aegis-aead 0.1.1 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/README.md +195 -89
  2. package/dist/aegis128l-bs.d.ts +194 -0
  3. package/dist/aegis128l-bs.d.ts.map +1 -0
  4. package/dist/aegis128l-bs.js +549 -0
  5. package/dist/aegis128l-bs.js.map +1 -0
  6. package/dist/aegis128l.d.ts +74 -5
  7. package/dist/aegis128l.d.ts.map +1 -1
  8. package/dist/aegis128l.js +173 -5
  9. package/dist/aegis128l.js.map +1 -1
  10. package/dist/aegis128x.d.ts +109 -12
  11. package/dist/aegis128x.d.ts.map +1 -1
  12. package/dist/aegis128x.js +202 -9
  13. package/dist/aegis128x.js.map +1 -1
  14. package/dist/aegis256-bs.d.ts +183 -0
  15. package/dist/aegis256-bs.d.ts.map +1 -0
  16. package/dist/aegis256-bs.js +477 -0
  17. package/dist/aegis256-bs.js.map +1 -0
  18. package/dist/aegis256.d.ts +74 -5
  19. package/dist/aegis256.d.ts.map +1 -1
  20. package/dist/aegis256.js +158 -5
  21. package/dist/aegis256.js.map +1 -1
  22. package/dist/aegis256x.d.ts +109 -12
  23. package/dist/aegis256x.d.ts.map +1 -1
  24. package/dist/aegis256x.js +193 -9
  25. package/dist/aegis256x.js.map +1 -1
  26. package/dist/aes-bs.d.ts +71 -0
  27. package/dist/aes-bs.d.ts.map +1 -0
  28. package/dist/aes-bs.js +399 -0
  29. package/dist/aes-bs.js.map +1 -0
  30. package/dist/index.d.ts +6 -4
  31. package/dist/index.d.ts.map +1 -1
  32. package/dist/index.js +6 -4
  33. package/dist/index.js.map +1 -1
  34. package/dist/random.d.ts +22 -0
  35. package/dist/random.d.ts.map +1 -0
  36. package/dist/random.js +36 -0
  37. package/dist/random.js.map +1 -0
  38. package/package.json +1 -1
  39. package/src/aegis128l-bs.ts +709 -0
  40. package/src/aegis128l.ts +238 -5
  41. package/src/aegis128x.ts +342 -15
  42. package/src/aegis256-bs.ts +625 -0
  43. package/src/aegis256.ts +223 -5
  44. package/src/aegis256x.ts +329 -15
  45. package/src/aes-bs.ts +459 -0
  46. package/src/index.ts +86 -0
  47. package/src/random.ts +41 -0
  48. package/README.md~ +0 -154
@@ -0,0 +1,477 @@
1
+ /**
2
+ * Bitsliced AEGIS-256 implementation.
3
+ * Provides constant-time operation by processing state blocks simultaneously.
4
+ */
5
+ import { constantTimeEqual, zeroPad } from "./aes.js";
6
+ import { aesRound, blockFromBytes, blocksPut, blockToBytes, blockXor, createAesBlock, createAesBlocks, pack, unpack, wordIdx, } from "./aes-bs.js";
7
+ import { randomBytes } from "./random.js";
8
+ const RATE = 16;
9
+ const C0 = new Uint32Array([
10
+ 0x02010100, 0x0d080503, 0x59372215, 0x6279e990,
11
+ ]);
12
+ const C1 = new Uint32Array([
13
+ 0x55183ddb, 0xf12fc26d, 0x42311120, 0xdd28b573,
14
+ ]);
15
+ /**
16
+ * Bitsliced AEGIS-256 cipher state.
17
+ * Uses 6 AES blocks (96 bytes) stored in bitsliced form.
18
+ */
19
+ export class Aegis256BsState {
20
+ constructor() {
21
+ this.st = createAesBlocks();
22
+ this.st1 = createAesBlocks();
23
+ this.tmp = createAesBlock();
24
+ }
25
+ /**
26
+ * AEGIS round function: applies AES round to all blocks and rotates.
27
+ * st[i] = AES(st[i]) ^ st[(i+5) mod 6]
28
+ */
29
+ aegisRound() {
30
+ const st = this.st;
31
+ const st1 = this.st1;
32
+ st1.set(st);
33
+ pack(st1);
34
+ aesRound(st1);
35
+ unpack(st1);
36
+ for (let i = 0; i < 6; i++) {
37
+ const prev = (i + 5) % 6;
38
+ st[wordIdx(i, 0)] = (st[wordIdx(i, 0)] ^ st1[wordIdx(prev, 0)]) >>> 0;
39
+ st[wordIdx(i, 1)] = (st[wordIdx(i, 1)] ^ st1[wordIdx(prev, 1)]) >>> 0;
40
+ st[wordIdx(i, 2)] = (st[wordIdx(i, 2)] ^ st1[wordIdx(prev, 2)]) >>> 0;
41
+ st[wordIdx(i, 3)] = (st[wordIdx(i, 3)] ^ st1[wordIdx(prev, 3)]) >>> 0;
42
+ }
43
+ }
44
+ /**
45
+ * Absorb rate: XOR message block into state position 0.
46
+ */
47
+ absorbRate(m) {
48
+ const st = this.st;
49
+ st[wordIdx(0, 0)] = (st[wordIdx(0, 0)] ^ m[0]) >>> 0;
50
+ st[wordIdx(0, 1)] = (st[wordIdx(0, 1)] ^ m[1]) >>> 0;
51
+ st[wordIdx(0, 2)] = (st[wordIdx(0, 2)] ^ m[2]) >>> 0;
52
+ st[wordIdx(0, 3)] = (st[wordIdx(0, 3)] ^ m[3]) >>> 0;
53
+ }
54
+ /**
55
+ * Update state with a message block.
56
+ */
57
+ update(m) {
58
+ this.aegisRound();
59
+ this.absorbRate(m);
60
+ }
61
+ /**
62
+ * Initializes the state with a key and nonce.
63
+ * @param key - 32-byte encryption key
64
+ * @param nonce - 32-byte nonce (must be unique per message)
65
+ */
66
+ init(key, nonce) {
67
+ const k0 = createAesBlock();
68
+ const k1 = createAesBlock();
69
+ const n0 = createAesBlock();
70
+ const n1 = createAesBlock();
71
+ const k0n0 = createAesBlock();
72
+ const k1n1 = createAesBlock();
73
+ const k0c0 = createAesBlock();
74
+ const k1c1 = createAesBlock();
75
+ blockFromBytes(k0, key.subarray(0, 16));
76
+ blockFromBytes(k1, key.subarray(16, 32));
77
+ blockFromBytes(n0, nonce.subarray(0, 16));
78
+ blockFromBytes(n1, nonce.subarray(16, 32));
79
+ blockXor(k0n0, k0, n0);
80
+ blockXor(k1n1, k1, n1);
81
+ blockXor(k0c0, k0, C0);
82
+ blockXor(k1c1, k1, C1);
83
+ this.st.fill(0);
84
+ blocksPut(this.st, k0n0, 0);
85
+ blocksPut(this.st, k1n1, 1);
86
+ blocksPut(this.st, C1, 2);
87
+ blocksPut(this.st, C0, 3);
88
+ blocksPut(this.st, k0c0, 4);
89
+ blocksPut(this.st, k1c1, 5);
90
+ for (let i = 0; i < 4; i++) {
91
+ this.update(k0);
92
+ this.update(k1);
93
+ this.update(k0n0);
94
+ this.update(k1n1);
95
+ }
96
+ }
97
+ /**
98
+ * Absorbs a 16-byte associated data block into the state.
99
+ * @param ai - 16-byte associated data block
100
+ */
101
+ absorb(ai) {
102
+ const msg = this.tmp;
103
+ blockFromBytes(msg, ai);
104
+ this.update(msg);
105
+ }
106
+ /**
107
+ * Encrypts a 16-byte plaintext block and writes to output buffer.
108
+ * @param xi - 16-byte plaintext block
109
+ * @param out - 16-byte output buffer
110
+ */
111
+ encTo(xi, out) {
112
+ const st = this.st;
113
+ const z = this.tmp;
114
+ const t = createAesBlock();
115
+ for (let i = 0; i < 4; i++) {
116
+ z[i] =
117
+ (st[wordIdx(1, i)] ^
118
+ st[wordIdx(4, i)] ^
119
+ st[wordIdx(5, i)] ^
120
+ (st[wordIdx(2, i)] & st[wordIdx(3, i)])) >>>
121
+ 0;
122
+ }
123
+ blockFromBytes(t, xi);
124
+ const outBlock = createAesBlock();
125
+ blockXor(outBlock, t, z);
126
+ blockToBytes(out, outBlock);
127
+ this.update(t);
128
+ }
129
+ /**
130
+ * Encrypts a 16-byte plaintext block.
131
+ * @param xi - 16-byte plaintext block
132
+ * @returns 16-byte ciphertext block
133
+ */
134
+ enc(xi) {
135
+ const out = new Uint8Array(16);
136
+ this.encTo(xi, out);
137
+ return out;
138
+ }
139
+ /**
140
+ * Decrypts a 16-byte ciphertext block and writes to output buffer.
141
+ * @param ci - 16-byte ciphertext block
142
+ * @param out - 16-byte output buffer
143
+ */
144
+ decTo(ci, out) {
145
+ const st = this.st;
146
+ const msg = this.tmp;
147
+ blockFromBytes(msg, ci);
148
+ for (let i = 0; i < 4; i++) {
149
+ msg[i] =
150
+ (msg[i] ^
151
+ st[wordIdx(1, i)] ^
152
+ st[wordIdx(4, i)] ^
153
+ st[wordIdx(5, i)] ^
154
+ (st[wordIdx(2, i)] & st[wordIdx(3, i)])) >>>
155
+ 0;
156
+ }
157
+ this.update(msg);
158
+ blockToBytes(out, msg);
159
+ }
160
+ /**
161
+ * Decrypts a 16-byte ciphertext block.
162
+ * @param ci - 16-byte ciphertext block
163
+ * @returns 16-byte plaintext block
164
+ */
165
+ dec(ci) {
166
+ const out = new Uint8Array(16);
167
+ this.decTo(ci, out);
168
+ return out;
169
+ }
170
+ /**
171
+ * Encrypts a 16-byte plaintext block in-place.
172
+ * @param block - 16-byte buffer (plaintext in, ciphertext out)
173
+ */
174
+ encInPlace(block) {
175
+ this.encTo(block, block);
176
+ }
177
+ /**
178
+ * Decrypts a 16-byte ciphertext block in-place.
179
+ * @param block - 16-byte buffer (ciphertext in, plaintext out)
180
+ */
181
+ decInPlace(block) {
182
+ this.decTo(block, block);
183
+ }
184
+ /**
185
+ * Decrypts a partial (final) ciphertext block smaller than 16 bytes.
186
+ * @param cn - Partial ciphertext block (1-15 bytes)
187
+ * @returns Decrypted plaintext of the same length
188
+ */
189
+ decPartial(cn) {
190
+ const st = this.st;
191
+ const msg = this.tmp;
192
+ const padded = zeroPad(cn, RATE);
193
+ blockFromBytes(msg, padded);
194
+ for (let i = 0; i < 4; i++) {
195
+ msg[i] =
196
+ (msg[i] ^
197
+ st[wordIdx(1, i)] ^
198
+ st[wordIdx(4, i)] ^
199
+ st[wordIdx(5, i)] ^
200
+ (st[wordIdx(2, i)] & st[wordIdx(3, i)])) >>>
201
+ 0;
202
+ }
203
+ const pad = new Uint8Array(RATE);
204
+ blockToBytes(pad, msg);
205
+ const xn = new Uint8Array(pad.subarray(0, cn.length));
206
+ pad.fill(0, cn.length);
207
+ blockFromBytes(msg, pad);
208
+ this.aegisRound();
209
+ this.absorbRate(msg);
210
+ return xn;
211
+ }
212
+ /**
213
+ * Finalizes encryption/decryption and produces an authentication tag.
214
+ * @param adLen - Associated data length in bytes
215
+ * @param msgLen - Message length in bytes
216
+ * @param tagLen - Tag length (16 or 32 bytes)
217
+ * @returns Authentication tag
218
+ */
219
+ finalize(adLen, msgLen, tagLen = 16) {
220
+ const st = this.st;
221
+ const tmp = this.tmp;
222
+ tmp[0] = ((adLen * 8) & 0xffffffff) >>> 0;
223
+ tmp[1] = Math.floor((adLen * 8) / 0x100000000) >>> 0;
224
+ tmp[2] = ((msgLen * 8) & 0xffffffff) >>> 0;
225
+ tmp[3] = Math.floor((msgLen * 8) / 0x100000000) >>> 0;
226
+ tmp[0] = (tmp[0] ^ st[wordIdx(3, 0)]) >>> 0;
227
+ tmp[1] = (tmp[1] ^ st[wordIdx(3, 1)]) >>> 0;
228
+ tmp[2] = (tmp[2] ^ st[wordIdx(3, 2)]) >>> 0;
229
+ tmp[3] = (tmp[3] ^ st[wordIdx(3, 3)]) >>> 0;
230
+ for (let i = 0; i < 7; i++) {
231
+ this.update(tmp);
232
+ }
233
+ if (tagLen === 16) {
234
+ const tag = new Uint8Array(16);
235
+ const tagBlock = createAesBlock();
236
+ for (let i = 0; i < 4; i++) {
237
+ tagBlock[i] =
238
+ (st[wordIdx(0, i)] ^
239
+ st[wordIdx(1, i)] ^
240
+ st[wordIdx(2, i)] ^
241
+ st[wordIdx(3, i)] ^
242
+ st[wordIdx(4, i)] ^
243
+ st[wordIdx(5, i)]) >>>
244
+ 0;
245
+ }
246
+ blockToBytes(tag, tagBlock);
247
+ return tag;
248
+ }
249
+ else {
250
+ const tag = new Uint8Array(32);
251
+ const tagBlock0 = createAesBlock();
252
+ const tagBlock1 = createAesBlock();
253
+ for (let i = 0; i < 4; i++) {
254
+ tagBlock0[i] =
255
+ (st[wordIdx(0, i)] ^ st[wordIdx(1, i)] ^ st[wordIdx(2, i)]) >>> 0;
256
+ }
257
+ for (let i = 0; i < 4; i++) {
258
+ tagBlock1[i] =
259
+ (st[wordIdx(3, i)] ^ st[wordIdx(4, i)] ^ st[wordIdx(5, i)]) >>> 0;
260
+ }
261
+ blockToBytes(tag.subarray(0, 16), tagBlock0);
262
+ blockToBytes(tag.subarray(16, 32), tagBlock1);
263
+ return tag;
264
+ }
265
+ }
266
+ }
267
+ /**
268
+ * Encrypts a message using bitsliced AEGIS-256 (detached mode).
269
+ * @param msg - Plaintext message
270
+ * @param ad - Associated data (authenticated but not encrypted)
271
+ * @param key - 32-byte encryption key
272
+ * @param nonce - 32-byte nonce (must be unique per message with the same key)
273
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
274
+ * @returns Object containing ciphertext and authentication tag separately
275
+ */
276
+ export function aegis256BsEncryptDetached(msg, ad, key, nonce, tagLen = 16) {
277
+ const state = new Aegis256BsState();
278
+ state.init(key, nonce);
279
+ const adPadded = zeroPad(ad, RATE);
280
+ for (let i = 0; i + RATE <= adPadded.length; i += RATE) {
281
+ state.absorb(adPadded.subarray(i, i + RATE));
282
+ }
283
+ const ciphertext = new Uint8Array(msg.length);
284
+ const fullBlocks = Math.floor(msg.length / RATE) * RATE;
285
+ for (let i = 0; i < fullBlocks; i += RATE) {
286
+ state.encTo(msg.subarray(i, i + RATE), ciphertext.subarray(i, i + RATE));
287
+ }
288
+ if (msg.length > fullBlocks) {
289
+ const lastBlock = zeroPad(msg.subarray(fullBlocks), RATE);
290
+ const encBlock = state.enc(lastBlock);
291
+ ciphertext.set(encBlock.subarray(0, msg.length - fullBlocks), fullBlocks);
292
+ }
293
+ const tag = state.finalize(ad.length, msg.length, tagLen);
294
+ return { ciphertext, tag };
295
+ }
296
+ /**
297
+ * Decrypts a message using bitsliced AEGIS-256 (detached mode).
298
+ * @param ct - Ciphertext
299
+ * @param tag - Authentication tag (16 or 32 bytes)
300
+ * @param ad - Associated data (must match what was used during encryption)
301
+ * @param key - 32-byte encryption key
302
+ * @param nonce - 32-byte nonce (must match what was used during encryption)
303
+ * @returns Decrypted plaintext, or null if authentication fails
304
+ */
305
+ export function aegis256BsDecryptDetached(ct, tag, ad, key, nonce) {
306
+ const tagLen = tag.length;
307
+ const state = new Aegis256BsState();
308
+ state.init(key, nonce);
309
+ const adPadded = zeroPad(ad, RATE);
310
+ for (let i = 0; i + RATE <= adPadded.length; i += RATE) {
311
+ state.absorb(adPadded.subarray(i, i + RATE));
312
+ }
313
+ const msg = new Uint8Array(ct.length);
314
+ const fullBlocks = Math.floor(ct.length / RATE) * RATE;
315
+ for (let i = 0; i < fullBlocks; i += RATE) {
316
+ state.decTo(ct.subarray(i, i + RATE), msg.subarray(i, i + RATE));
317
+ }
318
+ if (ct.length > fullBlocks) {
319
+ msg.set(state.decPartial(ct.subarray(fullBlocks)), fullBlocks);
320
+ }
321
+ const expectedTag = state.finalize(ad.length, msg.length, tagLen);
322
+ if (!constantTimeEqual(tag, expectedTag)) {
323
+ msg.fill(0);
324
+ return null;
325
+ }
326
+ return msg;
327
+ }
328
+ /**
329
+ * Encrypts a message in-place using bitsliced AEGIS-256 (detached mode).
330
+ * The input buffer is modified to contain the ciphertext.
331
+ * @param data - Buffer containing plaintext (will be overwritten with ciphertext)
332
+ * @param ad - Associated data (authenticated but not encrypted)
333
+ * @param key - 32-byte encryption key
334
+ * @param nonce - 32-byte nonce (must be unique per message with the same key)
335
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
336
+ * @returns Authentication tag
337
+ */
338
+ export function aegis256BsEncryptDetachedInPlace(data, ad, key, nonce, tagLen = 16) {
339
+ const state = new Aegis256BsState();
340
+ state.init(key, nonce);
341
+ const adPadded = zeroPad(ad, RATE);
342
+ for (let i = 0; i + RATE <= adPadded.length; i += RATE) {
343
+ state.absorb(adPadded.subarray(i, i + RATE));
344
+ }
345
+ const msgLen = data.length;
346
+ const fullBlocksLen = Math.floor(msgLen / RATE) * RATE;
347
+ for (let i = 0; i < fullBlocksLen; i += RATE) {
348
+ state.encInPlace(data.subarray(i, i + RATE));
349
+ }
350
+ if (msgLen > fullBlocksLen) {
351
+ const lastPartial = data.subarray(fullBlocksLen);
352
+ const lastBlock = zeroPad(lastPartial, RATE);
353
+ const encBlock = state.enc(lastBlock);
354
+ lastPartial.set(encBlock.subarray(0, lastPartial.length));
355
+ }
356
+ return state.finalize(ad.length, msgLen, tagLen);
357
+ }
358
+ /**
359
+ * Decrypts a message in-place using bitsliced AEGIS-256 (detached mode).
360
+ * The input buffer is modified to contain the plaintext (or zeroed on failure).
361
+ * @param data - Buffer containing ciphertext (will be overwritten with plaintext)
362
+ * @param tag - Authentication tag (16 or 32 bytes)
363
+ * @param ad - Associated data (must match what was used during encryption)
364
+ * @param key - 32-byte encryption key
365
+ * @param nonce - 32-byte nonce (must match what was used during encryption)
366
+ * @returns True if authentication succeeds, false otherwise
367
+ */
368
+ export function aegis256BsDecryptDetachedInPlace(data, tag, ad, key, nonce) {
369
+ const tagLen = tag.length;
370
+ const state = new Aegis256BsState();
371
+ state.init(key, nonce);
372
+ const adPadded = zeroPad(ad, RATE);
373
+ for (let i = 0; i + RATE <= adPadded.length; i += RATE) {
374
+ state.absorb(adPadded.subarray(i, i + RATE));
375
+ }
376
+ const msgLen = data.length;
377
+ const fullBlocksLen = Math.floor(msgLen / RATE) * RATE;
378
+ for (let i = 0; i < fullBlocksLen; i += RATE) {
379
+ state.decInPlace(data.subarray(i, i + RATE));
380
+ }
381
+ if (msgLen > fullBlocksLen) {
382
+ const lastPartial = data.subarray(fullBlocksLen);
383
+ const decrypted = state.decPartial(lastPartial);
384
+ lastPartial.set(decrypted);
385
+ }
386
+ const expectedTag = state.finalize(ad.length, msgLen, tagLen);
387
+ if (!constantTimeEqual(tag, expectedTag)) {
388
+ data.fill(0);
389
+ return false;
390
+ }
391
+ return true;
392
+ }
393
+ export const AEGIS_256_BS_NONCE_SIZE = 32;
394
+ export const AEGIS_256_BS_KEY_SIZE = 32;
395
+ /**
396
+ * Encrypts a message using bitsliced AEGIS-256.
397
+ * Returns a single buffer containing nonce || ciphertext || tag.
398
+ * @param msg - Plaintext message
399
+ * @param ad - Associated data (authenticated but not encrypted)
400
+ * @param key - 32-byte encryption key
401
+ * @param nonce - 32-byte nonce (optional, generates random nonce if not provided)
402
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
403
+ * @returns Concatenated nonce || ciphertext || tag
404
+ */
405
+ export function aegis256BsEncrypt(msg, ad, key, nonce = null, tagLen = 16) {
406
+ const actualNonce = nonce ?? randomBytes(AEGIS_256_BS_NONCE_SIZE);
407
+ const { ciphertext, tag } = aegis256BsEncryptDetached(msg, ad, key, actualNonce, tagLen);
408
+ const result = new Uint8Array(AEGIS_256_BS_NONCE_SIZE + ciphertext.length + tagLen);
409
+ result.set(actualNonce, 0);
410
+ result.set(ciphertext, AEGIS_256_BS_NONCE_SIZE);
411
+ result.set(tag, AEGIS_256_BS_NONCE_SIZE + ciphertext.length);
412
+ return result;
413
+ }
414
+ /**
415
+ * Decrypts a message using bitsliced AEGIS-256.
416
+ * Expects input as nonce || ciphertext || tag.
417
+ * @param sealed - Concatenated nonce || ciphertext || tag
418
+ * @param ad - Associated data (must match what was used during encryption)
419
+ * @param key - 32-byte encryption key
420
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
421
+ * @returns Decrypted plaintext, or null if authentication fails
422
+ */
423
+ export function aegis256BsDecrypt(sealed, ad, key, tagLen = 16) {
424
+ const nonceSize = AEGIS_256_BS_NONCE_SIZE;
425
+ if (sealed.length < nonceSize + tagLen) {
426
+ return null;
427
+ }
428
+ const nonce = sealed.subarray(0, nonceSize);
429
+ const ct = sealed.subarray(nonceSize, sealed.length - tagLen);
430
+ const tag = sealed.subarray(sealed.length - tagLen);
431
+ return aegis256BsDecryptDetached(ct, tag, ad, key, nonce);
432
+ }
433
+ /**
434
+ * Computes a MAC (Message Authentication Code) using bitsliced AEGIS-256.
435
+ * @param data - Data to authenticate
436
+ * @param key - 32-byte key
437
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
438
+ * @param tagLen - Tag length: 16 or 32 bytes (default: 16)
439
+ * @returns Authentication tag
440
+ */
441
+ export function aegis256BsMac(data, key, nonce = null, tagLen = 16) {
442
+ const state = new Aegis256BsState();
443
+ state.init(key, nonce ?? new Uint8Array(32));
444
+ const dataPadded = zeroPad(data, RATE);
445
+ for (let i = 0; i + RATE <= dataPadded.length; i += RATE) {
446
+ state.absorb(dataPadded.subarray(i, i + RATE));
447
+ }
448
+ return state.finalize(data.length, tagLen, tagLen);
449
+ }
450
+ /**
451
+ * Verifies a MAC computed using bitsliced AEGIS-256.
452
+ * @param data - Data to verify
453
+ * @param tag - Expected authentication tag (16 or 32 bytes)
454
+ * @param key - 32-byte key
455
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
456
+ * @returns True if the tag is valid, false otherwise
457
+ */
458
+ export function aegis256BsMacVerify(data, tag, key, nonce = null) {
459
+ const tagLen = tag.length;
460
+ const expectedTag = aegis256BsMac(data, key, nonce, tagLen);
461
+ return constantTimeEqual(tag, expectedTag);
462
+ }
463
+ /**
464
+ * Generates a random 32-byte key for bitsliced AEGIS-256.
465
+ * @returns 32-byte encryption key
466
+ */
467
+ export function aegis256BsCreateKey() {
468
+ return randomBytes(AEGIS_256_BS_KEY_SIZE);
469
+ }
470
+ /**
471
+ * Generates a random 32-byte nonce for bitsliced AEGIS-256.
472
+ * @returns 32-byte nonce
473
+ */
474
+ export function aegis256BsCreateNonce() {
475
+ return randomBytes(AEGIS_256_BS_NONCE_SIZE);
476
+ }
477
+ //# sourceMappingURL=aegis256-bs.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"aegis256-bs.js","sourceRoot":"","sources":["../src/aegis256-bs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAGN,QAAQ,EACR,cAAc,EACd,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,eAAe,EACf,IAAI,EACJ,MAAM,EACN,OAAO,GACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,IAAI,GAAG,EAAE,CAAC;AAEhB,MAAM,EAAE,GAAa,IAAI,WAAW,CAAC;IACpC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC9C,CAAC,CAAC;AACH,MAAM,EAAE,GAAa,IAAI,WAAW,CAAC;IACpC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC9C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,eAAe;IAK3B;QACC,IAAI,CAAC,EAAE,GAAG,eAAe,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,eAAe,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACK,UAAU;QACjB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,CAAC;QAEZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACzB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACxE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACxE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACxE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,CAAW;QAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QACvD,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QACvD,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QACvD,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,CAAW;QACzB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,GAAe,EAAE,KAAiB;QACtC,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAE9B,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACzC,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1C,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3C,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5B,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,EAAc;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,EAAc,EAAE,GAAe;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QACnB,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC,CAAC;gBACH,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC;oBAC3C,CAAC,CAAC;QACJ,CAAC;QAED,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEtB,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAE5B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAc;QACjB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,EAAc,EAAE,GAAe;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,GAAG,CAAC,CAAC,CAAC;gBACL,CAAC,GAAG,CAAC,CAAC,CAAE;oBACP,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC;oBAC3C,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAc;QACjB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,KAAiB;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,KAAiB;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,EAAc;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,GAAG,CAAC,CAAC,CAAC;gBACL,CAAC,GAAG,CAAC,CAAC,CAAE;oBACP,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;oBAClB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC;oBAC3C,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEvB,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAEtD,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACvB,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEzB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAErB,OAAO,EAAE,CAAC;IACX,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,KAAa,EAAE,MAAc,EAAE,SAAkB,EAAE;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACrD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAEtD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,QAAQ,CAAC,CAAC,CAAC;oBACV,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;wBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;wBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;wBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;wBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE;wBAClB,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;wBACpB,CAAC,CAAC;YACJ,CAAC;YACD,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5B,OAAO,GAAG,CAAC;QACZ,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/B,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,SAAS,CAAC,CAAC,CAAC;oBACX,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,SAAS,CAAC,CAAC,CAAC;oBACX,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACvE,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YAC7C,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9C,OAAO,GAAG,CAAC;QACZ,CAAC;IACF,CAAC;CACD;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACxC,GAAe,EACf,EAAc,EACd,GAAe,EACf,KAAiB,EACjB,SAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAExD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE1D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACxC,EAAc,EACd,GAAe,EACf,EAAc,EACd,GAAe,EACf,KAAiB;IAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiB,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElE,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAC/C,IAAgB,EAChB,EAAc,EACd,GAAe,EACf,KAAiB,EACjB,SAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9C,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAC/C,IAAgB,EAChB,GAAe,EACf,EAAc,EACd,GAAe,EACf,KAAiB;IAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiB,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9C,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAChD,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAE9D,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAChC,GAAe,EACf,EAAc,EACd,GAAe,EACf,QAA2B,IAAI,EAC/B,SAAkB,EAAE;IAEpB,MAAM,WAAW,GAAG,KAAK,IAAI,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,yBAAyB,CACpD,GAAG,EACH,EAAE,EACF,GAAG,EACH,WAAW,EACX,MAAM,CACN,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,UAAU,CAC5B,uBAAuB,GAAG,UAAU,CAAC,MAAM,GAAG,MAAM,CACpD,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAE7D,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAChC,MAAkB,EAClB,EAAc,EACd,GAAe,EACf,SAAkB,EAAE;IAEpB,MAAM,SAAS,GAAG,uBAAuB,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IACpD,OAAO,yBAAyB,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC5B,IAAgB,EAChB,GAAe,EACf,QAA2B,IAAI,EAC/B,SAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1D,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAClC,IAAgB,EAChB,GAAe,EACf,GAAe,EACf,QAA2B,IAAI;IAE/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiB,CAAC;IACrC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IAClC,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACpC,OAAO,WAAW,CAAC,uBAAuB,CAAC,CAAC;AAC7C,CAAC"}
@@ -56,6 +56,16 @@ export declare class Aegis256State {
56
56
  * @returns 16-byte plaintext block
57
57
  */
58
58
  dec(ci: Uint8Array): Uint8Array;
59
+ /**
60
+ * Encrypts a 16-byte plaintext block in-place.
61
+ * @param block - 16-byte buffer (plaintext in, ciphertext out)
62
+ */
63
+ encInPlace(block: Uint8Array): void;
64
+ /**
65
+ * Decrypts a 16-byte ciphertext block in-place.
66
+ * @param block - 16-byte buffer (ciphertext in, plaintext out)
67
+ */
68
+ decInPlace(block: Uint8Array): void;
59
69
  /**
60
70
  * Decrypts a partial (final) ciphertext block smaller than 16 bytes.
61
71
  * @param cn - Partial ciphertext block (1-15 bytes)
@@ -72,20 +82,20 @@ export declare class Aegis256State {
72
82
  finalize(adLenBits: bigint, msgLenBits: bigint, tagLen?: 16 | 32): Uint8Array;
73
83
  }
74
84
  /**
75
- * Encrypts a message using AEGIS-256.
85
+ * Encrypts a message using AEGIS-256 (detached mode).
76
86
  * @param msg - Plaintext message
77
87
  * @param ad - Associated data (authenticated but not encrypted)
78
88
  * @param key - 32-byte encryption key
79
89
  * @param nonce - 32-byte nonce (must be unique per message with the same key)
80
90
  * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
81
- * @returns Object containing ciphertext and authentication tag
91
+ * @returns Object containing ciphertext and authentication tag separately
82
92
  */
83
- export declare function aegis256Encrypt(msg: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, tagLen?: 16 | 32): {
93
+ export declare function aegis256EncryptDetached(msg: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, tagLen?: 16 | 32): {
84
94
  ciphertext: Uint8Array;
85
95
  tag: Uint8Array;
86
96
  };
87
97
  /**
88
- * Decrypts a message using AEGIS-256.
98
+ * Decrypts a message using AEGIS-256 (detached mode).
89
99
  * @param ct - Ciphertext
90
100
  * @param tag - Authentication tag (16 or 32 bytes)
91
101
  * @param ad - Associated data (must match what was used during encryption)
@@ -93,7 +103,54 @@ export declare function aegis256Encrypt(msg: Uint8Array, ad: Uint8Array, key: Ui
93
103
  * @param nonce - 32-byte nonce (must match what was used during encryption)
94
104
  * @returns Decrypted plaintext, or null if authentication fails
95
105
  */
96
- export declare function aegis256Decrypt(ct: Uint8Array, tag: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array): Uint8Array | null;
106
+ export declare function aegis256DecryptDetached(ct: Uint8Array, tag: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array): Uint8Array | null;
107
+ /**
108
+ * Encrypts a message in-place using AEGIS-256 (detached mode).
109
+ * The input buffer is modified to contain the ciphertext.
110
+ * @param data - Buffer containing plaintext (will be overwritten with ciphertext)
111
+ * @param ad - Associated data (authenticated but not encrypted)
112
+ * @param key - 32-byte encryption key
113
+ * @param nonce - 32-byte nonce (must be unique per message with the same key)
114
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
115
+ * @returns Authentication tag
116
+ */
117
+ export declare function aegis256EncryptDetachedInPlace(data: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, tagLen?: 16 | 32): Uint8Array;
118
+ /**
119
+ * Decrypts a message in-place using AEGIS-256 (detached mode).
120
+ * The input buffer is modified to contain the plaintext (or zeroed on failure).
121
+ * @param data - Buffer containing ciphertext (will be overwritten with plaintext)
122
+ * @param tag - Authentication tag (16 or 32 bytes)
123
+ * @param ad - Associated data (must match what was used during encryption)
124
+ * @param key - 32-byte encryption key
125
+ * @param nonce - 32-byte nonce (must match what was used during encryption)
126
+ * @returns True if authentication succeeds, false otherwise
127
+ */
128
+ export declare function aegis256DecryptDetachedInPlace(data: Uint8Array, tag: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array): boolean;
129
+ /** Nonce size for AEGIS-256 in bytes. */
130
+ export declare const AEGIS_256_NONCE_SIZE = 32;
131
+ /** Key size for AEGIS-256 in bytes. */
132
+ export declare const AEGIS_256_KEY_SIZE = 32;
133
+ /**
134
+ * Encrypts a message using AEGIS-256.
135
+ * Returns a single buffer containing nonce || ciphertext || tag.
136
+ * @param msg - Plaintext message
137
+ * @param ad - Associated data (authenticated but not encrypted)
138
+ * @param key - 32-byte encryption key
139
+ * @param nonce - 32-byte nonce (optional, generates random nonce if not provided)
140
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
141
+ * @returns Concatenated nonce || ciphertext || tag
142
+ */
143
+ export declare function aegis256Encrypt(msg: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null, tagLen?: 16 | 32): Uint8Array;
144
+ /**
145
+ * Decrypts a message using AEGIS-256.
146
+ * Expects input as nonce || ciphertext || tag.
147
+ * @param sealed - Concatenated nonce || ciphertext || tag
148
+ * @param ad - Associated data (must match what was used during encryption)
149
+ * @param key - 32-byte encryption key
150
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
151
+ * @returns Decrypted plaintext, or null if authentication fails
152
+ */
153
+ export declare function aegis256Decrypt(sealed: Uint8Array, ad: Uint8Array, key: Uint8Array, tagLen?: 16 | 32): Uint8Array | null;
97
154
  /**
98
155
  * Computes a MAC (Message Authentication Code) using AEGIS-256.
99
156
  * @param data - Data to authenticate
@@ -112,4 +169,16 @@ export declare function aegis256Mac(data: Uint8Array, key: Uint8Array, nonce?: U
112
169
  * @returns True if the tag is valid, false otherwise
113
170
  */
114
171
  export declare function aegis256MacVerify(data: Uint8Array, tag: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null): boolean;
172
+ /**
173
+ * Generates a random 32-byte key for AEGIS-256.
174
+ * @returns 32-byte encryption key
175
+ * @throws Error if no cryptographic random source is available
176
+ */
177
+ export declare function aegis256CreateKey(): Uint8Array;
178
+ /**
179
+ * Generates a random 32-byte nonce for AEGIS-256.
180
+ * @returns 32-byte nonce
181
+ * @throws Error if no cryptographic random source is available
182
+ */
183
+ export declare function aegis256CreateNonce(): Uint8Array;
115
184
  //# sourceMappingURL=aegis256.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"aegis256.d.ts","sourceRoot":"","sources":["../src/aegis256.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,CAAC,CAAa;IACtB,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,IAAI,CAAa;;IAezB,IAAI,CAAC,IAAI,UAAU,EAAE,CAEpB;IAED,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,EAOzB;IAED;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IA0B9C;;;OAGG;IACH,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI;IAmBlC;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAI5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAc5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAM/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAa5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAM/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAoBtC;;;;;;OAMG;IACH,QAAQ,CACP,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU;CAiCb;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC9B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CAuB7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC9B,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,GACf,UAAU,GAAG,IAAI,CAkCnB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAC1B,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU,CAUZ;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,GAC7B,OAAO,CAIT"}
1
+ {"version":3,"file":"aegis256.d.ts","sourceRoot":"","sources":["../src/aegis256.ts"],"names":[],"mappings":"AAYA;;;GAGG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,CAAC,CAAa;IACtB,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,IAAI,CAAa;;IAezB,IAAI,CAAC,IAAI,UAAU,EAAE,CAEpB;IAED,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,EAOzB;IAED;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IA0B9C;;;OAGG;IACH,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI;IAmBlC;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAI5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAc5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAM/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAa5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAM/B;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAInC;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAInC;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAoBtC;;;;;;OAMG;IACH,QAAQ,CACP,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU;CAiCb;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CAuB7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACtC,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,GACf,UAAU,GAAG,IAAI,CAkCnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC7C,IAAI,EAAE,UAAU,EAChB,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU,CAwBZ;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC7C,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,GACf,OAAO,CAmCT;AAED,yCAAyC;AACzC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,uCAAuC;AACvC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC9B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU,CAuCZ;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,UAAU,EAClB,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU,GAAG,IAAI,CASnB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAC1B,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU,CAUZ;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,GAC7B,OAAO,CAIT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CAE9C;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,UAAU,CAEhD"}