internxt-crypto 0.0.8-alpha → 0.0.10-alpha

package/dist/symmetric-crypto.js

@@ -0,0 +1,142 @@
+'use strict';
+
+var blake3_js = require('@noble/hashes/blake3.js');
+var utils_js = require('@noble/hashes/utils.js');
+var utils_js$1 = require('@noble/post-quantum/utils.js');
+
+// src/constants.ts
+var AES_ALGORITHM = "AES-GCM";
+var AES_KEY_BIT_LENGTH = 256;
+var AUX_LEN = 128;
+var IV_LEN_BYTES = 16;
+var KEY_FORMAT = "raw";
+function getBytesFromString(bytes, value) {
+  return blake3_js.blake3(utils_js.utf8ToBytes(value), { dkLen: bytes });
+}
+
+// src/symmetric-crypto/keys.ts
+async function importSymmetricCryptoKey(keyData) {
+  return crypto.subtle.importKey(
+    KEY_FORMAT,
+    new Uint8Array(keyData),
+    {
+      name: AES_ALGORITHM,
+      length: AES_KEY_BIT_LENGTH
+    },
+    true,
+    ["encrypt", "decrypt"]
+  );
+}
+async function exportSymmetricCryptoKey(key) {
+  try {
+    const rawKey = await crypto.subtle.exportKey(KEY_FORMAT, key);
+    return new Uint8Array(rawKey);
+  } catch (error) {
+    throw new Error("Failed to export symmetric CryptoKey", { cause: error });
+  }
+}
+async function genSymmetricCryptoKey() {
+  return crypto.subtle.generateKey(
+    {
+      name: AES_ALGORITHM,
+      length: AES_KEY_BIT_LENGTH
+    },
+    true,
+    ["encrypt", "decrypt"]
+  );
+}
+function genSymmetricKey() {
+  try {
+    const key = new Uint8Array(AES_KEY_BIT_LENGTH / 8);
+    crypto.getRandomValues(key);
+    return key;
+  } catch (error) {
+    throw new Error("Failed to generate symmetric key", { cause: error });
+  }
+}
+async function deriveSymmetricCryptoKey(keyMaterial) {
+  try {
+    const hashBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, keyMaterial);
+    return importSymmetricCryptoKey(hashBuffer);
+  } catch (error) {
+    throw new Error("Failed to derive CryptoKey from the given key material", { cause: error });
+  }
+}
+async function createNISTbasedIV(freeField) {
+  try {
+    if (!freeField) {
+      return utils_js$1.randomBytes(IV_LEN_BYTES);
+    }
+    const iv = new Uint8Array(16);
+    const randFiled = utils_js$1.randomBytes(12);
+    iv.set(randFiled, 0);
+    const freeFiledFixedLength = await getBytesFromString(4, freeField);
+    iv.set(freeFiledFixedLength, 12);
+    return iv;
+  } catch (error) {
+    throw new Error("Failed to create IV", { cause: error });
+  }
+}
+async function makeAuxFixedLength(aux) {
+  return getBytesFromString(AUX_LEN / 8, aux);
+}
+async function encryptMessage(message, encryptionKey, iv, additionalData) {
+  try {
+    const encrypted = await crypto.subtle.encrypt(
+      { name: AES_ALGORITHM, iv, additionalData },
+      encryptionKey,
+      message
+    );
+    return new Uint8Array(encrypted);
+  } catch (error) {
+    throw new Error("Failed to encrypt symmetrically", { cause: error });
+  }
+}
+async function decryptMessage(ciphertext, iv, encryptionKey, additionalData) {
+  try {
+    const decrypted = await crypto.subtle.decrypt(
+      { name: AES_ALGORITHM, iv, additionalData },
+      encryptionKey,
+      ciphertext
+    );
+    return new Uint8Array(decrypted);
+  } catch (error) {
+    throw new Error("Failed to decrypt symmetrically", { cause: error });
+  }
+}
+
+// src/symmetric-crypto/aes.ts
+async function encryptSymmetrically(encryptionKey, message, aux, freeField) {
+  try {
+    const iv = await createNISTbasedIV(freeField);
+    const additionalData = await makeAuxFixedLength(aux);
+    const ciphertext = await encryptMessage(message, encryptionKey, iv, additionalData);
+    return { ciphertext, iv };
+  } catch (error) {
+    throw new Error("Failed to encrypt symmetrically", { cause: error });
+  }
+}
+async function decryptSymmetrically(encryptionKey, encryptedMessage, aux) {
+  try {
+    const additionalData = await makeAuxFixedLength(aux);
+    const result = await decryptMessage(
+      encryptedMessage.ciphertext,
+      encryptedMessage.iv,
+      encryptionKey,
+      additionalData
+    );
+    return result;
+  } catch (error) {
+    throw new Error("Failed to decrypt symmetrically", { cause: error });
+  }
+}
+
+exports.decryptSymmetrically = decryptSymmetrically;
+exports.deriveSymmetricCryptoKey = deriveSymmetricCryptoKey;
+exports.encryptSymmetrically = encryptSymmetrically;
+exports.exportSymmetricCryptoKey = exportSymmetricCryptoKey;
+exports.genSymmetricCryptoKey = genSymmetricCryptoKey;
+exports.genSymmetricKey = genSymmetricKey;
+exports.importSymmetricCryptoKey = importSymmetricCryptoKey;
+//# sourceMappingURL=symmetric-crypto.js.map
+//# sourceMappingURL=symmetric-crypto.js.map

package/dist/symmetric-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts","../src/hash/blake3.ts","../src/symmetric-crypto/keys.ts","../src/symmetric-crypto/core.ts","../src/symmetric-crypto/aes.ts"],"names":["blake3","utf8ToBytes","randomBytes"],"mappings":";;;;;;;AAAO,IAAM,aAAA,GAAgB,SAAA;AACtB,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,OAAA,GAAU,GAAA;AAChB,IAAM,YAAA,GAAe,EAAA;AAGrB,IAAM,UAAA,GAAa,KAAA;AC6FnB,SAAS,kBAAA,CAAmB,OAAe,KAAA,EAA2B;AAC3E,EAAA,OAAOA,iBAAOC,oBAAA,CAAY,KAAK,GAAG,EAAE,KAAA,EAAO,OAAO,CAAA;AACpD;;;AC5FA,eAAsB,yBAAyB,OAAA,EAAuD;AACpG,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,UAAA;AAAA,IACA,IAAI,WAAW,OAAO,CAAA;AAAA,IACtB;AAAA,MACE,IAAA,EAAM,aAAA;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,IAAA;AAAA,IACA,CAAC,WAAW,SAAS;AAAA,GACvB;AACF;AAQA,eAAsB,yBAAyB,GAAA,EAAqC;AAClF,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,YAAY,GAAG,CAAA;AAC5D,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,sCAAA,EAAwC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC1E;AACF;AAOA,eAAsB,qBAAA,GAA4C;AAChE,EAAA,OAAO,OAAO,MAAA,CAAO,WAAA;AAAA,IACnB;AAAA,MACE,IAAA,EAAM,aAAA;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,IAAA;AAAA,IACA,CAAC,WAAW,SAAS;AAAA,GACvB;AACF;AAOO,SAAS,eAAA,GAA8B;AAC5C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,kBAAA,GAAqB,CAAC,CAAA;AACjD,IAAA,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAC1B,IAAA,OAAO,GAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,kCAAA,EAAoC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACtE;AACF;AAOA,eAAsB,yBAAyB,WAAA,EAAyC;AACtF,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,MAAM,kBAAA,CAAmB,kBAAA,GAAqB,GAAG,WAAW,CAAA;AAC/E,IAAA,OAAO,yBAAyB,UAAU,CAAA;AAAA,EAC5C,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,wDAAA,EAA0D,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC5F;AACF;ACpEA,eAAsB,kBAAkB,SAAA,EAAyC;AAC/E,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAOC,uBAAY,YAAY,CAAA;AAAA,IACjC;AAEA,IAAA,MAAM,EAAA,GAAK,IAAI,UAAA,CAAW,EAAE,CAAA;AAE5B,IAAA,MAAM,SAAA,GAAYA,uBAAY,EAAE,CAAA;AAChC,IAAA,EAAA,CAAG,GAAA,CAAI,WAAW,CAAC,CAAA;AAEnB,IAAA,MAAM,oBAAA,GAAuB,MAAM,kBAAA,CAAmB,CAAA,EAAG,SAAS,CAAA;AAClE,IAAA,EAAA,CAAG,GAAA,CAAI,sBAAsB,EAAE,CAAA;AAE/B,IAAA,OAAO,EAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,qBAAA,EAAuB,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACzD;AACF;AAQA,eAAsB,mBAAmB,GAAA,EAAkC;AACzE,EAAA,OAAO,kBAAA,CAAmB,OAAA,GAAU,CAAA,EAAG,GAAG,CAAA;AAC5C;AAWA,eAAsB,cAAA,CACpB,OAAA,EACA,aAAA,EACA,EAAA,EACA,cAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACpC,EAAE,IAAA,EAAM,aAAA,EAAe,EAAA,EAAwB,cAAA,EAA+C;AAAA,MAC9F,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,SAAS,CAAA;AAAA,EACjC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;AAWA,eAAsB,cAAA,CACpB,UAAA,EACA,EAAA,EACA,aAAA,EACA,cAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACpC,EAAE,IAAA,EAAM,aAAA,EAAe,EAAA,EAAwB,cAAA,EAA+C;AAAA,MAC9F,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,SAAS,CAAA;AAAA,EACjC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;;;AClFA,eAAsB,oBAAA,CACpB,aAAA,EACA,OAAA,EACA,GAAA,EACA,SAAA,EAC8B;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,MAAM,iBAAA,CAAkB,SAAS,CAAA;AAC5C,IAAA,MAAM,cAAA,GAAiB,MAAM,kBAAA,CAAmB,GAAG,CAAA;AACnD,IAAA,MAAM,aAAa,MAAM,cAAA,CAAe,OAAA,EAAS,aAAA,EAAe,IAAI,cAAc,CAAA;AAClF,IAAA,OAAO,EAAE,YAAY,EAAA,EAAG;AAAA,EAC1B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;AAUA,eAAsB,oBAAA,CACpB,aAAA,EACA,gBAAA,EACA,GAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,cAAA,GAAiB,MAAM,kBAAA,CAAmB,GAAG,CAAA;AACnD,IAAA,MAAM,SAAS,MAAM,cAAA;AAAA,MACnB,gBAAA,CAAiB,UAAA;AAAA,MACjB,gBAAA,CAAiB,EAAA;AAAA,MACjB,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF","file":"symmetric-crypto.js","sourcesContent":["export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n","import { blake3 } from '@noble/hashes/blake3.js';\nimport { utf8ToBytes, bytesToHex } from '@noble/hashes/utils.js';\n\n/**\n * Hashes the given array of data\n *\n * @param data - The data to hash\n * @returns The resulting hash array\n */\nexport function hashData(data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create();\n    for (const d of data) {\n      hasher.update(d);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\nexport function keyedHashHex(hashKey: Uint8Array, data: Uint8Array[]): string {\n  try {\n    const hash = keyedHash(hashKey, data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to compute hash hex', { cause: error });\n  }\n}\n\nexport function keyedHash(hashKey: Uint8Array, data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create({ key: hashKey });\n    for (const d of data) {\n      hasher.update(d);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data\n *\n * @param data - The data to hash\n * @returns The resulting hash hex string\n */\nexport function hashDataHex(data: Uint8Array[]): string {\n  try {\n    const hash = hashData(data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param data - The data to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromData(bytes: number, data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create({ dkLen: bytes });\n    for (const chunk of data) {\n      hasher.update(chunk);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to get bytes from data', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param data - The data to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromDataHex(bytes: number, data: Uint8Array[]): string {\n  try {\n    const hash = getBytesFromData(bytes, data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to get bytes from data', { cause: error });\n  }\n}\n\n/**\n * Hashes the given string using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param value - The string to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromString(bytes: number, value: string): Uint8Array {\n  return blake3(utf8ToBytes(value), { dkLen: bytes });\n}\n\n/**\n * Hashes the given string using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param value - The string to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromStrinHex(bytes: number, value: string): string {\n  return bytesToHex(getBytesFromString(bytes, value));\n}\n","import { AES_ALGORITHM, AES_KEY_BIT_LENGTH, KEY_FORMAT } from '../constants';\nimport { getBytesFromString } from '../hash';\n\n/**\n * Converts Uint8Array into CryptoKey\n *\n * @param keyData - The Uint8Array representation of the symmetric key\n * @returns The resulting symmetric CryptoKey.\n */\nexport async function importSymmetricCryptoKey(keyData: Uint8Array | ArrayBuffer): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    KEY_FORMAT,\n    new Uint8Array(keyData),\n    {\n      name: AES_ALGORITHM,\n      length: AES_KEY_BIT_LENGTH,\n    },\n    true,\n    ['encrypt', 'decrypt'],\n  );\n}\n\n/**\n * Converts CryptoKey into Uint8Array\n *\n * @param key - The symmetric CryptoKey\n * @returns The resulting Uint8Array.\n */\nexport async function exportSymmetricCryptoKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const rawKey = await crypto.subtle.exportKey(KEY_FORMAT, key);\n    return new Uint8Array(rawKey);\n  } catch (error) {\n    throw new Error('Failed to export symmetric CryptoKey', { cause: error });\n  }\n}\n\n/**\n * Generates symmetric CryptoKey\n *\n * @returns The generated CryptoKey.\n */\nexport async function genSymmetricCryptoKey(): Promise<CryptoKey> {\n  return crypto.subtle.generateKey(\n    {\n      name: AES_ALGORITHM,\n      length: AES_KEY_BIT_LENGTH,\n    },\n    true,\n    ['encrypt', 'decrypt'],\n  );\n}\n\n/**\n * Generates symmetric key as Uint8Array\n *\n * @returns The generated Uint8Array.\n */\nexport function genSymmetricKey(): Uint8Array {\n  try {\n    const key = new Uint8Array(AES_KEY_BIT_LENGTH / 8);\n    crypto.getRandomValues(key);\n    return key;\n  } catch (error) {\n    throw new Error('Failed to generate symmetric key', { cause: error });\n  }\n}\n\n/**\n * Derives CryptoKey from the given key material\n *\n * @returns The derived CryptoKey.\n */\nexport async function deriveSymmetricCryptoKey(keyMaterial: string): Promise<CryptoKey> {\n  try {\n    const hashBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, keyMaterial);\n    return importSymmetricCryptoKey(hashBuffer);\n  } catch (error) {\n    throw new Error('Failed to derive CryptoKey from the given key material', { cause: error });\n  }\n}\n","import { randomBytes } from '@noble/post-quantum/utils.js';\nimport { getBytesFromString } from '../hash';\nimport { AUX_LEN, AES_ALGORITHM, IV_LEN_BYTES } from '../constants';\n\n/**\n * Creates an initialization vector (IV) using RGB-based construction (8.2.2 NIST Special Publication 800-38D)\n * Constructs a 128-bits IV from 2 fileds: the random field (at least 96 bits) and the free field (32 bits).\n * If free filed is empty, then the entier 128-bit IV is sampled randomly.\n *\n * @param freeFiled - The string with an unrestricted content. Can be a device identifier, etc.\n * @returns The resulting 128-bits initialization vector.\n */\nexport async function createNISTbasedIV(freeField?: string): Promise<Uint8Array> {\n  try {\n    if (!freeField) {\n      return randomBytes(IV_LEN_BYTES);\n    }\n\n    const iv = new Uint8Array(16);\n\n    const randFiled = randomBytes(12);\n    iv.set(randFiled, 0);\n\n    const freeFiledFixedLength = await getBytesFromString(4, freeField);\n    iv.set(freeFiledFixedLength, 12);\n\n    return iv;\n  } catch (error) {\n    throw new Error('Failed to create IV', { cause: error });\n  }\n}\n\n/**\n * Hashes aux string to make it fixed-length\n *\n * @param aux - The auxilay string of arbitrary length\n * @returns The resulting fixed-length auxilary string.\n */\nexport async function makeAuxFixedLength(aux: string): Promise<Uint8Array> {\n  return getBytesFromString(AUX_LEN / 8, aux);\n}\n\n/**\n * Symmetrically encrypts message\n *\n * @param message - The message to encrypt\n * @param encryptionKey - The encryption key\n * @param iv - The initialization vector\n * @param additionalData - The auxilary data\n * @returns The resulting ciphertext\n */\nexport async function encryptMessage(\n  message: Uint8Array,\n  encryptionKey: CryptoKey,\n  iv: Uint8Array,\n  additionalData: Uint8Array,\n): Promise<Uint8Array> {\n  try {\n    const encrypted = await crypto.subtle.encrypt(\n      { name: AES_ALGORITHM, iv: iv as BufferSource, additionalData: additionalData as BufferSource },\n      encryptionKey,\n      message as BufferSource,\n    );\n    return new Uint8Array(encrypted);\n  } catch (error) {\n    throw new Error('Failed to encrypt symmetrically', { cause: error });\n  }\n}\n\n/**\n * Symmetrically decrypts message\n *\n * @param ciphertext - The encrypted message\n * @param ciphertext - The initialization vector\n * @param encryptionKey - The encryption key\n * @param additionalData - The auxilary data\n * @returns The resulting decrypted message\n */\nexport async function decryptMessage(\n  ciphertext: Uint8Array,\n  iv: Uint8Array,\n  encryptionKey: CryptoKey,\n  additionalData: Uint8Array,\n): Promise<Uint8Array> {\n  try {\n    const decrypted = await crypto.subtle.decrypt(\n      { name: AES_ALGORITHM, iv: iv as BufferSource, additionalData: additionalData as BufferSource },\n      encryptionKey,\n      ciphertext as BufferSource,\n    );\n    return new Uint8Array(decrypted);\n  } catch (error) {\n    throw new Error('Failed to decrypt symmetrically', { cause: error });\n  }\n}\n","import { SymmetricCiphertext } from '../types';\nimport { createNISTbasedIV, makeAuxFixedLength, encryptMessage, decryptMessage } from './core';\n\n/**\n * Symmetrically encrypts the message\n *\n * @param encryptionKey - The symmetric CryptoKey used for message encryption\n * @param message - The message to encrypt\n * @param freeField - The context of the message (required for IV generation)\n * @param aux - The auxilary string\n * @returns The resulting ciphertext.\n */\nexport async function encryptSymmetrically(\n  encryptionKey: CryptoKey,\n  message: Uint8Array,\n  aux: string,\n  freeField?: string,\n): Promise<SymmetricCiphertext> {\n  try {\n    const iv = await createNISTbasedIV(freeField);\n    const additionalData = await makeAuxFixedLength(aux);\n    const ciphertext = await encryptMessage(message, encryptionKey, iv, additionalData);\n    return { ciphertext, iv };\n  } catch (error) {\n    throw new Error('Failed to encrypt symmetrically', { cause: error });\n  }\n}\n\n/**\n * Decryps symmetrically encrypted message\n *\n * @param encryptionKey - The symmetric CryptoKey used for message encryption\n * @param encryptedMessage - The ciphertext\n * @param aux - The auxilary string\n * @returns The resulting ciphertext.\n */\nexport async function decryptSymmetrically(\n  encryptionKey: CryptoKey,\n  encryptedMessage: SymmetricCiphertext,\n  aux: string,\n): Promise<Uint8Array> {\n  try {\n    const additionalData = await makeAuxFixedLength(aux);\n    const result = await decryptMessage(\n      encryptedMessage.ciphertext,\n      encryptedMessage.iv,\n      encryptionKey,\n      additionalData,\n    );\n    return result;\n  } catch (error) {\n    throw new Error('Failed to decrypt symmetrically', { cause: error });\n  }\n}\n"]}

package/dist/symmetric-crypto.mjs

@@ -0,0 +1,134 @@
+import { blake3 } from '@noble/hashes/blake3.js';
+import { utf8ToBytes } from '@noble/hashes/utils.js';
+import { randomBytes } from '@noble/post-quantum/utils.js';
+
+// src/constants.ts
+var AES_ALGORITHM = "AES-GCM";
+var AES_KEY_BIT_LENGTH = 256;
+var AUX_LEN = 128;
+var IV_LEN_BYTES = 16;
+var KEY_FORMAT = "raw";
+function getBytesFromString(bytes, value) {
+  return blake3(utf8ToBytes(value), { dkLen: bytes });
+}
+
+// src/symmetric-crypto/keys.ts
+async function importSymmetricCryptoKey(keyData) {
+  return crypto.subtle.importKey(
+    KEY_FORMAT,
+    new Uint8Array(keyData),
+    {
+      name: AES_ALGORITHM,
+      length: AES_KEY_BIT_LENGTH
+    },
+    true,
+    ["encrypt", "decrypt"]
+  );
+}
+async function exportSymmetricCryptoKey(key) {
+  try {
+    const rawKey = await crypto.subtle.exportKey(KEY_FORMAT, key);
+    return new Uint8Array(rawKey);
+  } catch (error) {
+    throw new Error("Failed to export symmetric CryptoKey", { cause: error });
+  }
+}
+async function genSymmetricCryptoKey() {
+  return crypto.subtle.generateKey(
+    {
+      name: AES_ALGORITHM,
+      length: AES_KEY_BIT_LENGTH
+    },
+    true,
+    ["encrypt", "decrypt"]
+  );
+}
+function genSymmetricKey() {
+  try {
+    const key = new Uint8Array(AES_KEY_BIT_LENGTH / 8);
+    crypto.getRandomValues(key);
+    return key;
+  } catch (error) {
+    throw new Error("Failed to generate symmetric key", { cause: error });
+  }
+}
+async function deriveSymmetricCryptoKey(keyMaterial) {
+  try {
+    const hashBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, keyMaterial);
+    return importSymmetricCryptoKey(hashBuffer);
+  } catch (error) {
+    throw new Error("Failed to derive CryptoKey from the given key material", { cause: error });
+  }
+}
+async function createNISTbasedIV(freeField) {
+  try {
+    if (!freeField) {
+      return randomBytes(IV_LEN_BYTES);
+    }
+    const iv = new Uint8Array(16);
+    const randFiled = randomBytes(12);
+    iv.set(randFiled, 0);
+    const freeFiledFixedLength = await getBytesFromString(4, freeField);
+    iv.set(freeFiledFixedLength, 12);
+    return iv;
+  } catch (error) {
+    throw new Error("Failed to create IV", { cause: error });
+  }
+}
+async function makeAuxFixedLength(aux) {
+  return getBytesFromString(AUX_LEN / 8, aux);
+}
+async function encryptMessage(message, encryptionKey, iv, additionalData) {
+  try {
+    const encrypted = await crypto.subtle.encrypt(
+      { name: AES_ALGORITHM, iv, additionalData },
+      encryptionKey,
+      message
+    );
+    return new Uint8Array(encrypted);
+  } catch (error) {
+    throw new Error("Failed to encrypt symmetrically", { cause: error });
+  }
+}
+async function decryptMessage(ciphertext, iv, encryptionKey, additionalData) {
+  try {
+    const decrypted = await crypto.subtle.decrypt(
+      { name: AES_ALGORITHM, iv, additionalData },
+      encryptionKey,
+      ciphertext
+    );
+    return new Uint8Array(decrypted);
+  } catch (error) {
+    throw new Error("Failed to decrypt symmetrically", { cause: error });
+  }
+}
+
+// src/symmetric-crypto/aes.ts
+async function encryptSymmetrically(encryptionKey, message, aux, freeField) {
+  try {
+    const iv = await createNISTbasedIV(freeField);
+    const additionalData = await makeAuxFixedLength(aux);
+    const ciphertext = await encryptMessage(message, encryptionKey, iv, additionalData);
+    return { ciphertext, iv };
+  } catch (error) {
+    throw new Error("Failed to encrypt symmetrically", { cause: error });
+  }
+}
+async function decryptSymmetrically(encryptionKey, encryptedMessage, aux) {
+  try {
+    const additionalData = await makeAuxFixedLength(aux);
+    const result = await decryptMessage(
+      encryptedMessage.ciphertext,
+      encryptedMessage.iv,
+      encryptionKey,
+      additionalData
+    );
+    return result;
+  } catch (error) {
+    throw new Error("Failed to decrypt symmetrically", { cause: error });
+  }
+}
+
+export { decryptSymmetrically, deriveSymmetricCryptoKey, encryptSymmetrically, exportSymmetricCryptoKey, genSymmetricCryptoKey, genSymmetricKey, importSymmetricCryptoKey };
+//# sourceMappingURL=symmetric-crypto.mjs.map
+//# sourceMappingURL=symmetric-crypto.mjs.map

package/dist/symmetric-crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts","../src/hash/blake3.ts","../src/symmetric-crypto/keys.ts","../src/symmetric-crypto/core.ts","../src/symmetric-crypto/aes.ts"],"names":[],"mappings":";;;;;AAAO,IAAM,aAAA,GAAgB,SAAA;AACtB,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,OAAA,GAAU,GAAA;AAChB,IAAM,YAAA,GAAe,EAAA;AAGrB,IAAM,UAAA,GAAa,KAAA;AC6FnB,SAAS,kBAAA,CAAmB,OAAe,KAAA,EAA2B;AAC3E,EAAA,OAAO,OAAO,WAAA,CAAY,KAAK,GAAG,EAAE,KAAA,EAAO,OAAO,CAAA;AACpD;;;AC5FA,eAAsB,yBAAyB,OAAA,EAAuD;AACpG,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,UAAA;AAAA,IACA,IAAI,WAAW,OAAO,CAAA;AAAA,IACtB;AAAA,MACE,IAAA,EAAM,aAAA;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,IAAA;AAAA,IACA,CAAC,WAAW,SAAS;AAAA,GACvB;AACF;AAQA,eAAsB,yBAAyB,GAAA,EAAqC;AAClF,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,YAAY,GAAG,CAAA;AAC5D,IAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,sCAAA,EAAwC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC1E;AACF;AAOA,eAAsB,qBAAA,GAA4C;AAChE,EAAA,OAAO,OAAO,MAAA,CAAO,WAAA;AAAA,IACnB;AAAA,MACE,IAAA,EAAM,aAAA;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,IAAA;AAAA,IACA,CAAC,WAAW,SAAS;AAAA,GACvB;AACF;AAOO,SAAS,eAAA,GAA8B;AAC5C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,kBAAA,GAAqB,CAAC,CAAA;AACjD,IAAA,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAC1B,IAAA,OAAO,GAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,kCAAA,EAAoC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACtE;AACF;AAOA,eAAsB,yBAAyB,WAAA,EAAyC;AACtF,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,MAAM,kBAAA,CAAmB,kBAAA,GAAqB,GAAG,WAAW,CAAA;AAC/E,IAAA,OAAO,yBAAyB,UAAU,CAAA;AAAA,EAC5C,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,wDAAA,EAA0D,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC5F;AACF;ACpEA,eAAsB,kBAAkB,SAAA,EAAyC;AAC/E,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAEA,IAAA,MAAM,EAAA,GAAK,IAAI,UAAA,CAAW,EAAE,CAAA;AAE5B,IAAA,MAAM,SAAA,GAAY,YAAY,EAAE,CAAA;AAChC,IAAA,EAAA,CAAG,GAAA,CAAI,WAAW,CAAC,CAAA;AAEnB,IAAA,MAAM,oBAAA,GAAuB,MAAM,kBAAA,CAAmB,CAAA,EAAG,SAAS,CAAA;AAClE,IAAA,EAAA,CAAG,GAAA,CAAI,sBAAsB,EAAE,CAAA;AAE/B,IAAA,OAAO,EAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,qBAAA,EAAuB,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACzD;AACF;AAQA,eAAsB,mBAAmB,GAAA,EAAkC;AACzE,EAAA,OAAO,kBAAA,CAAmB,OAAA,GAAU,CAAA,EAAG,GAAG,CAAA;AAC5C;AAWA,eAAsB,cAAA,CACpB,OAAA,EACA,aAAA,EACA,EAAA,EACA,cAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACpC,EAAE,IAAA,EAAM,aAAA,EAAe,EAAA,EAAwB,cAAA,EAA+C;AAAA,MAC9F,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,SAAS,CAAA;AAAA,EACjC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;AAWA,eAAsB,cAAA,CACpB,UAAA,EACA,EAAA,EACA,aAAA,EACA,cAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACpC,EAAE,IAAA,EAAM,aAAA,EAAe,EAAA,EAAwB,cAAA,EAA+C;AAAA,MAC9F,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,SAAS,CAAA;AAAA,EACjC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;;;AClFA,eAAsB,oBAAA,CACpB,aAAA,EACA,OAAA,EACA,GAAA,EACA,SAAA,EAC8B;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,MAAM,iBAAA,CAAkB,SAAS,CAAA;AAC5C,IAAA,MAAM,cAAA,GAAiB,MAAM,kBAAA,CAAmB,GAAG,CAAA;AACnD,IAAA,MAAM,aAAa,MAAM,cAAA,CAAe,OAAA,EAAS,aAAA,EAAe,IAAI,cAAc,CAAA;AAClF,IAAA,OAAO,EAAE,YAAY,EAAA,EAAG;AAAA,EAC1B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF;AAUA,eAAsB,oBAAA,CACpB,aAAA,EACA,gBAAA,EACA,GAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,cAAA,GAAiB,MAAM,kBAAA,CAAmB,GAAG,CAAA;AACnD,IAAA,MAAM,SAAS,MAAM,cAAA;AAAA,MACnB,gBAAA,CAAiB,UAAA;AAAA,MACjB,gBAAA,CAAiB,EAAA;AAAA,MACjB,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,iCAAA,EAAmC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrE;AACF","file":"symmetric-crypto.mjs","sourcesContent":["export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n","import { blake3 } from '@noble/hashes/blake3.js';\nimport { utf8ToBytes, bytesToHex } from '@noble/hashes/utils.js';\n\n/**\n * Hashes the given array of data\n *\n * @param data - The data to hash\n * @returns The resulting hash array\n */\nexport function hashData(data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create();\n    for (const d of data) {\n      hasher.update(d);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\nexport function keyedHashHex(hashKey: Uint8Array, data: Uint8Array[]): string {\n  try {\n    const hash = keyedHash(hashKey, data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to compute hash hex', { cause: error });\n  }\n}\n\nexport function keyedHash(hashKey: Uint8Array, data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create({ key: hashKey });\n    for (const d of data) {\n      hasher.update(d);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data\n *\n * @param data - The data to hash\n * @returns The resulting hash hex string\n */\nexport function hashDataHex(data: Uint8Array[]): string {\n  try {\n    const hash = hashData(data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to compute hash', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param data - The data to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromData(bytes: number, data: Uint8Array[]): Uint8Array {\n  try {\n    const hasher = blake3.create({ dkLen: bytes });\n    for (const chunk of data) {\n      hasher.update(chunk);\n    }\n    return hasher.digest();\n  } catch (error) {\n    throw new Error('Failed to get bytes from data', { cause: error });\n  }\n}\n\n/**\n * Hashes the given array of data using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param data - The data to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromDataHex(bytes: number, data: Uint8Array[]): string {\n  try {\n    const hash = getBytesFromData(bytes, data);\n    return bytesToHex(hash);\n  } catch (error) {\n    throw new Error('Failed to get bytes from data', { cause: error });\n  }\n}\n\n/**\n * Hashes the given string using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param value - The string to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromString(bytes: number, value: string): Uint8Array {\n  return blake3(utf8ToBytes(value), { dkLen: bytes });\n}\n\n/**\n * Hashes the given string using blake3 algorithm\n *\n * @param bytes - The desired output byte-length\n * @param value - The string to hash\n * @returns The resulting hash value\n */\nexport function getBytesFromStrinHex(bytes: number, value: string): string {\n  return bytesToHex(getBytesFromString(bytes, value));\n}\n","import { AES_ALGORITHM, AES_KEY_BIT_LENGTH, KEY_FORMAT } from '../constants';\nimport { getBytesFromString } from '../hash';\n\n/**\n * Converts Uint8Array into CryptoKey\n *\n * @param keyData - The Uint8Array representation of the symmetric key\n * @returns The resulting symmetric CryptoKey.\n */\nexport async function importSymmetricCryptoKey(keyData: Uint8Array | ArrayBuffer): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    KEY_FORMAT,\n    new Uint8Array(keyData),\n    {\n      name: AES_ALGORITHM,\n      length: AES_KEY_BIT_LENGTH,\n    },\n    true,\n    ['encrypt', 'decrypt'],\n  );\n}\n\n/**\n * Converts CryptoKey into Uint8Array\n *\n * @param key - The symmetric CryptoKey\n * @returns The resulting Uint8Array.\n */\nexport async function exportSymmetricCryptoKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const rawKey = await crypto.subtle.exportKey(KEY_FORMAT, key);\n    return new Uint8Array(rawKey);\n  } catch (error) {\n    throw new Error('Failed to export symmetric CryptoKey', { cause: error });\n  }\n}\n\n/**\n * Generates symmetric CryptoKey\n *\n * @returns The generated CryptoKey.\n */\nexport async function genSymmetricCryptoKey(): Promise<CryptoKey> {\n  return crypto.subtle.generateKey(\n    {\n      name: AES_ALGORITHM,\n      length: AES_KEY_BIT_LENGTH,\n    },\n    true,\n    ['encrypt', 'decrypt'],\n  );\n}\n\n/**\n * Generates symmetric key as Uint8Array\n *\n * @returns The generated Uint8Array.\n */\nexport function genSymmetricKey(): Uint8Array {\n  try {\n    const key = new Uint8Array(AES_KEY_BIT_LENGTH / 8);\n    crypto.getRandomValues(key);\n    return key;\n  } catch (error) {\n    throw new Error('Failed to generate symmetric key', { cause: error });\n  }\n}\n\n/**\n * Derives CryptoKey from the given key material\n *\n * @returns The derived CryptoKey.\n */\nexport async function deriveSymmetricCryptoKey(keyMaterial: string): Promise<CryptoKey> {\n  try {\n    const hashBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, keyMaterial);\n    return importSymmetricCryptoKey(hashBuffer);\n  } catch (error) {\n    throw new Error('Failed to derive CryptoKey from the given key material', { cause: error });\n  }\n}\n","import { randomBytes } from '@noble/post-quantum/utils.js';\nimport { getBytesFromString } from '../hash';\nimport { AUX_LEN, AES_ALGORITHM, IV_LEN_BYTES } from '../constants';\n\n/**\n * Creates an initialization vector (IV) using RGB-based construction (8.2.2 NIST Special Publication 800-38D)\n * Constructs a 128-bits IV from 2 fileds: the random field (at least 96 bits) and the free field (32 bits).\n * If free filed is empty, then the entier 128-bit IV is sampled randomly.\n *\n * @param freeFiled - The string with an unrestricted content. Can be a device identifier, etc.\n * @returns The resulting 128-bits initialization vector.\n */\nexport async function createNISTbasedIV(freeField?: string): Promise<Uint8Array> {\n  try {\n    if (!freeField) {\n      return randomBytes(IV_LEN_BYTES);\n    }\n\n    const iv = new Uint8Array(16);\n\n    const randFiled = randomBytes(12);\n    iv.set(randFiled, 0);\n\n    const freeFiledFixedLength = await getBytesFromString(4, freeField);\n    iv.set(freeFiledFixedLength, 12);\n\n    return iv;\n  } catch (error) {\n    throw new Error('Failed to create IV', { cause: error });\n  }\n}\n\n/**\n * Hashes aux string to make it fixed-length\n *\n * @param aux - The auxilay string of arbitrary length\n * @returns The resulting fixed-length auxilary string.\n */\nexport async function makeAuxFixedLength(aux: string): Promise<Uint8Array> {\n  return getBytesFromString(AUX_LEN / 8, aux);\n}\n\n/**\n * Symmetrically encrypts message\n *\n * @param message - The message to encrypt\n * @param encryptionKey - The encryption key\n * @param iv - The initialization vector\n * @param additionalData - The auxilary data\n * @returns The resulting ciphertext\n */\nexport async function encryptMessage(\n  message: Uint8Array,\n  encryptionKey: CryptoKey,\n  iv: Uint8Array,\n  additionalData: Uint8Array,\n): Promise<Uint8Array> {\n  try {\n    const encrypted = await crypto.subtle.encrypt(\n      { name: AES_ALGORITHM, iv: iv as BufferSource, additionalData: additionalData as BufferSource },\n      encryptionKey,\n      message as BufferSource,\n    );\n    return new Uint8Array(encrypted);\n  } catch (error) {\n    throw new Error('Failed to encrypt symmetrically', { cause: error });\n  }\n}\n\n/**\n * Symmetrically decrypts message\n *\n * @param ciphertext - The encrypted message\n * @param ciphertext - The initialization vector\n * @param encryptionKey - The encryption key\n * @param additionalData - The auxilary data\n * @returns The resulting decrypted message\n */\nexport async function decryptMessage(\n  ciphertext: Uint8Array,\n  iv: Uint8Array,\n  encryptionKey: CryptoKey,\n  additionalData: Uint8Array,\n): Promise<Uint8Array> {\n  try {\n    const decrypted = await crypto.subtle.decrypt(\n      { name: AES_ALGORITHM, iv: iv as BufferSource, additionalData: additionalData as BufferSource },\n      encryptionKey,\n      ciphertext as BufferSource,\n    );\n    return new Uint8Array(decrypted);\n  } catch (error) {\n    throw new Error('Failed to decrypt symmetrically', { cause: error });\n  }\n}\n","import { SymmetricCiphertext } from '../types';\nimport { createNISTbasedIV, makeAuxFixedLength, encryptMessage, decryptMessage } from './core';\n\n/**\n * Symmetrically encrypts the message\n *\n * @param encryptionKey - The symmetric CryptoKey used for message encryption\n * @param message - The message to encrypt\n * @param freeField - The context of the message (required for IV generation)\n * @param aux - The auxilary string\n * @returns The resulting ciphertext.\n */\nexport async function encryptSymmetrically(\n  encryptionKey: CryptoKey,\n  message: Uint8Array,\n  aux: string,\n  freeField?: string,\n): Promise<SymmetricCiphertext> {\n  try {\n    const iv = await createNISTbasedIV(freeField);\n    const additionalData = await makeAuxFixedLength(aux);\n    const ciphertext = await encryptMessage(message, encryptionKey, iv, additionalData);\n    return { ciphertext, iv };\n  } catch (error) {\n    throw new Error('Failed to encrypt symmetrically', { cause: error });\n  }\n}\n\n/**\n * Decryps symmetrically encrypted message\n *\n * @param encryptionKey - The symmetric CryptoKey used for message encryption\n * @param encryptedMessage - The ciphertext\n * @param aux - The auxilary string\n * @returns The resulting ciphertext.\n */\nexport async function decryptSymmetrically(\n  encryptionKey: CryptoKey,\n  encryptedMessage: SymmetricCiphertext,\n  aux: string,\n): Promise<Uint8Array> {\n  try {\n    const additionalData = await makeAuxFixedLength(aux);\n    const result = await decryptMessage(\n      encryptedMessage.ciphertext,\n      encryptedMessage.iv,\n      encryptionKey,\n      additionalData,\n    );\n    return result;\n  } catch (error) {\n    throw new Error('Failed to decrypt symmetrically', { cause: error });\n  }\n}\n"]}

package/dist/types.d.mts

@@ -0,0 +1,102 @@
+declare enum KeystoreType {
+    IDENTITY = "identity",
+    ENCRYPTION = "encryption",
+    RECOVERY = "recovery",
+    INDEX = "index"
+}
+type EncryptedKeystore = {
+    userID: string;
+    type: KeystoreType;
+    encryptedKeys: SymmetricCiphertext;
+};
+type User = {
+    email: string;
+    name: string;
+};
+type UserWithPublicKeys = User & {
+    publicKeys: PublicKeys;
+};
+type PublicKeys = {
+    eccPublicKey: CryptoKey;
+    kyberPublicKey: Uint8Array;
+};
+type MediaKeys = {
+    olmKey: Uint8Array;
+    pqKey: Uint8Array;
+    index: number;
+    userID: string;
+};
+type PrivateKeys = {
+    eccPrivateKey: CryptoKey;
+    kyberPrivateKey: Uint8Array;
+};
+type IdentityKeys = {
+    userPublicKey: CryptoKey;
+    userPrivateKey: CryptoKey;
+};
+type EncryptionKeys = {
+    userPublicKey: CryptoKey;
+    userPrivateKey: CryptoKey;
+    userPublicKyberKey: Uint8Array;
+    userPrivateKyberKey: Uint8Array;
+};
+type HybridEncryptedEmail = {
+    encryptedKey: HybridEncKey;
+    enc: SymmetricCiphertext;
+    recipientEmail: string;
+    params: EmailPublicParameters;
+    id: string;
+};
+type PwdProtectedEmail = {
+    encryptedKey: PwdProtectedKey;
+    enc: SymmetricCiphertext;
+    params: EmailPublicParameters;
+    id: string;
+};
+type SymmetricCiphertext = {
+    ciphertext: Uint8Array;
+    iv: Uint8Array;
+};
+type StoredEmail = {
+    params: EmailPublicParameters;
+    content: SymmetricCiphertext;
+    id: string;
+};
+type HybridEncKey = {
+    kyberCiphertext: Uint8Array;
+    encryptedKey: Uint8Array;
+};
+type PwdProtectedKey = {
+    encryptedKey: Uint8Array;
+    salt: Uint8Array;
+};
+type EmailBody = {
+    text: string;
+    attachments?: string[];
+};
+type EmailPublicParameters = {
+    subject: string;
+    createdAt: string;
+    sender: User;
+    recipient: User;
+    recipients?: User[];
+    replyToEmailID?: number;
+    labels?: string[];
+};
+type Email = {
+    id: string;
+    body: EmailBody;
+    params: EmailPublicParameters;
+};
+interface MailCache<Email> {
+    esCache: Map<string, Email>;
+    cacheSize: number;
+    isCacheLimited: boolean;
+    isCacheReady: boolean;
+}
+interface EmailSearchResult {
+    email: Email;
+    score?: number;
+}
+
+export { type Email, type EmailBody, type EmailPublicParameters, type EmailSearchResult, type EncryptedKeystore, type EncryptionKeys, type HybridEncKey, type HybridEncryptedEmail, type IdentityKeys, KeystoreType, type MailCache, type MediaKeys, type PrivateKeys, type PublicKeys, type PwdProtectedEmail, type PwdProtectedKey, type StoredEmail, type SymmetricCiphertext, type User, type UserWithPublicKeys };

package/dist/types.d.ts

@@ -0,0 +1,102 @@
+declare enum KeystoreType {
+    IDENTITY = "identity",
+    ENCRYPTION = "encryption",
+    RECOVERY = "recovery",
+    INDEX = "index"
+}
+type EncryptedKeystore = {
+    userID: string;
+    type: KeystoreType;
+    encryptedKeys: SymmetricCiphertext;
+};
+type User = {
+    email: string;
+    name: string;
+};
+type UserWithPublicKeys = User & {
+    publicKeys: PublicKeys;
+};
+type PublicKeys = {
+    eccPublicKey: CryptoKey;
+    kyberPublicKey: Uint8Array;
+};
+type MediaKeys = {
+    olmKey: Uint8Array;
+    pqKey: Uint8Array;
+    index: number;
+    userID: string;
+};
+type PrivateKeys = {
+    eccPrivateKey: CryptoKey;
+    kyberPrivateKey: Uint8Array;
+};
+type IdentityKeys = {
+    userPublicKey: CryptoKey;
+    userPrivateKey: CryptoKey;
+};
+type EncryptionKeys = {
+    userPublicKey: CryptoKey;
+    userPrivateKey: CryptoKey;
+    userPublicKyberKey: Uint8Array;
+    userPrivateKyberKey: Uint8Array;
+};
+type HybridEncryptedEmail = {
+    encryptedKey: HybridEncKey;
+    enc: SymmetricCiphertext;
+    recipientEmail: string;
+    params: EmailPublicParameters;
+    id: string;
+};
+type PwdProtectedEmail = {
+    encryptedKey: PwdProtectedKey;
+    enc: SymmetricCiphertext;
+    params: EmailPublicParameters;
+    id: string;
+};
+type SymmetricCiphertext = {
+    ciphertext: Uint8Array;
+    iv: Uint8Array;
+};
+type StoredEmail = {
+    params: EmailPublicParameters;
+    content: SymmetricCiphertext;
+    id: string;
+};
+type HybridEncKey = {
+    kyberCiphertext: Uint8Array;
+    encryptedKey: Uint8Array;
+};
+type PwdProtectedKey = {
+    encryptedKey: Uint8Array;
+    salt: Uint8Array;
+};
+type EmailBody = {
+    text: string;
+    attachments?: string[];
+};
+type EmailPublicParameters = {
+    subject: string;
+    createdAt: string;
+    sender: User;
+    recipient: User;
+    recipients?: User[];
+    replyToEmailID?: number;
+    labels?: string[];
+};
+type Email = {
+    id: string;
+    body: EmailBody;
+    params: EmailPublicParameters;
+};
+interface MailCache<Email> {
+    esCache: Map<string, Email>;
+    cacheSize: number;
+    isCacheLimited: boolean;
+    isCacheReady: boolean;
+}
+interface EmailSearchResult {
+    email: Email;
+    score?: number;
+}
+
+export { type Email, type EmailBody, type EmailPublicParameters, type EmailSearchResult, type EncryptedKeystore, type EncryptionKeys, type HybridEncKey, type HybridEncryptedEmail, type IdentityKeys, KeystoreType, type MailCache, type MediaKeys, type PrivateKeys, type PublicKeys, type PwdProtectedEmail, type PwdProtectedKey, type StoredEmail, type SymmetricCiphertext, type User, type UserWithPublicKeys };

package/dist/types.js

@@ -0,0 +1,14 @@
+'use strict';
+
+// src/types.ts
+var KeystoreType = /* @__PURE__ */ ((KeystoreType2) => {
+  KeystoreType2["IDENTITY"] = "identity";
+  KeystoreType2["ENCRYPTION"] = "encryption";
+  KeystoreType2["RECOVERY"] = "recovery";
+  KeystoreType2["INDEX"] = "index";
+  return KeystoreType2;
+})(KeystoreType || {});
+
+exports.KeystoreType = KeystoreType;
+//# sourceMappingURL=types.js.map
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts"],"names":["KeystoreType"],"mappings":";;;AAAO,IAAK,YAAA,qBAAAA,aAAAA,KAAL;AACL,EAAAA,cAAA,UAAA,CAAA,GAAW,UAAA;AACX,EAAAA,cAAA,YAAA,CAAA,GAAa,YAAA;AACb,EAAAA,cAAA,UAAA,CAAA,GAAW,UAAA;AACX,EAAAA,cAAA,OAAA,CAAA,GAAQ,OAAA;AAJE,EAAA,OAAAA,aAAAA;AAAA,CAAA,EAAA,YAAA,IAAA,EAAA","file":"types.js","sourcesContent":["export enum KeystoreType {\n  IDENTITY = 'identity',\n  ENCRYPTION = 'encryption',\n  RECOVERY = 'recovery',\n  INDEX = 'index',\n}\n\nexport type EncryptedKeystore = {\n  userID: string;\n  type: KeystoreType;\n  encryptedKeys: SymmetricCiphertext;\n};\n\nexport type User = {\n  email: string;\n  name: string;\n};\n\nexport type UserWithPublicKeys = User & {\n  publicKeys: PublicKeys;\n};\n\nexport type PublicKeys = {\n  eccPublicKey: CryptoKey;\n  kyberPublicKey: Uint8Array;\n};\n\nexport type MediaKeys = {\n  olmKey: Uint8Array;\n  pqKey: Uint8Array;\n  index: number;\n  userID: string;\n};\n\nexport type PrivateKeys = {\n  eccPrivateKey: CryptoKey;\n  kyberPrivateKey: Uint8Array;\n};\n\nexport type IdentityKeys = {\n  userPublicKey: CryptoKey;\n  userPrivateKey: CryptoKey;\n};\n\nexport type EncryptionKeys = {\n  userPublicKey: CryptoKey;\n  userPrivateKey: CryptoKey;\n  userPublicKyberKey: Uint8Array;\n  userPrivateKyberKey: Uint8Array;\n};\n\nexport type HybridEncryptedEmail = {\n  encryptedKey: HybridEncKey;\n  enc: SymmetricCiphertext;\n  recipientEmail: string;\n  params: EmailPublicParameters;\n  id: string;\n};\n\nexport type PwdProtectedEmail = {\n  encryptedKey: PwdProtectedKey;\n  enc: SymmetricCiphertext;\n  params: EmailPublicParameters;\n  id: string;\n};\n\nexport type SymmetricCiphertext = {\n  ciphertext: Uint8Array;\n  iv: Uint8Array;\n};\n\nexport type StoredEmail = {\n  params: EmailPublicParameters;\n  content: SymmetricCiphertext;\n  id: string;\n};\n\nexport type HybridEncKey = {\n  kyberCiphertext: Uint8Array;\n  encryptedKey: Uint8Array;\n};\n\nexport type PwdProtectedKey = {\n  encryptedKey: Uint8Array;\n  salt: Uint8Array;\n};\n\nexport type EmailBody = {\n  text: string;\n  attachments?: string[];\n};\n\nexport type EmailPublicParameters = {\n  subject: string;\n  createdAt: string;\n  sender: User;\n  recipient: User;\n  recipients?: User[];\n  replyToEmailID?: number;\n  labels?: string[];\n};\n\nexport type Email = {\n  id: string;\n  body: EmailBody;\n  params: EmailPublicParameters;\n};\n\nexport interface MailCache<Email> {\n  esCache: Map<string, Email>;\n  cacheSize: number;\n  isCacheLimited: boolean;\n  isCacheReady: boolean;\n}\nexport interface EmailSearchResult {\n  email: Email;\n  score?: number;\n}\n"]}

package/dist/types.mjs

@@ -0,0 +1,12 @@
+// src/types.ts
+var KeystoreType = /* @__PURE__ */ ((KeystoreType2) => {
+  KeystoreType2["IDENTITY"] = "identity";
+  KeystoreType2["ENCRYPTION"] = "encryption";
+  KeystoreType2["RECOVERY"] = "recovery";
+  KeystoreType2["INDEX"] = "index";
+  return KeystoreType2;
+})(KeystoreType || {});
+
+export { KeystoreType };
+//# sourceMappingURL=types.mjs.map
+//# sourceMappingURL=types.mjs.map

package/dist/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts"],"names":["KeystoreType"],"mappings":";AAAO,IAAK,YAAA,qBAAAA,aAAAA,KAAL;AACL,EAAAA,cAAA,UAAA,CAAA,GAAW,UAAA;AACX,EAAAA,cAAA,YAAA,CAAA,GAAa,YAAA;AACb,EAAAA,cAAA,UAAA,CAAA,GAAW,UAAA;AACX,EAAAA,cAAA,OAAA,CAAA,GAAQ,OAAA;AAJE,EAAA,OAAAA,aAAAA;AAAA,CAAA,EAAA,YAAA,IAAA,EAAA","file":"types.mjs","sourcesContent":["export enum KeystoreType {\n  IDENTITY = 'identity',\n  ENCRYPTION = 'encryption',\n  RECOVERY = 'recovery',\n  INDEX = 'index',\n}\n\nexport type EncryptedKeystore = {\n  userID: string;\n  type: KeystoreType;\n  encryptedKeys: SymmetricCiphertext;\n};\n\nexport type User = {\n  email: string;\n  name: string;\n};\n\nexport type UserWithPublicKeys = User & {\n  publicKeys: PublicKeys;\n};\n\nexport type PublicKeys = {\n  eccPublicKey: CryptoKey;\n  kyberPublicKey: Uint8Array;\n};\n\nexport type MediaKeys = {\n  olmKey: Uint8Array;\n  pqKey: Uint8Array;\n  index: number;\n  userID: string;\n};\n\nexport type PrivateKeys = {\n  eccPrivateKey: CryptoKey;\n  kyberPrivateKey: Uint8Array;\n};\n\nexport type IdentityKeys = {\n  userPublicKey: CryptoKey;\n  userPrivateKey: CryptoKey;\n};\n\nexport type EncryptionKeys = {\n  userPublicKey: CryptoKey;\n  userPrivateKey: CryptoKey;\n  userPublicKyberKey: Uint8Array;\n  userPrivateKyberKey: Uint8Array;\n};\n\nexport type HybridEncryptedEmail = {\n  encryptedKey: HybridEncKey;\n  enc: SymmetricCiphertext;\n  recipientEmail: string;\n  params: EmailPublicParameters;\n  id: string;\n};\n\nexport type PwdProtectedEmail = {\n  encryptedKey: PwdProtectedKey;\n  enc: SymmetricCiphertext;\n  params: EmailPublicParameters;\n  id: string;\n};\n\nexport type SymmetricCiphertext = {\n  ciphertext: Uint8Array;\n  iv: Uint8Array;\n};\n\nexport type StoredEmail = {\n  params: EmailPublicParameters;\n  content: SymmetricCiphertext;\n  id: string;\n};\n\nexport type HybridEncKey = {\n  kyberCiphertext: Uint8Array;\n  encryptedKey: Uint8Array;\n};\n\nexport type PwdProtectedKey = {\n  encryptedKey: Uint8Array;\n  salt: Uint8Array;\n};\n\nexport type EmailBody = {\n  text: string;\n  attachments?: string[];\n};\n\nexport type EmailPublicParameters = {\n  subject: string;\n  createdAt: string;\n  sender: User;\n  recipient: User;\n  recipients?: User[];\n  replyToEmailID?: number;\n  labels?: string[];\n};\n\nexport type Email = {\n  id: string;\n  body: EmailBody;\n  params: EmailPublicParameters;\n};\n\nexport interface MailCache<Email> {\n  esCache: Map<string, Email>;\n  cacheSize: number;\n  isCacheLimited: boolean;\n  isCacheReady: boolean;\n}\nexport interface EmailSearchResult {\n  email: Email;\n  score?: number;\n}\n"]}