react-native-quick-crypto 1.0.0-beta.12 → 1.0.0-beta.14

package/cpp/hash/HybridHash.hpp

@@ -11,42 +11,26 @@ namespace margelo::nitro::crypto {
 
 using namespace facebook;
 
-class HybridHash : public HybridHashSpec
-{
-public:
-  HybridHash()
-    : HybridObject(TAG)
-  {
-  }
-  HybridHash(EVP_MD_CTX* ctx,
-             const EVP_MD* md,
-             const std::string& algorithm,
-             const std::optional<double> outputLength)
-    : HybridObject(TAG)
-    , ctx(ctx)
-    , md(md)
-    , algorithm(algorithm)
-    , outputLength(outputLength)
-  {
-  }
+class HybridHash : public HybridHashSpec {
+ public:
+  HybridHash() : HybridObject(TAG) {}
+  HybridHash(EVP_MD_CTX* ctx, const EVP_MD* md, const std::string& algorithm, const std::optional<double> outputLength)
+      : HybridObject(TAG), ctx(ctx), md(md), algorithm(algorithm), outputLength(outputLength) {}
   ~HybridHash();
 
-public:
+ public:
   // Methods
-  void createHash(const std::string& algorithm,
-                  const std::optional<double> outputLength) override;
+  void createHash(const std::string& algorithm, const std::optional<double> outputLength) override;
   void update(const std::shared_ptr<ArrayBuffer>& data) override;
-  std::shared_ptr<ArrayBuffer> digest(
-    const std::optional<std::string>& encoding = std::nullopt) override;
-  std::shared_ptr<margelo::nitro::crypto::HybridHashSpec> copy(
-    const std::optional<double> outputLength) override;
+  std::shared_ptr<ArrayBuffer> digest(const std::optional<std::string>& encoding = std::nullopt) override;
+  std::shared_ptr<margelo::nitro::crypto::HybridHashSpec> copy(const std::optional<double> outputLength) override;
   std::vector<std::string> getSupportedHashAlgorithms() override;
 
-private:
+ private:
   // Methods
   void setParams();
 
-private:
+ private:
   // Properties
   EVP_MD_CTX* ctx = nullptr;
   const EVP_MD* md = nullptr;

package/cpp/hmac/HybridHmac.cpp

@@ -0,0 +1,95 @@
+#include <NitroModules/ArrayBuffer.hpp>
+#include <memory>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <optional>
+#include <string>
+#include <vector>
+
+#include "HybridHmac.hpp"
+
+namespace margelo::nitro::crypto {
+
+HybridHmac::~HybridHmac() {
+  if (ctx) {
+    EVP_MAC_CTX_free(ctx);
+    ctx = nullptr;
+  }
+}
+
+void HybridHmac::createHmac(const std::string& hmacAlgorithm, const std::shared_ptr<ArrayBuffer>& secretKey) {
+  algorithm = hmacAlgorithm;
+
+  // Create and use EVP_MAC locally
+  EVP_MAC* mac = EVP_MAC_fetch(nullptr, "HMAC", nullptr);
+  if (!mac) {
+    throw std::runtime_error("Failed to fetch HMAC implementation: " + std::to_string(ERR_get_error()));
+  }
+
+  // Create HMAC context
+  ctx = EVP_MAC_CTX_new(mac);
+  EVP_MAC_free(mac); // Free immediately after creating the context
+  if (!ctx) {
+    throw std::runtime_error("Failed to create HMAC context: " + std::to_string(ERR_get_error()));
+  }
+
+  // Validate algorithm
+  const EVP_MD* md = EVP_get_digestbyname(algorithm.c_str());
+  if (!md) {
+    throw std::runtime_error("Unknown HMAC algorithm: " + algorithm);
+  }
+
+  // Set up parameters for HMAC
+  OSSL_PARAM params[2];
+  params[0] = OSSL_PARAM_construct_utf8_string("digest", const_cast<char*>(algorithm.c_str()), 0);
+  params[1] = OSSL_PARAM_construct_end();
+
+  const uint8_t* keyData = reinterpret_cast<const uint8_t*>(secretKey->data());
+  size_t keySize = secretKey->size();
+
+  // Handle empty key case by providing a dummy key
+  static const uint8_t dummyKey = 0;
+  if (keySize == 0) {
+    keyData = &dummyKey;
+    keySize = 1;
+  }
+
+  // Initialize HMAC
+  if (EVP_MAC_init(ctx, keyData, keySize, params) != 1) {
+    throw std::runtime_error("Failed to initialize HMAC: " + std::to_string(ERR_get_error()));
+  }
+}
+
+void HybridHmac::update(const std::shared_ptr<ArrayBuffer>& data) {
+  if (!ctx) {
+    throw std::runtime_error("HMAC context not initialized");
+  }
+
+  // Update HMAC with new data
+  if (EVP_MAC_update(ctx, reinterpret_cast<const uint8_t*>(data->data()), data->size()) != 1) {
+    throw std::runtime_error("Failed to update HMAC: " + std::to_string(ERR_get_error()));
+  }
+}
+
+std::shared_ptr<ArrayBuffer> HybridHmac::digest() {
+  if (!ctx) {
+    throw std::runtime_error("HMAC context not initialized");
+  }
+
+  // Determine the maximum possible size of the HMAC output
+  const EVP_MD* md = EVP_get_digestbyname(algorithm.c_str());
+  const size_t hmacLength = EVP_MD_get_size(md);
+
+  // Allocate buffer with the exact required size
+  uint8_t* hmacBuffer = new uint8_t[hmacLength];
+
+  // Finalize the HMAC computation directly into the final buffer
+  if (EVP_MAC_final(ctx, hmacBuffer, nullptr, hmacLength) != 1) {
+    delete[] hmacBuffer;
+    throw std::runtime_error("Failed to finalize HMAC digest: " + std::to_string(ERR_get_error()));
+  }
+
+  return std::make_shared<NativeArrayBuffer>(hmacBuffer, hmacLength, [=]() { delete[] hmacBuffer; });
+}
+
+} // namespace margelo::nitro::crypto

package/cpp/hmac/HybridHmac.hpp

@@ -0,0 +1,31 @@
+#include <NitroModules/ArrayBuffer.hpp>
+#include <memory>
+#include <openssl/evp.h>
+#include <optional>
+#include <string>
+#include <vector>
+
+#include "HybridHmacSpec.hpp"
+
+namespace margelo::nitro::crypto {
+
+using namespace facebook;
+
+class HybridHmac : public HybridHmacSpec {
+ public:
+  HybridHmac() : HybridObject(TAG) {}
+  ~HybridHmac();
+
+ public:
+  // Methods
+  void createHmac(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key) override;
+  void update(const std::shared_ptr<ArrayBuffer>& data) override;
+  std::shared_ptr<ArrayBuffer> digest() override;
+
+ private:
+  // Properties
+  EVP_MAC_CTX* ctx = nullptr;
+  std::string algorithm = "";
+};
+
+} // namespace margelo::nitro::crypto

package/cpp/pbkdf2/HybridPbkdf2.cpp

@@ -3,70 +3,49 @@
 
 namespace margelo::nitro::crypto {
 
-std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>>
-HybridPbkdf2::pbkdf2(
-  const std::shared_ptr<ArrayBuffer>& password,
-  const std::shared_ptr<ArrayBuffer>& salt,
-  double iterations,
-  double keylen,
-  const std::string& digest
-) {
+std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> HybridPbkdf2::pbkdf2(const std::shared_ptr<ArrayBuffer>& password,
+                                                                            const std::shared_ptr<ArrayBuffer>& salt, double iterations,
+                                                                            double keylen, const std::string& digest) {
   // get owned NativeArrayBuffers before passing to sync function
   auto nativePassword = ToNativeArrayBuffer(password);
   auto nativeSalt = ToNativeArrayBuffer(salt);
 
-  return Promise<std::shared_ptr<ArrayBuffer>>::async(
-    [this, nativePassword, nativeSalt, iterations, keylen, digest]() {
-      return this->pbkdf2Sync(nativePassword, nativeSalt, iterations, keylen, digest);
-    }
-  );
+  return Promise<std::shared_ptr<ArrayBuffer>>::async([this, nativePassword, nativeSalt, iterations, keylen, digest]() {
+    return this->pbkdf2Sync(nativePassword, nativeSalt, iterations, keylen, digest);
+  });
 }
 
-std::shared_ptr<ArrayBuffer>
-HybridPbkdf2::pbkdf2Sync(
-  const std::shared_ptr<ArrayBuffer>& password,
-  const std::shared_ptr<ArrayBuffer>& salt,
-  double iterations,
-  double keylen,
-  const std::string& digest
-) {
-    size_t bufferSize = static_cast<size_t>(keylen);
-    uint8_t* data = new uint8_t[bufferSize];
-    auto result = std::make_shared<NativeArrayBuffer>(data, bufferSize, [=]() { delete[] data; });
+std::shared_ptr<ArrayBuffer> HybridPbkdf2::pbkdf2Sync(const std::shared_ptr<ArrayBuffer>& password,
+                                                      const std::shared_ptr<ArrayBuffer>& salt, double iterations, double keylen,
+                                                      const std::string& digest) {
+  size_t bufferSize = static_cast<size_t>(keylen);
+  uint8_t* data = new uint8_t[bufferSize];
+  auto result = std::make_shared<NativeArrayBuffer>(data, bufferSize, [=]() { delete[] data; });
 
-    // use fastpbkdf2 when possible
-    if (digest == "sha1") {
-      fastpbkdf2_hmac_sha1(password.get()->data(), password.get()->size(),
-                           salt.get()->data(), salt.get()->size(),
-                           static_cast<uint32_t>(iterations),
-                           result.get()->data(), result.get()->size());
-    } else if (digest == "sha256") {
-      fastpbkdf2_hmac_sha256(password.get()->data(), password.get()->size(),
-                             salt.get()->data(), salt.get()->size(),
-                             static_cast<uint32_t>(iterations),
-                             result.get()->data(), result.get()->size());
-    } else if (digest == "sha512") {
-      fastpbkdf2_hmac_sha512(password.get()->data(), password.get()->size(),
-                             salt.get()->data(), salt.get()->size(),
-                             static_cast<uint32_t>(iterations),
-                             result.get()->data(), result.get()->size());
-    } else {
-      // fallback to OpenSSL
-      auto *digestByName = EVP_get_digestbyname(digest.c_str());
-      if (digestByName == nullptr) {
-        throw std::runtime_error("Invalid hash-algorithm: " + digest);
-      }
-      char *passAsCharA = reinterpret_cast<char *>(password.get()->data());
-      const unsigned char *saltAsCharA =
-          reinterpret_cast<const unsigned char *>(salt.get()->data());
-      unsigned char *resultAsCharA =
-          reinterpret_cast<unsigned char *>(result.get()->data());
-      PKCS5_PBKDF2_HMAC(passAsCharA, password.get()->size(), saltAsCharA,
-                        salt.get()->size(), static_cast<uint32_t>(iterations),
-                        digestByName, result.get()->size(), resultAsCharA);
+  // use fastpbkdf2 when possible
+  if (digest == "sha1") {
+    fastpbkdf2_hmac_sha1(password.get()->data(), password.get()->size(), salt.get()->data(), salt.get()->size(),
+                         static_cast<uint32_t>(iterations), result.get()->data(), result.get()->size());
+  } else if (digest == "sha256") {
+    fastpbkdf2_hmac_sha256(password.get()->data(), password.get()->size(), salt.get()->data(), salt.get()->size(),
+                           static_cast<uint32_t>(iterations), result.get()->data(), result.get()->size());
+  } else if (digest == "sha512") {
+    fastpbkdf2_hmac_sha512(password.get()->data(), password.get()->size(), salt.get()->data(), salt.get()->size(),
+                           static_cast<uint32_t>(iterations), result.get()->data(), result.get()->size());
+  } else {
+    // fallback to OpenSSL
+    auto* digestByName = EVP_get_digestbyname(digest.c_str());
+    if (digestByName == nullptr) {
+      throw std::runtime_error("Invalid hash-algorithm: " + digest);
     }
+    char* passAsCharA = reinterpret_cast<char*>(password.get()->data());
+    const unsigned char* saltAsCharA = reinterpret_cast<const unsigned char*>(salt.get()->data());
+    unsigned char* resultAsCharA = reinterpret_cast<unsigned char*>(result.get()->data());
+    PKCS5_PBKDF2_HMAC(passAsCharA, password.get()->size(), saltAsCharA, salt.get()->size(), static_cast<uint32_t>(iterations), digestByName,
+                      result.get()->size(), resultAsCharA);
+  }
 
-    return result;
+  return result;
 }
 
 } // namespace margelo::nitro::crypto

package/cpp/pbkdf2/HybridPbkdf2.hpp

@@ -13,23 +13,12 @@ class HybridPbkdf2 : public HybridPbkdf2Spec {
 
  public:
   // Methods
-  std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>>
-  pbkdf2(
-    const std::shared_ptr<ArrayBuffer>& password,
-    const std::shared_ptr<ArrayBuffer>& salt,
-    double iterations,
-    double keylen,
-    const std::string& digest
-  ) override;
+  std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> pbkdf2(const std::shared_ptr<ArrayBuffer>& password,
+                                                                const std::shared_ptr<ArrayBuffer>& salt, double iterations, double keylen,
+                                                                const std::string& digest) override;
 
-  std::shared_ptr<ArrayBuffer>
-  pbkdf2Sync(
-    const std::shared_ptr<ArrayBuffer>& password,
-    const std::shared_ptr<ArrayBuffer>& salt,
-    double iterations,
-    double keylen,
-    const std::string& digest
-  ) override;
+  std::shared_ptr<ArrayBuffer> pbkdf2Sync(const std::shared_ptr<ArrayBuffer>& password, const std::shared_ptr<ArrayBuffer>& salt,
+                                          double iterations, double keylen, const std::string& digest) override;
 };
 
 } // namespace margelo::nitro::crypto

package/cpp/random/HybridRandom.cpp

@@ -4,7 +4,6 @@
 #include "HybridRandom.hpp"
 #include "Utils.hpp"
 
-
 size_t checkSize(double size) {
   if (!CheckIsUint32(size)) {
     throw std::runtime_error("size must be uint32");
@@ -25,33 +24,23 @@ size_t checkOffset(double size, double offset) {
   return static_cast<size_t>(offset);
 }
 
-
 namespace margelo::nitro::crypto {
 
-std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>>
-HybridRandom::randomFill(const std::shared_ptr<ArrayBuffer>& buffer,
-                         double dOffset,
-                         double dSize) {
+std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> HybridRandom::randomFill(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset,
+                                                                                double dSize) {
   // get owned NativeArrayBuffer before passing to sync function
   auto nativeBuffer = ToNativeArrayBuffer(buffer);
 
   return Promise<std::shared_ptr<ArrayBuffer>>::async(
-    [this, nativeBuffer, dOffset, dSize]() {
-      return this->randomFillSync(nativeBuffer, dOffset, dSize);
-    }
-  );
+      [this, nativeBuffer, dOffset, dSize]() { return this->randomFillSync(nativeBuffer, dOffset, dSize); });
 };
 
-std::shared_ptr<ArrayBuffer>
-HybridRandom::randomFillSync(const std::shared_ptr<ArrayBuffer>& buffer,
-                             double dOffset,
-                             double dSize) {
+std::shared_ptr<ArrayBuffer> HybridRandom::randomFillSync(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset, double dSize) {
   size_t size = checkSize(dSize);
   size_t offset = checkOffset(dSize, dOffset);
   uint8_t* data = buffer.get()->data();
   if (RAND_bytes(data + offset, (int)size) != 1) {
-    throw std::runtime_error("error calling RAND_bytes" +
-      std::to_string(ERR_get_error()));
+    throw std::runtime_error("error calling RAND_bytes: " + std::to_string(ERR_get_error()));
   }
   return buffer;
 };

package/cpp/random/HybridRandom.hpp

@@ -1,7 +1,7 @@
 #include <cmath>
 #include <future>
-#include <memory>
 #include <iostream>
+#include <memory>
 
 #include "HybridRandomSpec.hpp"
 
@@ -15,17 +15,16 @@ class HybridRandom : public HybridRandomSpec {
 
  public:
   // Methods
-  std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>>
-  randomFill(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset, double dSize) override;
+  std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> randomFill(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset,
+                                                                    double dSize) override;
 
-  std::shared_ptr<ArrayBuffer>
-  randomFillSync(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset, double dSize) override;
+  std::shared_ptr<ArrayBuffer> randomFillSync(const std::shared_ptr<ArrayBuffer>& buffer, double dOffset, double dSize) override;
 };
 
 inline void printData(std::string name, uint8_t* data, size_t size) {
   std::cout << "data - " << name << std::endl;
   for (size_t i = 0; i < size; i++) {
-      printf("%u ", data[i]);
+    printf("%u ", data[i]);
   }
   printf("\n");
 }

package/cpp/utils/Utils.hpp

@@ -3,8 +3,7 @@
 #include <NitroModules/ArrayBuffer.hpp>
 
 // copy a JSArrayBuffer that we do not own into a NativeArrayBuffer that we do own
-inline std::shared_ptr<margelo::nitro::NativeArrayBuffer>
-ToNativeArrayBuffer(const std::shared_ptr<margelo::nitro::ArrayBuffer>& buffer) {
+inline std::shared_ptr<margelo::nitro::NativeArrayBuffer> ToNativeArrayBuffer(const std::shared_ptr<margelo::nitro::ArrayBuffer>& buffer) {
   size_t bufferSize = buffer.get()->size();
   uint8_t* data = new uint8_t[bufferSize];
   memcpy(data, buffer.get()->data(), bufferSize);

package/lib/commonjs/cipher.js

@@ -0,0 +1,157 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.cipherExports = void 0;
+exports.createCipheriv = createCipheriv;
+exports.createDecipheriv = createDecipheriv;
+exports.getCiphers = getCiphers;
+var _reactNativeNitroModules = require("react-native-nitro-modules");
+var _readableStream = _interopRequireDefault(require("readable-stream"));
+var _reactNativeBuffer = require("@craftzdog/react-native-buffer");
+var _utils = require("./utils");
+var _cipher = require("./utils/cipher");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+// @types/node
+
+class CipherUtils {
+  static native = _reactNativeNitroModules.NitroModules.createHybridObject('Cipher');
+  static getSupportedCiphers() {
+    return this.native.getSupportedCiphers();
+  }
+}
+function getCiphers() {
+  return CipherUtils.getSupportedCiphers();
+}
+class CipherCommon extends _readableStream.default.Transform {
+  constructor({
+    isCipher,
+    cipherType,
+    cipherKey,
+    iv,
+    options
+  }) {
+    // Explicitly create TransformOptions for super()
+    const streamOptions = {};
+    if (options) {
+      // List known TransformOptions keys (adjust if needed)
+      const transformKeys = ['readableHighWaterMark', 'writableHighWaterMark', 'decodeStrings', 'defaultEncoding', 'objectMode', 'destroy', 'read', 'write', 'writev', 'final', 'transform', 'flush'
+      // Add any other relevant keys from readable-stream's TransformOptions
+      ];
+      for (const key of transformKeys) {
+        if (key in options) {
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any
+          streamOptions[key] = options[key];
+        }
+      }
+    }
+    super(streamOptions); // Pass filtered options
+
+    const authTagLen = (0, _cipher.getUIntOption)(options ?? {}, 'authTagLength') !== -1 ? (0, _cipher.getUIntOption)(options ?? {}, 'authTagLength') : 16; // defaults to 16 bytes
+
+    const factory = _reactNativeNitroModules.NitroModules.createHybridObject('CipherFactory');
+    this.native = factory.createCipher({
+      isCipher,
+      cipherType,
+      cipherKey: (0, _utils.binaryLikeToArrayBuffer)(cipherKey),
+      iv: (0, _utils.binaryLikeToArrayBuffer)(iv),
+      authTagLen
+    });
+  }
+  update(data, inputEncoding, outputEncoding) {
+    const defaultEncoding = (0, _cipher.getDefaultEncoding)();
+    inputEncoding = inputEncoding ?? defaultEncoding;
+    outputEncoding = outputEncoding ?? defaultEncoding;
+    if (typeof data === 'string') {
+      (0, _cipher.validateEncoding)(data, inputEncoding);
+    } else if (!ArrayBuffer.isView(data)) {
+      throw new Error('Invalid data argument');
+    }
+    const ret = this.native.update((0, _utils.binaryLikeToArrayBuffer)(data, inputEncoding));
+    if (outputEncoding && outputEncoding !== 'buffer') {
+      return (0, _utils.ab2str)(ret, outputEncoding);
+    }
+    return _reactNativeBuffer.Buffer.from(ret);
+  }
+  final(outputEncoding) {
+    const ret = this.native.final();
+    if (outputEncoding && outputEncoding !== 'buffer') {
+      return (0, _utils.ab2str)(ret, outputEncoding);
+    }
+    return _reactNativeBuffer.Buffer.from(ret);
+  }
+  _transform(chunk, encoding, callback) {
+    this.push(this.update(chunk, (0, _cipher.normalizeEncoding)(encoding)));
+    callback();
+  }
+  _flush(callback) {
+    this.push(this.final());
+    callback();
+  }
+  setAutoPadding(autoPadding) {
+    const res = this.native.setAutoPadding(!!autoPadding);
+    if (!res) {
+      throw new Error('setAutoPadding failed');
+    }
+    return this;
+  }
+  setAAD(buffer, options) {
+    // Check if native parts are initialized
+    if (!this.native || typeof this.native.setAAD !== 'function') {
+      throw new Error('Cipher native object or setAAD method not initialized.');
+    }
+    const res = this.native.setAAD(buffer.buffer, options?.plaintextLength);
+    if (!res) {
+      throw new Error('setAAD failed (native call returned false)');
+    }
+    return this;
+  }
+  getAuthTag() {
+    return _reactNativeBuffer.Buffer.from(this.native.getAuthTag());
+  }
+  setAuthTag(tag) {
+    const res = this.native.setAuthTag((0, _utils.binaryLikeToArrayBuffer)(tag));
+    if (!res) {
+      throw new Error('setAuthTag failed');
+    }
+    return this;
+  }
+  getSupportedCiphers() {
+    return this.native.getSupportedCiphers();
+  }
+}
+class Cipheriv extends CipherCommon {
+  constructor(cipherType, cipherKey, iv, options) {
+    super({
+      isCipher: true,
+      cipherType,
+      cipherKey: (0, _utils.binaryLikeToArrayBuffer)(cipherKey),
+      iv: (0, _utils.binaryLikeToArrayBuffer)(iv),
+      options
+    });
+  }
+}
+class Decipheriv extends CipherCommon {
+  constructor(cipherType, cipherKey, iv, options) {
+    super({
+      isCipher: false,
+      cipherType,
+      cipherKey: (0, _utils.binaryLikeToArrayBuffer)(cipherKey),
+      iv: (0, _utils.binaryLikeToArrayBuffer)(iv),
+      options
+    });
+  }
+}
+function createDecipheriv(algorithm, key, iv, options) {
+  return new Decipheriv(algorithm, key, iv, options);
+}
+function createCipheriv(algorithm, key, iv, options) {
+  return new Cipheriv(algorithm, key, iv, options);
+}
+const cipherExports = exports.cipherExports = {
+  createCipheriv,
+  createDecipheriv,
+  getCiphers
+};
+//# sourceMappingURL=cipher.js.map

package/lib/commonjs/cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNativeNitroModules","require","_readableStream","_interopRequireDefault","_reactNativeBuffer","_utils","_cipher","e","__esModule","default","CipherUtils","native","NitroModules","createHybridObject","getSupportedCiphers","getCiphers","CipherCommon","Stream","Transform","constructor","isCipher","cipherType","cipherKey","iv","options","streamOptions","transformKeys","key","authTagLen","getUIntOption","factory","createCipher","binaryLikeToArrayBuffer","update","data","inputEncoding","outputEncoding","defaultEncoding","getDefaultEncoding","validateEncoding","ArrayBuffer","isView","Error","ret","ab2str","Buffer","from","final","_transform","chunk","encoding","callback","push","normalizeEncoding","_flush","setAutoPadding","autoPadding","res","setAAD","buffer","plaintextLength","getAuthTag","setAuthTag","tag","Cipheriv","Decipheriv","createDecipheriv","algorithm","createCipheriv","cipherExports","exports"],"sourceRoot":"../../src","sources":["cipher.ts"],"mappings":";;;;;;;;;AAAA,IAAAA,wBAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,kBAAA,GAAAH,OAAA;AAcA,IAAAI,MAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AAKwB,SAAAE,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAXP;;AAmBjB,MAAMG,WAAW,CAAC;EAChB,OAAeC,MAAM,GACnBC,qCAAY,CAACC,kBAAkB,CAAe,QAAQ,CAAC;EACzD,OAAcC,mBAAmBA,CAAA,EAAa;IAC5C,OAAO,IAAI,CAACH,MAAM,CAACG,mBAAmB,CAAC,CAAC;EAC1C;AACF;AAEO,SAASC,UAAUA,CAAA,EAAa;EACrC,OAAOL,WAAW,CAACI,mBAAmB,CAAC,CAAC;AAC1C;AAUA,MAAME,YAAY,SAASC,uBAAM,CAACC,SAAS,CAAC;EAG1CC,WAAWA,CAAC;IAAEC,QAAQ;IAAEC,UAAU;IAAEC,SAAS;IAAEC,EAAE;IAAEC;EAAoB,CAAC,EAAE;IACxE;IACA,MAAMC,aAA+B,GAAG,CAAC,CAAC;IAC1C,IAAID,OAAO,EAAE;MACX;MACA,MAAME,aAA4C,GAAG,CACnD,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,MAAM,EACN,OAAO,EACP,QAAQ,EACR,OAAO,EACP,WAAW,EACX;MACA;MAAA,CACD;MACD,KAAK,MAAMC,GAAG,IAAID,aAAa,EAAE;QAC/B,IAAIC,GAAG,IAAIH,OAAO,EAAE;UAClB;UACCC,aAAa,CAASE,GAAG,CAAC,GAAIH,OAAO,CAASG,GAAG,CAAC;QACrD;MACF;IACF;IACA,KAAK,CAACF,aAAa,CAAC,CAAC,CAAC;;IAEtB,MAAMG,UAAkB,GACtB,IAAAC,qBAAa,EAACL,OAAO,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,GAChD,IAAAK,qBAAa,EAACL,OAAO,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,GAC7C,EAAE,CAAC,CAAC;;IAEV,MAAMM,OAAO,GACXlB,qCAAY,CAACC,kBAAkB,CAAgB,eAAe,CAAC;IACjE,IAAI,CAACF,MAAM,GAAGmB,OAAO,CAACC,YAAY,CAAC;MACjCX,QAAQ;MACRC,UAAU;MACVC,SAAS,EAAE,IAAAU,8BAAuB,EAACV,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAS,8BAAuB,EAACT,EAAE,CAAC;MAC/BK;IACF,CAAC,CAAC;EACJ;EAEAK,MAAMA,CACJC,IAAgB,EAChBC,aAAwB,EACxBC,cAAyB,EACR;IACjB,MAAMC,eAAe,GAAG,IAAAC,0BAAkB,EAAC,CAAC;IAC5CH,aAAa,GAAGA,aAAa,IAAIE,eAAe;IAChDD,cAAc,GAAGA,cAAc,IAAIC,eAAe;IAElD,IAAI,OAAOH,IAAI,KAAK,QAAQ,EAAE;MAC5B,IAAAK,wBAAgB,EAACL,IAAI,EAAEC,aAAa,CAAC;IACvC,CAAC,MAAM,IAAI,CAACK,WAAW,CAACC,MAAM,CAACP,IAAI,CAAC,EAAE;MACpC,MAAM,IAAIQ,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IAEA,MAAMC,GAAG,GAAG,IAAI,CAAChC,MAAM,CAACsB,MAAM,CAC5B,IAAAD,8BAAuB,EAACE,IAAI,EAAEC,aAAa,CAC7C,CAAC;IAED,IAAIC,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAAQ,aAAM,EAACD,GAAG,EAAEP,cAAc,CAAC;IACpC;IAEA,OAAOS,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC;EACzB;EAIAI,KAAKA,CAACX,cAA0C,EAAmB;IACjE,MAAMO,GAAG,GAAG,IAAI,CAAChC,MAAM,CAACoC,KAAK,CAAC,CAAC;IAE/B,IAAIX,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAAQ,aAAM,EAACD,GAAG,EAAEP,cAAc,CAAC;IACpC;IAEA,OAAOS,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC;EACzB;EAEAK,UAAUA,CACRC,KAAiB,EACjBC,QAAwB,EACxBC,QAAoB,EACpB;IACA,IAAI,CAACC,IAAI,CAAC,IAAI,CAACnB,MAAM,CAACgB,KAAK,EAAE,IAAAI,yBAAiB,EAACH,QAAQ,CAAC,CAAC,CAAC;IAC1DC,QAAQ,CAAC,CAAC;EACZ;EAEAG,MAAMA,CAACH,QAAoB,EAAE;IAC3B,IAAI,CAACC,IAAI,CAAC,IAAI,CAACL,KAAK,CAAC,CAAC,CAAC;IACvBI,QAAQ,CAAC,CAAC;EACZ;EAEOI,cAAcA,CAACC,WAAqB,EAAQ;IACjD,MAAMC,GAAG,GAAG,IAAI,CAAC9C,MAAM,CAAC4C,cAAc,CAAC,CAAC,CAACC,WAAW,CAAC;IACrD,IAAI,CAACC,GAAG,EAAE;MACR,MAAM,IAAIf,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IACA,OAAO,IAAI;EACb;EAEOgB,MAAMA,CACXC,MAAc,EACdnC,OAEC,EACK;IACN;IACA,IAAI,CAAC,IAAI,CAACb,MAAM,IAAI,OAAO,IAAI,CAACA,MAAM,CAAC+C,MAAM,KAAK,UAAU,EAAE;MAC5D,MAAM,IAAIhB,KAAK,CAAC,wDAAwD,CAAC;IAC3E;IACA,MAAMe,GAAG,GAAG,IAAI,CAAC9C,MAAM,CAAC+C,MAAM,CAACC,MAAM,CAACA,MAAM,EAAEnC,OAAO,EAAEoC,eAAe,CAAC;IACvE,IAAI,CAACH,GAAG,EAAE;MACR,MAAM,IAAIf,KAAK,CAAC,4CAA4C,CAAC;IAC/D;IACA,OAAO,IAAI;EACb;EAEOmB,UAAUA,CAAA,EAAW;IAC1B,OAAOhB,yBAAM,CAACC,IAAI,CAAC,IAAI,CAACnC,MAAM,CAACkD,UAAU,CAAC,CAAC,CAAC;EAC9C;EAEOC,UAAUA,CAACC,GAAW,EAAQ;IACnC,MAAMN,GAAG,GAAG,IAAI,CAAC9C,MAAM,CAACmD,UAAU,CAAC,IAAA9B,8BAAuB,EAAC+B,GAAG,CAAC,CAAC;IAChE,IAAI,CAACN,GAAG,EAAE;MACR,MAAM,IAAIf,KAAK,CAAC,mBAAmB,CAAC;IACtC;IACA,OAAO,IAAI;EACb;EAEO5B,mBAAmBA,CAAA,EAAa;IACrC,OAAO,IAAI,CAACH,MAAM,CAACG,mBAAmB,CAAC,CAAC;EAC1C;AACF;AAEA,MAAMkD,QAAQ,SAAShD,YAAY,CAAC;EAClCG,WAAWA,CACTE,UAAkB,EAClBC,SAAyB,EACzBC,EAAc,EACdC,OAAuB,EACvB;IACA,KAAK,CAAC;MACJJ,QAAQ,EAAE,IAAI;MACdC,UAAU;MACVC,SAAS,EAAE,IAAAU,8BAAuB,EAACV,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAS,8BAAuB,EAACT,EAAE,CAAC;MAC/BC;IACF,CAAC,CAAC;EACJ;AACF;AAIA,MAAMyC,UAAU,SAASjD,YAAY,CAAC;EACpCG,WAAWA,CACTE,UAAkB,EAClBC,SAAyB,EACzBC,EAAc,EACdC,OAAuB,EACvB;IACA,KAAK,CAAC;MACJJ,QAAQ,EAAE,KAAK;MACfC,UAAU;MACVC,SAAS,EAAE,IAAAU,8BAAuB,EAACV,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAS,8BAAuB,EAACT,EAAE,CAAC;MAC/BC;IACF,CAAC,CAAC;EACJ;AACF;AA4BO,SAAS0C,gBAAgBA,CAC9BC,SAAiB,EACjBxC,GAAmB,EACnBJ,EAAc,EACdC,OAAuB,EACb;EACV,OAAO,IAAIyC,UAAU,CAACE,SAAS,EAAExC,GAAG,EAAEJ,EAAE,EAAEC,OAAO,CAAC;AACpD;AA0BO,SAAS4C,cAAcA,CAC5BD,SAAiB,EACjBxC,GAAmB,EACnBJ,EAAc,EACdC,OAAuB,EACf;EACR,OAAO,IAAIwC,QAAQ,CAACG,SAAS,EAAExC,GAAG,EAAEJ,EAAE,EAAEC,OAAO,CAAC;AAClD;AAEO,MAAM6C,aAAa,GAAAC,OAAA,CAAAD,aAAA,GAAG;EAC3BD,cAAc;EACdF,gBAAgB;EAChBnD;AACF,CAAC","ignoreList":[]}

package/lib/commonjs/hash.js

@@ -19,23 +19,26 @@ function getHashes() {
   return HashUtils.getSupportedHashAlgorithms();
 }
 class Hash extends _readableStream.Stream.Transform {
+  validate(args) {
+    if (typeof args.algorithm !== 'string' || args.algorithm.length === 0) throw new Error('Algorithm must be a non-empty string');
+    if (args.options?.outputLength !== undefined && args.options.outputLength < 0) throw new Error('Output length must be a non-negative number');
+    if (args.options?.outputLength !== undefined && typeof args.options.outputLength !== 'number') throw new Error('Output length must be a number');
+  }
+
   /**
    * @internal use `createHash()` instead
    */
-  constructor({
-    algorithm,
-    options,
-    native
-  }) {
-    super(options);
-    this.algorithm = algorithm;
-    this.options = options ?? {};
-    if (native) {
-      this.native = native;
-    } else {
-      this.native = _reactNativeNitroModules.NitroModules.createHybridObject('Hash');
-      this.native.createHash(algorithm, this.options.outputLength);
+  constructor(args) {
+    super(args.options);
+    this.validate(args);
+    this.algorithm = args.algorithm;
+    this.options = args.options ?? {};
+    if (args.native) {
+      this.native = args.native;
+      return;
     }
+    this.native = _reactNativeNitroModules.NitroModules.createHybridObject('Hash');
+    this.native.createHash(this.algorithm, this.options.outputLength);
   }
 
   /**
@@ -53,10 +56,7 @@ class Hash extends _readableStream.Stream.Transform {
     const defaultEncoding = 'utf8';
     inputEncoding = inputEncoding ?? defaultEncoding;
     this.native.update((0, _utils.binaryLikeToArrayBuffer)(data, inputEncoding));
-    if (typeof data === 'string' && inputEncoding !== 'buffer') {
-      return this; // to support chaining syntax createHash().update().digest()
-    }
-    return Buffer.from([]); // returning empty buffer as _flush calls digest
+    return this; // to support chaining syntax createHash().update().digest()
   }
 
   /**
@@ -123,7 +123,7 @@ class Hash extends _readableStream.Stream.Transform {
 
   // stream interface
   _transform(chunk, encoding, callback) {
-    this.push(this.update(chunk, encoding));
+    this.update(chunk, encoding);
     callback();
   }
   _flush(callback) {
@@ -131,6 +131,29 @@ class Hash extends _readableStream.Stream.Transform {
     callback();
   }
 }
+
+/**
+ * Creates and returns a `Hash` object that can be used to generate hash digests
+ * using the given `algorithm`. Optional `options` argument controls stream
+ * behavior. For XOF hash functions such as `'shake256'`, the `outputLength` option
+ * can be used to specify the desired output length in bytes.
+ *
+ * The `algorithm` is dependent on the available algorithms supported by the
+ * version of OpenSSL on the platform. Examples are `'sha256'`, `'sha512'`, etc.
+ * On recent releases of OpenSSL, `openssl list -digest-algorithms` will
+ * display the available digest algorithms.
+ *
+ * Example: generating the sha256 sum of a file
+ *
+ * ```js
+ * import crypto from 'react-native-quick-crypto';
+ *
+ * const hash = crypto.createHash('sha256').update('Test123').digest('hex');
+ * console.log('SHA-256 of "Test123":', hash);
+ * ```
+ * @since v1.0.0
+ * @param options `stream.transform` options
+ */
 function createHash(algorithm, options) {
   // @ts-expect-error private constructor
   return new Hash({