internxt-crypto 1.5.0 → 1.6.1

package/dist/react-native/constants.js

@@ -0,0 +1,51 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/constants.ts
+const AES_KEY_BYTE_LENGTH = 32;
+const IV_LEN_BYTES = 12;
+const CONTEXT_ENC_KEYSTORE = "CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore";
+const CONTEXT_RECOVERY = "CRYPTO library 2025-07-30 16:20:00 key for account recovery";
+const CONTEXT_DATABASE = "CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices";
+const CONTEXT_DRAFT = "CRYPTO library 2026-04-23 10:56:00 key for protecting email drafts";
+const CONTEXT_TWO_KEYS = "CRYPTO library 2025-08-27 17:08:00 derive one key from two keys";
+const ARGON2ID_PARALLELISM = 3;
+const ARGON2ID_ITERATIONS = 4;
+const ARGON2ID_MEMORY_SIZE = 65536;
+const ARGON2ID_SALT_BYTE_LENGTH = 16;
+const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;
+const KYBER768_PUBLIC_KEY_LENGTH = 1184;
+const KYBER768_SECRET_KEY_LENGTH = 2400;
+const KYBER_SEED_LENGTH = 64;
+const MAX_CACHE_SIZE = 6e8;
+const MAX_EMAIL_PER_BATCH = 100;
+const DB_LABEL = "email";
+const DB_VERSION = 1;
+const XWING_PUBLIC_KEY_LENGTH = 1216;
+const XWING_SECRET_KEY_LENGTH = 32;
+const XWING_SEED_BYTE_LENGTH = 32;
+const XWING_CIPHERTEXT_BYTE_LENGTH = 1120;
+//#endregion
+exports.AES_KEY_BYTE_LENGTH = AES_KEY_BYTE_LENGTH;
+exports.ARGON2ID_ITERATIONS = ARGON2ID_ITERATIONS;
+exports.ARGON2ID_MEMORY_SIZE = ARGON2ID_MEMORY_SIZE;
+exports.ARGON2ID_OUTPUT_BYTE_LENGTH = ARGON2ID_OUTPUT_BYTE_LENGTH;
+exports.ARGON2ID_PARALLELISM = ARGON2ID_PARALLELISM;
+exports.ARGON2ID_SALT_BYTE_LENGTH = ARGON2ID_SALT_BYTE_LENGTH;
+exports.CONTEXT_DATABASE = CONTEXT_DATABASE;
+exports.CONTEXT_DRAFT = CONTEXT_DRAFT;
+exports.CONTEXT_ENC_KEYSTORE = CONTEXT_ENC_KEYSTORE;
+exports.CONTEXT_RECOVERY = CONTEXT_RECOVERY;
+exports.CONTEXT_TWO_KEYS = CONTEXT_TWO_KEYS;
+exports.DB_LABEL = DB_LABEL;
+exports.DB_VERSION = DB_VERSION;
+exports.IV_LEN_BYTES = IV_LEN_BYTES;
+exports.KYBER768_PUBLIC_KEY_LENGTH = KYBER768_PUBLIC_KEY_LENGTH;
+exports.KYBER768_SECRET_KEY_LENGTH = KYBER768_SECRET_KEY_LENGTH;
+exports.KYBER_SEED_LENGTH = KYBER_SEED_LENGTH;
+exports.MAX_CACHE_SIZE = MAX_CACHE_SIZE;
+exports.MAX_EMAIL_PER_BATCH = MAX_EMAIL_PER_BATCH;
+exports.XWING_CIPHERTEXT_BYTE_LENGTH = XWING_CIPHERTEXT_BYTE_LENGTH;
+exports.XWING_PUBLIC_KEY_LENGTH = XWING_PUBLIC_KEY_LENGTH;
+exports.XWING_SECRET_KEY_LENGTH = XWING_SECRET_KEY_LENGTH;
+exports.XWING_SEED_BYTE_LENGTH = XWING_SEED_BYTE_LENGTH;
+
+//# sourceMappingURL=constants.js.map

package/dist/react-native/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","names":[],"sources":["../../src/constants.ts"],"sourcesContent":["export const AES_KEY_BYTE_LENGTH = 32;\nexport const IV_LEN_BYTES = 12;\n\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_DATABASE = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DRAFT = 'CRYPTO library 2026-04-23 10:56:00 key for protecting email drafts';\nexport const CONTEXT_TWO_KEYS = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n\nexport const XWING_PUBLIC_KEY_LENGTH = 1216;\nexport const XWING_SECRET_KEY_LENGTH = 32;\nexport const XWING_SEED_BYTE_LENGTH = 32;\nexport const XWING_CIPHERTEXT_BYTE_LENGTH = 1120;\n"],"mappings":";;AAAA,MAAa,sBAAsB;AACnC,MAAa,eAAe;AAE5B,MAAa,uBAAuB;AACpC,MAAa,mBAAmB;AAChC,MAAa,mBAAmB;AAChC,MAAa,gBAAgB;AAC7B,MAAa,mBAAmB;AAGhC,MAAa,uBAAuB;AACpC,MAAa,sBAAsB;AACnC,MAAa,uBAAuB;AACpC,MAAa,4BAA4B;AACzC,MAAa,8BAA8B;AAE3C,MAAa,6BAA6B;AAC1C,MAAa,6BAA6B;AAC1C,MAAa,oBAAoB;AAEjC,MAAa,iBAAiB;AAC9B,MAAa,sBAAsB;AACnC,MAAa,WAAW;AACxB,MAAa,aAAa;AAE1B,MAAa,0BAA0B;AACvC,MAAa,0BAA0B;AACvC,MAAa,yBAAyB;AACtC,MAAa,+BAA+B"}

package/dist/react-native/constants.mjs

@@ -0,0 +1,28 @@
+//#region src/constants.ts
+const AES_KEY_BYTE_LENGTH = 32;
+const IV_LEN_BYTES = 12;
+const CONTEXT_ENC_KEYSTORE = "CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore";
+const CONTEXT_RECOVERY = "CRYPTO library 2025-07-30 16:20:00 key for account recovery";
+const CONTEXT_DATABASE = "CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices";
+const CONTEXT_DRAFT = "CRYPTO library 2026-04-23 10:56:00 key for protecting email drafts";
+const CONTEXT_TWO_KEYS = "CRYPTO library 2025-08-27 17:08:00 derive one key from two keys";
+const ARGON2ID_PARALLELISM = 3;
+const ARGON2ID_ITERATIONS = 4;
+const ARGON2ID_MEMORY_SIZE = 65536;
+const ARGON2ID_SALT_BYTE_LENGTH = 16;
+const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;
+const KYBER768_PUBLIC_KEY_LENGTH = 1184;
+const KYBER768_SECRET_KEY_LENGTH = 2400;
+const KYBER_SEED_LENGTH = 64;
+const MAX_CACHE_SIZE = 6e8;
+const MAX_EMAIL_PER_BATCH = 100;
+const DB_LABEL = "email";
+const DB_VERSION = 1;
+const XWING_PUBLIC_KEY_LENGTH = 1216;
+const XWING_SECRET_KEY_LENGTH = 32;
+const XWING_SEED_BYTE_LENGTH = 32;
+const XWING_CIPHERTEXT_BYTE_LENGTH = 1120;
+//#endregion
+export { AES_KEY_BYTE_LENGTH, ARGON2ID_ITERATIONS, ARGON2ID_MEMORY_SIZE, ARGON2ID_OUTPUT_BYTE_LENGTH, ARGON2ID_PARALLELISM, ARGON2ID_SALT_BYTE_LENGTH, CONTEXT_DATABASE, CONTEXT_DRAFT, CONTEXT_ENC_KEYSTORE, CONTEXT_RECOVERY, CONTEXT_TWO_KEYS, DB_LABEL, DB_VERSION, IV_LEN_BYTES, KYBER768_PUBLIC_KEY_LENGTH, KYBER768_SECRET_KEY_LENGTH, KYBER_SEED_LENGTH, MAX_CACHE_SIZE, MAX_EMAIL_PER_BATCH, XWING_CIPHERTEXT_BYTE_LENGTH, XWING_PUBLIC_KEY_LENGTH, XWING_SECRET_KEY_LENGTH, XWING_SEED_BYTE_LENGTH };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/react-native/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":[],"sources":["../../src/constants.ts"],"sourcesContent":["export const AES_KEY_BYTE_LENGTH = 32;\nexport const IV_LEN_BYTES = 12;\n\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_DATABASE = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DRAFT = 'CRYPTO library 2026-04-23 10:56:00 key for protecting email drafts';\nexport const CONTEXT_TWO_KEYS = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n\nexport const XWING_PUBLIC_KEY_LENGTH = 1216;\nexport const XWING_SECRET_KEY_LENGTH = 32;\nexport const XWING_SEED_BYTE_LENGTH = 32;\nexport const XWING_CIPHERTEXT_BYTE_LENGTH = 1120;\n"],"mappings":";AAAA,MAAa,sBAAsB;AACnC,MAAa,eAAe;AAE5B,MAAa,uBAAuB;AACpC,MAAa,mBAAmB;AAChC,MAAa,mBAAmB;AAChC,MAAa,gBAAgB;AAC7B,MAAa,mBAAmB;AAGhC,MAAa,uBAAuB;AACpC,MAAa,sBAAsB;AACnC,MAAa,uBAAuB;AACpC,MAAa,4BAA4B;AACzC,MAAa,8BAA8B;AAE3C,MAAa,6BAA6B;AAC1C,MAAa,6BAA6B;AAC1C,MAAa,oBAAoB;AAEjC,MAAa,iBAAiB;AAC9B,MAAa,sBAAsB;AACnC,MAAa,WAAW;AACxB,MAAa,aAAa;AAE1B,MAAa,0BAA0B;AACvC,MAAa,0BAA0B;AACvC,MAAa,yBAAyB;AACtC,MAAa,+BAA+B"}

package/dist/react-native/derive-key.d.mts

@@ -0,0 +1,32 @@
+//#region src/derive-key/deriveKeysFromKey.d.ts
+/**
+ * Derives a symmetric key from the base key and context string
+ *
+ * @param context - The context string.
+ * The context string should be hardcoded, globally unique, and application-specific.
+ * @param baseKey - The base key (NOT PASSWORD!)
+ * @returns The derived secret key
+ */
+declare function deriveSymmetricKeyFromContext(context: string, baseKey: Uint8Array): Uint8Array;
+/**
+ * Derives a symmetric key from two keys
+ *
+ * @param key1 - The 32-bytes key
+ * @param key2 - The 32-bytes key
+ * @returns The derived secret key
+ */
+declare function deriveSymmetricKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Uint8Array;
+//#endregion
+//#region src/derive-key/deriveKeysFromMnemonic.d.ts
+/**
+ * Derives encryption key from the user's mnemonic and context string
+ *
+ * @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)
+ * @param context - The context string.
+ * The context string should be hardcoded, globally unique, and application-specific.
+ * @returns The symmetric key for protecting database
+ */
+declare const deriveKeyFromMnemonic: (mnemonic: string, context: string) => Promise<Uint8Array>;
+//#endregion
+export { deriveKeyFromMnemonic, deriveSymmetricKeyFromContext, deriveSymmetricKeyFromTwoKeys };
+//# sourceMappingURL=derive-key.d.mts.map

package/dist/react-native/derive-key.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-key.d.mts","names":[],"sources":["../../src/derive-key/deriveKeysFromKey.ts","../../src/derive-key/deriveKeysFromMnemonic.ts"],"mappings":";;AAYA;;;;;;;iBAAgB,6BAAA,CAA8B,OAAA,UAAiB,OAAA,EAAS,UAAA,GAAa,UAAA;;;AAWrF;;;;;iBAAgB,6BAAA,CAA8B,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,UAAA,GAAa,UAAA;;;;AAXnF;;;;;;;cCDa,qBAAA,GAA+B,QAAA,UAAkB,OAAA,aAAkB,OAAA,CAAQ,UAAA"}

package/dist/react-native/derive-key.d.ts

@@ -0,0 +1,32 @@
+//#region src/derive-key/deriveKeysFromKey.d.ts
+/**
+ * Derives a symmetric key from the base key and context string
+ *
+ * @param context - The context string.
+ * The context string should be hardcoded, globally unique, and application-specific.
+ * @param baseKey - The base key (NOT PASSWORD!)
+ * @returns The derived secret key
+ */
+declare function deriveSymmetricKeyFromContext(context: string, baseKey: Uint8Array): Uint8Array;
+/**
+ * Derives a symmetric key from two keys
+ *
+ * @param key1 - The 32-bytes key
+ * @param key2 - The 32-bytes key
+ * @returns The derived secret key
+ */
+declare function deriveSymmetricKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Uint8Array;
+//#endregion
+//#region src/derive-key/deriveKeysFromMnemonic.d.ts
+/**
+ * Derives encryption key from the user's mnemonic and context string
+ *
+ * @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)
+ * @param context - The context string.
+ * The context string should be hardcoded, globally unique, and application-specific.
+ * @returns The symmetric key for protecting database
+ */
+declare const deriveKeyFromMnemonic: (mnemonic: string, context: string) => Promise<Uint8Array>;
+//#endregion
+export { deriveKeyFromMnemonic, deriveSymmetricKeyFromContext, deriveSymmetricKeyFromTwoKeys };
+//# sourceMappingURL=derive-key.d.ts.map

package/dist/react-native/derive-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-key.d.ts","names":[],"sources":["../../src/derive-key/deriveKeysFromKey.ts","../../src/derive-key/deriveKeysFromMnemonic.ts"],"mappings":";;AAYA;;;;;;;iBAAgB,6BAAA,CAA8B,OAAA,UAAiB,OAAA,EAAS,UAAA,GAAa,UAAA;;;AAWrF;;;;;iBAAgB,6BAAA,CAA8B,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,UAAA,GAAa,UAAA;;;;AAXnF;;;;;;;cCDa,qBAAA,GAA+B,QAAA,UAAkB,OAAA,aAAkB,OAAA,CAAQ,UAAA"}

package/dist/react-native/derive-key.js

@@ -0,0 +1,51 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("./chunk-DskHE4z1.js");
+const require_constants = require("./constants.js");
+const require_utils = require("./utils.js");
+let _noble_hashes_blake3_js = require("@noble/hashes/blake3.js");
+//#region src/derive-key/deriveKeysFromKey.ts
+/**
+* Derives a symmetric key from the base key and context string
+*
+* @param context - The context string.
+* The context string should be hardcoded, globally unique, and application-specific.
+* @param baseKey - The base key (NOT PASSWORD!)
+* @returns The derived secret key
+*/
+function deriveSymmetricKeyFromContext(context, baseKey) {
+	return (0, _noble_hashes_blake3_js.blake3)(baseKey, { context: require_utils.UTF8ToUint8(context) });
+}
+/**
+* Derives a symmetric key from two keys
+*
+* @param key1 - The 32-bytes key
+* @param key2 - The 32-bytes key
+* @returns The derived secret key
+*/
+function deriveSymmetricKeyFromTwoKeys(key1, key2) {
+	try {
+		if (key2.length !== 32 || key1.length !== 32) throw new Error(`Input key length must be exactly 32 bytes`);
+		return deriveSymmetricKeyFromContext(require_constants.CONTEXT_TWO_KEYS, (0, _noble_hashes_blake3_js.blake3)(key1, { key: key2 }));
+	} catch (error) {
+		throw new Error("Failed to derive symmetric key from two keys and context", { cause: error });
+	}
+}
+//#endregion
+//#region src/derive-key/deriveKeysFromMnemonic.ts
+/**
+* Derives encryption key from the user's mnemonic and context string
+*
+* @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)
+* @param context - The context string.
+* The context string should be hardcoded, globally unique, and application-specific.
+* @returns The symmetric key for protecting database
+*/
+const deriveKeyFromMnemonic = async (mnemonic, context) => {
+	return deriveSymmetricKeyFromContext(context, require_utils.mnemonicToBytes(mnemonic));
+};
+//#endregion
+exports.deriveKeyFromMnemonic = deriveKeyFromMnemonic;
+exports.deriveSymmetricKeyFromContext = deriveSymmetricKeyFromContext;
+exports.deriveSymmetricKeyFromTwoKeys = deriveSymmetricKeyFromTwoKeys;
+
+//# sourceMappingURL=derive-key.js.map

package/dist/react-native/derive-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-key.js","names":["UTF8ToUint8","CONTEXT_TWO_KEYS","mnemonicToBytes"],"sources":["../../src/derive-key/deriveKeysFromKey.ts","../../src/derive-key/deriveKeysFromMnemonic.ts"],"sourcesContent":["import { blake3 } from '@noble/hashes/blake3.js';\nimport { AES_KEY_BYTE_LENGTH, CONTEXT_TWO_KEYS } from '../constants';\nimport { UTF8ToUint8 } from '../utils';\n\n/**\n * Derives a symmetric key from the base key and context string\n *\n * @param context - The context string.\n * The context string should be hardcoded, globally unique, and application-specific.\n * @param baseKey - The base key (NOT PASSWORD!)\n * @returns The derived secret key\n */\nexport function deriveSymmetricKeyFromContext(context: string, baseKey: Uint8Array): Uint8Array {\n  return blake3(baseKey, { context: UTF8ToUint8(context) });\n}\n\n/**\n * Derives a symmetric key from two keys\n *\n * @param key1 - The 32-bytes key\n * @param key2 - The 32-bytes key\n * @returns The derived secret key\n */\nexport function deriveSymmetricKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Uint8Array {\n  try {\n    if (key2.length !== AES_KEY_BYTE_LENGTH || key1.length !== AES_KEY_BYTE_LENGTH) {\n      throw new Error(`Input key length must be exactly ${AES_KEY_BYTE_LENGTH} bytes`);\n    }\n    const key = blake3(key1, { key: key2 });\n    return deriveSymmetricKeyFromContext(CONTEXT_TWO_KEYS, key);\n  } catch (error) {\n    throw new Error('Failed to derive symmetric key from two keys and context', { cause: error });\n  }\n}\n","import { mnemonicToBytes } from '../utils';\nimport { deriveSymmetricKeyFromContext } from './deriveKeysFromKey';\n\n/**\n * Derives encryption key from the user's mnemonic and context string\n *\n * @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)\n * @param context - The context string.\n * The context string should be hardcoded, globally unique, and application-specific.\n * @returns The symmetric key for protecting database\n */\nexport const deriveKeyFromMnemonic = async (mnemonic: string, context: string): Promise<Uint8Array> => {\n  // mnemonic is always machine-generated with secure PRNG, so it is safe to convert it to bytes without additional processing\n  const entropy = mnemonicToBytes(mnemonic);\n  return deriveSymmetricKeyFromContext(context, entropy);\n};\n"],"mappings":";;;;;;;;;;;;;;AAYA,SAAgB,8BAA8B,SAAiB,SAAiC;AAC9F,SAAA,GAAA,wBAAA,QAAc,SAAS,EAAE,SAASA,cAAAA,YAAY,QAAQ,EAAE,CAAC;;;;;;;;;AAU3D,SAAgB,8BAA8B,MAAkB,MAA8B;AAC5F,KAAI;AACF,MAAI,KAAK,WAAA,MAAkC,KAAK,WAAA,GAC9C,OAAM,IAAI,MAAM,4CAAgE;AAGlF,SAAO,8BAA8BC,kBAAAA,mBAAAA,GAAAA,wBAAAA,QADlB,MAAM,EAAE,KAAK,MAAM,CACoB,CAAC;UACpD,OAAO;AACd,QAAM,IAAI,MAAM,4DAA4D,EAAE,OAAO,OAAO,CAAC;;;;;;;;;;;;;ACpBjG,MAAa,wBAAwB,OAAO,UAAkB,YAAyC;AAGrG,QAAO,8BAA8B,SADrBC,cAAAA,gBAAgB,SACqB,CAAC"}

package/dist/react-native/derive-key.mjs

@@ -0,0 +1,47 @@
+import { CONTEXT_TWO_KEYS } from "./constants.mjs";
+import { UTF8ToUint8, mnemonicToBytes } from "./utils.mjs";
+import { blake3 } from "@noble/hashes/blake3.js";
+//#region src/derive-key/deriveKeysFromKey.ts
+/**
+* Derives a symmetric key from the base key and context string
+*
+* @param context - The context string.
+* The context string should be hardcoded, globally unique, and application-specific.
+* @param baseKey - The base key (NOT PASSWORD!)
+* @returns The derived secret key
+*/
+function deriveSymmetricKeyFromContext(context, baseKey) {
+	return blake3(baseKey, { context: UTF8ToUint8(context) });
+}
+/**
+* Derives a symmetric key from two keys
+*
+* @param key1 - The 32-bytes key
+* @param key2 - The 32-bytes key
+* @returns The derived secret key
+*/
+function deriveSymmetricKeyFromTwoKeys(key1, key2) {
+	try {
+		if (key2.length !== 32 || key1.length !== 32) throw new Error(`Input key length must be exactly 32 bytes`);
+		return deriveSymmetricKeyFromContext(CONTEXT_TWO_KEYS, blake3(key1, { key: key2 }));
+	} catch (error) {
+		throw new Error("Failed to derive symmetric key from two keys and context", { cause: error });
+	}
+}
+//#endregion
+//#region src/derive-key/deriveKeysFromMnemonic.ts
+/**
+* Derives encryption key from the user's mnemonic and context string
+*
+* @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)
+* @param context - The context string.
+* The context string should be hardcoded, globally unique, and application-specific.
+* @returns The symmetric key for protecting database
+*/
+const deriveKeyFromMnemonic = async (mnemonic, context) => {
+	return deriveSymmetricKeyFromContext(context, mnemonicToBytes(mnemonic));
+};
+//#endregion
+export { deriveKeyFromMnemonic, deriveSymmetricKeyFromContext, deriveSymmetricKeyFromTwoKeys };
+
+//# sourceMappingURL=derive-key.mjs.map

package/dist/react-native/derive-key.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-key.mjs","names":[],"sources":["../../src/derive-key/deriveKeysFromKey.ts","../../src/derive-key/deriveKeysFromMnemonic.ts"],"sourcesContent":["import { blake3 } from '@noble/hashes/blake3.js';\nimport { AES_KEY_BYTE_LENGTH, CONTEXT_TWO_KEYS } from '../constants';\nimport { UTF8ToUint8 } from '../utils';\n\n/**\n * Derives a symmetric key from the base key and context string\n *\n * @param context - The context string.\n * The context string should be hardcoded, globally unique, and application-specific.\n * @param baseKey - The base key (NOT PASSWORD!)\n * @returns The derived secret key\n */\nexport function deriveSymmetricKeyFromContext(context: string, baseKey: Uint8Array): Uint8Array {\n  return blake3(baseKey, { context: UTF8ToUint8(context) });\n}\n\n/**\n * Derives a symmetric key from two keys\n *\n * @param key1 - The 32-bytes key\n * @param key2 - The 32-bytes key\n * @returns The derived secret key\n */\nexport function deriveSymmetricKeyFromTwoKeys(key1: Uint8Array, key2: Uint8Array): Uint8Array {\n  try {\n    if (key2.length !== AES_KEY_BYTE_LENGTH || key1.length !== AES_KEY_BYTE_LENGTH) {\n      throw new Error(`Input key length must be exactly ${AES_KEY_BYTE_LENGTH} bytes`);\n    }\n    const key = blake3(key1, { key: key2 });\n    return deriveSymmetricKeyFromContext(CONTEXT_TWO_KEYS, key);\n  } catch (error) {\n    throw new Error('Failed to derive symmetric key from two keys and context', { cause: error });\n  }\n}\n","import { mnemonicToBytes } from '../utils';\nimport { deriveSymmetricKeyFromContext } from './deriveKeysFromKey';\n\n/**\n * Derives encryption key from the user's mnemonic and context string\n *\n * @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)\n * @param context - The context string.\n * The context string should be hardcoded, globally unique, and application-specific.\n * @returns The symmetric key for protecting database\n */\nexport const deriveKeyFromMnemonic = async (mnemonic: string, context: string): Promise<Uint8Array> => {\n  // mnemonic is always machine-generated with secure PRNG, so it is safe to convert it to bytes without additional processing\n  const entropy = mnemonicToBytes(mnemonic);\n  return deriveSymmetricKeyFromContext(context, entropy);\n};\n"],"mappings":";;;;;;;;;;;;AAYA,SAAgB,8BAA8B,SAAiB,SAAiC;AAC9F,QAAO,OAAO,SAAS,EAAE,SAAS,YAAY,QAAQ,EAAE,CAAC;;;;;;;;;AAU3D,SAAgB,8BAA8B,MAAkB,MAA8B;AAC5F,KAAI;AACF,MAAI,KAAK,WAAA,MAAkC,KAAK,WAAA,GAC9C,OAAM,IAAI,MAAM,4CAAgE;AAGlF,SAAO,8BAA8B,kBADzB,OAAO,MAAM,EAAE,KAAK,MAAM,CACoB,CAAC;UACpD,OAAO;AACd,QAAM,IAAI,MAAM,4DAA4D,EAAE,OAAO,OAAO,CAAC;;;;;;;;;;;;;ACpBjG,MAAa,wBAAwB,OAAO,UAAkB,YAAyC;AAGrG,QAAO,8BAA8B,SADrB,gBAAgB,SACqB,CAAC"}

package/dist/react-native/derive-password-Bb3R3nyh.mjs

@@ -0,0 +1,68 @@
+import { ARGON2ID_MEMORY_SIZE } from "./constants.mjs";
+import { randomBytes } from "@noble/hashes/utils.js";
+import { argon2id } from "@noble/hashes/argon2.js";
+//#region src/derive-password/core.native.ts
+/**
+* Calculates hash using the argon2id password-hashing function
+*
+* @param password - The user's password
+* @param salt - The given salt
+* @param parallelism - The degree of parallelism
+* @param iterations - The number of iterations
+* @param memorySize - The memory size in KB
+* @param hashLength - The desired hash byte length
+* @returns The resulting hash
+*/
+async function argon2(password, salt, parallelism = 3, iterations = 4, memorySize = ARGON2ID_MEMORY_SIZE, hashLength = 32) {
+	return argon2id(password, salt, {
+		p: parallelism,
+		t: iterations,
+		m: memorySize,
+		dkLen: hashLength
+	});
+}
+//#endregion
+//#region src/derive-password/deriveKeysFromPassword.ts
+/**
+* Samples a salt
+*
+* @returns The salt
+*/
+function generateSalt() {
+	return randomBytes(16);
+}
+/**
+* Derives a symmetric key from a user's password with a randomly sampled salt
+*
+* @param password - The user's password
+* @returns The derived secret key and randomly sampled salt
+*/
+async function getKeyFromPassword(password) {
+	try {
+		const salt = generateSalt();
+		return {
+			key: await argon2(password, salt),
+			salt
+		};
+	} catch (error) {
+		throw new Error("Failed to derive key from password", { cause: error });
+	}
+}
+/**
+* Derives a symmetric key from a user's password and salt
+*
+* @param password - The user's password
+* @param salt - The given salt
+* @returns The derived secret key
+*/
+async function getKeyFromPasswordAndSalt(password, salt) {
+	try {
+		return await argon2(password, salt);
+	} catch (error) {
+		throw new Error("Failed to derive key from password and salt", { cause: error });
+	}
+}
+//#endregion
+export { getKeyFromPassword as n, getKeyFromPasswordAndSalt as r, generateSalt as t };
+
+//# sourceMappingURL=derive-password-Bb3R3nyh.mjs.map

package/dist/react-native/derive-password-Bb3R3nyh.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-password-Bb3R3nyh.mjs","names":[],"sources":["../../src/derive-password/core.native.ts","../../src/derive-password/deriveKeysFromPassword.ts"],"sourcesContent":["import { argon2id } from '@noble/hashes/argon2.js';\nimport {\n  ARGON2ID_ITERATIONS,\n  ARGON2ID_MEMORY_SIZE,\n  ARGON2ID_PARALLELISM,\n  ARGON2ID_OUTPUT_BYTE_LENGTH,\n} from '../constants';\n\n/**\n * Calculates hash using the argon2id password-hashing function\n *\n * @param password - The user's password\n * @param salt - The given salt\n * @param parallelism - The degree of parallelism\n * @param iterations - The number of iterations\n * @param memorySize - The memory size in KB\n * @param hashLength - The desired hash byte length\n * @returns The resulting hash\n */\nexport async function argon2(\n  password: string,\n  salt: Uint8Array,\n  parallelism: number = ARGON2ID_PARALLELISM,\n  iterations: number = ARGON2ID_ITERATIONS,\n  memorySize: number = ARGON2ID_MEMORY_SIZE,\n  hashLength: number = ARGON2ID_OUTPUT_BYTE_LENGTH,\n): Promise<Uint8Array> {\n  return argon2id(password, salt, {\n    p: parallelism,\n    t: iterations,\n    m: memorySize,\n    dkLen: hashLength,\n  });\n}\n","import { argon2 } from './core';\nimport { ARGON2ID_SALT_BYTE_LENGTH } from '../constants';\nimport { randomBytes } from '@noble/hashes/utils.js';\n\n/**\n * Samples a salt\n *\n * @returns The salt\n */\nexport function generateSalt(): Uint8Array {\n  return randomBytes(ARGON2ID_SALT_BYTE_LENGTH);\n}\n\n/**\n * Derives a symmetric key from a user's password with a randomly sampled salt\n *\n * @param password - The user's password\n * @returns The derived secret key and randomly sampled salt\n */\nexport async function getKeyFromPassword(password: string): Promise<{ key: Uint8Array; salt: Uint8Array }> {\n  try {\n    const salt = generateSalt();\n    const key = await argon2(password, salt);\n    return { key, salt };\n  } catch (error) {\n    throw new Error('Failed to derive key from password', { cause: error });\n  }\n}\n\n/**\n * Derives a symmetric key from a user's password and salt\n *\n * @param password - The user's password\n * @param salt - The given salt\n * @returns The derived secret key\n */\nexport async function getKeyFromPasswordAndSalt(password: string, salt: Uint8Array): Promise<Uint8Array> {\n  try {\n    return await argon2(password, salt);\n  } catch (error) {\n    throw new Error('Failed to derive key from password and salt', { cause: error });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,eAAsB,OACpB,UACA,MACA,cAAA,GACA,aAAA,GACA,aAAqB,sBACrB,aAAA,IACqB;AACrB,QAAO,SAAS,UAAU,MAAM;EAC9B,GAAG;EACH,GAAG;EACH,GAAG;EACH,OAAO;EACR,CAAC;;;;;;;;;ACvBJ,SAAgB,eAA2B;AACzC,QAAO,YAAA,GAAsC;;;;;;;;AAS/C,eAAsB,mBAAmB,UAAkE;AACzG,KAAI;EACF,MAAM,OAAO,cAAc;AAE3B,SAAO;GAAE,KAAA,MADS,OAAO,UAAU,KAAK;GAC1B;GAAM;UACb,OAAO;AACd,QAAM,IAAI,MAAM,sCAAsC,EAAE,OAAO,OAAO,CAAC;;;;;;;;;;AAW3E,eAAsB,0BAA0B,UAAkB,MAAuC;AACvG,KAAI;AACF,SAAO,MAAM,OAAO,UAAU,KAAK;UAC5B,OAAO;AACd,QAAM,IAAI,MAAM,+CAA+C,EAAE,OAAO,OAAO,CAAC"}

package/dist/react-native/derive-password-DIPrE8Mz.js

@@ -0,0 +1,86 @@
+require("./chunk-DskHE4z1.js");
+const require_constants = require("./constants.js");
+let _noble_hashes_utils_js = require("@noble/hashes/utils.js");
+let _noble_hashes_argon2_js = require("@noble/hashes/argon2.js");
+//#region src/derive-password/core.native.ts
+/**
+* Calculates hash using the argon2id password-hashing function
+*
+* @param password - The user's password
+* @param salt - The given salt
+* @param parallelism - The degree of parallelism
+* @param iterations - The number of iterations
+* @param memorySize - The memory size in KB
+* @param hashLength - The desired hash byte length
+* @returns The resulting hash
+*/
+async function argon2(password, salt, parallelism = 3, iterations = 4, memorySize = require_constants.ARGON2ID_MEMORY_SIZE, hashLength = 32) {
+	return (0, _noble_hashes_argon2_js.argon2id)(password, salt, {
+		p: parallelism,
+		t: iterations,
+		m: memorySize,
+		dkLen: hashLength
+	});
+}
+//#endregion
+//#region src/derive-password/deriveKeysFromPassword.ts
+/**
+* Samples a salt
+*
+* @returns The salt
+*/
+function generateSalt() {
+	return (0, _noble_hashes_utils_js.randomBytes)(16);
+}
+/**
+* Derives a symmetric key from a user's password with a randomly sampled salt
+*
+* @param password - The user's password
+* @returns The derived secret key and randomly sampled salt
+*/
+async function getKeyFromPassword(password) {
+	try {
+		const salt = generateSalt();
+		return {
+			key: await argon2(password, salt),
+			salt
+		};
+	} catch (error) {
+		throw new Error("Failed to derive key from password", { cause: error });
+	}
+}
+/**
+* Derives a symmetric key from a user's password and salt
+*
+* @param password - The user's password
+* @param salt - The given salt
+* @returns The derived secret key
+*/
+async function getKeyFromPasswordAndSalt(password, salt) {
+	try {
+		return await argon2(password, salt);
+	} catch (error) {
+		throw new Error("Failed to derive key from password and salt", { cause: error });
+	}
+}
+//#endregion
+Object.defineProperty(exports, "generateSalt", {
+	enumerable: true,
+	get: function() {
+		return generateSalt;
+	}
+});
+Object.defineProperty(exports, "getKeyFromPassword", {
+	enumerable: true,
+	get: function() {
+		return getKeyFromPassword;
+	}
+});
+Object.defineProperty(exports, "getKeyFromPasswordAndSalt", {
+	enumerable: true,
+	get: function() {
+		return getKeyFromPasswordAndSalt;
+	}
+});
+
+//# sourceMappingURL=derive-password-DIPrE8Mz.js.map

package/dist/react-native/derive-password-DIPrE8Mz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-password-DIPrE8Mz.js","names":["ARGON2ID_MEMORY_SIZE"],"sources":["../../src/derive-password/core.native.ts","../../src/derive-password/deriveKeysFromPassword.ts"],"sourcesContent":["import { argon2id } from '@noble/hashes/argon2.js';\nimport {\n  ARGON2ID_ITERATIONS,\n  ARGON2ID_MEMORY_SIZE,\n  ARGON2ID_PARALLELISM,\n  ARGON2ID_OUTPUT_BYTE_LENGTH,\n} from '../constants';\n\n/**\n * Calculates hash using the argon2id password-hashing function\n *\n * @param password - The user's password\n * @param salt - The given salt\n * @param parallelism - The degree of parallelism\n * @param iterations - The number of iterations\n * @param memorySize - The memory size in KB\n * @param hashLength - The desired hash byte length\n * @returns The resulting hash\n */\nexport async function argon2(\n  password: string,\n  salt: Uint8Array,\n  parallelism: number = ARGON2ID_PARALLELISM,\n  iterations: number = ARGON2ID_ITERATIONS,\n  memorySize: number = ARGON2ID_MEMORY_SIZE,\n  hashLength: number = ARGON2ID_OUTPUT_BYTE_LENGTH,\n): Promise<Uint8Array> {\n  return argon2id(password, salt, {\n    p: parallelism,\n    t: iterations,\n    m: memorySize,\n    dkLen: hashLength,\n  });\n}\n","import { argon2 } from './core';\nimport { ARGON2ID_SALT_BYTE_LENGTH } from '../constants';\nimport { randomBytes } from '@noble/hashes/utils.js';\n\n/**\n * Samples a salt\n *\n * @returns The salt\n */\nexport function generateSalt(): Uint8Array {\n  return randomBytes(ARGON2ID_SALT_BYTE_LENGTH);\n}\n\n/**\n * Derives a symmetric key from a user's password with a randomly sampled salt\n *\n * @param password - The user's password\n * @returns The derived secret key and randomly sampled salt\n */\nexport async function getKeyFromPassword(password: string): Promise<{ key: Uint8Array; salt: Uint8Array }> {\n  try {\n    const salt = generateSalt();\n    const key = await argon2(password, salt);\n    return { key, salt };\n  } catch (error) {\n    throw new Error('Failed to derive key from password', { cause: error });\n  }\n}\n\n/**\n * Derives a symmetric key from a user's password and salt\n *\n * @param password - The user's password\n * @param salt - The given salt\n * @returns The derived secret key\n */\nexport async function getKeyFromPasswordAndSalt(password: string, salt: Uint8Array): Promise<Uint8Array> {\n  try {\n    return await argon2(password, salt);\n  } catch (error) {\n    throw new Error('Failed to derive key from password and salt', { cause: error });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAmBA,eAAsB,OACpB,UACA,MACA,cAAA,GACA,aAAA,GACA,aAAqBA,kBAAAA,sBACrB,aAAA,IACqB;AACrB,SAAA,GAAA,wBAAA,UAAgB,UAAU,MAAM;EAC9B,GAAG;EACH,GAAG;EACH,GAAG;EACH,OAAO;EACR,CAAC;;;;;;;;;ACvBJ,SAAgB,eAA2B;AACzC,SAAA,GAAA,uBAAA,aAAA,GAA6C;;;;;;;;AAS/C,eAAsB,mBAAmB,UAAkE;AACzG,KAAI;EACF,MAAM,OAAO,cAAc;AAE3B,SAAO;GAAE,KAAA,MADS,OAAO,UAAU,KAAK;GAC1B;GAAM;UACb,OAAO;AACd,QAAM,IAAI,MAAM,sCAAsC,EAAE,OAAO,OAAO,CAAC;;;;;;;;;;AAW3E,eAAsB,0BAA0B,UAAkB,MAAuC;AACvG,KAAI;AACF,SAAO,MAAM,OAAO,UAAU,KAAK;UAC5B,OAAO;AACd,QAAM,IAAI,MAAM,+CAA+C,EAAE,OAAO,OAAO,CAAC"}

package/dist/react-native/derive-password.d.mts

@@ -0,0 +1,28 @@
+//#region src/derive-password/deriveKeysFromPassword.d.ts
+/**
+ * Samples a salt
+ *
+ * @returns The salt
+ */
+declare function generateSalt(): Uint8Array;
+/**
+ * Derives a symmetric key from a user's password with a randomly sampled salt
+ *
+ * @param password - The user's password
+ * @returns The derived secret key and randomly sampled salt
+ */
+declare function getKeyFromPassword(password: string): Promise<{
+  key: Uint8Array;
+  salt: Uint8Array;
+}>;
+/**
+ * Derives a symmetric key from a user's password and salt
+ *
+ * @param password - The user's password
+ * @param salt - The given salt
+ * @returns The derived secret key
+ */
+declare function getKeyFromPasswordAndSalt(password: string, salt: Uint8Array): Promise<Uint8Array>;
+//#endregion
+export { generateSalt, getKeyFromPassword, getKeyFromPasswordAndSalt };
+//# sourceMappingURL=derive-password.d.mts.map

package/dist/react-native/derive-password.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-password.d.mts","names":[],"sources":["../../src/derive-password/deriveKeysFromPassword.ts"],"mappings":";;AASA;;;;iBAAgB,YAAA,CAAA,GAAgB,UAAA;AAUhC;;;;;;AAAA,iBAAsB,kBAAA,CAAmB,QAAA,WAAmB,OAAA;EAAU,GAAA,EAAK,UAAA;EAAY,IAAA,EAAM,UAAA;AAAA;;;;;;;AAiB7F;iBAAsB,yBAAA,CAA0B,QAAA,UAAkB,IAAA,EAAM,UAAA,GAAa,OAAA,CAAQ,UAAA"}

package/dist/react-native/derive-password.d.ts

@@ -0,0 +1,28 @@
+//#region src/derive-password/deriveKeysFromPassword.d.ts
+/**
+ * Samples a salt
+ *
+ * @returns The salt
+ */
+declare function generateSalt(): Uint8Array;
+/**
+ * Derives a symmetric key from a user's password with a randomly sampled salt
+ *
+ * @param password - The user's password
+ * @returns The derived secret key and randomly sampled salt
+ */
+declare function getKeyFromPassword(password: string): Promise<{
+  key: Uint8Array;
+  salt: Uint8Array;
+}>;
+/**
+ * Derives a symmetric key from a user's password and salt
+ *
+ * @param password - The user's password
+ * @param salt - The given salt
+ * @returns The derived secret key
+ */
+declare function getKeyFromPasswordAndSalt(password: string, salt: Uint8Array): Promise<Uint8Array>;
+//#endregion
+export { generateSalt, getKeyFromPassword, getKeyFromPasswordAndSalt };
+//# sourceMappingURL=derive-password.d.ts.map

package/dist/react-native/derive-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-password.d.ts","names":[],"sources":["../../src/derive-password/deriveKeysFromPassword.ts"],"mappings":";;AASA;;;;iBAAgB,YAAA,CAAA,GAAgB,UAAA;AAUhC;;;;;;AAAA,iBAAsB,kBAAA,CAAmB,QAAA,WAAmB,OAAA;EAAU,GAAA,EAAK,UAAA;EAAY,IAAA,EAAM,UAAA;AAAA;;;;;;;AAiB7F;iBAAsB,yBAAA,CAA0B,QAAA,UAAkB,IAAA,EAAM,UAAA,GAAa,OAAA,CAAQ,UAAA"}

package/dist/react-native/derive-password.js

@@ -0,0 +1,5 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_derive_password = require("./derive-password-DIPrE8Mz.js");
+exports.generateSalt = require_derive_password.generateSalt;
+exports.getKeyFromPassword = require_derive_password.getKeyFromPassword;
+exports.getKeyFromPasswordAndSalt = require_derive_password.getKeyFromPasswordAndSalt;

package/dist/react-native/derive-password.mjs

@@ -0,0 +1,2 @@
+import { n as getKeyFromPassword, r as getKeyFromPasswordAndSalt, t as generateSalt } from "./derive-password-Bb3R3nyh.mjs";
+export { generateSalt, getKeyFromPassword, getKeyFromPasswordAndSalt };