inray 0.0.9 → 0.0.10

package/dist/jose/src/lib/content_encryption.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,19 +7,19 @@
  */
 /***/
 import { concat, uint64be } from './buffer_utils.js';
-import { checkCryptoKey } from './crypto_key.js';
-import { invalidKeyInput } from './invalid_key_input.js';
+import { rawKey, invalidKeyInput, isCryptoKey } from './key.js';
 import { JWEDecryptionFailed, JWEInvalid } from '../util/errors.js';
-import { isCryptoKey } from './is_key_like.js';
 // --- CEK ---
+// draft-ietf-jose-hpke-encrypt-22, Section 7.1, step 2: random CEK of the required length.
 export const generateCek = (enc) => crypto.getRandomValues(new Uint8Array(enc.cekBits >> 3));
-function checkCekLength(cek, expected) {
+export function checkCekLength(cek, expected) {
     const actual = cek.byteLength << 3;
     if (actual !== expected) {
         throw new JWEInvalid(`Invalid Content Encryption Key length. Expected ${expected} bits, got ${actual} bits`);
     }
 }
 // --- IV ---
+// draft-ietf-jose-hpke-encrypt-22, Section 7.1, step 10: random IV of the required length.
 export const generateIv = (enc) => crypto.getRandomValues(new Uint8Array(enc.ivBits >> 3));
 export function checkIvLength(enc, iv) {
     if (iv.length << 3 !== enc.ivBits) {
@@ -31,26 +31,31 @@ async function cbcKeySetup(enc, cek, usage) {
     if (!(cek instanceof Uint8Array)) {
         throw new TypeError(invalidKeyInput(cek, 'Uint8Array'));
     }
-    const keySize = enc.cekBits >> 1;
-    const encKey = await crypto.subtle.importKey('raw', cek.subarray(keySize >> 3), 'AES-CBC', false, [usage]);
-    const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keySize >> 3), {
-        hash: `SHA-${keySize << 1}`,
-        name: 'HMAC',
+    // RFC 7518, Section 5.2.2.1, step 1: MAC_KEY precedes ENC_KEY in the CEK.
+    const keyLengthBits = enc.cekBits >> 1;
+    const encKey = await crypto.subtle.importKey('raw', cek.subarray(keyLengthBits >> 3), 'AES-CBC', false, [usage]);
+    const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keyLengthBits >> 3), {
+        hash: `SHA-${keyLengthBits << 1}`,
+        name: 'HMAC'
     }, false, ['sign']);
-    return [encKey, macKey, keySize];
+    return [encKey, macKey, keyLengthBits];
 }
-async function cbcHmacTag(macKey, macData, keySize) {
-    return new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));
+async function cbcHmacTag(macKey, macData, keyLengthBits) {
+    // RFC 7518, Section 5.2.2.1, step 5: truncate the HMAC output to T_LEN octets.
+    return new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keyLengthBits >> 3));
 }
 // --- CBC encrypt/decrypt ---
 async function cbcEncrypt(enc, plaintext, cek, iv, aad) {
-    const [encKey, macKey, keySize] = await cbcKeySetup(enc, cek, 'encrypt');
+    const [encKey, macKey, keyLengthBits] = await cbcKeySetup(enc, cek, 'encrypt');
+    // RFC 7518, Section 5.2.2.1, step 3: AES-CBC encryption with PKCS #7 padding.
     const ciphertext = new Uint8Array(await crypto.subtle.encrypt({
         iv: iv,
-        name: 'AES-CBC',
+        name: 'AES-CBC'
     }, encKey, plaintext));
-    const macData = concat(aad, iv, ciphertext, uint64be(aad.length * 8));
-    const tag = await cbcHmacTag(macKey, macData, keySize);
+    // RFC 7518, Section 5.2.2.1, steps 4-5: AL encodes the bit length of AAD.
+    const al = uint64be(aad.length * 8);
+    const macData = concat(aad, iv, ciphertext, al);
+    const tag = await cbcHmacTag(macKey, macData, keyLengthBits);
     return { ciphertext, tag, iv };
 }
 async function timingSafeEqual(a, b) {
@@ -60,65 +65,21 @@ async function timingSafeEqual(a, b) {
     return crypto.subtle.verify(algorithm, key, aHmac, b);
 }
 async function cbcDecrypt(enc, cek, ciphertext, iv, tag, aad) {
-    const [encKey, macKey, keySize] = await cbcKeySetup(enc, cek, 'decrypt');
-    const macData = concat(aad, iv, ciphertext, uint64be(aad.length * 8));
-    const expectedTag = await cbcHmacTag(macKey, macData, keySize);
-    let macCheckPassed;
+    const [encKey, macKey, keyLengthBits] = await cbcKeySetup(enc, cek, 'decrypt');
+    // RFC 7518, Section 5.2.2.1, steps 4-5: AL encodes the bit length of AAD.
+    const al = uint64be(aad.length * 8);
+    const macData = concat(aad, iv, ciphertext, al);
+    const expectedTag = await cbcHmacTag(macKey, macData, keyLengthBits);
     try {
-        macCheckPassed = await timingSafeEqual(tag, expectedTag);
+        // RFC 7518, Section 5.2.2.2, steps 2-3: validate T before decrypting E.
+        if (await timingSafeEqual(tag, expectedTag)) {
+            return new Uint8Array(await crypto.subtle.decrypt({ iv: iv, name: 'AES-CBC' }, encKey, ciphertext));
+        }
     }
     catch {
-        //
-    }
-    if (!macCheckPassed) {
-        throw new JWEDecryptionFailed();
-    }
-    let plaintext;
-    try {
-        plaintext = new Uint8Array(await crypto.subtle.decrypt({ iv: iv, name: 'AES-CBC' }, encKey, ciphertext));
-    }
-    catch {
-        //
-    }
-    if (!plaintext) {
-        throw new JWEDecryptionFailed();
-    }
-    return plaintext;
-}
-// --- GCM encrypt/decrypt ---
-async function gcmEncrypt(enc, plaintext, cek, iv, aad) {
-    const encKey = cek instanceof Uint8Array
-        ? await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, [
-            'encrypt',
-        ])
-        : (checkCryptoKey(cek, enc.subtle, 'encrypt'), cek);
-    const encrypted = new Uint8Array(await crypto.subtle.encrypt({
-        additionalData: aad,
-        iv: iv,
-        name: 'AES-GCM',
-        tagLength: 128,
-    }, encKey, plaintext));
-    const tag = encrypted.slice(-16);
-    const ciphertext = encrypted.slice(0, -16);
-    return { ciphertext, tag, iv };
-}
-async function gcmDecrypt(enc, cek, ciphertext, iv, tag, aad) {
-    const encKey = cek instanceof Uint8Array
-        ? await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, [
-            'decrypt',
-        ])
-        : (checkCryptoKey(cek, enc.subtle, 'decrypt'), cek);
-    try {
-        return new Uint8Array(await crypto.subtle.decrypt({
-            additionalData: aad,
-            iv: iv,
-            name: 'AES-GCM',
-            tagLength: 128,
-        }, encKey, concat(ciphertext, tag)));
-    }
-    catch {
-        throw new JWEDecryptionFailed();
+        // Do not expose authentication or padding failures through cause (RFC 7516, Section 11.4).
     }
+    throw new JWEDecryptionFailed();
 }
 // --- Public API ---
 export async function encrypt(enc, plaintext, cek, iv, aad) {
@@ -134,9 +95,18 @@ export async function encrypt(enc, plaintext, cek, iv, aad) {
     if (cek instanceof Uint8Array) {
         checkCekLength(cek, enc.cekBits);
     }
-    return enc.cbc
-        ? cbcEncrypt(enc, plaintext, cek, iv, aad)
-        : gcmEncrypt(enc, plaintext, cek, iv, aad);
+    if (enc.cbc)
+        return cbcEncrypt(enc, plaintext, cek, iv, aad);
+    // RFC 7518, Section 5.3: 96-bit IV and 128-bit Authentication Tag.
+    // Web Crypto returns ciphertext || tag; JWE serializes them separately.
+    const encKey = await rawKey(cek, enc.subtle, 'encrypt');
+    const encrypted = new Uint8Array(await crypto.subtle.encrypt({
+        additionalData: aad,
+        iv: iv,
+        name: 'AES-GCM',
+        tagLength: 128
+    }, encKey, plaintext));
+    return { ciphertext: encrypted.subarray(0, -16), tag: encrypted.subarray(-16), iv };
 }
 export async function decrypt(enc, cek, ciphertext, iv, tag, aad) {
     if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {
@@ -148,12 +118,29 @@ export async function decrypt(enc, cek, ciphertext, iv, tag, aad) {
     if (!tag) {
         throw new JWEInvalid('JWE Authentication Tag missing');
     }
+    if (!enc.cbc && tag.length !== 16) {
+        throw new JWEInvalid('Invalid Authentication Tag length');
+    }
     checkIvLength(enc, iv);
     if (cek instanceof Uint8Array) {
         checkCekLength(cek, enc.cekBits);
     }
-    return enc.cbc
-        ? cbcDecrypt(enc, cek, ciphertext, iv, tag, aad)
-        : gcmDecrypt(enc, cek, ciphertext, iv, tag, aad);
+    if (enc.cbc)
+        return cbcDecrypt(enc, cek, ciphertext, iv, tag, aad);
+    // RFC 7518, Section 5.3: authenticated AES-GCM decryption.
+    // Concatenate ciphertext || tag for the Web Crypto representation.
+    const encKey = await rawKey(cek, enc.subtle, 'decrypt');
+    try {
+        return new Uint8Array(await crypto.subtle.decrypt({
+            additionalData: aad,
+            iv: iv,
+            name: 'AES-GCM',
+            tagLength: 128
+        }, encKey, concat(ciphertext, tag)));
+    }
+    catch {
+        // Keep content and CEK recovery failures indistinguishable (RFC 7516, Section 11.4).
+        throw new JWEDecryptionFailed();
+    }
 }
 //# sourceMappingURL=content_encryption.js.map

package/dist/jose/src/lib/content_encryption.js.map

@@ -1 +1 @@
-{"version":3,"file":"content_encryption.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/content_encryption.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,cAAc;AAEd,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAkB,EAAc,EAAE,CAC5D,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;AAE1D,SAAS,cAAc,CAAC,GAAe,EAAE,QAAgB;IACvD,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAA;IAClC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,mDAAmD,QAAQ,cAAc,MAAM,OAAO,CACvF,CAAA;IACH,CAAC;AACH,CAAC;AAED,aAAa;AAEb,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAkB,EAAc,EAAE,CAC3D,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;AAEzD,MAAM,UAAU,aAAa,CAAC,GAAkB,EAAE,EAAc;IAC9D,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED,sBAAsB;AAEtB,KAAK,UAAU,WAAW,CACxB,GAAkB,EAClB,GAAiC,EACjC,KAA4B;IAE5B,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAA4B,EACrD,SAAS,EACT,KAAK,EACL,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAA4B,EACxD;QACE,IAAI,EAAE,OAAO,OAAO,IAAI,CAAC,EAAE;QAC3B,IAAI,EAAE,MAAM;KACb,EACD,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;IACD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AAClC,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAiB,EACjB,OAAmB,EACnB,OAAe;IAEf,OAAO,IAAI,UAAU,CACnB,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAkC,CAAC,CAAC,CAAC,KAAK,CAClF,CAAC,EACD,OAAO,IAAI,CAAC,CACb,CACF,CAAA;AACH,CAAC;AAED,8BAA8B;AAE9B,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,SAAqB,EACrB,GAAiC,EACjC,EAAc,EACd,GAAe;IAEf,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAExE,MAAM,UAAU,GAAG,IAAI,UAAU,CAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;QACE,EAAE,EAAE,EAA6B;QACjC,IAAI,EAAE,SAAS;KAChB,EACD,MAAM,EACN,SAAoC,CACrC,CACF,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IACrE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAEtD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA;AAChC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,CAAa,EAAE,CAAa;IACzD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACnD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAc,CAAA;IAEhG,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAA4B,CAAC,CAAA;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAA4B,CAAC,CAAA;AAClF,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,GAAiC,EACjC,UAAsB,EACtB,EAAc,EACd,GAAe,EACf,GAAe;IAEf,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAExE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IACrE,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAE9D,IAAI,cAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,EAAE;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,CAAC;IAED,IAAI,SAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,UAAU,CACxB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,EAAE,EAAE,EAA6B,EAAE,IAAI,EAAE,SAAS,EAAE,EACtD,MAAM,EACN,UAAqC,CACtC,CACF,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,EAAE;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,8BAA8B;AAE9B,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,SAAqB,EACrB,GAAiC,EACjC,EAAc,EACd,GAAe;IAEf,MAAM,MAAM,GACV,GAAG,YAAY,UAAU;QACvB,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAA8B,EAAE,SAAS,EAAE,KAAK,EAAE;YACrF,SAAS;SACV,CAAC;QACJ,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;IAEvD,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;QACE,cAAc,EAAE,GAA8B;QAC9C,EAAE,EAAE,EAA6B;QACjC,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,GAAG;KACf,EACD,MAAM,EACN,SAAoC,CACrC,CACF,CAAA;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAE1C,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA;AAChC,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,GAAiC,EACjC,UAAsB,EACtB,EAAc,EACd,GAAe,EACf,GAAe;IAEf,MAAM,MAAM,GACV,GAAG,YAAY,UAAU;QACvB,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAA8B,EAAE,SAAS,EAAE,KAAK,EAAE;YACrF,SAAS;SACV,CAAC;QACJ,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;IAEvD,IAAI,CAAC;QACH,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;YACE,cAAc,EAAE,GAA8B;YAC9C,EAAE,EAAE,EAA6B;YACjC,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,GAAG;SACf,EACD,MAAM,EACN,MAAM,CAAC,UAAU,EAAE,GAAG,CAA4B,CACnD,CACF,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,CAAC;AACH,CAAC;AAED,qBAAqB;AAErB,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAkB,EAClB,SAAqB,EACrB,GAAY,EACZ,EAA0B,EAC1B,GAAe;IAMf,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CACjB,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,CAC7E,CAAA;IACH,CAAC;IAED,IAAI,EAAE,EAAE,CAAC;QACP,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACxB,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IAED,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,GAAG,CAAC,GAAG;QACZ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC;QAC1C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAkB,EAClB,GAAY,EACZ,UAAsB,EACtB,EAA0B,EAC1B,GAA2B,EAC3B,GAAe;IAEf,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CACjB,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,CAC7E,CAAA;IACH,CAAC;IAED,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,UAAU,CAAC,gCAAgC,CAAC,CAAA;IACxD,CAAC;IAED,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAEtB,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,GAAG,CAAC,GAAG;QACZ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;QAChD,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AACpD,CAAC"}
+{"version":3,"file":"content_encryption.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/content_encryption.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpE,cAAc;AAEd,2FAA2F;AAC3F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAkB,EAAc,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AAExH,MAAM,UAAU,cAAc,CAAC,GAAe,EAAE,QAAgB;IAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAAC,mDAAmD,QAAQ,cAAc,MAAM,OAAO,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC;AAED,aAAa;AAEb,2FAA2F;AAC3F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAkB,EAAc,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;AAEtH,MAAM,UAAU,aAAa,CAAC,GAAkB,EAAE,EAAc;IAC9D,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,sBAAsB;AAEtB,KAAK,UAAU,WAAW,CACxB,GAAkB,EAClB,GAAiC,EACjC,KAA4B;IAE5B,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,0EAA0E;IAC1E,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,CAA4B,EAC3D,SAAS,EACT,KAAK,EACL,CAAC,KAAK,CAAC,CACR,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC,CAA4B,EAC9D;QACE,IAAI,EAAE,OAAO,aAAa,IAAI,CAAC,EAAE;QACjC,IAAI,EAAE,MAAM;KACb,EACD,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAiB,EAAE,OAAmB,EAAE,aAAqB;IACrF,+EAA+E;IAC/E,OAAO,IAAI,UAAU,CACnB,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAkC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC,CAAC,CAC5G,CAAC;AACJ,CAAC;AAED,8BAA8B;AAE9B,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,SAAqB,EACrB,GAAiC,EACjC,EAAc,EACd,GAAe;IAEf,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAE/E,8EAA8E;IAC9E,MAAM,UAAU,GAAG,IAAI,UAAU,CAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;QACE,EAAE,EAAE,EAA6B;QACjC,IAAI,EAAE,SAAS;KAChB,EACD,MAAM,EACN,SAAoC,CACrC,CACF,CAAC;IAEF,0EAA0E;IAC1E,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAE7D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,CAAa,EAAE,CAAa;IACzD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAc,CAAC;IAEjG,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAA4B,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAA4B,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,GAAiC,EACjC,UAAsB,EACtB,EAAc,EACd,GAAe,EACf,GAAe;IAEf,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAE/E,0EAA0E;IAC1E,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAErE,IAAI,CAAC;QACH,wEAAwE;QACxE,IAAI,MAAM,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,EAAE,EAAE,EAA6B,EAAE,IAAI,EAAE,SAAS,EAAE,EACtD,MAAM,EACN,UAAqC,CACtC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2FAA2F;IAC7F,CAAC;IACD,MAAM,IAAI,mBAAmB,EAAE,CAAC;AAClC,CAAC;AAED,qBAAqB;AAErB,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAkB,EAClB,SAAqB,EACrB,GAAY,EACZ,EAA0B,EAC1B,GAAe;IAMf,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,EAAE,EAAE,CAAC;QACP,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,GAAG,CAAC,GAAG;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAE7D,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;QACE,cAAc,EAAE,GAA8B;QAC9C,EAAE,EAAE,EAA6B;QACjC,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,GAAG;KACf,EACD,MAAM,EACN,SAAoC,CACrC,CACF,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAkB,EAClB,GAAY,EACZ,UAAsB,EACtB,EAA0B,EAC1B,GAA2B,EAC3B,GAAe;IAEf,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,UAAU,CAAC,gCAAgC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC5D,CAAC;IAED,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAEvB,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,GAAG,CAAC,GAAG;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAEnE,2DAA2D;IAC3D,mEAAmE;IACnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB;YACE,cAAc,EAAE,GAA8B;YAC9C,EAAE,EAAE,EAA6B;YACjC,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,GAAG;SACf,EACD,MAAM,EACN,MAAM,CAAC,UAAU,EAAE,GAAG,CAA4B,CACnD,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;QACrF,MAAM,IAAI,mBAAmB,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/jose/src/lib/deflate.d.ts

@@ -1,11 +1,13 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
  * - Evgeniy Bushin
  */
 /***/
+import type * as types from '../types.d.ts';
+export declare function validateZip(joseHeader: types.JWEHeaderParameters, protectedHeader: types.JWEHeaderParameters | undefined): void;
 export declare function compress(input: Uint8Array): Promise<Uint8Array>;
 export declare function decompress(input: Uint8Array, maxLength: number): Promise<Uint8Array>;
 //# sourceMappingURL=deflate.d.ts.map

package/dist/jose/src/lib/deflate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deflate.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/deflate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAaL,wBAAsB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBrE;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAsB1F"}
+{"version":3,"file":"deflate.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/deflate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAK5C,wBAAgB,WAAW,CACzB,UAAU,EAAE,KAAK,CAAC,mBAAmB,EACrC,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,GACrD,IAAI,CAQN;AAmCD,wBAAsB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAGrE;AAGD,wBAAsB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAG1F"}

package/dist/jose/src/lib/deflate.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -8,36 +8,27 @@
 /***/
 import { JOSENotSupported, JWEInvalid } from '../util/errors.js';
 import { concat } from './buffer_utils.js';
+// RFC 7516, Section 4.1.3: DEF denotes raw DEFLATE (RFC 1951); zip must be protected.
+export function validateZip(joseHeader, protectedHeader) {
+    if (joseHeader.zip !== undefined && joseHeader.zip !== 'DEF') {
+        throw new JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');
+    }
+    if (joseHeader.zip !== undefined && !protectedHeader?.zip) {
+        throw new JWEInvalid('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');
+    }
+}
 function supported(name) {
     if (typeof globalThis[name] === 'undefined') {
         throw new JOSENotSupported(`JWE "zip" (Compression Algorithm) Header Parameter requires the ${name} API.`);
     }
 }
-export async function compress(input) {
-    supported('CompressionStream');
-    const cs = new CompressionStream('deflate-raw');
-    const writer = cs.writable.getWriter();
-    writer.write(input).catch(() => { });
-    writer.close().catch(() => { });
-    const chunks = [];
-    const reader = cs.readable.getReader();
-    for (;;) {
-        const { value, done } = await reader.read();
-        if (done)
-            break;
-        chunks.push(value);
-    }
-    return concat(...chunks);
-}
-export async function decompress(input, maxLength) {
-    supported('DecompressionStream');
-    const ds = new DecompressionStream('deflate-raw');
-    const writer = ds.writable.getWriter();
+async function transform(stream, input, maxLength = Infinity) {
+    const writer = stream.writable.getWriter();
     writer.write(input).catch(() => { });
     writer.close().catch(() => { });
     const chunks = [];
     let length = 0;
-    const reader = ds.readable.getReader();
+    const reader = stream.readable.getReader();
     for (;;) {
         const { value, done } = await reader.read();
         if (done)
@@ -45,9 +36,20 @@ export async function decompress(input, maxLength) {
         chunks.push(value);
         length += value.byteLength;
         if (maxLength !== Infinity && length > maxLength) {
+            await reader.cancel().catch(() => { });
             throw new JWEInvalid('Decompressed plaintext exceeded the configured limit');
         }
     }
     return concat(...chunks);
 }
+// draft-ietf-jose-hpke-encrypt-22, Section 7.1, step 12.
+export async function compress(input) {
+    supported('CompressionStream');
+    return transform(new CompressionStream('deflate-raw'), input);
+}
+// draft-ietf-jose-hpke-encrypt-22, Section 7.2, step 20. The output-size limit is library policy.
+export async function decompress(input, maxLength) {
+    supported('DecompressionStream');
+    return transform(new DecompressionStream('deflate-raw'), input, maxLength);
+}
 //# sourceMappingURL=deflate.js.map

package/dist/jose/src/lib/deflate.js.map

@@ -1 +1 @@
-{"version":3,"file":"deflate.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/deflate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C,SAAS,SAAS,CAAC,IAAiD;IAClE,IAAI,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,gBAAgB,CACxB,mEAAmE,IAAI,OAAO,CAC/E,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAiB;IAC9C,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAE9B,MAAM,EAAE,GAAG,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAA;IACtC,MAAM,CAAC,KAAK,CAAC,KAAgC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC9D,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE9B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAA;IACtC,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAiB,EAAE,SAAiB;IACnE,SAAS,CAAC,qBAAqB,CAAC,CAAA;IAEhC,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAA;IACtC,MAAM,CAAC,KAAK,CAAC,KAAgC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC9D,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE9B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAA;IACtC,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;QAC1B,IAAI,SAAS,KAAK,QAAQ,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,UAAU,CAAC,sDAAsD,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,MAAM,CAAC,CAAA;AAC1B,CAAC"}
+{"version":3,"file":"deflate.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/deflate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,sFAAsF;AACtF,MAAM,UAAU,WAAW,CACzB,UAAqC,EACrC,eAAsD;IAEtD,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,gBAAgB,CAAC,uEAAuE,CAAC,CAAC;IACtG,CAAC;IAED,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,mFAAmF,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAiD;IAClE,IAAI,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,gBAAgB,CAAC,mEAAmE,IAAI,OAAO,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAA+C,EAC/C,KAAiB,EACjB,SAAS,GAAG,QAAQ;IAEpB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,KAAgC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE/B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC3C,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC3B,IAAI,SAAS,KAAK,QAAQ,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;YACjD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,MAAM,IAAI,UAAU,CAAC,sDAAsD,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAiB;IAC9C,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC/B,OAAO,SAAS,CAAC,IAAI,iBAAiB,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAiB,EAAE,SAAiB;IACnE,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACjC,OAAO,SAAS,CAAC,IAAI,mBAAmB,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAC7E,CAAC"}

package/dist/jose/src/lib/jwe_algorithms.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,12 +7,32 @@
  */
 /***/
 import type { KeyDescriptor } from './key_descriptor.js';
-/** Everything the implementation needs to know about one JWE "alg", in one place. */
-export interface JWEAlgorithm extends KeyDescriptor {
+import type * as types from '../types.d.ts';
+export type JWECEKTransportMode = 'key-wrapping' | 'key-encryption' | 'key-agreement-with-key-wrapping';
+export type JWEConventionalMode = JWECEKTransportMode | 'direct-encryption' | 'direct-key-agreement';
+/** Key Management Modes from draft-ietf-jose-hpke-encrypt-22, Section 3. */
+export type JWEKeyManagementMode = JWEConventionalMode | 'integrated-encryption';
+/** Everything the implementation needs to know about one conventional JWE "alg". */
+export interface JWEConventionalAlgorithm extends KeyDescriptor {
+    mode: JWEConventionalMode;
     subtle: KeyDescriptor['subtle'] & {
         name: 'RSA-OAEP' | 'ECDH' | 'AES-KW' | 'AES-GCM' | 'PBKDF2';
     };
 }
+/** A JWE algorithm that directly encrypts plaintext without a separate content-encryption step. */
+export interface JWEIntegratedEncryptionAlgorithm extends KeyDescriptor {
+    mode: 'integrated-encryption';
+    encrypt: (key: types.CryptoKey | Uint8Array, plaintext: Uint8Array, aad: Uint8Array, protectedHeader: types.JWEHeaderParameters | undefined, joseHeader: types.JWEHeaderParameters, providedParameters?: types.JWEKeyManagementHeaderParameters) => Promise<[encryptedKey: Uint8Array | undefined, ciphertext: Uint8Array]>;
+    /**
+     * Integrated algorithms own authentication and MUST normalize authentication and key-decryption
+     * failures to `JWEDecryptionFailed`.
+     */
+    decrypt: (key: types.CryptoKey | Uint8Array, encryptedKey: Uint8Array | undefined, ciphertext: Uint8Array, aad: Uint8Array, protectedHeader: types.JWEHeaderParameters | undefined, joseHeader: types.JWEHeaderParameters) => Promise<Uint8Array>;
+}
+export type JWEAlgorithm = JWEConventionalAlgorithm | JWEIntegratedEncryptionAlgorithm;
+export type JWECEKTransportAlgorithm = JWEConventionalAlgorithm & {
+    mode: JWECEKTransportMode;
+};
 export declare const JWE: Record<string, JWEAlgorithm>;
 /**
  * Content encryption algorithms. These describe a key too: with "alg" of "dir" the Content
@@ -27,5 +47,6 @@ export interface JWEEncryption extends KeyDescriptor {
     cbc: boolean;
 }
 export declare function jweAlgorithm(alg: unknown): JWEAlgorithm;
+export declare function isJWECEKTransport(algorithm: JWEAlgorithm): algorithm is JWECEKTransportAlgorithm;
 export declare function jweEncryption(enc: unknown): JWEEncryption;
 //# sourceMappingURL=jwe_algorithms.d.ts.map

package/dist/jose/src/lib/jwe_algorithms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe_algorithms.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAIL,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD,qFAAqF;AACrF,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG;QAChC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;KAC5D,CAAA;CACF;AA6DD,eAAO,MAAM,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAyB3C,CAAA;AAEF;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAA;IACd,0EAA0E;IAC1E,GAAG,EAAE,OAAO,CAAA;CACb;AA8BD,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAEvD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAIzD"}
+{"version":3,"file":"jwe_algorithms.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAIL,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAE5C,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG,gBAAgB,GAAG,iCAAiC,CAAC;AAExG,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;AAErG,4EAA4E;AAC5E,MAAM,MAAM,oBAAoB,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;AAEjF,oFAAoF;AACpF,MAAM,WAAW,wBAAyB,SAAQ,aAAa;IAC7D,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG;QAChC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;KAC7D,CAAC;CACH;AAED,mGAAmG;AACnG,MAAM,WAAW,gCAAiC,SAAQ,aAAa;IACrE,IAAI,EAAE,uBAAuB,CAAC;IAC9B,OAAO,EAAE,CACP,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU,EACjC,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,UAAU,EACf,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,EACtD,UAAU,EAAE,KAAK,CAAC,mBAAmB,EACrC,kBAAkB,CAAC,EAAE,KAAK,CAAC,gCAAgC,KACxD,OAAO,CAAC,CAAC,YAAY,EAAE,UAAU,GAAG,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7E;;;OAGG;IACH,OAAO,EAAE,CACP,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU,EACjC,YAAY,EAAE,UAAU,GAAG,SAAS,EACpC,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,UAAU,EACf,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,EACtD,UAAU,EAAE,KAAK,CAAC,mBAAmB,KAClC,OAAO,CAAC,UAAU,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GAAG,wBAAwB,GAAG,gCAAgC,CAAC;AACvF,MAAM,MAAM,wBAAwB,GAAG,wBAAwB,GAAG;IAChE,IAAI,EAAE,mBAAmB,CAAC;CAC3B,CAAC;AAqEF,eAAO,MAAM,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA0B3C,CAAC;AAEH;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,GAAG,EAAE,OAAO,CAAC;CACd;AAgCD,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAEvD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,YAAY,GAAG,SAAS,IAAI,wBAAwB,CAMhG;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAEzD"}

package/dist/jose/src/lib/jwe_algorithms.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -10,22 +10,26 @@ import { JOSENotSupported } from '../util/errors.js';
 import { table } from './key_descriptor.js';
 const wrap = [
     ['encrypt', 'wrapKey'],
-    ['decrypt', 'unwrapKey'],
+    ['decrypt', 'unwrapKey']
 ];
 /** An ECDH public key carries no usages; the private half derives. deriveKey is not used. */
 const derive = [[], ['deriveBits']];
 const none = [[], []];
+// RFC 7518, Section 4.3: RSAES-OAEP; the hash also selects MGF1’s hash.
 function rsaes(bits) {
     return {
         kty: ['RSA'],
+        mode: 'key-encryption',
         subtle: { name: 'RSA-OAEP', hash: `SHA-${bits}` },
         usages: wrap,
-        ops: ['wrapKey', 'unwrapKey'],
+        ops: ['wrapKey', 'unwrapKey']
     };
 }
-function ecdh() {
+// RFC 7518, Section 4.6; RFC 8037, Sections 3.2-3.2.1: ECDH-ES with EC or X25519.
+function ecdh(mode) {
     return {
         kty: ['EC', 'OKP'],
+        mode,
         subtle: { name: 'ECDH' },
         resolve: ({ kty, crv, asymmetricKeyType }) => {
             if (crv === 'X25519' || asymmetricKeyType === 'x25519') {
@@ -38,43 +42,48 @@ function ecdh() {
         },
         usages: derive,
         // Deriving with the recipient's public key implies no key_ops value; only the private half does.
-        ops: [undefined, 'deriveBits'],
+        ops: [undefined, 'deriveBits']
     };
 }
+// RFC 7518, Sections 4.4 and 4.7: AES Key Wrap and AES GCM Key Encryption.
 function aeskw(bits, gcm = false) {
     return {
         kty: ['oct'],
+        mode: 'key-wrapping',
         secret: true,
         subtle: { name: gcm ? 'AES-GCM' : 'AES-KW', length: bits },
         usages: none,
-        ops: gcm ? ['encrypt', 'decrypt'] : ['wrapKey', 'unwrapKey'],
+        ops: gcm ? ['encrypt', 'decrypt'] : ['wrapKey', 'unwrapKey']
     };
 }
+// RFC 7518, Section 4.8: PBES2 derives the AES Key Wrap key using PBKDF2.
 function pbes2() {
     return {
         kty: ['oct'],
+        mode: 'key-wrapping',
         secret: true,
         subtle: { name: 'PBKDF2' },
         usages: none,
-        ops: ['deriveBits', 'deriveBits'],
+        ops: ['deriveBits', 'deriveBits']
     };
 }
 export const JWE = table({
     dir: {
         kty: ['oct'],
+        mode: 'direct-encryption',
         secret: true,
         subtle: { name: 'AES-GCM' },
         usages: none,
-        ops: ['encrypt', 'decrypt'],
+        ops: ['encrypt', 'decrypt']
     },
     'RSA-OAEP': rsaes(1),
     'RSA-OAEP-256': rsaes(256),
     'RSA-OAEP-384': rsaes(384),
     'RSA-OAEP-512': rsaes(512),
-    'ECDH-ES': ecdh(),
-    'ECDH-ES+A128KW': ecdh(),
-    'ECDH-ES+A192KW': ecdh(),
-    'ECDH-ES+A256KW': ecdh(),
+    'ECDH-ES': ecdh('direct-key-agreement'),
+    'ECDH-ES+A128KW': ecdh('key-agreement-with-key-wrapping'),
+    'ECDH-ES+A192KW': ecdh('key-agreement-with-key-wrapping'),
+    'ECDH-ES+A256KW': ecdh('key-agreement-with-key-wrapping'),
     A128KW: aeskw(128),
     A192KW: aeskw(192),
     A256KW: aeskw(256),
@@ -83,9 +92,11 @@ export const JWE = table({
     A256GCMKW: aeskw(256, true),
     'PBES2-HS256+A128KW': pbes2(),
     'PBES2-HS384+A192KW': pbes2(),
-    'PBES2-HS512+A256KW': pbes2(),
+    'PBES2-HS512+A256KW': pbes2()
 });
 const contentOps = ['encrypt', 'decrypt'];
+// RFC 7518, Sections 5.2.3-5.2.5 and 5.3: combined CBC-HMAC CEK sizes,
+// 128-bit CBC IVs, and 96-bit GCM IVs. CBC-HMAC divides the CEK into two keys.
 function contentEncryption(bits, cbc = false) {
     return {
         kty: ['oct'],
@@ -95,7 +106,7 @@ function contentEncryption(bits, cbc = false) {
         ops: contentOps,
         cekBits: bits,
         ivBits: cbc ? 128 : 96,
-        cbc,
+        cbc
     };
 }
 const ENC = table({
@@ -104,7 +115,7 @@ const ENC = table({
     A256GCM: contentEncryption(256),
     'A128CBC-HS256': contentEncryption(256, true),
     'A192CBC-HS384': contentEncryption(384, true),
-    'A256CBC-HS512': contentEncryption(512, true),
+    'A256CBC-HS512': contentEncryption(512, true)
 });
 function unsupported(parameter, name) {
     throw new JOSENotSupported(`Invalid or unsupported "${parameter}" (JWE ${name}) header value`);
@@ -112,7 +123,12 @@ function unsupported(parameter, name) {
 export function jweAlgorithm(alg) {
     return (typeof alg === 'string' ? JWE[alg] : undefined) ?? unsupported('alg', 'Algorithm');
 }
+export function isJWECEKTransport(algorithm) {
+    return (algorithm.mode === 'key-wrapping' ||
+        algorithm.mode === 'key-encryption' ||
+        algorithm.mode === 'key-agreement-with-key-wrapping');
+}
 export function jweEncryption(enc) {
-    return ((typeof enc === 'string' ? ENC[enc] : undefined) ?? unsupported('enc', 'Encryption Algorithm'));
+    return (typeof enc === 'string' ? ENC[enc] : undefined) ?? unsupported('enc', 'Encryption Algorithm');
 }
 //# sourceMappingURL=jwe_algorithms.js.map

package/dist/jose/src/lib/jwe_algorithms.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwe_algorithms.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAa3C,MAAM,IAAI,GAA6B;IACrC,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,SAAS,EAAE,WAAW,CAAC;CACzB,CAAA;AACD,6FAA6F;AAC7F,MAAM,MAAM,GAA6B,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;AAC7D,MAAM,IAAI,GAA6B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;AAE/C,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE;QACjD,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;KAC9B,CAAA;AACH,CAAC;AAED,SAAS,IAAI;IACX,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;QAClB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACxB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,EAAE;YAC3C,IAAI,GAAG,KAAK,QAAQ,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CAAC,8DAA8D,CAAC,CAAA;YAC5F,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAI,EAAE,CAAA;QAC3C,CAAC;QACD,MAAM,EAAE,MAAM;QACd,iGAAiG;QACjG,GAAG,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;KAC/B,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,GAAG,GAAG,KAAK;IACtC,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;QAC1D,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC;KAC7D,CAAA;AACH,CAAC;AAED,SAAS,KAAK;IACZ,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;KAClC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAiC,KAAK,CAAe;IACnE,GAAG,EAAE;QACH,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B;IACD,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACpB,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;IAC1B,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;IAC1B,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;IAC1B,SAAS,EAAE,IAAI,EAAE;IACjB,gBAAgB,EAAE,IAAI,EAAE;IACxB,gBAAgB,EAAE,IAAI,EAAE;IACxB,gBAAgB,EAAE,IAAI,EAAE;IACxB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;IAClB,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3B,oBAAoB,EAAE,KAAK,EAAE;IAC7B,oBAAoB,EAAE,KAAK,EAAE;IAC7B,oBAAoB,EAAE,KAAK,EAAE;CAC9B,CAAC,CAAA;AAeF,MAAM,UAAU,GAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;AAE3D,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAG,GAAG,KAAK;IAClD,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAC3D,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACtB,GAAG;KACJ,CAAA;AACH,CAAC;AAED,MAAM,GAAG,GAAkC,KAAK,CAAgB;IAC9D,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;IAC/B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;IAC/B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;IAC/B,eAAe,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;IAC7C,eAAe,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;IAC7C,eAAe,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;CAC9C,CAAC,CAAA;AAEF,SAAS,WAAW,CAAC,SAAiB,EAAE,IAAY;IAClD,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,SAAS,UAAU,IAAI,gBAAgB,CAAC,CAAA;AAChG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,CACL,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAC/F,CAAA;AACH,CAAC"}
+{"version":3,"file":"jwe_algorithms.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAoD5C,MAAM,IAAI,GAA6B;IACrC,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,SAAS,EAAE,WAAW,CAAC;CACzB,CAAC;AACF,6FAA6F;AAC7F,MAAM,MAAM,GAA6B,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9D,MAAM,IAAI,GAA6B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAEhD,wEAAwE;AACxE,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE;QACjD,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,IAAI,CAAC,IAAgE;IAC5E,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;QAClB,IAAI;QACJ,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACxB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,EAAE;YAC3C,IAAI,GAAG,KAAK,QAAQ,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CAAC,8DAA8D,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAI,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,EAAE,MAAM;QACd,iGAAiG;QACjG,GAAG,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,KAAK,CAAC,IAAY,EAAE,GAAG,GAAG,KAAK;IACtC,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;QAC1D,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,KAAK;IACZ,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAiC,KAAK,CAA2B;IAC/E,GAAG,EAAE;QACH,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC5B;IACD,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACpB,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;IAC1B,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;IAC1B,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;IAC1B,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC;IACvC,gBAAgB,EAAE,IAAI,CAAC,iCAAiC,CAAC;IACzD,gBAAgB,EAAE,IAAI,CAAC,iCAAiC,CAAC;IACzD,gBAAgB,EAAE,IAAI,CAAC,iCAAiC,CAAC;IACzD,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;IAClB,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3B,oBAAoB,EAAE,KAAK,EAAE;IAC7B,oBAAoB,EAAE,KAAK,EAAE;IAC7B,oBAAoB,EAAE,KAAK,EAAE;CAC9B,CAAC,CAAC;AAeH,MAAM,UAAU,GAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAE5D,uEAAuE;AACvE,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAG,GAAG,KAAK;IAClD,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAC3D,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACtB,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,GAAG,GAAkC,KAAK,CAAgB;IAC9D,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;IAC/B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;IAC/B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;IAC/B,eAAe,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;IAC7C,eAAe,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;IAC7C,eAAe,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;CAC9C,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,SAAiB,EAAE,IAAY;IAClD,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,SAAS,UAAU,IAAI,gBAAgB,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAuB;IACvD,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,cAAc;QACjC,SAAS,CAAC,IAAI,KAAK,gBAAgB;QACnC,SAAS,CAAC,IAAI,KAAK,iCAAiC,CACrD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AACxG,CAAC"}