react-native-quick-crypto 1.0.0-beta.21 → 1.0.0-beta.22

package/lib/module/ec.js

@@ -1,7 +1,7 @@
 "use strict";
 
 import { NitroModules } from 'react-native-nitro-modules';
-import { CryptoKey, KeyObject } from './keys';
+import { CryptoKey, KeyObject, PublicKeyObject, PrivateKeyObject } from './keys';
 import { bufferLikeToArrayBuffer, getUsagesUnion, hasAnyNotIn, kNamedCurveAliases, lazyDOMException, normalizeHashName, HashContext, KeyEncoding, KFormatType } from './utils';
 export class Ec {
   constructor(curve) {
@@ -84,32 +84,100 @@ export function ecImportKey(format, keyData, algorithm, extractable, keyUsages)
   if (!namedCurve || !kNamedCurveAliases[namedCurve]) {
     throw lazyDOMException('Unrecognized namedCurve', 'NotSupportedError');
   }
+
+  // Handle JWK format
+  if (format === 'jwk') {
+    const jwk = keyData;
+
+    // Validate JWK
+    if (jwk.kty !== 'EC') {
+      throw lazyDOMException('Invalid JWK "kty" Parameter', 'DataError');
+    }
+    if (jwk.crv !== namedCurve) {
+      throw lazyDOMException('JWK "crv" does not match the requested algorithm', 'DataError');
+    }
+
+    // Check use parameter if present
+    if (jwk.use !== undefined) {
+      const expectedUse = name === 'ECDH' ? 'enc' : 'sig';
+      if (jwk.use !== expectedUse) {
+        throw lazyDOMException('Invalid JWK "use" Parameter', 'DataError');
+      }
+    }
+
+    // Check alg parameter if present
+    if (jwk.alg !== undefined) {
+      let expectedAlg;
+      if (name === 'ECDSA') {
+        // Map namedCurve to expected ECDSA algorithm
+        expectedAlg = namedCurve === 'P-256' ? 'ES256' : namedCurve === 'P-384' ? 'ES384' : namedCurve === 'P-521' ? 'ES512' : undefined;
+      } else if (name === 'ECDH') {
+        // ECDH uses ECDH-ES algorithm
+        expectedAlg = 'ECDH-ES';
+      }
+      if (expectedAlg && jwk.alg !== expectedAlg) {
+        throw lazyDOMException('JWK "alg" does not match the requested algorithm', 'DataError');
+      }
+    }
+
+    // Import using C++ layer
+    const handle = NitroModules.createHybridObject('KeyObjectHandle');
+    const keyType = handle.initJwk(jwk, namedCurve);
+    if (keyType === undefined) {
+      throw lazyDOMException('Invalid JWK', 'DataError');
+    }
+
+    // Create the appropriate KeyObject based on type
+    let keyObject;
+    if (keyType === 1) {
+      keyObject = new PublicKeyObject(handle);
+    } else if (keyType === 2) {
+      keyObject = new PrivateKeyObject(handle);
+    } else {
+      throw lazyDOMException('Unexpected key type from JWK import', 'DataError');
+    }
+    return new CryptoKey(keyObject, algorithm, keyUsages, extractable);
+  }
+
+  // Handle binary formats (spki, pkcs8, raw)
   if (format !== 'spki' && format !== 'pkcs8' && format !== 'raw') {
     throw lazyDOMException(`Unsupported format: ${format}`, 'NotSupportedError');
   }
 
-  // Handle JWK format separately
-  if (typeof keyData === 'object' && 'kty' in keyData) {
-    throw lazyDOMException('JWK format not yet supported', 'NotSupportedError');
+  // Determine expected key type based on format
+  const expectedKeyType = format === 'spki' || format === 'raw' ? 'public' : 'private';
+
+  // Validate usages for the key type
+  const isPublicKey = expectedKeyType === 'public';
+  let validUsages;
+  if (name === 'ECDSA') {
+    validUsages = isPublicKey ? ['verify'] : ['sign'];
+  } else if (name === 'ECDH') {
+    validUsages = isPublicKey ? [] : ['deriveKey', 'deriveBits'];
+  } else {
+    throw lazyDOMException('Unsupported algorithm', 'NotSupportedError');
+  }
+  if (hasAnyNotIn(keyUsages, validUsages)) {
+    throw lazyDOMException(`Unsupported key usage for a ${name} key`, 'SyntaxError');
   }
 
   // Convert keyData to ArrayBuffer
   const keyBuffer = bufferLikeToArrayBuffer(keyData);
 
-  // Create EC instance with the curve
-  const ec = new Ec(namedCurve);
-
-  // Import the key using Nitro module
-  ec.native.importKey(format === 'raw' ? 'der' : format,
-  // Convert raw to der for now
-  keyBuffer, name, extractable, keyUsages);
-
-  // Create a KeyObject wrapper for the imported key
-  // Use the EC instance's key data to create a proper KeyObject
-  const privateKeyData = ec.native.getPrivateKey();
-  const keyObject = new KeyObject('private', privateKeyData);
-
-  // Create and return CryptoKey
+  // Create KeyObject directly using the appropriate format
+  let keyObject;
+  if (format === 'raw') {
+    // Raw format is only for public keys - use specialized EC raw import
+    const handle = NitroModules.createHybridObject('KeyObjectHandle');
+    const curveAlias = kNamedCurveAliases[namedCurve];
+    if (!handle.initECRaw(curveAlias, keyBuffer)) {
+      throw lazyDOMException('Failed to import EC raw key', 'DataError');
+    }
+    keyObject = new PublicKeyObject(handle);
+  } else {
+    // Use standard DER import for spki/pkcs8
+    keyObject = KeyObject.createKeyObject(expectedKeyType, keyBuffer, 'der', format);
+  }
   return new CryptoKey(keyObject, algorithm, keyUsages, extractable);
   //     //   // verifyAcceptableEcKeyUse(name, true, usagesSet);
   //     //   try {

package/lib/module/ec.js.map

@@ -1 +1 @@
-{"version":3,"names":["NitroModules","CryptoKey","KeyObject","bufferLikeToArrayBuffer","getUsagesUnion","hasAnyNotIn","kNamedCurveAliases","lazyDOMException","normalizeHashName","HashContext","KeyEncoding","KFormatType","Ec","constructor","curve","native","createHybridObject","setCurve","generateKeyPair","publicKey","getPublicKey","privateKey","getPrivateKey","generateKeyPairSync","ecImportKey","format","keyData","algorithm","extractable","keyUsages","name","namedCurve","keyBuffer","ec","importKey","privateKeyData","keyObject","ecdsaSignVerify","key","data","hash","signature","isSign","undefined","expectedKeyType","type","hashName","normalizedHashName","WebCrypto","encoding","PKCS8","SPKI","handle","exportKey","DER","usages","dataBuffer","sign","signatureBuffer","verify","ec_generateKeyPair","_options","Object","keys","includes","publicUsages","privateUsages","keyAlgorithm","publicKeyData","pub","createKeyObject","privateEncoding","priv"],"sourceRoot":"../../src","sources":["ec.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AAEzD,SACEC,SAAS,EACTC,SAAS,QAGJ,QAAQ;AAWf,SACEC,uBAAuB,EACvBC,cAAc,EACdC,WAAW,EACXC,kBAAkB,EAClBC,gBAAgB,EAChBC,iBAAiB,EACjBC,WAAW,EACXC,WAAW,EACXC,WAAW,QACN,SAAS;AAEhB,OAAO,MAAMC,EAAE,CAAC;EAGdC,WAAWA,CAACC,KAAa,EAAE;IACzB,IAAI,CAACC,MAAM,GAAGf,YAAY,CAACgB,kBAAkB,CAAY,WAAW,CAAC;IACrE,IAAI,CAACD,MAAM,CAACE,QAAQ,CAACH,KAAK,CAAC;EAC7B;EAEA,MAAMI,eAAeA,CAAA,EAA2B;IAC9C,MAAM,IAAI,CAACH,MAAM,CAACG,eAAe,CAAC,CAAC;IACnC,OAAO;MACLC,SAAS,EAAE,IAAI,CAACJ,MAAM,CAACK,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACN,MAAM,CAACO,aAAa,CAAC;IACxC,CAAC;EACH;EAEAC,mBAAmBA,CAAA,EAAkB;IACnC,IAAI,CAACR,MAAM,CAACQ,mBAAmB,CAAC,CAAC;IACjC,OAAO;MACLJ,SAAS,EAAE,IAAI,CAACJ,MAAM,CAACK,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACN,MAAM,CAACO,aAAa,CAAC;IACxC,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA,OAAO,SAASE,WAAWA,CACzBC,MAAoB,EACpBC,OAAsC,EACtCC,SAA0B,EAC1BC,WAAoB,EACpBC,SAAqB,EACV;EACX,MAAM;IAAEC,IAAI;IAAEC;EAAW,CAAC,GAAGJ,SAAS;EAEtC,IACE,CAACI,UAAU,IACX,CAACzB,kBAAkB,CAACyB,UAAU,CAAoC,EAClE;IACA,MAAMxB,gBAAgB,CAAC,yBAAyB,EAAE,mBAAmB,CAAC;EACxE;EAEA,IAAIkB,MAAM,KAAK,MAAM,IAAIA,MAAM,KAAK,OAAO,IAAIA,MAAM,KAAK,KAAK,EAAE;IAC/D,MAAMlB,gBAAgB,CACpB,uBAAuBkB,MAAM,EAAE,EAC/B,mBACF,CAAC;EACH;;EAEA;EACA,IAAI,OAAOC,OAAO,KAAK,QAAQ,IAAI,KAAK,IAAIA,OAAO,EAAE;IACnD,MAAMnB,gBAAgB,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;EAC7E;;EAEA;EACA,MAAMyB,SAAS,GAAG7B,uBAAuB,CAACuB,OAAqB,CAAC;;EAEhE;EACA,MAAMO,EAAE,GAAG,IAAIrB,EAAE,CAACmB,UAAU,CAAC;;EAE7B;EACAE,EAAE,CAAClB,MAAM,CAACmB,SAAS,CACjBT,MAAM,KAAK,KAAK,GAAG,KAAK,GAAGA,MAAM;EAAE;EACnCO,SAAS,EACTF,IAAI,EACJF,WAAW,EACXC,SACF,CAAC;;EAED;EACA;EACA,MAAMM,cAAc,GAAGF,EAAE,CAAClB,MAAM,CAACO,aAAa,CAAC,CAAC;EAChD,MAAMc,SAAS,GAAG,IAAIlC,SAAS,CAAC,SAAS,EAAEiC,cAAc,CAAC;;EAE1D;EACA,OAAO,IAAIlC,SAAS,CAACmC,SAAS,EAAET,SAAS,EAAEE,SAAS,EAAED,WAAW,CAAC;EACl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eAAe,GAAGA,CAC7BC,GAAc,EACdC,IAAgB,EAChB;EAAEC;AAAsB,CAAC,EACzBC,SAAsB,KACI;EAC1B,MAAMC,MAAM,GAAGD,SAAS,KAAKE,SAAS;EACtC,MAAMC,eAAe,GAAGF,MAAM,GAAG,SAAS,GAAG,QAAQ;EAErD,IAAIJ,GAAG,CAACO,IAAI,KAAKD,eAAe,EAAE;IAChC,MAAMrC,gBAAgB,CACpB,iBAAiBqC,eAAe,MAAM,EACtC,oBACF,CAAC;EACH;EAEA,MAAME,QAAQ,GAAG,OAAON,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,EAAEV,IAAI;EAE7D,IAAI,CAACgB,QAAQ,EAAE;IACb,MAAMvC,gBAAgB,CACpB,sCAAsC,EACtC,oBACF,CAAC;EACH;;EAEA;EACA,MAAMwC,kBAAkB,GAAGvC,iBAAiB,CAACsC,QAAQ,EAAErC,WAAW,CAACuC,SAAS,CAAC;;EAE7E;EACA,MAAMjB,UAAU,GAAGO,GAAG,CAACX,SAAS,CAACI,UAAW;EAC5C,MAAME,EAAE,GAAG,IAAIrB,EAAE,CAACmB,UAAU,CAAC;;EAE7B;EACA;EACA,MAAMkB,QAAQ,GACZX,GAAG,CAACO,IAAI,KAAK,SAAS,GAAGnC,WAAW,CAACwC,KAAK,GAAGxC,WAAW,CAACyC,IAAI;EAC/D,MAAMzB,OAAO,GAAGY,GAAG,CAACF,SAAS,CAACgB,MAAM,CAACC,SAAS,CAAC1C,WAAW,CAAC2C,GAAG,EAAEL,QAAQ,CAAC;EACzE,MAAMjB,SAAS,GAAG7B,uBAAuB,CAACuB,OAAO,CAAC;EAClDO,EAAE,CAAClB,MAAM,CAACmB,SAAS,CACjB,KAAK,EACLF,SAAS,EACTM,GAAG,CAACX,SAAS,CAACG,IAAI,EAClBQ,GAAG,CAACV,WAAW,EACfU,GAAG,CAACiB,MACN,CAAC;EAED,MAAMC,UAAU,GAAGrD,uBAAuB,CAACoC,IAAI,CAAC;EAEhD,IAAIG,MAAM,EAAE;IACV;IACA,OAAOT,EAAE,CAAClB,MAAM,CAAC0C,IAAI,CAACD,UAAU,EAAET,kBAAkB,CAAC;EACvD,CAAC,MAAM;IACL;IACA,MAAMW,eAAe,GAAGvD,uBAAuB,CAACsC,SAAU,CAAC;IAC3D,OAAOR,EAAE,CAAClB,MAAM,CAAC4C,MAAM,CAACH,UAAU,EAAEE,eAAe,EAAEX,kBAAkB,CAAC;EAC1E;AACF,CAAC;;AAED;;AAEA,OAAO,eAAea,kBAAkBA,CACtC9B,IAAY,EACZC,UAAkB,EAClBH,WAAoB,EACpBC,SAAqB;AACrB;AACAgC,QAAyB,CAAE;AAAA,EACH;EACxB;EACA,IAAI,CAACC,MAAM,CAACC,IAAI,CAACzD,kBAAkB,CAAC,CAAC0D,QAAQ,CAACjC,UAAU,IAAI,EAAE,CAAC,EAAE;IAC/D,MAAMxB,gBAAgB,CACpB,4BAA4BwB,UAAU,GAAG,EACzC,mBACF,CAAC;EACH;;EAEA;EACA,QAAQD,IAAI;IACV,KAAK,OAAO;MACV,IAAIzB,WAAW,CAACwB,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE;QAC9C,MAAMtB,gBAAgB,CACpB,wCAAwC,EACxC,aACF,CAAC;MACH;MACA;IACF,KAAK,MAAM;MACT,IAAIF,WAAW,CAACwB,SAAS,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,EAAE;QACvD,MAAMtB,gBAAgB,CACpB,uCAAuC,EACvC,aACF,CAAC;MACH;IACF;EACF;EAEA,MAAM0B,EAAE,GAAG,IAAIrB,EAAE,CAACmB,UAAW,CAAC;EAC9B,MAAME,EAAE,CAACf,eAAe,CAAC,CAAC;EAE1B,IAAI+C,YAAwB,GAAG,EAAE;EACjC,IAAIC,aAAyB,GAAG,EAAE;EAClC,QAAQpC,IAAI;IACV,KAAK,OAAO;MACVmC,YAAY,GAAG7D,cAAc,CAACyB,SAAS,EAAE,QAAQ,CAAC;MAClDqC,aAAa,GAAG9D,cAAc,CAACyB,SAAS,EAAE,MAAM,CAAC;MACjD;IACF,KAAK,MAAM;MACToC,YAAY,GAAG,EAAE;MACjBC,aAAa,GAAG9D,cAAc,CAACyB,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC;MACpE;EACJ;EAEA,MAAMsC,YAAY,GAAG;IAAErC,IAAI;IAAEC,UAAU,EAAEA;EAAY,CAAC;;EAEtD;EACA;EACA,MAAMqC,aAAa,GAAGnC,EAAE,CAAClB,MAAM,CAACK,YAAY,CAAC,CAAC;EAC9C,MAAMe,cAAc,GAAGF,EAAE,CAAClB,MAAM,CAACO,aAAa,CAAC,CAAC;EAEhD,MAAM+C,GAAG,GAAGnE,SAAS,CAACoE,eAAe,CACnC,QAAQ,EACRF,aAAa,EACb,KAAK,EACL,MACF,CAAoB;EACpB,MAAMjD,SAAS,GAAG,IAAIlB,SAAS,CAC7BoE,GAAG,EACHF,YAAY,EACZF,YAAY,EACZ,IACF,CAAC;;EAED;EACA,MAAMM,eAAe,GAAG,OAAO;EAC/B,MAAMC,IAAI,GAAGtE,SAAS,CAACoE,eAAe,CACpC,SAAS,EACTnC,cAAc,EACd,KAAK,EACLoC,eACF,CAAqB;EACrB,MAAMlD,UAAU,GAAG,IAAIpB,SAAS,CAC9BuE,IAAI,EACJL,YAAY,EACZD,aAAa,EACbtC,WACF,CAAC;EAED,OAAO;IAAET,SAAS;IAAEE;EAAW,CAAC;AAClC","ignoreList":[]}
+{"version":3,"names":["NitroModules","CryptoKey","KeyObject","PublicKeyObject","PrivateKeyObject","bufferLikeToArrayBuffer","getUsagesUnion","hasAnyNotIn","kNamedCurveAliases","lazyDOMException","normalizeHashName","HashContext","KeyEncoding","KFormatType","Ec","constructor","curve","native","createHybridObject","setCurve","generateKeyPair","publicKey","getPublicKey","privateKey","getPrivateKey","generateKeyPairSync","ecImportKey","format","keyData","algorithm","extractable","keyUsages","name","namedCurve","jwk","kty","crv","use","undefined","expectedUse","alg","expectedAlg","handle","keyType","initJwk","keyObject","expectedKeyType","isPublicKey","validUsages","keyBuffer","curveAlias","initECRaw","createKeyObject","ecdsaSignVerify","key","data","hash","signature","isSign","type","hashName","normalizedHashName","WebCrypto","ec","encoding","PKCS8","SPKI","exportKey","DER","importKey","usages","dataBuffer","sign","signatureBuffer","verify","ec_generateKeyPair","_options","Object","keys","includes","publicUsages","privateUsages","keyAlgorithm","publicKeyData","privateKeyData","pub","privateEncoding","priv"],"sourceRoot":"../../src","sources":["ec.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AAGzD,SACEC,SAAS,EACTC,SAAS,EACTC,eAAe,EACfC,gBAAgB,QACX,QAAQ;AAYf,SACEC,uBAAuB,EACvBC,cAAc,EACdC,WAAW,EACXC,kBAAkB,EAClBC,gBAAgB,EAChBC,iBAAiB,EACjBC,WAAW,EACXC,WAAW,EACXC,WAAW,QACN,SAAS;AAEhB,OAAO,MAAMC,EAAE,CAAC;EAGdC,WAAWA,CAACC,KAAa,EAAE;IACzB,IAAI,CAACC,MAAM,GAAGjB,YAAY,CAACkB,kBAAkB,CAAY,WAAW,CAAC;IACrE,IAAI,CAACD,MAAM,CAACE,QAAQ,CAACH,KAAK,CAAC;EAC7B;EAEA,MAAMI,eAAeA,CAAA,EAA2B;IAC9C,MAAM,IAAI,CAACH,MAAM,CAACG,eAAe,CAAC,CAAC;IACnC,OAAO;MACLC,SAAS,EAAE,IAAI,CAACJ,MAAM,CAACK,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACN,MAAM,CAACO,aAAa,CAAC;IACxC,CAAC;EACH;EAEAC,mBAAmBA,CAAA,EAAkB;IACnC,IAAI,CAACR,MAAM,CAACQ,mBAAmB,CAAC,CAAC;IACjC,OAAO;MACLJ,SAAS,EAAE,IAAI,CAACJ,MAAM,CAACK,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACN,MAAM,CAACO,aAAa,CAAC;IACxC,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA,OAAO,SAASE,WAAWA,CACzBC,MAAoB,EACpBC,OAAsC,EACtCC,SAA0B,EAC1BC,WAAoB,EACpBC,SAAqB,EACV;EACX,MAAM;IAAEC,IAAI;IAAEC;EAAW,CAAC,GAAGJ,SAAS;EAEtC,IACE,CAACI,UAAU,IACX,CAACzB,kBAAkB,CAACyB,UAAU,CAAoC,EAClE;IACA,MAAMxB,gBAAgB,CAAC,yBAAyB,EAAE,mBAAmB,CAAC;EACxE;;EAEA;EACA,IAAIkB,MAAM,KAAK,KAAK,EAAE;IACpB,MAAMO,GAAG,GAAGN,OAAc;;IAE1B;IACA,IAAIM,GAAG,CAACC,GAAG,KAAK,IAAI,EAAE;MACpB,MAAM1B,gBAAgB,CAAC,6BAA6B,EAAE,WAAW,CAAC;IACpE;IAEA,IAAIyB,GAAG,CAACE,GAAG,KAAKH,UAAU,EAAE;MAC1B,MAAMxB,gBAAgB,CACpB,kDAAkD,EAClD,WACF,CAAC;IACH;;IAEA;IACA,IAAIyB,GAAG,CAACG,GAAG,KAAKC,SAAS,EAAE;MACzB,MAAMC,WAAW,GAAGP,IAAI,KAAK,MAAM,GAAG,KAAK,GAAG,KAAK;MACnD,IAAIE,GAAG,CAACG,GAAG,KAAKE,WAAW,EAAE;QAC3B,MAAM9B,gBAAgB,CAAC,6BAA6B,EAAE,WAAW,CAAC;MACpE;IACF;;IAEA;IACA,IAAIyB,GAAG,CAACM,GAAG,KAAKF,SAAS,EAAE;MACzB,IAAIG,WAA+B;MAEnC,IAAIT,IAAI,KAAK,OAAO,EAAE;QACpB;QACAS,WAAW,GACTR,UAAU,KAAK,OAAO,GAClB,OAAO,GACPA,UAAU,KAAK,OAAO,GACpB,OAAO,GACPA,UAAU,KAAK,OAAO,GACpB,OAAO,GACPK,SAAS;MACrB,CAAC,MAAM,IAAIN,IAAI,KAAK,MAAM,EAAE;QAC1B;QACAS,WAAW,GAAG,SAAS;MACzB;MAEA,IAAIA,WAAW,IAAIP,GAAG,CAACM,GAAG,KAAKC,WAAW,EAAE;QAC1C,MAAMhC,gBAAgB,CACpB,kDAAkD,EAClD,WACF,CAAC;MACH;IACF;;IAEA;IACA,MAAMiC,MAAM,GACV1C,YAAY,CAACkB,kBAAkB,CAAkB,iBAAiB,CAAC;IACrE,MAAMyB,OAAO,GAAGD,MAAM,CAACE,OAAO,CAACV,GAAG,EAAED,UAAwB,CAAC;IAE7D,IAAIU,OAAO,KAAKL,SAAS,EAAE;MACzB,MAAM7B,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC;IACpD;;IAEA;IACA,IAAIoC,SAAoB;IACxB,IAAIF,OAAO,KAAK,CAAC,EAAE;MACjBE,SAAS,GAAG,IAAI1C,eAAe,CAACuC,MAAM,CAAC;IACzC,CAAC,MAAM,IAAIC,OAAO,KAAK,CAAC,EAAE;MACxBE,SAAS,GAAG,IAAIzC,gBAAgB,CAACsC,MAAM,CAAC;IAC1C,CAAC,MAAM;MACL,MAAMjC,gBAAgB,CACpB,qCAAqC,EACrC,WACF,CAAC;IACH;IAEA,OAAO,IAAIR,SAAS,CAAC4C,SAAS,EAAEhB,SAAS,EAAEE,SAAS,EAAED,WAAW,CAAC;EACpE;;EAEA;EACA,IAAIH,MAAM,KAAK,MAAM,IAAIA,MAAM,KAAK,OAAO,IAAIA,MAAM,KAAK,KAAK,EAAE;IAC/D,MAAMlB,gBAAgB,CACpB,uBAAuBkB,MAAM,EAAE,EAC/B,mBACF,CAAC;EACH;;EAEA;EACA,MAAMmB,eAAe,GACnBnB,MAAM,KAAK,MAAM,IAAIA,MAAM,KAAK,KAAK,GAAG,QAAQ,GAAG,SAAS;;EAE9D;EACA,MAAMoB,WAAW,GAAGD,eAAe,KAAK,QAAQ;EAChD,IAAIE,WAAuB;EAE3B,IAAIhB,IAAI,KAAK,OAAO,EAAE;IACpBgB,WAAW,GAAGD,WAAW,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;EACnD,CAAC,MAAM,IAAIf,IAAI,KAAK,MAAM,EAAE;IAC1BgB,WAAW,GAAGD,WAAW,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC;EAC9D,CAAC,MAAM;IACL,MAAMtC,gBAAgB,CAAC,uBAAuB,EAAE,mBAAmB,CAAC;EACtE;EAEA,IAAIF,WAAW,CAACwB,SAAS,EAAEiB,WAAW,CAAC,EAAE;IACvC,MAAMvC,gBAAgB,CACpB,+BAA+BuB,IAAI,MAAM,EACzC,aACF,CAAC;EACH;;EAEA;EACA,MAAMiB,SAAS,GAAG5C,uBAAuB,CAACuB,OAAqB,CAAC;;EAEhE;EACA,IAAIiB,SAAoB;EAExB,IAAIlB,MAAM,KAAK,KAAK,EAAE;IACpB;IACA,MAAMe,MAAM,GACV1C,YAAY,CAACkB,kBAAkB,CAAkB,iBAAiB,CAAC;IACrE,MAAMgC,UAAU,GACd1C,kBAAkB,CAACyB,UAAU,CAAoC;IACnE,IAAI,CAACS,MAAM,CAACS,SAAS,CAACD,UAAU,EAAED,SAAS,CAAC,EAAE;MAC5C,MAAMxC,gBAAgB,CAAC,6BAA6B,EAAE,WAAW,CAAC;IACpE;IACAoC,SAAS,GAAG,IAAI1C,eAAe,CAACuC,MAAM,CAAC;EACzC,CAAC,MAAM;IACL;IACAG,SAAS,GAAG3C,SAAS,CAACkD,eAAe,CACnCN,eAAe,EACfG,SAAS,EACT,KAAK,EACLtB,MACF,CAAC;EACH;EAEA,OAAO,IAAI1B,SAAS,CAAC4C,SAAS,EAAEhB,SAAS,EAAEE,SAAS,EAAED,WAAW,CAAC;EACl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uB,eAAe,GAAGA,CAC7BC,GAAc,EACdC,IAAgB,EAChB;EAAEC;AAAsB,CAAC,EACzBC,SAAsB,KACI;EAC1B,MAAMC,MAAM,GAAGD,SAAS,KAAKnB,SAAS;EACtC,MAAMQ,eAAe,GAAGY,MAAM,GAAG,SAAS,GAAG,QAAQ;EAErD,IAAIJ,GAAG,CAACK,IAAI,KAAKb,eAAe,EAAE;IAChC,MAAMrC,gBAAgB,CACpB,iBAAiBqC,eAAe,MAAM,EACtC,oBACF,CAAC;EACH;EAEA,MAAMc,QAAQ,GAAG,OAAOJ,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,EAAExB,IAAI;EAE7D,IAAI,CAAC4B,QAAQ,EAAE;IACb,MAAMnD,gBAAgB,CACpB,sCAAsC,EACtC,oBACF,CAAC;EACH;;EAEA;EACA,MAAMoD,kBAAkB,GAAGnD,iBAAiB,CAACkD,QAAQ,EAAEjD,WAAW,CAACmD,SAAS,CAAC;;EAE7E;EACA,MAAM7B,UAAU,GAAGqB,GAAG,CAACzB,SAAS,CAACI,UAAW;EAC5C,MAAM8B,EAAE,GAAG,IAAIjD,EAAE,CAACmB,UAAU,CAAC;;EAE7B;EACA;EACA,MAAM+B,QAAQ,GACZV,GAAG,CAACK,IAAI,KAAK,SAAS,GAAG/C,WAAW,CAACqD,KAAK,GAAGrD,WAAW,CAACsD,IAAI;EAC/D,MAAMtC,OAAO,GAAG0B,GAAG,CAACT,SAAS,CAACH,MAAM,CAACyB,SAAS,CAACtD,WAAW,CAACuD,GAAG,EAAEJ,QAAQ,CAAC;EACzE,MAAMf,SAAS,GAAG5C,uBAAuB,CAACuB,OAAO,CAAC;EAClDmC,EAAE,CAAC9C,MAAM,CAACoD,SAAS,CACjB,KAAK,EACLpB,SAAS,EACTK,GAAG,CAACzB,SAAS,CAACG,IAAI,EAClBsB,GAAG,CAACxB,WAAW,EACfwB,GAAG,CAACgB,MACN,CAAC;EAED,MAAMC,UAAU,GAAGlE,uBAAuB,CAACkD,IAAI,CAAC;EAEhD,IAAIG,MAAM,EAAE;IACV;IACA,OAAOK,EAAE,CAAC9C,MAAM,CAACuD,IAAI,CAACD,UAAU,EAAEV,kBAAkB,CAAC;EACvD,CAAC,MAAM;IACL;IACA,MAAMY,eAAe,GAAGpE,uBAAuB,CAACoD,SAAU,CAAC;IAC3D,OAAOM,EAAE,CAAC9C,MAAM,CAACyD,MAAM,CAACH,UAAU,EAAEE,eAAe,EAAEZ,kBAAkB,CAAC;EAC1E;AACF,CAAC;;AAED;;AAEA,OAAO,eAAec,kBAAkBA,CACtC3C,IAAY,EACZC,UAAkB,EAClBH,WAAoB,EACpBC,SAAqB;AACrB;AACA6C,QAAyB,CAAE;AAAA,EACH;EACxB;EACA,IAAI,CAACC,MAAM,CAACC,IAAI,CAACtE,kBAAkB,CAAC,CAACuE,QAAQ,CAAC9C,UAAU,IAAI,EAAE,CAAC,EAAE;IAC/D,MAAMxB,gBAAgB,CACpB,4BAA4BwB,UAAU,GAAG,EACzC,mBACF,CAAC;EACH;;EAEA;EACA,QAAQD,IAAI;IACV,KAAK,OAAO;MACV,IAAIzB,WAAW,CAACwB,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE;QAC9C,MAAMtB,gBAAgB,CACpB,wCAAwC,EACxC,aACF,CAAC;MACH;MACA;IACF,KAAK,MAAM;MACT,IAAIF,WAAW,CAACwB,SAAS,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,EAAE;QACvD,MAAMtB,gBAAgB,CACpB,uCAAuC,EACvC,aACF,CAAC;MACH;IACF;EACF;EAEA,MAAMsD,EAAE,GAAG,IAAIjD,EAAE,CAACmB,UAAW,CAAC;EAC9B,MAAM8B,EAAE,CAAC3C,eAAe,CAAC,CAAC;EAE1B,IAAI4D,YAAwB,GAAG,EAAE;EACjC,IAAIC,aAAyB,GAAG,EAAE;EAClC,QAAQjD,IAAI;IACV,KAAK,OAAO;MACVgD,YAAY,GAAG1E,cAAc,CAACyB,SAAS,EAAE,QAAQ,CAAC;MAClDkD,aAAa,GAAG3E,cAAc,CAACyB,SAAS,EAAE,MAAM,CAAC;MACjD;IACF,KAAK,MAAM;MACTiD,YAAY,GAAG,EAAE;MACjBC,aAAa,GAAG3E,cAAc,CAACyB,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC;MACpE;EACJ;EAEA,MAAMmD,YAAY,GAAG;IAAElD,IAAI;IAAEC,UAAU,EAAEA;EAAY,CAAC;;EAEtD;EACA;EACA,MAAMkD,aAAa,GAAGpB,EAAE,CAAC9C,MAAM,CAACK,YAAY,CAAC,CAAC;EAC9C,MAAM8D,cAAc,GAAGrB,EAAE,CAAC9C,MAAM,CAACO,aAAa,CAAC,CAAC;EAEhD,MAAM6D,GAAG,GAAGnF,SAAS,CAACkD,eAAe,CACnC,QAAQ,EACR+B,aAAa,EACb,KAAK,EACL,MACF,CAAoB;EACpB,MAAM9D,SAAS,GAAG,IAAIpB,SAAS,CAC7BoF,GAAG,EACHH,YAAY,EACZF,YAAY,EACZ,IACF,CAAC;;EAED;EACA,MAAMM,eAAe,GAAG,OAAO;EAC/B,MAAMC,IAAI,GAAGrF,SAAS,CAACkD,eAAe,CACpC,SAAS,EACTgC,cAAc,EACd,KAAK,EACLE,eACF,CAAqB;EACrB,MAAM/D,UAAU,GAAG,IAAItB,SAAS,CAC9BsF,IAAI,EACJL,YAAY,EACZD,aAAa,EACbnD,WACF,CAAC;EAED,OAAO;IAAET,SAAS;IAAEE;EAAW,CAAC;AAClC","ignoreList":[]}

package/lib/module/specs/rsaCipher.nitro.js

@@ -0,0 +1,4 @@
+"use strict";
+
+export {};
+//# sourceMappingURL=rsaCipher.nitro.js.map

package/lib/module/specs/rsaCipher.nitro.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["specs/rsaCipher.nitro.ts"],"mappings":"","ignoreList":[]}

package/lib/module/subtle.js

@@ -2,16 +2,18 @@
 
 /* eslint-disable @typescript-eslint/no-unused-vars */
 import { Buffer as SBuffer } from 'safe-buffer';
-import { CryptoKey } from './keys';
+import { CryptoKey, KeyObject, PublicKeyObject, PrivateKeyObject, SecretKeyObject } from './keys';
 import { bufferLikeToArrayBuffer } from './utils/conversion';
 import { lazyDOMException } from './utils/errors';
 import { normalizeHashName, HashContext } from './utils/hashnames';
 import { validateMaxBufferLength } from './utils/validation';
 import { asyncDigest } from './hash';
 import { createSecretKey } from './keys';
+import { NitroModules } from 'react-native-nitro-modules';
 import { pbkdf2DeriveBits } from './pbkdf2';
 import { ecImportKey, ecdsaSignVerify, ec_generateKeyPair } from './ec';
 import { rsa_generateKeyPair } from './rsa';
+import { getRandomValues } from './random';
 // import { pbkdf2DeriveBits } from './pbkdf2';
 // import { aesCipher, aesGenerateKey, aesImportKey, getAlgorithmName } from './aes';
 // import { rsaCipher, rsaExportKey, rsaImportKey, rsaKeyGenerate } from './rsa';
@@ -46,29 +48,426 @@ function getAlgorithmName(name, length) {
 }
 
 // Placeholder implementations for missing functions
-function ecExportKey(_key, _format) {
-  throw new Error('ecExportKey not implemented');
+function ecExportKey(key, format) {
+  const keyObject = key.keyObject;
+  if (format === KWebCryptoKeyFormat.kWebCryptoKeyFormatSPKI) {
+    // Export public key in SPKI format
+    const exported = keyObject.export({
+      format: 'der',
+      type: 'spki'
+    });
+    return bufferLikeToArrayBuffer(exported);
+  } else if (format === KWebCryptoKeyFormat.kWebCryptoKeyFormatPKCS8) {
+    // Export private key in PKCS8 format
+    const exported = keyObject.export({
+      format: 'der',
+      type: 'pkcs8'
+    });
+    return bufferLikeToArrayBuffer(exported);
+  } else {
+    throw new Error(`Unsupported EC export format: ${format}`);
+  }
 }
-function rsaExportKey(_key, _format) {
-  throw new Error('rsaExportKey not implemented');
+function rsaExportKey(key, format) {
+  const keyObject = key.keyObject;
+  if (format === KWebCryptoKeyFormat.kWebCryptoKeyFormatSPKI) {
+    // Export public key in SPKI format
+    const exported = keyObject.export({
+      format: 'der',
+      type: 'spki'
+    });
+    return bufferLikeToArrayBuffer(exported);
+  } else if (format === KWebCryptoKeyFormat.kWebCryptoKeyFormatPKCS8) {
+    // Export private key in PKCS8 format
+    const exported = keyObject.export({
+      format: 'der',
+      type: 'pkcs8'
+    });
+    return bufferLikeToArrayBuffer(exported);
+  } else {
+    throw new Error(`Unsupported RSA export format: ${format}`);
+  }
 }
-function rsaCipher(_mode, _key, _data, _algorithm) {
-  throw new Error('rsaCipher not implemented');
+async function rsaCipher(mode, key, data, algorithm) {
+  const rsaParams = algorithm;
+
+  // Validate key type matches operation
+  const expectedType = mode === CipherOrWrapMode.kWebCryptoCipherEncrypt ? 'public' : 'private';
+  if (key.type !== expectedType) {
+    throw lazyDOMException('The requested operation is not valid for the provided key', 'InvalidAccessError');
+  }
+
+  // Get hash algorithm from key
+  const hashAlgorithm = normalizeHashName(key.algorithm.hash);
+
+  // Prepare label (optional)
+  const label = rsaParams.label ? bufferLikeToArrayBuffer(rsaParams.label) : undefined;
+
+  // Create RSA cipher instance
+  const rsaCipherModule = NitroModules.createHybridObject('RsaCipher');
+  if (mode === CipherOrWrapMode.kWebCryptoCipherEncrypt) {
+    // Encrypt with public key
+    return rsaCipherModule.encrypt(key.keyObject.handle, data, hashAlgorithm, label);
+  } else {
+    // Decrypt with private key
+    return rsaCipherModule.decrypt(key.keyObject.handle, data, hashAlgorithm, label);
+  }
 }
-function aesCipher(_mode, _key, _data, _algorithm) {
-  throw new Error('aesCipher not implemented');
+async function aesCipher(mode, key, data, algorithm) {
+  const {
+    name
+  } = algorithm;
+  switch (name) {
+    case 'AES-CTR':
+      return aesCtrCipher(mode, key, data, algorithm);
+    case 'AES-CBC':
+      return aesCbcCipher(mode, key, data, algorithm);
+    case 'AES-GCM':
+      return aesGcmCipher(mode, key, data, algorithm);
+    default:
+      throw lazyDOMException(`Unsupported AES algorithm: ${name}`, 'NotSupportedError');
+  }
 }
-async function aesGenerateKey(_algorithm, _extractable, _keyUsages) {
-  throw new Error('aesGenerateKey not implemented');
+async function aesCtrCipher(mode, key, data, algorithm) {
+  // Validate counter and length
+  if (!algorithm.counter || algorithm.counter.byteLength !== 16) {
+    throw lazyDOMException('AES-CTR algorithm.counter must be 16 bytes', 'OperationError');
+  }
+  if (algorithm.length < 1 || algorithm.length > 128) {
+    throw lazyDOMException('AES-CTR algorithm.length must be between 1 and 128', 'OperationError');
+  }
+
+  // Get cipher type based on key length
+  const keyLength = key.algorithm.length;
+  const cipherType = `aes-${keyLength}-ctr`;
+
+  // Create cipher
+  const factory = NitroModules.createHybridObject('CipherFactory');
+  const cipher = factory.createCipher({
+    isCipher: mode === CipherOrWrapMode.kWebCryptoCipherEncrypt,
+    cipherType,
+    cipherKey: bufferLikeToArrayBuffer(key.keyObject.export()),
+    iv: bufferLikeToArrayBuffer(algorithm.counter)
+  });
+
+  // Process data
+  const updated = cipher.update(data);
+  const final = cipher.final();
+
+  // Concatenate results
+  const result = new Uint8Array(updated.byteLength + final.byteLength);
+  result.set(new Uint8Array(updated), 0);
+  result.set(new Uint8Array(final), updated.byteLength);
+  return result.buffer;
 }
-function rsaImportKey(_format, _data, _algorithm, _extractable, _keyUsages) {
-  throw new Error('rsaImportKey not implemented');
+async function aesCbcCipher(mode, key, data, algorithm) {
+  // Validate IV
+  const iv = bufferLikeToArrayBuffer(algorithm.iv);
+  if (iv.byteLength !== 16) {
+    throw lazyDOMException('algorithm.iv must contain exactly 16 bytes', 'OperationError');
+  }
+
+  // Get cipher type based on key length
+  const keyLength = key.algorithm.length;
+  const cipherType = `aes-${keyLength}-cbc`;
+
+  // Create cipher
+  const factory = NitroModules.createHybridObject('CipherFactory');
+  const cipher = factory.createCipher({
+    isCipher: mode === CipherOrWrapMode.kWebCryptoCipherEncrypt,
+    cipherType,
+    cipherKey: bufferLikeToArrayBuffer(key.keyObject.export()),
+    iv
+  });
+
+  // Process data
+  const updated = cipher.update(data);
+  const final = cipher.final();
+
+  // Concatenate results
+  const result = new Uint8Array(updated.byteLength + final.byteLength);
+  result.set(new Uint8Array(updated), 0);
+  result.set(new Uint8Array(final), updated.byteLength);
+  return result.buffer;
 }
-async function hmacImportKey(_algorithm, _format, _data, _extractable, _keyUsages) {
-  throw new Error('hmacImportKey not implemented');
+async function aesGcmCipher(mode, key, data, algorithm) {
+  const {
+    tagLength = 128
+  } = algorithm;
+
+  // Validate tag length
+  const validTagLengths = [32, 64, 96, 104, 112, 120, 128];
+  if (!validTagLengths.includes(tagLength)) {
+    throw lazyDOMException(`${tagLength} is not a valid AES-GCM tag length`, 'OperationError');
+  }
+  const tagByteLength = tagLength / 8;
+
+  // Get cipher type based on key length
+  const keyLength = key.algorithm.length;
+  const cipherType = `aes-${keyLength}-gcm`;
+
+  // Create cipher
+  const factory = NitroModules.createHybridObject('CipherFactory');
+  const cipher = factory.createCipher({
+    isCipher: mode === CipherOrWrapMode.kWebCryptoCipherEncrypt,
+    cipherType,
+    cipherKey: bufferLikeToArrayBuffer(key.keyObject.export()),
+    iv: bufferLikeToArrayBuffer(algorithm.iv),
+    authTagLen: tagByteLength
+  });
+  let processData;
+  let authTag;
+  if (mode === CipherOrWrapMode.kWebCryptoCipherDecrypt) {
+    // For decryption, extract auth tag from end of data
+    const dataView = new Uint8Array(data);
+    if (dataView.byteLength < tagByteLength) {
+      throw lazyDOMException('The provided data is too small.', 'OperationError');
+    }
+
+    // Split data and tag
+    const ciphertextLength = dataView.byteLength - tagByteLength;
+    processData = dataView.slice(0, ciphertextLength).buffer;
+    authTag = dataView.slice(ciphertextLength).buffer;
+
+    // Set auth tag for verification
+    cipher.setAuthTag(authTag);
+  } else {
+    processData = data;
+  }
+
+  // Set additional authenticated data if provided
+  if (algorithm.additionalData) {
+    cipher.setAAD(bufferLikeToArrayBuffer(algorithm.additionalData));
+  }
+
+  // Process data
+  const updated = cipher.update(processData);
+  const final = cipher.final();
+  if (mode === CipherOrWrapMode.kWebCryptoCipherEncrypt) {
+    // For encryption, append auth tag to result
+    const tag = cipher.getAuthTag();
+    const result = new Uint8Array(updated.byteLength + final.byteLength + tag.byteLength);
+    result.set(new Uint8Array(updated), 0);
+    result.set(new Uint8Array(final), updated.byteLength);
+    result.set(new Uint8Array(tag), updated.byteLength + final.byteLength);
+    return result.buffer;
+  } else {
+    // For decryption, just concatenate plaintext
+    const result = new Uint8Array(updated.byteLength + final.byteLength);
+    result.set(new Uint8Array(updated), 0);
+    result.set(new Uint8Array(final), updated.byteLength);
+    return result.buffer;
+  }
 }
-async function aesImportKey(_algorithm, _format, _data, _extractable, _keyUsages) {
-  throw new Error('aesImportKey not implemented');
+async function aesGenerateKey(algorithm, extractable, keyUsages) {
+  const {
+    length
+  } = algorithm;
+  const name = algorithm.name;
+  if (!name) {
+    throw lazyDOMException('Algorithm name is required', 'OperationError');
+  }
+
+  // Validate key length
+  if (![128, 192, 256].includes(length)) {
+    throw lazyDOMException(`Invalid AES key length: ${length}. Must be 128, 192, or 256.`, 'OperationError');
+  }
+
+  // Validate usages
+  const validUsages = ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'];
+  if (hasAnyNotIn(keyUsages, validUsages)) {
+    throw lazyDOMException(`Unsupported key usage for ${name}`, 'SyntaxError');
+  }
+
+  // Generate random key bytes
+  const keyBytes = new Uint8Array(length / 8);
+  getRandomValues(keyBytes);
+
+  // Create secret key
+  const keyObject = createSecretKey(keyBytes);
+
+  // Construct algorithm object with guaranteed name
+  const keyAlgorithm = {
+    name,
+    length
+  };
+  return new CryptoKey(keyObject, keyAlgorithm, keyUsages, extractable);
+}
+function rsaImportKey(format, data, algorithm, extractable, keyUsages) {
+  const {
+    name
+  } = algorithm;
+
+  // Validate usages
+  let checkSet;
+  switch (name) {
+    case 'RSASSA-PKCS1-v1_5':
+    case 'RSA-PSS':
+      checkSet = ['sign', 'verify'];
+      break;
+    case 'RSA-OAEP':
+      checkSet = ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'];
+      break;
+    default:
+      throw new Error(`Unsupported RSA algorithm: ${name}`);
+  }
+  if (hasAnyNotIn(keyUsages, checkSet)) {
+    throw new Error(`Unsupported key usage for ${name}`);
+  }
+  let keyObject;
+  if (format === 'jwk') {
+    const jwk = data;
+
+    // Validate JWK
+    if (jwk.kty !== 'RSA') {
+      throw new Error('Invalid JWK format for RSA key');
+    }
+    const handle = NitroModules.createHybridObject('KeyObjectHandle');
+    const keyType = handle.initJwk(jwk, undefined);
+    if (keyType === undefined) {
+      throw new Error('Failed to import RSA JWK');
+    }
+
+    // Create the appropriate KeyObject based on type
+    if (keyType === 1) {
+      keyObject = new PublicKeyObject(handle);
+    } else if (keyType === 2) {
+      keyObject = new PrivateKeyObject(handle);
+    } else {
+      throw new Error('Unexpected key type from RSA JWK import');
+    }
+  } else if (format === 'spki') {
+    const keyData = bufferLikeToArrayBuffer(data);
+    keyObject = KeyObject.createKeyObject('public', keyData, 'der', 'spki');
+  } else if (format === 'pkcs8') {
+    const keyData = bufferLikeToArrayBuffer(data);
+    keyObject = KeyObject.createKeyObject('private', keyData, 'der', 'pkcs8');
+  } else {
+    throw new Error(`Unsupported format for RSA import: ${format}`);
+  }
+
+  // Get the modulus length from the key and add it to the algorithm
+  const keyDetails = keyObject.asymmetricKeyDetails;
+
+  // Convert publicExponent number to big-endian byte array
+  let publicExponentBytes;
+  if (keyDetails?.publicExponent) {
+    const exp = keyDetails.publicExponent;
+    // Convert number to big-endian bytes
+    const bytes = [];
+    let value = exp;
+    while (value > 0) {
+      bytes.unshift(value & 0xff);
+      value = Math.floor(value / 256);
+    }
+    publicExponentBytes = new Uint8Array(bytes.length > 0 ? bytes : [0]);
+  }
+  const algorithmWithDetails = {
+    ...algorithm,
+    modulusLength: keyDetails?.modulusLength,
+    publicExponent: publicExponentBytes
+  };
+  return new CryptoKey(keyObject, algorithmWithDetails, keyUsages, extractable);
+}
+async function hmacImportKey(algorithm, format, data, extractable, keyUsages) {
+  // Validate usages
+  if (hasAnyNotIn(keyUsages, ['sign', 'verify'])) {
+    throw new Error('Unsupported key usage for an HMAC key');
+  }
+  let keyObject;
+  if (format === 'jwk') {
+    const jwk = data;
+
+    // Validate JWK
+    if (!jwk || typeof jwk !== 'object') {
+      throw new Error('Invalid keyData');
+    }
+    if (jwk.kty !== 'oct') {
+      throw new Error('Invalid JWK format for HMAC key');
+    }
+
+    // Validate key length if specified
+    if (algorithm.length !== undefined) {
+      if (!jwk.k) {
+        throw new Error('JWK missing key data');
+      }
+      // Decode to check length
+      const decoded = SBuffer.from(jwk.k, 'base64');
+      const keyBitLength = decoded.length * 8;
+      if (algorithm.length === 0) {
+        throw new Error('Zero-length key is not supported');
+      }
+      if (algorithm.length !== keyBitLength) {
+        throw new Error('Invalid key length');
+      }
+    }
+    const handle = NitroModules.createHybridObject('KeyObjectHandle');
+    const keyType = handle.initJwk(jwk, undefined);
+    if (keyType === undefined || keyType !== 0) {
+      throw new Error('Failed to import HMAC JWK');
+    }
+    keyObject = new SecretKeyObject(handle);
+  } else if (format === 'raw') {
+    keyObject = createSecretKey(data);
+  } else {
+    throw new Error(`Unable to import HMAC key with format ${format}`);
+  }
+  return new CryptoKey(keyObject, {
+    ...algorithm,
+    name: 'HMAC'
+  }, keyUsages, extractable);
+}
+async function aesImportKey(algorithm, format, data, extractable, keyUsages) {
+  const {
+    name,
+    length
+  } = algorithm;
+
+  // Validate usages
+  const validUsages = ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey'];
+  if (hasAnyNotIn(keyUsages, validUsages)) {
+    throw new Error(`Unsupported key usage for ${name}`);
+  }
+  let keyObject;
+  let actualLength;
+  if (format === 'jwk') {
+    const jwk = data;
+
+    // Validate JWK
+    if (jwk.kty !== 'oct') {
+      throw new Error('Invalid JWK format for AES key');
+    }
+    const handle = NitroModules.createHybridObject('KeyObjectHandle');
+    const keyType = handle.initJwk(jwk, undefined);
+    if (keyType === undefined || keyType !== 0) {
+      throw new Error('Failed to import AES JWK');
+    }
+    keyObject = new SecretKeyObject(handle);
+
+    // Get actual key length from imported key
+    const exported = keyObject.export();
+    actualLength = exported.byteLength * 8;
+  } else if (format === 'raw') {
+    const keyData = bufferLikeToArrayBuffer(data);
+    actualLength = keyData.byteLength * 8;
+
+    // Validate key length
+    if (![128, 192, 256].includes(actualLength)) {
+      throw new Error('Invalid AES key length');
+    }
+    keyObject = createSecretKey(keyData);
+  } else {
+    throw new Error(`Unsupported format for AES import: ${format}`);
+  }
+
+  // Validate length if specified
+  if (length !== undefined && length !== actualLength) {
+    throw new Error(`Key length mismatch: expected ${length}, got ${actualLength}`);
+  }
+  return new CryptoKey(keyObject, {
+    name,
+    length: actualLength
+  }, keyUsages, extractable);
 }
 const exportKeySpki = async key => {
   switch (key.algorithm.name) {
@@ -130,7 +529,11 @@ const exportKeyRaw = key => {
     case 'AES-KW':
     // Fall through
     case 'HMAC':
-      return key.keyObject.export();
+      {
+        const exported = key.keyObject.export();
+        // Convert Buffer to ArrayBuffer
+        return exported.buffer.slice(exported.byteOffset, exported.byteOffset + exported.byteLength);
+      }
   }
   throw lazyDOMException(`Unable to export a raw ${key.algorithm.name} ${key.type} key`, 'InvalidAccessError');
 };