react-native-quick-crypto 1.0.19 → 1.1.1

package/lib/commonjs/rsa.js

@@ -34,8 +34,15 @@ class Rsa {
   }
 }
 
-// Node API
+// Modern best practice (NIST SP 800-131A Rev. 2, IETF RFC 8017): RSA keys
+// shorter than 2048 bits are deprecated for both signing and encryption.
+// 1024-bit moduli have been factored in academic settings; 768-bit keys
+// have been factored on commodity hardware. Reject anything below 2048
+// at the JS boundary so callers can't accidentally generate weak keys.
 exports.Rsa = Rsa;
+const RSA_MIN_MODULUS_LENGTH = 2048;
+
+// Node API
 async function rsa_generateKeyPair(algorithm, extractable, keyUsages) {
   const {
     name,
@@ -45,8 +52,8 @@ async function rsa_generateKeyPair(algorithm, extractable, keyUsages) {
   } = algorithm;
 
   // Validate parameters first
-  if (!modulusLength || modulusLength < 256) {
-    throw (0, _utils.lazyDOMException)('Invalid key length', 'OperationError');
+  if (!modulusLength || modulusLength < RSA_MIN_MODULUS_LENGTH) {
+    throw (0, _utils.lazyDOMException)(`RSA modulusLength must be at least ${RSA_MIN_MODULUS_LENGTH} bits ` + `(got ${modulusLength ?? 0})`, 'OperationError');
   }
   if (!publicExponent || publicExponent.length === 0) {
     throw (0, _utils.lazyDOMException)('Invalid public exponent', 'OperationError');
@@ -138,8 +145,8 @@ function rsa_prepareKeyGenParams(_type, options) {
     publicExponent,
     hash = 'sha256'
   } = options;
-  if (!modulusLength || modulusLength < 256) {
-    throw new Error('Invalid modulus length');
+  if (!modulusLength || modulusLength < RSA_MIN_MODULUS_LENGTH) {
+    throw new RangeError(`RSA modulusLength must be at least ${RSA_MIN_MODULUS_LENGTH} bits ` + `(got ${modulusLength ?? 0})`);
   }
   const pubExp = publicExponent || 65537;
   const pubExpBytes = new Uint8Array([pubExp >> 16 & 0xff, pubExp >> 8 & 0xff, pubExp & 0xff]);

package/lib/commonjs/rsa.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNativeNitroModules","require","_reactNativeBuffer","_classes","_utils","Rsa","constructor","modulusLength","publicExponent","hashAlgorithm","native","NitroModules","createHybridObject","setModulusLength","setPublicExponent","buffer","slice","byteOffset","byteLength","setHashAlgorithm","generateKeyPair","publicKey","getPublicKey","privateKey","getPrivateKey","generateKeyPairSync","exports","rsa_generateKeyPair","algorithm","extractable","keyUsages","name","hash","lazyDOMException","length","hashName","normalizedHash","normalizeHashName","hasAnyNotIn","publicUsages","privateUsages","getUsagesUnion","rsa","keyAlgorithm","publicKeyData","pub","KeyObject","createKeyObject","CryptoKey","privateKeyData","priv","rsa_prepareKeyGenParams","_type","options","Error","pubExp","pubExpBytes","Uint8Array","rsa_formatKeyPairOutput","encoding","publicFormat","publicType","privateFormat","privateType","cipher","passphrase","format","KFormatType","PEM","DER","keyEncoding","KeyEncoding","SPKI","PKCS1","exported","handle","exportKey","Buffer","from","toString","PKCS8","rsa_generateKeyPairNode","type","rsa_generateKeyPairNodeSync"],"sourceRoot":"../../src","sources":["rsa.ts"],"mappings":";;;;;;;;;AAAA,IAAAA,wBAAA,GAAAC,OAAA;AACA,IAAAC,kBAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAMA,IAAAG,MAAA,GAAAH,OAAA;AAkBO,MAAMI,GAAG,CAAC;EAGfC,WAAWA,CACTC,aAAqB,EACrBC,cAA0B,EAC1BC,aAAqB,EACrB;IACA,IAAI,CAACC,MAAM,GAAGC,qCAAY,CAACC,kBAAkB,CAAa,YAAY,CAAC;IACvE,IAAI,CAACF,MAAM,CAACG,gBAAgB,CAACN,aAAa,CAAC;IAC3C,IAAI,CAACG,MAAM,CAACI,iBAAiB,CAC3BN,cAAc,CAACO,MAAM,CAACC,KAAK,CACzBR,cAAc,CAACS,UAAU,EACzBT,cAAc,CAACS,UAAU,GAAGT,cAAc,CAACU,UAC7C,CACF,CAAC;IACD,IAAI,CAACR,MAAM,CAACS,gBAAgB,CAACV,aAAa,CAAC;EAC7C;EAEA,MAAMW,eAAeA,CAAA,EAA2B;IAC9C,MAAM,IAAI,CAACV,MAAM,CAACU,eAAe,CAAC,CAAC;IACnC,OAAO;MACLC,SAAS,EAAE,IAAI,CAACX,MAAM,CAACY,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACb,MAAM,CAACc,aAAa,CAAC;IACxC,CAAC;EACH;EAEAC,mBAAmBA,CAAA,EAAkB;IACnC,IAAI,CAACf,MAAM,CAACe,mBAAmB,CAAC,CAAC;IACjC,OAAO;MACLJ,SAAS,EAAE,IAAI,CAACX,MAAM,CAACY,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACb,MAAM,CAACc,aAAa,CAAC;IACxC,CAAC;EACH;AACF;;AAEA;AAAAE,OAAA,CAAArB,GAAA,GAAAA,GAAA;AACO,eAAesB,mBAAmBA,CACvCC,SAA0B,EAC1BC,WAAoB,EACpBC,SAAqB,EACG;EACxB,MAAM;IAAEC,IAAI;IAAExB,aAAa;IAAEC,cAAc;IAAEwB;EAAK,CAAC,GACjDJ,SAAkC;;EAEpC;EACA,IAAI,CAACrB,aAAa,IAAIA,aAAa,GAAG,GAAG,EAAE;IACzC,MAAM,IAAA0B,uBAAgB,EAAC,oBAAoB,EAAE,gBAAgB,CAAC;EAChE;EAEA,IAAI,CAACzB,cAAc,IAAIA,cAAc,CAAC0B,MAAM,KAAK,CAAC,EAAE;IAClD,MAAM,IAAAD,uBAAgB,EAAC,yBAAyB,EAAE,gBAAgB,CAAC;EACrE;;EAEA;EACA,IAAIE,QAAgB;EACpB,IAAI;IACF,MAAMC,cAAc,GAAG,IAAAC,wBAAiB,EAACL,IAAI,CAAC;IAC9CG,QAAQ,GAAG,OAAOH,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,EAAED,IAAI,IAAIK,cAAc;EAC3E,CAAC,CAAC,MAAM;IACN,MAAM,IAAAH,uBAAgB,EAAC,wBAAwB,EAAE,mBAAmB,CAAC;EACvE;;EAEA;EACA,IAAIH,SAAS,CAACI,MAAM,KAAK,CAAC,EAAE;IAC1B,MAAM,IAAAD,uBAAgB,EAAC,wBAAwB,EAAE,aAAa,CAAC;EACjE;;EAEA;EACA,QAAQF,IAAI;IACV,KAAK,mBAAmB;MACtB,IAAI,IAAAO,kBAAW,EAACR,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE;QAC9C,MAAM,IAAAG,uBAAgB,EACpB,+BAA+BF,IAAI,MAAM,EACzC,aACF,CAAC;MACH;MACA;IACF,KAAK,SAAS;MACZ,IAAI,IAAAO,kBAAW,EAACR,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE;QAC9C,MAAM,IAAAG,uBAAgB,EACpB,+BAA+BF,IAAI,MAAM,EACzC,aACF,CAAC;MACH;MACA;IACF,KAAK,UAAU;MACb,IACE,IAAAO,kBAAW,EAACR,SAAS,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,EACtE;QACA,MAAM,IAAAG,uBAAgB,EACpB,+BAA+BF,IAAI,MAAM,EACzC,aACF,CAAC;MACH;MACA;IACF;MACE,MAAM,IAAAE,uBAAgB,EACpB,gCAAgC,EAChC,mBACF,CAAC;EACL;;EAEA;EACA,IAAIM,YAAwB,GAAG,EAAE;EACjC,IAAIC,aAAyB,GAAG,EAAE;EAClC,QAAQT,IAAI;IACV,KAAK,mBAAmB;IACxB,KAAK,SAAS;MACZQ,YAAY,GAAG,IAAAE,qBAAc,EAACX,SAAS,EAAE,QAAQ,CAAC;MAClDU,aAAa,GAAG,IAAAC,qBAAc,EAACX,SAAS,EAAE,MAAM,CAAC;MACjD;IACF,KAAK,UAAU;MACbS,YAAY,GAAG,IAAAE,qBAAc,EAACX,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;MAC9DU,aAAa,GAAG,IAAAC,qBAAc,EAACX,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;MACjE;EACJ;;EAEA;EACA,IAAIU,aAAa,CAACN,MAAM,KAAK,CAAC,EAAE;IAC9B,MAAM,IAAAD,uBAAgB,EAAC,wBAAwB,EAAE,aAAa,CAAC;EACjE;EAEA,MAAMS,GAAG,GAAG,IAAIrC,GAAG,CAACE,aAAa,EAAEC,cAAc,EAAE2B,QAAQ,CAAC;EAC5D,MAAMO,GAAG,CAACtB,eAAe,CAAC,CAAC;EAE3B,MAAMuB,YAAY,GAAG;IACnBZ,IAAI;IACJxB,aAAa;IACbC,cAAc;IACdwB,IAAI,EAAE;MAAED,IAAI,EAAEI;IAAS;EACzB,CAAC;;EAED;EACA,MAAMS,aAAa,GAAGF,GAAG,CAAChC,MAAM,CAACY,YAAY,CAAC,CAAC;EAC/C,MAAMuB,GAAG,GAAGC,kBAAS,CAACC,eAAe,CACnC,QAAQ,EACRH,aACF,CAAoB;EACpB,MAAMvB,SAAS,GAAG,IAAI2B,kBAAS,CAACH,GAAG,EAAEF,YAAY,EAAEJ,YAAY,EAAE,IAAI,CAAC;EAEtE,MAAMU,cAAc,GAAGP,GAAG,CAAChC,MAAM,CAACc,aAAa,CAAC,CAAC;EACjD,MAAM0B,IAAI,GAAGJ,kBAAS,CAACC,eAAe,CACpC,SAAS,EACTE,cACF,CAAqB;EACrB,MAAM1B,UAAU,GAAG,IAAIyB,kBAAS,CAC9BE,IAAI,EACJP,YAAY,EACZH,aAAa,EACbX,WACF,CAAC;EAED,OAAO;IAAER,SAAS;IAAEE;EAAW,CAAC;AAClC;AAEA,SAAS4B,uBAAuBA,CAC9BC,KAAwB,EACxBC,OAA2C,EACtC;EACL,IAAI,CAACA,OAAO,EAAE;IACZ,MAAM,IAAIC,KAAK,CAAC,6CAA6C,CAAC;EAChE;EAEA,MAAM;IACJ/C,aAAa;IACbC,cAAc;IACdwB,IAAI,GAAG;EACT,CAAC,GAAGqB,OAIH;EAED,IAAI,CAAC9C,aAAa,IAAIA,aAAa,GAAG,GAAG,EAAE;IACzC,MAAM,IAAI+C,KAAK,CAAC,wBAAwB,CAAC;EAC3C;EAEA,MAAMC,MAAM,GAAG/C,cAAc,IAAI,KAAK;EACtC,MAAMgD,WAAW,GAAG,IAAIC,UAAU,CAAC,CAChCF,MAAM,IAAI,EAAE,GAAI,IAAI,EACpBA,MAAM,IAAI,CAAC,GAAI,IAAI,EACpBA,MAAM,GAAG,IAAI,CACd,CAAC;EAEF,MAAMpB,QAAQ,GAAG,OAAOH,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI;EAEvD,OAAO,IAAI3B,GAAG,CAACE,aAAa,EAAEiD,WAAW,EAAErB,QAAQ,CAAC;AACtD;AAEA,SAASuB,uBAAuBA,CAC9BhB,GAAQ,EACRiB,QAA0B,EAI1B;EACA,MAAM;IACJC,YAAY;IACZC,UAAU;IACVC,aAAa;IACbC,WAAW;IACXC,MAAM;IACNC;EACF,CAAC,GAAGN,QAAQ;EAEZ,MAAMf,aAAa,GAAGF,GAAG,CAAChC,MAAM,CAACY,YAAY,CAAC,CAAC;EAC/C,MAAM2B,cAAc,GAAGP,GAAG,CAAChC,MAAM,CAACc,aAAa,CAAC,CAAC;EAEjD,MAAMqB,GAAG,GAAGC,kBAAS,CAACC,eAAe,CACnC,QAAQ,EACRH,aACF,CAAoB;EAEpB,MAAMM,IAAI,GAAGJ,kBAAS,CAACC,eAAe,CACpC,SAAS,EACTE,cACF,CAAqB;EAErB,IAAI5B,SAA0D;EAC9D,IAAIE,UAA4D;EAEhE,IAAIqC,YAAY,KAAK,CAAC,CAAC,EAAE;IACvBvC,SAAS,GAAGwB,GAAG;EACjB,CAAC,MAAM;IACL,MAAMqB,MAAM,GACVN,YAAY,KAAKO,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACE,GAAG;IACtE,MAAMC,WAAW,GACfT,UAAU,KAAKU,kBAAW,CAACC,IAAI,GAAGD,kBAAW,CAACC,IAAI,GAAGD,kBAAW,CAACE,KAAK;IACxE,MAAMC,QAAQ,GAAG7B,GAAG,CAAC8B,MAAM,CAACC,SAAS,CAACV,MAAM,EAAEI,WAAW,CAAC;IAC1D,IAAIJ,MAAM,KAAKC,kBAAW,CAACC,GAAG,EAAE;MAC9B/C,SAAS,GAAGwD,yBAAM,CAACC,IAAI,CAAC,IAAIrB,UAAU,CAACiB,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACrE,CAAC,MAAM;MACL1D,SAAS,GAAGqD,QAAQ;IACtB;EACF;EAEA,IAAIZ,aAAa,KAAK,CAAC,CAAC,EAAE;IACxBvC,UAAU,GAAG2B,IAAI;EACnB,CAAC,MAAM;IACL,MAAMgB,MAAM,GACVJ,aAAa,KAAKK,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACE,GAAG;IACvE,MAAMC,WAAW,GACfP,WAAW,KAAKQ,kBAAW,CAACS,KAAK,GAAGT,kBAAW,CAACS,KAAK,GAAGT,kBAAW,CAACE,KAAK;IAC3E,MAAMC,QAAQ,GAAGxB,IAAI,CAACyB,MAAM,CAACC,SAAS,CACpCV,MAAM,EACNI,WAAW,EACXN,MAAM,EACNC,UACF,CAAC;IACD,IAAIC,MAAM,KAAKC,kBAAW,CAACC,GAAG,EAAE;MAC9B7C,UAAU,GAAGsD,yBAAM,CAACC,IAAI,CAAC,IAAIrB,UAAU,CAACiB,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACtE,CAAC,MAAM;MACLxD,UAAU,GAAGmD,QAAQ;IACvB;EACF;EAEA,OAAO;IAAErD,SAAS;IAAEE;EAAW,CAAC;AAClC;AAEO,eAAe0D,uBAAuBA,CAC3CC,IAAuB,EACvB7B,OAA2C,EAC3CM,QAA0B,EAIzB;EACD,MAAMjB,GAAG,GAAGS,uBAAuB,CAAC+B,IAAI,EAAE7B,OAAO,CAAC;EAClD,MAAMX,GAAG,CAACtB,eAAe,CAAC,CAAC;EAC3B,OAAOsC,uBAAuB,CAAChB,GAAG,EAAEiB,QAAQ,CAAC;AAC/C;AAEO,SAASwB,2BAA2BA,CACzCD,IAAuB,EACvB7B,OAA2C,EAC3CM,QAA0B,EAI1B;EACA,MAAMjB,GAAG,GAAGS,uBAAuB,CAAC+B,IAAI,EAAE7B,OAAO,CAAC;EAClDX,GAAG,CAACjB,mBAAmB,CAAC,CAAC;EACzB,OAAOiC,uBAAuB,CAAChB,GAAG,EAAEiB,QAAQ,CAAC;AAC/C","ignoreList":[]}
+{"version":3,"names":["_reactNativeNitroModules","require","_reactNativeBuffer","_classes","_utils","Rsa","constructor","modulusLength","publicExponent","hashAlgorithm","native","NitroModules","createHybridObject","setModulusLength","setPublicExponent","buffer","slice","byteOffset","byteLength","setHashAlgorithm","generateKeyPair","publicKey","getPublicKey","privateKey","getPrivateKey","generateKeyPairSync","exports","RSA_MIN_MODULUS_LENGTH","rsa_generateKeyPair","algorithm","extractable","keyUsages","name","hash","lazyDOMException","length","hashName","normalizedHash","normalizeHashName","hasAnyNotIn","publicUsages","privateUsages","getUsagesUnion","rsa","keyAlgorithm","publicKeyData","pub","KeyObject","createKeyObject","CryptoKey","privateKeyData","priv","rsa_prepareKeyGenParams","_type","options","Error","RangeError","pubExp","pubExpBytes","Uint8Array","rsa_formatKeyPairOutput","encoding","publicFormat","publicType","privateFormat","privateType","cipher","passphrase","format","KFormatType","PEM","DER","keyEncoding","KeyEncoding","SPKI","PKCS1","exported","handle","exportKey","Buffer","from","toString","PKCS8","rsa_generateKeyPairNode","type","rsa_generateKeyPairNodeSync"],"sourceRoot":"../../src","sources":["rsa.ts"],"mappings":";;;;;;;;;AAAA,IAAAA,wBAAA,GAAAC,OAAA;AACA,IAAAC,kBAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAMA,IAAAG,MAAA,GAAAH,OAAA;AAkBO,MAAMI,GAAG,CAAC;EAGfC,WAAWA,CACTC,aAAqB,EACrBC,cAA0B,EAC1BC,aAAqB,EACrB;IACA,IAAI,CAACC,MAAM,GAAGC,qCAAY,CAACC,kBAAkB,CAAa,YAAY,CAAC;IACvE,IAAI,CAACF,MAAM,CAACG,gBAAgB,CAACN,aAAa,CAAC;IAC3C,IAAI,CAACG,MAAM,CAACI,iBAAiB,CAC3BN,cAAc,CAACO,MAAM,CAACC,KAAK,CACzBR,cAAc,CAACS,UAAU,EACzBT,cAAc,CAACS,UAAU,GAAGT,cAAc,CAACU,UAC7C,CACF,CAAC;IACD,IAAI,CAACR,MAAM,CAACS,gBAAgB,CAACV,aAAa,CAAC;EAC7C;EAEA,MAAMW,eAAeA,CAAA,EAA2B;IAC9C,MAAM,IAAI,CAACV,MAAM,CAACU,eAAe,CAAC,CAAC;IACnC,OAAO;MACLC,SAAS,EAAE,IAAI,CAACX,MAAM,CAACY,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACb,MAAM,CAACc,aAAa,CAAC;IACxC,CAAC;EACH;EAEAC,mBAAmBA,CAAA,EAAkB;IACnC,IAAI,CAACf,MAAM,CAACe,mBAAmB,CAAC,CAAC;IACjC,OAAO;MACLJ,SAAS,EAAE,IAAI,CAACX,MAAM,CAACY,YAAY,CAAC,CAAC;MACrCC,UAAU,EAAE,IAAI,CAACb,MAAM,CAACc,aAAa,CAAC;IACxC,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AAAAE,OAAA,CAAArB,GAAA,GAAAA,GAAA;AACA,MAAMsB,sBAAsB,GAAG,IAAI;;AAEnC;AACO,eAAeC,mBAAmBA,CACvCC,SAA0B,EAC1BC,WAAoB,EACpBC,SAAqB,EACG;EACxB,MAAM;IAAEC,IAAI;IAAEzB,aAAa;IAAEC,cAAc;IAAEyB;EAAK,CAAC,GACjDJ,SAAkC;;EAEpC;EACA,IAAI,CAACtB,aAAa,IAAIA,aAAa,GAAGoB,sBAAsB,EAAE;IAC5D,MAAM,IAAAO,uBAAgB,EACpB,sCAAsCP,sBAAsB,QAAQ,GAClE,QAAQpB,aAAa,IAAI,CAAC,GAAG,EAC/B,gBACF,CAAC;EACH;EAEA,IAAI,CAACC,cAAc,IAAIA,cAAc,CAAC2B,MAAM,KAAK,CAAC,EAAE;IAClD,MAAM,IAAAD,uBAAgB,EAAC,yBAAyB,EAAE,gBAAgB,CAAC;EACrE;;EAEA;EACA,IAAIE,QAAgB;EACpB,IAAI;IACF,MAAMC,cAAc,GAAG,IAAAC,wBAAiB,EAACL,IAAI,CAAC;IAC9CG,QAAQ,GAAG,OAAOH,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,EAAED,IAAI,IAAIK,cAAc;EAC3E,CAAC,CAAC,MAAM;IACN,MAAM,IAAAH,uBAAgB,EAAC,wBAAwB,EAAE,mBAAmB,CAAC;EACvE;;EAEA;EACA,IAAIH,SAAS,CAACI,MAAM,KAAK,CAAC,EAAE;IAC1B,MAAM,IAAAD,uBAAgB,EAAC,wBAAwB,EAAE,aAAa,CAAC;EACjE;;EAEA;EACA,QAAQF,IAAI;IACV,KAAK,mBAAmB;MACtB,IAAI,IAAAO,kBAAW,EAACR,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE;QAC9C,MAAM,IAAAG,uBAAgB,EACpB,+BAA+BF,IAAI,MAAM,EACzC,aACF,CAAC;MACH;MACA;IACF,KAAK,SAAS;MACZ,IAAI,IAAAO,kBAAW,EAACR,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE;QAC9C,MAAM,IAAAG,uBAAgB,EACpB,+BAA+BF,IAAI,MAAM,EACzC,aACF,CAAC;MACH;MACA;IACF,KAAK,UAAU;MACb,IACE,IAAAO,kBAAW,EAACR,SAAS,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,EACtE;QACA,MAAM,IAAAG,uBAAgB,EACpB,+BAA+BF,IAAI,MAAM,EACzC,aACF,CAAC;MACH;MACA;IACF;MACE,MAAM,IAAAE,uBAAgB,EACpB,gCAAgC,EAChC,mBACF,CAAC;EACL;;EAEA;EACA,IAAIM,YAAwB,GAAG,EAAE;EACjC,IAAIC,aAAyB,GAAG,EAAE;EAClC,QAAQT,IAAI;IACV,KAAK,mBAAmB;IACxB,KAAK,SAAS;MACZQ,YAAY,GAAG,IAAAE,qBAAc,EAACX,SAAS,EAAE,QAAQ,CAAC;MAClDU,aAAa,GAAG,IAAAC,qBAAc,EAACX,SAAS,EAAE,MAAM,CAAC;MACjD;IACF,KAAK,UAAU;MACbS,YAAY,GAAG,IAAAE,qBAAc,EAACX,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;MAC9DU,aAAa,GAAG,IAAAC,qBAAc,EAACX,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;MACjE;EACJ;;EAEA;EACA,IAAIU,aAAa,CAACN,MAAM,KAAK,CAAC,EAAE;IAC9B,MAAM,IAAAD,uBAAgB,EAAC,wBAAwB,EAAE,aAAa,CAAC;EACjE;EAEA,MAAMS,GAAG,GAAG,IAAItC,GAAG,CAACE,aAAa,EAAEC,cAAc,EAAE4B,QAAQ,CAAC;EAC5D,MAAMO,GAAG,CAACvB,eAAe,CAAC,CAAC;EAE3B,MAAMwB,YAAY,GAAG;IACnBZ,IAAI;IACJzB,aAAa;IACbC,cAAc;IACdyB,IAAI,EAAE;MAAED,IAAI,EAAEI;IAAS;EACzB,CAAC;;EAED;EACA,MAAMS,aAAa,GAAGF,GAAG,CAACjC,MAAM,CAACY,YAAY,CAAC,CAAC;EAC/C,MAAMwB,GAAG,GAAGC,kBAAS,CAACC,eAAe,CACnC,QAAQ,EACRH,aACF,CAAoB;EACpB,MAAMxB,SAAS,GAAG,IAAI4B,kBAAS,CAACH,GAAG,EAAEF,YAAY,EAAEJ,YAAY,EAAE,IAAI,CAAC;EAEtE,MAAMU,cAAc,GAAGP,GAAG,CAACjC,MAAM,CAACc,aAAa,CAAC,CAAC;EACjD,MAAM2B,IAAI,GAAGJ,kBAAS,CAACC,eAAe,CACpC,SAAS,EACTE,cACF,CAAqB;EACrB,MAAM3B,UAAU,GAAG,IAAI0B,kBAAS,CAC9BE,IAAI,EACJP,YAAY,EACZH,aAAa,EACbX,WACF,CAAC;EAED,OAAO;IAAET,SAAS;IAAEE;EAAW,CAAC;AAClC;AAEA,SAAS6B,uBAAuBA,CAC9BC,KAAwB,EACxBC,OAA2C,EACtC;EACL,IAAI,CAACA,OAAO,EAAE;IACZ,MAAM,IAAIC,KAAK,CAAC,6CAA6C,CAAC;EAChE;EAEA,MAAM;IACJhD,aAAa;IACbC,cAAc;IACdyB,IAAI,GAAG;EACT,CAAC,GAAGqB,OAIH;EAED,IAAI,CAAC/C,aAAa,IAAIA,aAAa,GAAGoB,sBAAsB,EAAE;IAC5D,MAAM,IAAI6B,UAAU,CAClB,sCAAsC7B,sBAAsB,QAAQ,GAClE,QAAQpB,aAAa,IAAI,CAAC,GAC9B,CAAC;EACH;EAEA,MAAMkD,MAAM,GAAGjD,cAAc,IAAI,KAAK;EACtC,MAAMkD,WAAW,GAAG,IAAIC,UAAU,CAAC,CAChCF,MAAM,IAAI,EAAE,GAAI,IAAI,EACpBA,MAAM,IAAI,CAAC,GAAI,IAAI,EACpBA,MAAM,GAAG,IAAI,CACd,CAAC;EAEF,MAAMrB,QAAQ,GAAG,OAAOH,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI;EAEvD,OAAO,IAAI5B,GAAG,CAACE,aAAa,EAAEmD,WAAW,EAAEtB,QAAQ,CAAC;AACtD;AAEA,SAASwB,uBAAuBA,CAC9BjB,GAAQ,EACRkB,QAA0B,EAI1B;EACA,MAAM;IACJC,YAAY;IACZC,UAAU;IACVC,aAAa;IACbC,WAAW;IACXC,MAAM;IACNC;EACF,CAAC,GAAGN,QAAQ;EAEZ,MAAMhB,aAAa,GAAGF,GAAG,CAACjC,MAAM,CAACY,YAAY,CAAC,CAAC;EAC/C,MAAM4B,cAAc,GAAGP,GAAG,CAACjC,MAAM,CAACc,aAAa,CAAC,CAAC;EAEjD,MAAMsB,GAAG,GAAGC,kBAAS,CAACC,eAAe,CACnC,QAAQ,EACRH,aACF,CAAoB;EAEpB,MAAMM,IAAI,GAAGJ,kBAAS,CAACC,eAAe,CACpC,SAAS,EACTE,cACF,CAAqB;EAErB,IAAI7B,SAA0D;EAC9D,IAAIE,UAA4D;EAEhE,IAAIuC,YAAY,KAAK,CAAC,CAAC,EAAE;IACvBzC,SAAS,GAAGyB,GAAG;EACjB,CAAC,MAAM;IACL,MAAMsB,MAAM,GACVN,YAAY,KAAKO,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACE,GAAG;IACtE,MAAMC,WAAW,GACfT,UAAU,KAAKU,kBAAW,CAACC,IAAI,GAAGD,kBAAW,CAACC,IAAI,GAAGD,kBAAW,CAACE,KAAK;IACxE,MAAMC,QAAQ,GAAG9B,GAAG,CAAC+B,MAAM,CAACC,SAAS,CAACV,MAAM,EAAEI,WAAW,CAAC;IAC1D,IAAIJ,MAAM,KAAKC,kBAAW,CAACC,GAAG,EAAE;MAC9BjD,SAAS,GAAG0D,yBAAM,CAACC,IAAI,CAAC,IAAIrB,UAAU,CAACiB,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACrE,CAAC,MAAM;MACL5D,SAAS,GAAGuD,QAAQ;IACtB;EACF;EAEA,IAAIZ,aAAa,KAAK,CAAC,CAAC,EAAE;IACxBzC,UAAU,GAAG4B,IAAI;EACnB,CAAC,MAAM;IACL,MAAMiB,MAAM,GACVJ,aAAa,KAAKK,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACC,GAAG,GAAGD,kBAAW,CAACE,GAAG;IACvE,MAAMC,WAAW,GACfP,WAAW,KAAKQ,kBAAW,CAACS,KAAK,GAAGT,kBAAW,CAACS,KAAK,GAAGT,kBAAW,CAACE,KAAK;IAC3E,MAAMC,QAAQ,GAAGzB,IAAI,CAAC0B,MAAM,CAACC,SAAS,CACpCV,MAAM,EACNI,WAAW,EACXN,MAAM,EACNC,UACF,CAAC;IACD,IAAIC,MAAM,KAAKC,kBAAW,CAACC,GAAG,EAAE;MAC9B/C,UAAU,GAAGwD,yBAAM,CAACC,IAAI,CAAC,IAAIrB,UAAU,CAACiB,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACtE,CAAC,MAAM;MACL1D,UAAU,GAAGqD,QAAQ;IACvB;EACF;EAEA,OAAO;IAAEvD,SAAS;IAAEE;EAAW,CAAC;AAClC;AAEO,eAAe4D,uBAAuBA,CAC3CC,IAAuB,EACvB9B,OAA2C,EAC3CO,QAA0B,EAIzB;EACD,MAAMlB,GAAG,GAAGS,uBAAuB,CAACgC,IAAI,EAAE9B,OAAO,CAAC;EAClD,MAAMX,GAAG,CAACvB,eAAe,CAAC,CAAC;EAC3B,OAAOwC,uBAAuB,CAACjB,GAAG,EAAEkB,QAAQ,CAAC;AAC/C;AAEO,SAASwB,2BAA2BA,CACzCD,IAAuB,EACvB9B,OAA2C,EAC3CO,QAA0B,EAI1B;EACA,MAAMlB,GAAG,GAAGS,uBAAuB,CAACgC,IAAI,EAAE9B,OAAO,CAAC;EAClDX,GAAG,CAAClB,mBAAmB,CAAC,CAAC;EACzB,OAAOmC,uBAAuB,CAACjB,GAAG,EAAEkB,QAAQ,CAAC;AAC/C","ignoreList":[]}

package/lib/commonjs/scrypt.js

@@ -22,11 +22,56 @@ const defaults = {
   p: 1,
   maxmem: 32 * 1024 * 1024
 };
+
+// RFC 7914 § 2: scrypt parameters
+//   N — CPU/memory cost; must be a power of 2 > 1.
+//   r — block size; positive integer.
+//   p — parallelization factor; positive integer.
+//   r * p must be < 2^30 (otherwise the spec output is undefined).
+//   The work buffer is 128 * r * N bytes, which must fit in maxmem.
+const SCRYPT_MAX_RP = 1 << 30; // 2^30 per RFC 7914
+
+function isPositiveInteger(value) {
+  return typeof value === 'number' && Number.isFinite(value) && Number.isInteger(value) && value > 0;
+}
+function validateScryptParams(N, r, p, maxmem) {
+  if (!isPositiveInteger(N)) {
+    throw new RangeError(`Invalid scrypt cost (N): ${N}`);
+  }
+  // Power-of-two & > 1 check (RFC 7914 §6 step 1).
+  if (N <= 1 || (N & N - 1) !== 0) {
+    throw new RangeError(`Invalid scrypt cost (N): ${N} — must be a power of 2 greater than 1`);
+  }
+  if (!isPositiveInteger(r)) {
+    throw new RangeError(`Invalid scrypt blockSize (r): ${r}`);
+  }
+  if (!isPositiveInteger(p)) {
+    throw new RangeError(`Invalid scrypt parallelization (p): ${p}`);
+  }
+  if (r * p >= SCRYPT_MAX_RP) {
+    throw new RangeError(`Invalid scrypt parameters: r * p (${r * p}) must be < 2^30`);
+  }
+  if (!isPositiveInteger(maxmem)) {
+    throw new RangeError(`Invalid scrypt maxmem: ${maxmem}`);
+  }
+  // 128 * r * N is the minimum working memory. Reject early so we don't
+  // hand a doomed parameter set to native and OOM the device.
+  const required = 128 * r * N;
+  if (required > maxmem) {
+    throw new RangeError(`Invalid scrypt parameters: working memory ${required} bytes ` + `exceeds maxmem ${maxmem}`);
+  }
+}
+function validateScryptKeylen(keylen) {
+  if (typeof keylen !== 'number' || !Number.isFinite(keylen) || !Number.isInteger(keylen) || keylen < 0 || keylen > 0x7fff_ffff) {
+    throw new TypeError('Bad key length');
+  }
+}
 function getScryptParams(options) {
   const N = options?.N ?? options?.cost ?? defaults.N;
   const r = options?.r ?? options?.blockSize ?? defaults.r;
   const p = options?.p ?? options?.parallelization ?? defaults.p;
   const maxmem = options?.maxmem ?? defaults.maxmem;
+  validateScryptParams(N, r, p, maxmem);
   return {
     N,
     r,
@@ -66,9 +111,7 @@ function scrypt(password, salt, keylen, options, callback) {
     } = getScryptParams(opts);
     const sanitizedPassword = sanitizeInput(password, 'Password');
     const sanitizedSalt = sanitizeInput(salt, 'Salt');
-    if (keylen < 0) {
-      throw new TypeError('Bad key length');
-    }
+    validateScryptKeylen(keylen);
     const nativeMod = getNative();
     nativeMod.deriveKey(sanitizedPassword, sanitizedSalt, N, r, p, maxmem, keylen).then(res => {
       cb(null, _reactNativeBuffer.Buffer.from(res));
@@ -88,9 +131,7 @@ function scryptSync(password, salt, keylen, options) {
   } = getScryptParams(options);
   const sanitizedPassword = sanitizeInput(password, 'Password');
   const sanitizedSalt = sanitizeInput(salt, 'Salt');
-  if (keylen < 0) {
-    throw new TypeError('Bad key length');
-  }
+  validateScryptKeylen(keylen);
   const nativeMod = getNative();
   const result = nativeMod.deriveKeySync(sanitizedPassword, sanitizedSalt, N, r, p, maxmem, keylen);
   return _reactNativeBuffer.Buffer.from(result);

package/lib/commonjs/scrypt.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNativeBuffer","require","_reactNativeNitroModules","_utils","native","getNative","NitroModules","createHybridObject","defaults","N","r","p","maxmem","getScryptParams","options","cost","blockSize","parallelization","validateCallback","callback","undefined","Error","sanitizeInput","input","name","binaryLikeToArrayBuffer","scrypt","password","salt","keylen","cb","opts","sanitizedPassword","sanitizedSalt","TypeError","nativeMod","deriveKey","then","res","Buffer","from","err","scryptSync","result","deriveKeySync"],"sourceRoot":"../../src","sources":["scrypt.ts"],"mappings":";;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AACA,IAAAC,wBAAA,GAAAD,OAAA;AAEA,IAAAE,MAAA,GAAAF,OAAA;AAkBA;AACA,IAAIG,MAAoB;AACxB,SAASC,SAASA,CAAA,EAAiB;EACjC,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGE,qCAAY,CAACC,kBAAkB,CAAe,QAAQ,CAAC;EAClE;EACA,OAAOH,MAAM;AACf;AAEA,MAAMI,QAAQ,GAAG;EACfC,CAAC,EAAE,KAAK;EACRC,CAAC,EAAE,CAAC;EACJC,CAAC,EAAE,CAAC;EACJC,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG;AACtB,CAAC;AAED,SAASC,eAAeA,CAACC,OAAuB,EAAE;EAChD,MAAML,CAAC,GAAGK,OAAO,EAAEL,CAAC,IAAIK,OAAO,EAAEC,IAAI,IAAIP,QAAQ,CAACC,CAAC;EACnD,MAAMC,CAAC,GAAGI,OAAO,EAAEJ,CAAC,IAAII,OAAO,EAAEE,SAAS,IAAIR,QAAQ,CAACE,CAAC;EACxD,MAAMC,CAAC,GAAGG,OAAO,EAAEH,CAAC,IAAIG,OAAO,EAAEG,eAAe,IAAIT,QAAQ,CAACG,CAAC;EAC9D,MAAMC,MAAM,GAAGE,OAAO,EAAEF,MAAM,IAAIJ,QAAQ,CAACI,MAAM;EAEjD,OAAO;IAAEH,CAAC;IAAEC,CAAC;IAAEC,CAAC;IAAEC;EAAO,CAAC;AAC5B;AAEA,SAASM,gBAAgBA,CAACC,QAAwB,EAAE;EAClD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,gCAAgC,CAAC;EACnD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAO,IAAAC,8BAAuB,EAACF,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;AAEO,SAASE,MAAMA,CACpBC,QAAkB,EAClBC,IAAU,EACVC,MAAc,EACdf,OAAwC,EACxCK,QAAyB,EACnB;EACN,IAAIW,EAAkB;EACtB,IAAIC,IAA+B;EAEnC,IAAI,OAAOjB,OAAO,KAAK,UAAU,EAAE;IACjCgB,EAAE,GAAGhB,OAAO;IACZiB,IAAI,GAAGX,SAAS;EAClB,CAAC,MAAM;IACLU,EAAE,GAAGX,QAAS;IACdY,IAAI,GAAGjB,OAAO;EAChB;EAEAI,gBAAgB,CAACY,EAAE,CAAC;EAEpB,IAAI;IACF,MAAM;MAAErB,CAAC;MAAEC,CAAC;MAAEC,CAAC;MAAEC;IAAO,CAAC,GAAGC,eAAe,CAACkB,IAAI,CAAC;IACjD,MAAMC,iBAAiB,GAAGV,aAAa,CAACK,QAAQ,EAAE,UAAU,CAAC;IAC7D,MAAMM,aAAa,GAAGX,aAAa,CAACM,IAAI,EAAE,MAAM,CAAC;IAEjD,IAAIC,MAAM,GAAG,CAAC,EAAE;MACd,MAAM,IAAIK,SAAS,CAAC,gBAAgB,CAAC;IACvC;IAEA,MAAMC,SAAS,GAAG9B,SAAS,CAAC,CAAC;IAC7B8B,SAAS,CACNC,SAAS,CAACJ,iBAAiB,EAAEC,aAAa,EAAExB,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,MAAM,EAAEiB,MAAM,CAAC,CACpEQ,IAAI,CACHC,GAAG,IAAI;MACLR,EAAE,CAAC,IAAI,EAAES,yBAAM,CAACC,IAAI,CAACF,GAAG,CAAC,CAAC;IAC5B,CAAC,EACDG,GAAG,IAAI;MACLX,EAAE,CAACW,GAAG,CAAC;IACT,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZX,EAAE,CAACW,GAAY,CAAC;EAClB;AACF;AAEO,SAASC,UAAUA,CACxBf,QAAkB,EAClBC,IAAU,EACVC,MAAc,EACdf,OAAuB,EACf;EACR,MAAM;IAAEL,CAAC;IAAEC,CAAC;IAAEC,CAAC;IAAEC;EAAO,CAAC,GAAGC,eAAe,CAACC,OAAO,CAAC;EACpD,MAAMkB,iBAAiB,GAAGV,aAAa,CAACK,QAAQ,EAAE,UAAU,CAAC;EAC7D,MAAMM,aAAa,GAAGX,aAAa,CAACM,IAAI,EAAE,MAAM,CAAC;EAEjD,IAAIC,MAAM,GAAG,CAAC,EAAE;IACd,MAAM,IAAIK,SAAS,CAAC,gBAAgB,CAAC;EACvC;EAEA,MAAMC,SAAS,GAAG9B,SAAS,CAAC,CAAC;EAC7B,MAAMsC,MAAM,GAAGR,SAAS,CAACS,aAAa,CACpCZ,iBAAiB,EACjBC,aAAa,EACbxB,CAAC,EACDC,CAAC,EACDC,CAAC,EACDC,MAAM,EACNiB,MACF,CAAC;EAED,OAAOU,yBAAM,CAACC,IAAI,CAACG,MAAM,CAAC;AAC5B","ignoreList":[]}
+{"version":3,"names":["_reactNativeBuffer","require","_reactNativeNitroModules","_utils","native","getNative","NitroModules","createHybridObject","defaults","N","r","p","maxmem","SCRYPT_MAX_RP","isPositiveInteger","value","Number","isFinite","isInteger","validateScryptParams","RangeError","required","validateScryptKeylen","keylen","TypeError","getScryptParams","options","cost","blockSize","parallelization","validateCallback","callback","undefined","Error","sanitizeInput","input","name","binaryLikeToArrayBuffer","scrypt","password","salt","cb","opts","sanitizedPassword","sanitizedSalt","nativeMod","deriveKey","then","res","Buffer","from","err","scryptSync","result","deriveKeySync"],"sourceRoot":"../../src","sources":["scrypt.ts"],"mappings":";;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AACA,IAAAC,wBAAA,GAAAD,OAAA;AAEA,IAAAE,MAAA,GAAAF,OAAA;AAkBA;AACA,IAAIG,MAAoB;AACxB,SAASC,SAASA,CAAA,EAAiB;EACjC,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGE,qCAAY,CAACC,kBAAkB,CAAe,QAAQ,CAAC;EAClE;EACA,OAAOH,MAAM;AACf;AAEA,MAAMI,QAAQ,GAAG;EACfC,CAAC,EAAE,KAAK;EACRC,CAAC,EAAE,CAAC;EACJC,CAAC,EAAE,CAAC;EACJC,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG;AACtB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,aAAa,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;;AAE/B,SAASC,iBAAiBA,CAACC,KAAc,EAAmB;EAC1D,OACE,OAAOA,KAAK,KAAK,QAAQ,IACzBC,MAAM,CAACC,QAAQ,CAACF,KAAK,CAAC,IACtBC,MAAM,CAACE,SAAS,CAACH,KAAK,CAAC,IACvBA,KAAK,GAAG,CAAC;AAEb;AAEA,SAASI,oBAAoBA,CAC3BV,CAAS,EACTC,CAAS,EACTC,CAAS,EACTC,MAAc,EACR;EACN,IAAI,CAACE,iBAAiB,CAACL,CAAC,CAAC,EAAE;IACzB,MAAM,IAAIW,UAAU,CAAC,4BAA4BX,CAAC,EAAE,CAAC;EACvD;EACA;EACA,IAAIA,CAAC,IAAI,CAAC,IAAI,CAACA,CAAC,GAAIA,CAAC,GAAG,CAAE,MAAM,CAAC,EAAE;IACjC,MAAM,IAAIW,UAAU,CAClB,4BAA4BX,CAAC,wCAC/B,CAAC;EACH;EACA,IAAI,CAACK,iBAAiB,CAACJ,CAAC,CAAC,EAAE;IACzB,MAAM,IAAIU,UAAU,CAAC,iCAAiCV,CAAC,EAAE,CAAC;EAC5D;EACA,IAAI,CAACI,iBAAiB,CAACH,CAAC,CAAC,EAAE;IACzB,MAAM,IAAIS,UAAU,CAAC,uCAAuCT,CAAC,EAAE,CAAC;EAClE;EACA,IAAID,CAAC,GAAGC,CAAC,IAAIE,aAAa,EAAE;IAC1B,MAAM,IAAIO,UAAU,CAClB,qCAAqCV,CAAC,GAAGC,CAAC,kBAC5C,CAAC;EACH;EACA,IAAI,CAACG,iBAAiB,CAACF,MAAM,CAAC,EAAE;IAC9B,MAAM,IAAIQ,UAAU,CAAC,0BAA0BR,MAAM,EAAE,CAAC;EAC1D;EACA;EACA;EACA,MAAMS,QAAQ,GAAG,GAAG,GAAGX,CAAC,GAAGD,CAAC;EAC5B,IAAIY,QAAQ,GAAGT,MAAM,EAAE;IACrB,MAAM,IAAIQ,UAAU,CAClB,6CAA6CC,QAAQ,SAAS,GAC5D,kBAAkBT,MAAM,EAC5B,CAAC;EACH;AACF;AAEA,SAASU,oBAAoBA,CAACC,MAAc,EAAQ;EAClD,IACE,OAAOA,MAAM,KAAK,QAAQ,IAC1B,CAACP,MAAM,CAACC,QAAQ,CAACM,MAAM,CAAC,IACxB,CAACP,MAAM,CAACE,SAAS,CAACK,MAAM,CAAC,IACzBA,MAAM,GAAG,CAAC,IACVA,MAAM,GAAG,WAAW,EACpB;IACA,MAAM,IAAIC,SAAS,CAAC,gBAAgB,CAAC;EACvC;AACF;AAEA,SAASC,eAAeA,CAACC,OAAuB,EAAE;EAChD,MAAMjB,CAAC,GAAGiB,OAAO,EAAEjB,CAAC,IAAIiB,OAAO,EAAEC,IAAI,IAAInB,QAAQ,CAACC,CAAC;EACnD,MAAMC,CAAC,GAAGgB,OAAO,EAAEhB,CAAC,IAAIgB,OAAO,EAAEE,SAAS,IAAIpB,QAAQ,CAACE,CAAC;EACxD,MAAMC,CAAC,GAAGe,OAAO,EAAEf,CAAC,IAAIe,OAAO,EAAEG,eAAe,IAAIrB,QAAQ,CAACG,CAAC;EAC9D,MAAMC,MAAM,GAAGc,OAAO,EAAEd,MAAM,IAAIJ,QAAQ,CAACI,MAAM;EAEjDO,oBAAoB,CAACV,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,MAAM,CAAC;EAErC,OAAO;IAAEH,CAAC;IAAEC,CAAC;IAAEC,CAAC;IAAEC;EAAO,CAAC;AAC5B;AAEA,SAASkB,gBAAgBA,CAACC,QAAwB,EAAE;EAClD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,gCAAgC,CAAC;EACnD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAO,IAAAC,8BAAuB,EAACF,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;AAEO,SAASE,MAAMA,CACpBC,QAAkB,EAClBC,IAAU,EACVjB,MAAc,EACdG,OAAwC,EACxCK,QAAyB,EACnB;EACN,IAAIU,EAAkB;EACtB,IAAIC,IAA+B;EAEnC,IAAI,OAAOhB,OAAO,KAAK,UAAU,EAAE;IACjCe,EAAE,GAAGf,OAAO;IACZgB,IAAI,GAAGV,SAAS;EAClB,CAAC,MAAM;IACLS,EAAE,GAAGV,QAAS;IACdW,IAAI,GAAGhB,OAAO;EAChB;EAEAI,gBAAgB,CAACW,EAAE,CAAC;EAEpB,IAAI;IACF,MAAM;MAAEhC,CAAC;MAAEC,CAAC;MAAEC,CAAC;MAAEC;IAAO,CAAC,GAAGa,eAAe,CAACiB,IAAI,CAAC;IACjD,MAAMC,iBAAiB,GAAGT,aAAa,CAACK,QAAQ,EAAE,UAAU,CAAC;IAC7D,MAAMK,aAAa,GAAGV,aAAa,CAACM,IAAI,EAAE,MAAM,CAAC;IAEjDlB,oBAAoB,CAACC,MAAM,CAAC;IAE5B,MAAMsB,SAAS,GAAGxC,SAAS,CAAC,CAAC;IAC7BwC,SAAS,CACNC,SAAS,CAACH,iBAAiB,EAAEC,aAAa,EAAEnC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,MAAM,EAAEW,MAAM,CAAC,CACpEwB,IAAI,CACHC,GAAG,IAAI;MACLP,EAAE,CAAC,IAAI,EAAEQ,yBAAM,CAACC,IAAI,CAACF,GAAG,CAAC,CAAC;IAC5B,CAAC,EACDG,GAAG,IAAI;MACLV,EAAE,CAACU,GAAG,CAAC;IACT,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZV,EAAE,CAACU,GAAY,CAAC;EAClB;AACF;AAEO,SAASC,UAAUA,CACxBb,QAAkB,EAClBC,IAAU,EACVjB,MAAc,EACdG,OAAuB,EACf;EACR,MAAM;IAAEjB,CAAC;IAAEC,CAAC;IAAEC,CAAC;IAAEC;EAAO,CAAC,GAAGa,eAAe,CAACC,OAAO,CAAC;EACpD,MAAMiB,iBAAiB,GAAGT,aAAa,CAACK,QAAQ,EAAE,UAAU,CAAC;EAC7D,MAAMK,aAAa,GAAGV,aAAa,CAACM,IAAI,EAAE,MAAM,CAAC;EAEjDlB,oBAAoB,CAACC,MAAM,CAAC;EAE5B,MAAMsB,SAAS,GAAGxC,SAAS,CAAC,CAAC;EAC7B,MAAMgD,MAAM,GAAGR,SAAS,CAACS,aAAa,CACpCX,iBAAiB,EACjBC,aAAa,EACbnC,CAAC,EACDC,CAAC,EACDC,CAAC,EACDC,MAAM,EACNW,MACF,CAAC;EAED,OAAO0B,yBAAM,CAACC,IAAI,CAACG,MAAM,CAAC;AAC5B","ignoreList":[]}

package/lib/commonjs/subtle.js

@@ -43,14 +43,69 @@ var CipherOrWrapMode = /*#__PURE__*/function (CipherOrWrapMode) {
 function hasAnyNotIn(usages, allowed) {
   return usages.some(usage => !allowed.includes(usage));
 }
+
+// WebCrypto §18.4.4: algorithm name lookup is case-insensitive, but the
+// canonical mixed-case form is preserved in the resulting `name` field
+// (e.g. "aes-gcm" → "AES-GCM"). This map is built lazily on first call so
+// the registry of canonical names below can stay declared after the
+// function. Without this, callers who pass lowercase strings bypass the
+// downstream `SUPPORTED_ALGORITHMS` set comparisons silently.
+//
+// The map's value type is `AnyAlgorithm` so callers can use the lookup
+// result directly without re-asserting. The `as AnyAlgorithm` at insertion
+// is the single contract boundary: every name in `SUPPORTED_ALGORITHMS` is
+// already a member of `AnyAlgorithm` by construction.
+let _canonicalAlgorithmNames = null;
+function getCanonicalAlgorithmNames() {
+  if (_canonicalAlgorithmNames === null) {
+    const map = new Map();
+    for (const set of Object.values(SUPPORTED_ALGORITHMS)) {
+      if (!set) continue;
+      for (const name of set) {
+        map.set(name.toLowerCase(), name);
+      }
+    }
+    _canonicalAlgorithmNames = map;
+  }
+  return _canonicalAlgorithmNames;
+}
 function normalizeAlgorithm(algorithm, _operation) {
+  const map = getCanonicalAlgorithmNames();
   if (typeof algorithm === 'string') {
     return {
-      name: algorithm
+      name: map.get(algorithm.toLowerCase()) ?? algorithm
+    };
+  }
+  if (typeof algorithm.name === 'string') {
+    const canonical = map.get(algorithm.name.toLowerCase()) ?? algorithm.name;
+    return {
+      ...algorithm,
+      name: canonical
     };
   }
   return algorithm;
 }
+
+// WebCrypto §25.7.6 (JWK import): if the JWK's `ext` member is present and
+// false, the requested `extractable` parameter must also be false. If the
+// JWK's `key_ops` member is present, every requested usage must appear in
+// it. We centralize the check here so every importKey path that accepts
+// `format === 'jwk'` can reuse it.
+function validateJwkExtAndKeyOps(jwk, extractable, keyUsages) {
+  if (jwk.ext === false && extractable) {
+    throw (0, _errors.lazyDOMException)('JWK "ext" is false but extractable was requested', 'DataError');
+  }
+  if (jwk.key_ops !== undefined) {
+    if (!Array.isArray(jwk.key_ops)) {
+      throw (0, _errors.lazyDOMException)('JWK "key_ops" must be an array', 'DataError');
+    }
+    for (const usage of keyUsages) {
+      if (!jwk.key_ops.includes(usage)) {
+        throw (0, _errors.lazyDOMException)(`JWK "key_ops" does not include requested usage "${usage}"`, 'DataError');
+      }
+    }
+  }
+}
 function getAlgorithmName(name, length) {
   switch (name) {
     case 'AES-CBC':
@@ -552,6 +607,7 @@ async function kmacImportKey(algorithm, format, data, extractable, keyUsages) {
     if (!jwk || typeof jwk !== 'object') {
       throw (0, _errors.lazyDOMException)('Invalid keyData', 'DataError');
     }
+    validateJwkExtAndKeyOps(jwk, extractable, keyUsages);
     if (jwk.kty !== 'oct') {
       throw (0, _errors.lazyDOMException)('Invalid JWK format for KMAC key', 'DataError');
     }
@@ -613,6 +669,7 @@ function rsaImportKey(format, data, algorithm, extractable, keyUsages) {
     if (jwk.kty !== 'RSA') {
       throw new Error('Invalid JWK format for RSA key');
     }
+    validateJwkExtAndKeyOps(jwk, extractable, keyUsages);
     const handle = _reactNativeNitroModules.NitroModules.createHybridObject('KeyObjectHandle');
     const keyType = handle.initJwk(jwk, undefined);
     if (keyType === undefined) {
@@ -680,6 +737,7 @@ async function hmacImportKey(algorithm, format, data, extractable, keyUsages) {
     if (!jwk || typeof jwk !== 'object') {
       throw new Error('Invalid keyData');
     }
+    validateJwkExtAndKeyOps(jwk, extractable, keyUsages);
     if (jwk.kty !== 'oct') {
       throw new Error('Invalid JWK format for HMAC key');
     }
@@ -742,6 +800,7 @@ async function aesImportKey(algorithm, format, data, extractable, keyUsages) {
     if (jwk.kty !== 'oct') {
       throw new Error('Invalid JWK format for AES key');
     }
+    validateJwkExtAndKeyOps(jwk, extractable, keyUsages);
     const handle = _reactNativeNitroModules.NitroModules.createHybridObject('KeyObjectHandle');
     const keyType = handle.initJwk(jwk, undefined);
     if (keyType === undefined || keyType !== 0) {
@@ -804,6 +863,7 @@ function edImportKey(format, data, algorithm, extractable, keyUsages) {
     keyObject = new _keys.PublicKeyObject(handle);
   } else if (format === 'jwk') {
     const jwkData = data;
+    validateJwkExtAndKeyOps(jwkData, extractable, keyUsages);
     const handle = _reactNativeNitroModules.NitroModules.createHybridObject('KeyObjectHandle');
     const keyType = handle.initJwk(jwkData);
     if (keyType === undefined) {
@@ -1122,6 +1182,13 @@ const hkdfImportKey = async (format, keyData, algorithm, extractable, keyUsages)
   const {
     name
   } = algorithm;
+  // WebCrypto §28.7.6: HKDF keys are never extractable. The previous
+  // implementation passed `extractable` through verbatim, allowing callers
+  // to round-trip the input keying material via `exportKey` — defeating
+  // the whole point of the deriveBits-only usage.
+  if (extractable) {
+    throw (0, _errors.lazyDOMException)(`${name} keys are not extractable`, 'SyntaxError');
+  }
   if (hasAnyNotIn(keyUsages, ['deriveKey', 'deriveBits'])) {
     throw new Error(`Unsupported key usage for a ${name} key`);
   }
@@ -1131,7 +1198,7 @@ const hkdfImportKey = async (format, keyData, algorithm, extractable, keyUsages)
         const keyObject = (0, _keys.createSecretKey)(keyData);
         return new _keys.CryptoKey(keyObject, {
           name
-        }, keyUsages, extractable);
+        }, keyUsages, false);
       }
     default:
       throw new Error(`Unable to import ${name} key with format ${format}`);
@@ -1386,9 +1453,13 @@ class Subtle {
     return (0, _hash.asyncDigest)(normalizedAlgorithm, data);
   }
   async deriveBits(algorithm, baseKey, length) {
-    // Allow either deriveBits OR deriveKey usage (WebCrypto spec allows both)
-    if (!baseKey.keyUsages.includes('deriveBits') && !baseKey.keyUsages.includes('deriveKey')) {
-      throw new Error('baseKey does not have deriveBits or deriveKey usage');
+    // WebCrypto §SubtleCrypto.deriveBits step 11: throw InvalidAccessError
+    // unless `baseKey.[[usages]]` contains "deriveBits" specifically. The
+    // previous `deriveBits || deriveKey` accept-either branch silently
+    // promoted deriveKey-only keys into deriveBits use, contradicting the
+    // spec usage gate.
+    if (!baseKey.keyUsages.includes('deriveBits')) {
+      throw (0, _errors.lazyDOMException)('baseKey does not have deriveBits usage', 'InvalidAccessError');
     }
     if (baseKey.algorithm.name !== algorithm.name) throw new Error('Key algorithm mismatch');
     switch (algorithm.name) {