effect 4.0.7 → 4.1.0

package/dist/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;GAGG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC;;;GAGG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC;;;GAGG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C;;;GAGG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC;;;GAGG;AACH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAE/B;;;GAGG;AACH,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;;GAGG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C;;;GAGG;AACH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AAEvC;;;GAGG;AACH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAE/B;;;GAGG;AACH,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;;GAGG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C;;;GAGG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA"}

package/dist/crypto/index.js

@@ -0,0 +1,66 @@
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+// @barrel: Auto-generated exports. Do not edit manually.
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Aead from "./Aead.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Cipher from "./Cipher.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as CryptoError from "./CryptoError.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Digest from "./Digest.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Kdf from "./Kdf.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as KeyAgreement from "./KeyAgreement.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as KeyFormat from "./KeyFormat.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as KeyWrap from "./KeyWrap.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Mac from "./Mac.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as SecureRandom from "./SecureRandom.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as Signature from "./Signature.js";
+/**
+ * @stability unstable
+ * @since 4.0.0
+ */
+export * as WebCrypto from "./WebCrypto.js";
+//# sourceMappingURL=index.js.map

package/dist/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/crypto/index.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;AAKA;AAEA;;;;AAIA,OAAO,KAAK,IAAI,MAAM,WAAW;AAEjC;;;;AAIA,OAAO,KAAK,MAAM,MAAM,aAAa;AAErC;;;;AAIA,OAAO,KAAK,WAAW,MAAM,kBAAkB;AAE/C;;;;AAIA,OAAO,KAAK,MAAM,MAAM,aAAa;AAErC;;;;AAIA,OAAO,KAAK,GAAG,MAAM,UAAU;AAE/B;;;;AAIA,OAAO,KAAK,YAAY,MAAM,mBAAmB;AAEjD;;;;AAIA,OAAO,KAAK,SAAS,MAAM,gBAAgB;AAE3C;;;;AAIA,OAAO,KAAK,OAAO,MAAM,cAAc;AAEvC;;;;AAIA,OAAO,KAAK,GAAG,MAAM,UAAU;AAE/B;;;;AAIA,OAAO,KAAK,YAAY,MAAM,mBAAmB;AAEjD;;;;AAIA,OAAO,KAAK,SAAS,MAAM,gBAAgB;AAE3C;;;;AAIA,OAAO,KAAK,SAAS,MAAM,gBAAgB","ignoreList":[]}

package/dist/crypto/internal/asymmetric.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=asymmetric.d.ts.map

package/dist/crypto/internal/asymmetric.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asymmetric.d.ts","sourceRoot":"","sources":["../../../src/crypto/internal/asymmetric.ts"],"names":[],"mappings":""}

package/dist/crypto/internal/asymmetric.js

@@ -0,0 +1,210 @@
+import * as Effect from "../../Effect.js";
+import * as Predicate from "../../Predicate.js";
+import * as CryptoError from "../CryptoError.js";
+import * as KeyModel from "./key.js";
+import * as internal from "./webCrypto.js";
+// RFC 8410: the PKCS#8 encoding of a 32-byte Ed25519 or X25519 private key is
+// this prefix, ending in the algorithm's OID byte, followed by the key.
+const seedPrefix = oid => Uint8Array.of(48, 46, 2, 1, 0, 48, 5, 6, 3, 43, 101, oid, 4, 34, 4, 32);
+/** @internal */
+export const ed25519Prefix = /*#__PURE__*/seedPrefix(112);
+/** @internal */
+export const x25519Prefix = /*#__PURE__*/seedPrefix(110);
+const seedLength = 32;
+/**
+ * Coordinate sizes in bytes, which are also the sizes of an ECDSA signature's
+ * `r` and `s` and of an ECDH shared secret.
+ *
+ * @internal
+ */
+export const coordinateSizes = {
+  "P-256": 32,
+  "P-384": 48,
+  "P-521": 66
+};
+/**
+ * Checks raw Ed25519 or X25519 key length, with guidance for 64-byte seeds.
+ *
+ * @internal
+ */
+export const checkSeedLength = (name, role) => bytes => {
+  if (bytes.length === seedLength) return undefined;
+  if (role === "private" && bytes.length === 64) {
+    return `Expected the 32-byte ${name} seed, not the 64-byte seed‖public key form: pass its first 32 bytes`;
+  }
+  return `Expected a ${seedLength}-byte ${name} ${role} key, not ${bytes.length} bytes`;
+};
+/**
+ * Checks the encoding of a raw EC public key: an uncompressed SEC1 point,
+ * `0x04` followed by both coordinates. Whether the point is on the curve is
+ * checked when the key is first used.
+ *
+ * @internal
+ */
+export const checkPoint = curve => bytes => {
+  const length = 1 + 2 * coordinateSizes[curve];
+  if (bytes.length !== length) return `Expected a ${length}-byte uncompressed ${curve} point, not ${bytes.length} bytes`;
+  return bytes[0] === 4 ? undefined : `Expected an uncompressed ${curve} point, starting with 0x04`;
+};
+/** @internal */
+export const checkNamedCurve = curve => algorithm => {
+  const namedCurve = algorithm.namedCurve;
+  return namedCurve === curve ? undefined : `Expected a ${curve} key, not ${namedCurve}`;
+};
+/** @internal */
+export const checkHash = hash => algorithm => {
+  const keyHash = algorithm.hash?.name;
+  return keyHash === hash ? undefined : `Expected a key for ${hash}, not ${keyHash}`;
+};
+/** @internal */
+export const rsaGenerateParams = (spec, modulusLength) => ({
+  ...spec.importParams,
+  modulusLength,
+  publicExponent: Uint8Array.of(1, 0, 1)
+});
+/**
+ * Synchronously validates and wraps a `CryptoKey`.
+ *
+ * @internal
+ */
+export const fromCryptoKey = (family, method, algorithm, role, cryptoKey) => {
+  const spec = family.specOf(algorithm);
+  return KeyModel.fromCryptoKey(family.module, method, role === "private" ? family.privateKeyProto : family.publicKeyProto, algorithm, cryptoKey, {
+    type: role,
+    name: spec.name,
+    usages: role === "private" ? spec.privateUsages : spec.publicUsages,
+    usagePolicy: "all",
+    check: spec.check
+  });
+};
+const concat = (prefix, bytes) => {
+  const out = new Uint8Array(prefix.length + bytes.length);
+  out.set(prefix);
+  out.set(bytes, prefix.length);
+  return out;
+};
+/** @internal */
+export const importPrivate = (subtle, bytes, spec, extractable) => subtle.importKey("pkcs8", spec.seedPrefix === undefined ? bytes : concat(spec.seedPrefix, bytes), spec.importParams, extractable, spec.privateUsages);
+/** @internal */
+export const importPublic = (subtle, bytes, spec) => subtle.importKey(spec.publicFormat, bytes, spec.importParams, true, spec.publicUsages);
+/**
+ * Exports a private `CryptoKey` to its stored form: the seed for Ed25519 and
+ * X25519, PKCS#8 otherwise. A seed export in another PKCS#8 form is one the
+ * layer cannot read, so it fails with `Unsupported`.
+ */
+const exportPrivate = async (subtle, cryptoKey, spec) => {
+  const pkcs8 = new Uint8Array(await subtle.exportKey("pkcs8", cryptoKey));
+  const prefix = spec.seedPrefix;
+  if (prefix === undefined) return pkcs8;
+  if (pkcs8.length !== prefix.length + seedLength || !prefix.every((byte, i) => pkcs8[i] === byte)) {
+    throw new internal.Failure(new CryptoError.Unsupported({
+      description: `${spec.name} private key was exported in an unexpected PKCS#8 form`
+    }));
+  }
+  return pkcs8.slice(prefix.length);
+};
+const exportPublic = async (subtle, cryptoKey, spec) => new Uint8Array(await subtle.exportKey(spec.publicFormat, cryptoKey));
+/** @internal */
+export const exportKey = (subtle, cryptoKey, spec, role) => role === "private" ? exportPrivate(subtle, cryptoKey, spec) : exportPublic(subtle, cryptoKey, spec);
+/**
+ * Exports a key's stored representation as fresh bytes, reading the
+ * `WebCrypto` reference for `CryptoKey`-backed keys.
+ *
+ * @internal
+ */
+export const toBytes = (family, key) => KeyModel.toBytes(family.module, key, (subtle, cryptoKey) => exportKey(subtle, cryptoKey, family.specOf(key.algorithm), family.isPrivateKey(key) ? "private" : "public"));
+/**
+ * Per-layer caches for imported byte-backed keys.
+ *
+ * @internal
+ */
+export const makeCaches = family => ({
+  privateKey: KeyModel.makeCache((subtle, bytes, algorithm) => importPrivate(subtle, bytes, family.specOf(algorithm), false)),
+  publicKey: KeyModel.makeCache((subtle, bytes, algorithm) => importPublic(subtle, bytes, family.specOf(algorithm)))
+});
+/**
+ * Computes the stored public key of an extractable private `CryptoKey`.
+ *
+ * WebCrypto cannot derive a public key directly, but a private key's JWK
+ * export carries the public members, which import as a public key.
+ */
+const publicOf = async (subtle, privateKey, spec) => {
+  const {
+    d,
+    p,
+    q,
+    dp,
+    dq,
+    qi,
+    oth,
+    key_ops,
+    ext,
+    alg,
+    ...jwk
+  } = await subtle.exportKey("jwk", privateKey);
+  const publicKey = await subtle.importKey("jwk", jwk, spec.importParams, true, spec.publicUsages);
+  return exportPublic(subtle, publicKey, spec);
+};
+/**
+ * Generates a key pair in its stored forms. Ed25519 and X25519 private keys
+ * are 32 bytes from `SecureRandom`, so a seeded `SecureRandom` reproduces
+ * them. EC and RSA keys come from WebCrypto's own randomness.
+ *
+ * @internal
+ */
+export const generateKeyPair = (family, crypto, random, algorithm, params) => {
+  const spec = family.specOf(algorithm);
+  const generate = async (subtle, seed) => {
+    if (seed !== undefined) {
+      const privateKey = await importPrivate(subtle, seed, spec, true);
+      return {
+        privateKey: seed,
+        publicKey: await publicOf(subtle, privateKey, spec)
+      };
+    }
+    const usages = [...new Set([...spec.privateUsages, ...spec.publicUsages])];
+    const pair = await subtle.generateKey(params, true, usages);
+    return {
+      privateKey: await exportPrivate(subtle, pair.privateKey, spec),
+      publicKey: await exportPublic(subtle, pair.publicKey, spec)
+    };
+  };
+  return Effect.flatMap(spec.seedPrefix === undefined ? Effect.undefined : random.randomBytes(seedLength), seed => Effect.map(internal.run(family.module, "generateKeyPair", algorithm.name, crypto, subtle => generate(subtle, seed)), ({
+    privateKey,
+    publicKey
+  }) => ({
+    privateKey: KeyModel.makeBytes(family.privateKeyProto, algorithm, privateKey),
+    publicKey: KeyModel.makeBytes(family.publicKeyProto, algorithm, publicKey)
+  })));
+};
+/**
+ * Computes the public key of a private key, failing with `NotExtractable`
+ * for a non-extractable `CryptoKey`, whose public members cannot be read.
+ *
+ * @internal
+ */
+export const publicKeyOf = (family, crypto, privateKey) => Effect.suspend(() => {
+  const stored = KeyModel.material(privateKey);
+  if (stored._tag === "CryptoKey" && !stored.cryptoKey.extractable) {
+    return internal.notExtractable(family.module, "publicKeyOf");
+  }
+  const spec = family.specOf(privateKey.algorithm);
+  return Effect.map(internal.run(family.module, "publicKeyOf", privateKey.algorithm.name, crypto, async subtle => publicOf(subtle, stored._tag === "CryptoKey" ? stored.cryptoKey : await importPrivate(subtle, stored.bytes, spec, true), spec)), bytes => KeyModel.makeBytes(family.publicKeyProto, privateKey.algorithm, bytes));
+});
+/**
+ * Deno imports raw EC points that are not on the curve and rejects them with
+ * a `TypeError` when the key is used. For a byte-backed public key only the
+ * key can cause that, so it is `InvalidKey`. Any other `TypeError`, such as a
+ * `CryptoKey` from another `Crypto` object, stays a defect.
+ *
+ * @internal
+ */
+export const publicKeyError = (module, method, publicKey, cause) => KeyModel.material(publicKey)._tag === "Bytes" && Predicate.hasProperty(cause, "name") && cause.name === "TypeError" ? new CryptoError.CryptoError({
+  module,
+  method,
+  reason: new CryptoError.InvalidKey({
+    description: "Invalid public key",
+    cause
+  })
+}) : internal.webCryptoError(module, method, publicKey.algorithm.name, cause);
+//# sourceMappingURL=asymmetric.js.map

package/dist/crypto/internal/asymmetric.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asymmetric.js","names":[],"sources":["../../../src/crypto/internal/asymmetric.ts"],"sourcesContent":[null],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,iBAAiB;AACzC,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,KAAK,WAAW,MAAM,mBAAmB;AAEhD,OAAO,KAAK,QAAQ,MAAM,UAAU;AACpC,OAAO,KAAK,QAAQ,MAAM,gBAAgB;AAwC1C;AACA;AACA,MAAM,UAAU,GAAI,GAAW,IAAiB,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;AAEvH;AACA,OAAO,MAAM,aAAa,gBAAG,UAAU,CAAC,GAAG,CAAC;AAE5C;AACA,OAAO,MAAM,YAAY,gBAAG,UAAU,CAAC,GAAG,CAAC;AAE3C,MAAM,UAAU,GAAG,EAAE;AAKrB;;;;;;AAMA,OAAO,MAAM,eAAe,GAA0B;EAAE,OAAO,EAAE,EAAE;EAAE,OAAO,EAAE,EAAE;EAAE,OAAO,EAAE;AAAE,CAAE;AAE/F;;;;;AAKA,OAAO,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,IAAU,KAAM,KAAiB,IAAwB;EACrG,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,OAAO,SAAS;EACjD,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE;IAC7C,OAAO,wBAAwB,IAAI,sEAAsE;EAC3G;EACA,OAAO,cAAc,UAAU,SAAS,IAAI,IAAI,IAAI,aAAa,KAAK,CAAC,MAAM,QAAQ;AACvF,CAAC;AAED;;;;;;;AAOA,OAAO,MAAM,UAAU,GAAI,KAAY,IAAM,KAAiB,IAAwB;EACpF,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC;EAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,OAAO,cAAc,MAAM,sBAAsB,KAAK,eAAe,KAAK,CAAC,MAAM,QAAQ;EACtH,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,4BAA4B,KAAK,4BAA4B;AACnG,CAAC;AAED;AACA,OAAO,MAAM,eAAe,GAAI,KAAY,IAAM,SAAuB,IAAwB;EAC/F,MAAM,UAAU,GAAI,SAA4B,CAAC,UAAU;EAC3D,OAAO,UAAU,KAAK,KAAK,GAAG,SAAS,GAAG,cAAc,KAAK,aAAa,UAAU,EAAE;AACxF,CAAC;AAED;AACA,OAAO,MAAM,SAAS,GAAI,IAAY,IAAM,SAAuB,IAAwB;EACzF,MAAM,OAAO,GAAI,SAAmC,CAAC,IAAI,EAAE,IAAI;EAC/D,OAAO,OAAO,KAAK,IAAI,GAAG,SAAS,GAAG,sBAAsB,IAAI,SAAS,OAAO,EAAE;AACpF,CAAC;AAED;AACA,OAAO,MAAM,iBAAiB,GAAG,CAAC,IAAU,EAAE,aAAqB,MAA6B;EAC9F,GAAG,IAAI,CAAC,YAAqC;EAC7C,aAAa;EACb,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;CACtC,CAAC;AAEF;;;;;AAKA,OAAO,MAAM,aAAa,GAAG,CAC3B,MAAc,EACd,MAAc,EACd,SAAkB,EAClB,IAAU,EACV,SAAoB,KACyB;EAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;EACrC,OAAO,QAAQ,CAAC,aAAa,CAC3B,MAAM,CAAC,MAAM,EACb,MAAM,EACN,IAAI,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,EACnE,SAAS,EACT,SAAS,EACT;IACE,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,MAAM,EAAE,IAAI,KAAK,SAAS,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY;IACnE,WAAW,EAAE,KAAK;IAClB,KAAK,EAAE,IAAI,CAAC;GACb,CACF;AACH,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAE,KAAiB,KAAgB;EACnE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;EACxD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;EACf,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;EAC7B,OAAO,GAAG;AACZ,CAAC;AAED;AACA,OAAO,MAAM,aAAa,GAAG,CAC3B,MAAoB,EACpB,KAAiB,EACjB,IAAU,EACV,WAAoB,KAEpB,MAAM,CAAC,SAAS,CACd,OAAO,EACN,IAAI,CAAC,UAAU,KAAK,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EACvE,IAAI,CAAC,YAAY,EACjB,WAAW,EACX,IAAI,CAAC,aAAgC,CACtC;AAEH;AACA,OAAO,MAAM,YAAY,GAAG,CAAC,MAAoB,EAAE,KAAiB,EAAE,IAAU,KAC9E,MAAM,CAAC,SAAS,CACd,IAAI,CAAC,YAAY,EACjB,KAAqB,EACrB,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,YAA+B,CACrC;AAEH;;;;;AAKA,MAAM,aAAa,GAAG,OAAO,MAAoB,EAAE,SAAoB,EAAE,IAAU,KAAyB;EAC1G,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;EACxE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU;EAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,OAAO,KAAK;EACtC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE;IAChG,MAAM,IAAI,QAAQ,CAAC,OAAO,CACxB,IAAI,WAAW,CAAC,WAAW,CAAC;MAAE,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI;IAAwD,CAAE,CAAC,CACnH;EACH;EACA,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;AACnC,CAAC;AAED,MAAM,YAAY,GAAG,OAAO,MAAoB,EAAE,SAAoB,EAAE,IAAU,KAChF,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAEtE;AACA,OAAO,MAAM,SAAS,GAAG,CAAC,MAAoB,EAAE,SAAoB,EAAE,IAAU,EAAE,IAAU,KAC1F,IAAI,KAAK,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC;AAErG;;;;;;AAMA,OAAO,MAAM,OAAO,GAAG,CACrB,MAAc,EACd,GAAsD,KAEtD,QAAQ,CAAC,OAAO,CACd,MAAM,CAAC,MAAM,EACb,GAAG,EACH,CAAC,MAAM,EAAE,SAAS,KAChB,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,QAAQ,CAAC,CAC9G;AAEH;;;;;AAKA,OAAO,MAAM,UAAU,GAAI,MAAc,KAAM;EAC7C,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,KACtD,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAC9D;EACD,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,KAAK,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;CAClH,CAAC;AAEF;;;;;;AAMA,MAAM,QAAQ,GAAG,OAAO,MAAoB,EAAE,UAAqB,EAAE,IAAU,KAAyB;EACtG,MAAM;IAAE,CAAC;IAAE,CAAC;IAAE,CAAC;IAAE,EAAE;IAAE,EAAE;IAAE,EAAE;IAAE,GAAG;IAAE,OAAO;IAAE,GAAG;IAAE,GAAG;IAAE,GAAG;EAAG,CAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC;EACzG,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,YAA+B,CAAC;EACnH,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;;;AAOA,OAAO,MAAM,eAAe,GAAG,CAC7B,MAAc,EACd,MAA0B,EAC1B,MAA4C,EAC5C,SAAoC,EACpC,MAAoE,KACtB;EAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;EACrC,MAAM,QAAQ,GAAG,OAAO,MAAoB,EAAE,IAA4B,KAAI;IAC5E,IAAI,IAAI,KAAK,SAAS,EAAE;MACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;MAChE,OAAO;QAAE,UAAU,EAAE,IAAI;QAAE,SAAS,EAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI;MAAC,CAAE;IAClF;IACA,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAkB;IAC5E,OAAO;MACL,UAAU,EAAE,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC;MAC9D,SAAS,EAAE,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI;KAC3D;EACH,CAAC;EACD,OAAO,MAAM,CAAC,OAAO,CACnB,IAAI,CAAC,UAAU,KAAK,SAAS,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAChF,IAAI,IACH,MAAM,CAAC,GAAG,CACR,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAG,MAAM,IAAK,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAC1G,CAAC;IAAE,UAAU;IAAE;EAAS,CAAE,MACvB;IACC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,UAAU,CAAC;IAC7E,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS;GAC1E,CAAO,CACX,CACJ;AACH,CAAC;AAED;;;;;;AAMA,OAAO,MAAM,WAAW,GAAG,CACzB,MAAc,EACd,MAA0B,EAC1B,UAA6D,KAE7D,MAAM,CAAC,OAAO,CAAC,MAAK;EAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;EAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;IAChE,OAAO,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;EAC9D;EACA,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;EAChD,OAAO,MAAM,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAO,MAAM,IACzF,QAAQ,CACN,MAAM,EACN,MAAM,CAAC,IAAI,KAAK,WAAW,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EACtG,IAAI,CACL,CAAC,EACH,KAAK,IAAK,QAAQ,CAAC,SAAS,CAAI,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CACrF;AACH,CAAC,CAAC;AAEJ;;;;;;;;AAQA,OAAO,MAAM,cAAc,GAAG,CAC5B,MAAc,EACd,MAAc,EACd,SAA4D,EAC5D,KAAc,KAEd,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,GAC/G,IAAI,WAAW,CAAC,WAAW,CAAC;EAC5B,MAAM;EACN,MAAM;EACN,MAAM,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC;IAAE,WAAW,EAAE,oBAAoB;IAAE;EAAK,CAAE;CAChF,CAAC,GACA,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC","ignoreList":[]}

package/dist/crypto/internal/chacha.d.ts

@@ -0,0 +1,46 @@
+/**
+ * ChaCha20-Poly1305 (RFC 8439) and XChaCha20-Poly1305
+ * (draft-irtf-cfrg-xchacha-03), vendored from `@noble/ciphers`.
+ *
+ * Upstream: https://github.com/paulmillr/noble-ciphers
+ * Version: 2.4.0, commit d9e8a6a599e7ed729d9be03854c46a3c73bd9a79
+ * Files: `src/chacha.ts` (`chachaCore`, `hchacha`, `chacha20`, `xchacha20`,
+ * `_poly1305_aead`), `src/_arx.ts` (`createCipher`), `src/_poly1305.ts`
+ * (`Poly1305`), and the helpers they use from `src/utils.ts`. `@noble/ciphers`
+ * 1.0.0 was audited by Cure53 in 2024.
+ *
+ * Changes from upstream: merged into one file, removed the `TArg`/`TRet` type
+ * helpers, `@example` blocks, the reduced-round and original ChaCha variants,
+ * the PRGs, and the `wrapCipher` argument wrapper, whose checks the `Aead`
+ * layers run before calling this code. `Poly1305` is constructed directly
+ * instead of through `wrapMacConstructor`, and `decrypt` returns `undefined`
+ * on a tag mismatch instead of throwing, so any exception is a bug. The
+ * cipher core, Poly1305 arithmetic, and AEAD construction are unchanged.
+ *
+ * The MIT License (MIT)
+ *
+ * Copyright (c) 2022 Paul Miller (https://paulmillr.com)
+ * Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ *
+ * @internal
+ */
+export {};
+//# sourceMappingURL=chacha.d.ts.map

package/dist/crypto/internal/chacha.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chacha.d.ts","sourceRoot":"","sources":["../../../src/crypto/internal/chacha.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG"}