internxt-crypto 1.6.0 → 1.6.1

package/dist/react-native/keystore-crypto-BXPEVvzq.js

@@ -0,0 +1,238 @@
+const require_constants = require("./constants.js");
+const require_utils = require("./utils.js");
+const require_derive_key = require("./derive-key.js");
+const require_symmetric_crypto = require("./symmetric-crypto.js");
+const require_xwing = require("./xwing-CSdiyHAt.js");
+require("./types.js");
+//#region src/keystore-crypto/core.ts
+/**
+* Encrypts the user's hybrid key using symmetric encryption to get a keystore
+*
+* @param secretKey - The symmetric key to encrypt the keystore content
+* @param key - The hybrid key pair
+* @param userEmail - The email of the user
+* @param type - The keystore type
+* @returns The encrypted keystore
+*/
+async function encryptKeystoreContent(secretKey, keys, userEmail, type) {
+	try {
+		const publicKey = require_utils.uint8ArrayToBase64(keys.publicKey);
+		const aux = require_utils.UTF8ToUint8(userEmail + type + publicKey);
+		return {
+			userEmail,
+			type,
+			publicKey,
+			privateKeyEncrypted: require_utils.uint8ArrayToBase64(await require_symmetric_crypto.encryptSymmetrically(secretKey, keys.secretKey, aux))
+		};
+	} catch (error) {
+		throw new Error("Failed to encrypt keystore content", { cause: error });
+	}
+}
+/**
+* Decrypts the keystore content using symmetric encryption
+*
+* @param kesytoreOpeningKey - The symmetric key to decrypt the keystore content
+* @param encryptedKeys - The encrypted keystore content
+* @returns The decrypted hybrid key pair contained in the keystore
+*/
+async function decryptKeystoreContent(kesytoreOpeningKey, encryptedKeystore) {
+	try {
+		const aux = require_utils.UTF8ToUint8(encryptedKeystore.userEmail + encryptedKeystore.type + encryptedKeystore.publicKey);
+		return {
+			publicKey: require_utils.base64ToUint8Array(encryptedKeystore.publicKey),
+			secretKey: await require_symmetric_crypto.decryptSymmetrically(kesytoreOpeningKey, require_utils.base64ToUint8Array(encryptedKeystore.privateKeyEncrypted), aux)
+		};
+	} catch (error) {
+		throw new Error("Failed to decrypt keystore content", { cause: error });
+	}
+}
+/**
+* Derives a secret key for protecting the recovery keystore
+*
+* @param recoveryCodes - The recovery codes (machine-generated with secure PRNG)
+* @returns The derived secret key for protecting the recovery keystore
+*/
+async function deriveRecoveryKey(recoveryCodes) {
+	return require_derive_key.deriveKeyFromMnemonic(recoveryCodes, require_constants.CONTEXT_RECOVERY);
+}
+/**
+* Derives a secret key for protecting the encryption keystore from user's mnemonic
+*
+* @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)
+* @returns The derived secret key for protecting the encryption keystore
+*/
+async function deriveEncryptionKeystoreKeyFromMnemonic(mnemonic) {
+	return require_derive_key.deriveKeyFromMnemonic(mnemonic, require_constants.CONTEXT_ENC_KEYSTORE);
+}
+//#endregion
+//#region src/keystore-crypto/errors.ts
+var FailedToCreateKeyStores = class FailedToCreateKeyStores extends Error {
+	constructor(errorMsg) {
+		super("Failed to create encryption and recovery keystores: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToCreateKeyStores.prototype);
+	}
+};
+var InvalidInputKeyStore = class InvalidInputKeyStore extends Error {
+	constructor() {
+		super("Invalid input");
+		Object.setPrototypeOf(this, InvalidInputKeyStore.prototype);
+	}
+};
+var FailedToOpenEncryptionKeyStore = class FailedToOpenEncryptionKeyStore extends Error {
+	constructor(errorMsg) {
+		super("Failed to open encryption keystore: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToOpenEncryptionKeyStore.prototype);
+	}
+};
+var FailedToOpenRecoveryKeyStore = class FailedToOpenRecoveryKeyStore extends Error {
+	constructor(errorMsg) {
+		super("Failed to open recovery keystore: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToOpenRecoveryKeyStore.prototype);
+	}
+};
+var FailedToChangeMnemonicForKeyStore = class FailedToChangeMnemonicForKeyStore extends Error {
+	constructor(errorMsg) {
+		super("Error while fetching message: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToChangeMnemonicForKeyStore.prototype);
+	}
+};
+//#endregion
+//#region src/keystore-crypto/emailEncryptionKey.ts
+/**
+* Generates hybrid keys and creates encrypted main and recovery keystores
+* The main keystore encryption key is derived from the user's mnemonic
+* The recovery keystore encryption key is derived from the recovery codes
+*
+* @param userEmail - The user's email
+* @param mnemonic - The user's mnemonic
+* @returns The encryption keys
+*
+* @returns The encryption and recovery keystores, recovery codes and hybrid keys
+*/
+async function createEncryptionAndRecoveryKeystores(userEmail, mnemonic) {
+	try {
+		const keys = require_xwing.genHybridKeys();
+		const encryptionKeystore = await encryptKeystoreContent(await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic), keys, userEmail, "Encryption");
+		const recoveryCodes = require_utils.genMnemonic();
+		return {
+			encryptionKeystore,
+			recoveryKeystore: await encryptKeystoreContent(await deriveRecoveryKey(recoveryCodes), keys, userEmail, "Recovery"),
+			recoveryCodes,
+			keys
+		};
+	} catch (error) {
+		throw new FailedToCreateKeyStores(error instanceof Error ? error.message : String(error));
+	}
+}
+/**
+* Opens the encryption keystore and returns the email encryption keys
+* The decryption key is derived from the user mnemonic
+*
+* @param encryptedKeystore - The encrypted keystore containing encryption keys
+* @param mnemonic - The user's mnemonic
+* @returns The encryption keys
+*/
+async function openEncryptionKeystore(encryptedKeystore, mnemonic) {
+	try {
+		if (encryptedKeystore.type !== "Encryption") throw new InvalidInputKeyStore();
+		return await decryptKeystoreContent(await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic), encryptedKeystore);
+	} catch (error) {
+		if (error instanceof InvalidInputKeyStore) throw error;
+		throw new FailedToOpenEncryptionKeyStore(error instanceof Error ? error.message : String(error));
+	}
+}
+/**
+* Opens the recovery keystore and returns the email encryption keys
+* The decryption key is derived from the recovery codes (machine-generated mnemonic)
+*
+* @param recoveryCodes - The user's recovery codes
+* @param encryptedKeystore - The encrypted keystore containing encryption keys
+* @returns The encryption keys
+*/
+async function openRecoveryKeystore(recoveryCodes, encryptedKeystore) {
+	try {
+		if (encryptedKeystore.type !== "Recovery") throw new InvalidInputKeyStore();
+		return await decryptKeystoreContent(await deriveRecoveryKey(recoveryCodes), encryptedKeystore);
+	} catch (error) {
+		if (error instanceof InvalidInputKeyStore) throw error;
+		throw new FailedToOpenRecoveryKeyStore(error instanceof Error ? error.message : String(error));
+	}
+}
+/**
+* Re-encrypts the encryption keystore with a new mnemonic
+* The decryption key is derived from the user mnemonic
+*
+* @param encryptedKeystore - The encrypted keystore containing encryption keys
+* @param oldMnemonic - The user's old mnemonic
+* @param newMnemonic - The user's new mnemonic
+* @returns The keys and new re-encrypted keystore
+*/
+async function changeMnemonicForEncryptionKeystore(encryptedKeystore, oldMnemonic, newMnemonic) {
+	try {
+		const keys = await openEncryptionKeystore(encryptedKeystore, oldMnemonic);
+		return {
+			newKeystore: await encryptKeystoreContent(await deriveEncryptionKeystoreKeyFromMnemonic(newMnemonic), keys, encryptedKeystore.userEmail, "Encryption"),
+			keys
+		};
+	} catch (error) {
+		if (error instanceof InvalidInputKeyStore) throw error;
+		throw new FailedToChangeMnemonicForKeyStore(error instanceof Error ? error.message : String(error));
+	}
+}
+//#endregion
+Object.defineProperty(exports, "FailedToChangeMnemonicForKeyStore", {
+	enumerable: true,
+	get: function() {
+		return FailedToChangeMnemonicForKeyStore;
+	}
+});
+Object.defineProperty(exports, "FailedToCreateKeyStores", {
+	enumerable: true,
+	get: function() {
+		return FailedToCreateKeyStores;
+	}
+});
+Object.defineProperty(exports, "FailedToOpenEncryptionKeyStore", {
+	enumerable: true,
+	get: function() {
+		return FailedToOpenEncryptionKeyStore;
+	}
+});
+Object.defineProperty(exports, "FailedToOpenRecoveryKeyStore", {
+	enumerable: true,
+	get: function() {
+		return FailedToOpenRecoveryKeyStore;
+	}
+});
+Object.defineProperty(exports, "InvalidInputKeyStore", {
+	enumerable: true,
+	get: function() {
+		return InvalidInputKeyStore;
+	}
+});
+Object.defineProperty(exports, "changeMnemonicForEncryptionKeystore", {
+	enumerable: true,
+	get: function() {
+		return changeMnemonicForEncryptionKeystore;
+	}
+});
+Object.defineProperty(exports, "createEncryptionAndRecoveryKeystores", {
+	enumerable: true,
+	get: function() {
+		return createEncryptionAndRecoveryKeystores;
+	}
+});
+Object.defineProperty(exports, "openEncryptionKeystore", {
+	enumerable: true,
+	get: function() {
+		return openEncryptionKeystore;
+	}
+});
+Object.defineProperty(exports, "openRecoveryKeystore", {
+	enumerable: true,
+	get: function() {
+		return openRecoveryKeystore;
+	}
+});
+
+//# sourceMappingURL=keystore-crypto-BXPEVvzq.js.map

package/dist/react-native/keystore-crypto-BXPEVvzq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore-crypto-BXPEVvzq.js","names":["uint8ArrayToBase64","UTF8ToUint8","encryptSymmetrically","base64ToUint8Array","decryptSymmetrically","deriveKeyFromMnemonic","CONTEXT_RECOVERY","CONTEXT_ENC_KEYSTORE","genHybridKeys","genMnemonic"],"sources":["../../src/keystore-crypto/core.ts","../../src/keystore-crypto/errors.ts","../../src/keystore-crypto/emailEncryptionKey.ts"],"sourcesContent":["import { encryptSymmetrically, decryptSymmetrically } from '../symmetric-crypto';\nimport { base64ToUint8Array, uint8ArrayToBase64, UTF8ToUint8 } from '../utils';\nimport { deriveKeyFromMnemonic } from '../derive-key';\nimport { CONTEXT_ENC_KEYSTORE, CONTEXT_RECOVERY } from '../constants';\nimport { EncryptedKeystore, HybridKeyPair, KeystoreType } from '../types';\n\n/**\n * Encrypts the user's hybrid key using symmetric encryption to get a keystore\n *\n * @param secretKey - The symmetric key to encrypt the keystore content\n * @param key - The hybrid key pair\n * @param userEmail - The email of the user\n * @param type - The keystore type\n * @returns The encrypted keystore\n */\nexport async function encryptKeystoreContent(\n  secretKey: Uint8Array,\n  keys: HybridKeyPair,\n  userEmail: string,\n  type: KeystoreType,\n): Promise<EncryptedKeystore> {\n  try {\n    const publicKey = uint8ArrayToBase64(keys.publicKey);\n\n    const aux = UTF8ToUint8(userEmail + type + publicKey);\n    const secretKeyEncrypted = await encryptSymmetrically(secretKey, keys.secretKey, aux);\n\n    const keystore: EncryptedKeystore = {\n      userEmail,\n      type,\n      publicKey,\n      privateKeyEncrypted: uint8ArrayToBase64(secretKeyEncrypted),\n    };\n    return keystore;\n  } catch (error) {\n    throw new Error('Failed to encrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Decrypts the keystore content using symmetric encryption\n *\n * @param kesytoreOpeningKey - The symmetric key to decrypt the keystore content\n * @param encryptedKeys - The encrypted keystore content\n * @returns The decrypted hybrid key pair contained in the keystore\n */\nexport async function decryptKeystoreContent(\n  kesytoreOpeningKey: Uint8Array,\n  encryptedKeystore: EncryptedKeystore,\n): Promise<HybridKeyPair> {\n  try {\n    const aux = UTF8ToUint8(encryptedKeystore.userEmail + encryptedKeystore.type + encryptedKeystore.publicKey);\n    const publicKey = base64ToUint8Array(encryptedKeystore.publicKey);\n    const ciphertext = base64ToUint8Array(encryptedKeystore.privateKeyEncrypted);\n    const secretKey = await decryptSymmetrically(kesytoreOpeningKey, ciphertext, aux);\n    return {\n      publicKey,\n      secretKey,\n    };\n  } catch (error) {\n    throw new Error('Failed to decrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Derives a secret key for protecting the recovery keystore\n *\n * @param recoveryCodes - The recovery codes (machine-generated with secure PRNG)\n * @returns The derived secret key for protecting the recovery keystore\n */\nexport async function deriveRecoveryKey(recoveryCodes: string): Promise<Uint8Array> {\n  return deriveKeyFromMnemonic(recoveryCodes, CONTEXT_RECOVERY);\n}\n\n/**\n * Derives a secret key for protecting the encryption keystore from user's mnemonic\n *\n * @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)\n * @returns The derived secret key for protecting the encryption keystore\n */\nexport async function deriveEncryptionKeystoreKeyFromMnemonic(mnemonic: string): Promise<Uint8Array> {\n  return deriveKeyFromMnemonic(mnemonic, CONTEXT_ENC_KEYSTORE);\n}\n","export class FailedToCreateKeyStores extends Error {\n  constructor(errorMsg?: string) {\n    super('Failed to create encryption and recovery keystores: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToCreateKeyStores.prototype);\n  }\n}\n\nexport class InvalidInputKeyStore extends Error {\n  constructor() {\n    super('Invalid input');\n\n    Object.setPrototypeOf(this, InvalidInputKeyStore.prototype);\n  }\n}\n\nexport class FailedToOpenEncryptionKeyStore extends Error {\n  constructor(errorMsg?: string) {\n    super('Failed to open encryption keystore: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToOpenEncryptionKeyStore.prototype);\n  }\n}\n\nexport class FailedToOpenRecoveryKeyStore extends Error {\n  constructor(errorMsg?: string) {\n    super('Failed to open recovery keystore: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToOpenRecoveryKeyStore.prototype);\n  }\n}\n\nexport class FailedToChangeMnemonicForKeyStore extends Error {\n  constructor(errorMsg?: string) {\n    super('Error while fetching message: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToChangeMnemonicForKeyStore.prototype);\n  }\n}\n","import { EncryptedKeystore, KeystoreType, HybridKeyPair } from '../types';\nimport { genMnemonic } from '../utils';\nimport {\n  encryptKeystoreContent,\n  decryptKeystoreContent,\n  deriveEncryptionKeystoreKeyFromMnemonic,\n  deriveRecoveryKey,\n} from './core';\nimport { genHybridKeys } from '../hybrid-crypto';\nimport {\n  FailedToOpenEncryptionKeyStore,\n  FailedToCreateKeyStores,\n  FailedToOpenRecoveryKeyStore,\n  FailedToChangeMnemonicForKeyStore,\n  InvalidInputKeyStore,\n} from './errors';\n\n/**\n * Generates hybrid keys and creates encrypted main and recovery keystores\n * The main keystore encryption key is derived from the user's mnemonic\n * The recovery keystore encryption key is derived from the recovery codes\n *\n * @param userEmail - The user's email\n * @param mnemonic - The user's mnemonic\n * @returns The encryption keys\n *\n * @returns The encryption and recovery keystores, recovery codes and hybrid keys\n */\nexport async function createEncryptionAndRecoveryKeystores(\n  userEmail: string,\n  mnemonic: string,\n): Promise<{\n  encryptionKeystore: EncryptedKeystore;\n  recoveryKeystore: EncryptedKeystore;\n  recoveryCodes: string;\n  keys: HybridKeyPair;\n}> {\n  try {\n    const keys = genHybridKeys();\n\n    const secretKey = await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic);\n    const encryptionKeystore = await encryptKeystoreContent(secretKey, keys, userEmail, KeystoreType.ENCRYPTION);\n\n    const recoveryCodes = genMnemonic();\n    const recoveryKey = await deriveRecoveryKey(recoveryCodes);\n    const recoveryKeystore = await encryptKeystoreContent(recoveryKey, keys, userEmail, KeystoreType.RECOVERY);\n\n    return { encryptionKeystore, recoveryKeystore, recoveryCodes, keys };\n  } catch (error) {\n    throw new FailedToCreateKeyStores(error instanceof Error ? error.message : String(error));\n  }\n}\n\n/**\n * Opens the encryption keystore and returns the email encryption keys\n * The decryption key is derived from the user mnemonic\n *\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @param mnemonic - The user's mnemonic\n * @returns The encryption keys\n */\nexport async function openEncryptionKeystore(\n  encryptedKeystore: EncryptedKeystore,\n  mnemonic: string,\n): Promise<HybridKeyPair> {\n  try {\n    if (encryptedKeystore.type !== KeystoreType.ENCRYPTION) {\n      throw new InvalidInputKeyStore();\n    }\n    const secretKey = await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic);\n    const keys = await decryptKeystoreContent(secretKey, encryptedKeystore);\n    return keys;\n  } catch (error) {\n    if (error instanceof InvalidInputKeyStore) throw error;\n    throw new FailedToOpenEncryptionKeyStore(error instanceof Error ? error.message : String(error));\n  }\n}\n\n/**\n * Opens the recovery keystore and returns the email encryption keys\n * The decryption key is derived from the recovery codes (machine-generated mnemonic)\n *\n * @param recoveryCodes - The user's recovery codes\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @returns The encryption keys\n */\nexport async function openRecoveryKeystore(\n  recoveryCodes: string,\n  encryptedKeystore: EncryptedKeystore,\n): Promise<HybridKeyPair> {\n  try {\n    if (encryptedKeystore.type !== KeystoreType.RECOVERY) {\n      throw new InvalidInputKeyStore();\n    }\n    const recoveryKey = await deriveRecoveryKey(recoveryCodes);\n    const keys = await decryptKeystoreContent(recoveryKey, encryptedKeystore);\n    return keys;\n  } catch (error) {\n    if (error instanceof InvalidInputKeyStore) throw error;\n    throw new FailedToOpenRecoveryKeyStore(error instanceof Error ? error.message : String(error));\n  }\n}\n\n/**\n * Re-encrypts the encryption keystore with a new mnemonic\n * The decryption key is derived from the user mnemonic\n *\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @param oldMnemonic - The user's old mnemonic\n * @param newMnemonic - The user's new mnemonic\n * @returns The keys and new re-encrypted keystore\n */\nexport async function changeMnemonicForEncryptionKeystore(\n  encryptedKeystore: EncryptedKeystore,\n  oldMnemonic: string,\n  newMnemonic: string,\n): Promise<{ keys: HybridKeyPair; newKeystore: EncryptedKeystore }> {\n  try {\n    const keys = await openEncryptionKeystore(encryptedKeystore, oldMnemonic);\n\n    const secretKey = await deriveEncryptionKeystoreKeyFromMnemonic(newMnemonic);\n    const newKeystore = await encryptKeystoreContent(\n      secretKey,\n      keys,\n      encryptedKeystore.userEmail,\n      KeystoreType.ENCRYPTION,\n    );\n\n    return { newKeystore, keys };\n  } catch (error) {\n    if (error instanceof InvalidInputKeyStore) throw error;\n    throw new FailedToChangeMnemonicForKeyStore(error instanceof Error ? error.message : String(error));\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,eAAsB,uBACpB,WACA,MACA,WACA,MAC4B;AAC5B,KAAI;EACF,MAAM,YAAYA,cAAAA,mBAAmB,KAAK,UAAU;EAEpD,MAAM,MAAMC,cAAAA,YAAY,YAAY,OAAO,UAAU;AASrD,SAAO;GALL;GACA;GACA;GACA,qBAAqBD,cAAAA,mBAAmB,MANTE,yBAAAA,qBAAqB,WAAW,KAAK,WAAW,IAAI,CAMxB;GAE9C;UACR,OAAO;AACd,QAAM,IAAI,MAAM,sCAAsC,EAAE,OAAO,OAAO,CAAC;;;;;;;;;;AAW3E,eAAsB,uBACpB,oBACA,mBACwB;AACxB,KAAI;EACF,MAAM,MAAMD,cAAAA,YAAY,kBAAkB,YAAY,kBAAkB,OAAO,kBAAkB,UAAU;AAI3G,SAAO;GACL,WAJgBE,cAAAA,mBAAmB,kBAAkB,UAI5C;GACT,WAAA,MAHsBC,yBAAAA,qBAAqB,oBAD1BD,cAAAA,mBAAmB,kBAAkB,oBACmB,EAAE,IAAI;GAIhF;UACM,OAAO;AACd,QAAM,IAAI,MAAM,sCAAsC,EAAE,OAAO,OAAO,CAAC;;;;;;;;;AAU3E,eAAsB,kBAAkB,eAA4C;AAClF,QAAOE,mBAAAA,sBAAsB,eAAeC,kBAAAA,iBAAiB;;;;;;;;AAS/D,eAAsB,wCAAwC,UAAuC;AACnG,QAAOD,mBAAAA,sBAAsB,UAAUE,kBAAAA,qBAAqB;;;;ACjF9D,IAAa,0BAAb,MAAa,gCAAgC,MAAM;CACjD,YAAY,UAAmB;AAC7B,QAAM,yDAAyD,SAAS;AAExE,SAAO,eAAe,MAAM,wBAAwB,UAAU;;;AAIlE,IAAa,uBAAb,MAAa,6BAA6B,MAAM;CAC9C,cAAc;AACZ,QAAM,gBAAgB;AAEtB,SAAO,eAAe,MAAM,qBAAqB,UAAU;;;AAI/D,IAAa,iCAAb,MAAa,uCAAuC,MAAM;CACxD,YAAY,UAAmB;AAC7B,QAAM,yCAAyC,SAAS;AAExD,SAAO,eAAe,MAAM,+BAA+B,UAAU;;;AAIzE,IAAa,+BAAb,MAAa,qCAAqC,MAAM;CACtD,YAAY,UAAmB;AAC7B,QAAM,uCAAuC,SAAS;AAEtD,SAAO,eAAe,MAAM,6BAA6B,UAAU;;;AAIvE,IAAa,oCAAb,MAAa,0CAA0C,MAAM;CAC3D,YAAY,UAAmB;AAC7B,QAAM,mCAAmC,SAAS;AAElD,SAAO,eAAe,MAAM,kCAAkC,UAAU;;;;;;;;;;;;;;;;ACR5E,eAAsB,qCACpB,WACA,UAMC;AACD,KAAI;EACF,MAAM,OAAOC,cAAAA,eAAe;EAG5B,MAAM,qBAAqB,MAAM,uBAAuB,MADhC,wCAAwC,SAAS,EACN,MAAM,WAAA,aAAmC;EAE5G,MAAM,gBAAgBC,cAAAA,aAAa;AAInC,SAAO;GAAE;GAAoB,kBAAA,MAFE,uBAAuB,MAD5B,kBAAkB,cAAc,EACS,MAAM,WAAA,WAAiC;GAE3D;GAAe;GAAM;UAC7D,OAAO;AACd,QAAM,IAAI,wBAAwB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;;;;;;;;;AAY7F,eAAsB,uBACpB,mBACA,UACwB;AACxB,KAAI;AACF,MAAI,kBAAkB,SAAA,aACpB,OAAM,IAAI,sBAAsB;AAIlC,SAAO,MADY,uBAAuB,MADlB,wCAAwC,SAAS,EACpB,kBAAkB;UAEhE,OAAO;AACd,MAAI,iBAAiB,qBAAsB,OAAM;AACjD,QAAM,IAAI,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;;;;;;;;;AAYpG,eAAsB,qBACpB,eACA,mBACwB;AACxB,KAAI;AACF,MAAI,kBAAkB,SAAA,WACpB,OAAM,IAAI,sBAAsB;AAIlC,SAAO,MADY,uBAAuB,MADhB,kBAAkB,cAAc,EACH,kBAAkB;UAElE,OAAO;AACd,MAAI,iBAAiB,qBAAsB,OAAM;AACjD,QAAM,IAAI,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;;;;;;;;;;AAalG,eAAsB,oCACpB,mBACA,aACA,aACkE;AAClE,KAAI;EACF,MAAM,OAAO,MAAM,uBAAuB,mBAAmB,YAAY;AAUzE,SAAO;GAAE,aAAA,MAPiB,uBACxB,MAFsB,wCAAwC,YAAY,EAG1E,MACA,kBAAkB,WAAA,aAEnB;GAEqB;GAAM;UACrB,OAAO;AACd,MAAI,iBAAiB,qBAAsB,OAAM;AACjD,QAAM,IAAI,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC"}

package/dist/react-native/keystore-crypto-C6F-NQdX.mjs

@@ -0,0 +1,185 @@
+import { CONTEXT_ENC_KEYSTORE, CONTEXT_RECOVERY } from "./constants.mjs";
+import { UTF8ToUint8, base64ToUint8Array, genMnemonic, uint8ArrayToBase64 } from "./utils.mjs";
+import { deriveKeyFromMnemonic } from "./derive-key.mjs";
+import { decryptSymmetrically, encryptSymmetrically } from "./symmetric-crypto.mjs";
+import { r as genHybridKeys } from "./xwing-B34h5e3Z.mjs";
+import "./types.mjs";
+//#region src/keystore-crypto/core.ts
+/**
+* Encrypts the user's hybrid key using symmetric encryption to get a keystore
+*
+* @param secretKey - The symmetric key to encrypt the keystore content
+* @param key - The hybrid key pair
+* @param userEmail - The email of the user
+* @param type - The keystore type
+* @returns The encrypted keystore
+*/
+async function encryptKeystoreContent(secretKey, keys, userEmail, type) {
+	try {
+		const publicKey = uint8ArrayToBase64(keys.publicKey);
+		const aux = UTF8ToUint8(userEmail + type + publicKey);
+		return {
+			userEmail,
+			type,
+			publicKey,
+			privateKeyEncrypted: uint8ArrayToBase64(await encryptSymmetrically(secretKey, keys.secretKey, aux))
+		};
+	} catch (error) {
+		throw new Error("Failed to encrypt keystore content", { cause: error });
+	}
+}
+/**
+* Decrypts the keystore content using symmetric encryption
+*
+* @param kesytoreOpeningKey - The symmetric key to decrypt the keystore content
+* @param encryptedKeys - The encrypted keystore content
+* @returns The decrypted hybrid key pair contained in the keystore
+*/
+async function decryptKeystoreContent(kesytoreOpeningKey, encryptedKeystore) {
+	try {
+		const aux = UTF8ToUint8(encryptedKeystore.userEmail + encryptedKeystore.type + encryptedKeystore.publicKey);
+		return {
+			publicKey: base64ToUint8Array(encryptedKeystore.publicKey),
+			secretKey: await decryptSymmetrically(kesytoreOpeningKey, base64ToUint8Array(encryptedKeystore.privateKeyEncrypted), aux)
+		};
+	} catch (error) {
+		throw new Error("Failed to decrypt keystore content", { cause: error });
+	}
+}
+/**
+* Derives a secret key for protecting the recovery keystore
+*
+* @param recoveryCodes - The recovery codes (machine-generated with secure PRNG)
+* @returns The derived secret key for protecting the recovery keystore
+*/
+async function deriveRecoveryKey(recoveryCodes) {
+	return deriveKeyFromMnemonic(recoveryCodes, CONTEXT_RECOVERY);
+}
+/**
+* Derives a secret key for protecting the encryption keystore from user's mnemonic
+*
+* @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)
+* @returns The derived secret key for protecting the encryption keystore
+*/
+async function deriveEncryptionKeystoreKeyFromMnemonic(mnemonic) {
+	return deriveKeyFromMnemonic(mnemonic, CONTEXT_ENC_KEYSTORE);
+}
+//#endregion
+//#region src/keystore-crypto/errors.ts
+var FailedToCreateKeyStores = class FailedToCreateKeyStores extends Error {
+	constructor(errorMsg) {
+		super("Failed to create encryption and recovery keystores: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToCreateKeyStores.prototype);
+	}
+};
+var InvalidInputKeyStore = class InvalidInputKeyStore extends Error {
+	constructor() {
+		super("Invalid input");
+		Object.setPrototypeOf(this, InvalidInputKeyStore.prototype);
+	}
+};
+var FailedToOpenEncryptionKeyStore = class FailedToOpenEncryptionKeyStore extends Error {
+	constructor(errorMsg) {
+		super("Failed to open encryption keystore: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToOpenEncryptionKeyStore.prototype);
+	}
+};
+var FailedToOpenRecoveryKeyStore = class FailedToOpenRecoveryKeyStore extends Error {
+	constructor(errorMsg) {
+		super("Failed to open recovery keystore: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToOpenRecoveryKeyStore.prototype);
+	}
+};
+var FailedToChangeMnemonicForKeyStore = class FailedToChangeMnemonicForKeyStore extends Error {
+	constructor(errorMsg) {
+		super("Error while fetching message: " + errorMsg);
+		Object.setPrototypeOf(this, FailedToChangeMnemonicForKeyStore.prototype);
+	}
+};
+//#endregion
+//#region src/keystore-crypto/emailEncryptionKey.ts
+/**
+* Generates hybrid keys and creates encrypted main and recovery keystores
+* The main keystore encryption key is derived from the user's mnemonic
+* The recovery keystore encryption key is derived from the recovery codes
+*
+* @param userEmail - The user's email
+* @param mnemonic - The user's mnemonic
+* @returns The encryption keys
+*
+* @returns The encryption and recovery keystores, recovery codes and hybrid keys
+*/
+async function createEncryptionAndRecoveryKeystores(userEmail, mnemonic) {
+	try {
+		const keys = genHybridKeys();
+		const encryptionKeystore = await encryptKeystoreContent(await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic), keys, userEmail, "Encryption");
+		const recoveryCodes = genMnemonic();
+		return {
+			encryptionKeystore,
+			recoveryKeystore: await encryptKeystoreContent(await deriveRecoveryKey(recoveryCodes), keys, userEmail, "Recovery"),
+			recoveryCodes,
+			keys
+		};
+	} catch (error) {
+		throw new FailedToCreateKeyStores(error instanceof Error ? error.message : String(error));
+	}
+}
+/**
+* Opens the encryption keystore and returns the email encryption keys
+* The decryption key is derived from the user mnemonic
+*
+* @param encryptedKeystore - The encrypted keystore containing encryption keys
+* @param mnemonic - The user's mnemonic
+* @returns The encryption keys
+*/
+async function openEncryptionKeystore(encryptedKeystore, mnemonic) {
+	try {
+		if (encryptedKeystore.type !== "Encryption") throw new InvalidInputKeyStore();
+		return await decryptKeystoreContent(await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic), encryptedKeystore);
+	} catch (error) {
+		if (error instanceof InvalidInputKeyStore) throw error;
+		throw new FailedToOpenEncryptionKeyStore(error instanceof Error ? error.message : String(error));
+	}
+}
+/**
+* Opens the recovery keystore and returns the email encryption keys
+* The decryption key is derived from the recovery codes (machine-generated mnemonic)
+*
+* @param recoveryCodes - The user's recovery codes
+* @param encryptedKeystore - The encrypted keystore containing encryption keys
+* @returns The encryption keys
+*/
+async function openRecoveryKeystore(recoveryCodes, encryptedKeystore) {
+	try {
+		if (encryptedKeystore.type !== "Recovery") throw new InvalidInputKeyStore();
+		return await decryptKeystoreContent(await deriveRecoveryKey(recoveryCodes), encryptedKeystore);
+	} catch (error) {
+		if (error instanceof InvalidInputKeyStore) throw error;
+		throw new FailedToOpenRecoveryKeyStore(error instanceof Error ? error.message : String(error));
+	}
+}
+/**
+* Re-encrypts the encryption keystore with a new mnemonic
+* The decryption key is derived from the user mnemonic
+*
+* @param encryptedKeystore - The encrypted keystore containing encryption keys
+* @param oldMnemonic - The user's old mnemonic
+* @param newMnemonic - The user's new mnemonic
+* @returns The keys and new re-encrypted keystore
+*/
+async function changeMnemonicForEncryptionKeystore(encryptedKeystore, oldMnemonic, newMnemonic) {
+	try {
+		const keys = await openEncryptionKeystore(encryptedKeystore, oldMnemonic);
+		return {
+			newKeystore: await encryptKeystoreContent(await deriveEncryptionKeystoreKeyFromMnemonic(newMnemonic), keys, encryptedKeystore.userEmail, "Encryption"),
+			keys
+		};
+	} catch (error) {
+		if (error instanceof InvalidInputKeyStore) throw error;
+		throw new FailedToChangeMnemonicForKeyStore(error instanceof Error ? error.message : String(error));
+	}
+}
+//#endregion
+export { FailedToChangeMnemonicForKeyStore as a, FailedToOpenRecoveryKeyStore as c, openRecoveryKeystore as i, InvalidInputKeyStore as l, createEncryptionAndRecoveryKeystores as n, FailedToCreateKeyStores as o, openEncryptionKeystore as r, FailedToOpenEncryptionKeyStore as s, changeMnemonicForEncryptionKeystore as t };
+
+//# sourceMappingURL=keystore-crypto-C6F-NQdX.mjs.map

package/dist/react-native/keystore-crypto-C6F-NQdX.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore-crypto-C6F-NQdX.mjs","names":[],"sources":["../../src/keystore-crypto/core.ts","../../src/keystore-crypto/errors.ts","../../src/keystore-crypto/emailEncryptionKey.ts"],"sourcesContent":["import { encryptSymmetrically, decryptSymmetrically } from '../symmetric-crypto';\nimport { base64ToUint8Array, uint8ArrayToBase64, UTF8ToUint8 } from '../utils';\nimport { deriveKeyFromMnemonic } from '../derive-key';\nimport { CONTEXT_ENC_KEYSTORE, CONTEXT_RECOVERY } from '../constants';\nimport { EncryptedKeystore, HybridKeyPair, KeystoreType } from '../types';\n\n/**\n * Encrypts the user's hybrid key using symmetric encryption to get a keystore\n *\n * @param secretKey - The symmetric key to encrypt the keystore content\n * @param key - The hybrid key pair\n * @param userEmail - The email of the user\n * @param type - The keystore type\n * @returns The encrypted keystore\n */\nexport async function encryptKeystoreContent(\n  secretKey: Uint8Array,\n  keys: HybridKeyPair,\n  userEmail: string,\n  type: KeystoreType,\n): Promise<EncryptedKeystore> {\n  try {\n    const publicKey = uint8ArrayToBase64(keys.publicKey);\n\n    const aux = UTF8ToUint8(userEmail + type + publicKey);\n    const secretKeyEncrypted = await encryptSymmetrically(secretKey, keys.secretKey, aux);\n\n    const keystore: EncryptedKeystore = {\n      userEmail,\n      type,\n      publicKey,\n      privateKeyEncrypted: uint8ArrayToBase64(secretKeyEncrypted),\n    };\n    return keystore;\n  } catch (error) {\n    throw new Error('Failed to encrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Decrypts the keystore content using symmetric encryption\n *\n * @param kesytoreOpeningKey - The symmetric key to decrypt the keystore content\n * @param encryptedKeys - The encrypted keystore content\n * @returns The decrypted hybrid key pair contained in the keystore\n */\nexport async function decryptKeystoreContent(\n  kesytoreOpeningKey: Uint8Array,\n  encryptedKeystore: EncryptedKeystore,\n): Promise<HybridKeyPair> {\n  try {\n    const aux = UTF8ToUint8(encryptedKeystore.userEmail + encryptedKeystore.type + encryptedKeystore.publicKey);\n    const publicKey = base64ToUint8Array(encryptedKeystore.publicKey);\n    const ciphertext = base64ToUint8Array(encryptedKeystore.privateKeyEncrypted);\n    const secretKey = await decryptSymmetrically(kesytoreOpeningKey, ciphertext, aux);\n    return {\n      publicKey,\n      secretKey,\n    };\n  } catch (error) {\n    throw new Error('Failed to decrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Derives a secret key for protecting the recovery keystore\n *\n * @param recoveryCodes - The recovery codes (machine-generated with secure PRNG)\n * @returns The derived secret key for protecting the recovery keystore\n */\nexport async function deriveRecoveryKey(recoveryCodes: string): Promise<Uint8Array> {\n  return deriveKeyFromMnemonic(recoveryCodes, CONTEXT_RECOVERY);\n}\n\n/**\n * Derives a secret key for protecting the encryption keystore from user's mnemonic\n *\n * @param mnemonic - The user's mnemonic (machine-generated with secure PRNG)\n * @returns The derived secret key for protecting the encryption keystore\n */\nexport async function deriveEncryptionKeystoreKeyFromMnemonic(mnemonic: string): Promise<Uint8Array> {\n  return deriveKeyFromMnemonic(mnemonic, CONTEXT_ENC_KEYSTORE);\n}\n","export class FailedToCreateKeyStores extends Error {\n  constructor(errorMsg?: string) {\n    super('Failed to create encryption and recovery keystores: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToCreateKeyStores.prototype);\n  }\n}\n\nexport class InvalidInputKeyStore extends Error {\n  constructor() {\n    super('Invalid input');\n\n    Object.setPrototypeOf(this, InvalidInputKeyStore.prototype);\n  }\n}\n\nexport class FailedToOpenEncryptionKeyStore extends Error {\n  constructor(errorMsg?: string) {\n    super('Failed to open encryption keystore: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToOpenEncryptionKeyStore.prototype);\n  }\n}\n\nexport class FailedToOpenRecoveryKeyStore extends Error {\n  constructor(errorMsg?: string) {\n    super('Failed to open recovery keystore: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToOpenRecoveryKeyStore.prototype);\n  }\n}\n\nexport class FailedToChangeMnemonicForKeyStore extends Error {\n  constructor(errorMsg?: string) {\n    super('Error while fetching message: ' + errorMsg);\n\n    Object.setPrototypeOf(this, FailedToChangeMnemonicForKeyStore.prototype);\n  }\n}\n","import { EncryptedKeystore, KeystoreType, HybridKeyPair } from '../types';\nimport { genMnemonic } from '../utils';\nimport {\n  encryptKeystoreContent,\n  decryptKeystoreContent,\n  deriveEncryptionKeystoreKeyFromMnemonic,\n  deriveRecoveryKey,\n} from './core';\nimport { genHybridKeys } from '../hybrid-crypto';\nimport {\n  FailedToOpenEncryptionKeyStore,\n  FailedToCreateKeyStores,\n  FailedToOpenRecoveryKeyStore,\n  FailedToChangeMnemonicForKeyStore,\n  InvalidInputKeyStore,\n} from './errors';\n\n/**\n * Generates hybrid keys and creates encrypted main and recovery keystores\n * The main keystore encryption key is derived from the user's mnemonic\n * The recovery keystore encryption key is derived from the recovery codes\n *\n * @param userEmail - The user's email\n * @param mnemonic - The user's mnemonic\n * @returns The encryption keys\n *\n * @returns The encryption and recovery keystores, recovery codes and hybrid keys\n */\nexport async function createEncryptionAndRecoveryKeystores(\n  userEmail: string,\n  mnemonic: string,\n): Promise<{\n  encryptionKeystore: EncryptedKeystore;\n  recoveryKeystore: EncryptedKeystore;\n  recoveryCodes: string;\n  keys: HybridKeyPair;\n}> {\n  try {\n    const keys = genHybridKeys();\n\n    const secretKey = await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic);\n    const encryptionKeystore = await encryptKeystoreContent(secretKey, keys, userEmail, KeystoreType.ENCRYPTION);\n\n    const recoveryCodes = genMnemonic();\n    const recoveryKey = await deriveRecoveryKey(recoveryCodes);\n    const recoveryKeystore = await encryptKeystoreContent(recoveryKey, keys, userEmail, KeystoreType.RECOVERY);\n\n    return { encryptionKeystore, recoveryKeystore, recoveryCodes, keys };\n  } catch (error) {\n    throw new FailedToCreateKeyStores(error instanceof Error ? error.message : String(error));\n  }\n}\n\n/**\n * Opens the encryption keystore and returns the email encryption keys\n * The decryption key is derived from the user mnemonic\n *\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @param mnemonic - The user's mnemonic\n * @returns The encryption keys\n */\nexport async function openEncryptionKeystore(\n  encryptedKeystore: EncryptedKeystore,\n  mnemonic: string,\n): Promise<HybridKeyPair> {\n  try {\n    if (encryptedKeystore.type !== KeystoreType.ENCRYPTION) {\n      throw new InvalidInputKeyStore();\n    }\n    const secretKey = await deriveEncryptionKeystoreKeyFromMnemonic(mnemonic);\n    const keys = await decryptKeystoreContent(secretKey, encryptedKeystore);\n    return keys;\n  } catch (error) {\n    if (error instanceof InvalidInputKeyStore) throw error;\n    throw new FailedToOpenEncryptionKeyStore(error instanceof Error ? error.message : String(error));\n  }\n}\n\n/**\n * Opens the recovery keystore and returns the email encryption keys\n * The decryption key is derived from the recovery codes (machine-generated mnemonic)\n *\n * @param recoveryCodes - The user's recovery codes\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @returns The encryption keys\n */\nexport async function openRecoveryKeystore(\n  recoveryCodes: string,\n  encryptedKeystore: EncryptedKeystore,\n): Promise<HybridKeyPair> {\n  try {\n    if (encryptedKeystore.type !== KeystoreType.RECOVERY) {\n      throw new InvalidInputKeyStore();\n    }\n    const recoveryKey = await deriveRecoveryKey(recoveryCodes);\n    const keys = await decryptKeystoreContent(recoveryKey, encryptedKeystore);\n    return keys;\n  } catch (error) {\n    if (error instanceof InvalidInputKeyStore) throw error;\n    throw new FailedToOpenRecoveryKeyStore(error instanceof Error ? error.message : String(error));\n  }\n}\n\n/**\n * Re-encrypts the encryption keystore with a new mnemonic\n * The decryption key is derived from the user mnemonic\n *\n * @param encryptedKeystore - The encrypted keystore containing encryption keys\n * @param oldMnemonic - The user's old mnemonic\n * @param newMnemonic - The user's new mnemonic\n * @returns The keys and new re-encrypted keystore\n */\nexport async function changeMnemonicForEncryptionKeystore(\n  encryptedKeystore: EncryptedKeystore,\n  oldMnemonic: string,\n  newMnemonic: string,\n): Promise<{ keys: HybridKeyPair; newKeystore: EncryptedKeystore }> {\n  try {\n    const keys = await openEncryptionKeystore(encryptedKeystore, oldMnemonic);\n\n    const secretKey = await deriveEncryptionKeystoreKeyFromMnemonic(newMnemonic);\n    const newKeystore = await encryptKeystoreContent(\n      secretKey,\n      keys,\n      encryptedKeystore.userEmail,\n      KeystoreType.ENCRYPTION,\n    );\n\n    return { newKeystore, keys };\n  } catch (error) {\n    if (error instanceof InvalidInputKeyStore) throw error;\n    throw new FailedToChangeMnemonicForKeyStore(error instanceof Error ? error.message : String(error));\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,eAAsB,uBACpB,WACA,MACA,WACA,MAC4B;AAC5B,KAAI;EACF,MAAM,YAAY,mBAAmB,KAAK,UAAU;EAEpD,MAAM,MAAM,YAAY,YAAY,OAAO,UAAU;AASrD,SAAO;GALL;GACA;GACA;GACA,qBAAqB,mBAAmB,MANT,qBAAqB,WAAW,KAAK,WAAW,IAAI,CAMxB;GAE9C;UACR,OAAO;AACd,QAAM,IAAI,MAAM,sCAAsC,EAAE,OAAO,OAAO,CAAC;;;;;;;;;;AAW3E,eAAsB,uBACpB,oBACA,mBACwB;AACxB,KAAI;EACF,MAAM,MAAM,YAAY,kBAAkB,YAAY,kBAAkB,OAAO,kBAAkB,UAAU;AAI3G,SAAO;GACL,WAJgB,mBAAmB,kBAAkB,UAI5C;GACT,WAAA,MAHsB,qBAAqB,oBAD1B,mBAAmB,kBAAkB,oBACmB,EAAE,IAAI;GAIhF;UACM,OAAO;AACd,QAAM,IAAI,MAAM,sCAAsC,EAAE,OAAO,OAAO,CAAC;;;;;;;;;AAU3E,eAAsB,kBAAkB,eAA4C;AAClF,QAAO,sBAAsB,eAAe,iBAAiB;;;;;;;;AAS/D,eAAsB,wCAAwC,UAAuC;AACnG,QAAO,sBAAsB,UAAU,qBAAqB;;;;ACjF9D,IAAa,0BAAb,MAAa,gCAAgC,MAAM;CACjD,YAAY,UAAmB;AAC7B,QAAM,yDAAyD,SAAS;AAExE,SAAO,eAAe,MAAM,wBAAwB,UAAU;;;AAIlE,IAAa,uBAAb,MAAa,6BAA6B,MAAM;CAC9C,cAAc;AACZ,QAAM,gBAAgB;AAEtB,SAAO,eAAe,MAAM,qBAAqB,UAAU;;;AAI/D,IAAa,iCAAb,MAAa,uCAAuC,MAAM;CACxD,YAAY,UAAmB;AAC7B,QAAM,yCAAyC,SAAS;AAExD,SAAO,eAAe,MAAM,+BAA+B,UAAU;;;AAIzE,IAAa,+BAAb,MAAa,qCAAqC,MAAM;CACtD,YAAY,UAAmB;AAC7B,QAAM,uCAAuC,SAAS;AAEtD,SAAO,eAAe,MAAM,6BAA6B,UAAU;;;AAIvE,IAAa,oCAAb,MAAa,0CAA0C,MAAM;CAC3D,YAAY,UAAmB;AAC7B,QAAM,mCAAmC,SAAS;AAElD,SAAO,eAAe,MAAM,kCAAkC,UAAU;;;;;;;;;;;;;;;;ACR5E,eAAsB,qCACpB,WACA,UAMC;AACD,KAAI;EACF,MAAM,OAAO,eAAe;EAG5B,MAAM,qBAAqB,MAAM,uBAAuB,MADhC,wCAAwC,SAAS,EACN,MAAM,WAAA,aAAmC;EAE5G,MAAM,gBAAgB,aAAa;AAInC,SAAO;GAAE;GAAoB,kBAAA,MAFE,uBAAuB,MAD5B,kBAAkB,cAAc,EACS,MAAM,WAAA,WAAiC;GAE3D;GAAe;GAAM;UAC7D,OAAO;AACd,QAAM,IAAI,wBAAwB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;;;;;;;;;AAY7F,eAAsB,uBACpB,mBACA,UACwB;AACxB,KAAI;AACF,MAAI,kBAAkB,SAAA,aACpB,OAAM,IAAI,sBAAsB;AAIlC,SAAO,MADY,uBAAuB,MADlB,wCAAwC,SAAS,EACpB,kBAAkB;UAEhE,OAAO;AACd,MAAI,iBAAiB,qBAAsB,OAAM;AACjD,QAAM,IAAI,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;;;;;;;;;AAYpG,eAAsB,qBACpB,eACA,mBACwB;AACxB,KAAI;AACF,MAAI,kBAAkB,SAAA,WACpB,OAAM,IAAI,sBAAsB;AAIlC,SAAO,MADY,uBAAuB,MADhB,kBAAkB,cAAc,EACH,kBAAkB;UAElE,OAAO;AACd,MAAI,iBAAiB,qBAAsB,OAAM;AACjD,QAAM,IAAI,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;;;;;;;;;;AAalG,eAAsB,oCACpB,mBACA,aACA,aACkE;AAClE,KAAI;EACF,MAAM,OAAO,MAAM,uBAAuB,mBAAmB,YAAY;AAUzE,SAAO;GAAE,aAAA,MAPiB,uBACxB,MAFsB,wCAAwC,YAAY,EAG1E,MACA,kBAAkB,WAAA,aAEnB;GAEqB;GAAM;UACrB,OAAO;AACd,MAAI,iBAAiB,qBAAsB,OAAM;AACjD,QAAM,IAAI,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC"}

package/dist/react-native/keystore-crypto.d.mts

@@ -0,0 +1,71 @@
+import { a as EncryptedKeystore, s as HybridKeyPair } from "./types-D1R4_m5r.mjs";
+
+//#region src/keystore-crypto/emailEncryptionKey.d.ts
+/**
+ * Generates hybrid keys and creates encrypted main and recovery keystores
+ * The main keystore encryption key is derived from the user's mnemonic
+ * The recovery keystore encryption key is derived from the recovery codes
+ *
+ * @param userEmail - The user's email
+ * @param mnemonic - The user's mnemonic
+ * @returns The encryption keys
+ *
+ * @returns The encryption and recovery keystores, recovery codes and hybrid keys
+ */
+declare function createEncryptionAndRecoveryKeystores(userEmail: string, mnemonic: string): Promise<{
+  encryptionKeystore: EncryptedKeystore;
+  recoveryKeystore: EncryptedKeystore;
+  recoveryCodes: string;
+  keys: HybridKeyPair;
+}>;
+/**
+ * Opens the encryption keystore and returns the email encryption keys
+ * The decryption key is derived from the user mnemonic
+ *
+ * @param encryptedKeystore - The encrypted keystore containing encryption keys
+ * @param mnemonic - The user's mnemonic
+ * @returns The encryption keys
+ */
+declare function openEncryptionKeystore(encryptedKeystore: EncryptedKeystore, mnemonic: string): Promise<HybridKeyPair>;
+/**
+ * Opens the recovery keystore and returns the email encryption keys
+ * The decryption key is derived from the recovery codes (machine-generated mnemonic)
+ *
+ * @param recoveryCodes - The user's recovery codes
+ * @param encryptedKeystore - The encrypted keystore containing encryption keys
+ * @returns The encryption keys
+ */
+declare function openRecoveryKeystore(recoveryCodes: string, encryptedKeystore: EncryptedKeystore): Promise<HybridKeyPair>;
+/**
+ * Re-encrypts the encryption keystore with a new mnemonic
+ * The decryption key is derived from the user mnemonic
+ *
+ * @param encryptedKeystore - The encrypted keystore containing encryption keys
+ * @param oldMnemonic - The user's old mnemonic
+ * @param newMnemonic - The user's new mnemonic
+ * @returns The keys and new re-encrypted keystore
+ */
+declare function changeMnemonicForEncryptionKeystore(encryptedKeystore: EncryptedKeystore, oldMnemonic: string, newMnemonic: string): Promise<{
+  keys: HybridKeyPair;
+  newKeystore: EncryptedKeystore;
+}>;
+//#endregion
+//#region src/keystore-crypto/errors.d.ts
+declare class FailedToCreateKeyStores extends Error {
+  constructor(errorMsg?: string);
+}
+declare class InvalidInputKeyStore extends Error {
+  constructor();
+}
+declare class FailedToOpenEncryptionKeyStore extends Error {
+  constructor(errorMsg?: string);
+}
+declare class FailedToOpenRecoveryKeyStore extends Error {
+  constructor(errorMsg?: string);
+}
+declare class FailedToChangeMnemonicForKeyStore extends Error {
+  constructor(errorMsg?: string);
+}
+//#endregion
+export { FailedToChangeMnemonicForKeyStore, FailedToCreateKeyStores, FailedToOpenEncryptionKeyStore, FailedToOpenRecoveryKeyStore, InvalidInputKeyStore, changeMnemonicForEncryptionKeystore, createEncryptionAndRecoveryKeystores, openEncryptionKeystore, openRecoveryKeystore };
+//# sourceMappingURL=keystore-crypto.d.mts.map

package/dist/react-native/keystore-crypto.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore-crypto.d.mts","names":[],"sources":["../../src/keystore-crypto/emailEncryptionKey.ts","../../src/keystore-crypto/errors.ts"],"mappings":";;;;;AA4BA;;;;;;;;;iBAAsB,oCAAA,CACpB,SAAA,UACA,QAAA,WACC,OAAA;EACD,kBAAA,EAAoB,iBAAA;EACpB,gBAAA,EAAkB,iBAAA;EAClB,aAAA;EACA,IAAA,EAAM,aAAA;AAAA;;;;;;;AA0BR;;iBAAsB,sBAAA,CACpB,iBAAA,EAAmB,iBAAA,EACnB,QAAA,WACC,OAAA,CAAQ,aAAA;;;;;;;;;iBAsBW,oBAAA,CACpB,aAAA,UACA,iBAAA,EAAmB,iBAAA,GAClB,OAAA,CAAQ,aAAA;;;;AAHX;;;;;;iBA0BsB,mCAAA,CACpB,iBAAA,EAAmB,iBAAA,EACnB,WAAA,UACA,WAAA,WACC,OAAA;EAAU,IAAA,EAAM,aAAA;EAAe,WAAA,EAAa,iBAAA;AAAA;;;cCpHlC,uBAAA,SAAgC,KAAA;cAC/B,QAAA;AAAA;AAAA,cAOD,oBAAA,SAA6B,KAAA;EAAA,WAAA,CAAA;AAAA;AAAA,cAQ7B,8BAAA,SAAuC,KAAA;cACtC,QAAA;AAAA;AAAA,cAOD,4BAAA,SAAqC,KAAA;cACpC,QAAA;AAAA;AAAA,cAOD,iCAAA,SAA0C,KAAA;cACzC,QAAA;AAAA"}

package/dist/react-native/keystore-crypto.d.ts

@@ -0,0 +1,71 @@
+import { a as EncryptedKeystore, s as HybridKeyPair } from "./types-Y0wL7HUH.js";
+
+//#region src/keystore-crypto/emailEncryptionKey.d.ts
+/**
+ * Generates hybrid keys and creates encrypted main and recovery keystores
+ * The main keystore encryption key is derived from the user's mnemonic
+ * The recovery keystore encryption key is derived from the recovery codes
+ *
+ * @param userEmail - The user's email
+ * @param mnemonic - The user's mnemonic
+ * @returns The encryption keys
+ *
+ * @returns The encryption and recovery keystores, recovery codes and hybrid keys
+ */
+declare function createEncryptionAndRecoveryKeystores(userEmail: string, mnemonic: string): Promise<{
+  encryptionKeystore: EncryptedKeystore;
+  recoveryKeystore: EncryptedKeystore;
+  recoveryCodes: string;
+  keys: HybridKeyPair;
+}>;
+/**
+ * Opens the encryption keystore and returns the email encryption keys
+ * The decryption key is derived from the user mnemonic
+ *
+ * @param encryptedKeystore - The encrypted keystore containing encryption keys
+ * @param mnemonic - The user's mnemonic
+ * @returns The encryption keys
+ */
+declare function openEncryptionKeystore(encryptedKeystore: EncryptedKeystore, mnemonic: string): Promise<HybridKeyPair>;
+/**
+ * Opens the recovery keystore and returns the email encryption keys
+ * The decryption key is derived from the recovery codes (machine-generated mnemonic)
+ *
+ * @param recoveryCodes - The user's recovery codes
+ * @param encryptedKeystore - The encrypted keystore containing encryption keys
+ * @returns The encryption keys
+ */
+declare function openRecoveryKeystore(recoveryCodes: string, encryptedKeystore: EncryptedKeystore): Promise<HybridKeyPair>;
+/**
+ * Re-encrypts the encryption keystore with a new mnemonic
+ * The decryption key is derived from the user mnemonic
+ *
+ * @param encryptedKeystore - The encrypted keystore containing encryption keys
+ * @param oldMnemonic - The user's old mnemonic
+ * @param newMnemonic - The user's new mnemonic
+ * @returns The keys and new re-encrypted keystore
+ */
+declare function changeMnemonicForEncryptionKeystore(encryptedKeystore: EncryptedKeystore, oldMnemonic: string, newMnemonic: string): Promise<{
+  keys: HybridKeyPair;
+  newKeystore: EncryptedKeystore;
+}>;
+//#endregion
+//#region src/keystore-crypto/errors.d.ts
+declare class FailedToCreateKeyStores extends Error {
+  constructor(errorMsg?: string);
+}
+declare class InvalidInputKeyStore extends Error {
+  constructor();
+}
+declare class FailedToOpenEncryptionKeyStore extends Error {
+  constructor(errorMsg?: string);
+}
+declare class FailedToOpenRecoveryKeyStore extends Error {
+  constructor(errorMsg?: string);
+}
+declare class FailedToChangeMnemonicForKeyStore extends Error {
+  constructor(errorMsg?: string);
+}
+//#endregion
+export { FailedToChangeMnemonicForKeyStore, FailedToCreateKeyStores, FailedToOpenEncryptionKeyStore, FailedToOpenRecoveryKeyStore, InvalidInputKeyStore, changeMnemonicForEncryptionKeystore, createEncryptionAndRecoveryKeystores, openEncryptionKeystore, openRecoveryKeystore };
+//# sourceMappingURL=keystore-crypto.d.ts.map

package/dist/react-native/keystore-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore-crypto.d.ts","names":[],"sources":["../../src/keystore-crypto/emailEncryptionKey.ts","../../src/keystore-crypto/errors.ts"],"mappings":";;;;;AA4BA;;;;;;;;;iBAAsB,oCAAA,CACpB,SAAA,UACA,QAAA,WACC,OAAA;EACD,kBAAA,EAAoB,iBAAA;EACpB,gBAAA,EAAkB,iBAAA;EAClB,aAAA;EACA,IAAA,EAAM,aAAA;AAAA;;;;;;;AA0BR;;iBAAsB,sBAAA,CACpB,iBAAA,EAAmB,iBAAA,EACnB,QAAA,WACC,OAAA,CAAQ,aAAA;;;;;;;;;iBAsBW,oBAAA,CACpB,aAAA,UACA,iBAAA,EAAmB,iBAAA,GAClB,OAAA,CAAQ,aAAA;;;;AAHX;;;;;;iBA0BsB,mCAAA,CACpB,iBAAA,EAAmB,iBAAA,EACnB,WAAA,UACA,WAAA,WACC,OAAA;EAAU,IAAA,EAAM,aAAA;EAAe,WAAA,EAAa,iBAAA;AAAA;;;cCpHlC,uBAAA,SAAgC,KAAA;cAC/B,QAAA;AAAA;AAAA,cAOD,oBAAA,SAA6B,KAAA;EAAA,WAAA,CAAA;AAAA;AAAA,cAQ7B,8BAAA,SAAuC,KAAA;cACtC,QAAA;AAAA;AAAA,cAOD,4BAAA,SAAqC,KAAA;cACpC,QAAA;AAAA;AAAA,cAOD,iCAAA,SAA0C,KAAA;cACzC,QAAA;AAAA"}

package/dist/react-native/keystore-crypto.js

@@ -0,0 +1,11 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_keystore_crypto = require("./keystore-crypto-BXPEVvzq.js");
+exports.FailedToChangeMnemonicForKeyStore = require_keystore_crypto.FailedToChangeMnemonicForKeyStore;
+exports.FailedToCreateKeyStores = require_keystore_crypto.FailedToCreateKeyStores;
+exports.FailedToOpenEncryptionKeyStore = require_keystore_crypto.FailedToOpenEncryptionKeyStore;
+exports.FailedToOpenRecoveryKeyStore = require_keystore_crypto.FailedToOpenRecoveryKeyStore;
+exports.InvalidInputKeyStore = require_keystore_crypto.InvalidInputKeyStore;
+exports.changeMnemonicForEncryptionKeystore = require_keystore_crypto.changeMnemonicForEncryptionKeystore;
+exports.createEncryptionAndRecoveryKeystores = require_keystore_crypto.createEncryptionAndRecoveryKeystores;
+exports.openEncryptionKeystore = require_keystore_crypto.openEncryptionKeystore;
+exports.openRecoveryKeystore = require_keystore_crypto.openRecoveryKeystore;

package/dist/react-native/keystore-crypto.mjs

@@ -0,0 +1,2 @@
+import { a as FailedToChangeMnemonicForKeyStore, c as FailedToOpenRecoveryKeyStore, i as openRecoveryKeystore, l as InvalidInputKeyStore, n as createEncryptionAndRecoveryKeystores, o as FailedToCreateKeyStores, r as openEncryptionKeystore, s as FailedToOpenEncryptionKeyStore, t as changeMnemonicForEncryptionKeystore } from "./keystore-crypto-C6F-NQdX.mjs";
+export { FailedToChangeMnemonicForKeyStore, FailedToCreateKeyStores, FailedToOpenEncryptionKeyStore, FailedToOpenRecoveryKeyStore, InvalidInputKeyStore, changeMnemonicForEncryptionKeystore, createEncryptionAndRecoveryKeystores, openEncryptionKeystore, openRecoveryKeystore };