internxt-crypto 0.0.8-alpha → 0.0.10-alpha

package/dist/keystore-crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/converters.ts","../src/constants.ts","../src/asymmetric-crypto/keys.ts","../src/utils/keyConverters.ts","../src/utils/genMnemonic.ts","../src/hash/blake3.ts","../src/symmetric-crypto/keys.ts","../src/symmetric-crypto/core.ts","../src/symmetric-crypto/aes.ts","../src/storage-service/sessionStorageService.ts","../src/derive-key/deriveKeysFromKey.ts","../src/keystore-crypto/core.ts","../src/post-quantum-crypto/kyber768.ts","../src/keystore-crypto/emailEncryptionKey.ts","../src/keystore-crypto/userIdenityKey.ts"],"names":["blake3"],"mappings":";;;;;;;;AAkBO,SAAS,YAAY,GAAA,EAAyB;AACnD,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,GAAG,CAAA;AACrC;AA4BO,SAAS,mBAAmB,MAAA,EAA4B;AAC7D,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,IAAA,CAAK,MAAM,CAAA;AACrC,EAAA,MAAM,eAAe,IAAI,WAAA,CAAY,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA;AAC3D,EAAA,OAAO,KAAK,YAAY,CAAA;AAC1B;AAQO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,YAAA,GAAe,KAAK,GAAG,CAAA;AAC7B,EAAA,MAAM,MAAM,YAAA,CAAa,MAAA;AACzB,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,GAAG,CAAA;AAChC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,EAAK,CAAA,EAAA,EAAK;AAC5B,IAAA,KAAA,CAAM,CAAC,CAAA,GAAI,YAAA,CAAa,UAAA,CAAW,CAAC,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,IAAI,UAAA,CAAW,KAAA,CAAM,MAAM,CAAA;AACpC;;;ACpEO,IAAM,aAAA,GAAgB,SAAA;AACtB,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,OAAA,GAAU,GAAA;AAChB,IAAM,YAAA,GAAe,EAAA;AAGrB,IAAM,UAAA,GAAa,KAAA;AAGnB,IAAM,aAAA,GAAgB,QAAA;AAEtB,IAAM,aAAA,GAAgB,sEAAA;AACtB,IAAM,oBAAA,GAAuB,6EAAA;AAC7B,IAAM,gBAAA,GAAmB,6DAAA;AAgBzB,IAAM,qBAAA,GAAwB,mBAAA;AAC9B,IAAM,uBAAA,GAA0B,qBAAA;AAChC,IAAM,qBAAA,GAAwB,uBAAA;;;ACxBrC,eAAsB,eAAA,GAA0C;AAC9D,EAAA,IAAI;AACF,IAAA,OAAQ,MAAM,OAAO,MAAA,CAAO,WAAA;AAAA,MAC1B;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,4CAAA,EAA8C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAChF;AACF;AAOA,eAAsB,gBAAgB,GAAA,EAAqC;AACzE,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,QAAQ,GAAG,CAAA;AACxD,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjE;AACF;AAOA,eAAsB,gBAAgB,WAAA,EAA6C;AACjF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,MAAA,CAAO,SAAA;AAAA,MACzB,MAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA;AAAC,KACH;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjE;AACF;AAOA,eAAsB,iBAAiB,GAAA,EAAqC;AAC1E,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,SAAS,GAAG,CAAA;AACzD,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,8BAAA,EAAgC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAClE;AACF;AAOA,eAAsB,iBAAiB,YAAA,EAA8C;AACnF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,MAAA,CAAO,SAAA;AAAA,MACzB,OAAA;AAAA,MACA,YAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,8BAAA,EAAgC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAClE;AACF;;;AC9EA,eAAsB,qBAAqB,IAAA,EAAqC;AAC9E,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB,IAAA,CAAK,aAAa,CAAA;AACxD,IAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,IAAA,CAAK,cAAc,CAAA;AAC1D,IAAA,MAAM,IAAA,GAAO,KAAK,SAAA,CAAU;AAAA,MAC1B,aAAA,EAAe,mBAAmB,OAAO,CAAA;AAAA,MACzC,cAAA,EAAgB,mBAAmB,OAAO;AAAA,KAC3C,CAAA;AACD,IAAA,MAAM,MAAA,GAAS,KAAK,IAAI,CAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,2CAAA,EAA6C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC/E;AACF;AAQA,eAAsB,uBAAuB,IAAA,EAAuC;AAClF,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB,IAAA,CAAK,aAAa,CAAA;AACxD,IAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,IAAA,CAAK,cAAc,CAAA;AAC1D,IAAA,MAAM,IAAA,GAAO,KAAK,SAAA,CAAU;AAAA,MAC1B,aAAA,EAAe,mBAAmB,OAAO,CAAA;AAAA,MACzC,cAAA,EAAgB,mBAAmB,OAAO,CAAA;AAAA,MAC1C,kBAAA,EAAoB,kBAAA,CAAmB,IAAA,CAAK,kBAAkB,CAAA;AAAA,MAC9D,mBAAA,EAAqB,kBAAA,CAAmB,IAAA,CAAK,mBAAmB;AAAA,KACjE,CAAA;AACD,IAAA,MAAM,MAAA,GAAS,KAAK,IAAI,CAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,2CAAA,EAA6C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC/E;AACF;AA6BA,eAAsB,qBAAqB,MAAA,EAAuC;AAChF,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,KAAK,MAAM,CAAA;AACxB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,GAAA,CAAI,aAAa,CAAA;AACpD,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,GAAA,CAAI,cAAc,CAAA;AACrD,IAAA,MAAM,WAAA,GAAc,MAAM,eAAA,CAAgB,OAAO,CAAA;AACjD,IAAA,MAAM,WAAA,GAAc,MAAM,gBAAA,CAAiB,OAAO,CAAA;AAClD,IAAA,MAAM,MAAA,GAAuB;AAAA,MAC3B,aAAA,EAAe,WAAA;AAAA,MACf,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,sCAAA,EAAwC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC1E;AACF;AAQA,eAAsB,uBAAuB,MAAA,EAAyC;AACpF,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,KAAK,MAAM,CAAA;AACxB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,GAAA,CAAI,aAAa,CAAA;AACpD,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,GAAA,CAAI,cAAc,CAAA;AACrD,IAAA,MAAM,WAAA,GAAc,MAAM,eAAA,CAAgB,OAAO,CAAA;AACjD,IAAA,MAAM,WAAA,GAAc,MAAM,gBAAA,CAAiB,OAAO,CAAA;AAClD,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,GAAA,CAAI,kBAAkB,CAAA;AACzD,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,GAAA,CAAI,mBAAmB,CAAA;AAC1D,IAAA,MAAM,MAAA,GAAyB;AAAA,MAC7B,aAAA,EAAe,WAAA;AAAA,MACf,cAAA,EAAgB,WAAA;AAAA,MAChB,kBAAA,EAAoB,OAAA;AAAA,MACpB,mBAAA,EAAqB;AAAA,KACvB;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,4CAAA,EAA8C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAChF;AACF;AC/GO,SAAS,YAAY,IAAA,EAAsB;AAChD,EAAA,OAAa,KAAA,CAAA,gBAAA,CAAiB,UAAU,IAAI,CAAA;AAC9C;ACwFO,SAAS,kBAAA,CAAmB,OAAe,KAAA,EAA2B;AAC3E,EAAA,OAAO,OAAO,WAAA,CAAY,KAAK,GAAG,EAAE,KAAA,EAAO,OAAO,CAAA;AACpD;;;AC5FA,eAAsB,yBAAyB,OAAA,EAAuD;AACpG,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,UAAA;AAAA,IACA,IAAI,WAAW,OAAO,CAAA;AAAA,IACtB;AAAA,MACE,IAAA,EAAM,aAAA;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,IAAA;AAAA,IACA,CAAC,WAAW,SAAS;AAAA,GACvB;AACF;ACRA,eAAsB,kBAAkB,SAAA,EAAyC;AAC/E,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAEA,IAAA,MAAM,EAAA,GAAK,IAAI,UAAA,CAAW,EAAE,CAAA;AAE5B,IAAA,MAAM,SAAA,GAAY,YAAY,EAAE,CAAA;AAChC,IAAA,EAAA,CAAG,GAAA,CAAI,WAAW,CAAC,CAAA;AAEnB,IAAA,MAAM,oBAAA,GAAuB,MAAM,kBAAA,CAAmB,CAAA,EAAG,SAAS,CAAA;AAClE,IAAA,EAAA,CAAG,GAAA,CAAI,sBAAsB,EAAE,CAAA;AAE/B,IAAA,OAAO,EAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,qBAAA,EAAuB,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACzD;AACF;AAQA,eAAsB,mBAAmB,GAAA,EAAkC;AACzE,EAAA,OAAO,kBAAA,CAAmB,OAAA,GAAU,CAAA,EAAG,GAAG,CAAA;AAC5C;AAWA,eAAsB,cAAA,CACpB,OAAA,EACA,aAAA,EACA,EAAA,EACA,cAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACpC,EAAE,IAAA,EAAM,aAAA,EAAe,EAAA,EAAwB,cAAA,EAA+C;AAAA,MAC9F,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,SAAS,CAAA;AAAA,EACjC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;AAWA,eAAsB,cAAA,CACpB,UAAA,EACA,EAAA,EACA,aAAA,EACA,cAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACpC,EAAE,IAAA,EAAM,aAAA,EAAe,EAAA,EAAwB,cAAA,EAA+C;AAAA,MAC9F,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,SAAS,CAAA;AAAA,EACjC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;;;AClFA,eAAsB,oBAAA,CACpB,aAAA,EACA,OAAA,EACA,GAAA,EACA,SAAA,EAC8B;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,MAAM,iBAAA,CAAkB,SAAS,CAAA;AAC5C,IAAA,MAAM,cAAA,GAAiB,MAAM,kBAAA,CAAmB,GAAG,CAAA;AACnD,IAAA,MAAM,aAAa,MAAM,cAAA,CAAe,OAAA,EAAS,aAAA,EAAe,IAAI,cAAc,CAAA;AAClF,IAAA,OAAO,EAAE,YAAY,EAAA,EAAG;AAAA,EAC1B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;AAUA,eAAsB,oBAAA,CACpB,aAAA,EACA,gBAAA,EACA,GAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,cAAA,GAAiB,MAAM,kBAAA,CAAmB,GAAG,CAAA;AACnD,IAAA,MAAM,SAAS,MAAM,cAAA;AAAA,MACnB,gBAAA,CAAiB,UAAA;AAAA,MACjB,gBAAA,CAAiB,EAAA;AAAA,MACjB,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;;;ACrDA,SAAS,IAAI,GAAA,EAA4B;AACvC,EAAA,OAAO,cAAA,CAAe,QAAQ,GAAG,CAAA;AACnC;AAEA,SAAS,GAAA,CAAI,KAAa,KAAA,EAAqB;AAC7C,EAAA,OAAO,cAAA,CAAe,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAC1C;AAEA,SAAS,WAAW,GAAA,EAAmB;AACrC,EAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAC/B;AAEA,SAAS,OAAO,GAAA,EAAsB;AACpC,EAAA,OAAO,CAAC,CAAC,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA;AACrC;AAEA,SAAS,KAAA,GAAc;AACrB,EAAA,cAAA,CAAe,KAAA,EAAM;AACvB;AAEA,IAAM,qBAAA,GAAwB;AAAA,EAC5B,GAAA;AAAA,EACA,GAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA;AAEA,IAAO,6BAAA,GAAQ,qBAAA;ACfR,SAAS,6BAAA,CAA8B,SAAiB,OAAA,EAAiC;AAC9F,EAAA,OAAOA,OAAO,OAAA,EAAS,EAAE,SAAS,WAAA,CAAY,OAAO,GAAG,CAAA;AAC1D;AAUA,eAAsB,mCAAA,CAAoC,SAAiB,OAAA,EAAyC;AAClH,EAAA,IAAI;AACF,IAAA,IAAI,OAAA,CAAQ,MAAA,IAAU,kBAAA,GAAqB,CAAA,EAAG;AAC5C,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gCAAA,EAAmC,kBAAA,GAAqB,CAAC,CAAA,MAAA,CAAQ,CAAA;AAAA,IACnF;AACA,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAAA,IACpC;AACA,IAAA,MAAM,QAAA,GAAW,6BAAA,CAA8B,OAAA,EAAS,OAAO,CAAA;AAC/D,IAAA,MAAM,GAAA,GAAM,MAAM,wBAAA,CAAyB,QAAQ,CAAA;AAEnD,IAAA,OAAO,GAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,sDAAA,EAAwD,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC1F;AACF;;;ACvBA,eAAsB,sBAAA,CACpB,SAAA,EACA,OAAA,EACA,MAAA,EACA,GAAA,EAC8B;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,MAAA,GAAS,GAAA;AACrB,IAAA,MAAM,OAAA,GAAU,mBAAmB,OAAO,CAAA;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,SAAA,EAAW,SAAS,GAAG,CAAA;AACjE,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,oCAAA,EAAsC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACxE;AACF;AAWA,eAAsB,sBAAA,CACpB,SAAA,EACA,aAAA,EACA,MAAA,EACA,GAAA,EACiB;AACjB,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,MAAA,GAAS,GAAA;AACrB,IAAA,MAAM,OAAA,GAAU,MAAM,oBAAA,CAAqB,SAAA,EAAW,eAAe,GAAG,CAAA;AACxE,IAAA,MAAM,MAAA,GAAS,mBAAmB,OAAO,CAAA;AACzC,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,oCAAA,EAAsC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACxE;AACF;AAOO,SAAS,SAAA,GAAoB;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,6BAAA,CAAsB,GAAA,CAAI,QAAQ,CAAA;AACjD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,WAAW,CAAA;AAAA,IAC7B;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,2CAAA,EAA6C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC/E;AACF;AAOO,SAAS,UAAA,GAAyB;AACvC,EAAA,IAAI;AACF,IAAA,MAAM,aAAA,GAAgB,6BAAA,CAAsB,GAAA,CAAI,SAAS,CAAA;AACzD,IAAA,IAAI,CAAC,aAAA,EAAe;AAClB,MAAA,MAAM,IAAI,MAAM,aAAa,CAAA;AAAA,IAC/B;AACA,IAAA,OAAO,mBAAmB,aAAa,CAAA;AAAA,EACzC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6CAAA,EAA+C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjF;AACF;AAQA,eAAsB,0BAA0B,OAAA,EAAyC;AACvF,EAAA,OAAO,mCAAA,CAAoC,eAAe,OAAO,CAAA;AACnE;AAQA,eAAsB,kBAAkB,aAAA,EAA2C;AACjF,EAAA,MAAM,mBAAA,GAAsB,MAAM,kBAAA,CAAmB,kBAAA,GAAqB,GAAG,aAAa,CAAA;AAC1F,EAAA,OAAO,mCAAA,CAAoC,kBAAkB,mBAAmB,CAAA;AAClF;AASA,eAAsB,4BAA4B,OAAA,EAAyC;AACzF,EAAA,OAAO,mCAAA,CAAoC,sBAAsB,OAAO,CAAA;AAC1E;AClHO,SAAS,kBAAkB,IAAA,EAGhC;AACA,EAAA,IAAI;AACF,IAAA,OAAO,SAAA,CAAU,OAAO,IAAI,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,+BAAA,EAAiC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACnE;AACF;;;ACEO,SAAS,qBAAA,GAAgC;AAC9C,EAAA,OAAO,YAAY,kBAAkB,CAAA;AACvC;AAOA,eAAsB,sBAAA,GAAkD;AACtE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,EAAgB;AACtC,IAAA,MAAM,eAAe,iBAAA,EAAkB;AACvC,IAAA,MAAM,MAAA,GAAyB;AAAA,MAC7B,gBAAgB,OAAA,CAAQ,UAAA;AAAA,MACxB,eAAe,OAAA,CAAQ,SAAA;AAAA,MACvB,oBAAoB,YAAA,CAAa,SAAA;AAAA,MACjC,qBAAqB,YAAA,CAAa;AAAA,KACpC;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,oCAAA,EAAsC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACxE;AACF;AAQA,eAAsB,oCAAA,GAInB;AACD,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,SAAA,EAAU;AACzB,IAAA,MAAM,UAAU,UAAA,EAAW;AAC3B,IAAA,MAAM,IAAA,GAAO,MAAM,sBAAA,EAAuB;AAC1C,IAAA,MAAM,OAAA,GAAU,MAAM,sBAAA,CAAuB,IAAI,CAAA;AAEjD,IAAA,MAAM,SAAA,GAAY,MAAM,2BAAA,CAA4B,OAAO,CAAA;AAC3D,IAAA,MAAM,aAAa,MAAM,sBAAA,CAAuB,SAAA,EAAW,OAAA,EAAS,QAAQ,uBAAuB,CAAA;AACnG,IAAA,MAAM,kBAAA,GAAwC;AAAA,MAC5C,MAAA;AAAA,MACA,IAAA,EAAA,YAAA;AAAA,MACA,aAAA,EAAe;AAAA,KACjB;AACA,IAAA,MAAM,gBAAgB,qBAAA,EAAsB;AAC5C,IAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB,aAAa,CAAA;AACzD,IAAA,MAAM,UAAU,MAAM,sBAAA,CAAuB,WAAA,EAAa,OAAA,EAAS,QAAQ,qBAAqB,CAAA;AAChG,IAAA,MAAM,gBAAA,GAAsC;AAAA,MAC1C,MAAA;AAAA,MACA,IAAA,EAAA,UAAA;AAAA,MACA,aAAA,EAAe;AAAA,KACjB;AACA,IAAA,OAAO,EAAE,kBAAA,EAAoB,gBAAA,EAAkB,aAAA,EAAc;AAAA,EAC/D,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,oDAAA,EAAsD,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACxF;AACF;AASA,eAAsB,uBAAuB,iBAAA,EAA+D;AAC1G,EAAA,IAAI;AACF,IAAA,IAAI,kBAAkB,IAAA,IAAA,YAAA,mBAAiC;AACrD,MAAA,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAAA,IACpC;AACA,IAAA,MAAM,UAAU,UAAA,EAAW;AAC3B,IAAA,MAAM,SAAA,GAAY,MAAM,2BAAA,CAA4B,OAAO,CAAA;AAC3D,IAAA,MAAM,OAAO,MAAM,sBAAA;AAAA,MACjB,SAAA;AAAA,MACA,iBAAA,CAAkB,aAAA;AAAA,MAClB,iBAAA,CAAkB,MAAA;AAAA,MAClB;AAAA,KACF;AACA,IAAA,MAAM,IAAA,GAAuB,MAAM,sBAAA,CAAuB,IAAI,CAAA;AAC9D,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,oCAAA,EAAsC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACxE;AACF;AAUA,eAAsB,oBAAA,CACpB,eACA,iBAAA,EACyB;AACzB,EAAA,IAAI;AACF,IAAA,IAAI,kBAAkB,IAAA,IAAA,UAAA,iBAA+B;AACnD,MAAA,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAAA,IACpC;AACA,IAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB,aAAa,CAAA;AACzD,IAAA,MAAM,OAAO,MAAM,sBAAA;AAAA,MACjB,WAAA;AAAA,MACA,iBAAA,CAAkB,aAAA;AAAA,MAClB,iBAAA,CAAkB,MAAA;AAAA,MAClB;AAAA,KACF;AACA,IAAA,MAAM,IAAA,GAAuB,MAAM,sBAAA,CAAuB,IAAI,CAAA;AAC9D,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,kCAAA,EAAoC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACtE;AACF;;;ACxHA,eAAsB,oBAAA,GAA8C;AAClE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,EAAgB;AACtC,IAAA,MAAM,MAAA,GAAuB;AAAA,MAC3B,gBAAgB,OAAA,CAAQ,UAAA;AAAA,MACxB,eAAe,OAAA,CAAQ;AAAA,KACzB;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;AAQA,eAAsB,sBAAA,GAAqD;AACzE,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAA,UAAA;AACN,IAAA,MAAM,SAAS,SAAA,EAAU;AACzB,IAAA,MAAM,UAAU,UAAA,EAAW;AAC3B,IAAA,MAAM,IAAA,GAAO,MAAM,oBAAA,EAAqB;AACxC,IAAA,MAAM,OAAA,GAAU,MAAM,oBAAA,CAAqB,IAAI,CAAA;AAC/C,IAAA,MAAM,SAAA,GAAY,MAAM,yBAAA,CAA0B,OAAO,CAAA;AACzD,IAAA,MAAM,gBAAgB,MAAM,sBAAA,CAAuB,SAAA,EAAW,OAAA,EAAS,QAAQ,qBAAqB,CAAA;AACpG,IAAA,MAAM,MAAA,GAA4B;AAAA,MAChC,MAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,oCAAA,EAAsC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACxE;AACF;AASA,eAAsB,qBAAqB,iBAAA,EAA6D;AACtG,EAAA,IAAI;AACF,IAAA,IAAI,kBAAkB,IAAA,IAAA,UAAA,iBAA+B;AACnD,MAAA,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAAA,IACpC;AACA,IAAA,MAAM,UAAU,UAAA,EAAW;AAC3B,IAAA,MAAM,SAAA,GAAY,MAAM,yBAAA,CAA0B,OAAO,CAAA;AACzD,IAAA,MAAM,OAAO,MAAM,sBAAA;AAAA,MACjB,SAAA;AAAA,MACA,iBAAA,CAAkB,aAAA;AAAA,MAClB,iBAAA,CAAkB,MAAA;AAAA,MAClB;AAAA,KACF;AACA,IAAA,MAAM,IAAA,GAAqB,MAAM,oBAAA,CAAqB,IAAI,CAAA;AAC1D,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,kCAAA,EAAoC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACtE;AACF","file":"keystore-crypto.mjs","sourcesContent":["import { bytesToHex, hexToBytes } from '@noble/hashes/utils.js';\n\n/**\n * Converts a Uint8Array into a hexadecimal string.\n *\n * @param array - The Uint8Array to convert.\n * @returns The hexadecimal string representation of the array.\n */\nexport function uint8ArrayToHex(array: Uint8Array): string {\n  return bytesToHex(array);\n}\n\n/**\n * Converts a UTF-8 string into a Uint8Array.\n *\n * @param str - The UTF-8 string to convert.\n * @returns A Uint8Array created from the UTF-8 string.\n */\nexport function UTF8ToUint8(str: string): Uint8Array {\n  return new TextEncoder().encode(str);\n}\n\n/**\n * Converts an Uint8Array into a UTF-8 string.\n *\n * @param array - The Uint8Array to convert.\n * @returns The UTF-8 string representation of the array.\n */\nexport function uint8ToUTF8(array: Uint8Array): string {\n  return new TextDecoder().decode(array);\n}\n\n/**\n * Converts a hexadecimal string into a Uint8Array.\n *\n * @param hex - The hexadecimal string to convert.\n * @returns A Uint8Array created from the hex string.\n */\nexport function hexToUint8Array(hex: string): Uint8Array {\n  return hexToBytes(hex);\n}\n\n/**\n * Converts a Uint8Array into a base64 string.\n *\n * @param array - The Uint8Array to convert.\n * @returns The base64 string representation of the array.\n */\nexport function uint8ArrayToBase64(buffer: Uint8Array): string {\n  const array = Uint16Array.from(buffer);\n  const binaryString = new TextDecoder('UTF-16').decode(array);\n  return btoa(binaryString);\n}\n\n/**\n * Converts a base64 string into a Uint8Array.\n *\n * @param str - The base64 string to convert.\n * @returns A Uint8Array created from the base64 string.\n */\nexport function base64ToUint8Array(str: string): Uint8Array {\n  const binaryString = atob(str);\n  const len = binaryString.length;\n  const array = new Uint8Array(len);\n  for (let i = 0; i < len; i++) {\n    array[i] = binaryString.charCodeAt(i);\n  }\n  return new Uint8Array(array.buffer);\n}\n","export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n","import { ECC_ALGORITHM } from '../constants';\n\n/**\n * Generates elliptic curve key pair\n *\n * @returns The generated key pair\n */\nexport async function generateEccKeys(): Promise<CryptoKeyPair> {\n  try {\n    return (await crypto.subtle.generateKey(\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    )) as CryptoKeyPair;\n  } catch (error) {\n    throw new Error('Failed to generate elliptic curve key pair', { cause: error });\n  }\n}\n\n/**\n * Converts public CryptoKey into Uint8Array using SubjectPublicKeyInfo format (RFC 5280)\n *\n * @returns The Uint8Array representation of the public key\n */\nexport async function exportPublicKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('spki', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export public key', { cause: error });\n  }\n}\n\n/**\n * Converts public key in SubjectPublicKeyInfo format (RFC 5280) to CryptoKey\n *\n * @returns The CryptoKey representation of the public key\n */\nexport async function importPublicKey(spkiKeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'spki',\n      spkiKeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      [],\n    );\n  } catch (error) {\n    throw new Error('Failed to import public key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in CryptoKey to PKCS #8 format (RFC 5208)\n *\n * @returns The Uint8Array representation of the private key\n */\nexport async function exportPrivateKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('pkcs8', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export private key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in PKCS #8 format (RFC 5208) to CryptoKey\n *\n * @returns The CryptoKey representation of the private key\n */\nexport async function importPrivateKey(pkcs8KeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'pkcs8',\n      pkcs8KeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    );\n  } catch (error) {\n    throw new Error('Failed to import private key', { cause: error });\n  }\n}\n","import { uint8ArrayToBase64, base64ToUint8Array } from '.';\nimport { IdentityKeys, EncryptionKeys, EncryptedKeystore, MediaKeys, PublicKeys } from '../types';\nimport { exportPublicKey, exportPrivateKey, importPublicKey, importPrivateKey } from '../asymmetric-crypto';\nimport { base64ToCiphertext, ciphertextToBase64 } from './aesConverters';\n\n/**\n * Converts identity keys to base64\n *\n * @param keys - The identity keys\n * @returns The resulting base64 string\n */\nexport async function identityKeysToBase64(keys: IdentityKeys): Promise<string> {\n  try {\n    const pkArray = await exportPublicKey(keys.userPublicKey);\n    const skArray = await exportPrivateKey(keys.userPrivateKey);\n    const json = JSON.stringify({\n      userPublicKey: uint8ArrayToBase64(pkArray),\n      userPrivateKey: uint8ArrayToBase64(skArray),\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert identity keys to base64', { cause: error });\n  }\n}\n\n/**\n * Converts encryption keys to base64\n *\n * @param keys - The encryption keys\n * @returns The resulting base64 string\n */\nexport async function encryptionKeysToBase64(keys: EncryptionKeys): Promise<string> {\n  try {\n    const pkArray = await exportPublicKey(keys.userPublicKey);\n    const skArray = await exportPrivateKey(keys.userPrivateKey);\n    const json = JSON.stringify({\n      userPublicKey: uint8ArrayToBase64(pkArray),\n      userPrivateKey: uint8ArrayToBase64(skArray),\n      userPublicKyberKey: uint8ArrayToBase64(keys.userPublicKyberKey),\n      userPrivateKyberKey: uint8ArrayToBase64(keys.userPrivateKyberKey),\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert identity keys to base64', { cause: error });\n  }\n}\n\n/**\n * Converts encrypted keystore to base64\n *\n * @param keystore - The encrypted keystore\n * @returns The resulting base64 string\n */\nexport function encryptedKeystoreToBase64(keystore: EncryptedKeystore): string {\n  try {\n    const ciphertext = ciphertextToBase64(keystore.encryptedKeys);\n    const json = JSON.stringify({\n      userID: keystore.userID,\n      type: keystore.type.toString(),\n      encryptedKeys: ciphertext,\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert encrypted keystore to base64', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to identity keys\n *\n * @param base64 - The base64 input\n * @returns The resulting idenity keys\n */\nexport async function base64ToIdentityKeys(base64: string): Promise<IdentityKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const pkArray = base64ToUint8Array(obj.userPublicKey);\n    const skArray = base64ToUint8Array(obj.userPrivateKey);\n    const pkCryptoKey = await importPublicKey(pkArray);\n    const skCryptoKey = await importPrivateKey(skArray);\n    const result: IdentityKeys = {\n      userPublicKey: pkCryptoKey,\n      userPrivateKey: skCryptoKey,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed convert base64 to idenity key', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to encryption keys\n *\n * @param base64 - The base64 input\n * @returns The resulting encryption keys\n */\nexport async function base64ToEncryptionKeys(base64: string): Promise<EncryptionKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const pkArray = base64ToUint8Array(obj.userPublicKey);\n    const skArray = base64ToUint8Array(obj.userPrivateKey);\n    const pkCryptoKey = await importPublicKey(pkArray);\n    const skCryptoKey = await importPrivateKey(skArray);\n    const pkKyber = base64ToUint8Array(obj.userPublicKyberKey);\n    const skKyber = base64ToUint8Array(obj.userPrivateKyberKey);\n    const result: EncryptionKeys = {\n      userPublicKey: pkCryptoKey,\n      userPrivateKey: skCryptoKey,\n      userPublicKyberKey: pkKyber,\n      userPrivateKyberKey: skKyber,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to convert base64 to encryption key', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to encrypted keystore\n *\n * @param base64 - The base64 input\n * @returns The resulting encrypted keystore\n */\nexport function base64ToEncryptedKeystore(base64: string): EncryptedKeystore {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const ciphertext = base64ToCiphertext(obj.encryptedKeys);\n    const result: EncryptedKeystore = {\n      userID: obj.userID,\n      type: obj.type,\n      encryptedKeys: ciphertext,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to convert base64 to encrypted keystore', { cause: error });\n  }\n}\n\n/**\n * Converts media keys to base64\n *\n * @param keys - The media keys\n * @returns The resulting base64 string\n */\nexport function mediaKeysToBase64(keys: MediaKeys): string {\n  try {\n    const json = JSON.stringify({\n      olmKey: uint8ArrayToBase64(keys.olmKey),\n      pqKey: uint8ArrayToBase64(keys.pqKey),\n      index: keys.index.toString(),\n      userID: keys.userID,\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert media keys to base64', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to media keys\n *\n * @param base64 - The base64 input\n * @returns The resulting media keys\n */\nexport async function base64ToMediaKeys(base64: string): Promise<MediaKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n\n    const result: MediaKeys = {\n      olmKey: base64ToUint8Array(obj.olmKey),\n      pqKey: base64ToUint8Array(obj.pqKey),\n      index: Number(obj.index),\n      userID: obj.userID,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed convert base64 to media keys', { cause: error });\n  }\n}\n\n/**\n * Converts a base64 string into PublicKeys type.\n *\n * @param base64 - The base64 representation of the public key.\n * @returns The resulting PublicKeys.\n */\nexport async function base64ToPublicKey(base64: string): Promise<PublicKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const eccPublicKeyBytes = base64ToUint8Array(obj.eccPublicKey);\n    const eccPublicKey = await importPublicKey(eccPublicKeyBytes);\n    const kyberPublicKey = base64ToUint8Array(obj.kyberPublicKey);\n    return {\n      eccPublicKey: eccPublicKey,\n      kyberPublicKey: kyberPublicKey,\n    };\n  } catch (error) {\n    throw new Error('Failed to convert base64 to PublicKeys', { cause: error });\n  }\n}\n\n/**\n * Converts a PublicKeys type into base64 string.\n *\n * @param key - The PublicKeys key.\n * @returns The resulting base64 string.\n */\nexport async function publicKeyToBase64(key: PublicKeys): Promise<string> {\n  try {\n    const eccPublicKeyArray = await exportPublicKey(key.eccPublicKey);\n    const json = JSON.stringify({\n      eccPublicKey: uint8ArrayToBase64(eccPublicKeyArray),\n      kyberPublicKey: uint8ArrayToBase64(key.kyberPublicKey),\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert key of the type PublicKeys to base64', { cause: error });\n  }\n}\n","import * as bip39 from '@scure/bip39';\nimport { wordlist } from '@scure/bip39/wordlists/english';\n\n/**\n * Generates a mnemonic of required bit strength\n *\n * @param bits - The bit strength.\n * @returns The generated mnemonic.\n */\nexport function genMnemonic(bits: number): string {\n  return bip39.generateMnemonic(wordlist, bits);\n}\n","import { blake3 } from '@noble/hashes/blake3.js';\nimport { utf8ToBytes, bytesToHex } from '@noble/hashes/utils.js';\n\n/**\n * Hashes the given array of data\n *\n * @param data - The data to hash\n * @returns The resulting hash array\n */\nexport function hashData(data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create();\n    for (const d of data) {\n      hasher.update(d);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\nexport function keyedHashHex(hashKey: Uint8Array, data: Uint8Array[]): string {\n  try {\n    const hash = keyedHash(hashKey, data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to compute hash hex', { cause: error });\n  }\n}\n\nexport function keyedHash(hashKey: Uint8Array, data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create({ key: hashKey });\n    for (const d of data) {\n      hasher.update(d);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data\n *\n * @param data - The data to hash\n * @returns The resulting hash hex string\n */\nexport function hashDataHex(data: Uint8Array[]): string {\n  try {\n    const hash = hashData(data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param data - The data to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromData(bytes: number, data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create({ dkLen: bytes });\n    for (const chunk of data) {\n      hasher.update(chunk);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to get bytes from data', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param data - The data to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromDataHex(bytes: number, data: Uint8Array[]): string {\n  try {\n    const hash = getBytesFromData(bytes, data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to get bytes from data', { cause: error });\n  }\n}\n\n/**\n * Hashes the given string using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param value - The string to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromString(bytes: number, value: string): Uint8Array {\n  return blake3(utf8ToBytes(value), { dkLen: bytes });\n}\n\n/**\n * Hashes the given string using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param value - The string to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromStrinHex(bytes: number, value: string): string {\n  return bytesToHex(getBytesFromString(bytes, value));\n}\n","import { AES_ALGORITHM, AES_KEY_BIT_LENGTH, KEY_FORMAT } from '../constants';\nimport { getBytesFromString } from '../hash';\n\n/**\n * Converts Uint8Array into CryptoKey\n *\n * @param keyData - The Uint8Array representation of the symmetric key\n * @returns The resulting symmetric CryptoKey.\n */\nexport async function importSymmetricCryptoKey(keyData: Uint8Array | ArrayBuffer): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    KEY_FORMAT,\n    new Uint8Array(keyData),\n    {\n      name: AES_ALGORITHM,\n      length: AES_KEY_BIT_LENGTH,\n    },\n    true,\n    ['encrypt', 'decrypt'],\n  );\n}\n\n/**\n * Converts CryptoKey into Uint8Array\n *\n * @param key - The symmetric CryptoKey\n * @returns The resulting Uint8Array.\n */\nexport async function exportSymmetricCryptoKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const rawKey = await crypto.subtle.exportKey(KEY_FORMAT, key);\n    return new Uint8Array(rawKey);\n  } catch (error) {\n    throw new Error('Failed to export symmetric CryptoKey', { cause: error });\n  }\n}\n\n/**\n * Generates symmetric CryptoKey\n *\n * @returns The generated CryptoKey.\n */\nexport async function genSymmetricCryptoKey(): Promise<CryptoKey> {\n  return crypto.subtle.generateKey(\n    {\n      name: AES_ALGORITHM,\n      length: AES_KEY_BIT_LENGTH,\n    },\n    true,\n    ['encrypt', 'decrypt'],\n  );\n}\n\n/**\n * Generates symmetric key as Uint8Array\n *\n * @returns The generated Uint8Array.\n */\nexport function genSymmetricKey(): Uint8Array {\n  try {\n    const key = new Uint8Array(AES_KEY_BIT_LENGTH / 8);\n    crypto.getRandomValues(key);\n    return key;\n  } catch (error) {\n    throw new Error('Failed to generate symmetric key', { cause: error });\n  }\n}\n\n/**\n * Derives CryptoKey from the given key material\n *\n * @returns The derived CryptoKey.\n */\nexport async function deriveSymmetricCryptoKey(keyMaterial: string): Promise<CryptoKey> {\n  try {\n    const hashBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, keyMaterial);\n    return importSymmetricCryptoKey(hashBuffer);\n  } catch (error) {\n    throw new Error('Failed to derive CryptoKey from the given key material', { cause: error });\n  }\n}\n","import { randomBytes } from '@noble/post-quantum/utils.js';\nimport { getBytesFromString } from '../hash';\nimport { AUX_LEN, AES_ALGORITHM, IV_LEN_BYTES } from '../constants';\n\n/**\n * Creates an initialization vector (IV) using RGB-based construction (8.2.2 NIST Special Publication 800-38D)\n * Constructs a 128-bits IV from 2 fileds: the random field (at least 96 bits) and the free field (32 bits).\n * If free filed is empty, then the entier 128-bit IV is sampled randomly.\n *\n * @param freeFiled - The string with an unrestricted content. Can be a device identifier, etc.\n * @returns The resulting 128-bits initialization vector.\n */\nexport async function createNISTbasedIV(freeField?: string): Promise<Uint8Array> {\n  try {\n    if (!freeField) {\n      return randomBytes(IV_LEN_BYTES);\n    }\n\n    const iv = new Uint8Array(16);\n\n    const randFiled = randomBytes(12);\n    iv.set(randFiled, 0);\n\n    const freeFiledFixedLength = await getBytesFromString(4, freeField);\n    iv.set(freeFiledFixedLength, 12);\n\n    return iv;\n  } catch (error) {\n    throw new Error('Failed to create IV', { cause: error });\n  }\n}\n\n/**\n * Hashes aux string to make it fixed-length\n *\n * @param aux - The auxilay string of arbitrary length\n * @returns The resulting fixed-length auxilary string.\n */\nexport async function makeAuxFixedLength(aux: string): Promise<Uint8Array> {\n  return getBytesFromString(AUX_LEN / 8, aux);\n}\n\n/**\n * Symmetrically encrypts message\n *\n * @param message - The message to encrypt\n * @param encryptionKey - The encryption key\n * @param iv - The initialization vector\n * @param additionalData - The auxilary data\n * @returns The resulting ciphertext\n */\nexport async function encryptMessage(\n  message: Uint8Array,\n  encryptionKey: CryptoKey,\n  iv: Uint8Array,\n  additionalData: Uint8Array,\n): Promise<Uint8Array> {\n  try {\n    const encrypted = await crypto.subtle.encrypt(\n      { name: AES_ALGORITHM, iv: iv as BufferSource, additionalData: additionalData as BufferSource },\n      encryptionKey,\n      message as BufferSource,\n    );\n    return new Uint8Array(encrypted);\n  } catch (error) {\n    throw new Error('Failed to encrypt symmetrically', { cause: error });\n  }\n}\n\n/**\n * Symmetrically decrypts message\n *\n * @param ciphertext - The encrypted message\n * @param ciphertext - The initialization vector\n * @param encryptionKey - The encryption key\n * @param additionalData - The auxilary data\n * @returns The resulting decrypted message\n */\nexport async function decryptMessage(\n  ciphertext: Uint8Array,\n  iv: Uint8Array,\n  encryptionKey: CryptoKey,\n  additionalData: Uint8Array,\n): Promise<Uint8Array> {\n  try {\n    const decrypted = await crypto.subtle.decrypt(\n      { name: AES_ALGORITHM, iv: iv as BufferSource, additionalData: additionalData as BufferSource },\n      encryptionKey,\n      ciphertext as BufferSource,\n    );\n    return new Uint8Array(decrypted);\n  } catch (error) {\n    throw new Error('Failed to decrypt symmetrically', { cause: error });\n  }\n}\n","import { SymmetricCiphertext } from '../types';\nimport { createNISTbasedIV, makeAuxFixedLength, encryptMessage, decryptMessage } from './core';\n\n/**\n * Symmetrically encrypts the message\n *\n * @param encryptionKey - The symmetric CryptoKey used for message encryption\n * @param message - The message to encrypt\n * @param freeField - The context of the message (required for IV generation)\n * @param aux - The auxilary string\n * @returns The resulting ciphertext.\n */\nexport async function encryptSymmetrically(\n  encryptionKey: CryptoKey,\n  message: Uint8Array,\n  aux: string,\n  freeField?: string,\n): Promise<SymmetricCiphertext> {\n  try {\n    const iv = await createNISTbasedIV(freeField);\n    const additionalData = await makeAuxFixedLength(aux);\n    const ciphertext = await encryptMessage(message, encryptionKey, iv, additionalData);\n    return { ciphertext, iv };\n  } catch (error) {\n    throw new Error('Failed to encrypt symmetrically', { cause: error });\n  }\n}\n\n/**\n * Decryps symmetrically encrypted message\n *\n * @param encryptionKey - The symmetric CryptoKey used for message encryption\n * @param encryptedMessage - The ciphertext\n * @param aux - The auxilary string\n * @returns The resulting ciphertext.\n */\nexport async function decryptSymmetrically(\n  encryptionKey: CryptoKey,\n  encryptedMessage: SymmetricCiphertext,\n  aux: string,\n): Promise<Uint8Array> {\n  try {\n    const additionalData = await makeAuxFixedLength(aux);\n    const result = await decryptMessage(\n      encryptedMessage.ciphertext,\n      encryptedMessage.iv,\n      encryptionKey,\n      additionalData,\n    );\n    return result;\n  } catch (error) {\n    throw new Error('Failed to decrypt symmetrically', { cause: error });\n  }\n}\n","function get(key: string): string | null {\n  return sessionStorage.getItem(key);\n}\n\nfunction set(key: string, value: string): void {\n  return sessionStorage.setItem(key, value);\n}\n\nfunction removeItem(key: string): void {\n  sessionStorage.removeItem(key);\n}\n\nfunction exists(key: string): boolean {\n  return !!sessionStorage.getItem(key);\n}\n\nfunction clear(): void {\n  sessionStorage.clear();\n}\n\nconst sessionStorageService = {\n  set,\n  get,\n  removeItem,\n  exists,\n  clear,\n};\n\nexport default sessionStorageService;\n\nexport interface SessionStorageService {\n  set: (key: string, value: string) => void;\n  get: (key: string) => string | null;\n  removeItem: (key: string) => void;\n  exists: (key: string) => boolean;\n  clear: () => void;\n}\n","import { blake3 } from '@noble/hashes/blake3.js';\nimport { AES_KEY_BIT_LENGTH, CONTEXT_DERIVE } from '../constants';\nimport { UTF8ToUint8 } from '../utils';\nimport { importSymmetricCryptoKey } from '../symmetric-crypto';\n\n/**\n * Derives a symmetric key from the base key and context string\n *\n * @param context - The context string.\n * The context string should be hardcoded, globally unique, and application-specific.\n * @param baseKey - The base key (NOT PASSWORD!)\n * @returns The derived secret key\n */\nexport function deriveSymmetricKeyFromContext(context: string, baseKey: Uint8Array): Uint8Array {\n  return blake3(baseKey, { context: UTF8ToUint8(context) });\n}\n\n/**\n * Derives a symmetric CryptoKey from the base key and context string\n *\n * @param context - The context string.\n * The context string should be hardcoded, globally unique, and application-specific.\n * @param baseKey - The base key (NOT PASSWORD!)\n * @returns The derived secret CryptoKey\n */\nexport async function deriveSymmetricCryptoKeyFromContext(context: string, baseKey: Uint8Array): Promise<CryptoKey> {\n  try {\n    if (baseKey.length != AES_KEY_BIT_LENGTH / 8) {\n      throw new Error(`Base key length must be exactly ${AES_KEY_BIT_LENGTH / 8} bytes`);\n    }\n    if (!context) {\n      throw new Error('Context is empry');\n    }\n    const keyBytes = deriveSymmetricKeyFromContext(context, baseKey);\n    const key = await importSymmetricCryptoKey(keyBytes);\n\n    return key;\n  } catch (error) {\n    throw new Error('Failed to derive CryptoKey from base key and context', { cause: error });\n  }\n}\n\n/**\n * Derives a symmetric key from two keys\n *\n * @param key1 - The 32-bytes key\n * @param key2 - The 32-bytes key\n * @returns The derived secret key\n */\nexport function deriveSymmetricKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Uint8Array {\n  return deriveKeyFromTwoKeysAndContext(key1, key2, CONTEXT_DERIVE);\n}\n\n/**\n * Derives a symmetric CryptoKey from two keys\n *\n * @param key1 - The 32-bytes key\n * @param key2 - The 32-bytes key\n * @returns The derived secret CryptoKey\n */\nexport async function deriveSymmetricCryptoKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Promise<CryptoKey> {\n  try {\n    const keyBytes = deriveSymmetricKeyFromTwoKeys(key1, key2);\n    const key = await importSymmetricCryptoKey(keyBytes);\n    return key;\n  } catch (error) {\n    throw new Error('Failed to derive symmetric CryptoKey from two keys', { cause: error });\n  }\n}\n\n/**\n * Derives a symmetric key from two keys and context\n *\n * @param key1 - The 32-bytes key\n * @param key2 - The 32-bytes key\n * @param context - The context string\n * @returns The derived symmetric key\n */\nexport function deriveKeyFromTwoKeysAndContext(key1: Uint8Array, key2: Uint8Array, context: string): Uint8Array {\n  try {\n    if (key2.length != AES_KEY_BIT_LENGTH / 8 || key1.length != AES_KEY_BIT_LENGTH / 8) {\n      throw new Error(`Input key length must be exactly ${AES_KEY_BIT_LENGTH / 8} bytes`);\n    }\n    const key = blake3(key1, { key: key2 });\n    return blake3(key, { context: UTF8ToUint8(context) });\n  } catch (error) {\n    throw new Error('Failed to derive symmetric key from two keys and context', { cause: error });\n  }\n}\n","import { encryptSymmetrically, decryptSymmetrically } from '../symmetric-crypto';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../utils';\nimport { SymmetricCiphertext } from '../types';\nimport sessionStorageService from '../storage-service/sessionStorageService';\nimport { deriveSymmetricCryptoKeyFromContext } from '../derive-key';\nimport { CONTEXT_LOGIN, CONTEXT_ENC_KEYSTORE, AES_KEY_BIT_LENGTH, CONTEXT_RECOVERY } from '../constants';\nimport { getBytesFromString } from '../hash';\n\n/**\n * Encrypts the keystore content using symmetric encryption\n *\n * @param secretKey - The symmetric key to encrypt the keystore content\n * @param content - The content of the keystore\n * @param userID - The ID of the user\n * @param tag - The keystore type-specific tag string\n * @returns The encrypted keystore content\n */\nexport async function encryptKeystoreContent(\n  secretKey: CryptoKey,\n  content: string,\n  userID: string,\n  tag: string,\n): Promise<SymmetricCiphertext> {\n  try {\n    const aux = userID + tag;\n    const message = base64ToUint8Array(content);\n    const result = await encryptSymmetrically(secretKey, message, aux);\n    return result;\n  } catch (error) {\n    throw new Error('Failed to encrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Decrypts the keystore content using symmetric encryption\n *\n * @param secretKey - The symmetric key to decrypt the keystore content\n * @param encryptedKeys - The encrypted keystore content\n * @param userID - The ID of the user\n * @param tag - The keystore type-specific tag string\n * @returns The decrypted keystore content\n */\nexport async function decryptKeystoreContent(\n  secretKey: CryptoKey,\n  encryptedKeys: SymmetricCiphertext,\n  userID: string,\n  tag: string,\n): Promise<string> {\n  try {\n    const aux = userID + tag;\n    const content = await decryptSymmetrically(secretKey, encryptedKeys, aux);\n    const result = uint8ArrayToBase64(content);\n    return result;\n  } catch (error) {\n    throw new Error('Failed to decrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Gets User ID from the session storage\n *\n * @returns The ID of the user\n */\nexport function getUserID(): string {\n  try {\n    const userID = sessionStorageService.get('userID');\n    if (!userID) {\n      throw new Error('No UserID');\n    }\n    return userID;\n  } catch (error) {\n    throw new Error('Failed to get UserID from session storage', { cause: error });\n  }\n}\n\n/**\n * Gets user's base key from the session storage\n *\n * @returns The user's base key\n */\nexport function getBaseKey(): Uint8Array {\n  try {\n    const baseKeyBase64 = sessionStorageService.get('baseKey');\n    if (!baseKeyBase64) {\n      throw new Error('No base key');\n    }\n    return base64ToUint8Array(baseKeyBase64);\n  } catch (error) {\n    throw new Error('Failed to get base key from session storage', { cause: error });\n  }\n}\n\n/**\n * Derives a secret key for protecting the idenity keystore\n *\n * @param baseKey - The base secret key from which a new key secret will be derived\n * @returns The derived secret key for protecting the idenity keystore\n */\nexport async function deriveIdentityKeystoreKey(baseKey: Uint8Array): Promise<CryptoKey> {\n  return deriveSymmetricCryptoKeyFromContext(CONTEXT_LOGIN, baseKey);\n}\n\n/**\n * Derives a secret key for protecting the recovery keystore\n *\n * @param recoveryCodes - The recovery codes\n * @returns The derived secret key for protecting the recovery keystore\n */\nexport async function deriveRecoveryKey(recoveryCodes: string): Promise<CryptoKey> {\n  const recoveryCodesBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, recoveryCodes);\n  return deriveSymmetricCryptoKeyFromContext(CONTEXT_RECOVERY, recoveryCodesBuffer);\n}\n\n/**\n * Derives a secret key for protecting the encryption keystore\n * \n * @param baseKey - The base secret key from which a new key secret will be derived\n * @returns The derived secret key for protecting the encryption keystore\n\n*/\nexport async function deriveEncryptionKeystoreKey(baseKey: Uint8Array): Promise<CryptoKey> {\n  return deriveSymmetricCryptoKeyFromContext(CONTEXT_ENC_KEYSTORE, baseKey);\n}\n","import { ml_kem768 } from '@noble/post-quantum/ml-kem.js';\n\n/**\n * Generates public and secret Kyber keys\n *\n * @param seed - The optional seed\n * @returns The generated Kyber key pair.\n */\nexport function generateKyberKeys(seed?: Uint8Array): {\n  publicKey: Uint8Array;\n  secretKey: Uint8Array;\n} {\n  try {\n    return ml_kem768.keygen(seed);\n  } catch (error) {\n    throw new Error('Failed to generate Kyber keys', { cause: error });\n  }\n}\n\n/**\n * Generates a shared secret of 256-bits and encapsulates it to the given public key using Kyber algorithms\n *\n * @param publicKey - The public Kyber key\n * @returns The resulting encapsulation and the generated shared secret.\n */\nexport function encapsulateKyber(publicKey: Uint8Array): {\n  cipherText: Uint8Array;\n  sharedSecret: Uint8Array;\n} {\n  try {\n    return ml_kem768.encapsulate(publicKey);\n  } catch (error) {\n    throw new Error('Failed to encapsulate', { cause: error });\n  }\n}\n\n/**\n * Decapsulates the encapsulated shared secret using Kyber algorithms\n *\n * @param cipherText - The encapsulated key\n * @param secretKey - The private Kyber key\n * @returns The resulting decapsulated shared secret.\n */\nexport function decapsulateKyber(cipherText: Uint8Array, secretKey: Uint8Array): Uint8Array {\n  try {\n    return ml_kem768.decapsulate(cipherText, secretKey);\n  } catch (error) {\n    throw new Error('Failed to decapsulate', { cause: error });\n  }\n}\n","import { EncryptionKeys, EncryptedKeystore, KeystoreType } from '../types';\nimport { encryptionKeysToBase64, base64ToEncryptionKeys, genMnemonic } from '../utils';\nimport { ENCRYPTION_KEYSTORE_TAG, RECOVERY_KEYSTORE_TAG, AES_KEY_BIT_LENGTH } from '../constants';\nimport {\n  encryptKeystoreContent,\n  decryptKeystoreContent,\n  getUserID,\n  getBaseKey,\n  deriveEncryptionKeystoreKey,\n  deriveRecoveryKey,\n} from './core';\nimport { generateEccKeys } from '../asymmetric-crypto';\nimport { generateKyberKeys } from '../post-quantum-crypto';\n\n/**\n * Generates recovery codes\n *\n * @returns The generated recovery codes\n */\nexport function generateRecoveryCodes(): string {\n  return genMnemonic(AES_KEY_BIT_LENGTH);\n}\n\n/**\n * Generates encryption keys\n *\n * @returns The generated encryption keys\n */\nexport async function generateEncryptionKeys(): Promise<EncryptionKeys> {\n  try {\n    const keyPair = await generateEccKeys();\n    const keyPairKyber = generateKyberKeys();\n    const result: EncryptionKeys = {\n      userPrivateKey: keyPair.privateKey,\n      userPublicKey: keyPair.publicKey,\n      userPublicKyberKey: keyPairKyber.publicKey,\n      userPrivateKyberKey: keyPairKyber.secretKey,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to generate encryption keys', { cause: error });\n  }\n}\n\n/**\n * Generates email encryption keys and creates encrypted encryption and recovery keystores\n * The encryption key is derived from the base key (stored in session storage)\n *\n * @returns The encryption and recovery keystores\n */\nexport async function createEncryptionAndRecoveryKeystores(): Promise<{\n  encryptionKeystore: EncryptedKeystore;\n  recoveryKeystore: EncryptedKeystore;\n  recoveryCodes: string;\n}> {\n  try {\n    const userID = getUserID();\n    const baseKey = getBaseKey();\n    const keys = await generateEncryptionKeys();\n    const content = await encryptionKeysToBase64(keys);\n\n    const secretKey = await deriveEncryptionKeystoreKey(baseKey);\n    const ciphertext = await encryptKeystoreContent(secretKey, content, userID, ENCRYPTION_KEYSTORE_TAG);\n    const encryptionKeystore: EncryptedKeystore = {\n      userID,\n      type: KeystoreType.ENCRYPTION,\n      encryptedKeys: ciphertext,\n    };\n    const recoveryCodes = generateRecoveryCodes();\n    const recoveryKey = await deriveRecoveryKey(recoveryCodes);\n    const encKeys = await encryptKeystoreContent(recoveryKey, content, userID, RECOVERY_KEYSTORE_TAG);\n    const recoveryKeystore: EncryptedKeystore = {\n      userID,\n      type: KeystoreType.RECOVERY,\n      encryptedKeys: encKeys,\n    };\n    return { encryptionKeystore, recoveryKeystore, recoveryCodes };\n  } catch (error) {\n    throw new Error('Failed to create encryption and recovery keystores', { cause: error });\n  }\n}\n\n/**\n * Opens the encryption keystore and returns the email encryption keys\n * The decryption key is derived from the base key (stored in session storage)\n *\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @returns The encryption keys\n */\nexport async function openEncryptionKeystore(encryptedKeystore: EncryptedKeystore): Promise<EncryptionKeys> {\n  try {\n    if (encryptedKeystore.type != KeystoreType.ENCRYPTION) {\n      throw new Error('Input is invalid');\n    }\n    const baseKey = getBaseKey();\n    const secretKey = await deriveEncryptionKeystoreKey(baseKey);\n    const json = await decryptKeystoreContent(\n      secretKey,\n      encryptedKeystore.encryptedKeys,\n      encryptedKeystore.userID,\n      ENCRYPTION_KEYSTORE_TAG,\n    );\n    const keys: EncryptionKeys = await base64ToEncryptionKeys(json);\n    return keys;\n  } catch (error) {\n    throw new Error('Failed to open encryption keystore', { cause: error });\n  }\n}\n\n/**\n * Opens the recovery keystore and returns the email encryption keys\n * The decryption key is derived from the base key (stored in session storage)\n *\n * @param recoveryCodes - The user's recovery codes\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @returns The encryption keys\n */\nexport async function openRecoveryKeystore(\n  recoveryCodes: string,\n  encryptedKeystore: EncryptedKeystore,\n): Promise<EncryptionKeys> {\n  try {\n    if (encryptedKeystore.type != KeystoreType.RECOVERY) {\n      throw new Error('Input is invalid');\n    }\n    const recoveryKey = await deriveRecoveryKey(recoveryCodes);\n    const json = await decryptKeystoreContent(\n      recoveryKey,\n      encryptedKeystore.encryptedKeys,\n      encryptedKeystore.userID,\n      RECOVERY_KEYSTORE_TAG,\n    );\n    const keys: EncryptionKeys = await base64ToEncryptionKeys(json);\n    return keys;\n  } catch (error) {\n    throw new Error('Failed to open recovery keystore', { cause: error });\n  }\n}\n","import { IdentityKeys, EncryptedKeystore, KeystoreType } from '../types';\nimport { IDENTITY_KEYSTORE_TAG } from '../constants';\nimport {\n  encryptKeystoreContent,\n  decryptKeystoreContent,\n  getUserID,\n  getBaseKey,\n  deriveIdentityKeystoreKey,\n} from './core';\nimport { base64ToIdentityKeys, identityKeysToBase64 } from '../utils';\nimport { generateEccKeys } from '../asymmetric-crypto';\n\n/**\n * Generates user idenity keys\n *\n * @returns The user identity keys\n */\nexport async function generateIdentityKeys(): Promise<IdentityKeys> {\n  try {\n    const keyPair = await generateEccKeys();\n    const result: IdentityKeys = {\n      userPrivateKey: keyPair.privateKey,\n      userPublicKey: keyPair.publicKey,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to generate idenity keys', { cause: error });\n  }\n}\n\n/**\n * Generates user identity keys and creates an encrypted identity keystore\n * The encryption key is derived from the base key (stored in session storage)\n *\n * @returns The encrypted idenity keystore\n */\nexport async function createIdentityKeystore(): Promise<EncryptedKeystore> {\n  try {\n    const type = KeystoreType.IDENTITY;\n    const userID = getUserID();\n    const baseKey = getBaseKey();\n    const keys = await generateIdentityKeys();\n    const content = await identityKeysToBase64(keys);\n    const secretKey = await deriveIdentityKeystoreKey(baseKey);\n    const encryptedKeys = await encryptKeystoreContent(secretKey, content, userID, IDENTITY_KEYSTORE_TAG);\n    const result: EncryptedKeystore = {\n      userID,\n      type,\n      encryptedKeys,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to create identity keystore', { cause: error });\n  }\n}\n\n/**\n * Opens the encrypted identity keystore\n * The decryption key is derived from the base key (stored in session storage)\n *\n * @param encryptedKeystore - The encrypted identity keystore\n * @returns The identity keys\n */\nexport async function openIdentityKeystore(encryptedKeystore: EncryptedKeystore): Promise<IdentityKeys> {\n  try {\n    if (encryptedKeystore.type != KeystoreType.IDENTITY) {\n      throw new Error('Input is invalid');\n    }\n    const baseKey = getBaseKey();\n    const secretKey = await deriveIdentityKeystoreKey(baseKey);\n    const json = await decryptKeystoreContent(\n      secretKey,\n      encryptedKeystore.encryptedKeys,\n      encryptedKeystore.userID,\n      IDENTITY_KEYSTORE_TAG,\n    );\n    const keys: IdentityKeys = await base64ToIdentityKeys(json);\n    return keys;\n  } catch (error) {\n    throw new Error('Failed to open identity keystore', { cause: error });\n  }\n}\n"]}

package/dist/keystore-service.d.mts

@@ -0,0 +1,82 @@
+import { AxiosResponse } from 'axios';
+import { KeystoreType, EncryptedKeystore, PublicKeys } from './types.mjs';
+
+declare class KeyServiceAPI {
+    private readonly baseUrl;
+    constructor(baseUrl: string);
+    /**
+     * Converts the specific client error into a proprietary error for our apps
+     * @param error
+     * @private
+     */
+    private normalizeError;
+    /**
+     * Sends a user's encrypted keystore to the server
+     * @param keystore - The encrypted keystore
+     * @param url - The user specific part of the url
+     * @returns Server response
+     */
+    sendEncryptedKeystoreToServer(encryptedKeystore: string, url: string): Promise<AxiosResponse>;
+    /**
+     * Requests a user's encrypted keystore from the server
+     * @param url - The user-specific part of the url
+     * @returns The user's encrypted keystore as base64 string
+     */
+    requestEncryptedKeystore(userID: string, keystoreType: KeystoreType): Promise<string>;
+    /**
+     * Uploads encrypted keystore to the server
+     *
+     * @param encryptedKeystore - The encrypted keystore
+     * @param type - The keystore's type
+     * @returns Server response
+     */
+    uploadKeystoreToServer(encryptedKeystore: EncryptedKeystore): Promise<AxiosResponse>;
+    /**
+     * Gets a user's encrypted keystore containing encryption keys from the server
+     *
+     * @returns Encrypted keystore containing encryption keys
+     */
+    getEncryptionKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted Identity Keystore from the server
+     *
+     * @returns Encrypted Identity Keystore
+     */
+    getIdentityKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted Recovery Keystore from the server
+     *
+     * @returns Encrypted Recovery Keystore
+     */
+    getRecoveryKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted Index Keystore from the server
+     *
+     * @returns Encrypted Index Keytore
+     */
+    getIndexKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted keystore from the server
+     *
+     * @param type - The requested keystore's type
+     * @returns Encrypted  Keytore
+     */
+    getKeystoreFromServer(type: KeystoreType): Promise<EncryptedKeystore>;
+    /**
+     * Obtains recipients public keys from the server
+     *
+     * @param emails - The recipients' emails
+     * @returns The list of recipients' public keys
+     */
+    getRecipientsPublicKeysFromServer(emails: string[]): Promise<string[]>;
+    /**
+     * Obtains the recipient public keys from the server
+     *
+     * @param email - The recipients' emails
+     * @returns The list of recipients' public keys
+     */
+    getRecipientsPublicKeys(emails: string[]): Promise<PublicKeys[]>;
+}
+declare function getKeyServiceAPI(baseUrl: string): KeyServiceAPI;
+
+export { KeyServiceAPI, getKeyServiceAPI };

package/dist/keystore-service.d.ts

@@ -0,0 +1,82 @@
+import { AxiosResponse } from 'axios';
+import { KeystoreType, EncryptedKeystore, PublicKeys } from './types.js';
+
+declare class KeyServiceAPI {
+    private readonly baseUrl;
+    constructor(baseUrl: string);
+    /**
+     * Converts the specific client error into a proprietary error for our apps
+     * @param error
+     * @private
+     */
+    private normalizeError;
+    /**
+     * Sends a user's encrypted keystore to the server
+     * @param keystore - The encrypted keystore
+     * @param url - The user specific part of the url
+     * @returns Server response
+     */
+    sendEncryptedKeystoreToServer(encryptedKeystore: string, url: string): Promise<AxiosResponse>;
+    /**
+     * Requests a user's encrypted keystore from the server
+     * @param url - The user-specific part of the url
+     * @returns The user's encrypted keystore as base64 string
+     */
+    requestEncryptedKeystore(userID: string, keystoreType: KeystoreType): Promise<string>;
+    /**
+     * Uploads encrypted keystore to the server
+     *
+     * @param encryptedKeystore - The encrypted keystore
+     * @param type - The keystore's type
+     * @returns Server response
+     */
+    uploadKeystoreToServer(encryptedKeystore: EncryptedKeystore): Promise<AxiosResponse>;
+    /**
+     * Gets a user's encrypted keystore containing encryption keys from the server
+     *
+     * @returns Encrypted keystore containing encryption keys
+     */
+    getEncryptionKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted Identity Keystore from the server
+     *
+     * @returns Encrypted Identity Keystore
+     */
+    getIdentityKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted Recovery Keystore from the server
+     *
+     * @returns Encrypted Recovery Keystore
+     */
+    getRecoveryKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted Index Keystore from the server
+     *
+     * @returns Encrypted Index Keytore
+     */
+    getIndexKeystoreFromServer(): Promise<EncryptedKeystore>;
+    /**
+     * Gets a user's encrypted keystore from the server
+     *
+     * @param type - The requested keystore's type
+     * @returns Encrypted  Keytore
+     */
+    getKeystoreFromServer(type: KeystoreType): Promise<EncryptedKeystore>;
+    /**
+     * Obtains recipients public keys from the server
+     *
+     * @param emails - The recipients' emails
+     * @returns The list of recipients' public keys
+     */
+    getRecipientsPublicKeysFromServer(emails: string[]): Promise<string[]>;
+    /**
+     * Obtains the recipient public keys from the server
+     *
+     * @param email - The recipients' emails
+     * @returns The list of recipients' public keys
+     */
+    getRecipientsPublicKeys(emails: string[]): Promise<PublicKeys[]>;
+}
+declare function getKeyServiceAPI(baseUrl: string): KeyServiceAPI;
+
+export { KeyServiceAPI, getKeyServiceAPI };

package/dist/keystore-service.js

@@ -0,0 +1,349 @@
+'use strict';
+
+var axios = require('axios');
+require('@noble/hashes/utils.js');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var axios__default = /*#__PURE__*/_interopDefault(axios);
+
+// src/keystore-service/api.ts
+
+// src/constants.ts
+var ECC_ALGORITHM = "X25519";
+function uint8ArrayToBase64(buffer) {
+  const array = Uint16Array.from(buffer);
+  const binaryString = new TextDecoder("UTF-16").decode(array);
+  return btoa(binaryString);
+}
+function base64ToUint8Array(str) {
+  const binaryString = atob(str);
+  const len = binaryString.length;
+  const array = new Uint8Array(len);
+  for (let i = 0; i < len; i++) {
+    array[i] = binaryString.charCodeAt(i);
+  }
+  return new Uint8Array(array.buffer);
+}
+
+// src/asymmetric-crypto/keys.ts
+async function importPublicKey(spkiKeyData) {
+  try {
+    return await crypto.subtle.importKey(
+      "spki",
+      spkiKeyData,
+      {
+        name: ECC_ALGORITHM
+      },
+      true,
+      []
+    );
+  } catch (error) {
+    throw new Error("Failed to import public key", { cause: error });
+  }
+}
+
+// src/utils/aesConverters.ts
+function ciphertextToBase64(encryptedMessage) {
+  try {
+    const ivBase64 = uint8ArrayToBase64(encryptedMessage.iv);
+    const ciphertextBase64 = uint8ArrayToBase64(encryptedMessage.ciphertext);
+    const json = JSON.stringify({ ciphertext: ciphertextBase64, iv: ivBase64 });
+    const base64 = btoa(json);
+    return base64;
+  } catch (error) {
+    throw new Error("Failed to convert ciphertext to base64", { cause: error });
+  }
+}
+function base64ToCiphertext(base64) {
+  try {
+    const json = atob(base64);
+    const obj = JSON.parse(json);
+    const iv = base64ToUint8Array(obj.iv);
+    const ciphertext = base64ToUint8Array(obj.ciphertext);
+    const result = {
+      ciphertext,
+      iv
+    };
+    return result;
+  } catch (error) {
+    throw new Error("Failed to convert base64 to ciphertext", { cause: error });
+  }
+}
+
+// src/utils/keyConverters.ts
+function encryptedKeystoreToBase64(keystore) {
+  try {
+    const ciphertext = ciphertextToBase64(keystore.encryptedKeys);
+    const json = JSON.stringify({
+      userID: keystore.userID,
+      type: keystore.type.toString(),
+      encryptedKeys: ciphertext
+    });
+    const base64 = btoa(json);
+    return base64;
+  } catch (error) {
+    throw new Error("Failed to convert encrypted keystore to base64", { cause: error });
+  }
+}
+function base64ToEncryptedKeystore(base64) {
+  try {
+    const json = atob(base64);
+    const obj = JSON.parse(json);
+    const ciphertext = base64ToCiphertext(obj.encryptedKeys);
+    const result = {
+      userID: obj.userID,
+      type: obj.type,
+      encryptedKeys: ciphertext
+    };
+    return result;
+  } catch (error) {
+    throw new Error("Failed to convert base64 to encrypted keystore", { cause: error });
+  }
+}
+async function base64ToPublicKey(base64) {
+  try {
+    const json = atob(base64);
+    const obj = JSON.parse(json);
+    const eccPublicKeyBytes = base64ToUint8Array(obj.eccPublicKey);
+    const eccPublicKey = await importPublicKey(eccPublicKeyBytes);
+    const kyberPublicKey = base64ToUint8Array(obj.kyberPublicKey);
+    return {
+      eccPublicKey,
+      kyberPublicKey
+    };
+  } catch (error) {
+    throw new Error("Failed to convert base64 to PublicKeys", { cause: error });
+  }
+}
+
+// src/storage-service/sessionStorageService.ts
+function get(key) {
+  return sessionStorage.getItem(key);
+}
+function set(key, value) {
+  return sessionStorage.setItem(key, value);
+}
+function removeItem(key) {
+  sessionStorage.removeItem(key);
+}
+function exists(key) {
+  return !!sessionStorage.getItem(key);
+}
+function clear() {
+  sessionStorage.clear();
+}
+var sessionStorageService = {
+  set,
+  get,
+  removeItem,
+  exists,
+  clear
+};
+var sessionStorageService_default = sessionStorageService;
+
+// src/keystore-crypto/core.ts
+function getUserID() {
+  try {
+    const userID = sessionStorageService_default.get("userID");
+    if (!userID) {
+      throw new Error("No UserID");
+    }
+    return userID;
+  } catch (error) {
+    throw new Error("Failed to get UserID from session storage", { cause: error });
+  }
+}
+
+// src/keystore-service/api.ts
+var KeyServiceAPI = class {
+  baseUrl;
+  constructor(baseUrl) {
+    this.baseUrl = baseUrl;
+  }
+  /**
+   * Converts the specific client error into a proprietary error for our apps
+   * @param error
+   * @private
+   */
+  normalizeError(error) {
+    let errorMessage;
+    if (error.response?.status === 401) {
+      errorMessage = "Unauthorized: Invalid or expired token";
+    } else if (error.response?.status === 403) {
+      errorMessage = "Forbidden: Insufficient permissions";
+    } else if (error.response?.status === 404) {
+      errorMessage = "Keystore not found for the specified user";
+    } else {
+      errorMessage = "AxiosError:" + (error.message ?? "Unknown error");
+    }
+    throw new Error(errorMessage);
+  }
+  /**
+   * Sends a user's encrypted keystore to the server
+   * @param keystore - The encrypted keystore
+   * @param url - The user specific part of the url
+   * @returns Server response
+   */
+  async sendEncryptedKeystoreToServer(encryptedKeystore, url) {
+    try {
+      const response = await axios__default.default.post(
+        this.baseUrl + `${url}`,
+        { encryptedKeystore },
+        {
+          withCredentials: true,
+          headers: {
+            "Content-Type": "application/json"
+          }
+        }
+      );
+      return response;
+    } catch (error) {
+      if (axios__default.default.isAxiosError(error)) {
+        this.normalizeError(error);
+      }
+      throw new Error("Failed to send keystore", { cause: error });
+    }
+  }
+  /**
+   * Requests a user's encrypted keystore from the server
+   * @param url - The user-specific part of the url
+   * @returns The user's encrypted keystore as base64 string
+   */
+  async requestEncryptedKeystore(userID, keystoreType) {
+    try {
+      const url = `/downloadKeystore/${userID}/${keystoreType.toString()}`;
+      const response = await axios__default.default.get(this.baseUrl + `${url}`, {
+        withCredentials: true,
+        headers: {
+          "Content-Type": "application/json"
+        }
+      });
+      return response.data;
+    } catch (error) {
+      if (axios__default.default.isAxiosError(error)) {
+        this.normalizeError(error);
+      }
+      throw new Error("Failed to retrive keystore", { cause: error });
+    }
+  }
+  /**
+   * Uploads encrypted keystore to the server
+   *
+   * @param encryptedKeystore - The encrypted keystore
+   * @param type - The keystore's type
+   * @returns Server response
+   */
+  async uploadKeystoreToServer(encryptedKeystore) {
+    try {
+      const userID = getUserID();
+      const keystoreType = encryptedKeystore.type;
+      const url = `/uploadKeystore/${userID}/${keystoreType}`;
+      const ciphertextBase64 = encryptedKeystoreToBase64(encryptedKeystore);
+      const result = await this.sendEncryptedKeystoreToServer(ciphertextBase64, url);
+      return result;
+    } catch (error) {
+      throw new Error("Failed to upload keystore to the server", { cause: error });
+    }
+  }
+  /**
+   * Gets a user's encrypted keystore containing encryption keys from the server
+   *
+   * @returns Encrypted keystore containing encryption keys
+   */
+  async getEncryptionKeystoreFromServer() {
+    return this.getKeystoreFromServer("encryption" /* ENCRYPTION */);
+  }
+  /**
+   * Gets a user's encrypted Identity Keystore from the server
+   *
+   * @returns Encrypted Identity Keystore
+   */
+  async getIdentityKeystoreFromServer() {
+    return this.getKeystoreFromServer("identity" /* IDENTITY */);
+  }
+  /**
+   * Gets a user's encrypted Recovery Keystore from the server
+   *
+   * @returns Encrypted Recovery Keystore
+   */
+  async getRecoveryKeystoreFromServer() {
+    return this.getKeystoreFromServer("recovery" /* RECOVERY */);
+  }
+  /**
+   * Gets a user's encrypted Index Keystore from the server
+   *
+   * @returns Encrypted Index Keytore
+   */
+  async getIndexKeystoreFromServer() {
+    return this.getKeystoreFromServer("index" /* INDEX */);
+  }
+  /**
+   * Gets a user's encrypted keystore from the server
+   *
+   * @param type - The requested keystore's type
+   * @returns Encrypted  Keytore
+   */
+  async getKeystoreFromServer(type) {
+    try {
+      const userID = getUserID();
+      const response = await this.requestEncryptedKeystore(userID, type);
+      const result = base64ToEncryptedKeystore(response);
+      return result;
+    } catch (error) {
+      throw new Error("Failed to retrieve keystore from the server", { cause: error });
+    }
+  }
+  /**
+   * Obtains recipients public keys from the server
+   *
+   * @param emails - The recipients' emails
+   * @returns The list of recipients' public keys
+   */
+  async getRecipientsPublicKeysFromServer(emails) {
+    try {
+      const response = await axios__default.default.get("/api/getPublicKeys", {
+        params: {
+          emails
+        },
+        withCredentials: true,
+        headers: {
+          "Content-Type": "application/json"
+        }
+      });
+      return response.data;
+    } catch (error) {
+      if (axios__default.default.isAxiosError(error)) {
+        this.normalizeError(error);
+      }
+      throw new Error("Failed to retrieve public keys", { cause: error });
+    }
+  }
+  /**
+   * Obtains the recipient public keys from the server
+   *
+   * @param email - The recipients' emails
+   * @returns The list of recipients' public keys
+   */
+  async getRecipientsPublicKeys(emails) {
+    try {
+      const publicKeysBase64 = await this.getRecipientsPublicKeysFromServer(emails);
+      const result = [];
+      for (const keyBase64 of publicKeysBase64) {
+        const publicKeys = await base64ToPublicKey(keyBase64);
+        result.push(publicKeys);
+      }
+      return result;
+    } catch (error) {
+      throw new Error("Failed to get recipients public keys", { cause: error });
+    }
+  }
+};
+function getKeyServiceAPI(baseUrl) {
+  return new KeyServiceAPI(baseUrl);
+}
+
+exports.KeyServiceAPI = KeyServiceAPI;
+exports.getKeyServiceAPI = getKeyServiceAPI;
+//# sourceMappingURL=keystore-service.js.map
+//# sourceMappingURL=keystore-service.js.map