matrix-js-sdk 41.8.0 → 41.9.0

package/lib/utils/encryptAESSecretStorageItem.js

@@ -1,5 +1,3 @@
-import _slicedToArray from "@babel/runtime/helpers/slicedToArray";
-import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
 /*
  * Copyright 2024 The Matrix.org Foundation C.I.C.
  *
@@ -31,42 +29,33 @@ import { deriveKeys } from "./internal/deriveKeys.js";
  * @returns The encrypted result, including the ciphertext itself, the initialization vector (as supplied in `ivStr`,
  *   or generated), and an HMAC on the ciphertext — all base64-encoded.
  */
-export default function encryptAESSecretStorageItem(_x, _x2, _x3, _x4) {
-  return _encryptAESSecretStorageItem.apply(this, arguments);
-}
-function _encryptAESSecretStorageItem() {
-  _encryptAESSecretStorageItem = _asyncToGenerator(function* (data, key, name, ivStr) {
-    var iv;
-    if (ivStr) {
-      iv = decodeBase64(ivStr);
-    } else {
-      iv = new Uint8Array(16);
-      globalThis.crypto.getRandomValues(iv);
+export default async function encryptAESSecretStorageItem(data, key, name, ivStr) {
+  let iv;
+  if (ivStr) {
+    iv = decodeBase64(ivStr);
+  } else {
+    iv = new Uint8Array(16);
+    globalThis.crypto.getRandomValues(iv);
 
-      // clear bit 63 of the IV to stop us hitting the 64-bit counter boundary
-      // (which would mean we wouldn't be able to decrypt on Android). The loss
-      // of a single bit of iv is a price we have to pay.
-      iv[8] &= 0x7f;
-    }
-    var _yield$deriveKeys = yield deriveKeys(key, name),
-      _yield$deriveKeys2 = _slicedToArray(_yield$deriveKeys, 2),
-      aesKey = _yield$deriveKeys2[0],
-      hmacKey = _yield$deriveKeys2[1];
-    var encodedData = new TextEncoder().encode(data);
-    var ciphertext = yield globalThis.crypto.subtle.encrypt({
-      name: "AES-CTR",
-      counter: iv,
-      length: 64
-    }, aesKey, encodedData);
-    var hmac = yield globalThis.crypto.subtle.sign({
-      name: "HMAC"
-    }, hmacKey, ciphertext);
-    return {
-      iv: encodeBase64(iv),
-      ciphertext: encodeBase64(new Uint8Array(ciphertext)),
-      mac: encodeBase64(new Uint8Array(hmac))
-    };
-  });
-  return _encryptAESSecretStorageItem.apply(this, arguments);
+    // clear bit 63 of the IV to stop us hitting the 64-bit counter boundary
+    // (which would mean we wouldn't be able to decrypt on Android). The loss
+    // of a single bit of iv is a price we have to pay.
+    iv[8] &= 0x7f;
+  }
+  const [aesKey, hmacKey] = await deriveKeys(key, name);
+  const encodedData = new TextEncoder().encode(data);
+  const ciphertext = await globalThis.crypto.subtle.encrypt({
+    name: "AES-CTR",
+    counter: iv,
+    length: 64
+  }, aesKey, encodedData);
+  const hmac = await globalThis.crypto.subtle.sign({
+    name: "HMAC"
+  }, hmacKey, ciphertext);
+  return {
+    iv: encodeBase64(iv),
+    ciphertext: encodeBase64(new Uint8Array(ciphertext)),
+    mac: encodeBase64(new Uint8Array(hmac))
+  };
 }
 //# sourceMappingURL=encryptAESSecretStorageItem.js.map

package/lib/utils/encryptAESSecretStorageItem.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryptAESSecretStorageItem.js","names":["decodeBase64","encodeBase64","deriveKeys","encryptAESSecretStorageItem","_x","_x2","_x3","_x4","_encryptAESSecretStorageItem","apply","arguments","_asyncToGenerator","data","key","name","ivStr","iv","Uint8Array","globalThis","crypto","getRandomValues","_yield$deriveKeys","_yield$deriveKeys2","_slicedToArray","aesKey","hmacKey","encodedData","TextEncoder","encode","ciphertext","subtle","encrypt","counter","length","hmac","sign","mac"],"sources":["../../src/utils/encryptAESSecretStorageItem.ts"],"sourcesContent":["/*\n * Copyright 2024 The Matrix.org Foundation C.I.C.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { decodeBase64, encodeBase64 } from \"../base64.ts\";\nimport { deriveKeys } from \"./internal/deriveKeys.ts\";\nimport { type AESEncryptedSecretStoragePayload } from \"../@types/AESEncryptedSecretStoragePayload.ts\";\n\n/**\n * Encrypt a string as a secret storage item, using AES-CTR.\n *\n * @param data - the plaintext to encrypt\n * @param key - the encryption key to use as an input to the HKDF function which is used to derive the AES key for\n *    encryption. Obviously, the same key must be provided when decrypting.\n * @param name - the name of the secret. Used as an input to the HKDF operation which is used to derive the AES key,\n *    so again the same value must be provided when decrypting.\n * @param ivStr - the base64-encoded initialization vector to use. If not supplied, a random one will be generated.\n *\n * @returns The encrypted result, including the ciphertext itself, the initialization vector (as supplied in `ivStr`,\n *   or generated), and an HMAC on the ciphertext — all base64-encoded.\n */\nexport default async function encryptAESSecretStorageItem(\n    data: string,\n    key: Uint8Array<ArrayBuffer>,\n    name: string,\n    ivStr?: string,\n): Promise<AESEncryptedSecretStoragePayload> {\n    let iv: Uint8Array<ArrayBuffer>;\n    if (ivStr) {\n        iv = decodeBase64(ivStr);\n    } else {\n        iv = new Uint8Array(16);\n        globalThis.crypto.getRandomValues(iv);\n\n        // clear bit 63 of the IV to stop us hitting the 64-bit counter boundary\n        // (which would mean we wouldn't be able to decrypt on Android). The loss\n        // of a single bit of iv is a price we have to pay.\n        iv[8] &= 0x7f;\n    }\n\n    const [aesKey, hmacKey] = await deriveKeys(key, name);\n    const encodedData = new TextEncoder().encode(data);\n\n    const ciphertext = await globalThis.crypto.subtle.encrypt(\n        {\n            name: \"AES-CTR\",\n            counter: iv,\n            length: 64,\n        },\n        aesKey,\n        encodedData,\n    );\n\n    const hmac = await globalThis.crypto.subtle.sign({ name: \"HMAC\" }, hmacKey, ciphertext);\n\n    return {\n        iv: encodeBase64(iv),\n        ciphertext: encodeBase64(new Uint8Array(ciphertext)),\n        mac: encodeBase64(new Uint8Array(hmac)),\n    };\n}\n"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,EAAEC,YAAY,QAAQ,cAAc;AACzD,SAASC,UAAU,QAAQ,0BAA0B;AAGrD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,wBAA8BC,2BAA2BA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,4BAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AAuCxD,SAAAF,6BAAA;EAAAA,4BAAA,GAAAG,iBAAA,CAvCc,WACXC,IAAY,EACZC,GAA4B,EAC5BC,IAAY,EACZC,KAAc,EAC2B;IACzC,IAAIC,EAA2B;IAC/B,IAAID,KAAK,EAAE;MACPC,EAAE,GAAGhB,YAAY,CAACe,KAAK,CAAC;IAC5B,CAAC,MAAM;MACHC,EAAE,GAAG,IAAIC,UAAU,CAAC,EAAE,CAAC;MACvBC,UAAU,CAACC,MAAM,CAACC,eAAe,CAACJ,EAAE,CAAC;;MAErC;MACA;MACA;MACAA,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;IACjB;IAEA,IAAAK,iBAAA,SAAgCnB,UAAU,CAACW,GAAG,EAAEC,IAAI,CAAC;MAAAQ,kBAAA,GAAAC,cAAA,CAAAF,iBAAA;MAA9CG,MAAM,GAAAF,kBAAA;MAAEG,OAAO,GAAAH,kBAAA;IACtB,IAAMI,WAAW,GAAG,IAAIC,WAAW,CAAC,CAAC,CAACC,MAAM,CAAChB,IAAI,CAAC;IAElD,IAAMiB,UAAU,SAASX,UAAU,CAACC,MAAM,CAACW,MAAM,CAACC,OAAO,CACrD;MACIjB,IAAI,EAAE,SAAS;MACfkB,OAAO,EAAEhB,EAAE;MACXiB,MAAM,EAAE;IACZ,CAAC,EACDT,MAAM,EACNE,WACJ,CAAC;IAED,IAAMQ,IAAI,SAAShB,UAAU,CAACC,MAAM,CAACW,MAAM,CAACK,IAAI,CAAC;MAAErB,IAAI,EAAE;IAAO,CAAC,EAAEW,OAAO,EAAEI,UAAU,CAAC;IAEvF,OAAO;MACHb,EAAE,EAAEf,YAAY,CAACe,EAAE,CAAC;MACpBa,UAAU,EAAE5B,YAAY,CAAC,IAAIgB,UAAU,CAACY,UAAU,CAAC,CAAC;MACpDO,GAAG,EAAEnC,YAAY,CAAC,IAAIgB,UAAU,CAACiB,IAAI,CAAC;IAC1C,CAAC;EACL,CAAC;EAAA,OAAA1B,4BAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"encryptAESSecretStorageItem.js","names":[],"sources":["../../src/utils/encryptAESSecretStorageItem.ts"],"sourcesContent":["/*\n * Copyright 2024 The Matrix.org Foundation C.I.C.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { decodeBase64, encodeBase64 } from \"../base64.ts\";\nimport { deriveKeys } from \"./internal/deriveKeys.ts\";\nimport { type AESEncryptedSecretStoragePayload } from \"../@types/AESEncryptedSecretStoragePayload.ts\";\n\n/**\n * Encrypt a string as a secret storage item, using AES-CTR.\n *\n * @param data - the plaintext to encrypt\n * @param key - the encryption key to use as an input to the HKDF function which is used to derive the AES key for\n *    encryption. Obviously, the same key must be provided when decrypting.\n * @param name - the name of the secret. Used as an input to the HKDF operation which is used to derive the AES key,\n *    so again the same value must be provided when decrypting.\n * @param ivStr - the base64-encoded initialization vector to use. If not supplied, a random one will be generated.\n *\n * @returns The encrypted result, including the ciphertext itself, the initialization vector (as supplied in `ivStr`,\n *   or generated), and an HMAC on the ciphertext — all base64-encoded.\n */\nexport default async function encryptAESSecretStorageItem(\n    data: string,\n    key: Uint8Array<ArrayBuffer>,\n    name: string,\n    ivStr?: string,\n): Promise<AESEncryptedSecretStoragePayload> {\n    let iv: Uint8Array<ArrayBuffer>;\n    if (ivStr) {\n        iv = decodeBase64(ivStr);\n    } else {\n        iv = new Uint8Array(16);\n        globalThis.crypto.getRandomValues(iv);\n\n        // clear bit 63 of the IV to stop us hitting the 64-bit counter boundary\n        // (which would mean we wouldn't be able to decrypt on Android). The loss\n        // of a single bit of iv is a price we have to pay.\n        iv[8] &= 0x7f;\n    }\n\n    const [aesKey, hmacKey] = await deriveKeys(key, name);\n    const encodedData = new TextEncoder().encode(data);\n\n    const ciphertext = await globalThis.crypto.subtle.encrypt(\n        {\n            name: \"AES-CTR\",\n            counter: iv,\n            length: 64,\n        },\n        aesKey,\n        encodedData,\n    );\n\n    const hmac = await globalThis.crypto.subtle.sign({ name: \"HMAC\" }, hmacKey, ciphertext);\n\n    return {\n        iv: encodeBase64(iv),\n        ciphertext: encodeBase64(new Uint8Array(ciphertext)),\n        mac: encodeBase64(new Uint8Array(hmac)),\n    };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAAS,YAAY,EAAE,YAAY,QAAQ,cAAc;AACzD,SAAS,UAAU,QAAQ,0BAA0B;AAGrD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,eAAe,2BAA2B,CACrD,IAAY,EACZ,GAA4B,EAC5B,IAAY,EACZ,KAAc,EAC2B;EACzC,IAAI,EAA2B;EAC/B,IAAI,KAAK,EAAE;IACP,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC;EAC5B,CAAC,MAAM;IACH,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;IACvB,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;;IAErC;IACA;IACA;IACA,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;EACjB;EAEA,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;EACrD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;EAElD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CACrD;IACI,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,EAAE;IACX,MAAM,EAAE;EACZ,CAAC,EACD,MAAM,EACN,WACJ,CAAC;EAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IAAE,IAAI,EAAE;EAAO,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC;EAEvF,OAAO;IACH,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;IACpB,UAAU,EAAE,YAAY,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACpD,GAAG,EAAE,YAAY,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;EAC1C,CAAC;AACL","ignoreList":[]}

package/lib/utils/internal/deriveKeys.js

@@ -1,4 +1,3 @@
-import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
 /*
  * Copyright 2024 The Matrix.org Foundation C.I.C.
  *
@@ -16,7 +15,7 @@ import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
  */
 
 // salt for HKDF, with 8 bytes of zeros
-var zeroSalt = new Uint8Array(8);
+const zeroSalt = new Uint8Array(8);
 
 /**
  * Derive AES and HMAC keys from a master key.
@@ -26,35 +25,29 @@ var zeroSalt = new Uint8Array(8);
  * @param key
  * @param name
  */
-export function deriveKeys(_x, _x2) {
-  return _deriveKeys.apply(this, arguments);
-}
-function _deriveKeys() {
-  _deriveKeys = _asyncToGenerator(function* (key, name) {
-    var hkdfkey = yield globalThis.crypto.subtle.importKey("raw", key, {
-      name: "HKDF"
-    }, false, ["deriveBits"]);
-    var keybits = yield globalThis.crypto.subtle.deriveBits({
-      name: "HKDF",
-      salt: zeroSalt,
-      // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-      // @ts-ignore: https://github.com/microsoft/TypeScript-DOM-lib-generator/pull/879
-      info: new TextEncoder().encode(name),
-      hash: "SHA-256"
-    }, hkdfkey, 512);
-    var aesKey = keybits.slice(0, 32);
-    var hmacKey = keybits.slice(32);
-    var aesProm = globalThis.crypto.subtle.importKey("raw", aesKey, {
-      name: "AES-CTR"
-    }, false, ["encrypt", "decrypt"]);
-    var hmacProm = globalThis.crypto.subtle.importKey("raw", hmacKey, {
-      name: "HMAC",
-      hash: {
-        name: "SHA-256"
-      }
-    }, false, ["sign", "verify"]);
-    return Promise.all([aesProm, hmacProm]);
-  });
-  return _deriveKeys.apply(this, arguments);
+export async function deriveKeys(key, name) {
+  const hkdfkey = await globalThis.crypto.subtle.importKey("raw", key, {
+    name: "HKDF"
+  }, false, ["deriveBits"]);
+  const keybits = await globalThis.crypto.subtle.deriveBits({
+    name: "HKDF",
+    salt: zeroSalt,
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore: https://github.com/microsoft/TypeScript-DOM-lib-generator/pull/879
+    info: new TextEncoder().encode(name),
+    hash: "SHA-256"
+  }, hkdfkey, 512);
+  const aesKey = keybits.slice(0, 32);
+  const hmacKey = keybits.slice(32);
+  const aesProm = globalThis.crypto.subtle.importKey("raw", aesKey, {
+    name: "AES-CTR"
+  }, false, ["encrypt", "decrypt"]);
+  const hmacProm = globalThis.crypto.subtle.importKey("raw", hmacKey, {
+    name: "HMAC",
+    hash: {
+      name: "SHA-256"
+    }
+  }, false, ["sign", "verify"]);
+  return Promise.all([aesProm, hmacProm]);
 }
 //# sourceMappingURL=deriveKeys.js.map

package/lib/utils/internal/deriveKeys.js.map

@@ -1 +1 @@
-{"version":3,"file":"deriveKeys.js","names":["zeroSalt","Uint8Array","deriveKeys","_x","_x2","_deriveKeys","apply","arguments","_asyncToGenerator","key","name","hkdfkey","globalThis","crypto","subtle","importKey","keybits","deriveBits","salt","info","TextEncoder","encode","hash","aesKey","slice","hmacKey","aesProm","hmacProm","Promise","all"],"sources":["../../../src/utils/internal/deriveKeys.ts"],"sourcesContent":["/*\n * Copyright 2024 The Matrix.org Foundation C.I.C.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// salt for HKDF, with 8 bytes of zeros\nconst zeroSalt = new Uint8Array(8);\n\n/**\n * Derive AES and HMAC keys from a master key.\n *\n * This is used for deriving secret storage keys: see https://spec.matrix.org/v1.11/client-server-api/#msecret_storagev1aes-hmac-sha2 (step 1).\n *\n * @param key\n * @param name\n */\nexport async function deriveKeys(key: Uint8Array<ArrayBuffer>, name: string): Promise<[CryptoKey, CryptoKey]> {\n    const hkdfkey = await globalThis.crypto.subtle.importKey(\"raw\", key, { name: \"HKDF\" }, false, [\"deriveBits\"]);\n    const keybits = await globalThis.crypto.subtle.deriveBits(\n        {\n            name: \"HKDF\",\n            salt: zeroSalt,\n            // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n            // @ts-ignore: https://github.com/microsoft/TypeScript-DOM-lib-generator/pull/879\n            info: new TextEncoder().encode(name),\n            hash: \"SHA-256\",\n        },\n        hkdfkey,\n        512,\n    );\n\n    const aesKey = keybits.slice(0, 32);\n    const hmacKey = keybits.slice(32);\n\n    const aesProm = globalThis.crypto.subtle.importKey(\"raw\", aesKey, { name: \"AES-CTR\" }, false, [\n        \"encrypt\",\n        \"decrypt\",\n    ]);\n\n    const hmacProm = globalThis.crypto.subtle.importKey(\n        \"raw\",\n        hmacKey,\n        {\n            name: \"HMAC\",\n            hash: { name: \"SHA-256\" },\n        },\n        false,\n        [\"sign\", \"verify\"],\n    );\n\n    return Promise.all([aesProm, hmacProm]);\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,IAAMA,QAAQ,GAAG,IAAIC,UAAU,CAAC,CAAC,CAAC;;AAElC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,gBAAsBC,UAAUA,CAAAC,EAAA,EAAAC,GAAA;EAAA,OAAAC,WAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AAmC/B,SAAAF,YAAA;EAAAA,WAAA,GAAAG,iBAAA,CAnCM,WAA0BC,GAA4B,EAAEC,IAAY,EAAmC;IAC1G,IAAMC,OAAO,SAASC,UAAU,CAACC,MAAM,CAACC,MAAM,CAACC,SAAS,CAAC,KAAK,EAAEN,GAAG,EAAE;MAAEC,IAAI,EAAE;IAAO,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;IAC7G,IAAMM,OAAO,SAASJ,UAAU,CAACC,MAAM,CAACC,MAAM,CAACG,UAAU,CACrD;MACIP,IAAI,EAAE,MAAM;MACZQ,IAAI,EAAElB,QAAQ;MACd;MACA;MACAmB,IAAI,EAAE,IAAIC,WAAW,CAAC,CAAC,CAACC,MAAM,CAACX,IAAI,CAAC;MACpCY,IAAI,EAAE;IACV,CAAC,EACDX,OAAO,EACP,GACJ,CAAC;IAED,IAAMY,MAAM,GAAGP,OAAO,CAACQ,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;IACnC,IAAMC,OAAO,GAAGT,OAAO,CAACQ,KAAK,CAAC,EAAE,CAAC;IAEjC,IAAME,OAAO,GAAGd,UAAU,CAACC,MAAM,CAACC,MAAM,CAACC,SAAS,CAAC,KAAK,EAAEQ,MAAM,EAAE;MAAEb,IAAI,EAAE;IAAU,CAAC,EAAE,KAAK,EAAE,CAC1F,SAAS,EACT,SAAS,CACZ,CAAC;IAEF,IAAMiB,QAAQ,GAAGf,UAAU,CAACC,MAAM,CAACC,MAAM,CAACC,SAAS,CAC/C,KAAK,EACLU,OAAO,EACP;MACIf,IAAI,EAAE,MAAM;MACZY,IAAI,EAAE;QAAEZ,IAAI,EAAE;MAAU;IAC5B,CAAC,EACD,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CACrB,CAAC;IAED,OAAOkB,OAAO,CAACC,GAAG,CAAC,CAACH,OAAO,EAAEC,QAAQ,CAAC,CAAC;EAC3C,CAAC;EAAA,OAAAtB,WAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"deriveKeys.js","names":[],"sources":["../../../src/utils/internal/deriveKeys.ts"],"sourcesContent":["/*\n * Copyright 2024 The Matrix.org Foundation C.I.C.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// salt for HKDF, with 8 bytes of zeros\nconst zeroSalt = new Uint8Array(8);\n\n/**\n * Derive AES and HMAC keys from a master key.\n *\n * This is used for deriving secret storage keys: see https://spec.matrix.org/v1.11/client-server-api/#msecret_storagev1aes-hmac-sha2 (step 1).\n *\n * @param key\n * @param name\n */\nexport async function deriveKeys(key: Uint8Array<ArrayBuffer>, name: string): Promise<[CryptoKey, CryptoKey]> {\n    const hkdfkey = await globalThis.crypto.subtle.importKey(\"raw\", key, { name: \"HKDF\" }, false, [\"deriveBits\"]);\n    const keybits = await globalThis.crypto.subtle.deriveBits(\n        {\n            name: \"HKDF\",\n            salt: zeroSalt,\n            // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n            // @ts-ignore: https://github.com/microsoft/TypeScript-DOM-lib-generator/pull/879\n            info: new TextEncoder().encode(name),\n            hash: \"SHA-256\",\n        },\n        hkdfkey,\n        512,\n    );\n\n    const aesKey = keybits.slice(0, 32);\n    const hmacKey = keybits.slice(32);\n\n    const aesProm = globalThis.crypto.subtle.importKey(\"raw\", aesKey, { name: \"AES-CTR\" }, false, [\n        \"encrypt\",\n        \"decrypt\",\n    ]);\n\n    const hmacProm = globalThis.crypto.subtle.importKey(\n        \"raw\",\n        hmacKey,\n        {\n            name: \"HMAC\",\n            hash: { name: \"SHA-256\" },\n        },\n        false,\n        [\"sign\", \"verify\"],\n    );\n\n    return Promise.all([aesProm, hmacProm]);\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC;;AAElC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAe,UAAU,CAAC,GAA4B,EAAE,IAAY,EAAmC;EAC1G,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE;IAAE,IAAI,EAAE;EAAO,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;EAC7G,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CACrD;IACI,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd;IACA;IACA,IAAI,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IACpC,IAAI,EAAE;EACV,CAAC,EACD,OAAO,EACP,GACJ,CAAC;EAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;EACnC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;EAEjC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;IAAE,IAAI,EAAE;EAAU,CAAC,EAAE,KAAK,EAAE,CAC1F,SAAS,EACT,SAAS,CACZ,CAAC;EAEF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,OAAO,EACP;IACI,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE;MAAE,IAAI,EAAE;IAAU;EAC5B,CAAC,EACD,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CACrB,CAAC;EAED,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC3C","ignoreList":[]}

package/lib/utils/roomVersion.js

@@ -17,7 +17,7 @@ limitations under the License.
 /**
  * Room versions strings that we know about and do not use hydra semantics.
  */
-var PRE_HYDRA_ROOM_VERSIONS = ["1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11"];
+const PRE_HYDRA_ROOM_VERSIONS = ["1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11"];
 
 /**
  * Checks if the given room version is one where new "hydra" power level

package/lib/utils/roomVersion.js.map

@@ -1 +1 @@
-{"version":3,"file":"roomVersion.js","names":["PRE_HYDRA_ROOM_VERSIONS","shouldUseHydraForRoomVersion","roomVersion","includes"],"sources":["../../src/utils/roomVersion.ts"],"sourcesContent":["/*\nCopyright 2025 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/**\n * Room versions strings that we know about and do not use hydra semantics.\n */\nconst PRE_HYDRA_ROOM_VERSIONS = [\"1\", \"2\", \"3\", \"4\", \"5\", \"6\", \"7\", \"8\", \"9\", \"10\", \"11\"];\n\n/**\n * Checks if the given room version is one where new \"hydra\" power level\n * semantics (ie. room version 12 or later) should be used\n * (see https://github.com/matrix-org/matrix-spec-proposals/pull/4289).\n * This will return `false` for versions that are known to the js-sdk and\n * do not use hydra: any room versions unknown to the js-sdk (experimental or\n * otherwise) will cause the function to return true.\n *\n * @param roomVersion - The version of the room to check.\n * @returns `true` if hydra semantics should be used for the room version, `false` otherwise.\n */\nexport function shouldUseHydraForRoomVersion(roomVersion: string): boolean {\n    return !PRE_HYDRA_ROOM_VERSIONS.includes(roomVersion);\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,IAAMA,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;;AAEzF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,4BAA4BA,CAACC,WAAmB,EAAW;EACvE,OAAO,CAACF,uBAAuB,CAACG,QAAQ,CAACD,WAAW,CAAC;AACzD","ignoreList":[]}
+{"version":3,"file":"roomVersion.js","names":[],"sources":["../../src/utils/roomVersion.ts"],"sourcesContent":["/*\nCopyright 2025 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/**\n * Room versions strings that we know about and do not use hydra semantics.\n */\nconst PRE_HYDRA_ROOM_VERSIONS = [\"1\", \"2\", \"3\", \"4\", \"5\", \"6\", \"7\", \"8\", \"9\", \"10\", \"11\"];\n\n/**\n * Checks if the given room version is one where new \"hydra\" power level\n * semantics (ie. room version 12 or later) should be used\n * (see https://github.com/matrix-org/matrix-spec-proposals/pull/4289).\n * This will return `false` for versions that are known to the js-sdk and\n * do not use hydra: any room versions unknown to the js-sdk (experimental or\n * otherwise) will cause the function to return true.\n *\n * @param roomVersion - The version of the room to check.\n * @returns `true` if hydra semantics should be used for the room version, `false` otherwise.\n */\nexport function shouldUseHydraForRoomVersion(roomVersion: string): boolean {\n    return !PRE_HYDRA_ROOM_VERSIONS.includes(roomVersion);\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;;AAEzF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS,4BAA4B,CAAC,WAAmB,EAAW;EACvE,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,WAAW,CAAC;AACzD","ignoreList":[]}