expo-device-crypto 0.1.0

package/build/DeviceCrypto.types.js

@@ -0,0 +1,26 @@
+export var GenerateKeyPairResult;
+(function (GenerateKeyPairResult) {
+    GenerateKeyPairResult["KEY_PAIR_GENERATED"] = "KEY_PAIR_GENERATED";
+    GenerateKeyPairResult["KEY_PAIR_ALREADY_EXISTS"] = "KEY_PAIR_ALREADY_EXISTS";
+    GenerateKeyPairResult["NOT_AVAILABLE"] = "NOT_AVAILABLE";
+})(GenerateKeyPairResult || (GenerateKeyPairResult = {}));
+export var AuthCheckResult;
+(function (AuthCheckResult) {
+    AuthCheckResult["AVAILABLE"] = "AVAILABLE";
+    AuthCheckResult["NO_HARDWARE"] = "NO_HARDWARE";
+    AuthCheckResult["UNAVAILABLE"] = "UNAVAILABLE";
+})(AuthCheckResult || (AuthCheckResult = {}));
+export var AuthMethod;
+(function (AuthMethod) {
+    AuthMethod["PASSCODE"] = "PASSCODE";
+    AuthMethod["PASSCODE_OR_BIOMETRIC"] = "PASSCODE_OR_BIOMETRIC";
+})(AuthMethod || (AuthMethod = {}));
+export var SigningAlgorithm;
+(function (SigningAlgorithm) {
+    SigningAlgorithm["ECDSA_SECP256R1_SHA256"] = "ECDSA_SECP256R1_SHA256";
+})(SigningAlgorithm || (SigningAlgorithm = {}));
+export var EncryptionAlgorithm;
+(function (EncryptionAlgorithm) {
+    EncryptionAlgorithm["RSA_2048_PKCS1"] = "RSA_2048_PKCS1";
+})(EncryptionAlgorithm || (EncryptionAlgorithm = {}));
+//# sourceMappingURL=DeviceCrypto.types.js.map

package/build/DeviceCrypto.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceCrypto.types.js","sourceRoot":"","sources":["../src/DeviceCrypto.types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,kEAAyC,CAAA;IACzC,4EAAmD,CAAA;IACnD,wDAA+B,CAAA;AACjC,CAAC,EAJW,qBAAqB,KAArB,qBAAqB,QAIhC;AAED,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,0CAAuB,CAAA;IACvB,8CAA2B,CAAA;IAC3B,8CAA2B,CAAA;AAC7B,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED,MAAM,CAAN,IAAY,UAGX;AAHD,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,6DAA+C,CAAA;AACjD,CAAC,EAHW,UAAU,KAAV,UAAU,QAGrB;AAED,MAAM,CAAN,IAAY,gBAEX;AAFD,WAAY,gBAAgB;IAC1B,qEAAiD,CAAA;AACnD,CAAC,EAFW,gBAAgB,KAAhB,gBAAgB,QAE3B;AAED,MAAM,CAAN,IAAY,mBAEX;AAFD,WAAY,mBAAmB;IAC7B,wDAAiC,CAAA;AACnC,CAAC,EAFW,mBAAmB,KAAnB,mBAAmB,QAE9B","sourcesContent":["export enum GenerateKeyPairResult {\n  KEY_PAIR_GENERATED = \"KEY_PAIR_GENERATED\",\n  KEY_PAIR_ALREADY_EXISTS = \"KEY_PAIR_ALREADY_EXISTS\",\n  NOT_AVAILABLE = \"NOT_AVAILABLE\",\n}\n\nexport enum AuthCheckResult {\n  AVAILABLE = \"AVAILABLE\",\n  NO_HARDWARE = \"NO_HARDWARE\",\n  UNAVAILABLE = \"UNAVAILABLE\",\n}\n\nexport enum AuthMethod {\n  PASSCODE = \"PASSCODE\",\n  PASSCODE_OR_BIOMETRIC = \"PASSCODE_OR_BIOMETRIC\",\n}\n\nexport enum SigningAlgorithm {\n  ECDSA_SECP256R1_SHA256 = \"ECDSA_SECP256R1_SHA256\",\n}\n\nexport enum EncryptionAlgorithm {\n  RSA_2048_PKCS1 = \"RSA_2048_PKCS1\",\n}\n\nexport interface GenerateKeyPairOptions {\n  /**\n   * The algorithm type of the key to generate.\n   */\n  algorithmType: SigningAlgorithm | EncryptionAlgorithm;\n  /**\n   * Whether to require authentication to sign.\n   * Setting this to true will prompt biometric or passcode authentication before signing.\n   *\n   * Please check the *`isAuthCheckAvailable`* function to see if authentication is available.\n   * If authentication is not available, generating a key pair will throw an error.\n   * @default false\n   */\n  requireAuthentication?: boolean;\n  /**\n   * The method of authentication to use.\n   * Note that on Android you have to define it when signing.\n   *\n   * If you want to allow to use Face ID, you need to add the following to your app.json config file:\n   * ```json\n   * \"ios\": {\n   *   \"infoPlist\": {\n   *     \"NSFaceIDUsageDescription\": \"We use Face ID to secure your data.\",\n   *   }\n   * }\n   * ```\n   * @default AuthMethod.PASSCODE_OR_BIOMETRIC\n   * @platform ios\n   */\n  authMethod?: AuthMethod;\n}\n\ninterface BaseSignDecryptOptions {\n  /**\n   * The title of the prompt to show when authentication is required.\n   * @default \"Unlock\"\n   * @platform android\n   */\n  promptTitle?: string;\n  /**\n   * The subtitle of the prompt to show when authentication is required.\n   * @default \"Enter your PIN to continue\"\n   * @platform android\n   */\n  promptSubtitle?: string;\n  /**\n   * The method of authentication to use.\n   * Note that on iOS you have to define it when generating the key pair.\n   * @default AuthMethod.PASSCODE_OR_BIOMETRIC\n   * @platform android\n   */\n  authMethod?: AuthMethod;\n}\n\ninterface BaseSigningOptions {\n  /**\n   * The algorithm type of the key to use for signing.\n   */\n  algorithmType?: SigningAlgorithm;\n}\n\ninterface BaseEncryptionOptions {\n  /**\n   * The algorithm type of the key to use for encrypting.\n   */\n  algorithmType?: EncryptionAlgorithm;\n}\n\nexport interface SignOptions extends BaseSignDecryptOptions, BaseSigningOptions {}\nexport interface VerifyOptions extends BaseSigningOptions {}\n\nexport interface DecryptOptions extends BaseSignDecryptOptions, BaseEncryptionOptions {}\nexport interface EncryptOptions extends BaseEncryptionOptions {}\n\nexport interface GetPublicKeyOptions {\n  /**\n   * The format of the public key to return.\n   * @default \"PEM\" (Base64 of PEM-encoded SubjectPublicKeyInfo (SPKI) for P‑256)\n   */\n  format?: \"PEM\";\n}\n"]}

package/build/DeviceCryptoModule.d.ts

@@ -0,0 +1,86 @@
+import { AuthCheckResult, GenerateKeyPairOptions, GenerateKeyPairResult, GetPublicKeyOptions, SignOptions, DecryptOptions, VerifyOptions, EncryptOptions } from "./DeviceCrypto.types";
+declare const _default: {
+    /**
+     * Checks if the biometric or passcode authentication is available.
+     * @returns The result of the operation.
+     */
+    isAuthCheckAvailable: () => AuthCheckResult;
+    /**
+     * Creates a new ECDSA P‑256 key pair for the given alias, if it doesn’t already exist.
+     * @param alias - The alias to use for the key pair.
+     * @returns The result of the operation.
+     */
+    generateKeyPair: (alias: string, options?: GenerateKeyPairOptions) => Promise<GenerateKeyPairResult>;
+    /**
+     * Returns the public key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param options - The options for the operation.
+     * @returns The public key.
+     */
+    getPublicKey: (alias: string, options?: GetPublicKeyOptions) => string | null;
+    /**
+     * Removes the key pair for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @returns True if the key pair was removed, false otherwise.
+     */
+    removeKeyPair: (alias: string) => boolean;
+    /**
+     * Lists the aliases for the key pairs.
+     * @returns The aliases.
+     */
+    aliases: () => string[];
+    /**
+     * Signs the given data with the private key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to sign.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: SigningAlgorithm.ECDSA_SHA256,
+     *  promptTitle: "Unlock",
+     *  promptSubtitle: "Enter your PIN to continue",
+     *  authMethod: AuthMethod.PASSCODE_OR_BIOMETRIC
+     * }
+     * @returns The signature.
+     */
+    sign: (alias: string, data: string, options?: SignOptions) => Promise<string | null>;
+    /**
+     * Verifies the given data with the signature for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to verify.
+     * @param signature - The signature to verify.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: SigningAlgorithm.ECDSA_SHA256,
+     * }
+     * @returns True if the signature is valid, false otherwise.
+     */
+    verify: (alias: string, data: string, signature: string, options?: VerifyOptions) => Promise<boolean | null>;
+    /**
+     * Signs the given data with the private key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to sign in UTF-8 format.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: EncryptionAlgorithm.RSA_2048_PKCS1,
+     * }
+     * @returns The signature.
+     */
+    encrypt: (alias: string, data: string, options?: EncryptOptions) => Promise<string | null>;
+    /**
+     * Decrypts the given data with the private key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to decrypt in Base64 format.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: EncryptionAlgorithm.RSA_2048_PKCS1,
+     *  promptTitle: "Unlock",
+     *  promptSubtitle: "Enter your PIN to continue",
+     *  authMethod: AuthMethod.PASSCODE_OR_BIOMETRIC
+     * }
+     * @returns The decrypted data.
+     */
+    decrypt: (alias: string, data: string, options?: DecryptOptions) => Promise<string | null>;
+};
+export default _default;
+export type { GenerateKeyPairResult };
+//# sourceMappingURL=DeviceCryptoModule.d.ts.map

package/build/DeviceCryptoModule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceCryptoModule.d.ts","sourceRoot":"","sources":["../src/DeviceCryptoModule.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EAEnB,WAAW,EACX,cAAc,EACd,aAAa,EAEb,cAAc,EAEf,MAAM,sBAAsB,CAAC;;IA6B5B;;;OAGG;gCAtBqB,eAAe;IAwBvC;;;;OAIG;6BAC4B,MAAM,YAAY,sBAAsB;IAQvE;;;;;OAKG;0BACmB,MAAM,YAAY,mBAAmB;IAQ3D;;;;OAIG;2BApDkB,MAAM,KAAG,OAAO;IAsDrC;;;OAGG;mBAxDQ,MAAM,EAAE;IA0DnB;;;;;;;;;;;;OAYG;kBACiB,MAAM,QAAQ,MAAM,YAAY,WAAW;IAS/D;;;;;;;;;;OAUG;oBAEM,MAAM,QACP,MAAM,aACD,MAAM,YACP,aAAa;IAOzB;;;;;;;;;OASG;qBACoB,MAAM,QAAQ,MAAM,YAAY,cAAc;IAMrE;;;;;;;;;;;;OAYG;qBACoB,MAAM,QAAQ,MAAM,YAAY,cAAc;;AArHvE,wBA8HE;AAEF,YAAY,EAAE,qBAAqB,EAAE,CAAC"}

package/build/DeviceCryptoModule.js

@@ -0,0 +1,132 @@
+import { requireNativeModule } from "expo";
+import { AuthMethod, SigningAlgorithm, EncryptionAlgorithm, } from "./DeviceCrypto.types";
+function base64ToPem(base64, label = "DATA") {
+    const normalized = base64.replace(/\s+/g, "");
+    const wrapped = normalized.match(/.{1,64}/g)?.join("\n") ?? "";
+    return `-----BEGIN ${label}-----\n${wrapped}\n-----END ${label}-----\n`;
+}
+const module = requireNativeModule("DeviceCrypto");
+export default {
+    /**
+     * Checks if the biometric or passcode authentication is available.
+     * @returns The result of the operation.
+     */
+    isAuthCheckAvailable: module.isAuthCheckAvailable,
+    /**
+     * Creates a new ECDSA P‑256 key pair for the given alias, if it doesn’t already exist.
+     * @param alias - The alias to use for the key pair.
+     * @returns The result of the operation.
+     */
+    generateKeyPair: async (alias, options) => {
+        const o = {
+            algoType: options?.algorithmType,
+            reqAuth: options?.requireAuthentication ?? false,
+            authMethod: options?.authMethod ?? AuthMethod.PASSCODE_OR_BIOMETRIC,
+        };
+        return module.generateKeyPair(alias, o);
+    },
+    /**
+     * Returns the public key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param options - The options for the operation.
+     * @returns The public key.
+     */
+    getPublicKey: (alias, options) => {
+        const publicKey = module.getPublicKey(alias);
+        if (!publicKey)
+            return null;
+        if (options?.format === "PEM") {
+            return base64ToPem(publicKey, "PUBLIC KEY");
+        }
+        return base64ToPem(publicKey, "PUBLIC KEY");
+    },
+    /**
+     * Removes the key pair for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @returns True if the key pair was removed, false otherwise.
+     */
+    removeKeyPair: module.removeKeyPair,
+    /**
+     * Lists the aliases for the key pairs.
+     * @returns The aliases.
+     */
+    aliases: module.aliases,
+    /**
+     * Signs the given data with the private key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to sign.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: SigningAlgorithm.ECDSA_SHA256,
+     *  promptTitle: "Unlock",
+     *  promptSubtitle: "Enter your PIN to continue",
+     *  authMethod: AuthMethod.PASSCODE_OR_BIOMETRIC
+     * }
+     * @returns The signature.
+     */
+    sign: async (alias, data, options) => {
+        const o = {
+            title: options?.promptTitle ?? "Unlock",
+            subtitle: options?.promptSubtitle ?? "Enter your PIN to continue",
+            authMethod: options?.authMethod ?? AuthMethod.PASSCODE_OR_BIOMETRIC,
+            algoType: options?.algorithmType ?? SigningAlgorithm.ECDSA_SECP256R1_SHA256,
+        };
+        return module.sign(alias, data, o);
+    },
+    /**
+     * Verifies the given data with the signature for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to verify.
+     * @param signature - The signature to verify.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: SigningAlgorithm.ECDSA_SHA256,
+     * }
+     * @returns True if the signature is valid, false otherwise.
+     */
+    verify: async (alias, data, signature, options) => {
+        const o = {
+            algoType: options?.algorithmType ?? SigningAlgorithm.ECDSA_SECP256R1_SHA256,
+        };
+        return module.verify(alias, data, signature, o);
+    },
+    /**
+     * Signs the given data with the private key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to sign in UTF-8 format.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: EncryptionAlgorithm.RSA_2048_PKCS1,
+     * }
+     * @returns The signature.
+     */
+    encrypt: async (alias, data, options) => {
+        const o = {
+            algoType: options?.algorithmType ?? EncryptionAlgorithm.RSA_2048_PKCS1,
+        };
+        return module.encrypt(alias, data, o);
+    },
+    /**
+     * Decrypts the given data with the private key for the given alias.
+     * @param alias - The alias to use for the key pair.
+     * @param data - The data to decrypt in Base64 format.
+     * @param options - The options for the operation.
+     * @default {
+     *  algoType: EncryptionAlgorithm.RSA_2048_PKCS1,
+     *  promptTitle: "Unlock",
+     *  promptSubtitle: "Enter your PIN to continue",
+     *  authMethod: AuthMethod.PASSCODE_OR_BIOMETRIC
+     * }
+     * @returns The decrypted data.
+     */
+    decrypt: async (alias, data, options) => {
+        const o = {
+            title: options?.promptTitle ?? "Unlock",
+            subtitle: options?.promptSubtitle ?? "Enter your PIN to continue",
+            authMethod: options?.authMethod ?? AuthMethod.PASSCODE_OR_BIOMETRIC,
+            algoType: options?.algorithmType ?? EncryptionAlgorithm.RSA_2048_PKCS1,
+        };
+        return module.decrypt(alias, data, o);
+    },
+};
+//# sourceMappingURL=DeviceCryptoModule.js.map

package/build/DeviceCryptoModule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceCryptoModule.js","sourceRoot":"","sources":["../src/DeviceCryptoModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAEzD,OAAO,EAKL,UAAU,EAIV,gBAAgB,EAEhB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAE9B,SAAS,WAAW,CAAC,MAAc,EAAE,KAAK,GAAG,MAAM;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAE/D,OAAO,cAAc,KAAK,UAAU,OAAO,cAAc,KAAK,SAAS,CAAC;AAC1E,CAAC;AAmBD,MAAM,MAAM,GAAG,mBAAmB,CAAqB,cAAc,CAAC,CAAC;AAEvE,eAAe;IACb;;;OAGG;IACH,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;IACjD;;;;OAIG;IACH,eAAe,EAAE,KAAK,EAAE,KAAa,EAAE,OAAgC,EAAE,EAAE;QACzE,MAAM,CAAC,GAAG;YACR,QAAQ,EAAE,OAAO,EAAE,aAAa;YAChC,OAAO,EAAE,OAAO,EAAE,qBAAqB,IAAI,KAAK;YAChD,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,qBAAqB;SACpE,CAAC;QACF,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD;;;;;OAKG;IACH,YAAY,EAAE,CAAC,KAAa,EAAE,OAA6B,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,OAAO,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9B,OAAO,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC9C,CAAC;IACD;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC,aAAa;IACnC;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB;;;;;;;;;;;;OAYG;IACH,IAAI,EAAE,KAAK,EAAE,KAAa,EAAE,IAAY,EAAE,OAAqB,EAAE,EAAE;QACjE,MAAM,CAAC,GAAG;YACR,KAAK,EAAE,OAAO,EAAE,WAAW,IAAI,QAAQ;YACvC,QAAQ,EAAE,OAAO,EAAE,cAAc,IAAI,4BAA4B;YACjE,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,qBAAqB;YACnE,QAAQ,EAAE,OAAO,EAAE,aAAa,IAAI,gBAAgB,CAAC,sBAAsB;SAC5E,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;IACD;;;;;;;;;;OAUG;IACH,MAAM,EAAE,KAAK,EACX,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,OAAuB,EACvB,EAAE;QACF,MAAM,CAAC,GAAG;YACR,QAAQ,EAAE,OAAO,EAAE,aAAa,IAAI,gBAAgB,CAAC,sBAAsB;SAC5E,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IACD;;;;;;;;;OASG;IACH,OAAO,EAAE,KAAK,EAAE,KAAa,EAAE,IAAY,EAAE,OAAwB,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG;YACR,QAAQ,EAAE,OAAO,EAAE,aAAa,IAAI,mBAAmB,CAAC,cAAc;SACvE,CAAC;QACF,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD;;;;;;;;;;;;OAYG;IACH,OAAO,EAAE,KAAK,EAAE,KAAa,EAAE,IAAY,EAAE,OAAwB,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG;YACR,KAAK,EAAE,OAAO,EAAE,WAAW,IAAI,QAAQ;YACvC,QAAQ,EAAE,OAAO,EAAE,cAAc,IAAI,4BAA4B;YACjE,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,qBAAqB;YACnE,QAAQ,EAAE,OAAO,EAAE,aAAa,IAAI,mBAAmB,CAAC,cAAc;SACvE,CAAC;QACF,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;CACF,CAAC","sourcesContent":["import { NativeModule, requireNativeModule } from \"expo\";\n\nimport {\n  AuthCheckResult,\n  GenerateKeyPairOptions,\n  GenerateKeyPairResult,\n  GetPublicKeyOptions,\n  AuthMethod,\n  SignOptions,\n  DecryptOptions,\n  VerifyOptions,\n  SigningAlgorithm,\n  EncryptOptions,\n  EncryptionAlgorithm,\n} from \"./DeviceCrypto.types\";\n\nfunction base64ToPem(base64: string, label = \"DATA\") {\n  const normalized = base64.replace(/\\s+/g, \"\");\n  const wrapped = normalized.match(/.{1,64}/g)?.join(\"\\n\") ?? \"\";\n\n  return `-----BEGIN ${label}-----\\n${wrapped}\\n-----END ${label}-----\\n`;\n}\n\ndeclare class DeviceCryptoModule extends NativeModule {\n  isAuthCheckAvailable(): AuthCheckResult;\n  generateKeyPair(alias: string, o: any): GenerateKeyPairResult;\n  getPublicKey(alias: string): string | null;\n  removeKeyPair(alias: string): boolean;\n  aliases(): string[];\n  sign(alias: string, data: string, o: any): Promise<string | null>;\n  verify(\n    alias: string,\n    data: string,\n    signature: string,\n    o: any\n  ): boolean | null;\n  encrypt(alias: string, data: string, o: any): Promise<string | null>;\n  decrypt(alias: string, data: string, o: any): Promise<string | null>;\n}\n\nconst module = requireNativeModule<DeviceCryptoModule>(\"DeviceCrypto\");\n\nexport default {\n  /**\n   * Checks if the biometric or passcode authentication is available.\n   * @returns The result of the operation.\n   */\n  isAuthCheckAvailable: module.isAuthCheckAvailable,\n  /**\n   * Creates a new ECDSA P‑256 key pair for the given alias, if it doesn’t already exist.\n   * @param alias - The alias to use for the key pair.\n   * @returns The result of the operation.\n   */\n  generateKeyPair: async (alias: string, options?: GenerateKeyPairOptions) => {\n    const o = {\n      algoType: options?.algorithmType,\n      reqAuth: options?.requireAuthentication ?? false,\n      authMethod: options?.authMethod ?? AuthMethod.PASSCODE_OR_BIOMETRIC,\n    };\n    return module.generateKeyPair(alias, o);\n  },\n  /**\n   * Returns the public key for the given alias.\n   * @param alias - The alias to use for the key pair.\n   * @param options - The options for the operation.\n   * @returns The public key.\n   */\n  getPublicKey: (alias: string, options?: GetPublicKeyOptions) => {\n    const publicKey = module.getPublicKey(alias);\n    if (!publicKey) return null;\n    if (options?.format === \"PEM\") {\n      return base64ToPem(publicKey, \"PUBLIC KEY\");\n    }\n    return base64ToPem(publicKey, \"PUBLIC KEY\");\n  },\n  /**\n   * Removes the key pair for the given alias.\n   * @param alias - The alias to use for the key pair.\n   * @returns True if the key pair was removed, false otherwise.\n   */\n  removeKeyPair: module.removeKeyPair,\n  /**\n   * Lists the aliases for the key pairs.\n   * @returns The aliases.\n   */\n  aliases: module.aliases,\n  /**\n   * Signs the given data with the private key for the given alias.\n   * @param alias - The alias to use for the key pair.\n   * @param data - The data to sign.\n   * @param options - The options for the operation.\n   * @default { \n   *  algoType: SigningAlgorithm.ECDSA_SHA256, \n   *  promptTitle: \"Unlock\", \n   *  promptSubtitle: \"Enter your PIN to continue\", \n   *  authMethod: AuthMethod.PASSCODE_OR_BIOMETRIC \n   * }\n   * @returns The signature.\n   */\n  sign: async (alias: string, data: string, options?: SignOptions) => {\n    const o = {\n      title: options?.promptTitle ?? \"Unlock\",\n      subtitle: options?.promptSubtitle ?? \"Enter your PIN to continue\",\n      authMethod: options?.authMethod ?? AuthMethod.PASSCODE_OR_BIOMETRIC,\n      algoType: options?.algorithmType ?? SigningAlgorithm.ECDSA_SECP256R1_SHA256,\n    };\n    return module.sign(alias, data, o);\n  },\n  /**\n   * Verifies the given data with the signature for the given alias.\n   * @param alias - The alias to use for the key pair.\n   * @param data - The data to verify.\n   * @param signature - The signature to verify.\n   * @param options - The options for the operation.\n   * @default { \n   *  algoType: SigningAlgorithm.ECDSA_SHA256, \n   * }\n   * @returns True if the signature is valid, false otherwise.\n   */\n  verify: async (\n    alias: string,\n    data: string,\n    signature: string,\n    options?: VerifyOptions\n  ) => {\n    const o = {\n      algoType: options?.algorithmType ?? SigningAlgorithm.ECDSA_SECP256R1_SHA256,\n    };\n    return module.verify(alias, data, signature, o);\n  },\n  /**\n   * Signs the given data with the private key for the given alias.\n   * @param alias - The alias to use for the key pair.\n   * @param data - The data to sign in UTF-8 format.\n   * @param options - The options for the operation.\n   * @default { \n   *  algoType: EncryptionAlgorithm.RSA_2048_PKCS1, \n   * }\n   * @returns The signature.\n   */\n  encrypt: async (alias: string, data: string, options?: EncryptOptions) => {\n    const o = {\n      algoType: options?.algorithmType ?? EncryptionAlgorithm.RSA_2048_PKCS1,\n    };\n    return module.encrypt(alias, data, o);\n  },\n  /**\n   * Decrypts the given data with the private key for the given alias.\n   * @param alias - The alias to use for the key pair.\n   * @param data - The data to decrypt in Base64 format.\n   * @param options - The options for the operation.\n   * @default { \n   *  algoType: EncryptionAlgorithm.RSA_2048_PKCS1, \n   *  promptTitle: \"Unlock\", \n   *  promptSubtitle: \"Enter your PIN to continue\", \n   *  authMethod: AuthMethod.PASSCODE_OR_BIOMETRIC \n   * }\n   * @returns The decrypted data.\n   */\n  decrypt: async (alias: string, data: string, options?: DecryptOptions) => {\n    const o = {\n      title: options?.promptTitle ?? \"Unlock\",\n      subtitle: options?.promptSubtitle ?? \"Enter your PIN to continue\",\n      authMethod: options?.authMethod ?? AuthMethod.PASSCODE_OR_BIOMETRIC,\n      algoType: options?.algorithmType ?? EncryptionAlgorithm.RSA_2048_PKCS1,\n    };\n    return module.decrypt(alias, data, o);\n  },\n};\n\nexport type { GenerateKeyPairResult };\n"]}

package/build/index.d.ts

@@ -0,0 +1,3 @@
+export { default } from './DeviceCryptoModule';
+export * from './DeviceCrypto.types';
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,cAAc,sBAAsB,CAAC"}

package/build/index.js

@@ -0,0 +1,3 @@
+export { default } from './DeviceCryptoModule';
+export * from './DeviceCrypto.types';
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,cAAc,sBAAsB,CAAC","sourcesContent":["export { default } from './DeviceCryptoModule';\nexport * from './DeviceCrypto.types';\n"]}

package/expo-module.config.json

@@ -0,0 +1,9 @@
+{
+  "platforms": ["apple", "android"],
+  "apple": {
+    "modules": ["DeviceCryptoModule"]
+  },
+  "android": {
+    "modules": ["expo.modules.devicecrypto.DeviceCryptoModule"]
+  }
+}

package/ios/DeviceCrypto.podspec

@@ -0,0 +1,23 @@
+Pod::Spec.new do |s|
+  s.name           = 'DeviceCrypto'
+  s.version        = '0.1.0'
+  s.summary        = 'Device crypto'
+  s.description    = 'Device crypto for Expo using device hardware capabilities'
+  s.author         = 'Piotr Pietras'
+  s.homepage       = 'https://docs.expo.dev/modules/'
+  s.platforms      = {
+    :ios => '15.1',
+    :tvos => '15.1'
+  }
+  s.source         = { git: '' }
+  s.static_framework = true
+
+  s.dependency 'ExpoModulesCore'
+
+  # Swift/Objective-C compatibility
+  s.pod_target_xcconfig = {
+    'DEFINES_MODULE' => 'YES',
+  }
+
+  s.source_files = "**/*.{h,m,mm,swift,hpp,cpp}"
+end