effect 4.0.6 → 4.1.0

package/dist/crypto/Signature.js

@@ -0,0 +1,484 @@
+/**
+ * Digital signatures: Ed25519, ECDSA on P-256, P-384 and P-521, RSA-PSS, and
+ * RSASSA-PKCS1-v1_5.
+ *
+ * The {@link Signature} service generates key pairs, signs, verifies, and
+ * computes a private key's public key. The top-level {@link privateKey},
+ * {@link publicKey}, {@link privateKeyFromCryptoKey},
+ * {@link publicKeyFromCryptoKey}, and {@link toBytes} functions build and
+ * export keys without a service.
+ *
+ * The hash is part of the algorithm. ECDSA P-256, P-384 and P-521 sign with
+ * SHA-256, SHA-384 and SHA-512, as JOSE ES256, ES384 and ES512 do. RSA
+ * algorithms come from {@link rsaPss} and {@link rsaPkcs1v15}, with pre-made
+ * values such as {@link rsaPssSha256}.
+ *
+ * Keys are opaque. They hold either bytes or a `CryptoKey`, display only their
+ * algorithm, and compare by reference. The bytes are:
+ *
+ * - Ed25519: the 32-byte seed and the 32-byte public key;
+ * - ECDSA: PKCS#8 for private keys, and the uncompressed SEC1 point for public
+ *   keys;
+ * - RSA: PKCS#8 and SPKI DER.
+ *
+ * Only Ed25519 private keys and Ed25519 and ECDSA public keys have a raw
+ * constructor. Other keys come from `Signature.generateKeyPair`,
+ * `CryptoKey`s, or key formats.
+ *
+ * **Gotchas**
+ *
+ * - Ed25519 needs Chrome 137, Firefox 129, or Safari 17. There is no
+ *   fallback for older browsers.
+ * - Ed25519 keys are generated from `SecureRandom` bytes, so a seeded
+ *   `SecureRandom` reproduces them. ECDSA and RSA key generation, and ECDSA
+ *   and RSA-PSS signatures, use WebCrypto's own randomness and cannot be
+ *   seeded. Test them with round trips such as `verify(sign(data))`.
+ *
+ * @stability unstable
+ * @since 4.0.0
+ */
+import * as Context from "../Context.js";
+import * as Effect from "../Effect.js";
+import * as Layer from "../Layer.js";
+import * as Predicate from "../Predicate.js";
+import * as CryptoError from "./CryptoError.js";
+import * as Digest from "./Digest.js";
+import * as Asymmetric from "./internal/asymmetric.js";
+import * as KeyModel from "./internal/key.js";
+import * as internal from "./internal/webCrypto.js";
+import * as SecureRandom from "./SecureRandom.js";
+import { WebCrypto } from "./WebCrypto.js";
+const PrivateKeyTypeId = "~effect/crypto/Signature/PrivateKey";
+const PublicKeyTypeId = "~effect/crypto/Signature/PublicKey";
+/**
+ * Ed25519 (RFC 8032).
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const ed25519 = {
+  _tag: "Ed25519",
+  name: "ed25519"
+};
+/**
+ * ECDSA on P-256 with SHA-256 (JOSE ES256), with 64-byte signatures.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const ecdsaP256 = {
+  _tag: "Ecdsa",
+  name: "ecdsaP256",
+  namedCurve: "P-256",
+  hash: Digest.sha256
+};
+/**
+ * ECDSA on P-384 with SHA-384 (JOSE ES384), with 96-byte signatures.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const ecdsaP384 = {
+  _tag: "Ecdsa",
+  name: "ecdsaP384",
+  namedCurve: "P-384",
+  hash: Digest.sha384
+};
+/**
+ * ECDSA on P-521 with SHA-512 (JOSE ES512), with 132-byte signatures.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const ecdsaP521 = {
+  _tag: "Ecdsa",
+  name: "ecdsaP521",
+  namedCurve: "P-521",
+  hash: Digest.sha512
+};
+/**
+ * Builds an RSA-PSS algorithm for a hash and a modulus length in bits.
+ *
+ * **Details**
+ *
+ * MGF1 uses the same hash. The salt length defaults to the hash's output
+ * length.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPss = options => ({
+  _tag: "RsaPss",
+  name: `rsaPss${Digest.nameSuffix(options.hash)}`,
+  hash: options.hash,
+  modulusLength: options.modulusLength,
+  saltLength: options.saltLength ?? options.hash.outputLength
+});
+/**
+ * Builds an RSASSA-PKCS1-v1_5 algorithm for a hash and a modulus length in
+ * bits.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPkcs1v15 = options => ({
+  _tag: "RsaPkcs1v15",
+  name: `rsaPkcs1v15${Digest.nameSuffix(options.hash)}`,
+  hash: options.hash,
+  modulusLength: options.modulusLength
+});
+/**
+ * RSA-PSS with SHA-256 (JOSE PS256), generating 3072-bit keys.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPssSha256 = /*#__PURE__*/rsaPss({
+  hash: Digest.sha256,
+  modulusLength: 3072
+});
+/**
+ * RSA-PSS with SHA-384 (JOSE PS384), generating 3072-bit keys.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPssSha384 = /*#__PURE__*/rsaPss({
+  hash: Digest.sha384,
+  modulusLength: 3072
+});
+/**
+ * RSA-PSS with SHA-512 (JOSE PS512), generating 3072-bit keys.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPssSha512 = /*#__PURE__*/rsaPss({
+  hash: Digest.sha512,
+  modulusLength: 3072
+});
+/**
+ * RSASSA-PKCS1-v1_5 with SHA-256 (JOSE RS256), generating 3072-bit keys.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPkcs1v15Sha256 = /*#__PURE__*/rsaPkcs1v15({
+  hash: Digest.sha256,
+  modulusLength: 3072
+});
+/**
+ * RSASSA-PKCS1-v1_5 with SHA-384 (JOSE RS384), generating 3072-bit keys.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPkcs1v15Sha384 = /*#__PURE__*/rsaPkcs1v15({
+  hash: Digest.sha384,
+  modulusLength: 3072
+});
+/**
+ * RSASSA-PKCS1-v1_5 with SHA-512 (JOSE RS512), generating 3072-bit keys.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const rsaPkcs1v15Sha512 = /*#__PURE__*/rsaPkcs1v15({
+  hash: Digest.sha512,
+  modulusLength: 3072
+});
+const PrivateKeyProto = /*#__PURE__*/KeyModel.redactedProto(PrivateKeyTypeId, "Signature.PrivateKey");
+const PublicKeyProto = /*#__PURE__*/KeyModel.redactedProto(PublicKeyTypeId, "Signature.PublicKey");
+/**
+ * Checks whether a value is a {@link PrivateKey}.
+ *
+ * @stability unstable
+ * @category guards
+ * @since 4.0.0
+ */
+export const isPrivateKey = u => Predicate.hasProperty(u, PrivateKeyTypeId);
+/**
+ * Checks whether a value is a {@link PublicKey}.
+ *
+ * @stability unstable
+ * @category guards
+ * @since 4.0.0
+ */
+export const isPublicKey = u => Predicate.hasProperty(u, PublicKeyTypeId);
+const specOf = algorithm => {
+  const base = {
+    privateUsages: ["sign"],
+    publicUsages: ["verify"]
+  };
+  switch (algorithm._tag) {
+    case "Ed25519":
+      return {
+        ...base,
+        name: "Ed25519",
+        importParams: {
+          name: "Ed25519"
+        },
+        seedPrefix: Asymmetric.ed25519Prefix,
+        publicFormat: "raw"
+      };
+    case "Ecdsa":
+      return {
+        ...base,
+        name: "ECDSA",
+        importParams: {
+          name: "ECDSA",
+          namedCurve: algorithm.namedCurve
+        },
+        seedPrefix: undefined,
+        publicFormat: "raw",
+        check: Asymmetric.checkNamedCurve(algorithm.namedCurve)
+      };
+    case "RsaPss":
+    case "RsaPkcs1v15":
+      {
+        const name = algorithm._tag === "RsaPss" ? "RSA-PSS" : "RSASSA-PKCS1-v1_5";
+        return {
+          ...base,
+          name,
+          importParams: {
+            name,
+            hash: algorithm.hash.name
+          },
+          seedPrefix: undefined,
+          publicFormat: "spki",
+          check: Asymmetric.checkHash(algorithm.hash.name)
+        };
+      }
+  }
+};
+/** @internal */
+export const family = {
+  module: "Signature",
+  specOf,
+  privateKeyProto: PrivateKeyProto,
+  publicKeyProto: PublicKeyProto,
+  isPrivateKey
+};
+const signParams = algorithm => {
+  switch (algorithm._tag) {
+    case "Ed25519":
+      return {
+        name: "Ed25519"
+      };
+    case "Ecdsa":
+      return {
+        name: "ECDSA",
+        hash: algorithm.hash.name
+      };
+    case "RsaPss":
+      return {
+        name: "RSA-PSS",
+        saltLength: algorithm.saltLength
+      };
+    case "RsaPkcs1v15":
+      return {
+        name: "RSASSA-PKCS1-v1_5"
+      };
+  }
+};
+const generateParams = algorithm => {
+  switch (algorithm._tag) {
+    case "Ed25519":
+      return {
+        name: "Ed25519"
+      };
+    case "Ecdsa":
+      return {
+        name: "ECDSA",
+        namedCurve: algorithm.namedCurve
+      };
+    case "RsaPss":
+    case "RsaPkcs1v15":
+      return Asymmetric.rsaGenerateParams(specOf(algorithm), algorithm.modulusLength);
+  }
+};
+// The length of the algorithm's signatures, which for RSA is the size of the
+// key's modulus. A signature of another length is rejected without asking
+// WebCrypto, so every runtime returns `false` for it.
+const signatureLength = (algorithm, cryptoKey) => {
+  switch (algorithm._tag) {
+    case "Ed25519":
+      return 64;
+    case "Ecdsa":
+      return 2 * Asymmetric.coordinateSizes[algorithm.namedCurve];
+    case "RsaPss":
+    case "RsaPkcs1v15":
+      return Math.ceil(cryptoKey.algorithm.modulusLength / 8);
+  }
+};
+// RFC 8017, section 9.1.1: the encoded message must fit the hash, the salt
+// and two more bytes. The modulus is only known once the key is imported, so
+// the check throws inside `run`.
+const checkSaltLength = (algorithm, cryptoKey) => {
+  if (algorithm._tag !== "RsaPss") return;
+  let problem;
+  if (!Number.isSafeInteger(algorithm.saltLength) || algorithm.saltLength < 0) {
+    problem = "PSS salt length must be a non-negative safe integer";
+  } else {
+    const modulusLength = cryptoKey.algorithm.modulusLength;
+    if (algorithm.hash.outputLength + algorithm.saltLength + 2 > Math.ceil((modulusLength - 1) / 8)) {
+      problem = `A ${algorithm.saltLength}-byte PSS salt does not fit a ${modulusLength}-bit key with ${algorithm.hash.name}`;
+    }
+  }
+  if (problem !== undefined) throw new internal.Failure(new CryptoError.InvalidArgument({
+    description: problem
+  }));
+};
+/**
+ * Service that generates key pairs, signs, verifies, and computes public keys.
+ *
+ * **Example** (Signing and verifying with Ed25519)
+ *
+ * ```ts import.meta.vitest
+ * import { Effect, Layer } from "effect"
+ * import { SecureRandom, Signature } from "effect/crypto"
+ *
+ * const program = Effect.gen(function*() {
+ *   const signature = yield* Signature.Signature
+ *   const { privateKey, publicKey } = yield* signature.generateKeyPair(Signature.ed25519)
+ *   const data = new TextEncoder().encode("message")
+ *   const signed = yield* signature.sign(privateKey, data)
+ *   return [signed.length, yield* signature.verify(publicKey, signed, data)]
+ * })
+ *
+ * const layer = Signature.layerWebCrypto.pipe(Layer.provide(SecureRandom.layerWebCrypto))
+ * await Effect.runPromise(program.pipe(Effect.provide(layer))) // => [64, true]
+ * ```
+ *
+ * @stability unstable
+ * @category services
+ * @since 4.0.0
+ */
+export class Signature extends /*#__PURE__*/Context.Service()("effect/crypto/Signature") {}
+/**
+ * Layer that provides `Signature` on the `WebCrypto` reference.
+ *
+ * **Details**
+ *
+ * Every algorithm runs on `crypto.subtle`. The layer imports a byte-backed
+ * key on first use and caches the `CryptoKey`. Ed25519 private keys come from
+ * `SecureRandom`, so a seeded `SecureRandom` reproduces them.
+ *
+ * @stability unstable
+ * @category layers
+ * @since 4.0.0
+ */
+export const layerWebCrypto = /*#__PURE__*/Layer.effect(Signature, /*#__PURE__*/Effect.gen(function* () {
+  const random = yield* SecureRandom.SecureRandom;
+  const crypto = yield* WebCrypto;
+  const caches = Asymmetric.makeCaches(family);
+  return Signature.of({
+    generateKeyPair: algorithm => Asymmetric.generateKeyPair(family, crypto, random, algorithm, generateParams(algorithm)),
+    sign: (privateKey, data) => internal.run("Signature", "sign", privateKey.algorithm.name, crypto, async subtle => {
+      const cryptoKey = await caches.privateKey(subtle, privateKey);
+      checkSaltLength(privateKey.algorithm, cryptoKey);
+      return new Uint8Array(await subtle.sign(signParams(privateKey.algorithm), cryptoKey, data));
+    }),
+    verify: (publicKey, signature, data) => internal.run("Signature", "verify", publicKey.algorithm.name, crypto, async subtle => {
+      const cryptoKey = await caches.publicKey(subtle, publicKey);
+      checkSaltLength(publicKey.algorithm, cryptoKey);
+      if (signature.length !== signatureLength(publicKey.algorithm, cryptoKey)) return false;
+      return subtle.verify(signParams(publicKey.algorithm), cryptoKey, signature, data);
+    }, cause => Asymmetric.publicKeyError("Signature", "verify", publicKey, cause)),
+    publicKeyOf: privateKey => Asymmetric.publicKeyOf(family, crypto, privateKey)
+  });
+}));
+/**
+ * Builds an Ed25519 private key from its 32-byte seed.
+ *
+ * **Details**
+ *
+ * The bytes are copied. Another length fails with an `InvalidKey` reason,
+ * including the 64-byte `seed‖public key` form libsodium and TweetNaCl use:
+ * pass its first 32 bytes. ECDSA and RSA private keys have no raw form, so
+ * passing them is a type error.
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.0.0
+ */
+export const privateKey = (algorithm, bytes) => KeyModel.fromBytes("Signature", "privateKey", PrivateKeyProto, algorithm, bytes, Asymmetric.checkSeedLength("Ed25519", "private"));
+/**
+ * Builds a public key from its raw form: 32 bytes for Ed25519, or an
+ * uncompressed SEC1 point for ECDSA.
+ *
+ * **Details**
+ *
+ * The bytes are copied. A wrong length, or a compressed point, fails with an
+ * `InvalidKey` reason. Only uncompressed points are taken because Safari and
+ * Firefox before 146 reject compressed ones in raw import, though they accept
+ * them inside SPKI: decode a compressed point with `KeyFormat.spki`. Whether a
+ * point is on the curve is checked when the key is first used. RSA public keys have
+ * no raw form, so passing them is a type error.
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.0.0
+ */
+export const publicKey = (algorithm, bytes) => KeyModel.fromBytes("Signature", "publicKey", PublicKeyProto, algorithm, bytes, algorithm._tag === "Ecdsa" ? Asymmetric.checkPoint(algorithm.namedCurve) : Asymmetric.checkSeedLength("Ed25519", "public"));
+/**
+ * Builds a private key from an existing `CryptoKey`, such as a
+ * non-extractable one.
+ *
+ * **Details**
+ *
+ * The `CryptoKey` must be a private key of the algorithm's WebCrypto name,
+ * curve or hash, with the `sign` usage. Otherwise the constructor fails with
+ * an `InvalidKey` reason. The modulus length of an RSA algorithm is not
+ * checked. The key must come from the `Crypto` object of the `WebCrypto`
+ * reference.
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.0.0
+ */
+export const privateKeyFromCryptoKey = (algorithm, cryptoKey) => Asymmetric.fromCryptoKey(family, "privateKeyFromCryptoKey", algorithm, "private", cryptoKey);
+/**
+ * Builds a public key from an existing `CryptoKey`.
+ *
+ * **Details**
+ *
+ * The `CryptoKey` must be a public key of the algorithm's WebCrypto name,
+ * curve or hash, with the `verify` usage. Otherwise the constructor fails
+ * with an `InvalidKey` reason. The key must come from the `Crypto` object of
+ * the `WebCrypto` reference.
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.0.0
+ */
+export const publicKeyFromCryptoKey = (algorithm, cryptoKey) => Asymmetric.fromCryptoKey(family, "publicKeyFromCryptoKey", algorithm, "public", cryptoKey);
+/**
+ * Exports a key's stored bytes.
+ *
+ * **Details**
+ *
+ * Returns a fresh `Uint8Array`: the seed or raw public key for Ed25519,
+ * PKCS#8 or the uncompressed point for ECDSA, and PKCS#8 or SPKI DER for
+ * RSA. A `CryptoKey`-backed key is exported on the `WebCrypto` reference, and
+ * fails with a `NotExtractable` reason when the `CryptoKey` is not
+ * extractable.
+ *
+ * @stability unstable
+ * @category converting
+ * @since 4.0.0
+ */
+export const toBytes = key => Asymmetric.toBytes(family, key);
+//# sourceMappingURL=Signature.js.map

package/dist/crypto/Signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Signature.js","names":[],"sources":["../../src/crypto/Signature.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,OAAO,KAAK,OAAO,MAAM,eAAe;AACxC,OAAO,KAAK,MAAM,MAAM,cAAc;AAEtC,OAAO,KAAK,KAAK,MAAM,aAAa;AACpC,OAAO,KAAK,SAAS,MAAM,iBAAiB;AAC5C,OAAO,KAAK,WAAW,MAAM,kBAAkB;AAC/C,OAAO,KAAK,MAAM,MAAM,aAAa;AACrC,OAAO,KAAK,UAAU,MAAM,0BAA0B;AACtD,OAAO,KAAK,QAAQ,MAAM,mBAAmB;AAC7C,OAAO,KAAK,QAAQ,MAAM,yBAAyB;AACnD,OAAO,KAAK,YAAY,MAAM,mBAAmB;AACjD,SAAS,SAAS,QAAQ,gBAAgB;AAE1C,MAAM,gBAAgB,GAAG,qCAA8C;AACvE,MAAM,eAAe,GAAG,oCAA6C;AAqFrE;;;;;;;AAOA,OAAO,MAAM,OAAO,GAAY;EAAE,IAAI,EAAE,SAAS;EAAE,IAAI,EAAE;AAAS,CAAE;AAEpE;;;;;;;AAOA,OAAO,MAAM,SAAS,GAAmB;EAAE,IAAI,EAAE,OAAO;EAAE,IAAI,EAAE,WAAW;EAAE,UAAU,EAAE,OAAO;EAAE,IAAI,EAAE,MAAM,CAAC;AAAM,CAAE;AAEvH;;;;;;;AAOA,OAAO,MAAM,SAAS,GAAmB;EAAE,IAAI,EAAE,OAAO;EAAE,IAAI,EAAE,WAAW;EAAE,UAAU,EAAE,OAAO;EAAE,IAAI,EAAE,MAAM,CAAC;AAAM,CAAE;AAEvH;;;;;;;AAOA,OAAO,MAAM,SAAS,GAAmB;EAAE,IAAI,EAAE,OAAO;EAAE,IAAI,EAAE,WAAW;EAAE,UAAU,EAAE,OAAO;EAAE,IAAI,EAAE,MAAM,CAAC;AAAM,CAAE;AAEvH;;;;;;;;;;;;AAYA,OAAO,MAAM,MAAM,GAAI,OAItB,KAAc;EACb,IAAI,EAAE,QAAQ;EACd,IAAI,EAAE,SAAS,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;EAChD,IAAI,EAAE,OAAO,CAAC,IAAI;EAClB,aAAa,EAAE,OAAO,CAAC,aAAa;EACpC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAChD,CAAC;AAEF;;;;;;;;AAQA,OAAO,MAAM,WAAW,GAAI,OAG3B,KAAmB;EAClB,IAAI,EAAE,aAAa;EACnB,IAAI,EAAE,cAAc,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;EACrD,IAAI,EAAE,OAAO,CAAC,IAAI;EAClB,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF;;;;;;;AAOA,OAAO,MAAM,YAAY,gBAAW,MAAM,CAAC;EAAE,IAAI,EAAE,MAAM,CAAC,MAAM;EAAE,aAAa,EAAE;AAAI,CAAE,CAAC;AAExF;;;;;;;AAOA,OAAO,MAAM,YAAY,gBAAW,MAAM,CAAC;EAAE,IAAI,EAAE,MAAM,CAAC,MAAM;EAAE,aAAa,EAAE;AAAI,CAAE,CAAC;AAExF;;;;;;;AAOA,OAAO,MAAM,YAAY,gBAAW,MAAM,CAAC;EAAE,IAAI,EAAE,MAAM,CAAC,MAAM;EAAE,aAAa,EAAE;AAAI,CAAE,CAAC;AAExF;;;;;;;AAOA,OAAO,MAAM,iBAAiB,gBAAgB,WAAW,CAAC;EAAE,IAAI,EAAE,MAAM,CAAC,MAAM;EAAE,aAAa,EAAE;AAAI,CAAE,CAAC;AAEvG;;;;;;;AAOA,OAAO,MAAM,iBAAiB,gBAAgB,WAAW,CAAC;EAAE,IAAI,EAAE,MAAM,CAAC,MAAM;EAAE,aAAa,EAAE;AAAI,CAAE,CAAC;AAEvG;;;;;;;AAOA,OAAO,MAAM,iBAAiB,gBAAgB,WAAW,CAAC;EAAE,IAAI,EAAE,MAAM,CAAC,MAAM;EAAE,aAAa,EAAE;AAAI,CAAE,CAAC;AAkDvG,MAAM,eAAe,gBAAG,QAAQ,CAAC,aAAa,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;AACxF,MAAM,cAAc,gBAAG,QAAQ,CAAC,aAAa,CAAC,eAAe,EAAE,qBAAqB,CAAC;AAErF;;;;;;;AAOA,OAAO,MAAM,YAAY,GAAI,CAAU,IAAsB,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC;AAEvG;;;;;;;AAOA,OAAO,MAAM,WAAW,GAAI,CAAU,IAAqB,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC;AAEpG,MAAM,MAAM,GAAI,SAAoB,IAAqB;EACvD,MAAM,IAAI,GAAG;IAAE,aAAa,EAAE,CAAC,MAAM,CAAC;IAAE,YAAY,EAAE,CAAC,QAAQ;EAAC,CAAW;EAC3E,QAAQ,SAAS,CAAC,IAAI;IACpB,KAAK,SAAS;MACZ,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,SAAS;QACf,YAAY,EAAE;UAAE,IAAI,EAAE;QAAS,CAAE;QACjC,UAAU,EAAE,UAAU,CAAC,aAAa;QACpC,YAAY,EAAE;OACf;IACH,KAAK,OAAO;MACV,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,OAAO;QACb,YAAY,EAAE;UAAE,IAAI,EAAE,OAAO;UAAE,UAAU,EAAE,SAAS,CAAC;QAAU,CAAE;QACjE,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,UAAU;OACvD;IACH,KAAK,QAAQ;IACb,KAAK,aAAa;MAAE;QAClB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,GAAG,SAAS,GAAG,mBAAmB;QAC1E,OAAO;UACL,GAAG,IAAI;UACP,IAAI;UACJ,YAAY,EAAE;YAAE,IAAI;YAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;UAAI,CAAE;UACjD,UAAU,EAAE,SAAS;UACrB,YAAY,EAAE,MAAM;UACpB,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;SAChD;MACH;EACF;AACF,CAAC;AAED;AACA,OAAO,MAAM,MAAM,GAAsB;EACvC,MAAM,EAAE,WAAW;EACnB,MAAM;EACN,eAAe,EAAE,eAAe;EAChC,cAAc,EAAE,cAAc;EAC9B;CACD;AAED,MAAM,UAAU,GAAI,SAAoB,IAAsD;EAC5F,QAAQ,SAAS,CAAC,IAAI;IACpB,KAAK,SAAS;MACZ,OAAO;QAAE,IAAI,EAAE;MAAS,CAAE;IAC5B,KAAK,OAAO;MACV,OAAO;QAAE,IAAI,EAAE,OAAO;QAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;MAAI,CAAE;IACrD,KAAK,QAAQ;MACX,OAAO;QAAE,IAAI,EAAE,SAAS;QAAE,UAAU,EAAE,SAAS,CAAC;MAAU,CAAE;IAC9D,KAAK,aAAa;MAChB,OAAO;QAAE,IAAI,EAAE;MAAmB,CAAE;EACxC;AACF,CAAC;AAED,MAAM,cAAc,GAAI,SAAoB,IAAkE;EAC5G,QAAQ,SAAS,CAAC,IAAI;IACpB,KAAK,SAAS;MACZ,OAAO;QAAE,IAAI,EAAE;MAAS,CAAE;IAC5B,KAAK,OAAO;MACV,OAAO;QAAE,IAAI,EAAE,OAAO;QAAE,UAAU,EAAE,SAAS,CAAC;MAAU,CAAE;IAC5D,KAAK,QAAQ;IACb,KAAK,aAAa;MAChB,OAAO,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,aAAa,CAAC;EACnF;AACF,CAAC;AAED;AACA;AACA;AACA,MAAM,eAAe,GAAG,CAAC,SAAoB,EAAE,SAAoB,KAAY;EAC7E,QAAQ,SAAS,CAAC,IAAI;IACpB,KAAK,SAAS;MACZ,OAAO,EAAE;IACX,KAAK,OAAO;MACV,OAAO,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC;IAC7D,KAAK,QAAQ;IACb,KAAK,aAAa;MAChB,OAAO,IAAI,CAAC,IAAI,CAAE,SAAS,CAAC,SAAmC,CAAC,aAAa,GAAG,CAAC,CAAC;EACtF;AACF,CAAC;AAED;AACA;AACA;AACA,MAAM,eAAe,GAAG,CAAC,SAAoB,EAAE,SAAoB,KAAU;EAC3E,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE;EACjC,IAAI,OAA2B;EAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,GAAG,CAAC,EAAE;IAC3E,OAAO,GAAG,qDAAqD;EACjE,CAAC,MAAM;IACL,MAAM,aAAa,GAAI,SAAS,CAAC,SAAmC,CAAC,aAAa;IAClF,IAAI,SAAS,CAAC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE;MAC/F,OAAO,GACL,KAAK,SAAS,CAAC,UAAU,iCAAiC,aAAa,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;IACjH;EACF;EACA,IAAI,OAAO,KAAK,SAAS,EAAE,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,eAAe,CAAC;IAAE,WAAW,EAAE;EAAO,CAAE,CAAC,CAAC;AAClH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,OAAM,MAAO,SAAU,sBAAQ,OAAO,CAAC,OAAO,EA8B1C,CAAC,yBAAyB,CAAC;AAE/B;;;;;;;;;;;;;AAaA,OAAO,MAAM,cAAc,gBAA6D,KAAK,CAAC,MAAM,CAClG,SAAS,eACT,MAAM,CAAC,GAAG,CAAC,aAAS;EAClB,MAAM,MAAM,GAAG,OAAO,YAAY,CAAC,YAAY;EAC/C,MAAM,MAAM,GAAG,OAAO,SAAS;EAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;EAC5C,OAAO,SAAS,CAAC,EAAE,CAAC;IAClB,eAAe,EAAwB,SAAY,IACjD,UAAU,CAAC,eAAe,CAAa,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACtG,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,KACrB,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAO,MAAM,IAAI;MACpF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC;MAC7D,eAAe,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;MAChD,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAoB,CAAC,CAAC;IAC7G,CAAC,CAAC;IACJ,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,KACjC,QAAQ,CAAC,GAAG,CACV,WAAW,EACX,QAAQ,EACR,SAAS,CAAC,SAAS,CAAC,IAAI,EACxB,MAAM,EACN,MAAO,MAAM,IAAI;MACf,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC;MAC3D,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;MAC/C,IAAI,SAAS,CAAC,MAAM,KAAK,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK;MACtF,OAAO,MAAM,CAAC,MAAM,CAClB,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,EAC/B,SAAS,EACT,SAAyB,EACzB,IAAoB,CACrB;IACH,CAAC,EACA,KAAK,IAAK,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAC9E;IACH,WAAW,EAAwB,UAAyB,IAC1D,UAAU,CAAC,WAAW,CAAe,MAAM,EAAE,MAAM,EAAE,UAAU;GAClE,CAAC;AACJ,CAAC,CAAC,CACH;AAED;;;;;;;;;;;;;;AAcA,OAAO,MAAM,UAAU,GAAG,CAGxB,SAAY,EACZ,KAAiB,KAEjB,QAAQ,CAAC,SAAS,CAChB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,SAAS,EACT,KAAK,EACL,UAAU,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CACjD;AAEH;;;;;;;;;;;;;;;;;AAiBA,OAAO,MAAM,SAAS,GAAG,CAGvB,SAAY,EACZ,KAAiB,KAEjB,QAAQ,CAAC,SAAS,CAChB,WAAW,EACX,WAAW,EACX,cAAc,EACd,SAAS,EACT,KAAK,EACL,SAAS,CAAC,IAAI,KAAK,OAAO,GACtB,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,GAC3C,UAAU,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CACpD;AAEH;;;;;;;;;;;;;;;;AAgBA,OAAO,MAAM,uBAAuB,GAAG,CACrC,SAAY,EACZ,SAAoB,KAEpB,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;AAE9F;;;;;;;;;;;;;;AAcA,OAAO,MAAM,sBAAsB,GAAG,CACpC,SAAY,EACZ,SAAoB,KAEpB,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;AAE5F;;;;;;;;;;;;;;;AAeA,OAAO,MAAM,OAAO,GAAI,GAA2B,IACjD,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC","ignoreList":[]}

package/dist/crypto/WebCrypto.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The WebCrypto `Crypto` object that the `effect/crypto` modules run on.
+ *
+ * The `layerWebCrypto` layers of the family modules, such as
+ * `Digest.layerWebCrypto`, and key functions that touch
+ * `crypto.subtle`, such as `Mac.toBytes`, read the {@link WebCrypto}
+ * reference. It defaults to `globalThis.crypto`. Provide {@link layer} to run
+ * them on a polyfill, a worker's object, or a test double.
+ *
+ * **Gotchas**
+ *
+ * Browsers expose `crypto.subtle` only in secure contexts. Elsewhere, every
+ * operation that needs it dies with "crypto.subtle is unavailable". Layers
+ * still build, and `SecureRandom` and the pure TypeScript algorithms, such as
+ * MD5, keep working.
+ *
+ * @stability unstable
+ * @since 4.0.0
+ */
+import * as Context from "../Context.ts";
+import * as Layer from "../Layer.ts";
+/**
+ * Reference to the WebCrypto `Crypto` object, defaulting to
+ * `globalThis.crypto`.
+ *
+ * @see {@link layer} for replacing it
+ *
+ * @stability unstable
+ * @category references
+ * @since 4.0.0
+ */
+export declare const WebCrypto: Context.Reference<Crypto>;
+/**
+ * Layer that sets the {@link WebCrypto} reference.
+ *
+ * **When to use**
+ *
+ * Use to run the `effect/crypto` modules on a polyfill, a worker's `Crypto`
+ * object, or a test double.
+ *
+ * **Example** (Using a `Crypto` polyfill)
+ *
+ * ```ts import.meta.vitest
+ * import { Effect } from "effect"
+ * import { Digest, WebCrypto } from "effect/crypto"
+ *
+ * const program = Effect.gen(function*() {
+ *   const digest = yield* Digest.Digest
+ *   return yield* digest.digestHex(Digest.sha256, new TextEncoder().encode("abc"))
+ * }).pipe(Effect.provide(Digest.layerWebCrypto))
+ *
+ * const hex = await Effect.runPromise(program.pipe(Effect.provide(WebCrypto.layer(globalThis.crypto))))
+ * hex.length // => 64
+ * ```
+ *
+ * @stability unstable
+ * @category layers
+ * @since 4.0.0
+ */
+export declare const layer: (crypto: Crypto) => Layer.Layer<never>;
+//# sourceMappingURL=WebCrypto.d.ts.map

package/dist/crypto/WebCrypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebCrypto.d.ts","sourceRoot":"","sources":["../../src/crypto/WebCrypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,OAAO,MAAM,eAAe,CAAA;AACxC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AAEpC;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAE9C,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,KAAK,WAAY,MAAM,KAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAqC,CAAA"}

package/dist/crypto/WebCrypto.js

@@ -0,0 +1,63 @@
+/**
+ * The WebCrypto `Crypto` object that the `effect/crypto` modules run on.
+ *
+ * The `layerWebCrypto` layers of the family modules, such as
+ * `Digest.layerWebCrypto`, and key functions that touch
+ * `crypto.subtle`, such as `Mac.toBytes`, read the {@link WebCrypto}
+ * reference. It defaults to `globalThis.crypto`. Provide {@link layer} to run
+ * them on a polyfill, a worker's object, or a test double.
+ *
+ * **Gotchas**
+ *
+ * Browsers expose `crypto.subtle` only in secure contexts. Elsewhere, every
+ * operation that needs it dies with "crypto.subtle is unavailable". Layers
+ * still build, and `SecureRandom` and the pure TypeScript algorithms, such as
+ * MD5, keep working.
+ *
+ * @stability unstable
+ * @since 4.0.0
+ */
+import * as Context from "../Context.js";
+import * as Layer from "../Layer.js";
+/**
+ * Reference to the WebCrypto `Crypto` object, defaulting to
+ * `globalThis.crypto`.
+ *
+ * @see {@link layer} for replacing it
+ *
+ * @stability unstable
+ * @category references
+ * @since 4.0.0
+ */
+export const WebCrypto = /*#__PURE__*/Context.Reference("effect/crypto/WebCrypto", {
+  defaultValue: () => globalThis.crypto
+});
+/**
+ * Layer that sets the {@link WebCrypto} reference.
+ *
+ * **When to use**
+ *
+ * Use to run the `effect/crypto` modules on a polyfill, a worker's `Crypto`
+ * object, or a test double.
+ *
+ * **Example** (Using a `Crypto` polyfill)
+ *
+ * ```ts import.meta.vitest
+ * import { Effect } from "effect"
+ * import { Digest, WebCrypto } from "effect/crypto"
+ *
+ * const program = Effect.gen(function*() {
+ *   const digest = yield* Digest.Digest
+ *   return yield* digest.digestHex(Digest.sha256, new TextEncoder().encode("abc"))
+ * }).pipe(Effect.provide(Digest.layerWebCrypto))
+ *
+ * const hex = await Effect.runPromise(program.pipe(Effect.provide(WebCrypto.layer(globalThis.crypto))))
+ * hex.length // => 64
+ * ```
+ *
+ * @stability unstable
+ * @category layers
+ * @since 4.0.0
+ */
+export const layer = crypto => Layer.succeed(WebCrypto, crypto);
+//# sourceMappingURL=WebCrypto.js.map

package/dist/crypto/WebCrypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebCrypto.js","names":[],"sources":["../../src/crypto/WebCrypto.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;AAmBA,OAAO,KAAK,OAAO,MAAM,eAAe;AACxC,OAAO,KAAK,KAAK,MAAM,aAAa;AAEpC;;;;;;;;;;AAUA,OAAO,MAAM,SAAS,gBAA8B,OAAO,CAAC,SAAS,CAAS,yBAAyB,EAAE;EACvG,YAAY,EAAE,MAAM,UAAU,CAAC;CAChC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,OAAO,MAAM,KAAK,GAAI,MAAc,IAAyB,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC","ignoreList":[]}

package/dist/crypto/index.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Aead from "./Aead.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Cipher from "./Cipher.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as CryptoError from "./CryptoError.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Digest from "./Digest.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Kdf from "./Kdf.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as KeyAgreement from "./KeyAgreement.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as KeyFormat from "./KeyFormat.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as KeyWrap from "./KeyWrap.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Mac from "./Mac.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as SecureRandom from "./SecureRandom.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Signature from "./Signature.ts";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as WebCrypto from "./WebCrypto.ts";
+//# sourceMappingURL=index.d.ts.map