internxt-crypto 0.0.8-alpha → 0.0.10-alpha

package/README.md

@@ -124,13 +124,11 @@ const emailBody: EmailBody = {
 const userAlice = {
     email: 'alice email',
     name: 'alice',
-    id: '1',
 };
 
 const userBob = {
     email: 'bob email',
     name: 'bob',
-    id: '2',
 };
 const { privateKeys: alicePrivateKeys, publicKeys: alicePublicKeys } = await emailCrypto.generateEmailKeys();
 const { privateKeys: bobPrivateKeys, publicKeys: bobPublicKeys } = await emailCrypto.generateEmailKeys();

package/dist/asymmetric-crypto.d.mts

@@ -0,0 +1,41 @@
+/**
+ * Derives secret key from the other user's public key and own private key
+ *
+ * @param otherUserPublicKey - The public key of the other user
+ * @param ownPrivateKey - The private key
+ * @returns The derived secret key bits
+ */
+declare function deriveSecretKey(otherUserPublicKey: CryptoKey, ownPrivateKey: CryptoKey): Promise<Uint8Array>;
+
+/**
+ * Generates elliptic curve key pair
+ *
+ * @returns The generated key pair
+ */
+declare function generateEccKeys(): Promise<CryptoKeyPair>;
+/**
+ * Converts public CryptoKey into Uint8Array using SubjectPublicKeyInfo format (RFC 5280)
+ *
+ * @returns The Uint8Array representation of the public key
+ */
+declare function exportPublicKey(key: CryptoKey): Promise<Uint8Array>;
+/**
+ * Converts public key in SubjectPublicKeyInfo format (RFC 5280) to CryptoKey
+ *
+ * @returns The CryptoKey representation of the public key
+ */
+declare function importPublicKey(spkiKeyData: Uint8Array): Promise<CryptoKey>;
+/**
+ * Converts private key in CryptoKey to PKCS #8 format (RFC 5208)
+ *
+ * @returns The Uint8Array representation of the private key
+ */
+declare function exportPrivateKey(key: CryptoKey): Promise<Uint8Array>;
+/**
+ * Converts private key in PKCS #8 format (RFC 5208) to CryptoKey
+ *
+ * @returns The CryptoKey representation of the private key
+ */
+declare function importPrivateKey(pkcs8KeyData: Uint8Array): Promise<CryptoKey>;
+
+export { deriveSecretKey, exportPrivateKey, exportPublicKey, generateEccKeys, importPrivateKey, importPublicKey };

package/dist/asymmetric-crypto.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Derives secret key from the other user's public key and own private key
+ *
+ * @param otherUserPublicKey - The public key of the other user
+ * @param ownPrivateKey - The private key
+ * @returns The derived secret key bits
+ */
+declare function deriveSecretKey(otherUserPublicKey: CryptoKey, ownPrivateKey: CryptoKey): Promise<Uint8Array>;
+
+/**
+ * Generates elliptic curve key pair
+ *
+ * @returns The generated key pair
+ */
+declare function generateEccKeys(): Promise<CryptoKeyPair>;
+/**
+ * Converts public CryptoKey into Uint8Array using SubjectPublicKeyInfo format (RFC 5280)
+ *
+ * @returns The Uint8Array representation of the public key
+ */
+declare function exportPublicKey(key: CryptoKey): Promise<Uint8Array>;
+/**
+ * Converts public key in SubjectPublicKeyInfo format (RFC 5280) to CryptoKey
+ *
+ * @returns The CryptoKey representation of the public key
+ */
+declare function importPublicKey(spkiKeyData: Uint8Array): Promise<CryptoKey>;
+/**
+ * Converts private key in CryptoKey to PKCS #8 format (RFC 5208)
+ *
+ * @returns The Uint8Array representation of the private key
+ */
+declare function exportPrivateKey(key: CryptoKey): Promise<Uint8Array>;
+/**
+ * Converts private key in PKCS #8 format (RFC 5208) to CryptoKey
+ *
+ * @returns The CryptoKey representation of the private key
+ */
+declare function importPrivateKey(pkcs8KeyData: Uint8Array): Promise<CryptoKey>;
+
+export { deriveSecretKey, exportPrivateKey, exportPublicKey, generateEccKeys, importPrivateKey, importPublicKey };

package/dist/asymmetric-crypto.js

@@ -0,0 +1,92 @@
+'use strict';
+
+// src/constants.ts
+var AES_KEY_BIT_LENGTH = 256;
+var ECC_ALGORITHM = "X25519";
+
+// src/asymmetric-crypto/ellipticCurve.ts
+async function deriveSecretKey(otherUserPublicKey, ownPrivateKey) {
+  try {
+    const result = await crypto.subtle.deriveBits(
+      {
+        name: ECC_ALGORITHM,
+        public: otherUserPublicKey
+      },
+      ownPrivateKey,
+      AES_KEY_BIT_LENGTH
+    );
+    return new Uint8Array(result);
+  } catch (error) {
+    throw new Error("Failed to derive elliptic curve secret key", { cause: error });
+  }
+}
+
+// src/asymmetric-crypto/keys.ts
+async function generateEccKeys() {
+  try {
+    return await crypto.subtle.generateKey(
+      {
+        name: ECC_ALGORITHM
+      },
+      true,
+      ["deriveBits"]
+    );
+  } catch (error) {
+    throw new Error("Failed to generate elliptic curve key pair", { cause: error });
+  }
+}
+async function exportPublicKey(key) {
+  try {
+    const result = await crypto.subtle.exportKey("spki", key);
+    return new Uint8Array(result);
+  } catch (error) {
+    throw new Error("Failed to export public key", { cause: error });
+  }
+}
+async function importPublicKey(spkiKeyData) {
+  try {
+    return await crypto.subtle.importKey(
+      "spki",
+      spkiKeyData,
+      {
+        name: ECC_ALGORITHM
+      },
+      true,
+      []
+    );
+  } catch (error) {
+    throw new Error("Failed to import public key", { cause: error });
+  }
+}
+async function exportPrivateKey(key) {
+  try {
+    const result = await crypto.subtle.exportKey("pkcs8", key);
+    return new Uint8Array(result);
+  } catch (error) {
+    throw new Error("Failed to export private key", { cause: error });
+  }
+}
+async function importPrivateKey(pkcs8KeyData) {
+  try {
+    return await crypto.subtle.importKey(
+      "pkcs8",
+      pkcs8KeyData,
+      {
+        name: ECC_ALGORITHM
+      },
+      true,
+      ["deriveBits"]
+    );
+  } catch (error) {
+    throw new Error("Failed to import private key", { cause: error });
+  }
+}
+
+exports.deriveSecretKey = deriveSecretKey;
+exports.exportPrivateKey = exportPrivateKey;
+exports.exportPublicKey = exportPublicKey;
+exports.generateEccKeys = generateEccKeys;
+exports.importPrivateKey = importPrivateKey;
+exports.importPublicKey = importPublicKey;
+//# sourceMappingURL=asymmetric-crypto.js.map
+//# sourceMappingURL=asymmetric-crypto.js.map

package/dist/asymmetric-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts","../src/asymmetric-crypto/ellipticCurve.ts","../src/asymmetric-crypto/keys.ts"],"names":[],"mappings":";;;AACO,IAAM,kBAAA,GAAqB,GAAA;AAQ3B,IAAM,aAAA,GAAgB,QAAA;;;ACA7B,eAAsB,eAAA,CAAgB,oBAA+B,aAAA,EAA+C;AAClH,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,MACjC;AAAA,QACE,IAAA,EAAM,aAAA;AAAA,QACN,MAAA,EAAQ;AAAA,OACV;AAAA,MACA,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,4CAAA,EAA8C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAChF;AACF;;;AChBA,eAAsB,eAAA,GAA0C;AAC9D,EAAA,IAAI;AACF,IAAA,OAAQ,MAAM,OAAO,MAAA,CAAO,WAAA;AAAA,MAC1B;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,4CAAA,EAA8C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAChF;AACF;AAOA,eAAsB,gBAAgB,GAAA,EAAqC;AACzE,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,QAAQ,GAAG,CAAA;AACxD,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjE;AACF;AAOA,eAAsB,gBAAgB,WAAA,EAA6C;AACjF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,MAAA,CAAO,SAAA;AAAA,MACzB,MAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA;AAAC,KACH;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjE;AACF;AAOA,eAAsB,iBAAiB,GAAA,EAAqC;AAC1E,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,SAAS,GAAG,CAAA;AACzD,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,8BAAA,EAAgC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAClE;AACF;AAOA,eAAsB,iBAAiB,YAAA,EAA8C;AACnF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,MAAA,CAAO,SAAA;AAAA,MACzB,OAAA;AAAA,MACA,YAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,8BAAA,EAAgC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAClE;AACF","file":"asymmetric-crypto.js","sourcesContent":["export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n","import { ECC_ALGORITHM, AES_KEY_BIT_LENGTH } from '../constants';\n\n/**\n * Derives secret key from the other user's public key and own private key\n *\n * @param otherUserPublicKey - The public key of the other user\n * @param ownPrivateKey - The private key\n * @returns The derived secret key bits\n */\nexport async function deriveSecretKey(otherUserPublicKey: CryptoKey, ownPrivateKey: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.deriveBits(\n      {\n        name: ECC_ALGORITHM,\n        public: otherUserPublicKey,\n      },\n      ownPrivateKey,\n      AES_KEY_BIT_LENGTH,\n    );\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to derive elliptic curve secret key', { cause: error });\n  }\n}\n","import { ECC_ALGORITHM } from '../constants';\n\n/**\n * Generates elliptic curve key pair\n *\n * @returns The generated key pair\n */\nexport async function generateEccKeys(): Promise<CryptoKeyPair> {\n  try {\n    return (await crypto.subtle.generateKey(\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    )) as CryptoKeyPair;\n  } catch (error) {\n    throw new Error('Failed to generate elliptic curve key pair', { cause: error });\n  }\n}\n\n/**\n * Converts public CryptoKey into Uint8Array using SubjectPublicKeyInfo format (RFC 5280)\n *\n * @returns The Uint8Array representation of the public key\n */\nexport async function exportPublicKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('spki', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export public key', { cause: error });\n  }\n}\n\n/**\n * Converts public key in SubjectPublicKeyInfo format (RFC 5280) to CryptoKey\n *\n * @returns The CryptoKey representation of the public key\n */\nexport async function importPublicKey(spkiKeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'spki',\n      spkiKeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      [],\n    );\n  } catch (error) {\n    throw new Error('Failed to import public key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in CryptoKey to PKCS #8 format (RFC 5208)\n *\n * @returns The Uint8Array representation of the private key\n */\nexport async function exportPrivateKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('pkcs8', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export private key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in PKCS #8 format (RFC 5208) to CryptoKey\n *\n * @returns The CryptoKey representation of the private key\n */\nexport async function importPrivateKey(pkcs8KeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'pkcs8',\n      pkcs8KeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    );\n  } catch (error) {\n    throw new Error('Failed to import private key', { cause: error });\n  }\n}\n"]}

package/dist/asymmetric-crypto.mjs

@@ -0,0 +1,85 @@
+// src/constants.ts
+var AES_KEY_BIT_LENGTH = 256;
+var ECC_ALGORITHM = "X25519";
+
+// src/asymmetric-crypto/ellipticCurve.ts
+async function deriveSecretKey(otherUserPublicKey, ownPrivateKey) {
+  try {
+    const result = await crypto.subtle.deriveBits(
+      {
+        name: ECC_ALGORITHM,
+        public: otherUserPublicKey
+      },
+      ownPrivateKey,
+      AES_KEY_BIT_LENGTH
+    );
+    return new Uint8Array(result);
+  } catch (error) {
+    throw new Error("Failed to derive elliptic curve secret key", { cause: error });
+  }
+}
+
+// src/asymmetric-crypto/keys.ts
+async function generateEccKeys() {
+  try {
+    return await crypto.subtle.generateKey(
+      {
+        name: ECC_ALGORITHM
+      },
+      true,
+      ["deriveBits"]
+    );
+  } catch (error) {
+    throw new Error("Failed to generate elliptic curve key pair", { cause: error });
+  }
+}
+async function exportPublicKey(key) {
+  try {
+    const result = await crypto.subtle.exportKey("spki", key);
+    return new Uint8Array(result);
+  } catch (error) {
+    throw new Error("Failed to export public key", { cause: error });
+  }
+}
+async function importPublicKey(spkiKeyData) {
+  try {
+    return await crypto.subtle.importKey(
+      "spki",
+      spkiKeyData,
+      {
+        name: ECC_ALGORITHM
+      },
+      true,
+      []
+    );
+  } catch (error) {
+    throw new Error("Failed to import public key", { cause: error });
+  }
+}
+async function exportPrivateKey(key) {
+  try {
+    const result = await crypto.subtle.exportKey("pkcs8", key);
+    return new Uint8Array(result);
+  } catch (error) {
+    throw new Error("Failed to export private key", { cause: error });
+  }
+}
+async function importPrivateKey(pkcs8KeyData) {
+  try {
+    return await crypto.subtle.importKey(
+      "pkcs8",
+      pkcs8KeyData,
+      {
+        name: ECC_ALGORITHM
+      },
+      true,
+      ["deriveBits"]
+    );
+  } catch (error) {
+    throw new Error("Failed to import private key", { cause: error });
+  }
+}
+
+export { deriveSecretKey, exportPrivateKey, exportPublicKey, generateEccKeys, importPrivateKey, importPublicKey };
+//# sourceMappingURL=asymmetric-crypto.mjs.map
+//# sourceMappingURL=asymmetric-crypto.mjs.map

package/dist/asymmetric-crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts","../src/asymmetric-crypto/ellipticCurve.ts","../src/asymmetric-crypto/keys.ts"],"names":[],"mappings":";AACO,IAAM,kBAAA,GAAqB,GAAA;AAQ3B,IAAM,aAAA,GAAgB,QAAA;;;ACA7B,eAAsB,eAAA,CAAgB,oBAA+B,aAAA,EAA+C;AAClH,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,MACjC;AAAA,QACE,IAAA,EAAM,aAAA;AAAA,QACN,MAAA,EAAQ;AAAA,OACV;AAAA,MACA,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,4CAAA,EAA8C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAChF;AACF;;;AChBA,eAAsB,eAAA,GAA0C;AAC9D,EAAA,IAAI;AACF,IAAA,OAAQ,MAAM,OAAO,MAAA,CAAO,WAAA;AAAA,MAC1B;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,4CAAA,EAA8C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAChF;AACF;AAOA,eAAsB,gBAAgB,GAAA,EAAqC;AACzE,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,QAAQ,GAAG,CAAA;AACxD,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjE;AACF;AAOA,eAAsB,gBAAgB,WAAA,EAA6C;AACjF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,MAAA,CAAO,SAAA;AAAA,MACzB,MAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA;AAAC,KACH;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjE;AACF;AAOA,eAAsB,iBAAiB,GAAA,EAAqC;AAC1E,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,SAAS,GAAG,CAAA;AACzD,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,8BAAA,EAAgC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAClE;AACF;AAOA,eAAsB,iBAAiB,YAAA,EAA8C;AACnF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,MAAA,CAAO,SAAA;AAAA,MACzB,OAAA;AAAA,MACA,YAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,8BAAA,EAAgC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAClE;AACF","file":"asymmetric-crypto.mjs","sourcesContent":["export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n","import { ECC_ALGORITHM, AES_KEY_BIT_LENGTH } from '../constants';\n\n/**\n * Derives secret key from the other user's public key and own private key\n *\n * @param otherUserPublicKey - The public key of the other user\n * @param ownPrivateKey - The private key\n * @returns The derived secret key bits\n */\nexport async function deriveSecretKey(otherUserPublicKey: CryptoKey, ownPrivateKey: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.deriveBits(\n      {\n        name: ECC_ALGORITHM,\n        public: otherUserPublicKey,\n      },\n      ownPrivateKey,\n      AES_KEY_BIT_LENGTH,\n    );\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to derive elliptic curve secret key', { cause: error });\n  }\n}\n","import { ECC_ALGORITHM } from '../constants';\n\n/**\n * Generates elliptic curve key pair\n *\n * @returns The generated key pair\n */\nexport async function generateEccKeys(): Promise<CryptoKeyPair> {\n  try {\n    return (await crypto.subtle.generateKey(\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    )) as CryptoKeyPair;\n  } catch (error) {\n    throw new Error('Failed to generate elliptic curve key pair', { cause: error });\n  }\n}\n\n/**\n * Converts public CryptoKey into Uint8Array using SubjectPublicKeyInfo format (RFC 5280)\n *\n * @returns The Uint8Array representation of the public key\n */\nexport async function exportPublicKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('spki', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export public key', { cause: error });\n  }\n}\n\n/**\n * Converts public key in SubjectPublicKeyInfo format (RFC 5280) to CryptoKey\n *\n * @returns The CryptoKey representation of the public key\n */\nexport async function importPublicKey(spkiKeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'spki',\n      spkiKeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      [],\n    );\n  } catch (error) {\n    throw new Error('Failed to import public key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in CryptoKey to PKCS #8 format (RFC 5208)\n *\n * @returns The Uint8Array representation of the private key\n */\nexport async function exportPrivateKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('pkcs8', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export private key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in PKCS #8 format (RFC 5208) to CryptoKey\n *\n * @returns The CryptoKey representation of the private key\n */\nexport async function importPrivateKey(pkcs8KeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'pkcs8',\n      pkcs8KeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    );\n  } catch (error) {\n    throw new Error('Failed to import private key', { cause: error });\n  }\n}\n"]}

package/dist/constants.d.mts

@@ -0,0 +1,39 @@
+declare const AES_ALGORITHM = "AES-GCM";
+declare const AES_KEY_BIT_LENGTH = 256;
+declare const AUX_LEN = 128;
+declare const IV_LEN_BYTES = 16;
+declare const KEY_WRAPPING_ALGORITHM = "AES-KW";
+declare const KEY_FORMAT = "raw";
+declare const CONTEXT_WRAPPING = "CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets";
+declare const ECC_ALGORITHM = "X25519";
+declare const CONTEXT_LOGIN = "CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore";
+declare const CONTEXT_ENC_KEYSTORE = "CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore";
+declare const CONTEXT_RECOVERY = "CRYPTO library 2025-07-30 16:20:00 key for account recovery";
+declare const CONTEXT_INDEX = "CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices";
+declare const CONTEXT_DERIVE = "CRYPTO library 2025-08-27 17:08:00 derive one key from two keys";
+declare const PREFIX_MEDIA_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys";
+declare const PREFIX_PUBLIC_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys";
+declare const PREFIX_IDENTITY_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys";
+declare const ARGON2ID_PARALLELISM = 3;
+declare const ARGON2ID_ITERATIONS = 4;
+declare const ARGON2ID_MEMORY_SIZE = 65536;
+declare const ARGON2ID_SALT_BYTE_LENGTH = 16;
+declare const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;
+declare const IDENTITY_KEYSTORE_TAG = "Identity keystore";
+declare const ENCRYPTION_KEYSTORE_TAG = "Encryption keystore";
+declare const RECOVERY_KEYSTORE_TAG = "Key recovery keystroe";
+declare const INDEX_KEYSTORE_TAG = "Current encrypted indices";
+declare const KYBER512_PUBLIC_KEY_LENGTH = 800;
+declare const KYBER512_SECRET_KEY_LENGTH = 1632;
+declare const KYBER768_PUBLIC_KEY_LENGTH = 1184;
+declare const KYBER768_SECRET_KEY_LENGTH = 2400;
+declare const KYBER1024_PUBLIC_KEY_LENGTH = 1568;
+declare const KYBER1024_SECRET_KEY_LENGTH = 3168;
+declare const KYBER_SEED_LENGTH = 64;
+declare const HASH_BIT_LEN = 256;
+declare const MAX_CACHE_SIZE = 600000000;
+declare const MAX_EMAIL_PER_BATCH = 100;
+declare const DB_LABEL = "email";
+declare const DB_VERSION = 1;
+
+export { AES_ALGORITHM, AES_KEY_BIT_LENGTH, ARGON2ID_ITERATIONS, ARGON2ID_MEMORY_SIZE, ARGON2ID_OUTPUT_BYTE_LENGTH, ARGON2ID_PARALLELISM, ARGON2ID_SALT_BYTE_LENGTH, AUX_LEN, CONTEXT_DERIVE, CONTEXT_ENC_KEYSTORE, CONTEXT_INDEX, CONTEXT_LOGIN, CONTEXT_RECOVERY, CONTEXT_WRAPPING, DB_LABEL, DB_VERSION, ECC_ALGORITHM, ENCRYPTION_KEYSTORE_TAG, HASH_BIT_LEN, IDENTITY_KEYSTORE_TAG, INDEX_KEYSTORE_TAG, IV_LEN_BYTES, KEY_FORMAT, KEY_WRAPPING_ALGORITHM, KYBER1024_PUBLIC_KEY_LENGTH, KYBER1024_SECRET_KEY_LENGTH, KYBER512_PUBLIC_KEY_LENGTH, KYBER512_SECRET_KEY_LENGTH, KYBER768_PUBLIC_KEY_LENGTH, KYBER768_SECRET_KEY_LENGTH, KYBER_SEED_LENGTH, MAX_CACHE_SIZE, MAX_EMAIL_PER_BATCH, PREFIX_IDENTITY_KEY_COMMITMENT, PREFIX_MEDIA_KEY_COMMITMENT, PREFIX_PUBLIC_KEY_COMMITMENT, RECOVERY_KEYSTORE_TAG };

package/dist/constants.d.ts

@@ -0,0 +1,39 @@
+declare const AES_ALGORITHM = "AES-GCM";
+declare const AES_KEY_BIT_LENGTH = 256;
+declare const AUX_LEN = 128;
+declare const IV_LEN_BYTES = 16;
+declare const KEY_WRAPPING_ALGORITHM = "AES-KW";
+declare const KEY_FORMAT = "raw";
+declare const CONTEXT_WRAPPING = "CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets";
+declare const ECC_ALGORITHM = "X25519";
+declare const CONTEXT_LOGIN = "CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore";
+declare const CONTEXT_ENC_KEYSTORE = "CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore";
+declare const CONTEXT_RECOVERY = "CRYPTO library 2025-07-30 16:20:00 key for account recovery";
+declare const CONTEXT_INDEX = "CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices";
+declare const CONTEXT_DERIVE = "CRYPTO library 2025-08-27 17:08:00 derive one key from two keys";
+declare const PREFIX_MEDIA_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys";
+declare const PREFIX_PUBLIC_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys";
+declare const PREFIX_IDENTITY_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys";
+declare const ARGON2ID_PARALLELISM = 3;
+declare const ARGON2ID_ITERATIONS = 4;
+declare const ARGON2ID_MEMORY_SIZE = 65536;
+declare const ARGON2ID_SALT_BYTE_LENGTH = 16;
+declare const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;
+declare const IDENTITY_KEYSTORE_TAG = "Identity keystore";
+declare const ENCRYPTION_KEYSTORE_TAG = "Encryption keystore";
+declare const RECOVERY_KEYSTORE_TAG = "Key recovery keystroe";
+declare const INDEX_KEYSTORE_TAG = "Current encrypted indices";
+declare const KYBER512_PUBLIC_KEY_LENGTH = 800;
+declare const KYBER512_SECRET_KEY_LENGTH = 1632;
+declare const KYBER768_PUBLIC_KEY_LENGTH = 1184;
+declare const KYBER768_SECRET_KEY_LENGTH = 2400;
+declare const KYBER1024_PUBLIC_KEY_LENGTH = 1568;
+declare const KYBER1024_SECRET_KEY_LENGTH = 3168;
+declare const KYBER_SEED_LENGTH = 64;
+declare const HASH_BIT_LEN = 256;
+declare const MAX_CACHE_SIZE = 600000000;
+declare const MAX_EMAIL_PER_BATCH = 100;
+declare const DB_LABEL = "email";
+declare const DB_VERSION = 1;
+
+export { AES_ALGORITHM, AES_KEY_BIT_LENGTH, ARGON2ID_ITERATIONS, ARGON2ID_MEMORY_SIZE, ARGON2ID_OUTPUT_BYTE_LENGTH, ARGON2ID_PARALLELISM, ARGON2ID_SALT_BYTE_LENGTH, AUX_LEN, CONTEXT_DERIVE, CONTEXT_ENC_KEYSTORE, CONTEXT_INDEX, CONTEXT_LOGIN, CONTEXT_RECOVERY, CONTEXT_WRAPPING, DB_LABEL, DB_VERSION, ECC_ALGORITHM, ENCRYPTION_KEYSTORE_TAG, HASH_BIT_LEN, IDENTITY_KEYSTORE_TAG, INDEX_KEYSTORE_TAG, IV_LEN_BYTES, KEY_FORMAT, KEY_WRAPPING_ALGORITHM, KYBER1024_PUBLIC_KEY_LENGTH, KYBER1024_SECRET_KEY_LENGTH, KYBER512_PUBLIC_KEY_LENGTH, KYBER512_SECRET_KEY_LENGTH, KYBER768_PUBLIC_KEY_LENGTH, KYBER768_SECRET_KEY_LENGTH, KYBER_SEED_LENGTH, MAX_CACHE_SIZE, MAX_EMAIL_PER_BATCH, PREFIX_IDENTITY_KEY_COMMITMENT, PREFIX_MEDIA_KEY_COMMITMENT, PREFIX_PUBLIC_KEY_COMMITMENT, RECOVERY_KEYSTORE_TAG };

package/dist/constants.js

@@ -0,0 +1,80 @@
+'use strict';
+
+// src/constants.ts
+var AES_ALGORITHM = "AES-GCM";
+var AES_KEY_BIT_LENGTH = 256;
+var AUX_LEN = 128;
+var IV_LEN_BYTES = 16;
+var KEY_WRAPPING_ALGORITHM = "AES-KW";
+var KEY_FORMAT = "raw";
+var CONTEXT_WRAPPING = "CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets";
+var ECC_ALGORITHM = "X25519";
+var CONTEXT_LOGIN = "CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore";
+var CONTEXT_ENC_KEYSTORE = "CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore";
+var CONTEXT_RECOVERY = "CRYPTO library 2025-07-30 16:20:00 key for account recovery";
+var CONTEXT_INDEX = "CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices";
+var CONTEXT_DERIVE = "CRYPTO library 2025-08-27 17:08:00 derive one key from two keys";
+var PREFIX_MEDIA_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys";
+var PREFIX_PUBLIC_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys";
+var PREFIX_IDENTITY_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys";
+var ARGON2ID_PARALLELISM = 3;
+var ARGON2ID_ITERATIONS = 4;
+var ARGON2ID_MEMORY_SIZE = 65536;
+var ARGON2ID_SALT_BYTE_LENGTH = 16;
+var ARGON2ID_OUTPUT_BYTE_LENGTH = 32;
+var IDENTITY_KEYSTORE_TAG = "Identity keystore";
+var ENCRYPTION_KEYSTORE_TAG = "Encryption keystore";
+var RECOVERY_KEYSTORE_TAG = "Key recovery keystroe";
+var INDEX_KEYSTORE_TAG = "Current encrypted indices";
+var KYBER512_PUBLIC_KEY_LENGTH = 800;
+var KYBER512_SECRET_KEY_LENGTH = 1632;
+var KYBER768_PUBLIC_KEY_LENGTH = 1184;
+var KYBER768_SECRET_KEY_LENGTH = 2400;
+var KYBER1024_PUBLIC_KEY_LENGTH = 1568;
+var KYBER1024_SECRET_KEY_LENGTH = 3168;
+var KYBER_SEED_LENGTH = 64;
+var HASH_BIT_LEN = 256;
+var MAX_CACHE_SIZE = 6e8;
+var MAX_EMAIL_PER_BATCH = 100;
+var DB_LABEL = "email";
+var DB_VERSION = 1;
+
+exports.AES_ALGORITHM = AES_ALGORITHM;
+exports.AES_KEY_BIT_LENGTH = AES_KEY_BIT_LENGTH;
+exports.ARGON2ID_ITERATIONS = ARGON2ID_ITERATIONS;
+exports.ARGON2ID_MEMORY_SIZE = ARGON2ID_MEMORY_SIZE;
+exports.ARGON2ID_OUTPUT_BYTE_LENGTH = ARGON2ID_OUTPUT_BYTE_LENGTH;
+exports.ARGON2ID_PARALLELISM = ARGON2ID_PARALLELISM;
+exports.ARGON2ID_SALT_BYTE_LENGTH = ARGON2ID_SALT_BYTE_LENGTH;
+exports.AUX_LEN = AUX_LEN;
+exports.CONTEXT_DERIVE = CONTEXT_DERIVE;
+exports.CONTEXT_ENC_KEYSTORE = CONTEXT_ENC_KEYSTORE;
+exports.CONTEXT_INDEX = CONTEXT_INDEX;
+exports.CONTEXT_LOGIN = CONTEXT_LOGIN;
+exports.CONTEXT_RECOVERY = CONTEXT_RECOVERY;
+exports.CONTEXT_WRAPPING = CONTEXT_WRAPPING;
+exports.DB_LABEL = DB_LABEL;
+exports.DB_VERSION = DB_VERSION;
+exports.ECC_ALGORITHM = ECC_ALGORITHM;
+exports.ENCRYPTION_KEYSTORE_TAG = ENCRYPTION_KEYSTORE_TAG;
+exports.HASH_BIT_LEN = HASH_BIT_LEN;
+exports.IDENTITY_KEYSTORE_TAG = IDENTITY_KEYSTORE_TAG;
+exports.INDEX_KEYSTORE_TAG = INDEX_KEYSTORE_TAG;
+exports.IV_LEN_BYTES = IV_LEN_BYTES;
+exports.KEY_FORMAT = KEY_FORMAT;
+exports.KEY_WRAPPING_ALGORITHM = KEY_WRAPPING_ALGORITHM;
+exports.KYBER1024_PUBLIC_KEY_LENGTH = KYBER1024_PUBLIC_KEY_LENGTH;
+exports.KYBER1024_SECRET_KEY_LENGTH = KYBER1024_SECRET_KEY_LENGTH;
+exports.KYBER512_PUBLIC_KEY_LENGTH = KYBER512_PUBLIC_KEY_LENGTH;
+exports.KYBER512_SECRET_KEY_LENGTH = KYBER512_SECRET_KEY_LENGTH;
+exports.KYBER768_PUBLIC_KEY_LENGTH = KYBER768_PUBLIC_KEY_LENGTH;
+exports.KYBER768_SECRET_KEY_LENGTH = KYBER768_SECRET_KEY_LENGTH;
+exports.KYBER_SEED_LENGTH = KYBER_SEED_LENGTH;
+exports.MAX_CACHE_SIZE = MAX_CACHE_SIZE;
+exports.MAX_EMAIL_PER_BATCH = MAX_EMAIL_PER_BATCH;
+exports.PREFIX_IDENTITY_KEY_COMMITMENT = PREFIX_IDENTITY_KEY_COMMITMENT;
+exports.PREFIX_MEDIA_KEY_COMMITMENT = PREFIX_MEDIA_KEY_COMMITMENT;
+exports.PREFIX_PUBLIC_KEY_COMMITMENT = PREFIX_PUBLIC_KEY_COMMITMENT;
+exports.RECOVERY_KEYSTORE_TAG = RECOVERY_KEYSTORE_TAG;
+//# sourceMappingURL=constants.js.map
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAO,IAAM,aAAA,GAAgB;AACtB,IAAM,kBAAA,GAAqB;AAC3B,IAAM,OAAA,GAAU;AAChB,IAAM,YAAA,GAAe;AAErB,IAAM,sBAAA,GAAyB;AAC/B,IAAM,UAAA,GAAa;AACnB,IAAM,gBAAA,GAAmB;AAEzB,IAAM,aAAA,GAAgB;AAEtB,IAAM,aAAA,GAAgB;AACtB,IAAM,oBAAA,GAAuB;AAC7B,IAAM,gBAAA,GAAmB;AACzB,IAAM,aAAA,GAAgB;AACtB,IAAM,cAAA,GAAiB;AAEvB,IAAM,2BAAA,GAA8B;AACpC,IAAM,4BAAA,GAA+B;AACrC,IAAM,8BAAA,GACX;AAGK,IAAM,oBAAA,GAAuB;AAC7B,IAAM,mBAAA,GAAsB;AAC5B,IAAM,oBAAA,GAAuB;AAC7B,IAAM,yBAAA,GAA4B;AAClC,IAAM,2BAAA,GAA8B;AAEpC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,uBAAA,GAA0B;AAChC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,kBAAA,GAAqB;AAE3B,IAAM,0BAAA,GAA6B;AACnC,IAAM,0BAAA,GAA6B;AAEnC,IAAM,0BAAA,GAA6B;AACnC,IAAM,0BAAA,GAA6B;AAEnC,IAAM,2BAAA,GAA8B;AACpC,IAAM,2BAAA,GAA8B;AAEpC,IAAM,iBAAA,GAAoB;AAE1B,IAAM,YAAA,GAAe;AAErB,IAAM,cAAA,GAAiB;AACvB,IAAM,mBAAA,GAAsB;AAC5B,IAAM,QAAA,GAAW;AACjB,IAAM,UAAA,GAAa","file":"constants.js","sourcesContent":["export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n"]}

package/dist/constants.mjs

@@ -0,0 +1,42 @@
+// src/constants.ts
+var AES_ALGORITHM = "AES-GCM";
+var AES_KEY_BIT_LENGTH = 256;
+var AUX_LEN = 128;
+var IV_LEN_BYTES = 16;
+var KEY_WRAPPING_ALGORITHM = "AES-KW";
+var KEY_FORMAT = "raw";
+var CONTEXT_WRAPPING = "CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets";
+var ECC_ALGORITHM = "X25519";
+var CONTEXT_LOGIN = "CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore";
+var CONTEXT_ENC_KEYSTORE = "CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore";
+var CONTEXT_RECOVERY = "CRYPTO library 2025-07-30 16:20:00 key for account recovery";
+var CONTEXT_INDEX = "CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices";
+var CONTEXT_DERIVE = "CRYPTO library 2025-08-27 17:08:00 derive one key from two keys";
+var PREFIX_MEDIA_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys";
+var PREFIX_PUBLIC_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys";
+var PREFIX_IDENTITY_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys";
+var ARGON2ID_PARALLELISM = 3;
+var ARGON2ID_ITERATIONS = 4;
+var ARGON2ID_MEMORY_SIZE = 65536;
+var ARGON2ID_SALT_BYTE_LENGTH = 16;
+var ARGON2ID_OUTPUT_BYTE_LENGTH = 32;
+var IDENTITY_KEYSTORE_TAG = "Identity keystore";
+var ENCRYPTION_KEYSTORE_TAG = "Encryption keystore";
+var RECOVERY_KEYSTORE_TAG = "Key recovery keystroe";
+var INDEX_KEYSTORE_TAG = "Current encrypted indices";
+var KYBER512_PUBLIC_KEY_LENGTH = 800;
+var KYBER512_SECRET_KEY_LENGTH = 1632;
+var KYBER768_PUBLIC_KEY_LENGTH = 1184;
+var KYBER768_SECRET_KEY_LENGTH = 2400;
+var KYBER1024_PUBLIC_KEY_LENGTH = 1568;
+var KYBER1024_SECRET_KEY_LENGTH = 3168;
+var KYBER_SEED_LENGTH = 64;
+var HASH_BIT_LEN = 256;
+var MAX_CACHE_SIZE = 6e8;
+var MAX_EMAIL_PER_BATCH = 100;
+var DB_LABEL = "email";
+var DB_VERSION = 1;
+
+export { AES_ALGORITHM, AES_KEY_BIT_LENGTH, ARGON2ID_ITERATIONS, ARGON2ID_MEMORY_SIZE, ARGON2ID_OUTPUT_BYTE_LENGTH, ARGON2ID_PARALLELISM, ARGON2ID_SALT_BYTE_LENGTH, AUX_LEN, CONTEXT_DERIVE, CONTEXT_ENC_KEYSTORE, CONTEXT_INDEX, CONTEXT_LOGIN, CONTEXT_RECOVERY, CONTEXT_WRAPPING, DB_LABEL, DB_VERSION, ECC_ALGORITHM, ENCRYPTION_KEYSTORE_TAG, HASH_BIT_LEN, IDENTITY_KEYSTORE_TAG, INDEX_KEYSTORE_TAG, IV_LEN_BYTES, KEY_FORMAT, KEY_WRAPPING_ALGORITHM, KYBER1024_PUBLIC_KEY_LENGTH, KYBER1024_SECRET_KEY_LENGTH, KYBER512_PUBLIC_KEY_LENGTH, KYBER512_SECRET_KEY_LENGTH, KYBER768_PUBLIC_KEY_LENGTH, KYBER768_SECRET_KEY_LENGTH, KYBER_SEED_LENGTH, MAX_CACHE_SIZE, MAX_EMAIL_PER_BATCH, PREFIX_IDENTITY_KEY_COMMITMENT, PREFIX_MEDIA_KEY_COMMITMENT, PREFIX_PUBLIC_KEY_COMMITMENT, RECOVERY_KEYSTORE_TAG };
+//# sourceMappingURL=constants.mjs.map
+//# sourceMappingURL=constants.mjs.map

package/dist/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts"],"names":[],"mappings":";AAAO,IAAM,aAAA,GAAgB;AACtB,IAAM,kBAAA,GAAqB;AAC3B,IAAM,OAAA,GAAU;AAChB,IAAM,YAAA,GAAe;AAErB,IAAM,sBAAA,GAAyB;AAC/B,IAAM,UAAA,GAAa;AACnB,IAAM,gBAAA,GAAmB;AAEzB,IAAM,aAAA,GAAgB;AAEtB,IAAM,aAAA,GAAgB;AACtB,IAAM,oBAAA,GAAuB;AAC7B,IAAM,gBAAA,GAAmB;AACzB,IAAM,aAAA,GAAgB;AACtB,IAAM,cAAA,GAAiB;AAEvB,IAAM,2BAAA,GAA8B;AACpC,IAAM,4BAAA,GAA+B;AACrC,IAAM,8BAAA,GACX;AAGK,IAAM,oBAAA,GAAuB;AAC7B,IAAM,mBAAA,GAAsB;AAC5B,IAAM,oBAAA,GAAuB;AAC7B,IAAM,yBAAA,GAA4B;AAClC,IAAM,2BAAA,GAA8B;AAEpC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,uBAAA,GAA0B;AAChC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,kBAAA,GAAqB;AAE3B,IAAM,0BAAA,GAA6B;AACnC,IAAM,0BAAA,GAA6B;AAEnC,IAAM,0BAAA,GAA6B;AACnC,IAAM,0BAAA,GAA6B;AAEnC,IAAM,2BAAA,GAA8B;AACpC,IAAM,2BAAA,GAA8B;AAEpC,IAAM,iBAAA,GAAoB;AAE1B,IAAM,YAAA,GAAe;AAErB,IAAM,cAAA,GAAiB;AACvB,IAAM,mBAAA,GAAsB;AAC5B,IAAM,QAAA,GAAW;AACjB,IAAM,UAAA,GAAa","file":"constants.mjs","sourcesContent":["export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n"]}

package/dist/derive-key.d.mts

@@ -0,0 +1,91 @@
+/**
+ * Derives a symmetric key from the base key and context string
+ *
+ * @param context - The context string.
+ * The context string should be hardcoded, globally unique, and application-specific.
+ * @param baseKey - The base key (NOT PASSWORD!)
+ * @returns The derived secret key
+ */
+declare function deriveSymmetricKeyFromContext(context: string, baseKey: Uint8Array): Uint8Array;
+/**
+ * Derives a symmetric CryptoKey from the base key and context string
+ *
+ * @param context - The context string.
+ * The context string should be hardcoded, globally unique, and application-specific.
+ * @param baseKey - The base key (NOT PASSWORD!)
+ * @returns The derived secret CryptoKey
+ */
+declare function deriveSymmetricCryptoKeyFromContext(context: string, baseKey: Uint8Array): Promise<CryptoKey>;
+/**
+ * Derives a symmetric key from two keys
+ *
+ * @param key1 - The 32-bytes key
+ * @param key2 - The 32-bytes key
+ * @returns The derived secret key
+ */
+declare function deriveSymmetricKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Uint8Array;
+/**
+ * Derives a symmetric CryptoKey from two keys
+ *
+ * @param key1 - The 32-bytes key
+ * @param key2 - The 32-bytes key
+ * @returns The derived secret CryptoKey
+ */
+declare function deriveSymmetricCryptoKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Promise<CryptoKey>;
+/**
+ * Derives a symmetric key from two keys and context
+ *
+ * @param key1 - The 32-bytes key
+ * @param key2 - The 32-bytes key
+ * @param context - The context string
+ * @returns The derived symmetric key
+ */
+declare function deriveKeyFromTwoKeysAndContext(key1: Uint8Array, key2: Uint8Array, context: string): Uint8Array;
+
+/**
+ * Derives a symmetric key from a user's password with a randomly sampled salt
+ *
+ * @param password - The user's password
+ * @returns The derived secret key and randomly sampled salt
+ */
+declare function getKeyFromPassword(password: string): Promise<{
+    key: Uint8Array;
+    salt: Uint8Array;
+}>;
+/**
+ * Derives a symmetric key from a user's password and salt
+ *
+ * @param password - The user's password
+ * @param salt - The given salt
+ * @returns The derived secret key
+ */
+declare function getKeyFromPasswordAndSalt(password: string, salt: Uint8Array): Promise<Uint8Array>;
+/**
+ * Derives a HEX symmetric key from a user's password with a randomly sampled salt
+ *
+ * @param password - The user's password
+ * @returns The derived HEX secret key and randomly sampled HEX salt
+ */
+declare function getKeyFromPasswordHex(password: string): Promise<{
+    keyHex: string;
+    saltHex: string;
+}>;
+/**
+ * Derives a HEX symmetric key from a user's password and salt
+ *
+ * @param password - The user's password
+ * @param saltHex - The given HEX salt
+ * @returns The derived HEX secret key
+ */
+declare function getKeyFromPasswordAndSaltHex(password: string, saltHex: string): Promise<string>;
+/**
+ * Verifies the derived key
+ *
+ * @param password - The user's password
+ * @param saltHex - The given HEX salt
+ * @param keyHex - The derived HEX key
+ * @returns The result of the key verification
+ */
+declare function verifyKeyFromPasswordHex(password: string, saltHex: string, keyHex: string): Promise<boolean>;
+
+export { deriveKeyFromTwoKeysAndContext, deriveSymmetricCryptoKeyFromContext, deriveSymmetricCryptoKeyFromTwoKeys, deriveSymmetricKeyFromContext, deriveSymmetricKeyFromTwoKeys, getKeyFromPassword, getKeyFromPasswordAndSalt, getKeyFromPasswordAndSaltHex, getKeyFromPasswordHex, verifyKeyFromPasswordHex };