CAAC;AACH"}

package/dist/internal/word64.mjs

@@ -0,0 +1,25 @@
+//#region src/internal/word64.ts
+/**
+* Adapted from noble-hashes, Copyright (c) 2022 Paul Miller.
+* MIT; source revision 8060cc83bbab6681d23c9eed071db3f3a6b442da.
+* See ../../THIRD_PARTY_NOTICES.md for source mapping and license.
+*/
+const rotrSH = (h, l, s) => h >>> s | l << 32 - s;
+const rotrSL = (h, l, s) => h << 32 - s | l >>> s;
+const rotrBH = (h, l, s) => h << 64 - s | l >>> s - 32;
+const rotrBL = (h, l, s) => h >>> s - 32 | l << 64 - s;
+const rotr32H = (_h, l) => l;
+const rotr32L = (h, _l) => h;
+function add(Ah, Al, Bh, Bl) {
+	const l = (Al >>> 0) + (Bl >>> 0);
+	return {
+		h: Ah + Bh + (l / 2 ** 32 | 0) | 0,
+		l: l | 0
+	};
+}
+const add3L = (Al, Bl, Cl) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0);
+const add3H = (low, Ah, Bh, Ch) => Ah + Bh + Ch + (low / 2 ** 32 | 0) | 0;
+//#endregion
+export { add, add3H, add3L, rotr32H, rotr32L, rotrBH, rotrBL, rotrSH, rotrSL };
+
+//# sourceMappingURL=word64.mjs.map

package/dist/internal/word64.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"word64.mjs","names":[],"sources":["../../src/internal/word64.ts"],"sourcesContent":["/**\n * Adapted from noble-hashes, Copyright (c) 2022 Paul Miller.\n * MIT; source revision 8060cc83bbab6681d23c9eed071db3f3a6b442da.\n * See ../../THIRD_PARTY_NOTICES.md for source mapping and license.\n */\n// High 32-bit half of a 64-bit right rotate, valid for `s` in `1..31`.\nexport const rotrSH = (h: number, l: number, s: number): number => (h >>> s) | (l << (32 - s));\n// Low 32-bit half of a 64-bit right rotate, valid for `s` in `1..31`.\nexport const rotrSL = (h: number, l: number, s: number): number => (h << (32 - s)) | (l >>> s);\n\n// High 32-bit half of a 64-bit right rotate, valid for `s` in `33..63`; `32` uses `rotr32*`.\nexport const rotrBH = (h: number, l: number, s: number): number =>\n  (h << (64 - s)) | (l >>> (s - 32));\n\n// Low 32-bit half of a 64-bit right rotate, valid for `s` in `33..63`; `32` uses `rotr32*`.\nexport const rotrBL = (h: number, l: number, s: number): number =>\n  (h >>> (s - 32)) | (l << (64 - s));\n\n// High 32-bit half of a 64-bit right rotate for `s === 32`; this is just the swapped low half.\nexport const rotr32H = (_h: number, l: number): number => l;\n// Low 32-bit half of a 64-bit right rotate for `s === 32`; this is just the swapped high half.\nexport const rotr32L = (h: number, _l: number): number => h;\n\n// Add two split 64-bit words and return the split `{ h, l }` sum.\n// JS uses 32-bit signed integers for bitwise operations, so we cannot simply shift the carry out\n// of the low sum and instead use division.\nexport function add(\n  Ah: number,\n  Al: number,\n  Bh: number,\n  Bl: number,\n): {\n  h: number;\n  l: number;\n} {\n  const l = (Al >>> 0) + (Bl >>> 0);\n\n  return { h: (Ah + Bh + ((l / 2 ** 32) | 0)) | 0, l: l | 0 };\n}\n\n// Addition with more than 2 elements\n// Unmasked low-word accumulator for 3-way addition; pass the raw result into `add3H(...)`.\nexport const add3L = (Al: number, Bl: number, Cl: number): number =>\n  (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0);\n\n// High-word finalize step for 3-way addition; `low` must be the untruncated output of `add3L(...)`.\nexport const add3H = (low: number, Ah: number, Bh: number, Ch: number): number =>\n  (Ah + Bh + Ch + ((low / 2 ** 32) | 0)) | 0;\n"],"mappings":";;;;;;AAMA,MAAa,UAAU,GAAW,GAAW,MAAuB,MAAM,IAAM,KAAM,KAAK;AAE3F,MAAa,UAAU,GAAW,GAAW,MAAuB,KAAM,KAAK,IAAO,MAAM;AAG5F,MAAa,UAAU,GAAW,GAAW,MAC1C,KAAM,KAAK,IAAO,MAAO,IAAI;AAGhC,MAAa,UAAU,GAAW,GAAW,MAC1C,MAAO,IAAI,KAAQ,KAAM,KAAK;AAGjC,MAAa,WAAW,IAAY,MAAsB;AAE1D,MAAa,WAAW,GAAW,OAAuB;AAK1D,SAAgB,IACd,IACA,IACA,IACA,IAIA;CACA,MAAM,KAAK,OAAO,MAAM,OAAO;CAE/B,OAAO;EAAE,GAAI,KAAK,MAAO,IAAI,KAAK,KAAM,KAAM;EAAG,GAAG,IAAI;CAAE;AAC5D;AAIA,MAAa,SAAS,IAAY,IAAY,QAC3C,OAAO,MAAM,OAAO,MAAM,OAAO;AAGpC,MAAa,SAAS,KAAa,IAAY,IAAY,OACxD,KAAK,KAAK,MAAO,MAAM,KAAK,KAAM,KAAM"}