quantum-resistant-rustykey 0.13.5 → 0.13.7

package/README.md

@@ -4,8 +4,44 @@
 [![docs](https://img.shields.io/badge/docs-GitHub%20Pages-1a5f4a)](https://antonymott.github.io/quantum-resistant-rustykey/)
 ![Node v26.7.0](https://img.shields.io/badge/node-v26.7.0-blue.svg)
 
-TypeScript-first **WebAssembly post-quantum** crypto for Node and the browser — SQIsign, ML-DSA, FN-DSA, SLH-DSA, ML-KEM.  
-RustyKey® is a **FIDO Alliance** member.
+TypeScript-first **WebAssembly and WebGPU\* quantum-resistant** crypto for Node and browser — SQIsign, ML-DSA, FN-DSA, SLH-DSA, ML-KEM.  
+RustyKey® is a **FIDO® Alliance** member.
+
+> \*Only the SQIsign algorithm ships WebGPU-accelerated variants, at all three security 
+> levels (L5, L3, L1). We introduced them experimentally, since several of SQIsign's 
+> isogeny computations are GPU-parallelizable, and offloading them to WebGPU 
+> meaningfully speeds up signature creation over the WebAssembly path (itself already 
+> faster than plain JS) — typically 1.25x–1.8x, depending on security level and GPU.
+>
+> **⚠️ Treat WebGPU variants as experimental — no production use at all — until v1.0.0.** 
+> Combining WebAssembly and WebGPU with the inherent mathematical properties of isogenies 
+> shifts the most likely attack vectors toward algorithmic side-channels, GPU 
+> memory-architecture quirks, and memory-safety mismatches at the Wasm/WGSL translation 
+> boundary (full analysis: `docs/security/threat-model.md`). This risk is more likely to 
+> affect the WebGPU-accelerated path — the WebAssembly-only implementation is less likely 
+> affected by these GPU-specific vectors.
+>
+> These WebGPU variants are **browser-only** and require the page to be served with 
+> COOP and COEP headers so that `self.crossOriginIsolated === true`. Without cross-origin 
+> isolation, WebGPU compute cannot be used at all — the library detects this and 
+> automatically falls back to the WebAssembly implementation, which is also the 
+> default (and only) backend in Node.
+>
+> **Do not patch out or bypass the `crossOriginIsolated` check to force WebGPU execution 
+> on a non-isolated page.** That check is not a convenience gate — it enforces the same 
+> isolation boundary that limits the cross-tab cache-timing and high-resolution-timer 
+> attacks this package's WebGPU path is otherwise exposed to. The same applies if your 
+> own application runs keygen and other, untrusted code in the same tab, worker, or 
+> execution context even with the check fully intact — that is not isolation, it's just 
+> two things sharing a room. Builds or integrations that do either of these fall outside 
+> this package's threat model and support/disclosure scope — key-recovery incidents on 
+> such setups should not be attributed to the maintained package's supported 
+> configuration.
+>
+> **Think you've found a genuine key-recovery or forgery issue under a properly isolated 
+> configuration?** Please report it per `SECURITY.md` before sharing it publicly or with 
+> standards bodies — it defines what's in scope and includes a safe-harbor commitment for 
+> good-faith research.
 
 ```bash
 pnpm i quantum-resistant-rustykey@latest
@@ -13,6 +49,12 @@ pnpm i quantum-resistant-rustykey@latest
 
 TypeScript types are included (`dist/index.d.ts`) — no `@types/quantum-resistant-rustykey`.
 
+### NIST™ approval status: quantum resistant algorithms
+- ML-DSA, FN-DSA, SLH-DSA, ML-KEM [NIST™ approved](https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards)
+- SQIsign [NIST™ NOT YET approved, advanced to round 3](https://csrc.nist.gov/projects/pqc-dig-sig/round-3-additional-signatures)
+
+A model running in the browser eventually becomes a sequence of GPU operations: matrix multiplications, normalizations, convolutions, attention primitives, quantization operations, data-layout transformations, and many more. WebGPU makes these operations available across modern browsers through a portable API, while WGSL provides a common language for the shaders that execute them.
+
 **Docs:** [antonymott.github.io/quantum-resistant-rustykey](https://antonymott.github.io/quantum-resistant-rustykey/)  
 **Live testbed:** [pqc.rustykey.me](https://pqc.rustykey.me)  
 **License:** ISC

package/dist/index.js

@@ -39,10 +39,7 @@ var wasm_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -319,12 +316,13 @@ function _isSupportedCryptoKey$2(key) {
 	return key instanceof CryptoKey && keyIdKey$2 in key && key[keyIdKey$2] == noClone$2 && internalKeyData$2.has(key);
 }
 function toBase64url$2(data) {
-	return btoa(String.fromCharCode(...data)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+	return data.toBase64({
+		alphabet: "base64url",
+		omitPadding: true
+	});
 }
 function fromBase64url$2(base64url) {
-	const base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
-	const binary = atob(base64 + "===".slice((base64.length + 3) % 4));
-	return Uint8Array.from(binary, (c) => c.charCodeAt(0));
+	return Uint8Array.fromBase64(base64url, { alphabet: "base64url" });
 }
 var PUBLICKEY_BYTES$2 = 1184;
 var SECRETKEY_BYTES$2 = 2400;
@@ -682,10 +680,7 @@ var wasm_module_512_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -962,12 +957,13 @@ function _isSupportedCryptoKey$1(key) {
 	return key instanceof CryptoKey && keyIdKey$1 in key && key[keyIdKey$1] == noClone$1 && internalKeyData$1.has(key);
 }
 function toBase64url$1(data) {
-	return btoa(String.fromCharCode(...data)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+	return data.toBase64({
+		alphabet: "base64url",
+		omitPadding: true
+	});
 }
 function fromBase64url$1(base64url) {
-	const base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
-	const binary = atob(base64 + "===".slice((base64.length + 3) % 4));
-	return Uint8Array.from(binary, (c) => c.charCodeAt(0));
+	return Uint8Array.fromBase64(base64url, { alphabet: "base64url" });
 }
 var PUBLICKEY_BYTES$1 = 800;
 var SECRETKEY_BYTES$1 = 1632;
@@ -1325,10 +1321,7 @@ var wasm_module_1024_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -1605,12 +1598,13 @@ function _isSupportedCryptoKey(key) {
 	return key instanceof CryptoKey && keyIdKey in key && key[keyIdKey] == noClone && internalKeyData.has(key);
 }
 function toBase64url(data) {
-	return btoa(String.fromCharCode(...data)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+	return data.toBase64({
+		alphabet: "base64url",
+		omitPadding: true
+	});
 }
 function fromBase64url(base64url) {
-	const base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
-	const binary = atob(base64 + "===".slice((base64.length + 3) % 4));
-	return Uint8Array.from(binary, (c) => c.charCodeAt(0));
+	return Uint8Array.fromBase64(base64url, { alphabet: "base64url" });
 }
 var PUBLICKEY_BYTES = 1568;
 var SECRETKEY_BYTES = 3168;
@@ -2009,10 +2003,7 @@ var falcon_512_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -2256,10 +2247,7 @@ var falcon_1024_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -2608,10 +2596,7 @@ var mldsa_65_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -2845,10 +2830,7 @@ var mldsa_87_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -3307,14 +3289,7 @@ var sqisign_lvl1_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			if (typeof ENVIRONMENT_IS_NODE != "undefined" && ENVIRONMENT_IS_NODE) {
-				var buf = Buffer.from(s, "base64");
-				return new Uint8Array(buf.buffer, buf.byteOffset, buf.length);
-			}
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -3679,14 +3654,7 @@ var sqisign_lvl3_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			if (typeof ENVIRONMENT_IS_NODE != "undefined" && ENVIRONMENT_IS_NODE) {
-				var buf = Buffer.from(s, "base64");
-				return new Uint8Array(buf.buffer, buf.byteOffset, buf.length);
-			}
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;
@@ -4051,14 +4019,7 @@ var sqisign_lvl5_module_default = (() => {
 		var wasmBinary;
 		if (typeof WebAssembly != "object") abort("no native wasm support detected");
 		function intArrayFromBase64(s) {
-			if (typeof ENVIRONMENT_IS_NODE != "undefined" && ENVIRONMENT_IS_NODE) {
-				var buf = Buffer.from(s, "base64");
-				return new Uint8Array(buf.buffer, buf.byteOffset, buf.length);
-			}
-			var decoded = atob(s);
-			var bytes = new Uint8Array(decoded.length);
-			for (var i = 0; i < decoded.length; ++i) bytes[i] = decoded.charCodeAt(i);
-			return bytes;
+			return Uint8Array.fromBase64(s);
 		}
 		function tryParseAsDataURI(filename) {
 			if (!isDataURI(filename)) return;