@yielded/crypto 0.0.0-stage → 0.1.0-beta.20

package/dist/internal/blake2b.mjs

@@ -0,0 +1,359 @@
+import { add, add3H, add3L, rotr32H, rotr32L, rotrBH, rotrBL, rotrSH, rotrSL } from "./word64.mjs";
+//#region src/internal/blake2b.ts
+/**
+* Adapted from noble-hashes, Copyright (c) 2022 Paul Miller.
+* MIT; source revision 8060cc83bbab6681d23c9eed071db3f3a6b442da.
+* See ../../THIRD_PARTY_NOTICES.md for source mapping and license.
+*/
+const B2B_IV = /* @__PURE__ */ Uint32Array.from([
+	4089235720,
+	1779033703,
+	2227873595,
+	3144134277,
+	4271175723,
+	1013904242,
+	1595750129,
+	2773480762,
+	2917565137,
+	1359893119,
+	725511199,
+	2600822924,
+	4215389547,
+	528734635,
+	327033209,
+	1541459225
+]);
+const BSIGMA = /* @__PURE__ */ Uint8Array.from([
+	0,
+	1,
+	2,
+	3,
+	4,
+	5,
+	6,
+	7,
+	8,
+	9,
+	10,
+	11,
+	12,
+	13,
+	14,
+	15,
+	14,
+	10,
+	4,
+	8,
+	9,
+	15,
+	13,
+	6,
+	1,
+	12,
+	0,
+	2,
+	11,
+	7,
+	5,
+	3,
+	11,
+	8,
+	12,
+	0,
+	5,
+	2,
+	15,
+	13,
+	10,
+	14,
+	3,
+	6,
+	7,
+	1,
+	9,
+	4,
+	7,
+	9,
+	3,
+	1,
+	13,
+	12,
+	11,
+	14,
+	2,
+	6,
+	5,
+	10,
+	4,
+	0,
+	15,
+	8,
+	9,
+	0,
+	5,
+	7,
+	2,
+	4,
+	10,
+	15,
+	14,
+	1,
+	11,
+	12,
+	6,
+	8,
+	3,
+	13,
+	2,
+	12,
+	6,
+	10,
+	0,
+	11,
+	8,
+	3,
+	4,
+	13,
+	7,
+	5,
+	15,
+	14,
+	1,
+	9,
+	12,
+	5,
+	1,
+	15,
+	14,
+	13,
+	4,
+	10,
+	0,
+	7,
+	6,
+	3,
+	9,
+	2,
+	8,
+	11,
+	13,
+	11,
+	7,
+	14,
+	12,
+	1,
+	3,
+	9,
+	5,
+	0,
+	15,
+	4,
+	8,
+	6,
+	2,
+	10,
+	6,
+	15,
+	14,
+	9,
+	11,
+	3,
+	0,
+	8,
+	12,
+	2,
+	13,
+	7,
+	1,
+	4,
+	10,
+	5,
+	10,
+	2,
+	8,
+	4,
+	7,
+	6,
+	1,
+	5,
+	15,
+	11,
+	9,
+	14,
+	3,
+	12,
+	13,
+	0,
+	0,
+	1,
+	2,
+	3,
+	4,
+	5,
+	6,
+	7,
+	8,
+	9,
+	10,
+	11,
+	12,
+	13,
+	14,
+	15,
+	14,
+	10,
+	4,
+	8,
+	9,
+	15,
+	13,
+	6,
+	1,
+	12,
+	0,
+	2,
+	11,
+	7,
+	5,
+	3
+]);
+function G1b(BBUF, a, b, c, d, msg, x) {
+	const Xl = msg[x], Xh = msg[x + 1];
+	let Al = BBUF[2 * a], Ah = BBUF[2 * a + 1];
+	let Bl = BBUF[2 * b], Bh = BBUF[2 * b + 1];
+	let Cl = BBUF[2 * c], Ch = BBUF[2 * c + 1];
+	let Dl = BBUF[2 * d], Dh = BBUF[2 * d + 1];
+	const ll = add3L(Al, Bl, Xl);
+	Ah = add3H(ll, Ah, Bh, Xh);
+	Al = ll | 0;
+	let xh = Dh ^ Ah, xl = Dl ^ Al;
+	Dh = rotr32H(xh, xl);
+	Dl = rotr32L(xh, xl);
+	({h: Ch, l: Cl} = add(Ch, Cl, Dh, Dl));
+	xh = Bh ^ Ch;
+	xl = Bl ^ Cl;
+	Bh = rotrSH(xh, xl, 24);
+	Bl = rotrSL(xh, xl, 24);
+	BBUF[2 * a] = Al;
+	BBUF[2 * a + 1] = Ah;
+	BBUF[2 * b] = Bl;
+	BBUF[2 * b + 1] = Bh;
+	BBUF[2 * c] = Cl;
+	BBUF[2 * c + 1] = Ch;
+	BBUF[2 * d] = Dl;
+	BBUF[2 * d + 1] = Dh;
+}
+function G2b(BBUF, a, b, c, d, msg, x) {
+	const Xl = msg[x], Xh = msg[x + 1];
+	let Al = BBUF[2 * a], Ah = BBUF[2 * a + 1];
+	let Bl = BBUF[2 * b], Bh = BBUF[2 * b + 1];
+	let Cl = BBUF[2 * c], Ch = BBUF[2 * c + 1];
+	let Dl = BBUF[2 * d], Dh = BBUF[2 * d + 1];
+	const ll = add3L(Al, Bl, Xl);
+	Ah = add3H(ll, Ah, Bh, Xh);
+	Al = ll | 0;
+	let xh = Dh ^ Ah, xl = Dl ^ Al;
+	Dh = rotrSH(xh, xl, 16);
+	Dl = rotrSL(xh, xl, 16);
+	({h: Ch, l: Cl} = add(Ch, Cl, Dh, Dl));
+	xh = Bh ^ Ch;
+	xl = Bl ^ Cl;
+	Bh = rotrBH(xh, xl, 63);
+	Bl = rotrBL(xh, xl, 63);
+	BBUF[2 * a] = Al;
+	BBUF[2 * a + 1] = Ah;
+	BBUF[2 * b] = Bl;
+	BBUF[2 * b + 1] = Bh;
+	BBUF[2 * c] = Cl;
+	BBUF[2 * c + 1] = Ch;
+	BBUF[2 * d] = Dl;
+	BBUF[2 * d + 1] = Dh;
+}
+/** Unkeyed BLAKE2b used by Argon2's H0 and variable-length H'. */
+var Blake2b = class {
+	outputLength;
+	state = B2B_IV.slice();
+	buffer = /* @__PURE__ */ new Uint8Array(128);
+	words = /* @__PURE__ */ new Uint32Array(32);
+	mixed = /* @__PURE__ */ new Uint32Array(32);
+	view = new DataView(this.buffer.buffer);
+	length = 0;
+	position = 0;
+	constructor(outputLength = 64) {
+		this.outputLength = outputLength;
+		this.state[0] ^= 16842752 ^ outputLength;
+	}
+	update(data) {
+		for (let position = 0; position < data.length;) {
+			if (this.position === 128) {
+				this.compress(false);
+				this.position = 0;
+			}
+			const take = Math.min(128 - this.position, data.length - position);
+			this.buffer.set(data.subarray(position, position + take), this.position);
+			this.position += take;
+			this.length += take;
+			position += take;
+		}
+		return this;
+	}
+	compress(last) {
+		const BBUF = this.mixed;
+		const msg = this.words;
+		for (let i = 0; i < 32; i++) msg[i] = this.view.getUint32(i * 4, true);
+		BBUF.set(this.state);
+		BBUF.set(B2B_IV, 16);
+		BBUF[24] ^= this.length >>> 0;
+		BBUF[25] ^= this.length / 4294967296 | 0;
+		if (last) {
+			BBUF[28] = ~BBUF[28];
+			BBUF[29] = ~BBUF[29];
+		}
+		let j = 0;
+		const s = BSIGMA;
+		for (let i = 0; i < 12; i++) {
+			G1b(BBUF, 0, 4, 8, 12, msg, 2 * s[j++]);
+			G2b(BBUF, 0, 4, 8, 12, msg, 2 * s[j++]);
+			G1b(BBUF, 1, 5, 9, 13, msg, 2 * s[j++]);
+			G2b(BBUF, 1, 5, 9, 13, msg, 2 * s[j++]);
+			G1b(BBUF, 2, 6, 10, 14, msg, 2 * s[j++]);
+			G2b(BBUF, 2, 6, 10, 14, msg, 2 * s[j++]);
+			G1b(BBUF, 3, 7, 11, 15, msg, 2 * s[j++]);
+			G2b(BBUF, 3, 7, 11, 15, msg, 2 * s[j++]);
+			G1b(BBUF, 0, 5, 10, 15, msg, 2 * s[j++]);
+			G2b(BBUF, 0, 5, 10, 15, msg, 2 * s[j++]);
+			G1b(BBUF, 1, 6, 11, 12, msg, 2 * s[j++]);
+			G2b(BBUF, 1, 6, 11, 12, msg, 2 * s[j++]);
+			G1b(BBUF, 2, 7, 8, 13, msg, 2 * s[j++]);
+			G2b(BBUF, 2, 7, 8, 13, msg, 2 * s[j++]);
+			G1b(BBUF, 3, 4, 9, 14, msg, 2 * s[j++]);
+			G2b(BBUF, 3, 4, 9, 14, msg, 2 * s[j++]);
+		}
+		for (let i = 0; i < 16; i++) this.state[i] ^= BBUF[i] ^ BBUF[i + 16];
+		BBUF.fill(0);
+		msg.fill(0);
+	}
+	digest() {
+		try {
+			this.buffer.fill(0, this.position);
+			this.compress(true);
+			const out = new Uint8Array(this.outputLength);
+			for (let i = 0; i < out.length; i++) out[i] = this.state[i >>> 2] >>> 8 * (i & 3);
+			return out;
+		} finally {
+			this.destroy();
+		}
+	}
+	destroy() {
+		this.state.fill(0);
+		this.buffer.fill(0);
+		this.words.fill(0);
+		this.mixed.fill(0);
+		this.length = 0;
+		this.position = 0;
+	}
+};
+//#endregion
+export { Blake2b };
+
+//# sourceMappingURL=blake2b.mjs.map

package/dist/internal/blake2b.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"blake2b.mjs","names":["u64.add3L","u64.add3H","u64.rotr32H","u64.rotr32L","u64.add","u64.rotrSH","u64.rotrSL","u64.rotrBH","u64.rotrBL"],"sources":["../../src/internal/blake2b.ts"],"sourcesContent":["/**\n * Adapted from noble-hashes, Copyright (c) 2022 Paul Miller.\n * MIT; source revision 8060cc83bbab6681d23c9eed071db3f3a6b442da.\n * See ../../THIRD_PARTY_NOTICES.md for source mapping and license.\n */\nimport * as u64 from \"./word64\";\n\nconst B2B_IV = /* @__PURE__ */ Uint32Array.from([\n  0xf3bcc908, 0x6a09e667, 0x84caa73b, 0xbb67ae85, 0xfe94f82b, 0x3c6ef372, 0x5f1d36f1, 0xa54ff53a,\n  0xade682d1, 0x510e527f, 0x2b3e6c1f, 0x9b05688c, 0xfb41bd6b, 0x1f83d9ab, 0x137e2179, 0x5be0cd19,\n]);\n\nconst BSIGMA = /* @__PURE__ */ Uint8Array.from([\n  0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11,\n  7, 5, 3, 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4, 7, 9, 3, 1, 13, 12, 11, 14, 2, 6,\n  5, 10, 4, 0, 15, 8, 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13, 2, 12, 6, 10, 0, 11, 8,\n  3, 4, 13, 7, 5, 15, 14, 1, 9, 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11, 13, 11, 7, 14,\n  12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10, 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5, 10,\n  2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13,\n  14, 15, 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3,\n]);\n\n// BLAKE2b G mix split into two half-rounds over LE u32 low/high limbs.\nfunction G1b(\n  BBUF: Uint32Array,\n  a: number,\n  b: number,\n  c: number,\n  d: number,\n  msg: Uint32Array,\n  x: number,\n) {\n  // NOTE: V is LE here\n  const Xl = msg[x],\n    Xh = msg[x + 1];\n\n  let Al = BBUF[2 * a],\n    Ah = BBUF[2 * a + 1];\n\n  let Bl = BBUF[2 * b],\n    Bh = BBUF[2 * b + 1];\n\n  let Cl = BBUF[2 * c],\n    Ch = BBUF[2 * c + 1];\n\n  let Dl = BBUF[2 * d],\n    Dh = BBUF[2 * d + 1];\n\n  // v[a] = (v[a] + v[b] + x) | 0;\n  const ll = u64.add3L(Al, Bl, Xl);\n\n  Ah = u64.add3H(ll, Ah, Bh, Xh);\n  Al = ll | 0;\n\n  // v[d] = rotr(v[d] ^ v[a], 32)\n  let xh = Dh ^ Ah,\n    xl = Dl ^ Al;\n\n  Dh = u64.rotr32H(xh, xl);\n  Dl = u64.rotr32L(xh, xl);\n  // v[c] = (v[c] + v[d]) | 0;\n  ({ h: Ch, l: Cl } = u64.add(Ch, Cl, Dh, Dl));\n  // v[b] = rotr(v[b] ^ v[c], 24)\n  xh = Bh ^ Ch;\n  xl = Bl ^ Cl;\n  Bh = u64.rotrSH(xh, xl, 24);\n  Bl = u64.rotrSL(xh, xl, 24);\n  BBUF[2 * a] = Al;\n  BBUF[2 * a + 1] = Ah;\n  BBUF[2 * b] = Bl;\n  BBUF[2 * b + 1] = Bh;\n  BBUF[2 * c] = Cl;\n  BBUF[2 * c + 1] = Ch;\n  BBUF[2 * d] = Dl;\n  BBUF[2 * d + 1] = Dh;\n}\n\n// Second half-round of the same LE-limb BLAKE2b G mix; `x` is the message word offset.\nfunction G2b(\n  BBUF: Uint32Array,\n  a: number,\n  b: number,\n  c: number,\n  d: number,\n  msg: Uint32Array,\n  x: number,\n) {\n  // NOTE: V is LE here\n  const Xl = msg[x],\n    Xh = msg[x + 1];\n\n  let Al = BBUF[2 * a],\n    Ah = BBUF[2 * a + 1];\n\n  let Bl = BBUF[2 * b],\n    Bh = BBUF[2 * b + 1];\n\n  let Cl = BBUF[2 * c],\n    Ch = BBUF[2 * c + 1];\n\n  let Dl = BBUF[2 * d],\n    Dh = BBUF[2 * d + 1];\n\n  // v[a] = (v[a] + v[b] + x) | 0;\n  const ll = u64.add3L(Al, Bl, Xl);\n\n  Ah = u64.add3H(ll, Ah, Bh, Xh);\n  Al = ll | 0;\n\n  // v[d] = rotr(v[d] ^ v[a], 16)\n  let xh = Dh ^ Ah,\n    xl = Dl ^ Al;\n\n  Dh = u64.rotrSH(xh, xl, 16);\n  Dl = u64.rotrSL(xh, xl, 16);\n  // v[c] = (v[c] + v[d]) | 0;\n  ({ h: Ch, l: Cl } = u64.add(Ch, Cl, Dh, Dl));\n  // v[b] = rotr(v[b] ^ v[c], 63)\n  xh = Bh ^ Ch;\n  xl = Bl ^ Cl;\n  Bh = u64.rotrBH(xh, xl, 63);\n  Bl = u64.rotrBL(xh, xl, 63);\n  BBUF[2 * a] = Al;\n  BBUF[2 * a + 1] = Ah;\n  BBUF[2 * b] = Bl;\n  BBUF[2 * b + 1] = Bh;\n  BBUF[2 * c] = Cl;\n  BBUF[2 * c + 1] = Ch;\n  BBUF[2 * d] = Dl;\n  BBUF[2 * d + 1] = Dh;\n}\n\n/** Unkeyed BLAKE2b used by Argon2's H0 and variable-length H'. */\nexport class Blake2b {\n  private readonly state = B2B_IV.slice();\n  private readonly buffer = new Uint8Array(128);\n  private readonly words = new Uint32Array(32);\n  private readonly mixed = new Uint32Array(32);\n  private readonly view = new DataView(this.buffer.buffer);\n  private length = 0;\n  private position = 0;\n\n  constructor(private readonly outputLength = 64) {\n    this.state[0] ^= 0x01010000 ^ outputLength;\n  }\n\n  update(data: Uint8Array): this {\n    for (let position = 0; position < data.length;) {\n      // BLAKE2 must retain the last block until its finalization flag is known.\n      if (this.position === 128) {\n        this.compress(false);\n        this.position = 0;\n      }\n      const take = Math.min(128 - this.position, data.length - position);\n\n      this.buffer.set(data.subarray(position, position + take), this.position);\n      this.position += take;\n      this.length += take;\n      position += take;\n    }\n\n    return this;\n  }\n\n  private compress(last: boolean): void {\n    const BBUF = this.mixed;\n    const msg = this.words;\n\n    for (let i = 0; i < 32; i++) msg[i] = this.view.getUint32(i * 4, true);\n    BBUF.set(this.state);\n    BBUF.set(B2B_IV, 16);\n    BBUF[24] ^= this.length >>> 0;\n    BBUF[25] ^= (this.length / 0x100000000) | 0;\n    if (last) {\n      BBUF[28] = ~BBUF[28];\n      BBUF[29] = ~BBUF[29];\n    }\n    let j = 0;\n    const s = BSIGMA;\n\n    // SIGMA selects 64-bit message words; multiply by 2 because `msg` stores\n    // each word as [low32, high32].\n    for (let i = 0; i < 12; i++) {\n      G1b(BBUF, 0, 4, 8, 12, msg, 2 * s[j++]);\n      G2b(BBUF, 0, 4, 8, 12, msg, 2 * s[j++]);\n      G1b(BBUF, 1, 5, 9, 13, msg, 2 * s[j++]);\n      G2b(BBUF, 1, 5, 9, 13, msg, 2 * s[j++]);\n      G1b(BBUF, 2, 6, 10, 14, msg, 2 * s[j++]);\n      G2b(BBUF, 2, 6, 10, 14, msg, 2 * s[j++]);\n      G1b(BBUF, 3, 7, 11, 15, msg, 2 * s[j++]);\n      G2b(BBUF, 3, 7, 11, 15, msg, 2 * s[j++]);\n\n      G1b(BBUF, 0, 5, 10, 15, msg, 2 * s[j++]);\n      G2b(BBUF, 0, 5, 10, 15, msg, 2 * s[j++]);\n      G1b(BBUF, 1, 6, 11, 12, msg, 2 * s[j++]);\n      G2b(BBUF, 1, 6, 11, 12, msg, 2 * s[j++]);\n      G1b(BBUF, 2, 7, 8, 13, msg, 2 * s[j++]);\n      G2b(BBUF, 2, 7, 8, 13, msg, 2 * s[j++]);\n      G1b(BBUF, 3, 4, 9, 14, msg, 2 * s[j++]);\n      G2b(BBUF, 3, 4, 9, 14, msg, 2 * s[j++]);\n    }\n\n    for (let i = 0; i < 16; i++) this.state[i] ^= BBUF[i] ^ BBUF[i + 16];\n    BBUF.fill(0);\n    msg.fill(0);\n  }\n\n  digest(): Uint8Array {\n    try {\n      this.buffer.fill(0, this.position);\n      this.compress(true);\n      const out = new Uint8Array(this.outputLength);\n\n      for (let i = 0; i < out.length; i++) out[i] = this.state[i >>> 2] >>> (8 * (i & 3));\n\n      return out;\n    } finally {\n      this.destroy();\n    }\n  }\n\n  destroy(): void {\n    this.state.fill(0);\n    this.buffer.fill(0);\n    this.words.fill(0);\n    this.mixed.fill(0);\n    this.length = 0;\n    this.position = 0;\n  }\n}\n"],"mappings":";;;;;;;AAOA,MAAM,SAAyB,4BAAY,KAAK;CAC9C;CAAY;CAAY;CAAY;CAAY;CAAY;CAAY;CAAY;CACpF;CAAY;CAAY;CAAY;CAAY;CAAY;CAAY;CAAY;AACtF,CAAC;AAED,MAAM,SAAyB,2BAAW,KAAK;CAC7C;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAI;CAAI;CAAI;CAAI;CAAI;CAAI;CAAI;CAAI;CAAG;CAAG;CAAG;CAAI;CAAI;CAAG;CAAG;CAAI;CAAG;CAAG;CAC/F;CAAG;CAAG;CAAG;CAAI;CAAG;CAAI;CAAG;CAAG;CAAG;CAAI;CAAI;CAAI;CAAI;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAI;CAAI;CAAI;CAAI;CAAG;CAC9F;CAAG;CAAI;CAAG;CAAG;CAAI;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAI;CAAI;CAAI;CAAG;CAAI;CAAI;CAAG;CAAG;CAAG;CAAI;CAAG;CAAI;CAAG;CAAI;CAAG;CAAI;CAC/F;CAAG;CAAG;CAAI;CAAG;CAAG;CAAI;CAAI;CAAG;CAAG;CAAI;CAAG;CAAG;CAAI;CAAI;CAAI;CAAG;CAAI;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAI;CAAI;CAAI;CAAG;CAC/F;CAAI;CAAG;CAAG;CAAG;CAAG;CAAG;CAAI;CAAG;CAAG;CAAG;CAAG;CAAI;CAAG;CAAI;CAAI;CAAG;CAAI;CAAG;CAAG;CAAG;CAAI;CAAG;CAAI;CAAG;CAAG;CAAG;CAAI;CAAG;CAC7F;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAI;CAAI;CAAG;CAAI;CAAG;CAAI;CAAI;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAG;CAAI;CAAI;CAAI;CAC5F;CAAI;CAAI;CAAI;CAAI;CAAG;CAAG;CAAG;CAAI;CAAI;CAAG;CAAG;CAAI;CAAG;CAAG;CAAI;CAAG;CAAG;AAC7D,CAAC;AAGD,SAAS,IACP,MACA,GACA,GACA,GACA,GACA,KACA,GACA;CAEA,MAAM,KAAK,IAAI,IACb,KAAK,IAAI,IAAI;CAEf,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAEpB,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAEpB,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAEpB,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAGpB,MAAM,KAAKA,MAAU,IAAI,IAAI,EAAE;CAE/B,KAAKC,MAAU,IAAI,IAAI,IAAI,EAAE;CAC7B,KAAK,KAAK;CAGV,IAAI,KAAK,KAAK,IACZ,KAAK,KAAK;CAEZ,KAAKC,QAAY,IAAI,EAAE;CACvB,KAAKC,QAAY,IAAI,EAAE;CAEvB,CAAC,CAAE,GAAG,IAAI,GAAG,MAAOC,IAAQ,IAAI,IAAI,IAAI,EAAE;CAE1C,KAAK,KAAK;CACV,KAAK,KAAK;CACV,KAAKC,OAAW,IAAI,IAAI,EAAE;CAC1B,KAAKC,OAAW,IAAI,IAAI,EAAE;CAC1B,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;CAClB,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;CAClB,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;CAClB,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;AACpB;AAGA,SAAS,IACP,MACA,GACA,GACA,GACA,GACA,KACA,GACA;CAEA,MAAM,KAAK,IAAI,IACb,KAAK,IAAI,IAAI;CAEf,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAEpB,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAEpB,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAEpB,IAAI,KAAK,KAAK,IAAI,IAChB,KAAK,KAAK,IAAI,IAAI;CAGpB,MAAM,KAAKN,MAAU,IAAI,IAAI,EAAE;CAE/B,KAAKC,MAAU,IAAI,IAAI,IAAI,EAAE;CAC7B,KAAK,KAAK;CAGV,IAAI,KAAK,KAAK,IACZ,KAAK,KAAK;CAEZ,KAAKI,OAAW,IAAI,IAAI,EAAE;CAC1B,KAAKC,OAAW,IAAI,IAAI,EAAE;CAE1B,CAAC,CAAE,GAAG,IAAI,GAAG,MAAOF,IAAQ,IAAI,IAAI,IAAI,EAAE;CAE1C,KAAK,KAAK;CACV,KAAK,KAAK;CACV,KAAKG,OAAW,IAAI,IAAI,EAAE;CAC1B,KAAKC,OAAW,IAAI,IAAI,EAAE;CAC1B,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;CAClB,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;CAClB,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;CAClB,KAAK,IAAI,KAAK;CACd,KAAK,IAAI,IAAI,KAAK;AACpB;;AAGA,IAAa,UAAb,MAAqB;CASU;CAR7B,QAAyB,OAAO,MAAM;CACtC,yBAA0B,IAAI,WAAW,GAAG;CAC5C,wBAAyB,IAAI,YAAY,EAAE;CAC3C,wBAAyB,IAAI,YAAY,EAAE;CAC3C,OAAwB,IAAI,SAAS,KAAK,OAAO,MAAM;CACvD,SAAiB;CACjB,WAAmB;CAEnB,YAAY,eAAgC,IAAI;EAAnB,KAAA,eAAA;EAC3B,KAAK,MAAM,MAAM,WAAa;CAChC;CAEA,OAAO,MAAwB;EAC7B,KAAK,IAAI,WAAW,GAAG,WAAW,KAAK,SAAS;GAE9C,IAAI,KAAK,aAAa,KAAK;IACzB,KAAK,SAAS,KAAK;IACnB,KAAK,WAAW;GAClB;GACA,MAAM,OAAO,KAAK,IAAI,MAAM,KAAK,UAAU,KAAK,SAAS,QAAQ;GAEjE,KAAK,OAAO,IAAI,KAAK,SAAS,UAAU,WAAW,IAAI,GAAG,KAAK,QAAQ;GACvE,KAAK,YAAY;GACjB,KAAK,UAAU;GACf,YAAY;EACd;EAEA,OAAO;CACT;CAEA,SAAiB,MAAqB;EACpC,MAAM,OAAO,KAAK;EAClB,MAAM,MAAM,KAAK;EAEjB,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,UAAU,IAAI,GAAG,IAAI;EACrE,KAAK,IAAI,KAAK,KAAK;EACnB,KAAK,IAAI,QAAQ,EAAE;EACnB,KAAK,OAAO,KAAK,WAAW;EAC5B,KAAK,OAAQ,KAAK,SAAS,aAAe;EAC1C,IAAI,MAAM;GACR,KAAK,MAAM,CAAC,KAAK;GACjB,KAAK,MAAM,CAAC,KAAK;EACnB;EACA,IAAI,IAAI;EACR,MAAM,IAAI;EAIV,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;GAC3B,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;GACtC,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;GACtC,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;GACtC,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;GACtC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GACvC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GACvC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GACvC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GAEvC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GACvC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GACvC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GACvC,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI;GACvC,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;GACtC,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;GACtC,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;GACtC,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,EAAE,IAAI;EACxC;EAEA,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,KAAK,MAAM,MAAM,KAAK,KAAK,KAAK,IAAI;EACjE,KAAK,KAAK,CAAC;EACX,IAAI,KAAK,CAAC;CACZ;CAEA,SAAqB;EACnB,IAAI;GACF,KAAK,OAAO,KAAK,GAAG,KAAK,QAAQ;GACjC,KAAK,SAAS,IAAI;GAClB,MAAM,MAAM,IAAI,WAAW,KAAK,YAAY;GAE5C,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,IAAI,KAAK,KAAK,MAAM,MAAM,OAAQ,KAAK,IAAI;GAEhF,OAAO;EACT,UAAU;GACR,KAAK,QAAQ;EACf;CACF;CAEA,UAAgB;EACd,KAAK,MAAM,KAAK,CAAC;EACjB,KAAK,OAAO,KAAK,CAAC;EAClB,KAAK,MAAM,KAAK,CAAC;EACjB,KAAK,MAAM,KAAK,CAAC;EACjB,KAAK,SAAS;EACd,KAAK,WAAW;CAClB;AACF"}

package/dist/internal/common.mjs

@@ -0,0 +1,20 @@
+import { CryptoUnavailable, InvalidInput, UnsupportedAlgorithm } from "../Errors.mjs";
+import { Effect, Predicate, Redacted, Schema } from "effect";
+//#region src/internal/common.ts
+const decode = (schema, input, reason) => Effect.suspend(() => Schema.decodeEffect(schema)(input)).pipe(Effect.mapError(() => InvalidInput.make({ reason })), Effect.catchDefect(() => InvalidInput.make({ reason })));
+const nativeErrorName = (cause) => Predicate.hasProperty(cause, "name") && Predicate.isString(cause.name) ? cause.name : void 0;
+const nativeError = (cause) => nativeErrorName(cause) === "NotSupportedError" ? UnsupportedAlgorithm.make({}) : CryptoUnavailable.make({});
+const importError = (cause) => nativeErrorName(cause) === "DataError" || nativeErrorName(cause) === "SyntaxError" ? InvalidInput.make({ reason: "key" }) : nativeError(cause);
+/** Own a secret copy through cleanup. Native users must join work that cannot be cancelled. */
+const withSecret = (value, use) => Effect.acquireUseRelease(Effect.try({
+	try: () => new Uint8Array(Redacted.value(value)),
+	catch: () => InvalidInput.make({ reason: "data" })
+}), use, (owned) => Effect.sync(() => owned.fill(0)));
+const copy = (value) => Effect.try({
+	try: () => new Uint8Array(value),
+	catch: () => InvalidInput.make({ reason: "data" })
+});
+//#endregion
+export { copy, decode, importError, nativeError, nativeErrorName, withSecret };
+
+//# sourceMappingURL=common.mjs.map

package/dist/internal/common.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.mjs","names":[],"sources":["../../src/internal/common.ts"],"sourcesContent":["import { Effect, Predicate, Redacted, Schema } from \"effect\";\n\nimport { CryptoUnavailable, InvalidInput, UnsupportedAlgorithm } from \"../Errors\";\n\nexport const decode = <A>(schema: Schema.Codec<A, A>, input: A, reason: InvalidInput[\"reason\"]) =>\n  // Erased Redacted values can defect during Schema decoding. Keep decoder\n  // construction and evaluation inside the typed, secret-safe input boundary.\n  Effect.suspend(() => Schema.decodeEffect(schema)(input)).pipe(\n    Effect.mapError(() => InvalidInput.make({ reason })),\n    Effect.catchDefect(() => InvalidInput.make({ reason })),\n  );\n\nexport const nativeErrorName = (cause: unknown): string | undefined =>\n  Predicate.hasProperty(cause, \"name\") && Predicate.isString(cause.name) ? cause.name : undefined;\n\nexport const nativeError = (cause: unknown) =>\n  nativeErrorName(cause) === \"NotSupportedError\"\n    ? UnsupportedAlgorithm.make({})\n    : CryptoUnavailable.make({});\n\nexport const importError = (cause: unknown) =>\n  nativeErrorName(cause) === \"DataError\" || nativeErrorName(cause) === \"SyntaxError\"\n    ? InvalidInput.make({ reason: \"key\" })\n    : nativeError(cause);\n\n/** Own a secret copy through cleanup. Native users must join work that cannot be cancelled. */\nexport const withSecret = <A, E, R>(\n  value: Redacted.Redacted<Uint8Array>,\n  use: (owned: Uint8Array<ArrayBuffer>) => Effect.Effect<A, E, R>,\n) =>\n  Effect.acquireUseRelease(\n    Effect.try({\n      try: () => new Uint8Array(Redacted.value(value)),\n      catch: () => InvalidInput.make({ reason: \"data\" }),\n    }),\n    use,\n    (owned) => Effect.sync(() => owned.fill(0)),\n  );\n\nexport const copy = (value: Uint8Array) =>\n  Effect.try({\n    try: () => new Uint8Array(value),\n    catch: () => InvalidInput.make({ reason: \"data\" }),\n  });\n"],"mappings":";;;AAIA,MAAa,UAAa,QAA4B,OAAU,WAG9D,OAAO,cAAc,OAAO,aAAa,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KACvD,OAAO,eAAe,aAAa,KAAK,EAAE,OAAO,CAAC,CAAC,GACnD,OAAO,kBAAkB,aAAa,KAAK,EAAE,OAAO,CAAC,CAAC,CACxD;AAEF,MAAa,mBAAmB,UAC9B,UAAU,YAAY,OAAO,MAAM,KAAK,UAAU,SAAS,MAAM,IAAI,IAAI,MAAM,OAAO,KAAA;AAExF,MAAa,eAAe,UAC1B,gBAAgB,KAAK,MAAM,sBACvB,qBAAqB,KAAK,CAAC,CAAC,IAC5B,kBAAkB,KAAK,CAAC,CAAC;AAE/B,MAAa,eAAe,UAC1B,gBAAgB,KAAK,MAAM,eAAe,gBAAgB,KAAK,MAAM,gBACjE,aAAa,KAAK,EAAE,QAAQ,MAAM,CAAC,IACnC,YAAY,KAAK;;AAGvB,MAAa,cACX,OACA,QAEA,OAAO,kBACL,OAAO,IAAI;CACT,WAAW,IAAI,WAAW,SAAS,MAAM,KAAK,CAAC;CAC/C,aAAa,aAAa,KAAK,EAAE,QAAQ,OAAO,CAAC;AACnD,CAAC,GACD,MACC,UAAU,OAAO,WAAW,MAAM,KAAK,CAAC,CAAC,CAC5C;AAEF,MAAa,QAAQ,UACnB,OAAO,IAAI;CACT,WAAW,IAAI,WAAW,KAAK;CAC/B,aAAa,aAAa,KAAK,EAAE,QAAQ,OAAO,CAAC;AACnD,CAAC"}

package/dist/internal/hmac.mjs

@@ -0,0 +1,68 @@
+import { CryptoUnavailable } from "../Errors.mjs";
+import { Hmac, Input, KeyInput, VerifyInput } from "../Hmac.mjs";
+import { copy, decode, importError, nativeError, withSecret } from "./common.mjs";
+import { Effect, Exit, Fiber, Redacted, Schema, Scope } from "effect";
+//#region src/internal/hmac.ts
+const keyBytes = Schema.Uint8Array.check(Schema.isMinLength(1));
+const makeHmac = (subtle) => {
+	const importKey = Effect.fnUntraced(function* (input) {
+		const value = yield* decode(KeyInput, input, "key");
+		yield* decode(keyBytes, Redacted.value(value.key), "key");
+		const scope = yield* Scope.fork(yield* Effect.scope, "sequential");
+		let imported;
+		yield* Scope.addFinalizer(scope, Effect.sync(() => {
+			imported = void 0;
+		}));
+		const available = Effect.suspend(() => scope.state._tag === "Closed" ? Effect.fail(CryptoUnavailable.make({})) : Effect.void);
+		const run = (operation) => Effect.acquireUseRelease(available.pipe(Effect.andThen(Effect.forkIn(operation, scope, { uninterruptible: false }))), (fiber) => Effect.gen(function* () {
+			const exit = yield* Fiber.await(fiber);
+			yield* available;
+			return yield* exit;
+		}), Fiber.interrupt);
+		yield* run(withSecret(value.key, (material) => Effect.tryPromise({
+			try: () => subtle.importKey("raw", material, {
+				name: "HMAC",
+				hash: value.algorithm
+			}, false, ["sign", "verify"]),
+			catch: importError
+		}).pipe(Effect.tap((key) => Effect.sync(() => {
+			imported = key;
+		})), Effect.uninterruptible))).pipe(Effect.onExit((exit) => Exit.isFailure(exit) ? Scope.close(scope, exit) : Effect.void));
+		const use = (operation) => run(Effect.suspend(() => {
+			const key = imported;
+			return key === void 0 ? Effect.fail(CryptoUnavailable.make({})) : Effect.tryPromise({
+				try: () => operation(key),
+				catch: nativeError
+			});
+		}).pipe(Effect.uninterruptible));
+		return {
+			sign: Effect.fnUntraced(function* (input) {
+				const data = yield* decode(Schema.Uint8Array, input, "data").pipe(Effect.flatMap(copy));
+				return new Uint8Array(yield* use((key) => subtle.sign("HMAC", key, data)));
+			}),
+			verify: Effect.fnUntraced(function* (input, signature) {
+				const data = yield* decode(Schema.Uint8Array, input, "data").pipe(Effect.flatMap(copy));
+				const tag = yield* decode(Schema.Uint8Array, signature, "data").pipe(Effect.flatMap(copy));
+				return yield* use((key) => subtle.verify("HMAC", key, tag, data));
+			})
+		};
+	});
+	return Hmac.of({
+		importKey,
+		sign: Effect.fnUntraced(function* (input) {
+			const value = yield* decode(Input, input, "data");
+			const data = yield* copy(value.data);
+			return yield* (yield* importKey(value)).sign(data);
+		}, Effect.scoped),
+		verify: Effect.fnUntraced(function* (input) {
+			const value = yield* decode(VerifyInput, input, "data");
+			const data = yield* copy(value.data);
+			const tag = yield* copy(value.tag);
+			return yield* (yield* importKey(value)).verify(data, tag);
+		}, Effect.scoped)
+	});
+};
+//#endregion
+export { makeHmac };
+
+//# sourceMappingURL=hmac.mjs.map

package/dist/internal/hmac.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac.mjs","names":[],"sources":["../../src/internal/hmac.ts"],"sourcesContent":["import { Effect, Exit, Fiber, Redacted, Schema, Scope } from \"effect\";\n\nimport { CryptoUnavailable } from \"../Errors\";\nimport { Hmac, Input, type Key, KeyInput, VerifyInput } from \"../Hmac\";\nimport { copy, decode, importError, nativeError, withSecret } from \"./common\";\n\nconst keyBytes = Schema.Uint8Array.check(Schema.isMinLength(1));\n\nexport const makeHmac = (subtle: SubtleCrypto): Hmac[\"Service\"] => {\n  const importKey = Effect.fnUntraced(function* (input: KeyInput) {\n    const value = yield* decode(KeyInput, input, \"key\");\n\n    yield* decode(keyBytes, Redacted.value(value.key), \"key\");\n\n    // A sequential child joins every native call before dropping the key, even\n    // when the caller's Scope runs its other finalizers in parallel.\n    const scope = yield* Scope.fork(yield* Effect.scope, \"sequential\");\n    let imported: CryptoKey | undefined;\n\n    yield* Scope.addFinalizer(\n      scope,\n      Effect.sync(() => {\n        imported = undefined;\n      }),\n    );\n\n    const available = Effect.suspend(() =>\n      scope.state._tag === \"Closed\" ? Effect.fail(CryptoUnavailable.make({})) : Effect.void,\n    );\n\n    const run = <A, E>(operation: Effect.Effect<A, E>) =>\n      Effect.acquireUseRelease(\n        available.pipe(Effect.andThen(Effect.forkIn(operation, scope, { uninterruptible: false }))),\n        (fiber) =>\n          Effect.gen(function* () {\n            const exit = yield* Fiber.await(fiber);\n\n            yield* available;\n\n            return yield* exit;\n          }),\n        Fiber.interrupt,\n      );\n\n    yield* run(\n      withSecret(value.key, (material) =>\n        Effect.tryPromise({\n          try: () =>\n            subtle.importKey(\"raw\", material, { name: \"HMAC\", hash: value.algorithm }, false, [\n              \"sign\",\n              \"verify\",\n            ]),\n          catch: importError,\n        }).pipe(\n          Effect.tap((key) =>\n            Effect.sync(() => {\n              imported = key;\n            }),\n          ),\n          Effect.uninterruptible,\n        ),\n      ),\n    ).pipe(\n      Effect.onExit((exit) => (Exit.isFailure(exit) ? Scope.close(scope, exit) : Effect.void)),\n    );\n\n    const use = <A>(operation: (key: CryptoKey) => Promise<A>) =>\n      run(\n        Effect.suspend(() => {\n          const key = imported;\n\n          return key === undefined\n            ? Effect.fail(CryptoUnavailable.make({}))\n            : Effect.tryPromise({ try: () => operation(key), catch: nativeError });\n        }).pipe(Effect.uninterruptible),\n      );\n\n    return {\n      sign: Effect.fnUntraced(function* (input) {\n        const data = yield* decode(Schema.Uint8Array, input, \"data\").pipe(Effect.flatMap(copy));\n\n        return new Uint8Array(yield* use((key) => subtle.sign(\"HMAC\", key, data)));\n      }),\n      verify: Effect.fnUntraced(function* (input, signature) {\n        const data = yield* decode(Schema.Uint8Array, input, \"data\").pipe(Effect.flatMap(copy));\n        const tag = yield* decode(Schema.Uint8Array, signature, \"data\").pipe(Effect.flatMap(copy));\n\n        return yield* use((key) => subtle.verify(\"HMAC\", key, tag, data));\n      }),\n    } satisfies Key;\n  });\n\n  return Hmac.of({\n    importKey,\n    sign: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(Input, input, \"data\");\n      const data = yield* copy(value.data);\n      const key = yield* importKey(value);\n\n      return yield* key.sign(data);\n    }, Effect.scoped),\n    verify: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(VerifyInput, input, \"data\");\n      const data = yield* copy(value.data);\n      const tag = yield* copy(value.tag);\n      const key = yield* importKey(value);\n\n      return yield* key.verify(data, tag);\n    }, Effect.scoped),\n  });\n};\n"],"mappings":";;;;;AAMA,MAAM,WAAW,OAAO,WAAW,MAAM,OAAO,YAAY,CAAC,CAAC;AAE9D,MAAa,YAAY,WAA0C;CACjE,MAAM,YAAY,OAAO,WAAW,WAAW,OAAiB;EAC9D,MAAM,QAAQ,OAAO,OAAO,UAAU,OAAO,KAAK;EAElD,OAAO,OAAO,UAAU,SAAS,MAAM,MAAM,GAAG,GAAG,KAAK;EAIxD,MAAM,QAAQ,OAAO,MAAM,KAAK,OAAO,OAAO,OAAO,YAAY;EACjE,IAAI;EAEJ,OAAO,MAAM,aACX,OACA,OAAO,WAAW;GAChB,WAAW,KAAA;EACb,CAAC,CACH;EAEA,MAAM,YAAY,OAAO,cACvB,MAAM,MAAM,SAAS,WAAW,OAAO,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,IACnF;EAEA,MAAM,OAAa,cACjB,OAAO,kBACL,UAAU,KAAK,OAAO,QAAQ,OAAO,OAAO,WAAW,OAAO,EAAE,iBAAiB,MAAM,CAAC,CAAC,CAAC,IACzF,UACC,OAAO,IAAI,aAAa;GACtB,MAAM,OAAO,OAAO,MAAM,MAAM,KAAK;GAErC,OAAO;GAEP,OAAO,OAAO;EAChB,CAAC,GACH,MAAM,SACR;EAEF,OAAO,IACL,WAAW,MAAM,MAAM,aACrB,OAAO,WAAW;GAChB,WACE,OAAO,UAAU,OAAO,UAAU;IAAE,MAAM;IAAQ,MAAM,MAAM;GAAU,GAAG,OAAO,CAChF,QACA,QACF,CAAC;GACH,OAAO;EACT,CAAC,CAAC,CAAC,KACD,OAAO,KAAK,QACV,OAAO,WAAW;GAChB,WAAW;EACb,CAAC,CACH,GACA,OAAO,eACT,CACF,CACF,CAAC,CAAC,KACA,OAAO,QAAQ,SAAU,KAAK,UAAU,IAAI,IAAI,MAAM,MAAM,OAAO,IAAI,IAAI,OAAO,IAAK,CACzF;EAEA,MAAM,OAAU,cACd,IACE,OAAO,cAAc;GACnB,MAAM,MAAM;GAEZ,OAAO,QAAQ,KAAA,IACX,OAAO,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,IACtC,OAAO,WAAW;IAAE,WAAW,UAAU,GAAG;IAAG,OAAO;GAAY,CAAC;EACzE,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EAEF,OAAO;GACL,MAAM,OAAO,WAAW,WAAW,OAAO;IACxC,MAAM,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,IAAI,CAAC;IAEtF,OAAO,IAAI,WAAW,OAAO,KAAK,QAAQ,OAAO,KAAK,QAAQ,KAAK,IAAI,CAAC,CAAC;GAC3E,CAAC;GACD,QAAQ,OAAO,WAAW,WAAW,OAAO,WAAW;IACrD,MAAM,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,IAAI,CAAC;IACtF,MAAM,MAAM,OAAO,OAAO,OAAO,YAAY,WAAW,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,IAAI,CAAC;IAEzF,OAAO,OAAO,KAAK,QAAQ,OAAO,OAAO,QAAQ,KAAK,KAAK,IAAI,CAAC;GAClE,CAAC;EACH;CACF,CAAC;CAED,OAAO,KAAK,GAAG;EACb;EACA,MAAM,OAAO,WAAW,WAAW,OAAO;GACxC,MAAM,QAAQ,OAAO,OAAO,OAAO,OAAO,MAAM;GAChD,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAGnC,OAAO,QAAO,OAFK,UAAU,KAAK,EAAA,CAEhB,KAAK,IAAI;EAC7B,GAAG,OAAO,MAAM;EAChB,QAAQ,OAAO,WAAW,WAAW,OAAO;GAC1C,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,MAAM;GACtD,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,MAAM,OAAO,KAAK,MAAM,GAAG;GAGjC,OAAO,QAAO,OAFK,UAAU,KAAK,EAAA,CAEhB,OAAO,MAAM,GAAG;EACpC,GAAG,OAAO,MAAM;CAClB,CAAC;AACH"}

package/dist/internal/kdf.mjs

@@ -0,0 +1,99 @@
+import { InvalidInput, UnsupportedAlgorithm } from "../Errors.mjs";
+import { Argon2idInput, HkdfInput, Kdf, Pbkdf2Input } from "../Kdf.mjs";
+import { KdfAdmission } from "../KdfAdmission.mjs";
+import { copy, decode, importError, nativeError, withSecret } from "./common.mjs";
+import { Effect, Redacted, Schema } from "effect";
+//#region src/internal/kdf.ts
+const makeKdf = Effect.fnUntraced(function* (subtle, limits, argon2) {
+	const admission = yield* KdfAdmission;
+	const boundedBytes = Schema.Uint8Array.check(Schema.isMaxLength(limits.maximumInputBytes));
+	const output = Schema.Int.check(Schema.isBetween({
+		minimum: 1,
+		maximum: limits.maximumOutputBytes
+	}));
+	const inputBytes = (input) => decode(boundedBytes, input, "data");
+	const outputLength = (input) => decode(output, input, "parameters");
+	return Kdf.of({
+		pbkdf2: (input) => admission.run(Effect.gen(function* () {
+			const value = yield* decode(Pbkdf2Input, input, "parameters");
+			yield* decode(Schema.Int.check(Schema.isBetween({
+				minimum: 1,
+				maximum: limits.maximumIterations
+			})), value.iterations, "parameters");
+			yield* outputLength(value.length);
+			yield* inputBytes(Redacted.value(value.password));
+			yield* inputBytes(value.salt);
+			const salt = yield* copy(value.salt);
+			return yield* withSecret(value.password, (password) => Effect.gen(function* () {
+				const key = yield* Effect.tryPromise({
+					try: () => subtle.importKey("raw", password, "PBKDF2", false, ["deriveBits"]),
+					catch: importError
+				});
+				const result = yield* Effect.tryPromise({
+					try: () => subtle.deriveBits({
+						name: "PBKDF2",
+						hash: "SHA-256",
+						salt,
+						iterations: value.iterations
+					}, key, value.length * 8),
+					catch: nativeError
+				});
+				return Redacted.make(new Uint8Array(result));
+			}).pipe(Effect.uninterruptible));
+		})),
+		hkdf: (input) => admission.run(Effect.gen(function* () {
+			const value = yield* decode(HkdfInput, input, "parameters");
+			yield* outputLength(value.length);
+			yield* inputBytes(Redacted.value(value.key));
+			yield* inputBytes(value.salt);
+			yield* inputBytes(value.info);
+			const salt = yield* copy(value.salt);
+			const info = yield* copy(value.info);
+			return yield* withSecret(value.key, (material) => Effect.gen(function* () {
+				const key = yield* Effect.tryPromise({
+					try: () => subtle.importKey("raw", material, "HKDF", false, ["deriveBits"]),
+					catch: importError
+				});
+				const result = yield* Effect.tryPromise({
+					try: () => subtle.deriveBits({
+						name: "HKDF",
+						hash: "SHA-256",
+						salt,
+						info
+					}, key, value.length * 8),
+					catch: nativeError
+				});
+				return Redacted.make(new Uint8Array(result));
+			}).pipe(Effect.uninterruptible));
+		})),
+		argon2id: (input) => admission.run(Effect.gen(function* () {
+			const value = yield* decode(Argon2idInput, input, "parameters");
+			yield* outputLength(value.length);
+			yield* inputBytes(Redacted.value(value.password));
+			yield* inputBytes(value.salt);
+			if (value.secret !== void 0) yield* inputBytes(Redacted.value(value.secret));
+			if (value.associatedData !== void 0) yield* inputBytes(value.associatedData);
+			if (value.memoryKiB < 8 * value.parallelism || value.memoryKiB > limits.maximumMemoryKiB || value.passes > limits.maximumPasses || value.parallelism > limits.maximumParallelism || value.memoryKiB * value.passes > limits.maximumMemoryPasses) return yield* InvalidInput.make({ reason: "parameters" });
+			if (argon2 === void 0) return yield* UnsupportedAlgorithm.make({});
+			const salt = yield* copy(value.salt);
+			const associatedData = yield* copy(value.associatedData ?? /* @__PURE__ */ new Uint8Array());
+			return yield* withSecret(value.password, (password) => {
+				const derive = (secret) => argon2({
+					password,
+					salt,
+					...secret === void 0 ? {} : { secret },
+					associatedData,
+					memoryKiB: value.memoryKiB,
+					passes: value.passes,
+					parallelism: value.parallelism,
+					length: value.length
+				}).pipe(Effect.map((bytes) => Redacted.make(bytes)));
+				return value.secret === void 0 ? derive() : withSecret(value.secret, derive);
+			});
+		}))
+	});
+});
+//#endregion
+export { makeKdf };
+
+//# sourceMappingURL=kdf.mjs.map

package/dist/internal/kdf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"kdf.mjs","names":[],"sources":["../../src/internal/kdf.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\n\nimport { InvalidInput, type OperationError, UnsupportedAlgorithm } from \"../Errors\";\nimport { Argon2idInput, HkdfInput, Kdf, type Limits, Pbkdf2Input } from \"../Kdf\";\nimport { KdfAdmission } from \"../KdfAdmission\";\nimport { copy, decode, importError, nativeError, withSecret } from \"./common\";\n\nexport interface Argon2Parameters {\n  readonly password: Uint8Array<ArrayBuffer>;\n  readonly salt: Uint8Array<ArrayBuffer>;\n  readonly memoryKiB: number;\n  readonly passes: number;\n  readonly parallelism: number;\n  readonly length: number;\n  readonly secret?: Uint8Array<ArrayBuffer>;\n  readonly associatedData: Uint8Array<ArrayBuffer>;\n}\n\nexport type Argon2 = (input: Argon2Parameters) => Effect.Effect<Uint8Array, OperationError>;\n\nexport const makeKdf = Effect.fnUntraced(function* (\n  subtle: SubtleCrypto,\n  limits: Limits,\n  argon2?: Argon2,\n) {\n  const admission = yield* KdfAdmission;\n  const boundedBytes = Schema.Uint8Array.check(Schema.isMaxLength(limits.maximumInputBytes));\n\n  const output = Schema.Int.check(\n    Schema.isBetween({ minimum: 1, maximum: limits.maximumOutputBytes }),\n  );\n\n  const inputBytes = (input: Uint8Array) => decode(boundedBytes, input, \"data\");\n  const outputLength = (input: number) => decode(output, input, \"parameters\");\n\n  return Kdf.of({\n    pbkdf2: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(Pbkdf2Input, input, \"parameters\");\n\n          yield* decode(\n            Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: limits.maximumIterations })),\n            value.iterations,\n            \"parameters\",\n          );\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.password));\n          yield* inputBytes(value.salt);\n          const salt = yield* copy(value.salt);\n\n          return yield* withSecret(value.password, (password) =>\n            Effect.gen(function* () {\n              const key = yield* Effect.tryPromise({\n                try: () => subtle.importKey(\"raw\", password, \"PBKDF2\", false, [\"deriveBits\"]),\n                catch: importError,\n              });\n\n              const result = yield* Effect.tryPromise({\n                try: () =>\n                  subtle.deriveBits(\n                    { name: \"PBKDF2\", hash: \"SHA-256\", salt, iterations: value.iterations },\n                    key,\n                    value.length * 8,\n                  ),\n                catch: nativeError,\n              });\n\n              return Redacted.make(new Uint8Array(result));\n            }).pipe(Effect.uninterruptible),\n          );\n        }),\n      ),\n    hkdf: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(HkdfInput, input, \"parameters\");\n\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.key));\n          yield* inputBytes(value.salt);\n          yield* inputBytes(value.info);\n          const salt = yield* copy(value.salt);\n          const info = yield* copy(value.info);\n\n          return yield* withSecret(value.key, (material) =>\n            Effect.gen(function* () {\n              const key = yield* Effect.tryPromise({\n                try: () => subtle.importKey(\"raw\", material, \"HKDF\", false, [\"deriveBits\"]),\n                catch: importError,\n              });\n\n              const result = yield* Effect.tryPromise({\n                try: () =>\n                  subtle.deriveBits(\n                    { name: \"HKDF\", hash: \"SHA-256\", salt, info },\n                    key,\n                    value.length * 8,\n                  ),\n                catch: nativeError,\n              });\n\n              return Redacted.make(new Uint8Array(result));\n            }).pipe(Effect.uninterruptible),\n          );\n        }),\n      ),\n    argon2id: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(Argon2idInput, input, \"parameters\");\n\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.password));\n          yield* inputBytes(value.salt);\n          if (value.secret !== undefined) yield* inputBytes(Redacted.value(value.secret));\n          if (value.associatedData !== undefined) yield* inputBytes(value.associatedData);\n\n          if (\n            value.memoryKiB < 8 * value.parallelism ||\n            value.memoryKiB > limits.maximumMemoryKiB ||\n            value.passes > limits.maximumPasses ||\n            value.parallelism > limits.maximumParallelism ||\n            value.memoryKiB * value.passes > limits.maximumMemoryPasses\n          )\n            return yield* InvalidInput.make({ reason: \"parameters\" });\n          if (argon2 === undefined) return yield* UnsupportedAlgorithm.make({});\n\n          const salt = yield* copy(value.salt);\n          const associatedData = yield* copy(value.associatedData ?? new Uint8Array());\n\n          return yield* withSecret(value.password, (password) => {\n            const derive = (secret?: Uint8Array<ArrayBuffer>) =>\n              argon2({\n                password,\n                salt,\n                ...(secret === undefined ? {} : { secret }),\n                associatedData,\n                memoryKiB: value.memoryKiB,\n                passes: value.passes,\n                parallelism: value.parallelism,\n                length: value.length,\n              }).pipe(Effect.map((bytes) => Redacted.make(bytes)));\n\n            return value.secret === undefined ? derive() : withSecret(value.secret, derive);\n          });\n        }),\n      ),\n  });\n});\n"],"mappings":";;;;;;AAoBA,MAAa,UAAU,OAAO,WAAW,WACvC,QACA,QACA,QACA;CACA,MAAM,YAAY,OAAO;CACzB,MAAM,eAAe,OAAO,WAAW,MAAM,OAAO,YAAY,OAAO,iBAAiB,CAAC;CAEzF,MAAM,SAAS,OAAO,IAAI,MACxB,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS,OAAO;CAAmB,CAAC,CACrE;CAEA,MAAM,cAAc,UAAsB,OAAO,cAAc,OAAO,MAAM;CAC5E,MAAM,gBAAgB,UAAkB,OAAO,QAAQ,OAAO,YAAY;CAE1E,OAAO,IAAI,GAAG;EACZ,SAAS,UACP,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,YAAY;GAE5D,OAAO,OACL,OAAO,IAAI,MAAM,OAAO,UAAU;IAAE,SAAS;IAAG,SAAS,OAAO;GAAkB,CAAC,CAAC,GACpF,MAAM,YACN,YACF;GACA,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,QAAQ,CAAC;GAChD,OAAO,WAAW,MAAM,IAAI;GAC5B,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,WAAW,aACxC,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,OAAO,WAAW;KACnC,WAAW,OAAO,UAAU,OAAO,UAAU,UAAU,OAAO,CAAC,YAAY,CAAC;KAC5E,OAAO;IACT,CAAC;IAED,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WACE,OAAO,WACL;MAAE,MAAM;MAAU,MAAM;MAAW;MAAM,YAAY,MAAM;KAAW,GACtE,KACA,MAAM,SAAS,CACjB;KACF,OAAO;IACT,CAAC;IAED,OAAO,SAAS,KAAK,IAAI,WAAW,MAAM,CAAC;GAC7C,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC,CACH;EACF,OAAO,UACL,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,WAAW,OAAO,YAAY;GAE1D,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,GAAG,CAAC;GAC3C,OAAO,WAAW,MAAM,IAAI;GAC5B,OAAO,WAAW,MAAM,IAAI;GAC5B,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,MAAM,aACnC,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,OAAO,WAAW;KACnC,WAAW,OAAO,UAAU,OAAO,UAAU,QAAQ,OAAO,CAAC,YAAY,CAAC;KAC1E,OAAO;IACT,CAAC;IAED,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WACE,OAAO,WACL;MAAE,MAAM;MAAQ,MAAM;MAAW;MAAM;KAAK,GAC5C,KACA,MAAM,SAAS,CACjB;KACF,OAAO;IACT,CAAC;IAED,OAAO,SAAS,KAAK,IAAI,WAAW,MAAM,CAAC;GAC7C,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC,CACH;EACF,WAAW,UACT,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,eAAe,OAAO,YAAY;GAE9D,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,QAAQ,CAAC;GAChD,OAAO,WAAW,MAAM,IAAI;GAC5B,IAAI,MAAM,WAAW,KAAA,GAAW,OAAO,WAAW,SAAS,MAAM,MAAM,MAAM,CAAC;GAC9E,IAAI,MAAM,mBAAmB,KAAA,GAAW,OAAO,WAAW,MAAM,cAAc;GAE9E,IACE,MAAM,YAAY,IAAI,MAAM,eAC5B,MAAM,YAAY,OAAO,oBACzB,MAAM,SAAS,OAAO,iBACtB,MAAM,cAAc,OAAO,sBAC3B,MAAM,YAAY,MAAM,SAAS,OAAO,qBAExC,OAAO,OAAO,aAAa,KAAK,EAAE,QAAQ,aAAa,CAAC;GAC1D,IAAI,WAAW,KAAA,GAAW,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;GAEpE,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,iBAAiB,OAAO,KAAK,MAAM,kCAAkB,IAAI,WAAW,CAAC;GAE3E,OAAO,OAAO,WAAW,MAAM,WAAW,aAAa;IACrD,MAAM,UAAU,WACd,OAAO;KACL;KACA;KACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;KACzC;KACA,WAAW,MAAM;KACjB,QAAQ,MAAM;KACd,aAAa,MAAM;KACnB,QAAQ,MAAM;IAChB,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,UAAU,SAAS,KAAK,KAAK,CAAC,CAAC;IAErD,OAAO,MAAM,WAAW,KAAA,IAAY,OAAO,IAAI,WAAW,MAAM,QAAQ,MAAM;GAChF,CAAC;EACH,CAAC,CACH;CACJ,CAAC;AACH,CAAC"}

package/dist/internal/layer.mjs

@@ -0,0 +1,26 @@
+import { Aead } from "../Aead.mjs";
+import { Hmac } from "../Hmac.mjs";
+import { Kdf, Limits, defaultLimits } from "../Kdf.mjs";
+import { Signature } from "../Signature.mjs";
+import { decode } from "./common.mjs";
+import { makeHmac } from "./hmac.mjs";
+import { makeAead } from "./aead.mjs";
+import { makeKdf } from "./kdf.mjs";
+import { makeSignature } from "./signature.mjs";
+import { Context, Effect, Layer } from "effect";
+//#region src/internal/layer.ts
+const makeLayer = (subtle, input, extensions = {}) => {
+	const snapshot = {
+		...defaultLimits,
+		...input
+	};
+	return Layer.effectContext(Effect.gen(function* () {
+		const limits = yield* decode(Limits, snapshot, "parameters");
+		const kdf = yield* makeKdf(subtle, limits, extensions.argon2);
+		return Context.make(Aead, makeAead(subtle, extensions.xchacha)).pipe(Context.add(Hmac, makeHmac(subtle)), Context.add(Kdf, kdf), Context.add(Signature, makeSignature(subtle)));
+	}));
+};
+//#endregion
+export { makeLayer };
+
+//# sourceMappingURL=layer.mjs.map

package/dist/internal/layer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"layer.mjs","names":[],"sources":["../../src/internal/layer.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport { Aead } from \"../Aead\";\nimport { Hmac } from \"../Hmac\";\nimport { defaultLimits, Kdf, Limits } from \"../Kdf\";\nimport { Signature } from \"../Signature\";\nimport { makeAead, type XChaCha } from \"./aead\";\nimport { decode } from \"./common\";\nimport { makeHmac } from \"./hmac\";\nimport { type Argon2, makeKdf } from \"./kdf\";\nimport { makeSignature } from \"./signature\";\n\nexport const makeLayer = (\n  subtle: SubtleCrypto,\n  input: Partial<Limits>,\n  extensions: { readonly argon2?: Argon2; readonly xchacha?: XChaCha } = {},\n) => {\n  const snapshot = { ...defaultLimits, ...input };\n\n  return Layer.effectContext(\n    Effect.gen(function* () {\n      const limits = yield* decode(Limits, snapshot, \"parameters\");\n      const kdf = yield* makeKdf(subtle, limits, extensions.argon2);\n\n      return Context.make(Aead, makeAead(subtle, extensions.xchacha)).pipe(\n        Context.add(Hmac, makeHmac(subtle)),\n        Context.add(Kdf, kdf),\n        Context.add(Signature, makeSignature(subtle)),\n      );\n    }),\n  );\n};\n"],"mappings":";;;;;;;;;;;AAYA,MAAa,aACX,QACA,OACA,aAAuE,CAAC,MACrE;CACH,MAAM,WAAW;EAAE,GAAG;EAAe,GAAG;CAAM;CAE9C,OAAO,MAAM,cACX,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO,OAAO,QAAQ,UAAU,YAAY;EAC3D,MAAM,MAAM,OAAO,QAAQ,QAAQ,QAAQ,WAAW,MAAM;EAE5D,OAAO,QAAQ,KAAK,MAAM,SAAS,QAAQ,WAAW,OAAO,CAAC,CAAC,CAAC,KAC9D,QAAQ,IAAI,MAAM,SAAS,MAAM,CAAC,GAClC,QAAQ,IAAI,KAAK,GAAG,GACpB,QAAQ,IAAI,WAAW,cAAc,MAAM,CAAC,CAC9C;CACF,CAAC,CACH;AACF"}

package/dist/internal/node.d.mts

@@ -0,0 +1,11 @@
+import { InvalidInput } from "../Errors.mjs";
+import { Aead } from "../Aead.mjs";
+import { Hmac } from "../Hmac.mjs";
+import { Kdf, Limits } from "../Kdf.mjs";
+import { KdfAdmission } from "../KdfAdmission.mjs";
+import { Signature } from "../Signature.mjs";
+//#region src/internal/node.d.ts
+/** Node-compatible WebCrypto/Argon2id with the portable XChaCha20-Poly1305 extension. */
+export declare const layer: (limits?: Partial<Limits>) => import("effect/Layer").Layer<Aead | Hmac | Kdf | Signature, InvalidInput, KdfAdmission>;
+//#endregion
+//# sourceMappingURL=node.d.mts.map