joopjs 2.0.0

package/dist/encryption/index.d.mts

@@ -0,0 +1,75 @@
+export { b as JoopAesService, J as JoopGcmService, a as JoopRsaService } from '../aes.service-CkoupAww.mjs';
+export { J as JoopCryptoUtils, a as JoopPasswordHash } from '../crypto-utils-DriNhLdx.mjs';
+
+/**
+ * X25519 + ChaCha20-Poly1305 end-to-end encryption.
+ *
+ * Protocol:
+ *  1. `init()`       — generates a local X25519 key pair; returns X.509 public key (base64)
+ *  2. `keyExchange()`— DH with server public key + HKDF-SHA512 key derivation
+ *  3. `encrypt()`    — ChaCha20-Poly1305 encrypt
+ *  4. `decrypt()`    — ChaCha20-Poly1305 decrypt
+ */
+declare class JoopX25519Service {
+    private static readonly INFO_ENC_KEY;
+    private static readonly INFO_ENC_IV;
+    private static readonly INFO_MAC_KEY;
+    private _privateKey;
+    private _publicKey;
+    private _encKey;
+    private _nonce;
+    private _macKey;
+    private _ready;
+    /** Generate key pair; returns base64-encoded X.509 public key to send to the server. */
+    init(): Promise<string>;
+    /** Perform DH key exchange and derive ChaCha20-Poly1305 keys. */
+    keyExchange(serverPublicKeyBase64: string, serverRandomBase64: string): Promise<void>;
+    encrypt(plainText: string): Promise<string>;
+    decrypt(cipherBase64: string): Promise<string>;
+    reset(): void;
+    private _assertReady;
+    private _assertKeysReady;
+    private _reset;
+    private _encodeX509;
+    private _decodeX509;
+    private _base64UrlDecode;
+    private _hkdfExtract;
+    private _hkdfExpand;
+}
+
+interface JoopRsaKeyPair {
+    publicKey: CryptoKey;
+    privateKey: CryptoKey;
+}
+interface JoopE2EPayload {
+    wrappedKey: string;
+    iv: string;
+    ciphertext: string;
+    algorithm: 'RSA-OAEP+AES-GCM';
+}
+declare class JoopE2EService {
+    generateKeyPair(bits?: 2048 | 4096): Promise<JoopRsaKeyPair>;
+    generateSigningKeyPair(bits?: 2048 | 4096): Promise<JoopRsaKeyPair>;
+    exportPublicKeyPem(key: CryptoKey): Promise<string>;
+    exportPrivateKeyPem(key: CryptoKey): Promise<string>;
+    importPublicKeyPem(pem: string, usage?: 'encrypt' | 'verify'): Promise<CryptoKey>;
+    importPrivateKeyPem(pem: string, usage?: 'decrypt' | 'sign'): Promise<CryptoKey>;
+    exportPublicKeyJwk(key: CryptoKey): Promise<JsonWebKey>;
+    importPublicKeyJwk(jwk: JsonWebKey, usage?: 'encrypt' | 'verify'): Promise<CryptoKey>;
+    exportPrivateKeyJwk(key: CryptoKey): Promise<JsonWebKey>;
+    encryptForRecipient(plaintext: string, publicKey: CryptoKey | string): Promise<JoopE2EPayload>;
+    decryptFromSender(payload: JoopE2EPayload, privateKey: CryptoKey | string): Promise<string>;
+    sign(data: string, privateKey: CryptoKey | string): Promise<string>;
+    verify(data: string, signature: string, publicKey: CryptoKey | string): Promise<boolean>;
+    generateSessionKey(): Promise<{
+        key: CryptoKey;
+        exported: string;
+    }>;
+    wrapSessionKey(sessionKey: CryptoKey, recipientPublicKey: CryptoKey): Promise<string>;
+    unwrapSessionKey(wrappedKey: string, privateKey: CryptoKey): Promise<CryptoKey>;
+    encryptRaw(data: string, publicKey: CryptoKey | string): Promise<string>;
+    decryptRaw(ciphertext: string, privateKey: CryptoKey | string): Promise<string>;
+    fingerprint(publicKey: CryptoKey): Promise<string>;
+}
+
+export { type JoopE2EPayload, JoopE2EService, type JoopRsaKeyPair, JoopX25519Service };

package/dist/encryption/index.d.ts

@@ -0,0 +1,75 @@
+export { b as JoopAesService, J as JoopGcmService, a as JoopRsaService } from '../aes.service-CkoupAww.js';
+export { J as JoopCryptoUtils, a as JoopPasswordHash } from '../crypto-utils-DriNhLdx.js';
+
+/**
+ * X25519 + ChaCha20-Poly1305 end-to-end encryption.
+ *
+ * Protocol:
+ *  1. `init()`       — generates a local X25519 key pair; returns X.509 public key (base64)
+ *  2. `keyExchange()`— DH with server public key + HKDF-SHA512 key derivation
+ *  3. `encrypt()`    — ChaCha20-Poly1305 encrypt
+ *  4. `decrypt()`    — ChaCha20-Poly1305 decrypt
+ */
+declare class JoopX25519Service {
+    private static readonly INFO_ENC_KEY;
+    private static readonly INFO_ENC_IV;
+    private static readonly INFO_MAC_KEY;
+    private _privateKey;
+    private _publicKey;
+    private _encKey;
+    private _nonce;
+    private _macKey;
+    private _ready;
+    /** Generate key pair; returns base64-encoded X.509 public key to send to the server. */
+    init(): Promise<string>;
+    /** Perform DH key exchange and derive ChaCha20-Poly1305 keys. */
+    keyExchange(serverPublicKeyBase64: string, serverRandomBase64: string): Promise<void>;
+    encrypt(plainText: string): Promise<string>;
+    decrypt(cipherBase64: string): Promise<string>;
+    reset(): void;
+    private _assertReady;
+    private _assertKeysReady;
+    private _reset;
+    private _encodeX509;
+    private _decodeX509;
+    private _base64UrlDecode;
+    private _hkdfExtract;
+    private _hkdfExpand;
+}
+
+interface JoopRsaKeyPair {
+    publicKey: CryptoKey;
+    privateKey: CryptoKey;
+}
+interface JoopE2EPayload {
+    wrappedKey: string;
+    iv: string;
+    ciphertext: string;
+    algorithm: 'RSA-OAEP+AES-GCM';
+}
+declare class JoopE2EService {
+    generateKeyPair(bits?: 2048 | 4096): Promise<JoopRsaKeyPair>;
+    generateSigningKeyPair(bits?: 2048 | 4096): Promise<JoopRsaKeyPair>;
+    exportPublicKeyPem(key: CryptoKey): Promise<string>;
+    exportPrivateKeyPem(key: CryptoKey): Promise<string>;
+    importPublicKeyPem(pem: string, usage?: 'encrypt' | 'verify'): Promise<CryptoKey>;
+    importPrivateKeyPem(pem: string, usage?: 'decrypt' | 'sign'): Promise<CryptoKey>;
+    exportPublicKeyJwk(key: CryptoKey): Promise<JsonWebKey>;
+    importPublicKeyJwk(jwk: JsonWebKey, usage?: 'encrypt' | 'verify'): Promise<CryptoKey>;
+    exportPrivateKeyJwk(key: CryptoKey): Promise<JsonWebKey>;
+    encryptForRecipient(plaintext: string, publicKey: CryptoKey | string): Promise<JoopE2EPayload>;
+    decryptFromSender(payload: JoopE2EPayload, privateKey: CryptoKey | string): Promise<string>;
+    sign(data: string, privateKey: CryptoKey | string): Promise<string>;
+    verify(data: string, signature: string, publicKey: CryptoKey | string): Promise<boolean>;
+    generateSessionKey(): Promise<{
+        key: CryptoKey;
+        exported: string;
+    }>;
+    wrapSessionKey(sessionKey: CryptoKey, recipientPublicKey: CryptoKey): Promise<string>;
+    unwrapSessionKey(wrappedKey: string, privateKey: CryptoKey): Promise<CryptoKey>;
+    encryptRaw(data: string, publicKey: CryptoKey | string): Promise<string>;
+    decryptRaw(ciphertext: string, privateKey: CryptoKey | string): Promise<string>;
+    fingerprint(publicKey: CryptoKey): Promise<string>;
+}
+
+export { type JoopE2EPayload, JoopE2EService, type JoopRsaKeyPair, JoopX25519Service };