@zudojs/crypto 0.0.1

package/dist/cryptoHash/cryptoHmac.core.d.ts

@@ -0,0 +1,19 @@
+import type { HmacAlgorithm, HashEncoding } from "../cryptoProvider/index.js";
+import type { HashInput } from "./cryptoHash.core.js";
+/**
+ * Calculates a keyed HMAC.
+ */
+export declare function hmac(input: HashInput, key: Uint8Array, algorithm?: HmacAlgorithm, encoding?: HashEncoding): Promise<string>;
+/**
+ * Calculates a SHA-256 HMAC.
+ */
+export declare function hmacSha256(input: HashInput, key: Uint8Array, encoding?: HashEncoding): Promise<string>;
+/**
+ * Calculates a SHA-384 HMAC.
+ */
+export declare function hmacSha384(input: HashInput, key: Uint8Array, encoding?: HashEncoding): Promise<string>;
+/**
+ * Calculates a SHA-512 HMAC.
+ */
+export declare function hmacSha512(input: HashInput, key: Uint8Array, encoding?: HashEncoding): Promise<string>;
+//# sourceMappingURL=cryptoHmac.core.d.ts.map

package/dist/cryptoHash/cryptoHmac.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoHmac.core.d.ts","sourceRoot":"","sources":["../../src/cryptoHash/cryptoHmac.core.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAMtD;;GAEG;AACH,wBAAsB,IAAI,CACxB,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,UAAU,EACf,SAAS,GAAE,aAAwB,EACnC,QAAQ,GAAE,YAAoB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,UAAU,EACf,QAAQ,GAAE,YAAoB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,UAAU,EACf,QAAQ,GAAE,YAAoB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,UAAU,EACf,QAAQ,GAAE,YAAoB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/cryptoHash/cryptoHmac.core.js

@@ -0,0 +1,29 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+import { encodeDigest } from "./cryptoHash.codec.js";
+const provider = createNodeCryptoProvider();
+/**
+ * Calculates a keyed HMAC.
+ */
+export async function hmac(input, key, algorithm = "sha256", encoding = "hex") {
+    const digest = await provider.hmac(algorithm, key, input);
+    return encodeDigest(digest, encoding);
+}
+/**
+ * Calculates a SHA-256 HMAC.
+ */
+export async function hmacSha256(input, key, encoding = "hex") {
+    return hmac(input, key, "sha256", encoding);
+}
+/**
+ * Calculates a SHA-384 HMAC.
+ */
+export async function hmacSha384(input, key, encoding = "hex") {
+    return hmac(input, key, "sha384", encoding);
+}
+/**
+ * Calculates a SHA-512 HMAC.
+ */
+export async function hmacSha512(input, key, encoding = "hex") {
+    return hmac(input, key, "sha512", encoding);
+}
+//# sourceMappingURL=cryptoHmac.core.js.map

package/dist/cryptoHash/cryptoHmac.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoHmac.core.js","sourceRoot":"","sources":["../../src/cryptoHash/cryptoHmac.core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAM5D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,KAAgB,EAChB,GAAe,EACf,SAAS,GAAkB,QAAQ,EACnC,QAAQ,GAAiB,KAAK;IAE9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAE1D,OAAO,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAgB,EAChB,GAAe,EACf,QAAQ,GAAiB,KAAK;IAE9B,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAgB,EAChB,GAAe,EACf,QAAQ,GAAiB,KAAK;IAE9B,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAgB,EAChB,GAAe,EACf,QAAQ,GAAiB,KAAK;IAE9B,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC"}

package/dist/cryptoHash/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @zudojs/crypto/cryptoHash
+ *
+ * Hashing algorithms (SHA-256, SHA-512, etc.).
+ */
+export * from "./cryptoHash.core.js";
+export * from "./cryptoHash.convenience.js";
+export * from "./cryptoHmac.core.js";
+export * from "./cryptoHash.compare.js";
+export * from "./cryptoHash.codec.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoHash/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cryptoHash/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}

package/dist/cryptoHash/index.js

@@ -0,0 +1,11 @@
+/**
+ * @zudojs/crypto/cryptoHash
+ *
+ * Hashing algorithms (SHA-256, SHA-512, etc.).
+ */
+export * from "./cryptoHash.core.js";
+export * from "./cryptoHash.convenience.js";
+export * from "./cryptoHmac.core.js";
+export * from "./cryptoHash.compare.js";
+export * from "./cryptoHash.codec.js";
+//# sourceMappingURL=index.js.map

package/dist/cryptoHash/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptoHash/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}

package/dist/cryptoKey/cryptoKey.factory.d.ts

@@ -0,0 +1,21 @@
+import type { CryptoProvider } from "../cryptoProvider/index.js";
+import type { CryptoKey, CryptoKeyOptions } from "./cryptoKey.type.js";
+/**
+ * Creates a cryptographic key from raw bytes.
+ *
+ * Hashing and key-id generation are delegated to the supplied provider.
+ */
+export declare function createCryptoKey(bytes: Uint8Array, options: CryptoKeyOptions, provider?: CryptoProvider): Promise<CryptoKey>;
+/**
+ * Generates a cryptographically secure random key.
+ *
+ * Randomness is delegated to the supplied provider.
+ */
+export declare function generateCryptoKey(length: number, options: CryptoKeyOptions, provider?: CryptoProvider): Promise<CryptoKey>;
+/**
+ * Returns a defensive copy of a key's bytes.
+ *
+ * This operation is only permitted for extractable keys.
+ */
+export declare function exportCryptoKey(key: CryptoKey): Uint8Array;
+//# sourceMappingURL=cryptoKey.factory.d.ts.map

package/dist/cryptoKey/cryptoKey.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKey.factory.d.ts","sourceRoot":"","sources":["../../src/cryptoKey/cryptoKey.factory.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAkBvE;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,gBAAgB,EACzB,QAAQ,GAAE,cAAqC,GAC9C,OAAO,CAAC,SAAS,CAAC,CA2BpB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,gBAAgB,EACzB,QAAQ,GAAE,cAAqC,GAC9C,OAAO,CAAC,SAAS,CAAC,CAUpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,UAAU,CAM1D"}

package/dist/cryptoKey/cryptoKey.factory.js

@@ -0,0 +1,72 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+import { encode } from "../cryptoEncoding/cryptoEncoding.core.js";
+let defaultProvider;
+/**
+ * Returns a lazily created default crypto provider.
+ *
+ * The provider abstraction keeps the key module free of direct
+ * `node:crypto` usage while still allowing callers to inject their own.
+ */
+function getDefaultProvider() {
+    if (defaultProvider === undefined) {
+        defaultProvider = createNodeCryptoProvider();
+    }
+    return defaultProvider;
+}
+/**
+ * Creates a cryptographic key from raw bytes.
+ *
+ * Hashing and key-id generation are delegated to the supplied provider.
+ */
+export async function createCryptoKey(bytes, options, provider = getDefaultProvider()) {
+    if (bytes.byteLength === 0) {
+        throw new TypeError("Cryptographic key cannot be empty.");
+    }
+    const keyBytes = new Uint8Array(bytes);
+    const digest = await provider.hash("sha256", keyBytes);
+    const fingerprint = encode(digest, "hex");
+    const createdAt = Date.now();
+    const keyId = options.keyId ?? `key_${await generateKeyId(provider)}`;
+    const usages = Object.freeze([...(options.usages ?? [])]);
+    return Object.freeze({
+        algorithm: options.algorithm,
+        keyId,
+        usages,
+        extractable: options.extractable ?? false,
+        createdAt,
+        length: keyBytes.byteLength * 8,
+        fingerprint,
+        bytes: () => new Uint8Array(keyBytes),
+    });
+}
+/**
+ * Generates a cryptographically secure random key.
+ *
+ * Randomness is delegated to the supplied provider.
+ */
+export async function generateCryptoKey(length, options, provider = getDefaultProvider()) {
+    if (!Number.isInteger(length) || length <= 0) {
+        throw new RangeError("Cryptographic key length must be a positive integer.");
+    }
+    const bytes = await provider.randomBytes(length);
+    return createCryptoKey(bytes, options, provider);
+}
+/**
+ * Returns a defensive copy of a key's bytes.
+ *
+ * This operation is only permitted for extractable keys.
+ */
+export function exportCryptoKey(key) {
+    if (!key.extractable) {
+        throw new Error(`Cryptographic key "${key.keyId}" is not extractable.`);
+    }
+    return key.bytes();
+}
+/**
+ * Generates a hex-encoded random identifier for a key.
+ */
+async function generateKeyId(provider) {
+    const idBytes = await provider.randomBytes(16);
+    return encode(idBytes, "hex");
+}
+//# sourceMappingURL=cryptoKey.factory.js.map

package/dist/cryptoKey/cryptoKey.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKey.factory.js","sourceRoot":"","sources":["../../src/cryptoKey/cryptoKey.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,MAAM,0CAA0C,CAAC;AAMlE,IAAI,eAA2C,CAAC;AAEhD;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,eAAe,GAAG,wBAAwB,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAiB,EACjB,OAAyB,EACzB,QAAQ,GAAmB,kBAAkB,EAAE;IAE/C,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEvD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEtE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK;QACL,MAAM;QACN,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;QACzC,SAAS;QACT,MAAM,EAAE,QAAQ,CAAC,UAAU,GAAG,CAAC;QAC/B,WAAW;QACX,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,OAAyB,EACzB,QAAQ,GAAmB,kBAAkB,EAAE;IAE/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAClB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAEjD,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAc;IAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,KAAK,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,QAAwB;IACnD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAE/C,OAAO,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/dist/cryptoKey/cryptoKey.type.d.ts

@@ -0,0 +1,44 @@
+import type { CryptoAlgorithm } from "../cryptoConstants/cryptoConstants.type.js";
+/**
+ * Supported cryptographic key usages.
+ */
+export declare enum CryptoKeyUsage {
+    ENCRYPT = "encrypt",
+    DECRYPT = "decrypt",
+    SIGN = "sign",
+    VERIFY = "verify",
+    DERIVE_KEY = "derive-key",
+    DERIVE_BITS = "derive-bits",
+    WRAP_KEY = "wrap-key",
+    UNWRAP_KEY = "unwrap-key"
+}
+/**
+ * A cryptographic key represented as immutable bytes.
+ *
+ * The underlying byte array is copied when a key is created and when
+ * its bytes are requested to prevent accidental mutation.
+ */
+export interface CryptoKey {
+    readonly algorithm: CryptoAlgorithm;
+    readonly keyId: string;
+    readonly usages: readonly CryptoKeyUsage[];
+    readonly extractable: boolean;
+    readonly createdAt: number;
+    readonly length: number;
+    readonly fingerprint: string;
+    readonly bytes: () => Uint8Array;
+}
+/**
+ * Options used to create a cryptographic key.
+ */
+export interface CryptoKeyOptions {
+    readonly algorithm: CryptoAlgorithm;
+    readonly keyId?: string;
+    readonly usages?: readonly CryptoKeyUsage[];
+    readonly extractable?: boolean;
+}
+/**
+ * Checks whether a value is a CryptoKey.
+ */
+export declare function isCryptoKey(value: unknown): value is CryptoKey;
+//# sourceMappingURL=cryptoKey.type.d.ts.map

package/dist/cryptoKey/cryptoKey.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKey.type.d.ts","sourceRoot":"","sources":["../../src/cryptoKey/cryptoKey.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAElF;;GAEG;AACH,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;IACrB,UAAU,eAAe;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,UAAU,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAiB9D"}

package/dist/cryptoKey/cryptoKey.type.js

@@ -0,0 +1,32 @@
+/**
+ * Supported cryptographic key usages.
+ */
+export var CryptoKeyUsage;
+(function (CryptoKeyUsage) {
+    CryptoKeyUsage["ENCRYPT"] = "encrypt";
+    CryptoKeyUsage["DECRYPT"] = "decrypt";
+    CryptoKeyUsage["SIGN"] = "sign";
+    CryptoKeyUsage["VERIFY"] = "verify";
+    CryptoKeyUsage["DERIVE_KEY"] = "derive-key";
+    CryptoKeyUsage["DERIVE_BITS"] = "derive-bits";
+    CryptoKeyUsage["WRAP_KEY"] = "wrap-key";
+    CryptoKeyUsage["UNWRAP_KEY"] = "unwrap-key";
+})(CryptoKeyUsage || (CryptoKeyUsage = {}));
+/**
+ * Checks whether a value is a CryptoKey.
+ */
+export function isCryptoKey(value) {
+    if (typeof value !== "object" || value === null) {
+        return false;
+    }
+    const key = value;
+    return (typeof key.algorithm === "string" &&
+        typeof key.keyId === "string" &&
+        Array.isArray(key.usages) &&
+        typeof key.extractable === "boolean" &&
+        typeof key.createdAt === "number" &&
+        typeof key.length === "number" &&
+        typeof key.fingerprint === "string" &&
+        typeof key.bytes === "function");
+}
+//# sourceMappingURL=cryptoKey.type.js.map

package/dist/cryptoKey/cryptoKey.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKey.type.js","sourceRoot":"","sources":["../../src/cryptoKey/cryptoKey.type.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,CAAN,IAAY,cASX;AATD,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,qCAAmB,CAAA;IACnB,+BAAa,CAAA;IACb,mCAAiB,CAAA;IACjB,2CAAyB,CAAA;IACzB,6CAA2B,CAAA;IAC3B,uCAAqB,CAAA;IACrB,2CAAyB,CAAA;AAC3B,CAAC,EATW,cAAc,KAAd,cAAc,QASzB;AA6BD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,KAA2B,CAAC;IAExC,OAAO,CACL,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QACzB,OAAO,GAAG,CAAC,WAAW,KAAK,SAAS;QACpC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC9B,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QACnC,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU,CAChC,CAAC;AACJ,CAAC"}

package/dist/cryptoKey/cryptoKey.utils.d.ts

@@ -0,0 +1,13 @@
+import type { CryptoKey } from "./cryptoKey.type.js";
+/**
+ * Returns a stable SHA-256 fingerprint for a key.
+ *
+ * The fingerprint can be used for identification without exposing
+ * the secret key material.
+ */
+export declare function getCryptoKeyFingerprint(key: CryptoKey): string;
+/**
+ * Compares two cryptographic keys by identity.
+ */
+export declare function cryptoKeysEqual(left: CryptoKey, right: CryptoKey): boolean;
+//# sourceMappingURL=cryptoKey.utils.d.ts.map

package/dist/cryptoKey/cryptoKey.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKey.utils.d.ts","sourceRoot":"","sources":["../../src/cryptoKey/cryptoKey.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE9D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAM1E"}

package/dist/cryptoKey/cryptoKey.utils.js

@@ -0,0 +1,18 @@
+/**
+ * Returns a stable SHA-256 fingerprint for a key.
+ *
+ * The fingerprint can be used for identification without exposing
+ * the secret key material.
+ */
+export function getCryptoKeyFingerprint(key) {
+    return key.fingerprint;
+}
+/**
+ * Compares two cryptographic keys by identity.
+ */
+export function cryptoKeysEqual(left, right) {
+    return (left.keyId === right.keyId &&
+        left.fingerprint === right.fingerprint &&
+        left.algorithm === right.algorithm);
+}
+//# sourceMappingURL=cryptoKey.utils.js.map

package/dist/cryptoKey/cryptoKey.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKey.utils.js","sourceRoot":"","sources":["../../src/cryptoKey/cryptoKey.utils.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAc;IACpD,OAAO,GAAG,CAAC,WAAW,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,KAAgB;IAC/D,OAAO,CACL,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CACnC,CAAC;AACJ,CAAC"}

package/dist/cryptoKey/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @zudojs/crypto/cryptoKey
+ *
+ * Cryptographic key types and management.
+ */
+export * from "./cryptoKey.type.js";
+export * from "./cryptoKey.factory.js";
+export * from "./cryptoKey.utils.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoKey/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cryptoKey/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/cryptoKey/index.js

@@ -0,0 +1,9 @@
+/**
+ * @zudojs/crypto/cryptoKey
+ *
+ * Cryptographic key types and management.
+ */
+export * from "./cryptoKey.type.js";
+export * from "./cryptoKey.factory.js";
+export * from "./cryptoKey.utils.js";
+//# sourceMappingURL=index.js.map

package/dist/cryptoKey/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptoKey/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.core.d.ts

@@ -0,0 +1,16 @@
+import type { DerivedKeyResult } from "../cryptoProvider/index.js";
+import { CryptoAlgorithm } from "../cryptoConstants/cryptoConstants.type.js";
+import type { Pbkdf2Options, ScryptOptions } from "./cryptoKeyDerivation.type.js";
+/**
+ * Derives a key from a password using PBKDF2.
+ */
+export declare function derivePbkdf2(password: string | Uint8Array, options?: Pbkdf2Options): Promise<DerivedKeyResult>;
+/**
+ * Derives a key using scrypt.
+ */
+export declare function deriveScrypt(password: string | Uint8Array, options?: ScryptOptions): Promise<DerivedKeyResult>;
+/**
+ * Derives a key using the selected key derivation algorithm.
+ */
+export declare function deriveKey(password: string | Uint8Array, algorithm: CryptoAlgorithm, options?: Pbkdf2Options | ScryptOptions): Promise<DerivedKeyResult>;
+//# sourceMappingURL=cryptoKeyDerivation.core.d.ts.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.core.d.ts","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.core.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACd,MAAM,+BAA+B,CAAC;AASvC;;GAEG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAC7B,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CA0B3B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAC7B,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CA0B3B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,GAAG,UAAU,EAC7B,SAAS,EAAE,eAAe,EAC1B,OAAO,GAAE,aAAa,GAAG,aAAkB,GAC1C,OAAO,CAAC,gBAAgB,CAAC,CAsB3B"}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.core.js

@@ -0,0 +1,76 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+import { CryptoAlgorithm } from "../cryptoConstants/cryptoConstants.type.js";
+import { validatePbkdf2Options, validateScryptOptions, } from "./cryptoKeyDerivation.validate.js";
+const provider = createNodeCryptoProvider();
+/**
+ * Derives a key from a password using PBKDF2.
+ */
+export async function derivePbkdf2(password, options = {}) {
+    const iterations = options.iterations ?? 310_000;
+    const keyLength = options.keyLength ?? 32;
+    const salt = options.salt ??
+        new Uint8Array(await provider.randomBytes(options.saltLength ?? 16));
+    const digest = options.digest ?? "sha256";
+    validatePbkdf2Options(iterations, keyLength, salt);
+    const key = await provider.deriveKey({
+        password,
+        salt,
+        algorithm: "pbkdf2",
+        keyLength,
+        iterations,
+    });
+    return Object.freeze({
+        algorithm: digest === "sha512"
+            ? CryptoAlgorithm.PBKDF2_SHA512
+            : CryptoAlgorithm.PBKDF2_SHA256,
+        key,
+        salt: new Uint8Array(salt),
+    });
+}
+/**
+ * Derives a key using scrypt.
+ */
+export async function deriveScrypt(password, options = {}) {
+    const keyLength = options.keyLength ?? 32;
+    const cost = options.cost ?? 16_384;
+    const blockSize = options.blockSize ?? 8;
+    const parallelization = options.parallelization ?? 1;
+    const salt = options.salt ??
+        new Uint8Array(await provider.randomBytes(options.saltLength ?? 16));
+    validateScryptOptions(keyLength, cost, blockSize, parallelization, salt);
+    const key = await provider.deriveKey({
+        password: password instanceof Uint8Array ? password : Buffer.from(password, "utf8"),
+        salt,
+        algorithm: "scrypt",
+        keyLength,
+        memoryCost: cost,
+        parallelism: parallelization,
+    });
+    return Object.freeze({
+        algorithm: CryptoAlgorithm.SCRYPT,
+        key,
+        salt: new Uint8Array(salt),
+    });
+}
+/**
+ * Derives a key using the selected key derivation algorithm.
+ */
+export async function deriveKey(password, algorithm, options = {}) {
+    switch (algorithm) {
+        case CryptoAlgorithm.PBKDF2_SHA256:
+            return derivePbkdf2(password, {
+                ...options,
+                digest: "sha256",
+            });
+        case CryptoAlgorithm.PBKDF2_SHA512:
+            return derivePbkdf2(password, {
+                ...options,
+                digest: "sha512",
+            });
+        case CryptoAlgorithm.SCRYPT:
+            return deriveScrypt(password, options);
+        default:
+            throw new TypeError(`Unsupported key derivation algorithm: ${algorithm}.`);
+    }
+}
+//# sourceMappingURL=cryptoKeyDerivation.core.js.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.core.js","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAQ5D,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAO7E,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA6B,EAC7B,OAAO,GAAkB,EAAE;IAE3B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;QACZ,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;IAE1C,qBAAqB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;QACnC,QAAQ;QACR,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EACP,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAE,eAAe,CAAC,aAAwC;YAC3D,CAAC,CAAE,eAAe,CAAC,aAAwC;QAC/D,GAAG;QACH,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA6B,EAC7B,OAAO,GAAkB,EAAE;IAE3B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;IACzC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;QACZ,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAEzE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;QACnC,QAAQ,EACN,QAAQ,YAAY,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC3E,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,SAAS;QACT,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,eAAe;KAC7B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,eAAe,CAAC,MAAgC;QAC3D,GAAG;QACH,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAA6B,EAC7B,SAA0B,EAC1B,OAAO,GAAkC,EAAE;IAE3C,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,eAAe,CAAC,aAAa;YAChC,OAAO,YAAY,CAAC,QAAQ,EAAE;gBAC5B,GAAI,OAAyB;gBAC7B,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QAEL,KAAK,eAAe,CAAC,aAAa;YAChC,OAAO,YAAY,CAAC,QAAQ,EAAE;gBAC5B,GAAI,OAAyB;gBAC7B,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QAEL,KAAK,eAAe,CAAC,MAAM;YACzB,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAwB,CAAC,CAAC;QAE1D;YACE,MAAM,IAAI,SAAS,CACjB,yCAAyC,SAAS,GAAG,CACtD,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.salt.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Creates a random salt.
+ */
+export declare function generateSalt(length?: number): Promise<Uint8Array>;
+//# sourceMappingURL=cryptoKeyDerivation.salt.d.ts.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.salt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.salt.d.ts","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.salt.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,SAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAUnE"}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.salt.js

@@ -0,0 +1,12 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+/**
+ * Creates a random salt.
+ */
+export async function generateSalt(length = 16) {
+    if (!Number.isInteger(length) || length < 16) {
+        throw new RangeError("Salt length must be an integer of at least 16 bytes.");
+    }
+    const provider = createNodeCryptoProvider();
+    return provider.randomBytes(length);
+}
+//# sourceMappingURL=cryptoKeyDerivation.salt.js.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.salt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.salt.js","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.salt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAM,GAAG,EAAE;IAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAClB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAE5C,OAAO,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.type.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Options for PBKDF2 key derivation.
+ */
+export interface Pbkdf2Options {
+    readonly iterations?: number;
+    readonly keyLength?: number;
+    readonly digest?: "sha256" | "sha384" | "sha512";
+    readonly salt?: Uint8Array;
+    readonly saltLength?: number;
+}
+/**
+ * Options for scrypt key derivation.
+ */
+export interface ScryptOptions {
+    readonly keyLength?: number;
+    readonly cost?: number;
+    readonly blockSize?: number;
+    readonly parallelization?: number;
+    readonly salt?: Uint8Array;
+    readonly saltLength?: number;
+    readonly maxMemory?: number;
+}
+//# sourceMappingURL=cryptoKeyDerivation.type.d.ts.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.type.d.ts","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.type.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B"}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cryptoKeyDerivation.type.js.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.type.js","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.type.ts"],"names":[],"mappings":""}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.validate.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Validates PBKDF2 key derivation options.
+ */
+export declare function validatePbkdf2Options(iterations: number, keyLength: number, salt: Uint8Array): void;
+/**
+ * Validates scrypt key derivation options.
+ */
+export declare function validateScryptOptions(keyLength: number, cost: number, blockSize: number, parallelization: number, salt: Uint8Array): void;
+//# sourceMappingURL=cryptoKeyDerivation.validate.d.ts.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.validate.d.ts","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.validate.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,UAAU,GACf,IAAI,CAYN;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE,UAAU,GACf,IAAI,CAsBN"}

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.validate.js

@@ -0,0 +1,35 @@
+/**
+ * Validates PBKDF2 key derivation options.
+ */
+export function validatePbkdf2Options(iterations, keyLength, salt) {
+    if (!Number.isInteger(iterations) || iterations < 100_000) {
+        throw new RangeError("PBKDF2 iterations must be at least 100000.");
+    }
+    if (!Number.isInteger(keyLength) || keyLength < 16) {
+        throw new RangeError("PBKDF2 keyLength must be at least 16 bytes.");
+    }
+    if (salt.byteLength < 16) {
+        throw new RangeError("PBKDF2 salt must be at least 16 bytes.");
+    }
+}
+/**
+ * Validates scrypt key derivation options.
+ */
+export function validateScryptOptions(keyLength, cost, blockSize, parallelization, salt) {
+    if (!Number.isInteger(keyLength) || keyLength < 16) {
+        throw new RangeError("scrypt keyLength must be at least 16 bytes.");
+    }
+    if (!Number.isInteger(cost) || cost < 2 || (cost & (cost - 1)) !== 0) {
+        throw new RangeError("scrypt cost must be a power of two greater than or equal to 2.");
+    }
+    if (!Number.isInteger(blockSize) || blockSize <= 0) {
+        throw new RangeError("scrypt blockSize must be a positive integer.");
+    }
+    if (!Number.isInteger(parallelization) || parallelization <= 0) {
+        throw new RangeError("scrypt parallelization must be a positive integer.");
+    }
+    if (salt.byteLength < 16) {
+        throw new RangeError("scrypt salt must be at least 16 bytes.");
+    }
+}
+//# sourceMappingURL=cryptoKeyDerivation.validate.js.map

package/dist/cryptoKeyDerivation/cryptoKeyDerivation.validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKeyDerivation.validate.js","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/cryptoKeyDerivation.validate.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,SAAiB,EACjB,IAAgB;IAEhB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,IAAY,EACZ,SAAiB,EACjB,eAAuB,EACvB,IAAgB;IAEhB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,UAAU,CAClB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/cryptoKeyDerivation/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @zudojs/crypto/cryptoKeyDerivation
+ *
+ * Key derivation functions (PBKDF2, scrypt, etc.).
+ */
+export * from "./cryptoKeyDerivation.core.js";
+export * from "./cryptoKeyDerivation.type.js";
+export * from "./cryptoKeyDerivation.salt.js";
+export * from "./cryptoKeyDerivation.validate.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoKeyDerivation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC"}

package/dist/cryptoKeyDerivation/index.js

@@ -0,0 +1,10 @@
+/**
+ * @zudojs/crypto/cryptoKeyDerivation
+ *
+ * Key derivation functions (PBKDF2, scrypt, etc.).
+ */
+export * from "./cryptoKeyDerivation.core.js";
+export * from "./cryptoKeyDerivation.type.js";
+export * from "./cryptoKeyDerivation.salt.js";
+export * from "./cryptoKeyDerivation.validate.js";
+//# sourceMappingURL=index.js.map

package/dist/cryptoKeyDerivation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptoKeyDerivation/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC"}

package/dist/cryptoPassword/cryptoPassword.codec.d.ts

@@ -0,0 +1,14 @@
+import type { PasswordHashParameters } from "./cryptoPassword.type.js";
+/**
+ * Current password hash encoding format version.
+ */
+export declare const PASSWORD_FORMAT_VERSION = "v1";
+/**
+ * Decodes an encoded password hash into its parameters.
+ */
+export declare function decodePasswordHash(encoded: string): PasswordHashParameters;
+/**
+ * Encodes password hashing parameters into a portable string.
+ */
+export declare function encodePasswordHash(parameters: PasswordHashParameters): string;
+//# sourceMappingURL=cryptoPassword.codec.d.ts.map

package/dist/cryptoPassword/cryptoPassword.codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoPassword.codec.d.ts","sourceRoot":"","sources":["../../src/cryptoPassword/cryptoPassword.codec.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAQvE;;GAEG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,CAuE1E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,CA8B7E"}