edhoc 1.0.5 → 1.1.0

package/README.md

@@ -0,0 +1,170 @@
+# Node EDHOC
+
+A TypeScript Node.js library implemented as a native addon, built on top of the C library [`libedhoc`](https://github.com/kamil-kielbasa/libedhoc/). It provides an efficient and lightweight way to use the Ephemeral Diffie-Hellman Over COSE (EDHOC) protocol, as specified in [RFC 9528](https://datatracker.ietf.org/doc/rfc9528/).
+
+## Overview
+
+EDHOC is designed for lightweight communication and is particularly suitable for protocols like CoAP and OSCORE, but can work independently of the application and transport layers, ensuring minimal overhead while maintaining strong security guarantees. The library provides a default software implementation for X.509 credentials, with support for additional formats such as C509, CWT, and CCS coming soon. It also includes a software-based cryptographic implementation utilizing [`@noble/curves`](https://www.npmjs.com/package/@noble/curves/v/1.0.0). Additionally, it exposes credential and cryptographic API interfaces to allow for custom implementations, such as PKCS#11-based solutions.
+
+## Features
+
+- Full implementation of the EDHOC protocol (RFC 9528)
+- TypeScript support for type safety and better developer experience
+- Based on [`libedhoc`](https://github.com/kamil-kielbasa/libedhoc), a proven C implementation
+
+## Installation
+
+Install the package via npm:
+
+```bash
+npm install node-edhoc
+```
+
+## Usage Examples
+
+### Basic Handshake
+
+The simplest EDHOC handshake using pre-shared keys (Method 0):
+
+```typescript
+import { EDHOC, EdhocMethod, EdhocSuite } from 'node-edhoc';
+
+// ...
+
+const initiator = new EDHOC(10, [ EdhocMethod.Method0 ], [ EdhocSuite.Suite0 ], credentialsManager, cryptoManager);
+const responder = new EDHOC(20, [ EdhocMethod.Method0 ], [ EdhocSuite.Suite0 ], credentialsManager, cryptoManager);
+
+// Message 1: Initiator → Responder
+const message1 = await initiator.composeMessage1();
+await responder.processMessage1(message1);
+
+// Message 2: Responder → Initiator
+const message2 = await responder.composeMessage2();
+await initiator.processMessage2(message2);
+
+// Message 3: Initiator → Responder
+const message3 = await initiator.composeMessage3();
+await responder.processMessage3(message3);
+
+// ...
+
+```
+
+### Using External Authorization Data (EAD)
+
+You can include additional authorization data in EDHOC messages:
+
+```typescript
+// initiator.js
+const ead_1 = [{ 
+  label: 1000, 
+  value: Buffer.from('External Data') 
+}];
+
+const message1 = await initiator.composeMessage1(ead_1);
+
+// responder.js
+const receivedEAD = await responder.processMessage1(message1);
+```
+
+### Certificate-Based Authentication
+
+Using X.509 certificates for authentication (Method 1):
+
+```typescript
+import { 
+  EDHOC, 
+  X509CertificateCredentialManager, 
+  DefaultEdhocCryptoManager 
+} from 'node-edhoc';
+
+// Setup credential managers
+const initiatorCreds = new X509CertificateCredentialManager(
+  [initiatorCert],
+  initiatorKeyID
+);
+initiatorCreds.addTrustedCA(trustedCA);
+
+// Setup crypto managers
+const initiatorCrypto = new DefaultEdhocCryptoManager();
+
+// Initialize EDHOC with certificate-based auth
+const initiator = new EDHOC(
+  10, 
+  [EdhocMethod.Method1], 
+  [EdhocSuite.Suite2],
+  initiatorCreds,
+  initiatorCrypto
+);
+```
+
+### Exporting OSCORE Context
+
+After a successful handshake, you can export the OSCORE security context:
+
+```typescript
+const initiatorContext = await initiator.exportOSCORE();
+const responderContext = await responder.exportOSCORE();
+
+console.log('Master Secret:', initiatorContext.masterSecret);
+console.log('Master Salt:', initiatorContext.masterSalt);
+console.log('Sender ID:', initiatorContext.senderId);
+console.log('Recipient ID:', initiatorContext.recipientId);
+```
+
+### Key Update
+
+Perform a key update for an existing OSCORE context:
+
+```typescript
+const keyUpdateContext = Buffer.from('new-entropy-data');
+
+// Update keys for both parties
+await initiator.keyUpdate(keyUpdateContext);
+await responder.keyUpdate(keyUpdateContext);
+
+// Export new OSCORE context
+const newContext = await initiator.exportOSCORE();
+```
+
+### Custom Key Export
+
+Export application-specific keys:
+
+```typescript
+// Export a 32-byte key with label 40001
+const key = await initiator.exportKey(40001, 32);
+```
+
+For more detailed examples and API documentation, please refer to our [API Documentation](#).
+
+## Documentation
+
+For detailed documentation, refer to:
+
+- [EDHOC Specification (RFC 9528)](https://datatracker.ietf.org/doc/rfc9528/)
+- [API Documentation](#) *(TODO: Link to generated API docs if available)*
+
+## Contributing
+
+Contributions are welcome! To contribute:
+
+1. Fork the repository and create a new branch.
+2. Implement your feature or bugfix.
+3. Write tests if applicable.
+4. Open a pull request.
+
+Please ensure your code follows the existing style and structure of the project.
+
+## License
+
+This project is licensed under the [MIT License](LICENSE).
+
+## Related Projects
+
+- [libedhoc](https://github.com/kamil-kielbasa/libedhoc/) - A C implementation of the Ephemeral Diffie-Hellman Over COSE
+
+## Acknowledgments
+
+This implementation is based on the EDHOC specification as defined in RFC 9528. Special thanks to the developers of [`libedhoc`](https://github.com/kamil-kielbasa/libedhoc/) for their foundational work on EDHOC in C.
+

package/binding.gyp

@@ -7,15 +7,16 @@
       "target_name": "bindings",
       'defines': [
         'NAPI_CPP_EXCEPTIONS=1',
-        'EDHOC_KID_LEN=4',
-        'EDHOC_MAX_CSUITES_LEN=9',
-        'EDHOC_MAX_CID_LEN=7',
-        'EDHOC_MAX_ECC_KEY_LEN=56',
-        'EDHOC_MAX_MAC_LEN=64',
-        'EDHOC_MAX_NR_OF_EAD_TOKENS=10',
-        'EDHOC_MAX_NR_OF_CERTS_IN_X509_CHAIN=5',
-        'EDHOC_CRED_KEY_ID_LEN=8',
-        'EDHOC_CRED_X509_HASH_ALG_LEN=1',
+        'CONFIG_LIBEDHOC_ENABLE=1',
+        'CONFIG_LIBEDHOC_MAX_NR_OF_CIPHER_SUITES=9',
+        'CONFIG_LIBEDHOC_MAX_LEN_OF_CONN_ID=7',
+        'CONFIG_LIBEDHOC_MAX_LEN_OF_ECC_KEY=56',
+        'CONFIG_LIBEDHOC_MAX_LEN_OF_MAC=64',
+        'CONFIG_LIBEDHOC_MAX_NR_OF_EAD_TOKENS=10',
+        'CONFIG_LIBEDHOC_MAX_LEN_OF_CRED_KEY_ID=1',
+        'CONFIG_LIBEDHOC_MAX_NR_OF_CERTS_IN_X509_CHAIN=5',
+        'CONFIG_LIBEDHOC_MAX_LEN_OF_HASH_ALG=1',
+        'CONFIG_LIBEDHOC_KEY_ID_LEN=4',
         'ZCBOR_CANONICAL=1'
       ],
       "sources": [ 
@@ -45,11 +46,12 @@
       'conditions': [
         ['OS=="win"', {
           'defines': [
-            '_Static_assert=static_assert'
+            '_Static_assert=static_assert',
+            '__attribute__(x)='
           ],
           'msvs_settings': {
             'VCCLCompilerTool': {
-              'AdditionalOptions': [ '-std:c++20', ],
+              'AdditionalOptions': [ '-std:c++20', "/D__attribute__(x)="],
               'ExceptionHandling': 1
             }
           }

package/dist/crypto.d.ts

@@ -4,7 +4,7 @@ export declare class DefaultEdhocCryptoManager implements EdhocCryptoManager {
     private keyIdentifier;
     constructor();
     addKey(keyID: Buffer, key: Buffer): void;
-    generateKey(edhoc: EDHOC, keyType: EdhocKeyType, key: Buffer): Promise<Buffer>;
+    importKey(edhoc: EDHOC, keyType: EdhocKeyType, key: Buffer): Promise<Buffer>;
     destroyKey(edhoc: EDHOC, keyID: Buffer): boolean;
     makeKeyPair(edhoc: EDHOC, keyID: Buffer, privateKeySize: number, publicKeySize: number): {
         privateKey: Buffer;
@@ -12,11 +12,18 @@ export declare class DefaultEdhocCryptoManager implements EdhocCryptoManager {
     };
     keyAgreement(edhoc: EDHOC, keyID: Buffer, publicKey: Buffer, privateKeySize: number): Buffer;
     sign(edhoc: EDHOC, keyID: Buffer, input: Buffer, signatureSize: number): Buffer;
-    verify(edhoc: EDHOC, keyID: Buffer, input: Buffer, signature: Buffer): boolean;
+    verify(edhoc: EDHOC, keyID: Buffer, input: Buffer, signature: Buffer): Promise<boolean>;
     extract(edhoc: EDHOC, keyID: Buffer, salt: Buffer, keySize: number): Buffer;
     expand(edhoc: EDHOC, keyID: Buffer, info: Buffer, keySize: number): Buffer;
     encrypt(edhoc: EDHOC, keyID: Buffer, nonce: Buffer, aad: Buffer, plaintext: Buffer, size: number): Buffer;
     decrypt(edhoc: EDHOC, keyID: Buffer, nonce: Buffer, aad: Buffer, ciphertext: Buffer, size: number): Buffer;
     hash(edhoc: EDHOC, data: Buffer, hashSize: number): Promise<Buffer>;
+    private getKey;
+    private formatToBeSigned;
+    private formatPublicKey;
+    private getCurveForSignature;
+    private getCurveForKeyAgreement;
+    private getTagLength;
+    private getAlgorithm;
 }
 //# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../lib/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAc,MAAM,SAAS,CAAC;AAqB9E,qBAAa,yBAA0B,YAAW,kBAAkB;IAEhE,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,aAAa,CAAgB;;IAM9B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;IAKlC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM;IAqClE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IAStC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;;;;IAoBtF,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;IAiBnF,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;IA4BtE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAwBpE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAQlE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IASjE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAqBhG,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAqB3F,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAG1D"}
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../lib/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAc,MAAM,SAAS,CAAC;AAoB9E,qBAAa,yBAA0B,YAAW,kBAAkB;IAEhE,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,aAAa,CAAgB;;IAM9B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;IAKlC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM;IAsBhE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IAStC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;;;;IActF,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;IAQnF,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;IAiBhE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa7F,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAKlE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAMjE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAmBhG,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAiB3F,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAIvD,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,uBAAuB;IAY/B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;CAiBvB"}

package/dist/crypto.js

@@ -17,25 +17,15 @@ class DefaultEdhocCryptoManager {
         const kid = keyID.toString('hex');
         this.keys[kid] = key;
     }
-    async generateKey(edhoc, keyType, key) {
-        // Key Identifier
+    async importKey(edhoc, keyType, key) {
         const keyBuffer = Buffer.alloc(4);
         keyBuffer.writeInt32LE(this.keyIdentifier++);
         const keyID = keyBuffer.toString('hex');
-        // Key Exchange Curve
-        const curveKE = [edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5].includes(edhoc.selectedSuite) ? p256_1.p256 :
-            [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4, edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? ed25519_1.x25519 : null;
-        // Signature Curve
-        const curveSIG = [edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5, edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? p256_1.p256 :
-            [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4].includes(edhoc.selectedSuite) ? ed25519_1.ed25519 : null;
-        if (null == curveKE || null == curveSIG) {
-            throw new Error('Unsupported suite');
-        }
+        const curveKE = this.getCurveForKeyAgreement(edhoc.selectedSuite);
+        const curveSIG = this.getCurveForSignature(edhoc.selectedSuite);
         switch (keyType) {
-            case edhoc_1.EdhocKeyType.MakeKeyPair:
-                this.keys[keyID] = curveKE.utils.randomPrivateKey();
-                break;
             case edhoc_1.EdhocKeyType.KeyAgreement:
+            case edhoc_1.EdhocKeyType.MakeKeyPair:
                 this.keys[keyID] = key.byteLength > 0 ? Buffer.from(key) : curveKE.utils.randomPrivateKey();
                 break;
             case edhoc_1.EdhocKeyType.Signature:
@@ -55,16 +45,12 @@ class DefaultEdhocCryptoManager {
         return true;
     }
     makeKeyPair(edhoc, keyID, privateKeySize, publicKeySize) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
+        const key = this.getKey(keyID);
         try {
-            const curveKE = [edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5].includes(edhoc.selectedSuite) ? p256_1.p256 :
-                [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4, edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? ed25519_1.x25519 : null;
+            const curveKE = this.getCurveForKeyAgreement(edhoc.selectedSuite);
             return {
-                privateKey: Buffer.from(this.keys[kid]),
-                publicKey: Buffer.from(curveKE.getPublicKey(this.keys[kid])).subarray(curveKE === p256_1.p256 ? 1 : 0)
+                privateKey: Buffer.from(key),
+                publicKey: Buffer.from(curveKE.getPublicKey(key)).subarray(curveKE === p256_1.p256 ? 1 : 0)
             };
         }
         catch (error) {
@@ -72,29 +58,17 @@ class DefaultEdhocCryptoManager {
         }
     }
     keyAgreement(edhoc, keyID, publicKey, privateKeySize) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
-        // Key Exchange Curve
-        const curveKE = [edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5].includes(edhoc.selectedSuite) ? p256_1.p256 :
-            [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4, edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? ed25519_1.x25519 : null;
-        const publicKeyBuffer = (curveKE === p256_1.p256) ? Buffer.concat([Buffer.from([publicKey.byteLength == 64 ? 0x04 : 0x02]), publicKey]) : publicKey;
-        const sharedSecrect = Buffer.from(curveKE.getSharedSecret(this.keys[kid], new Uint8Array(publicKeyBuffer)));
+        const key = this.getKey(keyID);
+        const curveKE = this.getCurveForKeyAgreement(edhoc.selectedSuite);
+        const publicKeyBuffer = this.formatPublicKey(curveKE, publicKey);
+        const sharedSecrect = Buffer.from(curveKE.getSharedSecret(key, new Uint8Array(publicKeyBuffer)));
         return sharedSecrect.subarray(curveKE === p256_1.p256 ? 1 : 0);
     }
     sign(edhoc, keyID, input, signatureSize) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
-        // Signature Curve
-        const curveSIG = [edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5, edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? p256_1.p256 :
-            [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4].includes(edhoc.selectedSuite) ? ed25519_1.ed25519 : null;
-        if (null === curveSIG) {
-            throw new Error('Unsupported suite');
-        }
-        const signature = curveSIG.sign((0, sha256_1.sha256)(input), new Uint8Array(this.keys[kid]));
+        const key = this.getKey(keyID);
+        const curveSIG = this.getCurveForSignature(edhoc.selectedSuite);
+        const payload = this.formatToBeSigned(curveSIG, input);
+        const signature = curveSIG.sign(payload, new Uint8Array(key));
         if (signature instanceof Uint8Array) {
             return Buffer.from(signature);
         }
@@ -105,73 +79,127 @@ class DefaultEdhocCryptoManager {
             throw new Error('Unsupported signature type');
         }
     }
-    verify(edhoc, keyID, input, signature) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
-        // Signature Curve
-        const curveSIG = [edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5, edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? p256_1.p256 :
-            [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4].includes(edhoc.selectedSuite) ? ed25519_1.ed25519 : null;
-        if (null === curveSIG) {
-            throw new Error('Unsupported suite');
-        }
-        const publicKey = this.keys[kid];
-        const publicKeyBuffer = (curveSIG === p256_1.p256) ? Buffer.concat([Buffer.from([publicKey.byteLength == 64 ? 0x04 : 0x02]), publicKey]) : publicKey;
-        if (!curveSIG.verify(new Uint8Array(signature), (0, sha256_1.sha256)(input), new Uint8Array(publicKeyBuffer))) {
+    async verify(edhoc, keyID, input, signature) {
+        const key = this.getKey(keyID);
+        const curveSIG = this.getCurveForSignature(edhoc.selectedSuite);
+        const publicKeyBuffer = this.formatPublicKey(curveSIG, key);
+        const payload = this.formatToBeSigned(curveSIG, input);
+        if (!curveSIG.verify(new Uint8Array(signature), payload, new Uint8Array(publicKeyBuffer))) {
             throw new Error('Signature not verified');
         }
         return true;
     }
     extract(edhoc, keyID, salt, keySize) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
-        return Buffer.from((0, hkdf_1.extract)(sha256_1.sha256, new Uint8Array(this.keys[kid]), new Uint8Array(salt)));
+        const key = this.getKey(keyID);
+        return Buffer.from((0, hkdf_1.extract)(sha256_1.sha256, new Uint8Array(key), new Uint8Array(salt)));
     }
     expand(edhoc, keyID, info, keySize) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
-        const expanded = Buffer.from((0, hkdf_1.expand)(sha256_1.sha256, new Uint8Array(this.keys[kid]), new Uint8Array(info), keySize));
+        const key = this.getKey(keyID);
+        const expanded = Buffer.from((0, hkdf_1.expand)(sha256_1.sha256, new Uint8Array(key), new Uint8Array(info), keySize));
         return expanded;
     }
     encrypt(edhoc, keyID, nonce, aad, plaintext, size) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
-        const tagLength = [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite2].includes(edhoc.selectedSuite) ? 8 : 16;
-        const algorithm = [edhoc_1.EdhocSuite.Suite4, edhoc_1.EdhocSuite.Suite5].includes(edhoc.selectedSuite) ? 'chacha20-poly1305' :
-            [edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? 'aes-128-gcm' : 'aes-128-ccm';
-        const cipher = (0, crypto_1.createCipheriv)(algorithm, this.keys[kid], nonce, { authTagLength: tagLength });
+        const key = this.getKey(keyID);
+        const algorithm = this.getAlgorithm(edhoc.selectedSuite);
+        const options = {
+            authTagLength: this.getTagLength(edhoc.selectedSuite)
+        };
+        const cipher = (0, crypto_1.createCipheriv)(algorithm, key, nonce, options);
         cipher.setAAD(aad, { plaintextLength: Buffer.byteLength(plaintext) });
+        const update = Buffer.byteLength(plaintext) === 0 ? Buffer.alloc(0) : plaintext;
         const encrypted = Buffer.concat([
-            cipher.update(plaintext),
+            cipher.update(update),
             cipher.final(),
             cipher.getAuthTag()
         ]);
         return encrypted;
     }
     decrypt(edhoc, keyID, nonce, aad, ciphertext, size) {
-        const kid = keyID.toString('hex');
-        if (kid in this.keys === false) {
-            throw new Error(`Key '${kid}' not found`);
-        }
-        const tagLength = [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite2].includes(edhoc.selectedSuite) ? 8 : 16;
-        const algorithm = [edhoc_1.EdhocSuite.Suite4, edhoc_1.EdhocSuite.Suite5].includes(edhoc.selectedSuite) ? 'chacha20-poly1305' :
-            [edhoc_1.EdhocSuite.Suite6].includes(edhoc.selectedSuite) ? 'aes-128-gcm' : 'aes-128-ccm';
-        const decipher = (0, crypto_1.createDecipheriv)(algorithm, this.keys[kid], nonce, { authTagLength: tagLength });
+        const key = this.getKey(keyID);
+        const tagLength = this.getTagLength(edhoc.selectedSuite);
+        const algorithm = this.getAlgorithm(edhoc.selectedSuite);
+        const options = { authTagLength: tagLength };
+        const decipher = (0, crypto_1.createDecipheriv)(algorithm, key, nonce, options);
         decipher.setAuthTag(ciphertext.subarray(ciphertext.length - tagLength));
         decipher.setAAD(aad, { plaintextLength: ciphertext.length - tagLength });
-        let decrypted = decipher.update(ciphertext.subarray(0, ciphertext.length - tagLength));
+        const decrypted = decipher.update(ciphertext.subarray(0, ciphertext.length - tagLength));
         decipher.final();
         return decrypted;
     }
     async hash(edhoc, data, hashSize) {
         return Buffer.from((0, sha256_1.sha256)(data));
     }
+    getKey(keyID) {
+        const kid = keyID.toString('hex');
+        if (kid in this.keys === false) {
+            throw new Error(`Key '${kid}' not found`);
+        }
+        return this.keys[kid];
+    }
+    formatToBeSigned(curve, payload) {
+        if (curve === p256_1.p256) {
+            return Buffer.from((0, sha256_1.sha256)(payload));
+        }
+        else if (curve === ed25519_1.ed25519) {
+            return payload;
+        }
+        else {
+            throw new Error(`Unsupported curve ${curve}`);
+        }
+    }
+    formatPublicKey(curve, key) {
+        if (curve === p256_1.p256) {
+            const prefix = key.byteLength === 64 ? 0x04 : (key[key.length - 1] & 1) ? 0x03 : 0x02;
+            return Buffer.concat([Buffer.from([prefix]), key]);
+        }
+        else if (curve === ed25519_1.ed25519 || curve === ed25519_1.x25519) {
+            return key;
+        }
+        else {
+            throw new Error(`Unsupported curve ${curve}`);
+        }
+    }
+    getCurveForSignature(suite) {
+        if ([edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5, edhoc_1.EdhocSuite.Suite6].includes(suite)) {
+            return p256_1.p256;
+        }
+        else if ([edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4].includes(suite)) {
+            return ed25519_1.ed25519;
+        }
+        else {
+            throw new Error(`Unsupported EDHOC suite ${suite} for signature.`);
+        }
+    }
+    getCurveForKeyAgreement(suite) {
+        if ([edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3, edhoc_1.EdhocSuite.Suite5].includes(suite)) {
+            return p256_1.p256;
+        }
+        else if ([edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite4, edhoc_1.EdhocSuite.Suite6].includes(suite)) {
+            return ed25519_1.x25519;
+        }
+        else {
+            throw new Error(`Unsupported EDHOC suite ${suite} for key agreement.`);
+        }
+    }
+    getTagLength(suite) {
+        return [edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite2].includes(suite) ? 8 : 16;
+    }
+    getAlgorithm(suite) {
+        if ([edhoc_1.EdhocSuite.Suite4, edhoc_1.EdhocSuite.Suite5, edhoc_1.EdhocSuite.Suite25].includes(suite)) {
+            return 'chacha20-poly1305';
+        }
+        else if ([edhoc_1.EdhocSuite.Suite6].includes(suite)) {
+            return 'aes-128-gcm';
+        }
+        else if ([edhoc_1.EdhocSuite.Suite24].includes(suite)) {
+            return 'aes-256-gcm';
+        }
+        else if ([edhoc_1.EdhocSuite.Suite0, edhoc_1.EdhocSuite.Suite1, edhoc_1.EdhocSuite.Suite2, edhoc_1.EdhocSuite.Suite3].includes(suite)) {
+            return 'aes-128-ccm';
+        }
+        else {
+            throw new Error(`Unsupported EDHOC suite ${suite} for encryption.`);
+        }
+    }
 }
 exports.DefaultEdhocCryptoManager = DefaultEdhocCryptoManager;

package/dist/edhoc.d.ts

@@ -20,7 +20,7 @@ export interface EdhocCredentials {
 export interface EdhocCredentialsKID extends EdhocCredentials {
     format: EdhocCredentialsFormat.kid;
     kid: {
-        kid: number;
+        kid: number | Buffer;
         credentials?: Buffer;
         isCBOR?: boolean;
     };
@@ -68,7 +68,7 @@ export interface EdhocCredentialManager {
      * @param credentials The credentials to verify.
      * @return A promise that resolves to the verified EdhocCredentials or throws an error if not successful.
      */
-    verify(edhoc: EDHOC, credentials: EdhocCredentials): Promise<EdhocCredentials> | EdhocCredentials | never;
+    verify(edhoc: EDHOC, credentials: EdhocCredentials, callback: (error: Error | null, credentials: EdhocCredentials) => void): void;
 }
 /**
  * Enumerates the types of cryptographic operations that can be performed with EDHOC.
@@ -103,13 +103,13 @@ export interface PublicPrivateTuple {
  */
 export interface EdhocCryptoManager {
     /**
-     * Generates a cryptographic key of the specified type.
+     * Imports a cryptographic key of the specified type.
      * @param edhoc The EDHOC session context.
-     * @param keyType The type of key to generate, as defined in EdhocKeyType.
+     * @param keyType The type of key to import, as defined in EdhocKeyType.
      * @param key Optional buffer containing seed or related data if necessary.
-     * @return A promise resolving to a Buffer containing the generated key.
+     * @return A promise resolving to a Buffer containing the imported key.
      */
-    generateKey(edhoc: EDHOC, keyType: EdhocKeyType, key: Buffer): Promise<Buffer> | Buffer | never;
+    importKey(edhoc: EDHOC, keyType: EdhocKeyType, key: Buffer): Promise<Buffer> | Buffer | never;
     /**
      * Destroys a cryptographic key identified by the keyID.
      * @param edhoc The EDHOC session context.
@@ -262,9 +262,13 @@ export declare class EDHOC {
      */
     readonly peerConnectionID: EdhocConnectionID;
     /**
-     * The method of authentication to be used in this EDHOC session, as defined in EdhocMethod.
+     * The methods of authentication to be used in this EDHOC session, as defined in EdhocMethod.
      */
-    method: EdhocMethod;
+    methods: EdhocMethod[];
+    /**
+     * The selected method of authentication to be used in this EDHOC session, as defined in EdhocMethod.
+     */
+    selectedMethod: EdhocMethod;
     /**
      * A list of cipher suites supported by this session, providing flexibility in cryptographic negotiations.
      */
@@ -287,7 +291,7 @@ export declare class EDHOC {
      * @param credentials A manager for handling credentials related to EDHOC.
      * @param crypto A crypto manager to handle cryptographic functions.
      */
-    constructor(connectionID: EdhocConnectionID, method: EdhocMethod, suite: EdhocSuite[], credentials: EdhocCredentialManager, crypto: EdhocCryptoManager);
+    constructor(connectionID: EdhocConnectionID, methods: EdhocMethod[], suites: EdhocSuite[], credentials: EdhocCredentialManager, crypto: EdhocCryptoManager);
     /**
      * Composes the first EDHOC message.
      * @param ead Optional array of EAD objects to include in the message.
@@ -298,6 +302,7 @@ export declare class EDHOC {
      * Processes the received first EDHOC message.
      * @param message The received message buffer.
      * @return A promise that resolves to an array of EAD objects extracted from the message.
+     * @throws Error if processing fails, optionally including peerCipherSuites.
      */
     processMessage1(message: Buffer): Promise<EdhocEAD[]> | never;
     /**
@@ -310,6 +315,7 @@ export declare class EDHOC {
      * Processes the received second EDHOC message.
      * @param message The received message buffer.
      * @return A promise that resolves to an array of EAD objects extracted from the message.
+     * @throws Error if processing fails, optionally including peerCipherSuites.
      */
     processMessage2(message: Buffer): Promise<EdhocEAD[]> | never;
     /**
@@ -322,6 +328,7 @@ export declare class EDHOC {
      * Processes the received third EDHOC message.
      * @param message The received message buffer.
      * @return A promise that resolves to an array of EAD objects extracted from the message.
+     * @throws Error if processing fails, optionally including peerCipherSuites.
      */
     processMessage3(message: Buffer): Promise<EdhocEAD[]> | never;
     /**
@@ -334,6 +341,7 @@ export declare class EDHOC {
      * Processes the received fourth EDHOC message.
      * @param message The received message buffer.
      * @return A promise that resolves to an array of EAD objects extracted from the message.
+     * @throws Error if processing fails, optionally including peerCipherSuites.
      */
     processMessage4(message: Buffer): Promise<EdhocEAD[]> | never;
     /**
@@ -341,6 +349,20 @@ export declare class EDHOC {
      * @return A promise that resolves to the OSCORE context used for secured communication in constrained environments.
      */
     exportOSCORE(): Promise<EdhocOscoreContext> | never;
+    /**
+     * Exports the key derived from the EDHOC session using the EDHOC_Exporter interface.
+     * @param exporterLabel The label of the key to export, as a registered uint from the "EDHOC Exporter Labels" registry.
+     * @param length The desired length of the key to export.
+     * @return A promise that resolves to the exported key.
+     */
+    exportKey(exporterLabel: number, length: number): Promise<Buffer> | never;
+    /**
+     * Key update for the new OSCORE security session
+     * Read Appendix H of RFC 9528 - https://www.rfc-editor.org/rfc/rfc9528.html#appendix-H
+     * @param context Buffer containing the entropy for key update.
+     * @return A promise that resolves to void.
+     */
+    keyUpdate(context: Buffer): Promise<void> | never;
 }
 export * from './bindings';
 //# sourceMappingURL=edhoc.d.ts.map

package/dist/edhoc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"edhoc.d.ts","sourceRoot":"","sources":["../lib/edhoc.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,oBAAY,sBAAsB;IAC9B,GAAG,IAAI,CAAU,+BAA+B;IAChD,OAAO,KAAK,CAAK,yCAAyC;IAC1D,GAAG,KAAK;CACX;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IACzD,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC;IACnC,GAAG,EAAE;QACD,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,OAAO,CAAA;KACnB,CAAA;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,gBAAgB;IACtE,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC;IACvC,OAAO,EAAE;QACL,YAAY,EAAE,MAAM,EAAE,CAAA;KACzB,CAAA;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,+BAAgC,SAAQ,gBAAgB;IACrE,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC;IACnC,GAAG,EAAE;QACD,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,wCAAwC,CAAA;KAC1D,CAAA;CACJ;AAED;;GAEG;AACH,oBAAY,wCAAwC;IAChD,MAAM,MAAM,CAAM,0BAA0B;IAC5C,SAAS,MAAM;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,GAAG,KAAK,CAAC;IAE1E;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,GAAG,KAAK,CAAC;CAC7G;AAED;;GAEG;AACH,oBAAY,YAAY;IACpB,WAAW,IAAA,CAAG,+BAA+B;IAC7C,YAAY,IAAA,CAAE,qCAAqC;IACnD,SAAS,IAAA,CAAK,wCAAwC;IACtD,MAAM,IAAA,CAAQ,yCAAyC;IACvD,OAAO,IAAA,CAAO,oCAAoC;IAClD,MAAM,IAAA,CAAQ,mCAAmC;IACjD,OAAO,IAAA,CAAO,4BAA4B;IAC1C,OAAO,IAAA;CACV;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,eAAe,CAAA;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAE/B;;;;;;OAMG;IACH,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAEhG;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC;IAE5E;;;;;;;UAOM;IACN,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,GAAG,KAAK,CAAC;IAElJ;;;;;;;OAOG;IACH,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAE/H;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAE1G;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC;IAE1G;;;;;;;OAOG;IACH,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAEtG;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAErG;;;;;;;;;OASG;IACH,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAEpI;;;;;;;;;OASG;IACH,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAErI;;;;;;OAMG;IACH,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;CACxF;AAED;;GAEG;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhD;;;GAGG;AAEH,oBAAY,WAAW;IACnB,OAAO,IAAI;IACX,OAAO,IAAA;IACP,OAAO,IAAA;IACP,OAAO,IAAA;CACV;AAED;;;GAGG;AAEH,oBAAY,UAAU;IAClB,MAAM,IAAI;IACV,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,OAAO,KAAK;IACZ,OAAO,KAAA;CACV;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,KAAK;IACtB;;OAEG;IACI,YAAY,EAAE,iBAAiB,CAAC;IAEvC;;OAEG;IACH,SAAgB,gBAAgB,EAAE,iBAAiB,CAAC;IAEpD;;OAEG;IACI,MAAM,EAAE,WAAW,CAAC;IAE3B;;OAEG;IACI,YAAY,EAAE,UAAU,EAAE,CAAC;IAElC;;OAEG;IACI,aAAa,EAAE,UAAU,CAAC;IAEjC;;;;OAIG;IACI,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpD;;;;;;;OAOG;gBACS,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,kBAAkB;IAEtJ;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;OAIG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;OAIG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;OAIG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;OAIG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;OAGG;IACI,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC,GAAG,KAAK;CAC7D;AAED,cAAc,YAAY,CAAC"}
+{"version":3,"file":"edhoc.d.ts","sourceRoot":"","sources":["../lib/edhoc.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,oBAAY,sBAAsB;IAC9B,GAAG,IAAI,CAAU,+BAA+B;IAChD,OAAO,KAAK,CAAK,yCAAyC;IAC1D,GAAG,KAAK;CACX;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IACzD,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC;IACnC,GAAG,EAAE;QACD,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,OAAO,CAAA;KACnB,CAAA;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,gBAAgB;IACtE,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC;IACvC,OAAO,EAAE;QACL,YAAY,EAAE,MAAM,EAAE,CAAA;KACzB,CAAA;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,+BAAgC,SAAQ,gBAAgB;IACrE,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC;IACnC,GAAG,EAAE;QACD,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,wCAAwC,CAAA;KAC1D,CAAA;CACJ;AAED;;GAEG;AACH,oBAAY,wCAAwC;IAChD,MAAM,MAAM,CAAM,0BAA0B;IAC5C,SAAS,MAAM;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,GAAG,KAAK,CAAC;IAE1E;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,WAAW,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI,CAAC;CACrI;AAED;;GAEG;AACH,oBAAY,YAAY;IACpB,WAAW,IAAA,CAAG,+BAA+B;IAC7C,YAAY,IAAA,CAAE,qCAAqC;IACnD,SAAS,IAAA,CAAK,wCAAwC;IACtD,MAAM,IAAA,CAAQ,yCAAyC;IACvD,OAAO,IAAA,CAAO,oCAAoC;IAClD,MAAM,IAAA,CAAQ,mCAAmC;IACjD,OAAO,IAAA,CAAO,4BAA4B;IAC1C,OAAO,IAAA;CACV;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,eAAe,CAAA;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAE/B;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAE9F;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC;IAE5E;;;;;;;UAOM;IACN,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,GAAG,KAAK,CAAC;IAElJ;;;;;;;OAOG;IACH,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAE/H;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAE1G;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC;IAE1G;;;;;;;OAOG;IACH,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAEtG;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAErG;;;;;;;;;OASG;IACH,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAEpI;;;;;;;;;OASG;IACH,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;IAErI;;;;;;OAMG;IACH,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC;CACxF;AAED;;GAEG;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhD;;;GAGG;AAEH,oBAAY,WAAW;IACnB,OAAO,IAAI;IACX,OAAO,IAAA;IACP,OAAO,IAAA;IACP,OAAO,IAAA;CACV;AAED;;;GAGG;AAEH,oBAAY,UAAU;IAClB,MAAM,IAAI;IACV,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,MAAM,IAAA;IACN,OAAO,KAAK;IACZ,OAAO,KAAA;CACV;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,KAAK;IACtB;;OAEG;IACI,YAAY,EAAE,iBAAiB,CAAC;IAEvC;;OAEG;IACH,SAAgB,gBAAgB,EAAE,iBAAiB,CAAC;IAEpD;;OAEG;IACI,OAAO,EAAE,WAAW,EAAE,CAAC;IAE9B;;OAEG;IACI,cAAc,EAAE,WAAW,CAAC;IAEnC;;OAEG;IACI,YAAY,EAAE,UAAU,EAAE,CAAC;IAElC;;OAEG;IACI,aAAa,EAAE,UAAU,CAAC;IAEjC;;;;OAIG;IACI,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpD;;;;;;;OAOG;gBACS,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,kBAAkB;IAE1J;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;;OAKG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;;OAKG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;;OAKG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;;OAIG;IACI,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEjE;;;;;OAKG;IACI,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK;IAEpE;;;OAGG;IACI,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC,GAAG,KAAK;IAE1D;;;;;OAKG;IACI,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;IAEhF;;;;;OAKG;IACI,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK;CAC3D;AAED,cAAc,YAAY,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
 export * from "./edhoc";
 export * from "./crypto";
-export * from "./credentials";
+export * from "./x509credentials";
 //# sourceMappingURL=index.d.ts.map