lemon-tls 0.2.1 → 0.2.2

package/index.js

@@ -20,6 +20,14 @@ import {
   DEFAULT_MAX_VERSION,
 } from './src/compat.js';
 
+// DTLS
+import DTLSSession from './src/dtls_session.js';
+import {
+  DTLSSocket,
+  createDTLSServer,
+  connectDTLS,
+} from './src/dtls_socket.js';
+
 /**
  * Crypto primitives for QUIC and custom transport consumers.
  */
@@ -45,15 +53,16 @@ export {
   crypto,
   wire,
   record,
+
+  // DTLS
+  DTLSSession,
+  DTLSSocket,
+  createDTLSServer,
+  connectDTLS,
 };
 
 /**
- * Default export — Node.js tls API compatible.
- *
- * Usage:
- *   import tls from 'lemon-tls';
- *   tls.connect(443, 'example.com', { ... });
- *   tls.createServer({ key, cert }, (socket) => { ... });
+ * Default export — Node.js tls API compatible + DTLS.
  */
 export default {
   TLSSocket,
@@ -67,4 +76,10 @@ export default {
   crypto,
   wire,
   record,
+
+  // DTLS
+  DTLSSession,
+  DTLSSocket,
+  createDTLSServer,
+  connectDTLS,
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "lemon-tls",
-  "version": "0.2.1",
-  "description": "Zero-dependency TLS 1.3/1.2 implementation for Node.js — full control over cryptographic keys, record layer, and handshake. Drop-in replacement for node:tls with advanced options impossible in OpenSSL.",
+  "version": "0.2.2",
+  "description": "Zero-dependency TLS 1.3/1.2 implementation for Node.js - full control over cryptographic keys, record layer, and handshake. Drop-in replacement for node:tls with advanced options impossible in OpenSSL.",
   "main": "index.js",
   "type": "module",
   "types": "index.d.ts",
@@ -17,12 +17,6 @@
     "./record": "./src/record.js",
     "./session": "./src/tls_session.js"
   },
-  "scripts": {
-    "test": "node tests/test_all.js",
-    "test:https": "node tests/test_https.js",
-    "test:compat": "node tests/test_compat.js",
-    "test:all": "node tests/test_all.js && node tests/test_compat.js"
-  },
   "files": [
     "index.js",
     "index.cjs",
@@ -115,6 +109,5 @@
       "type": "buymeacoffee",
       "url": "https://buymeacoffee.com/colocohen"
     }
-  ],
-  "dependencies": {}
+  ]
 }

package/src/crypto.js

@@ -553,6 +553,16 @@ function get_handshake_finished(hashName, traffic_secret, transcript) {
 }
 
 
+// ============================================================
+//  DTLS 1.3: record number encryption key (RFC 9147 §5.9)
+// ============================================================
+
+function derive_sn_key(hashName, traffic_secret, cipher_suite) {
+  let keylen = TLS_CIPHER_SUITES[cipher_suite].keylen;
+  return hkdf_expand_label(hashName, traffic_secret, 'sn', new Uint8Array(0), keylen);
+}
+
+
 // ============================================================
 //  Exports — identical API surface
 // ============================================================
@@ -576,5 +586,6 @@ export {
   compute_psk_binder,
   derive_handshake_traffic_secrets_psk,
   build_cert_verify_tbs,
-  get_handshake_finished
+  get_handshake_finished,
+  derive_sn_key,
 };