node-opcua-crypto 1.11.0 → 2.0.0

package/dist/crypto_utils.d.ts

@@ -1,106 +0,0 @@
-/// <reference types="node" />
-import { Certificate, CertificatePEM, DER, PEM, PrivateKey, PrivateKeyPEM, PublicKey, PublicKeyPEM, Signature } from "./common";
-export declare function identifyPemType(rawKey: Buffer | string): undefined | string;
-export declare function convertPEMtoDER(raw_key: PEM): DER;
-/**
- * read a DER or PEM certificate from file
- */
-export declare function readCertificate(filename: string): Certificate;
-/**
- * read a DER or PEM certificate from file
- */
-export declare function readPublicKey(filename: string): PublicKey;
-/**
- * read a DER or PEM certificate from file
- */
-export declare function readPrivateKey(filename: string): PrivateKey;
-export declare function readCertificatePEM(filename: string): CertificatePEM;
-export declare function readPublicKeyPEM(filename: string): PublicKeyPEM;
-export declare function readPrivateKeyPEM(filename: string): PrivateKeyPEM;
-/**
- * @method readKeyPem
- * @param filename
- */
-export declare function readKeyPem(filename: string): string;
-/**
- * @method toPem
- * @param raw_key
- * @param pem
- * @return
- */
-export declare function toPem(raw_key: Buffer | string, pem: string): string;
-export declare function hexDump(buffer: Buffer, width?: number): string;
-interface MakeMessageChunkSignatureOptions {
-    signatureLength: number;
-    algorithm: string;
-    privateKey: CertificatePEM;
-}
-/**
- * @method makeMessageChunkSignature
- * @param chunk
- * @param options
- * @param options.signatureLength
- * @param options.algorithm   for example "RSA-SHA256"
- * @param options.privateKey
- * @return - the signature
- */
-export declare function makeMessageChunkSignature(chunk: Buffer, options: MakeMessageChunkSignatureOptions): Buffer;
-export interface VerifyMessageChunkSignatureOptions {
-    signatureLength?: number;
-    algorithm: string;
-    publicKey: PublicKeyPEM;
-}
-/**
- * @method verifyMessageChunkSignature
- *
- *     const signer = {
- *           signatureLength : 128,
- *           algorithm : "RSA-SHA256",
- *           publicKey: "qsdqsdqsd"
- *     };
- * @param blockToVerify
- * @param signature
- * @param options
- * @param options.signatureLength
- * @param options.algorithm    for example "RSA-SHA256"
- * @param options.publicKey
- * @return true if the signature is valid
- */
-export declare function verifyMessageChunkSignature(blockToVerify: Buffer, signature: Signature, options: VerifyMessageChunkSignatureOptions): boolean;
-export declare function makeSHA1Thumbprint(buffer: Buffer): Signature;
-export declare function setCertificateStore(store: string): string;
-export declare function read_sshkey_as_pem(filename: string): PublicKeyPEM;
-/**
- *
- * @param filename
- */
-export declare function readPrivateRsaKey(filename: string): PrivateKeyPEM;
-export declare function readPublicRsaKey(filename: string): PublicKeyPEM;
-export declare const RSA_PKCS1_OAEP_PADDING: number;
-export declare const RSA_PKCS1_PADDING: number;
-export declare enum PaddingAlgorithm {
-    RSA_PKCS1_OAEP_PADDING = 4,
-    RSA_PKCS1_PADDING = 1
-}
-export declare function publicEncrypt_native(buffer: Buffer, publicKey: PublicKeyPEM, algorithm?: PaddingAlgorithm): Buffer;
-export declare function privateDecrypt_native(buffer: Buffer, privateKey: PrivateKeyPEM, algorithm?: PaddingAlgorithm): Buffer;
-export declare const publicEncrypt: typeof publicEncrypt_native;
-export declare const privateDecrypt: typeof privateDecrypt_native;
-export declare function publicEncrypt_long(buffer: Buffer, publicKey: PublicKeyPEM, blockSize: number, padding: number, algorithm?: PaddingAlgorithm): Buffer;
-export declare function privateDecrypt_long(buffer: Buffer, privateKey: PrivateKeyPEM, blockSize: number, algorithm?: number): Buffer;
-export declare function coerceCertificatePem(certificate: Certificate | CertificatePEM): CertificatePEM;
-export declare function coercePublicKeyPem(publicKey: PublicKey | PublicKeyPEM): PublicKeyPEM;
-/***
- * @method rsa_length
- * A very expensive way to determine the rsa key length ( i.e 2048bits or 1024bits)
- * @param key  a PEM public key or a PEM rsa private key
- * @return { the key length in bytes.
- */
-export declare function rsa_length(key: PublicKeyPEM | PublicKey): number;
-export declare function extractPublicKeyFromCertificateSync(certificate: Certificate | CertificatePEM): PublicKeyPEM;
-/**
- * extract the publickey from a certificate
- * @async
- */
-export declare function extractPublicKeyFromCertificate(certificate: CertificatePEM | Certificate, callback: (err: Error | null, publicKeyPEM?: PublicKeyPEM) => void): void;
-export {};

package/dist/crypto_utils.js

@@ -1,370 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractPublicKeyFromCertificate = exports.extractPublicKeyFromCertificateSync = exports.rsa_length = exports.coercePublicKeyPem = exports.coerceCertificatePem = exports.privateDecrypt_long = exports.publicEncrypt_long = exports.privateDecrypt = exports.publicEncrypt = exports.privateDecrypt_native = exports.publicEncrypt_native = exports.PaddingAlgorithm = exports.RSA_PKCS1_PADDING = exports.RSA_PKCS1_OAEP_PADDING = exports.readPublicRsaKey = exports.readPrivateRsaKey = exports.read_sshkey_as_pem = exports.setCertificateStore = exports.makeSHA1Thumbprint = exports.verifyMessageChunkSignature = exports.makeMessageChunkSignature = exports.hexDump = exports.toPem = exports.readKeyPem = exports.readPrivateKeyPEM = exports.readPublicKeyPEM = exports.readCertificatePEM = exports.readPrivateKey = exports.readPublicKey = exports.readCertificate = exports.convertPEMtoDER = exports.identifyPemType = void 0;
-// tslint:disabled:no-var-requires
-/**
- * @module node_opcua_crypto
- */
-const constants = require("constants");
-const crypto = require("crypto");
-const fs = require("fs");
-const path = require("path");
-const buffer_utils_1 = require("./buffer_utils");
-const crypto_explore_certificate_1 = require("./crypto_explore_certificate");
-const assert = require("assert");
-// tslint:disable:no-var-requires
-const hexy = require("hexy");
-const jsrsasign = require("jsrsasign");
-const sshpk = require("sshpk");
-const PEM_REGEX = /^(-----BEGIN (.*)-----\r?\n([\/+=a-zA-Z0-9\r\n]*)\r?\n-----END \2-----\r?\n)/gm;
-const PEM_TYPE_REGEX = /^(-----BEGIN (.*)-----)/m;
-// Copyright 2012 The Obvious Corporation.
-// identifyPemType
-/*=
- * Extract and identify the PEM file type represented in the given
- * buffer. Returns the extracted type string or undefined if the
- * buffer doesn't seem to be any sort of PEM format file.
- */
-function identifyPemType(rawKey) {
-    if (rawKey instanceof Buffer) {
-        rawKey = rawKey.toString("utf8");
-    }
-    const match = PEM_TYPE_REGEX.exec(rawKey);
-    return !match ? undefined : match[2];
-}
-exports.identifyPemType = identifyPemType;
-function convertPEMtoDER(raw_key) {
-    let match;
-    let pemType;
-    let base64str;
-    const parts = [];
-    // tslint:disable-next-line:no-conditional-assignment
-    while ((match = PEM_REGEX.exec(raw_key)) !== null) {
-        pemType = match[2];
-        // pemType shall be "RSA PRIVATE KEY" , "PUBLIC KEY", "CERTIFICATE"
-        base64str = match[3];
-        base64str = base64str.replace(/\r?\n/g, "");
-        parts.push(Buffer.from(base64str, "base64"));
-    }
-    return crypto_explore_certificate_1.combine_der(parts);
-}
-exports.convertPEMtoDER = convertPEMtoDER;
-function _readPemFile(filename) {
-    assert(typeof filename === "string");
-    return fs.readFileSync(filename, "ascii");
-}
-function _readPemOrDerFileAsDER(filename) {
-    if (filename.match(/.*\.der/)) {
-        return fs.readFileSync(filename);
-    }
-    const raw_key = _readPemFile(filename);
-    return convertPEMtoDER(raw_key);
-}
-/**
- * read a DER or PEM certificate from file
- */
-function readCertificate(filename) {
-    return _readPemOrDerFileAsDER(filename);
-}
-exports.readCertificate = readCertificate;
-/**
- * read a DER or PEM certificate from file
- */
-function readPublicKey(filename) {
-    return _readPemOrDerFileAsDER(filename);
-}
-exports.readPublicKey = readPublicKey;
-/**
- * read a DER or PEM certificate from file
- */
-function readPrivateKey(filename) {
-    return _readPemOrDerFileAsDER(filename);
-}
-exports.readPrivateKey = readPrivateKey;
-function readCertificatePEM(filename) {
-    return _readPemFile(filename);
-}
-exports.readCertificatePEM = readCertificatePEM;
-function readPublicKeyPEM(filename) {
-    return _readPemFile(filename);
-}
-exports.readPublicKeyPEM = readPublicKeyPEM;
-function readPrivateKeyPEM(filename) {
-    return _readPemFile(filename);
-}
-exports.readPrivateKeyPEM = readPrivateKeyPEM;
-/**
- * @method readKeyPem
- * @param filename
- */
-function readKeyPem(filename) {
-    const raw_key = fs.readFileSync(filename, "utf8");
-    const pemType = identifyPemType(raw_key);
-    assert(typeof pemType === "string"); // must have a valid pem type
-    return raw_key;
-}
-exports.readKeyPem = readKeyPem;
-/**
- * @method toPem
- * @param raw_key
- * @param pem
- * @return
- */
-function toPem(raw_key, pem) {
-    assert(raw_key, "expecting a key");
-    assert(typeof pem === "string");
-    let pemType = identifyPemType(raw_key);
-    if (pemType) {
-        return raw_key;
-    }
-    else {
-        pemType = pem;
-        assert(["CERTIFICATE REQUEST", "CERTIFICATE", "RSA PRIVATE KEY", "PUBLIC KEY", "X509 CRL"].indexOf(pemType) >= 0);
-        let b = raw_key.toString("base64");
-        let str = "-----BEGIN " + pemType + "-----\n";
-        while (b.length) {
-            str += b.substr(0, 64) + "\n";
-            b = b.substr(64);
-        }
-        str += "-----END " + pemType + "-----";
-        str += "\n";
-        return str;
-    }
-}
-exports.toPem = toPem;
-// istanbul ignore next
-function hexDump(buffer, width) {
-    if (!buffer) {
-        return "<>";
-    }
-    width = width || 32;
-    if (buffer.length > 1024) {
-        return hexy.hexy(buffer.slice(0, 1024), { width, format: "twos" }) + "\n .... ( " + buffer.length + ")";
-    }
-    else {
-        return hexy.hexy(buffer, { width, format: "twos" });
-    }
-}
-exports.hexDump = hexDump;
-/**
- * @method makeMessageChunkSignature
- * @param chunk
- * @param options
- * @param options.signatureLength
- * @param options.algorithm   for example "RSA-SHA256"
- * @param options.privateKey
- * @return - the signature
- */
-function makeMessageChunkSignature(chunk, options) {
-    assert(options.hasOwnProperty("algorithm"));
-    assert(chunk instanceof Buffer);
-    assert(["RSA PRIVATE KEY", "PRIVATE KEY"].indexOf(identifyPemType(options.privateKey)) >= 0);
-    // signature length = 128 bytes
-    const signer = crypto.createSign(options.algorithm);
-    signer.update(chunk);
-    const signature = signer.sign(options.privateKey);
-    assert(!options.signatureLength || signature.length === options.signatureLength);
-    return signature; // Buffer
-}
-exports.makeMessageChunkSignature = makeMessageChunkSignature;
-/**
- * @method verifyMessageChunkSignature
- *
- *     const signer = {
- *           signatureLength : 128,
- *           algorithm : "RSA-SHA256",
- *           publicKey: "qsdqsdqsd"
- *     };
- * @param blockToVerify
- * @param signature
- * @param options
- * @param options.signatureLength
- * @param options.algorithm    for example "RSA-SHA256"
- * @param options.publicKey
- * @return true if the signature is valid
- */
-function verifyMessageChunkSignature(blockToVerify, signature, options) {
-    assert(blockToVerify instanceof Buffer);
-    assert(signature instanceof Buffer);
-    assert(typeof options.publicKey === "string");
-    assert(identifyPemType(options.publicKey));
-    const verify = crypto.createVerify(options.algorithm);
-    verify.update(blockToVerify);
-    return verify.verify(options.publicKey, signature);
-}
-exports.verifyMessageChunkSignature = verifyMessageChunkSignature;
-function makeSHA1Thumbprint(buffer) {
-    return crypto.createHash("sha1").update(buffer).digest();
-}
-exports.makeSHA1Thumbprint = makeSHA1Thumbprint;
-let __certificate_store = path.join(__dirname, "../../certificates/");
-function setCertificateStore(store) {
-    const old_store = __certificate_store;
-    __certificate_store = store;
-    return old_store;
-}
-exports.setCertificateStore = setCertificateStore;
-function read_sshkey_as_pem(filename) {
-    if (filename.substr(0, 1) !== ".") {
-        filename = __certificate_store + filename;
-    }
-    const key = fs.readFileSync(filename, "ascii");
-    const sshKey = sshpk.parseKey(key, "ssh");
-    return sshKey.toString("pkcs8");
-}
-exports.read_sshkey_as_pem = read_sshkey_as_pem;
-/**
- *
- * @param filename
- */
-function readPrivateRsaKey(filename) {
-    if (filename.substr(0, 1) !== "." && !fs.existsSync(filename)) {
-        filename = __certificate_store + filename;
-    }
-    return fs.readFileSync(filename, "ascii");
-}
-exports.readPrivateRsaKey = readPrivateRsaKey;
-function readPublicRsaKey(filename) {
-    return readPrivateRsaKey(filename);
-}
-exports.readPublicRsaKey = readPublicRsaKey;
-// Basically when you =encrypt something using an RSA key (whether public or private), the encrypted value must
-// be smaller than the key (due to the maths used to do the actual encryption). So if you have a 1024-bit key,
-// in theory you could encrypt any 1023-bit value (or a 1024-bit value smaller than the key) with that key.
-// However, the PKCS#1 standard, which OpenSSL uses, specifies a padding scheme (so you can encrypt smaller
-// quantities without losing security), and that padding scheme takes a minimum of 11 bytes (it will be longer
-// if the value you're encrypting is smaller). So the highest number of bits you can encrypt with a 1024-bit
-// key is 936 bits because of this (unless you disable the padding by adding the OPENSSL_NO_PADDING flag,
-// in which case you can go up to 1023-1024 bits). With a 2048-bit key it's 1960 bits instead.
-exports.RSA_PKCS1_OAEP_PADDING = constants.RSA_PKCS1_OAEP_PADDING;
-exports.RSA_PKCS1_PADDING = constants.RSA_PKCS1_PADDING;
-var PaddingAlgorithm;
-(function (PaddingAlgorithm) {
-    PaddingAlgorithm[PaddingAlgorithm["RSA_PKCS1_OAEP_PADDING"] = 4] = "RSA_PKCS1_OAEP_PADDING";
-    PaddingAlgorithm[PaddingAlgorithm["RSA_PKCS1_PADDING"] = 1] = "RSA_PKCS1_PADDING";
-})(PaddingAlgorithm = exports.PaddingAlgorithm || (exports.PaddingAlgorithm = {}));
-assert(PaddingAlgorithm.RSA_PKCS1_OAEP_PADDING === constants.RSA_PKCS1_OAEP_PADDING);
-assert(PaddingAlgorithm.RSA_PKCS1_PADDING === constants.RSA_PKCS1_PADDING);
-// publicEncrypt and  privateDecrypt only work with
-// small buffer that depends of the key size.
-function publicEncrypt_native(buffer, publicKey, algorithm) {
-    if (algorithm === undefined) {
-        algorithm = PaddingAlgorithm.RSA_PKCS1_PADDING;
-    }
-    assert(algorithm === exports.RSA_PKCS1_PADDING || algorithm === exports.RSA_PKCS1_OAEP_PADDING);
-    assert(buffer instanceof Buffer, "Expecting a buffer");
-    return crypto.publicEncrypt({
-        key: publicKey,
-        padding: algorithm,
-    }, buffer);
-}
-exports.publicEncrypt_native = publicEncrypt_native;
-function privateDecrypt_native(buffer, privateKey, algorithm) {
-    if (algorithm === undefined) {
-        algorithm = PaddingAlgorithm.RSA_PKCS1_PADDING;
-    }
-    assert(algorithm === exports.RSA_PKCS1_PADDING || algorithm === exports.RSA_PKCS1_OAEP_PADDING);
-    assert(buffer instanceof Buffer, "Expecting a buffer");
-    try {
-        return crypto.privateDecrypt({
-            key: privateKey,
-            padding: algorithm,
-        }, buffer);
-    }
-    catch (err) {
-        return Buffer.alloc(1);
-    }
-}
-exports.privateDecrypt_native = privateDecrypt_native;
-exports.publicEncrypt = publicEncrypt_native;
-exports.privateDecrypt = privateDecrypt_native;
-function publicEncrypt_long(buffer, publicKey, blockSize, padding, algorithm) {
-    if (algorithm === undefined) {
-        algorithm = PaddingAlgorithm.RSA_PKCS1_PADDING;
-    }
-    assert(algorithm === exports.RSA_PKCS1_PADDING || algorithm === exports.RSA_PKCS1_OAEP_PADDING);
-    const chunk_size = blockSize - padding;
-    const nbBlocks = Math.ceil(buffer.length / chunk_size);
-    const outputBuffer = buffer_utils_1.createFastUninitializedBuffer(nbBlocks * blockSize);
-    for (let i = 0; i < nbBlocks; i++) {
-        const currentBlock = buffer.slice(chunk_size * i, chunk_size * (i + 1));
-        const encrypted_chunk = exports.publicEncrypt(currentBlock, publicKey, algorithm);
-        assert(encrypted_chunk.length === blockSize);
-        encrypted_chunk.copy(outputBuffer, i * blockSize);
-    }
-    return outputBuffer;
-}
-exports.publicEncrypt_long = publicEncrypt_long;
-function privateDecrypt_long(buffer, privateKey, blockSize, algorithm) {
-    algorithm = algorithm || exports.RSA_PKCS1_PADDING;
-    assert(algorithm === exports.RSA_PKCS1_PADDING || algorithm === exports.RSA_PKCS1_OAEP_PADDING);
-    const nbBlocks = Math.ceil(buffer.length / blockSize);
-    const outputBuffer = buffer_utils_1.createFastUninitializedBuffer(nbBlocks * blockSize);
-    let total_length = 0;
-    for (let i = 0; i < nbBlocks; i++) {
-        const currentBlock = buffer.slice(blockSize * i, Math.min(blockSize * (i + 1), buffer.length));
-        const decrypted_buf = exports.privateDecrypt(currentBlock, privateKey, algorithm);
-        decrypted_buf.copy(outputBuffer, total_length);
-        total_length += decrypted_buf.length;
-    }
-    return outputBuffer.slice(0, total_length);
-}
-exports.privateDecrypt_long = privateDecrypt_long;
-function coerceCertificatePem(certificate) {
-    if (certificate instanceof Buffer) {
-        certificate = toPem(certificate, "CERTIFICATE");
-    }
-    assert(typeof certificate === "string");
-    return certificate;
-}
-exports.coerceCertificatePem = coerceCertificatePem;
-function coercePublicKeyPem(publicKey) {
-    if (publicKey instanceof Buffer) {
-        publicKey = toPem(publicKey, "PUBLIC KEY");
-    }
-    assert(typeof publicKey === "string");
-    return publicKey;
-}
-exports.coercePublicKeyPem = coercePublicKeyPem;
-/***
- * @method rsa_length
- * A very expensive way to determine the rsa key length ( i.e 2048bits or 1024bits)
- * @param key  a PEM public key or a PEM rsa private key
- * @return { the key length in bytes.
- */
-function rsa_length(key) {
-    key = coercePublicKeyPem(key);
-    assert(typeof key === "string");
-    const a = jsrsasign.KEYUTIL.getKey(key);
-    return a.n.toString(16).length / 2;
-}
-exports.rsa_length = rsa_length;
-function extractPublicKeyFromCertificateSync(certificate) {
-    certificate = coerceCertificatePem(certificate);
-    const key = jsrsasign.KEYUTIL.getKey(certificate);
-    const publicKeyAsPem = jsrsasign.KEYUTIL.getPEM(key);
-    assert(typeof publicKeyAsPem === "string");
-    return publicKeyAsPem;
-}
-exports.extractPublicKeyFromCertificateSync = extractPublicKeyFromCertificateSync;
-// https://github.com/kjur/jsrsasign/blob/master/x509-1.1.js
-// tool to analyse asn1 base64 blocks : http://lapo.it/asn1js
-/**
- * extract the publickey from a certificate
- * @async
- */
-function extractPublicKeyFromCertificate(certificate, callback) {
-    let err1 = null;
-    let keyPem;
-    try {
-        keyPem = extractPublicKeyFromCertificateSync(certificate);
-    }
-    catch (err) {
-        err1 = err;
-    }
-    setImmediate(() => {
-        callback(err1, keyPem);
-    });
-}
-exports.extractPublicKeyFromCertificate = extractPublicKeyFromCertificate;
-//# sourceMappingURL=crypto_utils.js.map

package/dist/crypto_utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto_utils.js","sourceRoot":"","sources":["../lib/crypto_utils.ts"],"names":[],"mappings":";;;AAAA,kCAAkC;AAClC;;GAEG;AACH,uCAAuC;AACvC,iCAAiC;AACjC,yBAAyB;AACzB,6BAA6B;AAC7B,iDAA+D;AAE/D,6EAA2D;AAC3D,iCAAiC;AAEjC,iCAAiC;AACjC,6BAA8B;AAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AACvC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAE/B,MAAM,SAAS,GAAG,gFAAgF,CAAC;AAEnG,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAClD,0CAA0C;AAC1C,kBAAkB;AAElB;;;;GAIG;AACH,SAAgB,eAAe,CAAC,MAAuB;IACnD,IAAI,MAAM,YAAY,MAAM,EAAE;QAC1B,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;KACpC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAND,0CAMC;AAED,SAAgB,eAAe,CAAC,OAAY;IACxC,IAAI,KAAU,CAAC;IACf,IAAI,OAAO,CAAC;IACZ,IAAI,SAAS,CAAC;IAEd,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,qDAAqD;IACrD,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE;QAC/C,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,mEAAmE;QACnE,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;KAChD;IACD,OAAO,wCAAW,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAfD,0CAeC;AAED,SAAS,YAAY,CAAC,QAAgB;IAClC,MAAM,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB;IAC5C,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QAC3B,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAW,CAAC;KAC9C;IACD,MAAM,OAAO,GAAW,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,QAAgB;IAC5C,OAAO,sBAAsB,CAAC,QAAQ,CAAgB,CAAC;AAC3D,CAAC;AAFD,0CAEC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,QAAgB;IAC1C,OAAO,sBAAsB,CAAC,QAAQ,CAAc,CAAC;AACzD,CAAC;AAFD,sCAEC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,QAAgB;IAC3C,OAAO,sBAAsB,CAAC,QAAQ,CAAe,CAAC;AAC1D,CAAC;AAFD,wCAEC;AAED,SAAgB,kBAAkB,CAAC,QAAgB;IAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAFD,gDAEC;AAED,SAAgB,gBAAgB,CAAC,QAAgB;IAC7C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAFD,4CAEC;AAED,SAAgB,iBAAiB,CAAC,QAAgB;IAC9C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAFD,8CAEC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B;IAClE,OAAO,OAAO,CAAC;AACnB,CAAC;AALD,gCAKC;AAED;;;;;GAKG;AACH,SAAgB,KAAK,CAAC,OAAwB,EAAE,GAAW;IACvD,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACnC,MAAM,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,OAAO,EAAE;QACT,OAAO,OAAiB,CAAC;KAC5B;SAAM;QACH,OAAO,GAAG,GAAG,CAAC;QACd,MAAM,CAAC,CAAC,qBAAqB,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClH,IAAI,CAAC,GAAI,OAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,GAAG,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;QAC9C,OAAO,CAAC,CAAC,MAAM,EAAE;YACb,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;YAC9B,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;SACpB;QACD,GAAG,IAAI,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC;QACvC,GAAG,IAAI,IAAI,CAAC;QACZ,OAAO,GAAG,CAAC;KACd;AACL,CAAC;AAnBD,sBAmBC;AAED,uBAAuB;AACvB,SAAgB,OAAO,CAAC,MAAc,EAAE,KAAc;IAClD,IAAI,CAAC,MAAM,EAAE;QACT,OAAO,IAAI,CAAC;KACf;IACD,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;IACpB,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,YAAY,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;KAC3G;SAAM;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;KACvD;AACL,CAAC;AAVD,0BAUC;AAQD;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CAAC,KAAa,EAAE,OAAyC;IAC9F,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,YAAY,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACvG,+BAA+B;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACjF,OAAO,SAAmB,CAAC,CAAC,SAAS;AACzC,CAAC;AAVD,8DAUC;AAQD;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,2BAA2B,CACvC,aAAqB,EACrB,SAAoB,EACpB,OAA2C;IAE3C,MAAM,CAAC,aAAa,YAAY,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC9C,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAbD,kEAaC;AAED,SAAgB,kBAAkB,CAAC,MAAc;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AAFD,gDAEC;AAED,IAAI,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAEtE,SAAgB,mBAAmB,CAAC,KAAa;IAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC;IACtC,mBAAmB,GAAG,KAAK,CAAC;IAC5B,OAAO,SAAS,CAAC;AACrB,CAAC;AAJD,kDAIC;AAED,SAAgB,kBAAkB,CAAC,QAAgB;IAC/C,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;QAC/B,QAAQ,GAAG,mBAAmB,GAAG,QAAQ,CAAC;KAC7C;IACD,MAAM,GAAG,GAAW,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAQ,CAAC;AAC3C,CAAC;AARD,gDAQC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,QAAgB;IAC9C,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;QAC3D,QAAQ,GAAG,mBAAmB,GAAG,QAAQ,CAAC;KAC7C;IACD,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAW,CAAC;AACxD,CAAC;AALD,8CAKC;AAED,SAAgB,gBAAgB,CAAC,QAAgB;IAC7C,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAFD,4CAEC;AAED,+GAA+G;AAC/G,8GAA8G;AAC9G,2GAA2G;AAC3G,2GAA2G;AAC3G,8GAA8G;AAC9G,4GAA4G;AAC5G,yGAAyG;AACzG,8FAA8F;AAEjF,QAAA,sBAAsB,GAAW,SAAS,CAAC,sBAAsB,CAAC;AAClE,QAAA,iBAAiB,GAAW,SAAS,CAAC,iBAAiB,CAAC;AAErE,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IACxB,2FAA0B,CAAA;IAC1B,iFAAqB,CAAA;AACzB,CAAC,EAHW,gBAAgB,GAAhB,wBAAgB,KAAhB,wBAAgB,QAG3B;AAED,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,KAAK,SAAS,CAAC,sBAAsB,CAAC,CAAC;AACrF,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,KAAK,SAAS,CAAC,iBAAiB,CAAC,CAAC;AAE3E,mDAAmD;AACnD,6CAA6C;AAC7C,SAAgB,oBAAoB,CAAC,MAAc,EAAE,SAAuB,EAAE,SAA4B;IACtG,IAAI,SAAS,KAAK,SAAS,EAAE;QACzB,SAAS,GAAG,gBAAgB,CAAC,iBAAiB,CAAC;KAClD;IACD,MAAM,CAAC,SAAS,KAAK,yBAAiB,IAAI,SAAS,KAAK,8BAAsB,CAAC,CAAC;IAChF,MAAM,CAAC,MAAM,YAAY,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,aAAa,CACvB;QACI,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,SAAS;KACrB,EACD,MAAM,CACT,CAAC;AACN,CAAC;AAbD,oDAaC;AAED,SAAgB,qBAAqB,CAAC,MAAc,EAAE,UAAyB,EAAE,SAA4B;IACzG,IAAI,SAAS,KAAK,SAAS,EAAE;QACzB,SAAS,GAAG,gBAAgB,CAAC,iBAAiB,CAAC;KAClD;IAED,MAAM,CAAC,SAAS,KAAK,yBAAiB,IAAI,SAAS,KAAK,8BAAsB,CAAC,CAAC;IAChF,MAAM,CAAC,MAAM,YAAY,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACvD,IAAI;QACA,OAAO,MAAM,CAAC,cAAc,CACxB;YACI,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,SAAS;SACrB,EACD,MAAM,CACT,CAAC;KACL;IAAC,OAAO,GAAG,EAAE;QACV,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC1B;AACL,CAAC;AAlBD,sDAkBC;AAEY,QAAA,aAAa,GAAG,oBAAoB,CAAC;AACrC,QAAA,cAAc,GAAG,qBAAqB,CAAC;AAEpD,SAAgB,kBAAkB,CAC9B,MAAc,EACd,SAAuB,EACvB,SAAiB,EACjB,OAAe,EACf,SAA4B;IAE5B,IAAI,SAAS,KAAK,SAAS,EAAE;QACzB,SAAS,GAAG,gBAAgB,CAAC,iBAAiB,CAAC;KAClD;IACD,MAAM,CAAC,SAAS,KAAK,yBAAiB,IAAI,SAAS,KAAK,8BAAsB,CAAC,CAAC;IAEhF,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,4CAA6B,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,qBAAa,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC1E,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC7C,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;KACrD;IACD,OAAO,YAAY,CAAC;AACxB,CAAC;AAvBD,gDAuBC;AAED,SAAgB,mBAAmB,CAAC,MAAc,EAAE,UAAyB,EAAE,SAAiB,EAAE,SAAkB;IAChH,SAAS,GAAG,SAAS,IAAI,yBAAiB,CAAC;IAC3C,MAAM,CAAC,SAAS,KAAK,yBAAiB,IAAI,SAAS,KAAK,8BAAsB,CAAC,CAAC;IAEhF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEtD,MAAM,YAAY,GAAG,4CAA6B,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IAEzE,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,MAAM,aAAa,GAAG,sBAAc,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAC1E,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC/C,YAAY,IAAI,aAAa,CAAC,MAAM,CAAC;KACxC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAhBD,kDAgBC;AAED,SAAgB,oBAAoB,CAAC,WAAyC;IAC1E,IAAI,WAAW,YAAY,MAAM,EAAE;QAC/B,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;KACnD;IACD,MAAM,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC;IACxC,OAAO,WAAW,CAAC;AACvB,CAAC;AAND,oDAMC;AAED,SAAgB,kBAAkB,CAAC,SAAmC;IAClE,IAAI,SAAS,YAAY,MAAM,EAAE;QAC7B,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;KAC9C;IACD,MAAM,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC;IACtC,OAAO,SAAS,CAAC;AACrB,CAAC;AAND,gDAMC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,GAA6B;IACpD,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACvC,CAAC;AALD,gCAKC;AAED,SAAgB,mCAAmC,CAAC,WAAyC;IACzF,WAAW,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,CAAC,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;IAC3C,OAAO,cAAc,CAAC;AAC1B,CAAC;AAND,kFAMC;AAED,4DAA4D;AAC5D,6DAA6D;AAC7D;;;GAGG;AACH,SAAgB,+BAA+B,CAC3C,WAAyC,EACzC,QAAkE;IAElE,IAAI,IAAI,GAAQ,IAAI,CAAC;IACrB,IAAI,MAAoB,CAAC;IACzB,IAAI;QACA,MAAM,GAAG,mCAAmC,CAAC,WAAW,CAAC,CAAC;KAC7D;IAAC,OAAO,GAAG,EAAE;QACV,IAAI,GAAG,GAAG,CAAC;KACd;IACD,YAAY,CAAC,GAAG,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACP,CAAC;AAdD,0EAcC"}

package/dist/derived_keys.d.ts

@@ -1,72 +0,0 @@
-/// <reference types="node" />
-import { Nonce } from "./common";
-import { VerifyMessageChunkSignatureOptions } from "./crypto_utils";
-export declare function makePseudoRandomBuffer(secret: Nonce, seed: Nonce, minLength: number, sha1or256: "SHA1" | "SHA256"): Buffer;
-export interface ComputeDerivedKeysOptions {
-    signatureLength: number;
-    signingKeyLength: number;
-    encryptingKeyLength: number;
-    encryptingBlockSize: number;
-    algorithm: string;
-    sha1or256?: "SHA1" | "SHA256";
-}
-export interface DerivedKeys extends ComputeDerivedKeysOptions {
-    signatureLength: number;
-    signingKeyLength: number;
-    encryptingKeyLength: number;
-    encryptingBlockSize: number;
-    algorithm: string;
-    sha1or256: "SHA1" | "SHA256";
-    signingKey: Buffer;
-    encryptingKey: Buffer;
-    initializationVector: Buffer;
-}
-export declare function computeDerivedKeys(secret: Nonce, seed: Nonce, options: ComputeDerivedKeysOptions): DerivedKeys;
-/**
- * @method reduceLength
- * @param buffer
- * @param byteToRemove
- * @return buffer
- */
-export declare function reduceLength(buffer: Buffer, byteToRemove: number): Buffer;
-/**
- * @method removePadding
- * @param buffer
- * @return buffer with padding removed
- */
-export declare function removePadding(buffer: Buffer): Buffer;
-export declare type VerifyChunkSignatureOptions = VerifyMessageChunkSignatureOptions;
-/**
- * @method verifyChunkSignature
- *
- *     const signer = {
- *           signatureLength : 128,
- *           algorithm : "RSA-SHA256",
- *           public_key: "qsdqsdqsd"
- *     };
- *
- * @param chunk  The message chunk to verify.
- * @param options
- * @param options.signatureLength
- * @param options.algorithm  the algorithm.
- * @param options.publicKey
- * @return {*}
- */
-export declare function verifyChunkSignature(chunk: Buffer, options: VerifyChunkSignatureOptions): boolean;
-export declare function computePaddingFooter(buffer: Buffer, derivedKeys: DerivedKeys): Buffer;
-export declare function encryptBufferWithDerivedKeys(buffer: Buffer, derivedKeys: DerivedKeys): Buffer;
-export declare function decryptBufferWithDerivedKeys(buffer: Buffer, derivedKeys: DerivedKeys): Buffer;
-/**
- * @method makeMessageChunkSignatureWithDerivedKeys
- * @param message
- * @param derivedKeys
- * @return
- */
-export declare function makeMessageChunkSignatureWithDerivedKeys(message: Buffer, derivedKeys: DerivedKeys): Buffer;
-/**
- * @method verifyChunkSignatureWithDerivedKeys
- * @param chunk
- * @param derivedKeys
- * @return
- */
-export declare function verifyChunkSignatureWithDerivedKeys(chunk: Buffer, derivedKeys: DerivedKeys): boolean;