react-native-quick-crypto 1.1.0 → 1.1.2

package/deps/ncrypto/src/ncrypto.cpp

@@ -15,10 +15,6 @@
 #include <openssl/hkdf.h>
 #endif
 
-#if OPENSSL_VERSION_NUMBER >= 0x30200000L
-#include <openssl/thread.h>
-#endif
-
 #include <algorithm>
 #include <array>
 #include <cstring>
@@ -28,6 +24,9 @@
 #include <openssl/core_names.h>
 #include <openssl/params.h>
 #include <openssl/provider.h>
+#if OPENSSL_VERSION_NUMBER >= 0x30200000L
+#include <openssl/thread.h>
+#endif
 #endif
 #if OPENSSL_WITH_PQC
 struct PQCMapping {
@@ -228,7 +227,7 @@ void DataPointer::zero() {
   OPENSSL_cleanse(data_, len_);
 }
 
-void DataPointer::reset(void* data, size_t length) {
+void DataPointer::free() {
   if (data_ != nullptr) {
     if (secure_) {
       OPENSSL_secure_clear_free(data_, len_);
@@ -236,6 +235,10 @@ void DataPointer::reset(void* data, size_t length) {
       OPENSSL_clear_free(data_, len_);
     }
   }
+}
+
+void DataPointer::reset(void* data, size_t length) {
+  free();
   data_ = data;
   len_ = length;
 }
@@ -258,7 +261,12 @@ DataPointer DataPointer::resize(size_t len) {
   size_t actual_len = std::min(len_, len);
   auto buf = release();
   if (actual_len == len_) return DataPointer(buf.data, actual_len);
-  buf.data = OPENSSL_realloc(buf.data, actual_len);
+  auto new_data = OPENSSL_realloc(buf.data, actual_len);
+  if (new_data == nullptr) {
+    free();
+    return {};
+  }
+  buf.data = new_data;
   buf.len = actual_len;
   return DataPointer(buf);
 }
@@ -810,11 +818,15 @@ bool PrintGeneralName(const BIOPointer& out, const GENERAL_NAME* gen) {
     // Note that the preferred name syntax (see RFCs 5280 and 1034) with
     // wildcards is a subset of what we consider "safe", so spec-compliant DNS
     // names will never need to be escaped.
-    PrintAltName(out, reinterpret_cast<const char*>(name->data), name->length);
+    PrintAltName(out,
+                 reinterpret_cast<const char*>(ASN1_STRING_get0_data(name)),
+                 ASN1_STRING_length(name));
   } else if (gen->type == GEN_EMAIL) {
     ASN1_IA5STRING* name = gen->d.rfc822Name;
     BIO_write(out.get(), "email:", 6);
-    PrintAltName(out, reinterpret_cast<const char*>(name->data), name->length);
+    PrintAltName(out,
+                 reinterpret_cast<const char*>(ASN1_STRING_get0_data(name)),
+                 ASN1_STRING_length(name));
   } else if (gen->type == GEN_URI) {
     ASN1_IA5STRING* name = gen->d.uniformResourceIdentifier;
     BIO_write(out.get(), "URI:", 4);
@@ -822,7 +834,9 @@ bool PrintGeneralName(const BIOPointer& out, const GENERAL_NAME* gen) {
     // with a few exceptions, most notably URIs that contains commas (see
     // RFC 2396). In other words, most legitimate URIs will not require
     // escaping.
-    PrintAltName(out, reinterpret_cast<const char*>(name->data), name->length);
+    PrintAltName(out,
+                 reinterpret_cast<const char*>(ASN1_STRING_get0_data(name)),
+                 ASN1_STRING_length(name));
   } else if (gen->type == GEN_DIRNAME) {
     // Earlier versions of Node.js used X509_NAME_oneline to print the X509_NAME
     // object. The format was non standard and should be avoided. The use of
@@ -855,17 +869,18 @@ bool PrintGeneralName(const BIOPointer& out, const GENERAL_NAME* gen) {
   } else if (gen->type == GEN_IPADD) {
     BIO_printf(out.get(), "IP Address:");
     const ASN1_OCTET_STRING* ip = gen->d.ip;
-    const unsigned char* b = ip->data;
-    if (ip->length == 4) {
+    const unsigned char* b = ASN1_STRING_get0_data(ip);
+    int ip_len = ASN1_STRING_length(ip);
+    if (ip_len == 4) {
       BIO_printf(out.get(), "%d.%d.%d.%d", b[0], b[1], b[2], b[3]);
-    } else if (ip->length == 16) {
+    } else if (ip_len == 16) {
       for (unsigned int j = 0; j < 8; j++) {
         uint16_t pair = (b[2 * j] << 8) | b[2 * j + 1];
         BIO_printf(out.get(), (j == 0) ? "%X" : ":%X", pair);
       }
     } else {
 #if OPENSSL_VERSION_MAJOR >= 3
-      BIO_printf(out.get(), "<invalid length=%d>", ip->length);
+      BIO_printf(out.get(), "<invalid length=%d>", ip_len);
 #else
       BIO_printf(out.get(), "<invalid>");
 #endif
@@ -915,15 +930,15 @@ bool PrintGeneralName(const BIOPointer& out, const GENERAL_NAME* gen) {
       if (unicode) {
         auto name = gen->d.otherName->value->value.utf8string;
         PrintAltName(out,
-                     reinterpret_cast<const char*>(name->data),
-                     name->length,
+                     reinterpret_cast<const char*>(ASN1_STRING_get0_data(name)),
+                     ASN1_STRING_length(name),
                      AltNameOption::UTF8,
                      prefix);
       } else {
         auto name = gen->d.otherName->value->value.ia5string;
         PrintAltName(out,
-                     reinterpret_cast<const char*>(name->data),
-                     name->length,
+                     reinterpret_cast<const char*>(ASN1_STRING_get0_data(name)),
+                     ASN1_STRING_length(name),
                      AltNameOption::NONE,
                      prefix);
       }
@@ -944,11 +959,14 @@ bool PrintGeneralName(const BIOPointer& out, const GENERAL_NAME* gen) {
 }
 }  // namespace
 
-bool SafeX509SubjectAltNamePrint(const BIOPointer& out, X509_EXTENSION* ext) {
-  auto ret = OBJ_obj2nid(X509_EXTENSION_get_object(ext));
+bool SafeX509SubjectAltNamePrint(const BIOPointer& out,
+                                 const X509_EXTENSION* ext) {
+  // const_cast needed for OpenSSL < 4.0 which lacks const-correctness
+  auto* mext = const_cast<X509_EXTENSION*>(ext);
+  auto ret = OBJ_obj2nid(X509_EXTENSION_get_object(mext));
   if (ret != NID_subject_alt_name) return false;
 
-  GENERAL_NAMES* names = static_cast<GENERAL_NAMES*>(X509V3_EXT_d2i(ext));
+  GENERAL_NAMES* names = static_cast<GENERAL_NAMES*>(X509V3_EXT_d2i(mext));
   if (names == nullptr) return false;
 
   bool ok = true;
@@ -967,12 +985,14 @@ bool SafeX509SubjectAltNamePrint(const BIOPointer& out, X509_EXTENSION* ext) {
   return ok;
 }
 
-bool SafeX509InfoAccessPrint(const BIOPointer& out, X509_EXTENSION* ext) {
-  auto ret = OBJ_obj2nid(X509_EXTENSION_get_object(ext));
+bool SafeX509InfoAccessPrint(const BIOPointer& out, const X509_EXTENSION* ext) {
+  // const_cast needed for OpenSSL < 4.0 which lacks const-correctness
+  auto* mext = const_cast<X509_EXTENSION*>(ext);
+  auto ret = OBJ_obj2nid(X509_EXTENSION_get_object(mext));
   if (ret != NID_info_access) return false;
 
   AUTHORITY_INFO_ACCESS* descs =
-      static_cast<AUTHORITY_INFO_ACCESS*>(X509V3_EXT_d2i(ext));
+      static_cast<AUTHORITY_INFO_ACCESS*>(X509V3_EXT_d2i(mext));
   if (descs == nullptr) return false;
 
   bool ok = true;
@@ -1116,7 +1136,7 @@ BIOPointer X509View::getValidFrom() const {
   if (cert_ == nullptr) return {};
   BIOPointer bio(BIO_new(BIO_s_mem()));
   if (!bio) return {};
-  ASN1_TIME_print(bio.get(), X509_get_notBefore(cert_));
+  ASN1_TIME_print(bio.get(), X509_get0_notBefore(cert_));
   return bio;
 }
 
@@ -1125,7 +1145,7 @@ BIOPointer X509View::getValidTo() const {
   if (cert_ == nullptr) return {};
   BIOPointer bio(BIO_new(BIO_s_mem()));
   if (!bio) return {};
-  ASN1_TIME_print(bio.get(), X509_get_notAfter(cert_));
+  ASN1_TIME_print(bio.get(), X509_get0_notAfter(cert_));
   return bio;
 }
 
@@ -1515,6 +1535,7 @@ BIOPointer BIOPointer::NewSecMem() {
 }
 
 BIOPointer BIOPointer::New(const BIO_METHOD* method) {
+  if (method == nullptr) return {};
   return BIOPointer(BIO_new(method));
 }
 
@@ -3402,19 +3423,21 @@ bool CipherCtxPointer::setKeyLength(size_t length) {
 bool CipherCtxPointer::setIvLength(size_t length) {
   if (!ctx_) return false;
   return EVP_CIPHER_CTX_ctrl(
-      ctx_.get(), EVP_CTRL_AEAD_SET_IVLEN, length, nullptr);
+             ctx_.get(), EVP_CTRL_AEAD_SET_IVLEN, length, nullptr) > 0;
 }
 
 bool CipherCtxPointer::setAeadTag(const Buffer<const char>& tag) {
   if (!ctx_) return false;
-  return EVP_CIPHER_CTX_ctrl(
-      ctx_.get(), EVP_CTRL_AEAD_SET_TAG, tag.len, const_cast<char*>(tag.data));
+  return EVP_CIPHER_CTX_ctrl(ctx_.get(),
+                             EVP_CTRL_AEAD_SET_TAG,
+                             tag.len,
+                             const_cast<char*>(tag.data)) > 0;
 }
 
 bool CipherCtxPointer::setAeadTagLength(size_t length) {
   if (!ctx_) return false;
   return EVP_CIPHER_CTX_ctrl(
-      ctx_.get(), EVP_CTRL_AEAD_SET_TAG, length, nullptr);
+             ctx_.get(), EVP_CTRL_AEAD_SET_TAG, length, nullptr) > 0;
 }
 
 bool CipherCtxPointer::setPadding(bool padding) {
@@ -3484,7 +3507,7 @@ bool CipherCtxPointer::update(const Buffer<const unsigned char>& in,
 
 bool CipherCtxPointer::getAeadTag(size_t len, unsigned char* out) {
   if (!ctx_) return false;
-  return EVP_CIPHER_CTX_ctrl(ctx_.get(), EVP_CTRL_AEAD_GET_TAG, len, out);
+  return EVP_CIPHER_CTX_ctrl(ctx_.get(), EVP_CTRL_AEAD_GET_TAG, len, out) > 0;
 }
 
 // ============================================================================
@@ -3667,8 +3690,38 @@ bool ECKeyPointer::setPublicKey(const ECPointPointer& pub) {
 bool ECKeyPointer::setPublicKeyRaw(const BignumPointer& x,
                                    const BignumPointer& y) {
   if (!key_) return false;
-  return EC_KEY_set_public_key_affine_coordinates(
-             key_.get(), x.get(), y.get()) == 1;
+  const EC_GROUP* group = EC_KEY_get0_group(key_.get());
+  if (group == nullptr) return false;
+
+  // For curves with cofactor h=1, use EC_POINT_oct2point +
+  // EC_KEY_set_public_key instead of EC_KEY_set_public_key_affine_coordinates.
+  // The latter internally calls EC_KEY_check_key() which performs a scalar
+  // multiplication (n*Q) for order validation — redundant when h=1 since every
+  // on-curve point already has order n. EC_POINT_oct2point validates the point
+  // is on the curve, which is sufficient. For curves with h!=1, fall back to
+  // the full check.
+  auto cofactor = BignumPointer::New();
+  if (!cofactor || !EC_GROUP_get_cofactor(group, cofactor.get(), nullptr) ||
+      !cofactor.isOne()) {
+    return EC_KEY_set_public_key_affine_coordinates(
+               key_.get(), x.get(), y.get()) == 1;
+  }
+
+  // Field element byte length: ceil(degree_bits / 8).
+  size_t field_len = (EC_GROUP_get_degree(group) + 7) / 8;
+  // Build an uncompressed point: 0x04 || x || y, each padded to field_len.
+  size_t uncompressed_len = 1 + 2 * field_len;
+  auto buf = DataPointer::Alloc(uncompressed_len);
+  if (!buf) return false;
+  unsigned char* ptr = static_cast<unsigned char*>(buf.get());
+  ptr[0] = POINT_CONVERSION_UNCOMPRESSED;
+  x.encodePaddedInto(ptr + 1, field_len);
+  y.encodePaddedInto(ptr + 1 + field_len, field_len);
+
+  auto point = ECPointPointer::New(group);
+  if (!point) return false;
+  if (!point.setFromBuffer({ptr, uncompressed_len}, group)) return false;
+  return EC_KEY_set_public_key(key_.get(), point.get()) == 1;
 }
 
 bool ECKeyPointer::setPrivateKey(const BignumPointer& priv) {
@@ -4490,6 +4543,27 @@ std::optional<EVP_PKEY_CTX*> EVPMDCtxPointer::signInitWithContext(
 #ifdef OSSL_SIGNATURE_PARAM_CONTEXT_STRING
   EVP_PKEY_CTX* ctx = nullptr;
 
+#ifdef OSSL_SIGNATURE_PARAM_INSTANCE
+  // Ed25519 requires the INSTANCE param to switch into Ed25519ctx mode.
+  // Without it, OpenSSL silently ignores the context string.
+  if (key.id() == EVP_PKEY_ED25519) {
+    const OSSL_PARAM params[] = {
+        OSSL_PARAM_construct_utf8_string(
+            OSSL_SIGNATURE_PARAM_INSTANCE, const_cast<char*>("Ed25519ctx"), 0),
+        OSSL_PARAM_construct_octet_string(
+            OSSL_SIGNATURE_PARAM_CONTEXT_STRING,
+            const_cast<unsigned char*>(context_string.data),
+            context_string.len),
+        OSSL_PARAM_END};
+
+    if (!EVP_DigestSignInit_ex(
+            ctx_.get(), &ctx, nullptr, nullptr, nullptr, key.get(), params)) {
+      return std::nullopt;
+    }
+    return ctx;
+  }
+#endif  // OSSL_SIGNATURE_PARAM_INSTANCE
+
   const OSSL_PARAM params[] = {
       OSSL_PARAM_construct_octet_string(
           OSSL_SIGNATURE_PARAM_CONTEXT_STRING,
@@ -4514,6 +4588,27 @@ std::optional<EVP_PKEY_CTX*> EVPMDCtxPointer::verifyInitWithContext(
 #ifdef OSSL_SIGNATURE_PARAM_CONTEXT_STRING
   EVP_PKEY_CTX* ctx = nullptr;
 
+#ifdef OSSL_SIGNATURE_PARAM_INSTANCE
+  // Ed25519 requires the INSTANCE param to switch into Ed25519ctx mode.
+  // Without it, OpenSSL silently ignores the context string.
+  if (key.id() == EVP_PKEY_ED25519) {
+    const OSSL_PARAM params[] = {
+        OSSL_PARAM_construct_utf8_string(
+            OSSL_SIGNATURE_PARAM_INSTANCE, const_cast<char*>("Ed25519ctx"), 0),
+        OSSL_PARAM_construct_octet_string(
+            OSSL_SIGNATURE_PARAM_CONTEXT_STRING,
+            const_cast<unsigned char*>(context_string.data),
+            context_string.len),
+        OSSL_PARAM_END};
+
+    if (!EVP_DigestVerifyInit_ex(
+            ctx_.get(), &ctx, nullptr, nullptr, nullptr, key.get(), params)) {
+      return std::nullopt;
+    }
+    return ctx;
+  }
+#endif  // OSSL_SIGNATURE_PARAM_INSTANCE
+
   const OSSL_PARAM params[] = {
       OSSL_PARAM_construct_octet_string(
           OSSL_SIGNATURE_PARAM_CONTEXT_STRING,
@@ -4812,12 +4907,12 @@ bool X509Name::Iterator::operator!=(const Iterator& other) const {
 std::pair<std::string, std::string> X509Name::Iterator::operator*() const {
   if (loc_ == name_.total_) return {{}, {}};
 
-  X509_NAME_ENTRY* entry = X509_NAME_get_entry(name_, loc_);
+  const X509_NAME_ENTRY* entry = X509_NAME_get_entry(name_, loc_);
   if (entry == nullptr) [[unlikely]]
     return {{}, {}};
 
-  ASN1_OBJECT* name = X509_NAME_ENTRY_get_object(entry);
-  ASN1_STRING* value = X509_NAME_ENTRY_get_data(entry);
+  const ASN1_OBJECT* name = X509_NAME_ENTRY_get_object(entry);
+  const ASN1_STRING* value = X509_NAME_ENTRY_get_data(entry);
 
   if (name == nullptr || value == nullptr) [[unlikely]] {
     return {{}, {}};

package/lib/commonjs/argon2.js

@@ -17,23 +17,72 @@ function getNative() {
 }
 const ARGON2_VERSION = 0x13; // v1.3
 
+// RFC 9106 § 3.1: Argon2 input/parameter constraints.
+//   p (parallelism)   1   ≤ p ≤ 2^24 - 1
+//   T (tag length)    4   ≤ T ≤ 2^32 - 1
+//   m (memory in KiB) 8*p ≤ m ≤ 2^32 - 1
+//   t (passes)        1   ≤ t ≤ 2^32 - 1
+//   |salt| (nonce)    8   ≤ |s| ≤ 2^32 - 1
+//   v (version)       0x10 (v1.0) or 0x13 (v1.3)
+const ARGON2_MAX_U24 = 0xff_ffff;
+const ARGON2_MAX_U32 = 0xffff_ffff;
+function isUInt(value, max) {
+  return typeof value === 'number' && Number.isFinite(value) && Number.isInteger(value) && value >= 0 && value <= max;
+}
 function validateAlgorithm(algorithm) {
   if (algorithm !== 'argon2d' && algorithm !== 'argon2i' && algorithm !== 'argon2id') {
     throw new TypeError(`Unknown argon2 algorithm: ${algorithm}`);
   }
 }
+
+// Returns the resolved nonce ArrayBuffer so the caller can pass it
+// straight to native without re-resolving `params.nonce`.
+function validateArgon2Params(params, version) {
+  if (!isUInt(params.parallelism, ARGON2_MAX_U24) || params.parallelism < 1) {
+    throw new RangeError(`Invalid Argon2 parallelism: ${params.parallelism} ` + `(RFC 9106: 1 ≤ p ≤ 2^24 - 1)`);
+  }
+  if (!isUInt(params.tagLength, ARGON2_MAX_U32) || params.tagLength < 4) {
+    throw new RangeError(`Invalid Argon2 tagLength: ${params.tagLength} ` + `(RFC 9106: 4 ≤ T ≤ 2^32 - 1)`);
+  }
+  const minMemory = 8 * params.parallelism;
+  if (!isUInt(params.memory, ARGON2_MAX_U32) || params.memory < minMemory) {
+    throw new RangeError(`Invalid Argon2 memory: ${params.memory} KiB ` + `(RFC 9106: 8 * p (= ${minMemory}) ≤ m ≤ 2^32 - 1)`);
+  }
+  if (!isUInt(params.passes, ARGON2_MAX_U32) || params.passes < 1) {
+    throw new RangeError(`Invalid Argon2 passes: ${params.passes} ` + `(RFC 9106: 1 ≤ t ≤ 2^32 - 1)`);
+  }
+  if (version !== 0x10 && version !== 0x13) {
+    throw new RangeError(`Invalid Argon2 version: 0x${version.toString(16)} ` + `(RFC 9106: 0x10 or 0x13)`);
+  }
+  // Salt (nonce) must be 8..2^32 - 1 bytes — measured against the resolved
+  // ArrayBuffer because BinaryLike accepts strings whose UTF-8 length is
+  // what actually reaches OpenSSL.
+  const nonceAB = (0, _utils.binaryLikeToArrayBuffer)(params.nonce);
+  if (nonceAB.byteLength < 8 || nonceAB.byteLength > ARGON2_MAX_U32) {
+    throw new RangeError(`Invalid Argon2 nonce length: ${nonceAB.byteLength} bytes ` + `(RFC 9106: 8 ≤ |s| ≤ 2^32 - 1)`);
+  }
+  return nonceAB;
+}
 function toAB(value) {
   return (0, _utils.binaryLikeToArrayBuffer)(value);
 }
 function argon2Sync(algorithm, params) {
   validateAlgorithm(algorithm);
   const version = params.version ?? ARGON2_VERSION;
-  const result = getNative().hashSync(algorithm, toAB(params.message), toAB(params.nonce), params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined);
+  const nonceAB = validateArgon2Params(params, version);
+  const result = getNative().hashSync(algorithm, toAB(params.message), nonceAB, params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined);
   return _reactNativeBuffer.Buffer.from(result);
 }
 function argon2(algorithm, params, callback) {
   validateAlgorithm(algorithm);
   const version = params.version ?? ARGON2_VERSION;
-  getNative().hash(algorithm, toAB(params.message), toAB(params.nonce), params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined).then(ab => callback(null, _reactNativeBuffer.Buffer.from(ab))).catch(err => callback(err, _reactNativeBuffer.Buffer.alloc(0)));
+  let nonceAB;
+  try {
+    nonceAB = validateArgon2Params(params, version);
+  } catch (err) {
+    callback(err, _reactNativeBuffer.Buffer.alloc(0));
+    return;
+  }
+  getNative().hash(algorithm, toAB(params.message), nonceAB, params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined).then(ab => callback(null, _reactNativeBuffer.Buffer.from(ab))).catch(err => callback(err, _reactNativeBuffer.Buffer.alloc(0)));
 }
 //# sourceMappingURL=argon2.js.map

package/lib/commonjs/argon2.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNativeBuffer","require","_reactNativeNitroModules","_utils","native","getNative","NitroModules","createHybridObject","ARGON2_VERSION","validateAlgorithm","algorithm","TypeError","toAB","value","binaryLikeToArrayBuffer","argon2Sync","params","version","result","hashSync","message","nonce","parallelism","tagLength","memory","passes","secret","undefined","associatedData","Buffer","from","argon2","callback","hash","then","ab","catch","err","alloc"],"sourceRoot":"../../src","sources":["argon2.ts"],"mappings":";;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AACA,IAAAC,wBAAA,GAAAD,OAAA;AAEA,IAAAE,MAAA,GAAAF,OAAA;AAGA,IAAIG,MAAoB;AACxB,SAASC,SAASA,CAAA,EAAiB;EACjC,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGE,qCAAY,CAACC,kBAAkB,CAAe,QAAQ,CAAC;EAClE;EACA,OAAOH,MAAM;AACf;AAcA,MAAMI,cAAc,GAAG,IAAI,CAAC,CAAC;;AAE7B,SAASC,iBAAiBA,CAACC,SAAiB,EAAQ;EAClD,IACEA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,UAAU,EACxB;IACA,MAAM,IAAIC,SAAS,CAAC,6BAA6BD,SAAS,EAAE,CAAC;EAC/D;AACF;AAEA,SAASE,IAAIA,CAACC,KAAiB,EAAe;EAC5C,OAAO,IAAAC,8BAAuB,EAACD,KAAK,CAAC;AACvC;AAEO,SAASE,UAAUA,CAACL,SAAiB,EAAEM,MAAoB,EAAU;EAC1EP,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMO,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAIT,cAAc;EAChD,MAAMU,MAAM,GAAGb,SAAS,CAAC,CAAC,CAACc,QAAQ,CACjCT,SAAS,EACTE,IAAI,CAACI,MAAM,CAACI,OAAO,CAAC,EACpBR,IAAI,CAACI,MAAM,CAACK,KAAK,CAAC,EAClBL,MAAM,CAACM,WAAW,EAClBN,MAAM,CAACO,SAAS,EAChBP,MAAM,CAACQ,MAAM,EACbR,MAAM,CAACS,MAAM,EACbR,OAAO,EACPD,MAAM,CAACU,MAAM,GAAGd,IAAI,CAACI,MAAM,CAACU,MAAM,CAAC,GAAGC,SAAS,EAC/CX,MAAM,CAACY,cAAc,GAAGhB,IAAI,CAACI,MAAM,CAACY,cAAc,CAAC,GAAGD,SACxD,CAAC;EACD,OAAOE,yBAAM,CAACC,IAAI,CAACZ,MAAM,CAAC;AAC5B;AAEO,SAASa,MAAMA,CACpBrB,SAAiB,EACjBM,MAAoB,EACpBgB,QAAqD,EAC/C;EACNvB,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMO,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAIT,cAAc;EAChDH,SAAS,CAAC,CAAC,CACR4B,IAAI,CACHvB,SAAS,EACTE,IAAI,CAACI,MAAM,CAACI,OAAO,CAAC,EACpBR,IAAI,CAACI,MAAM,CAACK,KAAK,CAAC,EAClBL,MAAM,CAACM,WAAW,EAClBN,MAAM,CAACO,SAAS,EAChBP,MAAM,CAACQ,MAAM,EACbR,MAAM,CAACS,MAAM,EACbR,OAAO,EACPD,MAAM,CAACU,MAAM,GAAGd,IAAI,CAACI,MAAM,CAACU,MAAM,CAAC,GAAGC,SAAS,EAC/CX,MAAM,CAACY,cAAc,GAAGhB,IAAI,CAACI,MAAM,CAACY,cAAc,CAAC,GAAGD,SACxD,CAAC,CACAO,IAAI,CAACC,EAAE,IAAIH,QAAQ,CAAC,IAAI,EAAEH,yBAAM,CAACC,IAAI,CAACK,EAAE,CAAC,CAAC,CAAC,CAC3CC,KAAK,CAAEC,GAAU,IAAKL,QAAQ,CAACK,GAAG,EAAER,yBAAM,CAACS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D","ignoreList":[]}
+{"version":3,"names":["_reactNativeBuffer","require","_reactNativeNitroModules","_utils","native","getNative","NitroModules","createHybridObject","ARGON2_VERSION","ARGON2_MAX_U24","ARGON2_MAX_U32","isUInt","value","max","Number","isFinite","isInteger","validateAlgorithm","algorithm","TypeError","validateArgon2Params","params","version","parallelism","RangeError","tagLength","minMemory","memory","passes","toString","nonceAB","binaryLikeToArrayBuffer","nonce","byteLength","toAB","argon2Sync","result","hashSync","message","secret","undefined","associatedData","Buffer","from","argon2","callback","err","alloc","hash","then","ab","catch"],"sourceRoot":"../../src","sources":["argon2.ts"],"mappings":";;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AACA,IAAAC,wBAAA,GAAAD,OAAA;AAEA,IAAAE,MAAA,GAAAF,OAAA;AAGA,IAAIG,MAAoB;AACxB,SAASC,SAASA,CAAA,EAAiB;EACjC,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGE,qCAAY,CAACC,kBAAkB,CAAe,QAAQ,CAAC;EAClE;EACA,OAAOH,MAAM;AACf;AAcA,MAAMI,cAAc,GAAG,IAAI,CAAC,CAAC;;AAE7B;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,cAAc,GAAG,SAAS;AAChC,MAAMC,cAAc,GAAG,WAAW;AAElC,SAASC,MAAMA,CAACC,KAAc,EAAEC,GAAW,EAAmB;EAC5D,OACE,OAAOD,KAAK,KAAK,QAAQ,IACzBE,MAAM,CAACC,QAAQ,CAACH,KAAK,CAAC,IACtBE,MAAM,CAACE,SAAS,CAACJ,KAAK,CAAC,IACvBA,KAAK,IAAI,CAAC,IACVA,KAAK,IAAIC,GAAG;AAEhB;AAEA,SAASI,iBAAiBA,CAACC,SAAiB,EAAQ;EAClD,IACEA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,UAAU,EACxB;IACA,MAAM,IAAIC,SAAS,CAAC,6BAA6BD,SAAS,EAAE,CAAC;EAC/D;AACF;;AAEA;AACA;AACA,SAASE,oBAAoBA,CAC3BC,MAAoB,EACpBC,OAAe,EACF;EACb,IAAI,CAACX,MAAM,CAACU,MAAM,CAACE,WAAW,EAAEd,cAAc,CAAC,IAAIY,MAAM,CAACE,WAAW,GAAG,CAAC,EAAE;IACzE,MAAM,IAAIC,UAAU,CAClB,+BAA+BH,MAAM,CAACE,WAAW,GAAG,GAClD,8BACJ,CAAC;EACH;EACA,IAAI,CAACZ,MAAM,CAACU,MAAM,CAACI,SAAS,EAAEf,cAAc,CAAC,IAAIW,MAAM,CAACI,SAAS,GAAG,CAAC,EAAE;IACrE,MAAM,IAAID,UAAU,CAClB,6BAA6BH,MAAM,CAACI,SAAS,GAAG,GAC9C,8BACJ,CAAC;EACH;EACA,MAAMC,SAAS,GAAG,CAAC,GAAGL,MAAM,CAACE,WAAW;EACxC,IAAI,CAACZ,MAAM,CAACU,MAAM,CAACM,MAAM,EAAEjB,cAAc,CAAC,IAAIW,MAAM,CAACM,MAAM,GAAGD,SAAS,EAAE;IACvE,MAAM,IAAIF,UAAU,CAClB,0BAA0BH,MAAM,CAACM,MAAM,OAAO,GAC5C,uBAAuBD,SAAS,mBACpC,CAAC;EACH;EACA,IAAI,CAACf,MAAM,CAACU,MAAM,CAACO,MAAM,EAAElB,cAAc,CAAC,IAAIW,MAAM,CAACO,MAAM,GAAG,CAAC,EAAE;IAC/D,MAAM,IAAIJ,UAAU,CAClB,0BAA0BH,MAAM,CAACO,MAAM,GAAG,GACxC,8BACJ,CAAC;EACH;EACA,IAAIN,OAAO,KAAK,IAAI,IAAIA,OAAO,KAAK,IAAI,EAAE;IACxC,MAAM,IAAIE,UAAU,CAClB,6BAA6BF,OAAO,CAACO,QAAQ,CAAC,EAAE,CAAC,GAAG,GAClD,0BACJ,CAAC;EACH;EACA;EACA;EACA;EACA,MAAMC,OAAO,GAAG,IAAAC,8BAAuB,EAACV,MAAM,CAACW,KAAK,CAAC;EACrD,IAAIF,OAAO,CAACG,UAAU,GAAG,CAAC,IAAIH,OAAO,CAACG,UAAU,GAAGvB,cAAc,EAAE;IACjE,MAAM,IAAIc,UAAU,CAClB,gCAAgCM,OAAO,CAACG,UAAU,SAAS,GACzD,gCACJ,CAAC;EACH;EACA,OAAOH,OAAO;AAChB;AAEA,SAASI,IAAIA,CAACtB,KAAiB,EAAe;EAC5C,OAAO,IAAAmB,8BAAuB,EAACnB,KAAK,CAAC;AACvC;AAEO,SAASuB,UAAUA,CAACjB,SAAiB,EAAEG,MAAoB,EAAU;EAC1EJ,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMI,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAId,cAAc;EAChD,MAAMsB,OAAO,GAAGV,oBAAoB,CAACC,MAAM,EAAEC,OAAO,CAAC;EACrD,MAAMc,MAAM,GAAG/B,SAAS,CAAC,CAAC,CAACgC,QAAQ,CACjCnB,SAAS,EACTgB,IAAI,CAACb,MAAM,CAACiB,OAAO,CAAC,EACpBR,OAAO,EACPT,MAAM,CAACE,WAAW,EAClBF,MAAM,CAACI,SAAS,EAChBJ,MAAM,CAACM,MAAM,EACbN,MAAM,CAACO,MAAM,EACbN,OAAO,EACPD,MAAM,CAACkB,MAAM,GAAGL,IAAI,CAACb,MAAM,CAACkB,MAAM,CAAC,GAAGC,SAAS,EAC/CnB,MAAM,CAACoB,cAAc,GAAGP,IAAI,CAACb,MAAM,CAACoB,cAAc,CAAC,GAAGD,SACxD,CAAC;EACD,OAAOE,yBAAM,CAACC,IAAI,CAACP,MAAM,CAAC;AAC5B;AAEO,SAASQ,MAAMA,CACpB1B,SAAiB,EACjBG,MAAoB,EACpBwB,QAAqD,EAC/C;EACN5B,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMI,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAId,cAAc;EAChD,IAAIsB,OAAoB;EACxB,IAAI;IACFA,OAAO,GAAGV,oBAAoB,CAACC,MAAM,EAAEC,OAAO,CAAC;EACjD,CAAC,CAAC,OAAOwB,GAAG,EAAE;IACZD,QAAQ,CAACC,GAAG,EAAWJ,yBAAM,CAACK,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC;EACF;EACA1C,SAAS,CAAC,CAAC,CACR2C,IAAI,CACH9B,SAAS,EACTgB,IAAI,CAACb,MAAM,CAACiB,OAAO,CAAC,EACpBR,OAAO,EACPT,MAAM,CAACE,WAAW,EAClBF,MAAM,CAACI,SAAS,EAChBJ,MAAM,CAACM,MAAM,EACbN,MAAM,CAACO,MAAM,EACbN,OAAO,EACPD,MAAM,CAACkB,MAAM,GAAGL,IAAI,CAACb,MAAM,CAACkB,MAAM,CAAC,GAAGC,SAAS,EAC/CnB,MAAM,CAACoB,cAAc,GAAGP,IAAI,CAACb,MAAM,CAACoB,cAAc,CAAC,GAAGD,SACxD,CAAC,CACAS,IAAI,CAACC,EAAE,IAAIL,QAAQ,CAAC,IAAI,EAAEH,yBAAM,CAACC,IAAI,CAACO,EAAE,CAAC,CAAC,CAAC,CAC3CC,KAAK,CAAEL,GAAU,IAAKD,QAAQ,CAACC,GAAG,EAAEJ,yBAAM,CAACK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D","ignoreList":[]}

package/lib/commonjs/cipher.js

@@ -33,6 +33,80 @@ function getCipherInfo(name, options) {
   if (typeof name !== 'string' || name.length === 0) return undefined;
   return CipherUtils.getCipherInfo(name, options?.keyLength, options?.ivLength);
 }
+
+// libsodium ciphers aren't visible to OpenSSL's EVP_CIPHER_fetch, so
+// getCipherInfo() returns undefined for them. Hard-code the (key, iv)
+// byte-lengths the C++ factory will accept.
+const LIBSODIUM_CIPHER_PARAMS = {
+  xsalsa20: {
+    keyLength: 32,
+    ivLength: 24
+  },
+  'xsalsa20-poly1305': {
+    keyLength: 32,
+    ivLength: 24
+  },
+  'xchacha20-poly1305': {
+    keyLength: 32,
+    ivLength: 24
+  }
+};
+function validateCipherParams(cipherType, keyByteLength, ivByteLength) {
+  if (typeof cipherType !== 'string' || cipherType.length === 0) {
+    throw new TypeError('cipher algorithm must be a non-empty string');
+  }
+  // ArrayBuffer.byteLength is always a non-negative integer, so the only
+  // out-of-range value we need to guard is 0 — empty key buffers must not
+  // reach OpenSSL's EVP_CipherInit_ex.
+  if (keyByteLength === 0) {
+    throw new RangeError(`Invalid key length 0 for cipher ${cipherType}`);
+  }
+  const lower = cipherType.toLowerCase();
+  const sodium = LIBSODIUM_CIPHER_PARAMS[lower];
+  if (sodium) {
+    // libsodium parlance: "nonce" rather than "iv". Phrase the expected
+    // size as a natural-language clause so callers asserting on either
+    // `key must be N bytes` or `Invalid key length N` both match.
+    if (keyByteLength !== sodium.keyLength) {
+      throw new RangeError(`Invalid key length ${keyByteLength} for cipher ${cipherType} ` + `(key must be ${sodium.keyLength} bytes)`);
+    }
+    if (ivByteLength !== sodium.ivLength) {
+      throw new RangeError(`Invalid nonce length ${ivByteLength} for cipher ${cipherType} ` + `(nonce must be ${sodium.ivLength} bytes)`);
+    }
+    return;
+  }
+
+  // OpenSSL path. Look up the cipher's defaults once. Most callers pass
+  // exactly the cipher's default key/iv lengths (e.g. AES-128-CBC always
+  // wants 16/16) — short-circuit those to a single native round-trip.
+  // Variable-length ciphers (GCM, CCM, OCB, ChaCha20-Poly1305) fall through
+  // to per-parameter validation calls so the error message can name which
+  // of {key, iv} is wrong.
+  const info = CipherUtils.getCipherInfo(cipherType);
+  if (info === undefined) {
+    throw new TypeError(`Unsupported or unknown cipher type: ${cipherType}`);
+  }
+  const expectedIv = info.ivLength ?? 0;
+  if (expectedIv === 0 && ivByteLength > 0) {
+    throw new RangeError(`Cipher ${cipherType} does not use an iv (got ${ivByteLength} bytes)`);
+  }
+  if (expectedIv > 0 && ivByteLength === 0) {
+    throw new RangeError(`Cipher ${cipherType} requires an iv but none was provided`);
+  }
+
+  // Fast path: lengths match the cipher's defaults exactly.
+  if (info.keyLength === keyByteLength && expectedIv === ivByteLength) {
+    return;
+  }
+
+  // Variable-length: verify against native one parameter at a time.
+  if (CipherUtils.getCipherInfo(cipherType, keyByteLength, undefined) === undefined) {
+    throw new RangeError(`Invalid key length ${keyByteLength} for cipher ${cipherType}`);
+  }
+  if (expectedIv > 0 && CipherUtils.getCipherInfo(cipherType, undefined, ivByteLength) === undefined) {
+    throw new RangeError(`Invalid iv length ${ivByteLength} for cipher ${cipherType}`);
+  }
+}
 class CipherCommon extends _readableStream.default.Transform {
   _decoder = null;
   _decoderEncoding = undefined;
@@ -59,14 +133,17 @@ class CipherCommon extends _readableStream.default.Transform {
     }
     super(streamOptions); // Pass filtered options
 
-    const authTagLen = (0, _cipher.getUIntOption)(options ?? {}, 'authTagLength') !== -1 ? (0, _cipher.getUIntOption)(options ?? {}, 'authTagLength') : 16; // defaults to 16 bytes
-
+    // defaults to 16 bytes for AEAD modes; non-AEAD callers ignore it.
+    const authTagLen = (0, _cipher.getUIntOption)(options, 'authTagLength') ?? 16;
+    const cipherKeyAB = (0, _utils.binaryLikeToArrayBuffer)(cipherKey);
+    const ivAB = (0, _utils.binaryLikeToArrayBuffer)(iv);
+    validateCipherParams(cipherType, cipherKeyAB.byteLength, ivAB.byteLength);
     const factory = _reactNativeNitroModules.NitroModules.createHybridObject('CipherFactory');
     this.native = factory.createCipher({
       isCipher,
       cipherType,
-      cipherKey: (0, _utils.binaryLikeToArrayBuffer)(cipherKey),
-      iv: (0, _utils.binaryLikeToArrayBuffer)(iv),
+      cipherKey: cipherKeyAB,
+      iv: ivAB,
       authTagLen
     });
   }
@@ -102,13 +179,27 @@ class CipherCommon extends _readableStream.default.Transform {
     }
     return _reactNativeBuffer.Buffer.from(ret);
   }
+
+  // Stream interface — surface synchronous errors (bad encoding,
+  // OpenSSL EVP failures, AEAD tag mismatch in `final()`, etc.) via
+  // the callback so they emit as stream 'error' events instead of
+  // throwing out of the Transform plumbing and crashing the host
+  // pipeline.
   _transform(chunk, encoding, callback) {
-    this.push(this.update(chunk, (0, _cipher.normalizeEncoding)(encoding)));
-    callback();
+    try {
+      this.push(this.update(chunk, (0, _cipher.normalizeEncoding)(encoding)));
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
   _flush(callback) {
-    this.push(this.final());
-    callback();
+    try {
+      this.push(this.final());
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
   setAutoPadding(autoPadding) {
     const res = this.native.setAutoPadding(!!autoPadding);
@@ -122,7 +213,11 @@ class CipherCommon extends _readableStream.default.Transform {
     if (!this.native || typeof this.native.setAAD !== 'function') {
       throw new Error('Cipher native object or setAAD method not initialized.');
     }
-    const res = this.native.setAAD(buffer.buffer, options?.plaintextLength);
+    // Use binaryLikeToArrayBuffer (not `buffer.buffer`) so that sliced /
+    // offset views send only the AAD bytes the caller intended. Passing the
+    // raw backing ArrayBuffer authenticates the wrong data and silently
+    // breaks the AEAD integrity guarantee.
+    const res = this.native.setAAD((0, _utils.binaryLikeToArrayBuffer)(buffer), options?.plaintextLength);
     if (!res) {
       throw new Error('setAAD failed (native call returned false)');
     }
@@ -188,12 +283,15 @@ output,
 // @ts-expect-error haven't implemented this part of @noble/ciphers API
 // eslint-disable-next-line @typescript-eslint/no-unused-vars
 counter) {
+  const cipherKeyAB = (0, _utils.binaryLikeToArrayBuffer)(key);
+  const ivAB = (0, _utils.binaryLikeToArrayBuffer)(nonce);
+  validateCipherParams('xsalsa20', cipherKeyAB.byteLength, ivAB.byteLength);
   const factory = _reactNativeNitroModules.NitroModules.createHybridObject('CipherFactory');
   const native = factory.createCipher({
     isCipher: true,
     cipherType: 'xsalsa20',
-    cipherKey: (0, _utils.binaryLikeToArrayBuffer)(key),
-    iv: (0, _utils.binaryLikeToArrayBuffer)(nonce)
+    cipherKey: cipherKeyAB,
+    iv: ivAB
   });
   const result = native.update((0, _utils.binaryLikeToArrayBuffer)(data));
   return new Uint8Array(result);

package/lib/commonjs/cipher.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNativeNitroModules","require","_readableStream","_interopRequireDefault","_string_decoder","_reactNativeBuffer","_utils","_cipher","e","__esModule","default","CipherUtils","native","NitroModules","createHybridObject","getSupportedCiphers","getCipherInfo","name","keyLength","ivLength","getCiphers","options","length","undefined","CipherCommon","Stream","Transform","_decoder","_decoderEncoding","constructor","isCipher","cipherType","cipherKey","iv","streamOptions","transformKeys","key","authTagLen","getUIntOption","factory","createCipher","binaryLikeToArrayBuffer","getDecoder","encoding","normalized","normalizeEncoding","StringDecoder","Error","update","data","inputEncoding","outputEncoding","defaultEncoding","getDefaultEncoding","validateEncoding","ArrayBuffer","isView","ret","write","Buffer","from","final","end","_transform","chunk","callback","push","_flush","setAutoPadding","autoPadding","res","setAAD","buffer","plaintextLength","getAuthTag","setAuthTag","tag","Cipheriv","Decipheriv","createDecipheriv","algorithm","createCipheriv","xsalsa20","nonce","output","counter","result","Uint8Array"],"sourceRoot":"../../src","sources":["cipher.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,wBAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,eAAA,GAAAH,OAAA;AACA,IAAAI,kBAAA,GAAAJ,OAAA;AAcA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,OAAA,GAAAN,OAAA;AAKwB,SAAAE,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAXP;;AA4BjB,MAAMG,WAAW,CAAC;EAChB,OAAeC,MAAM,GACnBC,qCAAY,CAACC,kBAAkB,CAAe,QAAQ,CAAC;EACzD,OAAcC,mBAAmBA,CAAA,EAAa;IAC5C,OAAO,IAAI,CAACH,MAAM,CAACG,mBAAmB,CAAC,CAAC;EAC1C;EACA,OAAcC,aAAaA,CACzBC,IAAY,EACZC,SAAkB,EAClBC,QAAiB,EACa;IAC9B,OAAO,IAAI,CAACP,MAAM,CAACI,aAAa,CAACC,IAAI,EAAEC,SAAS,EAAEC,QAAQ,CAAC;EAC7D;AACF;AAEO,SAASC,UAAUA,CAAA,EAAa;EACrC,OAAOT,WAAW,CAACI,mBAAmB,CAAC,CAAC;AAC1C;AAEO,SAASC,aAAaA,CAC3BC,IAAY,EACZI,OAAmD,EACrB;EAC9B,IAAI,OAAOJ,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACK,MAAM,KAAK,CAAC,EAAE,OAAOC,SAAS;EACnE,OAAOZ,WAAW,CAACK,aAAa,CAACC,IAAI,EAAEI,OAAO,EAAEH,SAAS,EAAEG,OAAO,EAAEF,QAAQ,CAAC;AAC/E;AAUA,MAAMK,YAAY,SAASC,uBAAM,CAACC,SAAS,CAAC;EAElCC,QAAQ,GAAyB,IAAI;EACrCC,gBAAgB,GAAuBL,SAAS;EAExDM,WAAWA,CAAC;IAAEC,QAAQ;IAAEC,UAAU;IAAEC,SAAS;IAAEC,EAAE;IAAEZ;EAAoB,CAAC,EAAE;IACxE;IACA,MAAMa,aAA+B,GAAG,CAAC,CAAC;IAC1C,IAAIb,OAAO,EAAE;MACX;MACA,MAAMc,aAA4C,GAAG,CACnD,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,MAAM,EACN,OAAO,EACP,QAAQ,EACR,OAAO,EACP,WAAW,EACX;MACA;MAAA,CACD;MACD,KAAK,MAAMC,GAAG,IAAID,aAAa,EAAE;QAC/B,IAAIC,GAAG,IAAIf,OAAO,EAAE;UAClB;UACCa,aAAa,CAASE,GAAG,CAAC,GAAIf,OAAO,CAASe,GAAG,CAAC;QACrD;MACF;IACF;IACA,KAAK,CAACF,aAAa,CAAC,CAAC,CAAC;;IAEtB,MAAMG,UAAkB,GACtB,IAAAC,qBAAa,EAACjB,OAAO,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,GAChD,IAAAiB,qBAAa,EAACjB,OAAO,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,GAC7C,EAAE,CAAC,CAAC;;IAEV,MAAMkB,OAAO,GACX1B,qCAAY,CAACC,kBAAkB,CAAgB,eAAe,CAAC;IACjE,IAAI,CAACF,MAAM,GAAG2B,OAAO,CAACC,YAAY,CAAC;MACjCV,QAAQ;MACRC,UAAU;MACVC,SAAS,EAAE,IAAAS,8BAAuB,EAACT,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAQ,8BAAuB,EAACR,EAAE,CAAC;MAC/BI;IACF,CAAC,CAAC;EACJ;EAEQK,UAAUA,CAACC,QAAgB,EAAiB;IAClD,MAAMC,UAAU,GAAG,IAAAC,yBAAiB,EAACF,QAAQ,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAChB,QAAQ,EAAE;MAClB,IAAI,CAACA,QAAQ,GAAG,IAAImB,6BAAa,CAACH,QAA0B,CAAC;MAC7D,IAAI,CAACf,gBAAgB,GAAGgB,UAAU;IACpC,CAAC,MAAM,IAAI,IAAI,CAAChB,gBAAgB,KAAKgB,UAAU,EAAE;MAC/C,MAAM,IAAIG,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IACA,OAAO,IAAI,CAACpB,QAAQ;EACtB;EASAqB,MAAMA,CACJC,IAAgB,EAChBC,aAAwB,EACxBC,cAAyB,EACR;IACjB,MAAMC,eAAe,GAAG,IAAAC,0BAAkB,EAAC,CAAC;IAC5CH,aAAa,GAAGA,aAAa,IAAIE,eAAe;IAChDD,cAAc,GAAGA,cAAc,IAAIC,eAAe;IAElD,IAAI,OAAOH,IAAI,KAAK,QAAQ,EAAE;MAC5B,IAAAK,wBAAgB,EAACL,IAAI,EAAEC,aAAa,CAAC;IACvC,CAAC,MAAM,IAAI,CAACK,WAAW,CAACC,MAAM,CAACP,IAAI,CAAC,EAAE;MACpC,MAAM,IAAIF,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IAEA,MAAMU,GAAG,GAAG,IAAI,CAAC7C,MAAM,CAACoC,MAAM,CAC5B,IAAAP,8BAAuB,EAACQ,IAAI,EAAEC,aAAa,CAC7C,CAAC;IAED,IAAIC,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACT,UAAU,CAACS,cAAc,CAAC,CAACO,KAAK,CAACC,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC,CAAC;IAChE;IAEA,OAAOE,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC;EACzB;EAIAI,KAAKA,CAACV,cAA0C,EAAmB;IACjE,MAAMM,GAAG,GAAG,IAAI,CAAC7C,MAAM,CAACiD,KAAK,CAAC,CAAC;IAE/B,IAAIV,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACT,UAAU,CAACS,cAAc,CAAC,CAACW,GAAG,CAACH,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC,CAAC;IAC9D;IAEA,OAAOE,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC;EACzB;EAEAM,UAAUA,CACRC,KAAiB,EACjBrB,QAAwB,EACxBsB,QAAoB,EACpB;IACA,IAAI,CAACC,IAAI,CAAC,IAAI,CAAClB,MAAM,CAACgB,KAAK,EAAE,IAAAnB,yBAAiB,EAACF,QAAQ,CAAC,CAAC,CAAC;IAC1DsB,QAAQ,CAAC,CAAC;EACZ;EAEAE,MAAMA,CAACF,QAAoB,EAAE;IAC3B,IAAI,CAACC,IAAI,CAAC,IAAI,CAACL,KAAK,CAAC,CAAC,CAAC;IACvBI,QAAQ,CAAC,CAAC;EACZ;EAEOG,cAAcA,CAACC,WAAqB,EAAQ;IACjD,MAAMC,GAAG,GAAG,IAAI,CAAC1D,MAAM,CAACwD,cAAc,CAAC,CAAC,CAACC,WAAW,CAAC;IACrD,IAAI,CAACC,GAAG,EAAE;MACR,MAAM,IAAIvB,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IACA,OAAO,IAAI;EACb;EAEOwB,MAAMA,CACXC,MAAc,EACdnD,OAEC,EACK;IACN;IACA,IAAI,CAAC,IAAI,CAACT,MAAM,IAAI,OAAO,IAAI,CAACA,MAAM,CAAC2D,MAAM,KAAK,UAAU,EAAE;MAC5D,MAAM,IAAIxB,KAAK,CAAC,wDAAwD,CAAC;IAC3E;IACA,MAAMuB,GAAG,GAAG,IAAI,CAAC1D,MAAM,CAAC2D,MAAM,CAACC,MAAM,CAACA,MAAM,EAAEnD,OAAO,EAAEoD,eAAe,CAAC;IACvE,IAAI,CAACH,GAAG,EAAE;MACR,MAAM,IAAIvB,KAAK,CAAC,4CAA4C,CAAC;IAC/D;IACA,OAAO,IAAI;EACb;EAEO2B,UAAUA,CAAA,EAAW;IAC1B,OAAOf,yBAAM,CAACC,IAAI,CAAC,IAAI,CAAChD,MAAM,CAAC8D,UAAU,CAAC,CAAC,CAAC;EAC9C;EAEOC,UAAUA,CAACC,GAAW,EAAQ;IACnC,MAAMN,GAAG,GAAG,IAAI,CAAC1D,MAAM,CAAC+D,UAAU,CAAC,IAAAlC,8BAAuB,EAACmC,GAAG,CAAC,CAAC;IAChE,IAAI,CAACN,GAAG,EAAE;MACR,MAAM,IAAIvB,KAAK,CAAC,mBAAmB,CAAC;IACtC;IACA,OAAO,IAAI;EACb;EAEOhC,mBAAmBA,CAAA,EAAa;IACrC,OAAO,IAAI,CAACH,MAAM,CAACG,mBAAmB,CAAC,CAAC;EAC1C;AACF;AAEA,MAAM8D,QAAQ,SAASrD,YAAY,CAAC;EAClCK,WAAWA,CACTE,UAAkB,EAClBC,SAAyB,EACzBC,EAAc,EACdZ,OAAuB,EACvB;IACA,KAAK,CAAC;MACJS,QAAQ,EAAE,IAAI;MACdC,UAAU;MACVC,SAAS,EAAE,IAAAS,8BAAuB,EAACT,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAQ,8BAAuB,EAACR,EAAE,CAAC;MAC/BZ;IACF,CAAC,CAAC;EACJ;AACF;AAIA,MAAMyD,UAAU,SAAStD,YAAY,CAAC;EACpCK,WAAWA,CACTE,UAAkB,EAClBC,SAAyB,EACzBC,EAAc,EACdZ,OAAuB,EACvB;IACA,KAAK,CAAC;MACJS,QAAQ,EAAE,KAAK;MACfC,UAAU;MACVC,SAAS,EAAE,IAAAS,8BAAuB,EAACT,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAQ,8BAAuB,EAACR,EAAE,CAAC;MAC/BZ;IACF,CAAC,CAAC;EACJ;AACF;AA4BO,SAAS0D,gBAAgBA,CAC9BC,SAAiB,EACjB5C,GAAmB,EACnBH,EAAc,EACdZ,OAAuB,EACb;EACV,OAAO,IAAIyD,UAAU,CAACE,SAAS,EAAE5C,GAAG,EAAEH,EAAE,EAAEZ,OAAO,CAAC;AACpD;AA0BO,SAAS4D,cAAcA,CAC5BD,SAAiB,EACjB5C,GAAmB,EACnBH,EAAc,EACdZ,OAAuB,EACf;EACR,OAAO,IAAIwD,QAAQ,CAACG,SAAS,EAAE5C,GAAG,EAAEH,EAAE,EAAEZ,OAAO,CAAC;AAClD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS6D,QAAQA,CACtB9C,GAAe,EACf+C,KAAiB,EACjBlC,IAAgB;AAChB;AACA;AACAmC,MAA+B;AAC/B;AACA;AACAC,OAAgB,EACJ;EACZ,MAAM9C,OAAO,GACX1B,qCAAY,CAACC,kBAAkB,CAAgB,eAAe,CAAC;EACjE,MAAMF,MAAM,GAAG2B,OAAO,CAACC,YAAY,CAAC;IAClCV,QAAQ,EAAE,IAAI;IACdC,UAAU,EAAE,UAAU;IACtBC,SAAS,EAAE,IAAAS,8BAAuB,EAACL,GAAG,CAAC;IACvCH,EAAE,EAAE,IAAAQ,8BAAuB,EAAC0C,KAAK;EACnC,CAAC,CAAC;EACF,MAAMG,MAAM,GAAG1E,MAAM,CAACoC,MAAM,CAAC,IAAAP,8BAAuB,EAACQ,IAAI,CAAC,CAAC;EAC3D,OAAO,IAAIsC,UAAU,CAACD,MAAM,CAAC;AAC/B","ignoreList":[]}
+{"version":3,"names":["_reactNativeNitroModules","require","_readableStream","_interopRequireDefault","_string_decoder","_reactNativeBuffer","_utils","_cipher","e","__esModule","default","CipherUtils","native","NitroModules","createHybridObject","getSupportedCiphers","getCipherInfo","name","keyLength","ivLength","getCiphers","options","length","undefined","LIBSODIUM_CIPHER_PARAMS","xsalsa20","validateCipherParams","cipherType","keyByteLength","ivByteLength","TypeError","RangeError","lower","toLowerCase","sodium","info","expectedIv","CipherCommon","Stream","Transform","_decoder","_decoderEncoding","constructor","isCipher","cipherKey","iv","streamOptions","transformKeys","key","authTagLen","getUIntOption","cipherKeyAB","binaryLikeToArrayBuffer","ivAB","byteLength","factory","createCipher","getDecoder","encoding","normalized","normalizeEncoding","StringDecoder","Error","update","data","inputEncoding","outputEncoding","defaultEncoding","getDefaultEncoding","validateEncoding","ArrayBuffer","isView","ret","write","Buffer","from","final","end","_transform","chunk","callback","push","err","_flush","setAutoPadding","autoPadding","res","setAAD","buffer","plaintextLength","getAuthTag","setAuthTag","tag","Cipheriv","Decipheriv","createDecipheriv","algorithm","createCipheriv","nonce","output","counter","result","Uint8Array"],"sourceRoot":"../../src","sources":["cipher.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,wBAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,eAAA,GAAAH,OAAA;AACA,IAAAI,kBAAA,GAAAJ,OAAA;AAcA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,OAAA,GAAAN,OAAA;AAKwB,SAAAE,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAXP;;AA4BjB,MAAMG,WAAW,CAAC;EAChB,OAAeC,MAAM,GACnBC,qCAAY,CAACC,kBAAkB,CAAe,QAAQ,CAAC;EACzD,OAAcC,mBAAmBA,CAAA,EAAa;IAC5C,OAAO,IAAI,CAACH,MAAM,CAACG,mBAAmB,CAAC,CAAC;EAC1C;EACA,OAAcC,aAAaA,CACzBC,IAAY,EACZC,SAAkB,EAClBC,QAAiB,EACa;IAC9B,OAAO,IAAI,CAACP,MAAM,CAACI,aAAa,CAACC,IAAI,EAAEC,SAAS,EAAEC,QAAQ,CAAC;EAC7D;AACF;AAEO,SAASC,UAAUA,CAAA,EAAa;EACrC,OAAOT,WAAW,CAACI,mBAAmB,CAAC,CAAC;AAC1C;AAEO,SAASC,aAAaA,CAC3BC,IAAY,EACZI,OAAmD,EACrB;EAC9B,IAAI,OAAOJ,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACK,MAAM,KAAK,CAAC,EAAE,OAAOC,SAAS;EACnE,OAAOZ,WAAW,CAACK,aAAa,CAACC,IAAI,EAAEI,OAAO,EAAEH,SAAS,EAAEG,OAAO,EAAEF,QAAQ,CAAC;AAC/E;;AAEA;AACA;AACA;AACA,MAAMK,uBAEL,GAAG;EACFC,QAAQ,EAAE;IAAEP,SAAS,EAAE,EAAE;IAAEC,QAAQ,EAAE;EAAG,CAAC;EACzC,mBAAmB,EAAE;IAAED,SAAS,EAAE,EAAE;IAAEC,QAAQ,EAAE;EAAG,CAAC;EACpD,oBAAoB,EAAE;IAAED,SAAS,EAAE,EAAE;IAAEC,QAAQ,EAAE;EAAG;AACtD,CAAC;AAED,SAASO,oBAAoBA,CAC3BC,UAAkB,EAClBC,aAAqB,EACrBC,YAAoB,EACd;EACN,IAAI,OAAOF,UAAU,KAAK,QAAQ,IAAIA,UAAU,CAACL,MAAM,KAAK,CAAC,EAAE;IAC7D,MAAM,IAAIQ,SAAS,CAAC,6CAA6C,CAAC;EACpE;EACA;EACA;EACA;EACA,IAAIF,aAAa,KAAK,CAAC,EAAE;IACvB,MAAM,IAAIG,UAAU,CAAC,mCAAmCJ,UAAU,EAAE,CAAC;EACvE;EAEA,MAAMK,KAAK,GAAGL,UAAU,CAACM,WAAW,CAAC,CAAC;EACtC,MAAMC,MAAM,GAAGV,uBAAuB,CAACQ,KAAK,CAAC;EAC7C,IAAIE,MAAM,EAAE;IACV;IACA;IACA;IACA,IAAIN,aAAa,KAAKM,MAAM,CAAChB,SAAS,EAAE;MACtC,MAAM,IAAIa,UAAU,CAClB,sBAAsBH,aAAa,eAAeD,UAAU,GAAG,GAC7D,gBAAgBO,MAAM,CAAChB,SAAS,SACpC,CAAC;IACH;IACA,IAAIW,YAAY,KAAKK,MAAM,CAACf,QAAQ,EAAE;MACpC,MAAM,IAAIY,UAAU,CAClB,wBAAwBF,YAAY,eAAeF,UAAU,GAAG,GAC9D,kBAAkBO,MAAM,CAACf,QAAQ,SACrC,CAAC;IACH;IACA;EACF;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMgB,IAAI,GAAGxB,WAAW,CAACK,aAAa,CAACW,UAAU,CAAC;EAClD,IAAIQ,IAAI,KAAKZ,SAAS,EAAE;IACtB,MAAM,IAAIO,SAAS,CAAC,uCAAuCH,UAAU,EAAE,CAAC;EAC1E;EAEA,MAAMS,UAAU,GAAGD,IAAI,CAAChB,QAAQ,IAAI,CAAC;EACrC,IAAIiB,UAAU,KAAK,CAAC,IAAIP,YAAY,GAAG,CAAC,EAAE;IACxC,MAAM,IAAIE,UAAU,CAClB,UAAUJ,UAAU,4BAA4BE,YAAY,SAC9D,CAAC;EACH;EACA,IAAIO,UAAU,GAAG,CAAC,IAAIP,YAAY,KAAK,CAAC,EAAE;IACxC,MAAM,IAAIE,UAAU,CAClB,UAAUJ,UAAU,uCACtB,CAAC;EACH;;EAEA;EACA,IAAIQ,IAAI,CAACjB,SAAS,KAAKU,aAAa,IAAIQ,UAAU,KAAKP,YAAY,EAAE;IACnE;EACF;;EAEA;EACA,IACElB,WAAW,CAACK,aAAa,CAACW,UAAU,EAAEC,aAAa,EAAEL,SAAS,CAAC,KAC/DA,SAAS,EACT;IACA,MAAM,IAAIQ,UAAU,CAClB,sBAAsBH,aAAa,eAAeD,UAAU,EAC9D,CAAC;EACH;EACA,IACES,UAAU,GAAG,CAAC,IACdzB,WAAW,CAACK,aAAa,CAACW,UAAU,EAAEJ,SAAS,EAAEM,YAAY,CAAC,KAAKN,SAAS,EAC5E;IACA,MAAM,IAAIQ,UAAU,CAClB,qBAAqBF,YAAY,eAAeF,UAAU,EAC5D,CAAC;EACH;AACF;AAUA,MAAMU,YAAY,SAASC,uBAAM,CAACC,SAAS,CAAC;EAElCC,QAAQ,GAAyB,IAAI;EACrCC,gBAAgB,GAAuBlB,SAAS;EAExDmB,WAAWA,CAAC;IAAEC,QAAQ;IAAEhB,UAAU;IAAEiB,SAAS;IAAEC,EAAE;IAAExB;EAAoB,CAAC,EAAE;IACxE;IACA,MAAMyB,aAA+B,GAAG,CAAC,CAAC;IAC1C,IAAIzB,OAAO,EAAE;MACX;MACA,MAAM0B,aAA4C,GAAG,CACnD,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,MAAM,EACN,OAAO,EACP,QAAQ,EACR,OAAO,EACP,WAAW,EACX;MACA;MAAA,CACD;MACD,KAAK,MAAMC,GAAG,IAAID,aAAa,EAAE;QAC/B,IAAIC,GAAG,IAAI3B,OAAO,EAAE;UAClB;UACCyB,aAAa,CAASE,GAAG,CAAC,GAAI3B,OAAO,CAAS2B,GAAG,CAAC;QACrD;MACF;IACF;IACA,KAAK,CAACF,aAAa,CAAC,CAAC,CAAC;;IAEtB;IACA,MAAMG,UAAU,GACd,IAAAC,qBAAa,EACX7B,OAAO,EACP,eACF,CAAC,IAAI,EAAE;IAET,MAAM8B,WAAW,GAAG,IAAAC,8BAAuB,EAACR,SAAS,CAAC;IACtD,MAAMS,IAAI,GAAG,IAAAD,8BAAuB,EAACP,EAAE,CAAC;IACxCnB,oBAAoB,CAACC,UAAU,EAAEwB,WAAW,CAACG,UAAU,EAAED,IAAI,CAACC,UAAU,CAAC;IAEzE,MAAMC,OAAO,GACX1C,qCAAY,CAACC,kBAAkB,CAAgB,eAAe,CAAC;IACjE,IAAI,CAACF,MAAM,GAAG2C,OAAO,CAACC,YAAY,CAAC;MACjCb,QAAQ;MACRhB,UAAU;MACViB,SAAS,EAAEO,WAAW;MACtBN,EAAE,EAAEQ,IAAI;MACRJ;IACF,CAAC,CAAC;EACJ;EAEQQ,UAAUA,CAACC,QAAgB,EAAiB;IAClD,MAAMC,UAAU,GAAG,IAAAC,yBAAiB,EAACF,QAAQ,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAClB,QAAQ,EAAE;MAClB,IAAI,CAACA,QAAQ,GAAG,IAAIqB,6BAAa,CAACH,QAA0B,CAAC;MAC7D,IAAI,CAACjB,gBAAgB,GAAGkB,UAAU;IACpC,CAAC,MAAM,IAAI,IAAI,CAAClB,gBAAgB,KAAKkB,UAAU,EAAE;MAC/C,MAAM,IAAIG,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IACA,OAAO,IAAI,CAACtB,QAAQ;EACtB;EASAuB,MAAMA,CACJC,IAAgB,EAChBC,aAAwB,EACxBC,cAAyB,EACR;IACjB,MAAMC,eAAe,GAAG,IAAAC,0BAAkB,EAAC,CAAC;IAC5CH,aAAa,GAAGA,aAAa,IAAIE,eAAe;IAChDD,cAAc,GAAGA,cAAc,IAAIC,eAAe;IAElD,IAAI,OAAOH,IAAI,KAAK,QAAQ,EAAE;MAC5B,IAAAK,wBAAgB,EAACL,IAAI,EAAEC,aAAa,CAAC;IACvC,CAAC,MAAM,IAAI,CAACK,WAAW,CAACC,MAAM,CAACP,IAAI,CAAC,EAAE;MACpC,MAAM,IAAIF,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IAEA,MAAMU,GAAG,GAAG,IAAI,CAAC5D,MAAM,CAACmD,MAAM,CAC5B,IAAAX,8BAAuB,EAACY,IAAI,EAAEC,aAAa,CAC7C,CAAC;IAED,IAAIC,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACT,UAAU,CAACS,cAAc,CAAC,CAACO,KAAK,CAACC,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC,CAAC;IAChE;IAEA,OAAOE,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC;EACzB;EAIAI,KAAKA,CAACV,cAA0C,EAAmB;IACjE,MAAMM,GAAG,GAAG,IAAI,CAAC5D,MAAM,CAACgE,KAAK,CAAC,CAAC;IAE/B,IAAIV,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACT,UAAU,CAACS,cAAc,CAAC,CAACW,GAAG,CAACH,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC,CAAC;IAC9D;IAEA,OAAOE,yBAAM,CAACC,IAAI,CAACH,GAAG,CAAC;EACzB;;EAEA;EACA;EACA;EACA;EACA;EACAM,UAAUA,CACRC,KAAiB,EACjBrB,QAAwB,EACxBsB,QAAsC,EACtC;IACA,IAAI;MACF,IAAI,CAACC,IAAI,CAAC,IAAI,CAAClB,MAAM,CAACgB,KAAK,EAAE,IAAAnB,yBAAiB,EAACF,QAAQ,CAAC,CAAC,CAAC;MAC1DsB,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOE,GAAG,EAAE;MACZF,QAAQ,CAACE,GAAY,CAAC;IACxB;EACF;EAEAC,MAAMA,CAACH,QAAsC,EAAE;IAC7C,IAAI;MACF,IAAI,CAACC,IAAI,CAAC,IAAI,CAACL,KAAK,CAAC,CAAC,CAAC;MACvBI,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOE,GAAG,EAAE;MACZF,QAAQ,CAACE,GAAY,CAAC;IACxB;EACF;EAEOE,cAAcA,CAACC,WAAqB,EAAQ;IACjD,MAAMC,GAAG,GAAG,IAAI,CAAC1E,MAAM,CAACwE,cAAc,CAAC,CAAC,CAACC,WAAW,CAAC;IACrD,IAAI,CAACC,GAAG,EAAE;MACR,MAAM,IAAIxB,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IACA,OAAO,IAAI;EACb;EAEOyB,MAAMA,CACXC,MAAc,EACdnE,OAEC,EACK;IACN;IACA,IAAI,CAAC,IAAI,CAACT,MAAM,IAAI,OAAO,IAAI,CAACA,MAAM,CAAC2E,MAAM,KAAK,UAAU,EAAE;MAC5D,MAAM,IAAIzB,KAAK,CAAC,wDAAwD,CAAC;IAC3E;IACA;IACA;IACA;IACA;IACA,MAAMwB,GAAG,GAAG,IAAI,CAAC1E,MAAM,CAAC2E,MAAM,CAC5B,IAAAnC,8BAAuB,EAACoC,MAAM,CAAC,EAC/BnE,OAAO,EAAEoE,eACX,CAAC;IACD,IAAI,CAACH,GAAG,EAAE;MACR,MAAM,IAAIxB,KAAK,CAAC,4CAA4C,CAAC;IAC/D;IACA,OAAO,IAAI;EACb;EAEO4B,UAAUA,CAAA,EAAW;IAC1B,OAAOhB,yBAAM,CAACC,IAAI,CAAC,IAAI,CAAC/D,MAAM,CAAC8E,UAAU,CAAC,CAAC,CAAC;EAC9C;EAEOC,UAAUA,CAACC,GAAW,EAAQ;IACnC,MAAMN,GAAG,GAAG,IAAI,CAAC1E,MAAM,CAAC+E,UAAU,CAAC,IAAAvC,8BAAuB,EAACwC,GAAG,CAAC,CAAC;IAChE,IAAI,CAACN,GAAG,EAAE;MACR,MAAM,IAAIxB,KAAK,CAAC,mBAAmB,CAAC;IACtC;IACA,OAAO,IAAI;EACb;EAEO/C,mBAAmBA,CAAA,EAAa;IACrC,OAAO,IAAI,CAACH,MAAM,CAACG,mBAAmB,CAAC,CAAC;EAC1C;AACF;AAEA,MAAM8E,QAAQ,SAASxD,YAAY,CAAC;EAClCK,WAAWA,CACTf,UAAkB,EAClBiB,SAAyB,EACzBC,EAAc,EACdxB,OAAuB,EACvB;IACA,KAAK,CAAC;MACJsB,QAAQ,EAAE,IAAI;MACdhB,UAAU;MACViB,SAAS,EAAE,IAAAQ,8BAAuB,EAACR,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAO,8BAAuB,EAACP,EAAE,CAAC;MAC/BxB;IACF,CAAC,CAAC;EACJ;AACF;AAIA,MAAMyE,UAAU,SAASzD,YAAY,CAAC;EACpCK,WAAWA,CACTf,UAAkB,EAClBiB,SAAyB,EACzBC,EAAc,EACdxB,OAAuB,EACvB;IACA,KAAK,CAAC;MACJsB,QAAQ,EAAE,KAAK;MACfhB,UAAU;MACViB,SAAS,EAAE,IAAAQ,8BAAuB,EAACR,SAAS,CAAC;MAC7CC,EAAE,EAAE,IAAAO,8BAAuB,EAACP,EAAE,CAAC;MAC/BxB;IACF,CAAC,CAAC;EACJ;AACF;AA4BO,SAAS0E,gBAAgBA,CAC9BC,SAAiB,EACjBhD,GAAmB,EACnBH,EAAc,EACdxB,OAAuB,EACb;EACV,OAAO,IAAIyE,UAAU,CAACE,SAAS,EAAEhD,GAAG,EAAEH,EAAE,EAAExB,OAAO,CAAC;AACpD;AA0BO,SAAS4E,cAAcA,CAC5BD,SAAiB,EACjBhD,GAAmB,EACnBH,EAAc,EACdxB,OAAuB,EACf;EACR,OAAO,IAAIwE,QAAQ,CAACG,SAAS,EAAEhD,GAAG,EAAEH,EAAE,EAAExB,OAAO,CAAC;AAClD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,QAAQA,CACtBuB,GAAe,EACfkD,KAAiB,EACjBlC,IAAgB;AAChB;AACA;AACAmC,MAA+B;AAC/B;AACA;AACAC,OAAgB,EACJ;EACZ,MAAMjD,WAAW,GAAG,IAAAC,8BAAuB,EAACJ,GAAG,CAAC;EAChD,MAAMK,IAAI,GAAG,IAAAD,8BAAuB,EAAC8C,KAAK,CAAC;EAC3CxE,oBAAoB,CAAC,UAAU,EAAEyB,WAAW,CAACG,UAAU,EAAED,IAAI,CAACC,UAAU,CAAC;EAEzE,MAAMC,OAAO,GACX1C,qCAAY,CAACC,kBAAkB,CAAgB,eAAe,CAAC;EACjE,MAAMF,MAAM,GAAG2C,OAAO,CAACC,YAAY,CAAC;IAClCb,QAAQ,EAAE,IAAI;IACdhB,UAAU,EAAE,UAAU;IACtBiB,SAAS,EAAEO,WAAW;IACtBN,EAAE,EAAEQ;EACN,CAAC,CAAC;EACF,MAAMgD,MAAM,GAAGzF,MAAM,CAACmD,MAAM,CAAC,IAAAX,8BAAuB,EAACY,IAAI,CAAC,CAAC;EAC3D,OAAO,IAAIsC,UAAU,CAACD,MAAM,CAAC;AAC/B","ignoreList":[]}

package/lib/commonjs/dhKeyPair.js

@@ -69,6 +69,9 @@ function dh_formatKeyPairOutput(dh, encoding) {
   const priv = _classes.KeyObject.createKeyObject('private', privateKeyData, _utils.KFormatType.DER, _utils.KeyEncoding.PKCS8);
   let publicKey;
   let privateKey;
+  if (publicFormat === 'raw-public' || privateFormat === 'raw-private' || privateFormat === 'raw-seed') {
+    throw new Error('Raw key formats are not supported for DH keys');
+  }
   if (publicFormat === -1) {
     publicKey = pub;
   } else {