leviathan-crypto 1.0.0

package/dist/sha2/index.js

@@ -0,0 +1,190 @@
+//                  ▄▄▄▄▄▄▄▄▄▄
+//           ▄████████████████████▄▄          ▒  ▄▀▀ ▒ ▒ █ ▄▀▄ ▀█▀ █ ▒ ▄▀▄ █▀▄
+//        ▄██████████████████████ ▀████▄      ▓  ▓▀  ▓ ▓ ▓ ▓▄▓  ▓  ▓▀▓ ▓▄▓ ▓ ▓
+//      ▄█████████▀▀▀     ▀███████▄▄███████▌  ▀▄ ▀▄▄ ▀▄▀ ▒ ▒ ▒  ▒  ▒ █ ▒ ▒ ▒ █
+//     ▐████████▀   ▄▄▄▄     ▀████████▀██▀█▌
+//     ████████      ███▀▀     ████▀  █▀ █▀       Leviathan Crypto Library
+//     ███████▌    ▀██▀         ███
+//      ███████   ▀███           ▀██ ▀█▄      Repository & Mirror:
+//       ▀██████   ▄▄██            ▀▀  ██▄    github.com/xero/leviathan-crypto
+//         ▀█████▄   ▄██▄             ▄▀▄▀    unpkg.com/leviathan-crypto
+//            ▀████▄   ▄██▄
+//              ▐████   ▐███                  Author: xero (https://x-e.ro)
+//       ▄▄██████████    ▐███         ▄▄      License: MIT
+//    ▄██▀▀▀▀▀▀▀▀▀▀     ▄████      ▄██▀
+//  ▄▀  ▄▄█████████▄▄  ▀▀▀▀▀     ▄███         This file is provided completely
+//   ▄██████▀▀▀▀▀▀██████▄ ▀▄▄▄▄████▀          free, "as is", and without
+//  ████▀    ▄▄▄▄▄▄▄ ▀████▄ ▀█████▀  ▄▄▄▄     warranty of any kind. The author
+//  █████▄▄█████▀▀▀▀▀▀▄ ▀███▄      ▄████      assumes absolutely no liability
+//   ▀██████▀             ▀████▄▄▄████▀       for its {ab,mis,}use.
+//                           ▀█████▀▀
+//
+// src/ts/sha2/index.ts
+//
+// Public API classes for the SHA-2 WASM module.
+// Uses the init() module cache — call init('sha2') before constructing.
+import { getInstance, initModule } from '../init.js';
+const _embedded = () => import('../embedded/sha2.js').then(m => m.WASM_BASE64);
+export async function sha2Init(mode = 'embedded', opts) {
+    return initModule('sha2', _embedded, mode, opts);
+}
+function getExports() {
+    return getInstance('sha2').exports;
+}
+export function _sha2Ready() {
+    try {
+        getInstance('sha2');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// Write msg into input buffer in chunks, calling update for each chunk.
+function feedHash(x, msg, inputOff, chunkSize, updateFn) {
+    const mem = new Uint8Array(x.memory.buffer);
+    let pos = 0;
+    while (pos < msg.length) {
+        const n = Math.min(msg.length - pos, chunkSize);
+        mem.set(msg.subarray(pos, pos + n), inputOff);
+        updateFn(n);
+        pos += n;
+    }
+}
+// ── SHA256 ──────────────────────────────────────────────────────────────────
+export class SHA256 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(msg) {
+        this.x.sha256Init();
+        feedHash(this.x, msg, this.x.getSha256InputOffset(), 64, this.x.sha256Update);
+        this.x.sha256Final();
+        const mem = new Uint8Array(this.x.memory.buffer);
+        return mem.slice(this.x.getSha256OutOffset(), this.x.getSha256OutOffset() + 32);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── SHA512 ──────────────────────────────────────────────────────────────────
+export class SHA512 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(msg) {
+        this.x.sha512Init();
+        feedHash(this.x, msg, this.x.getSha512InputOffset(), 128, this.x.sha512Update);
+        this.x.sha512Final();
+        const mem = new Uint8Array(this.x.memory.buffer);
+        return mem.slice(this.x.getSha512OutOffset(), this.x.getSha512OutOffset() + 64);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── SHA384 ──────────────────────────────────────────────────────────────────
+export class SHA384 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(msg) {
+        this.x.sha384Init();
+        feedHash(this.x, msg, this.x.getSha512InputOffset(), 128, this.x.sha512Update);
+        this.x.sha384Final();
+        const mem = new Uint8Array(this.x.memory.buffer);
+        return mem.slice(this.x.getSha512OutOffset(), this.x.getSha512OutOffset() + 48);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── HMAC_SHA256 ─────────────────────────────────────────────────────────────
+export class HMAC_SHA256 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(key, msg) {
+        let k = key;
+        // RFC 2104 §3: keys longer than block size are pre-hashed
+        if (k.length > 64) {
+            this.x.sha256Init();
+            feedHash(this.x, k, this.x.getSha256InputOffset(), 64, this.x.sha256Update);
+            this.x.sha256Final();
+            const mem = new Uint8Array(this.x.memory.buffer);
+            k = mem.slice(this.x.getSha256OutOffset(), this.x.getSha256OutOffset() + 32);
+        }
+        const mem = new Uint8Array(this.x.memory.buffer);
+        mem.set(k, this.x.getSha256InputOffset());
+        this.x.hmac256Init(k.length);
+        feedHash(this.x, msg, this.x.getSha256InputOffset(), 64, this.x.hmac256Update);
+        this.x.hmac256Final();
+        const out = new Uint8Array(this.x.memory.buffer);
+        return out.slice(this.x.getSha256OutOffset(), this.x.getSha256OutOffset() + 32);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── HMAC_SHA512 ─────────────────────────────────────────────────────────────
+export class HMAC_SHA512 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(key, msg) {
+        let k = key;
+        // RFC 2104 §3: keys longer than block size (128) are pre-hashed
+        if (k.length > 128) {
+            this.x.sha512Init();
+            feedHash(this.x, k, this.x.getSha512InputOffset(), 128, this.x.sha512Update);
+            this.x.sha512Final();
+            const mem = new Uint8Array(this.x.memory.buffer);
+            k = mem.slice(this.x.getSha512OutOffset(), this.x.getSha512OutOffset() + 64);
+        }
+        const mem = new Uint8Array(this.x.memory.buffer);
+        mem.set(k, this.x.getSha512InputOffset());
+        this.x.hmac512Init(k.length);
+        feedHash(this.x, msg, this.x.getSha512InputOffset(), 128, this.x.hmac512Update);
+        this.x.hmac512Final();
+        const out = new Uint8Array(this.x.memory.buffer);
+        return out.slice(this.x.getSha512OutOffset(), this.x.getSha512OutOffset() + 64);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── HMAC_SHA384 ─────────────────────────────────────────────────────────────
+export class HMAC_SHA384 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(key, msg) {
+        let k = key;
+        // RFC 2104 §3: keys longer than block size (128) are pre-hashed with SHA-384
+        if (k.length > 128) {
+            this.x.sha384Init();
+            feedHash(this.x, k, this.x.getSha512InputOffset(), 128, this.x.sha512Update);
+            this.x.sha384Final();
+            const mem = new Uint8Array(this.x.memory.buffer);
+            k = mem.slice(this.x.getSha512OutOffset(), this.x.getSha512OutOffset() + 48);
+        }
+        const mem = new Uint8Array(this.x.memory.buffer);
+        mem.set(k, this.x.getSha512InputOffset());
+        this.x.hmac384Init(k.length);
+        feedHash(this.x, msg, this.x.getSha512InputOffset(), 128, this.x.hmac384Update);
+        this.x.hmac384Final();
+        const out = new Uint8Array(this.x.memory.buffer);
+        return out.slice(this.x.getSha512OutOffset(), this.x.getSha512OutOffset() + 48);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── HKDF ────────────────────────────────────────────────────────────────────
+export { HKDF_SHA256, HKDF_SHA512 } from './hkdf.js';

package/dist/sha2/types.d.ts

@@ -0,0 +1,5 @@
+/** WASM exports for the sha2 module */
+export interface Sha2Exports {
+    memory: WebAssembly.Memory;
+    getModuleId(): number;
+}

package/dist/sha2/types.js

@@ -0,0 +1 @@
+export {};

package/dist/sha3/index.d.ts

@@ -0,0 +1,55 @@
+import type { Mode, InitOpts } from '../init.js';
+export declare function sha3Init(mode?: Mode, opts?: InitOpts): Promise<void>;
+export declare function _sha3Ready(): boolean;
+export declare class SHA3_256 {
+    private readonly x;
+    constructor();
+    hash(msg: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+export declare class SHA3_512 {
+    private readonly x;
+    constructor();
+    hash(msg: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+export declare class SHA3_384 {
+    private readonly x;
+    constructor();
+    hash(msg: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+export declare class SHA3_224 {
+    private readonly x;
+    constructor();
+    hash(msg: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+/** SHAKE128 XOF — extendable output, multi-squeeze capable. */
+export declare class SHAKE128 {
+    private readonly x;
+    private readonly _rate;
+    private _squeezing;
+    private _block;
+    private _blockPos;
+    constructor();
+    reset(): this;
+    absorb(msg: Uint8Array): this;
+    squeeze(n: number): Uint8Array;
+    hash(msg: Uint8Array, outputLength: number): Uint8Array;
+    dispose(): void;
+}
+/** SHAKE256 XOF — extendable output, multi-squeeze capable. */
+export declare class SHAKE256 {
+    private readonly x;
+    private readonly _rate;
+    private _squeezing;
+    private _block;
+    private _blockPos;
+    constructor();
+    reset(): this;
+    absorb(msg: Uint8Array): this;
+    squeeze(n: number): Uint8Array;
+    hash(msg: Uint8Array, outputLength: number): Uint8Array;
+    dispose(): void;
+}

package/dist/sha3/index.js

@@ -0,0 +1,246 @@
+//                  ▄▄▄▄▄▄▄▄▄▄
+//           ▄████████████████████▄▄          ▒  ▄▀▀ ▒ ▒ █ ▄▀▄ ▀█▀ █ ▒ ▄▀▄ █▀▄
+//        ▄██████████████████████ ▀████▄      ▓  ▓▀  ▓ ▓ ▓ ▓▄▓  ▓  ▓▀▓ ▓▄▓ ▓ ▓
+//      ▄█████████▀▀▀     ▀███████▄▄███████▌  ▀▄ ▀▄▄ ▀▄▀ ▒ ▒ ▒  ▒  ▒ █ ▒ ▒ ▒ █
+//     ▐████████▀   ▄▄▄▄     ▀████████▀██▀█▌
+//     ████████      ███▀▀     ████▀  █▀ █▀       Leviathan Crypto Library
+//     ███████▌    ▀██▀         ███
+//      ███████   ▀███           ▀██ ▀█▄      Repository & Mirror:
+//       ▀██████   ▄▄██            ▀▀  ██▄    github.com/xero/leviathan-crypto
+//         ▀█████▄   ▄██▄             ▄▀▄▀    unpkg.com/leviathan-crypto
+//            ▀████▄   ▄██▄
+//              ▐████   ▐███                  Author: xero (https://x-e.ro)
+//       ▄▄██████████    ▐███         ▄▄      License: MIT
+//    ▄██▀▀▀▀▀▀▀▀▀▀     ▄████      ▄██▀
+//  ▄▀  ▄▄█████████▄▄  ▀▀▀▀▀     ▄███         This file is provided completely
+//   ▄██████▀▀▀▀▀▀██████▄ ▀▄▄▄▄████▀          free, "as is", and without
+//  ████▀    ▄▄▄▄▄▄▄ ▀████▄ ▀█████▀  ▄▄▄▄     warranty of any kind. The author
+//  █████▄▄█████▀▀▀▀▀▀▄ ▀███▄      ▄████      assumes absolutely no liability
+//   ▀██████▀             ▀████▄▄▄████▀       for its {ab,mis,}use.
+//                           ▀█████▀▀
+//
+// src/ts/sha3/index.ts
+//
+// Public API classes for the SHA-3 WASM module.
+// Uses the init() module cache — call init('sha3') before constructing.
+import { getInstance, initModule } from '../init.js';
+const _embedded = () => import('../embedded/sha3.js').then(m => m.WASM_BASE64);
+export async function sha3Init(mode = 'embedded', opts) {
+    return initModule('sha3', _embedded, mode, opts);
+}
+function getExports() {
+    return getInstance('sha3').exports;
+}
+export function _sha3Ready() {
+    try {
+        getInstance('sha3');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// Write msg into INPUT_OFFSET in chunks of 168 bytes (max rate)
+function absorb(x, msg) {
+    const mem = new Uint8Array(x.memory.buffer);
+    const inputOff = x.getInputOffset();
+    let pos = 0;
+    while (pos < msg.length) {
+        const chunk = Math.min(msg.length - pos, 168);
+        mem.set(msg.subarray(pos, pos + chunk), inputOff);
+        x.keccakAbsorb(chunk);
+        pos += chunk;
+    }
+}
+// ── SHA3_256 ────────────────────────────────────────────────────────────────
+export class SHA3_256 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(msg) {
+        this.x.sha3_256Init();
+        absorb(this.x, msg);
+        this.x.sha3_256Final();
+        const mem = new Uint8Array(this.x.memory.buffer);
+        return mem.slice(this.x.getOutOffset(), this.x.getOutOffset() + 32);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── SHA3_512 ────────────────────────────────────────────────────────────────
+export class SHA3_512 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(msg) {
+        this.x.sha3_512Init();
+        absorb(this.x, msg);
+        this.x.sha3_512Final();
+        const mem = new Uint8Array(this.x.memory.buffer);
+        return mem.slice(this.x.getOutOffset(), this.x.getOutOffset() + 64);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── SHA3_384 ────────────────────────────────────────────────────────────────
+export class SHA3_384 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(msg) {
+        this.x.sha3_384Init();
+        absorb(this.x, msg);
+        this.x.sha3_384Final();
+        const mem = new Uint8Array(this.x.memory.buffer);
+        return mem.slice(this.x.getOutOffset(), this.x.getOutOffset() + 48);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── SHA3_224 ────────────────────────────────────────────────────────────────
+export class SHA3_224 {
+    x;
+    constructor() {
+        this.x = getExports();
+    }
+    hash(msg) {
+        this.x.sha3_224Init();
+        absorb(this.x, msg);
+        this.x.sha3_224Final();
+        const mem = new Uint8Array(this.x.memory.buffer);
+        return mem.slice(this.x.getOutOffset(), this.x.getOutOffset() + 28);
+    }
+    dispose() {
+        this.x.wipeBuffers();
+    }
+}
+// ── SHAKE128 ────────────────────────────────────────────────────────────────
+/** SHAKE128 XOF — extendable output, multi-squeeze capable. */
+export class SHAKE128 {
+    x;
+    _rate = 168;
+    _squeezing = false;
+    _block = new Uint8Array(168);
+    _blockPos = 168;
+    constructor() {
+        this.x = getExports();
+        this.x.shake128Init();
+    }
+    reset() {
+        this.x.shake128Init();
+        this._squeezing = false;
+        this._block.fill(0);
+        this._blockPos = this._rate;
+        return this;
+    }
+    absorb(msg) {
+        if (this._squeezing)
+            throw new Error('SHAKE128: cannot absorb after squeeze — call reset() first');
+        absorb(this.x, msg);
+        return this;
+    }
+    squeeze(n) {
+        if (n < 1)
+            throw new RangeError(`squeeze length must be >= 1 (got ${n})`);
+        if (!this._squeezing) {
+            this.x.shakePad();
+            this._squeezing = true;
+            this._blockPos = this._rate;
+        }
+        const out = new Uint8Array(n);
+        let pos = 0;
+        while (pos < n) {
+            if (this._blockPos >= this._rate) {
+                this.x.shakeSqueezeBlock();
+                const mem = new Uint8Array(this.x.memory.buffer);
+                const off = this.x.getOutOffset();
+                this._block.set(mem.subarray(off, off + this._rate));
+                this._blockPos = 0;
+            }
+            const take = Math.min(n - pos, this._rate - this._blockPos);
+            out.set(this._block.subarray(this._blockPos, this._blockPos + take), pos);
+            this._blockPos += take;
+            pos += take;
+        }
+        return out;
+    }
+    hash(msg, outputLength) {
+        if (outputLength < 1)
+            throw new RangeError(`outputLength must be >= 1 (got ${outputLength})`);
+        this.reset();
+        this.absorb(msg);
+        return this.squeeze(outputLength);
+    }
+    dispose() {
+        this._block.fill(0);
+        this.x.wipeBuffers();
+    }
+}
+// ── SHAKE256 ────────────────────────────────────────────────────────────────
+/** SHAKE256 XOF — extendable output, multi-squeeze capable. */
+export class SHAKE256 {
+    x;
+    _rate = 136;
+    _squeezing = false;
+    _block = new Uint8Array(136);
+    _blockPos = 136;
+    constructor() {
+        this.x = getExports();
+        this.x.shake256Init();
+    }
+    reset() {
+        this.x.shake256Init();
+        this._squeezing = false;
+        this._block.fill(0);
+        this._blockPos = this._rate;
+        return this;
+    }
+    absorb(msg) {
+        if (this._squeezing)
+            throw new Error('SHAKE256: cannot absorb after squeeze — call reset() first');
+        absorb(this.x, msg);
+        return this;
+    }
+    squeeze(n) {
+        if (n < 1)
+            throw new RangeError(`squeeze length must be >= 1 (got ${n})`);
+        if (!this._squeezing) {
+            this.x.shakePad();
+            this._squeezing = true;
+            this._blockPos = this._rate;
+        }
+        const out = new Uint8Array(n);
+        let pos = 0;
+        while (pos < n) {
+            if (this._blockPos >= this._rate) {
+                this.x.shakeSqueezeBlock();
+                const mem = new Uint8Array(this.x.memory.buffer);
+                const off = this.x.getOutOffset();
+                this._block.set(mem.subarray(off, off + this._rate));
+                this._blockPos = 0;
+            }
+            const take = Math.min(n - pos, this._rate - this._blockPos);
+            out.set(this._block.subarray(this._blockPos, this._blockPos + take), pos);
+            this._blockPos += take;
+            pos += take;
+        }
+        return out;
+    }
+    hash(msg, outputLength) {
+        if (outputLength < 1)
+            throw new RangeError(`outputLength must be >= 1 (got ${outputLength})`);
+        this.reset();
+        this.absorb(msg);
+        return this.squeeze(outputLength);
+    }
+    dispose() {
+        this._block.fill(0);
+        this.x.wipeBuffers();
+    }
+}

package/dist/sha3/types.d.ts

@@ -0,0 +1,5 @@
+/** WASM exports for the sha3 module */
+export interface Sha3Exports {
+    memory: WebAssembly.Memory;
+    getModuleId(): number;
+}

package/dist/sha3/types.js

@@ -0,0 +1 @@
+export {};

package/dist/types.d.ts

@@ -0,0 +1,24 @@
+export interface Hash {
+    hash(msg: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+export interface KeyedHash {
+    hash(key: Uint8Array, msg: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+export interface Blockcipher {
+    encrypt(block: Uint8Array): Uint8Array;
+    decrypt(block: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+export interface Streamcipher {
+    encrypt(msg: Uint8Array): Uint8Array;
+    decrypt(msg: Uint8Array): Uint8Array;
+    dispose(): void;
+}
+export interface AEAD {
+    encrypt(msg: Uint8Array, aad?: Uint8Array): Uint8Array;
+    /** Decrypt and authenticate. Throws `Error` on authentication failure — never returns null. */
+    decrypt(ciphertext: Uint8Array, aad?: Uint8Array): Uint8Array;
+    dispose(): void;
+}

package/dist/types.js

@@ -0,0 +1,26 @@
+//                  ▄▄▄▄▄▄▄▄▄▄
+//           ▄████████████████████▄▄          ▒  ▄▀▀ ▒ ▒ █ ▄▀▄ ▀█▀ █ ▒ ▄▀▄ █▀▄
+//        ▄██████████████████████ ▀████▄      ▓  ▓▀  ▓ ▓ ▓ ▓▄▓  ▓  ▓▀▓ ▓▄▓ ▓ ▓
+//      ▄█████████▀▀▀     ▀███████▄▄███████▌  ▀▄ ▀▄▄ ▀▄▀ ▒ ▒ ▒  ▒  ▒ █ ▒ ▒ ▒ █
+//     ▐████████▀   ▄▄▄▄     ▀████████▀██▀█▌
+//     ████████      ███▀▀     ████▀  █▀ █▀       Leviathan Crypto Library
+//     ███████▌    ▀██▀         ███
+//      ███████   ▀███           ▀██ ▀█▄      Repository & Mirror:
+//       ▀██████   ▄▄██            ▀▀  ██▄    github.com/xero/leviathan-crypto
+//         ▀█████▄   ▄██▄             ▄▀▄▀    unpkg.com/leviathan-crypto
+//            ▀████▄   ▄██▄
+//              ▐████   ▐███                  Author: xero (https://x-e.ro)
+//       ▄▄██████████    ▐███         ▄▄      License: MIT
+//    ▄██▀▀▀▀▀▀▀▀▀▀     ▄████      ▄██▀
+//  ▄▀  ▄▄█████████▄▄  ▀▀▀▀▀     ▄███         This file is provided completely
+//   ▄██████▀▀▀▀▀▀██████▄ ▀▄▄▄▄████▀          free, "as is", and without
+//  ████▀    ▄▄▄▄▄▄▄ ▀████▄ ▀█████▀  ▄▄▄▄     warranty of any kind. The author
+//  █████▄▄█████▀▀▀▀▀▀▄ ▀███▄      ▄████      assumes absolutely no liability
+//   ▀██████▀             ▀████▄▄▄████▀       for its {ab,mis,}use.
+//                           ▀█████▀▀
+//
+// src/ts/types.ts
+//
+// Primitive interfaces for leviathan-crypto.
+// No init() dependency — available at import time.
+export {};

package/dist/utils.d.ts

@@ -0,0 +1,26 @@
+/** Hex string to Uint8Array. Accepts lowercase/uppercase, optional 0x prefix. */
+export declare const hexToBytes: (hex: string) => Uint8Array;
+/** Uint8Array to lowercase hex string. */
+export declare const bytesToHex: (bytes: Uint8Array) => string;
+/** UTF-8 string to Uint8Array. */
+export declare const utf8ToBytes: (str: string) => Uint8Array;
+/** Uint8Array to UTF-8 string. */
+export declare const bytesToUtf8: (bytes: Uint8Array) => string;
+/** Base64 or base64url string to Uint8Array. Returns undefined on invalid input. */
+export declare const base64ToBytes: (b64: string) => Uint8Array | undefined;
+/** Uint8Array to base64 string. Pass url=true for base64url encoding. */
+export declare const bytesToBase64: (bytes: Uint8Array, url?: boolean) => string;
+/**
+ * Constant-time byte-array equality.
+ * XOR-accumulate pattern — no early return on mismatch.
+ * Length check is not constant-time (length is non-secret in all protocols).
+ */
+export declare const constantTimeEqual: (a: Uint8Array, b: Uint8Array) => boolean;
+/** Zero a typed array in place. */
+export declare const wipe: (data: Uint8Array | Uint16Array | Uint32Array) => void;
+/** XOR two equal-length Uint8Arrays, returns new array. */
+export declare const xor: (a: Uint8Array, b: Uint8Array) => Uint8Array;
+/** Concatenate two Uint8Arrays, returns new array. */
+export declare const concat: (a: Uint8Array, b: Uint8Array) => Uint8Array;
+/** Cryptographically secure random bytes via Web Crypto API. */
+export declare const randomBytes: (n: number) => Uint8Array;