leviathan-crypto 2.0.1 → 3.0.0

package/dist/kyber/indcpa.d.ts

@@ -1,49 +0,0 @@
-import type { KyberExports, Sha3Exports } from './types.js';
-import type { KyberParams } from './params.js';
-/** SHA3-512(msg) → 64 bytes. Resets sha3 state. */
-export declare function sha3_512Hash(sx: Sha3Exports, msg: Uint8Array): Uint8Array;
-/** SHA3-256(msg) → 32 bytes. Resets sha3 state. */
-export declare function sha3_256Hash(sx: Sha3Exports, msg: Uint8Array): Uint8Array;
-/**
- * SHAKE256(msg, n) → n bytes. Resets sha3 state.
- * Used for J function (z || c) and PRF seeding in kem.ts.
- */
-export declare function shake256Hash(sx: Sha3Exports, msg: Uint8Array, n: number): Uint8Array;
-/**
- * K-PKE.KeyGen (FIPS 203 Algorithm 12) — deterministic.
- *
- * Slot map:
- *   pvec0 — current row of  (overwritten per row)
- *   pvec1 — ŝ (noise, persistent through dot products)
- *   pvec2 — ê (noise)
- *   pvec3 — t̂ = ·ŝ + ê (output)
- */
-export declare function indcpaKeypairDerand(kx: KyberExports, sx: Sha3Exports, params: KyberParams, d: Uint8Array): {
-    ekCpa: Uint8Array;
-    skCpa: Uint8Array;
-};
-/**
- * K-PKE.Encrypt (FIPS 203 Algorithm 13) — deterministic.
- *
- * Slot map:
- *   pvec0 — current row of Â^T (transposed, overwritten per row)
- *   pvec1 — r̂ = NTT(r)
- *   pvec2 — e₁ (noise)
- *   pvec3 — u = invNTT(Â^T · r̂) + e₁
- *   pvec4 — t̂ (unpacked from ek)
- *   poly1  — e₂ (noise)
- *   poly2  — v = invNTT(t̂^T · r̂) + e₂ + msg
- *   poly3  — message polynomial
- */
-export declare function indcpaEncrypt(kx: KyberExports, sx: Sha3Exports, params: KyberParams, ek: Uint8Array, m: Uint8Array, coins: Uint8Array): Uint8Array;
-/**
- * K-PKE.Decrypt (FIPS 203 Algorithm 14).
- *
- * Slot map:
- *   pvec0 — û (decompressed from ct)
- *   pvec1 — ŝ (from sk)
- *   poly0  — v (decompressed from ct)
- *   poly1  — w = invNTT(ŝ^T · NTT(û))
- *   poly2  — m' = v - w
- */
-export declare function indcpaDecrypt(kx: KyberExports, params: KyberParams, skCpa: Uint8Array, ct: Uint8Array): Uint8Array;

package/dist/kyber/index.d.ts

@@ -1,38 +0,0 @@
-import { isInitialized } from '../init.js';
-import type { WasmSource } from '../wasm-source.js';
-import type { KyberExports, Sha3Exports, KyberKeyPair, KyberEncapsulation } from './types.js';
-import { KyberParams, MLKEM512, MLKEM768, MLKEM1024 } from './params.js';
-export declare function kyberInit(source: WasmSource): Promise<void>;
-export declare function _kyberReady(): boolean;
-export type { WasmSource };
-export type { KyberKeyPair, KyberEncapsulation, KyberExports, Sha3Exports };
-export { MLKEM512, MLKEM768, MLKEM1024 };
-export type { KyberParams };
-export { isInitialized };
-export { KyberSuite } from './suite.js';
-export declare class MlKemBase {
-    readonly params: KyberParams;
-    constructor(params: KyberParams);
-    private get kx();
-    private get sx();
-    keygenDerand(d: Uint8Array, z: Uint8Array): KyberKeyPair;
-    keygen(): KyberKeyPair;
-    encapsulateDerand(ek: Uint8Array, m: Uint8Array): KyberEncapsulation;
-    encapsulate(ek: Uint8Array): KyberEncapsulation;
-    decapsulate(dk: Uint8Array, c: Uint8Array): Uint8Array;
-    checkEncapsulationKey(ek: Uint8Array): boolean;
-    checkDecapsulationKey(dk: Uint8Array): boolean;
-    dispose(): void;
-}
-/** ML-KEM-512 — k=2, η₁=3, η₂=2, dᵤ=10, dᵥ=4. */
-export declare class MlKem512 extends MlKemBase {
-    constructor();
-}
-/** ML-KEM-768 — k=3, η₁=2, η₂=2, dᵤ=10, dᵥ=4. */
-export declare class MlKem768 extends MlKemBase {
-    constructor();
-}
-/** ML-KEM-1024 — k=4, η₁=2, η₂=2, dᵤ=11, dᵥ=5. */
-export declare class MlKem1024 extends MlKemBase {
-    constructor();
-}

package/dist/kyber/kem.d.ts

@@ -1,21 +0,0 @@
-import type { KyberExports, Sha3Exports, KyberKeyPair, KyberEncapsulation } from './types.js';
-import type { KyberParams } from './params.js';
-/**
- * ML-KEM.KeyGen_internal (FIPS 203 Algorithm 15).
- *
- * dk = skCpa || ek || H(ek) || z
- */
-export declare function kemKeypairDerand(kx: KyberExports, sx: Sha3Exports, params: KyberParams, d: Uint8Array, z: Uint8Array): KyberKeyPair;
-/**
- * ML-KEM.Encaps_internal (FIPS 203 Algorithm 16).
- *
- * (K, r) = G(m || H(ek)), c = K-PKE.Encrypt(ek, m, r)
- */
-export declare function kemEncapsulateDerand(kx: KyberExports, sx: Sha3Exports, params: KyberParams, ek: Uint8Array, m: Uint8Array): KyberEncapsulation;
-/**
- * ML-KEM.Decaps_internal (FIPS 203 Algorithm 17).
- *
- * Constant-time: uses ct_verify and ct_cmov from kyber WASM.
- * MUST NOT branch on secret data in JS — all comparison via WASM primitives.
- */
-export declare function kemDecapsulate(kx: KyberExports, sx: Sha3Exports, params: KyberParams, dk: Uint8Array, c: Uint8Array): Uint8Array;

package/dist/kyber/suite.d.ts

@@ -1,13 +0,0 @@
-import type { CipherSuite } from '../stream/types.js';
-import type { KyberKeyPair, KyberEncapsulation } from './types.js';
-import type { KyberParams } from './params.js';
-interface MlKemLike {
-    readonly params: KyberParams;
-    encapsulate(ek: Uint8Array): KyberEncapsulation;
-    decapsulate(dk: Uint8Array, c: Uint8Array): Uint8Array;
-    keygen(): KyberKeyPair;
-}
-export declare function KyberSuite(kem: MlKemLike, inner: CipherSuite): CipherSuite & {
-    keygen(): KyberKeyPair;
-};
-export {};

package/dist/kyber/validate.d.ts

@@ -1,19 +0,0 @@
-import type { KyberExports, Sha3Exports } from './types.js';
-import type { KyberParams } from './params.js';
-/**
- * Encapsulation key check — FIPS 203 §7.2 (EncapsulationKeyCheck).
- *
- * 1. Length check: ek.length == params.ekBytes
- * 2. ByteDecode₁₂ → ByteEncode₁₂ round-trip check on the polyvec portion.
- *    Any coefficient ≥ q stored modulo 2^12 survives frombytes, but tobytes
- *    re-encodes it differently — so the round-trip fails iff any coeff was ≥ q.
- */
-export declare function checkEncapsulationKey(kx: KyberExports, params: KyberParams, ek: Uint8Array): boolean;
-/**
- * Decapsulation key check — FIPS 203 §7.3 (DecapsulationKeyCheck).
- *
- * 1. Length check: dk.length == params.dkBytes
- * 2. Extract embedded ek and H(ek), verify SHA3-256(ek) matches stored H
- * 3. Also run checkEncapsulationKey on the embedded ek
- */
-export declare function checkDecapsulationKey(kx: KyberExports, sx: Sha3Exports, params: KyberParams, dk: Uint8Array): boolean;