react-native-quick-crypto 1.1.5 → 1.1.6

package/cpp/hkdf/HybridHkdf.cpp

@@ -12,23 +12,22 @@
 
 namespace margelo::nitro::crypto {
 
-std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> HybridHkdf::deriveKey(const std::string& algorithm,
-                                                                             const std::shared_ptr<ArrayBuffer>& key,
-                                                                             const std::shared_ptr<ArrayBuffer>& salt,
-                                                                             const std::shared_ptr<ArrayBuffer>& info, double length) {
+std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>>
+HybridHkdf::deriveKey(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key, const std::shared_ptr<ArrayBuffer>& salt,
+                      const std::shared_ptr<ArrayBuffer>& info, double length, HkdfMode mode) {
   // get owned NativeArrayBuffers before passing to sync function
   auto nativeKey = ToNativeArrayBuffer(key);
   auto nativeSalt = ToNativeArrayBuffer(salt);
   auto nativeInfo = ToNativeArrayBuffer(info);
 
-  return Promise<std::shared_ptr<ArrayBuffer>>::async([this, algorithm, nativeKey, nativeSalt, nativeInfo, length]() {
-    return this->deriveKeySync(algorithm, nativeKey, nativeSalt, nativeInfo, length);
+  return Promise<std::shared_ptr<ArrayBuffer>>::async([this, algorithm, nativeKey, nativeSalt, nativeInfo, length, mode]() {
+    return this->deriveKeySync(algorithm, nativeKey, nativeSalt, nativeInfo, length, mode);
   });
 }
 
 std::shared_ptr<ArrayBuffer> HybridHkdf::deriveKeySync(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& baseKey,
                                                        const std::shared_ptr<ArrayBuffer>& salt, const std::shared_ptr<ArrayBuffer>& info,
-                                                       double length) {
+                                                       double length, HkdfMode mode) {
   EVP_KDF* kdf = EVP_KDF_fetch(nullptr, "HKDF", nullptr);
   if (kdf == nullptr) {
     throw std::runtime_error("Failed to fetch HKDF implementation: " + std::to_string(ERR_get_error()));
@@ -41,9 +40,27 @@ std::shared_ptr<ArrayBuffer> HybridHkdf::deriveKeySync(const std::string& algori
   }
 
   // Set up parameters
-  OSSL_PARAM params[5];
+  OSSL_PARAM params[6];
   size_t paramIndex = 0;
 
+  // HKDF mode (RFC 5869): full extract+expand, extract-only (PRK), or expand-only.
+  int hkdfMode;
+  switch (mode) {
+    case HkdfMode::EXTRACT:
+      hkdfMode = EVP_KDF_HKDF_MODE_EXTRACT_ONLY;
+      break;
+    case HkdfMode::EXPAND:
+      hkdfMode = EVP_KDF_HKDF_MODE_EXPAND_ONLY;
+      break;
+    case HkdfMode::FULL:
+      hkdfMode = EVP_KDF_HKDF_MODE_EXTRACT_AND_EXPAND;
+      break;
+    default:
+      EVP_KDF_CTX_free(ctx);
+      throw std::runtime_error("Unknown HKDF mode");
+  }
+  params[paramIndex++] = OSSL_PARAM_construct_int(OSSL_KDF_PARAM_MODE, &hkdfMode);
+
   params[paramIndex++] = OSSL_PARAM_construct_utf8_string(OSSL_KDF_PARAM_DIGEST, const_cast<char*>(algorithm.c_str()), 0);
 
   // Key (Input Keying Material)

package/cpp/hkdf/HybridHkdf.hpp

@@ -19,10 +19,11 @@ class HybridHkdf : public HybridHkdfSpec {
   // Methods
   std::shared_ptr<ArrayBuffer> deriveKeySync(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key,
                                              const std::shared_ptr<ArrayBuffer>& salt, const std::shared_ptr<ArrayBuffer>& info,
-                                             double length) override;
+                                             double length, HkdfMode mode) override;
   std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> deriveKey(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key,
                                                                    const std::shared_ptr<ArrayBuffer>& salt,
-                                                                   const std::shared_ptr<ArrayBuffer>& info, double length) override;
+                                                                   const std::shared_ptr<ArrayBuffer>& info, double length,
+                                                                   HkdfMode mode) override;
 };
 
 } // namespace margelo::nitro::crypto

package/lib/commonjs/hkdf.js

@@ -5,6 +5,10 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.hkdf = hkdf;
 exports.hkdfDeriveBits = hkdfDeriveBits;
+exports.hkdfExpand = hkdfExpand;
+exports.hkdfExpandSync = hkdfExpandSync;
+exports.hkdfExtract = hkdfExtract;
+exports.hkdfExtractSync = hkdfExtractSync;
 exports.hkdfSync = hkdfSync;
 var _reactNativeBuffer = require("@craftzdog/react-native-buffer");
 var _reactNativeNitroModules = require("react-native-nitro-modules");
@@ -46,6 +50,13 @@ const HKDF_HASH_BYTES = {
   'sha3-512': 64,
   ripemd160: 20
 };
+function hkdfHashLen(digest) {
+  const hashLen = HKDF_HASH_BYTES[digest.toLowerCase()];
+  if (hashLen === undefined) {
+    throw new TypeError(`Unsupported HKDF digest: ${digest}`);
+  }
+  return hashLen;
+}
 function validateHkdfKeylen(digest, keylen) {
   if (typeof keylen !== 'number' || !Number.isFinite(keylen) || !Number.isInteger(keylen) || keylen < 0 || keylen > 0x7fff_ffff) {
     throw new TypeError('Bad key length');
@@ -68,7 +79,7 @@ function hkdf(digest, key, salt, info, keylen, callback) {
     const sanitizedInfo = sanitizeInput(info, 'Info');
     validateHkdfKeylen(normalizedDigest, keylen);
     const nativeMod = getNative();
-    nativeMod.deriveKey(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen).then(res => {
+    nativeMod.deriveKey(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen, 'full').then(res => {
       callback(null, _reactNativeBuffer.Buffer.from(res));
     }, err => {
       callback(err);
@@ -84,9 +95,68 @@ function hkdfSync(digest, key, salt, info, keylen) {
   const sanitizedInfo = sanitizeInput(info, 'Info');
   validateHkdfKeylen(normalizedDigest, keylen);
   const nativeMod = getNative();
-  const result = nativeMod.deriveKeySync(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen);
+  const result = nativeMod.deriveKeySync(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen, 'full');
+  return _reactNativeBuffer.Buffer.from(result);
+}
+
+// RFC 5869 §2.2 HKDF-Extract (sync): PRK = HMAC(salt, IKM). Salt defaults to
+// a string of HashLen zeros when omitted. Returns a PRK of HashLen bytes.
+function hkdfExtractSync(digest, ikm, salt = new Uint8Array(0)) {
+  const normalizedDigest = (0, _utils.normalizeHashName)(digest);
+  const hashLen = hkdfHashLen(normalizedDigest);
+  const sanitizedIkm = sanitizeInput(ikm, 'IKM');
+  const sanitizedSalt = sanitizeInput(salt, 'Salt');
+  const result = getNative().deriveKeySync(normalizedDigest, sanitizedIkm, sanitizedSalt, new ArrayBuffer(0), hashLen, 'extract');
+  return _reactNativeBuffer.Buffer.from(result);
+}
+
+// Async HKDF-Extract, mirroring `hkdf`. Unlike the sync form, `salt` is
+// required here because the callback occupies the trailing argument.
+function hkdfExtract(digest, ikm, salt, callback) {
+  validateCallback(callback);
+  try {
+    const normalizedDigest = (0, _utils.normalizeHashName)(digest);
+    const hashLen = hkdfHashLen(normalizedDigest);
+    const sanitizedIkm = sanitizeInput(ikm, 'IKM');
+    const sanitizedSalt = sanitizeInput(salt, 'Salt');
+    getNative().deriveKey(normalizedDigest, sanitizedIkm, sanitizedSalt, new ArrayBuffer(0), hashLen, 'extract').then(res => callback(null, _reactNativeBuffer.Buffer.from(res)), err => callback(err));
+  } catch (err) {
+    callback(err);
+  }
+}
+
+// RFC 5869 §2.3 HKDF-Expand (sync): OKM = expand(PRK, info, L). `prk` must be
+// at least HashLen bytes (a pseudorandom key, e.g. from hkdfExtract).
+function hkdfExpandSync(digest, prk, info, keylen) {
+  const normalizedDigest = (0, _utils.normalizeHashName)(digest);
+  const hashLen = hkdfHashLen(normalizedDigest);
+  const sanitizedPrk = sanitizeInput(prk, 'PRK');
+  if (sanitizedPrk.byteLength < hashLen) {
+    throw new RangeError(`HKDF-Expand PRK must be at least HashLen (${hashLen}) bytes for ${digest}`);
+  }
+  const sanitizedInfo = sanitizeInput(info, 'Info');
+  validateHkdfKeylen(normalizedDigest, keylen);
+  const result = getNative().deriveKeySync(normalizedDigest, sanitizedPrk, new ArrayBuffer(0), sanitizedInfo, keylen, 'expand');
   return _reactNativeBuffer.Buffer.from(result);
 }
+
+// Async HKDF-Expand, mirroring `hkdf`.
+function hkdfExpand(digest, prk, info, keylen, callback) {
+  validateCallback(callback);
+  try {
+    const normalizedDigest = (0, _utils.normalizeHashName)(digest);
+    const hashLen = hkdfHashLen(normalizedDigest);
+    const sanitizedPrk = sanitizeInput(prk, 'PRK');
+    if (sanitizedPrk.byteLength < hashLen) {
+      throw new RangeError(`HKDF-Expand PRK must be at least HashLen (${hashLen}) bytes for ${digest}`);
+    }
+    const sanitizedInfo = sanitizeInput(info, 'Info');
+    validateHkdfKeylen(normalizedDigest, keylen);
+    getNative().deriveKey(normalizedDigest, sanitizedPrk, new ArrayBuffer(0), sanitizedInfo, keylen, 'expand').then(res => callback(null, _reactNativeBuffer.Buffer.from(res)), err => callback(err));
+  } catch (err) {
+    callback(err);
+  }
+}
 function hkdfDeriveBits(algorithm, baseKey, length) {
   const hash = algorithm.hash;
   const salt = algorithm.salt;
@@ -102,7 +172,7 @@ function hkdfDeriveBits(algorithm, baseKey, length) {
   const normalizedDigest = (0, _utils.normalizeHashName)(hashName);
   validateHkdfKeylen(normalizedDigest, keylen);
   const nativeMod = getNative();
-  const result = nativeMod.deriveKeySync(normalizedDigest, (0, _utils.binaryLikeToArrayBuffer)(keyBuffer), (0, _utils.binaryLikeToArrayBuffer)(salt), (0, _utils.binaryLikeToArrayBuffer)(info), keylen);
+  const result = nativeMod.deriveKeySync(normalizedDigest, (0, _utils.binaryLikeToArrayBuffer)(keyBuffer), (0, _utils.binaryLikeToArrayBuffer)(salt), (0, _utils.binaryLikeToArrayBuffer)(info), keylen, 'full');
   return result;
 }
 //# sourceMappingURL=hkdf.js.map

package/lib/commonjs/hkdf.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNativeBuffer","require","_reactNativeNitroModules","_utils","native","getNative","NitroModules","createHybridObject","validateCallback","callback","undefined","Error","sanitizeInput","input","name","binaryLikeToArrayBuffer","HKDF_HASH_BYTES","sha1","sha224","sha256","sha384","sha512","ripemd160","validateHkdfKeylen","digest","keylen","Number","isFinite","isInteger","TypeError","hashLen","toLowerCase","RangeError","hkdf","key","salt","info","normalizedDigest","normalizeHashName","sanitizedKey","sanitizedSalt","sanitizedInfo","nativeMod","deriveKey","then","res","Buffer","from","err","hkdfSync","result","deriveKeySync","hkdfDeriveBits","algorithm","baseKey","length","hash","keyBuffer","keyObject","export","Math","ceil","hashName"],"sourceRoot":"../../src","sources":["hkdf.ts"],"mappings":";;;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AACA,IAAAC,wBAAA,GAAAD,OAAA;AAEA,IAAAE,MAAA,GAAAF,OAAA;AAmBA;AACA,IAAIG,MAAkB;AACtB,SAASC,SAASA,CAAA,EAAe;EAC/B,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGE,qCAAY,CAACC,kBAAkB,CAAa,MAAM,CAAC;EAC9D;EACA,OAAOH,MAAM;AACf;AAEA,SAASI,gBAAgBA,CAACC,QAAsB,EAAE;EAChD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,8BAA8B,CAAC;EACjD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAO,IAAAC,8BAAuB,EAACF,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,MAAME,eAAiD,GAAG;EACxDC,IAAI,EAAE,EAAE;EACRC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACV,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACdC,SAAS,EAAE;AACb,CAAC;AAED,SAASC,kBAAkBA,CAACC,MAAc,EAAEC,MAAc,EAAQ;EAChE,IACE,OAAOA,MAAM,KAAK,QAAQ,IAC1B,CAACC,MAAM,CAACC,QAAQ,CAACF,MAAM,CAAC,IACxB,CAACC,MAAM,CAACE,SAAS,CAACH,MAAM,CAAC,IACzBA,MAAM,GAAG,CAAC,IACVA,MAAM,GAAG,WAAW,EACpB;IACA,MAAM,IAAII,SAAS,CAAC,gBAAgB,CAAC;EACvC;EACA,MAAMC,OAAO,GAAGd,eAAe,CAACQ,MAAM,CAACO,WAAW,CAAC,CAAC,CAAC;EACrD,IAAID,OAAO,KAAKpB,SAAS,EAAE;IACzB,MAAM,IAAImB,SAAS,CAAC,4BAA4BL,MAAM,EAAE,CAAC;EAC3D;EACA;EACA,IAAIC,MAAM,GAAG,GAAG,GAAGK,OAAO,EAAE;IAC1B,MAAM,IAAIE,UAAU,CAClB,eAAeP,MAAM,4BAA4B,GAC/C,kBAAkB,GAAG,GAAGK,OAAO,SAASN,MAAM,EAClD,CAAC;EACH;AACF;AAEO,SAASS,IAAIA,CAClBT,MAAc,EACdU,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVX,MAAc,EACdhB,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM4B,gBAAgB,GAAG,IAAAC,wBAAiB,EAACd,MAAM,CAAC;IAClD,MAAMe,YAAY,GAAG3B,aAAa,CAACsB,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMM,aAAa,GAAG5B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;IACjD,MAAMM,aAAa,GAAG7B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;IAEjDb,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;IAE5C,MAAMiB,SAAS,GAAGrC,SAAS,CAAC,CAAC;IAC7BqC,SAAS,CACNC,SAAS,CACRN,gBAAgB,EAChBE,YAAY,EACZC,aAAa,EACbC,aAAa,EACbhB,MACF,CAAC,CACAmB,IAAI,CACHC,GAAG,IAAI;MACLpC,QAAQ,CAAC,IAAI,EAAEqC,yBAAM,CAACC,IAAI,CAACF,GAAG,CAAC,CAAC;IAClC,CAAC,EACDG,GAAG,IAAI;MACLvC,QAAQ,CAACuC,GAAG,CAAC;IACf,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZvC,QAAQ,CAACuC,GAAY,CAAC;EACxB;AACF;AAEO,SAASC,QAAQA,CACtBzB,MAAc,EACdU,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVX,MAAc,EACN;EACR,MAAMY,gBAAgB,GAAG,IAAAC,wBAAiB,EAACd,MAAM,CAAC;EAClD,MAAMe,YAAY,GAAG3B,aAAa,CAACsB,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMM,aAAa,GAAG5B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;EACjD,MAAMM,aAAa,GAAG7B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;EAEjDb,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;EAE5C,MAAMiB,SAAS,GAAGrC,SAAS,CAAC,CAAC;EAC7B,MAAM6C,MAAM,GAAGR,SAAS,CAACS,aAAa,CACpCd,gBAAgB,EAChBE,YAAY,EACZC,aAAa,EACbC,aAAa,EACbhB,MACF,CAAC;EAED,OAAOqB,yBAAM,CAACC,IAAI,CAACG,MAAM,CAAC;AAC5B;AAEO,SAASE,cAAcA,CAC5BC,SAAwB,EACxBC,OAAkB,EAClBC,MAAc,EACD;EACb,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI;EAC3B,MAAMrB,IAAI,GAAGkB,SAAS,CAAClB,IAAI;EAC3B,MAAMC,IAAI,GAAGiB,SAAS,CAACjB,IAAI;;EAE3B;EACA;EACA,MAAMqB,SAAS,GAAGH,OAAO,CAACI,SAAS,CAACC,MAAM,CAAC,CAAC;;EAE5C;EACA,MAAMlC,MAAM,GAAGmC,IAAI,CAACC,IAAI,CAACN,MAAM,GAAG,CAAC,CAAC;EAEpC,MAAMO,QAAQ,GAAG,OAAON,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,CAAC1C,IAAI;EAC5D,MAAMuB,gBAAgB,GAAG,IAAAC,wBAAiB,EAACwB,QAAQ,CAAC;EAEpDvC,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;EAE5C,MAAMiB,SAAS,GAAGrC,SAAS,CAAC,CAAC;EAC7B,MAAM6C,MAAM,GAAGR,SAAS,CAACS,aAAa,CACpCd,gBAAgB,EAChB,IAAAtB,8BAAuB,EAAC0C,SAAS,CAAC,EAClC,IAAA1C,8BAAuB,EAACoB,IAAI,CAAC,EAC7B,IAAApB,8BAAuB,EAACqB,IAAI,CAAC,EAC7BX,MACF,CAAC;EAED,OAAOyB,MAAM;AACf","ignoreList":[]}
+{"version":3,"names":["_reactNativeBuffer","require","_reactNativeNitroModules","_utils","native","getNative","NitroModules","createHybridObject","validateCallback","callback","undefined","Error","sanitizeInput","input","name","binaryLikeToArrayBuffer","HKDF_HASH_BYTES","sha1","sha224","sha256","sha384","sha512","ripemd160","hkdfHashLen","digest","hashLen","toLowerCase","TypeError","validateHkdfKeylen","keylen","Number","isFinite","isInteger","RangeError","hkdf","key","salt","info","normalizedDigest","normalizeHashName","sanitizedKey","sanitizedSalt","sanitizedInfo","nativeMod","deriveKey","then","res","Buffer","from","err","hkdfSync","result","deriveKeySync","hkdfExtractSync","ikm","Uint8Array","sanitizedIkm","ArrayBuffer","hkdfExtract","hkdfExpandSync","prk","sanitizedPrk","byteLength","hkdfExpand","hkdfDeriveBits","algorithm","baseKey","length","hash","keyBuffer","keyObject","export","Math","ceil","hashName"],"sourceRoot":"../../src","sources":["hkdf.ts"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AACA,IAAAC,wBAAA,GAAAD,OAAA;AAEA,IAAAE,MAAA,GAAAF,OAAA;AAmBA;AACA,IAAIG,MAAkB;AACtB,SAASC,SAASA,CAAA,EAAe;EAC/B,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGE,qCAAY,CAACC,kBAAkB,CAAa,MAAM,CAAC;EAC9D;EACA,OAAOH,MAAM;AACf;AAEA,SAASI,gBAAgBA,CAACC,QAAsB,EAAE;EAChD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,8BAA8B,CAAC;EACjD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAO,IAAAC,8BAAuB,EAACF,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,MAAME,eAAiD,GAAG;EACxDC,IAAI,EAAE,EAAE;EACRC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACV,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACdC,SAAS,EAAE;AACb,CAAC;AAED,SAASC,WAAWA,CAACC,MAAc,EAAU;EAC3C,MAAMC,OAAO,GAAGT,eAAe,CAACQ,MAAM,CAACE,WAAW,CAAC,CAAC,CAAC;EACrD,IAAID,OAAO,KAAKf,SAAS,EAAE;IACzB,MAAM,IAAIiB,SAAS,CAAC,4BAA4BH,MAAM,EAAE,CAAC;EAC3D;EACA,OAAOC,OAAO;AAChB;AAEA,SAASG,kBAAkBA,CAACJ,MAAc,EAAEK,MAAc,EAAQ;EAChE,IACE,OAAOA,MAAM,KAAK,QAAQ,IAC1B,CAACC,MAAM,CAACC,QAAQ,CAACF,MAAM,CAAC,IACxB,CAACC,MAAM,CAACE,SAAS,CAACH,MAAM,CAAC,IACzBA,MAAM,GAAG,CAAC,IACVA,MAAM,GAAG,WAAW,EACpB;IACA,MAAM,IAAIF,SAAS,CAAC,gBAAgB,CAAC;EACvC;EACA,MAAMF,OAAO,GAAGT,eAAe,CAACQ,MAAM,CAACE,WAAW,CAAC,CAAC,CAAC;EACrD,IAAID,OAAO,KAAKf,SAAS,EAAE;IACzB,MAAM,IAAIiB,SAAS,CAAC,4BAA4BH,MAAM,EAAE,CAAC;EAC3D;EACA;EACA,IAAIK,MAAM,GAAG,GAAG,GAAGJ,OAAO,EAAE;IAC1B,MAAM,IAAIQ,UAAU,CAClB,eAAeJ,MAAM,4BAA4B,GAC/C,kBAAkB,GAAG,GAAGJ,OAAO,SAASD,MAAM,EAClD,CAAC;EACH;AACF;AAEO,SAASU,IAAIA,CAClBV,MAAc,EACdW,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVR,MAAc,EACdpB,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM6B,gBAAgB,GAAG,IAAAC,wBAAiB,EAACf,MAAM,CAAC;IAClD,MAAMgB,YAAY,GAAG5B,aAAa,CAACuB,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMM,aAAa,GAAG7B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;IACjD,MAAMM,aAAa,GAAG9B,aAAa,CAACyB,IAAI,EAAE,MAAM,CAAC;IAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;IAE5C,MAAMc,SAAS,GAAGtC,SAAS,CAAC,CAAC;IAC7BsC,SAAS,CACNC,SAAS,CACRN,gBAAgB,EAChBE,YAAY,EACZC,aAAa,EACbC,aAAa,EACbb,MAAM,EACN,MACF,CAAC,CACAgB,IAAI,CACHC,GAAG,IAAI;MACLrC,QAAQ,CAAC,IAAI,EAAEsC,yBAAM,CAACC,IAAI,CAACF,GAAG,CAAC,CAAC;IAClC,CAAC,EACDG,GAAG,IAAI;MACLxC,QAAQ,CAACwC,GAAG,CAAC;IACf,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZxC,QAAQ,CAACwC,GAAY,CAAC;EACxB;AACF;AAEO,SAASC,QAAQA,CACtB1B,MAAc,EACdW,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVR,MAAc,EACN;EACR,MAAMS,gBAAgB,GAAG,IAAAC,wBAAiB,EAACf,MAAM,CAAC;EAClD,MAAMgB,YAAY,GAAG5B,aAAa,CAACuB,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMM,aAAa,GAAG7B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;EACjD,MAAMM,aAAa,GAAG9B,aAAa,CAACyB,IAAI,EAAE,MAAM,CAAC;EAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;EAE5C,MAAMc,SAAS,GAAGtC,SAAS,CAAC,CAAC;EAC7B,MAAM8C,MAAM,GAAGR,SAAS,CAACS,aAAa,CACpCd,gBAAgB,EAChBE,YAAY,EACZC,aAAa,EACbC,aAAa,EACbb,MAAM,EACN,MACF,CAAC;EAED,OAAOkB,yBAAM,CAACC,IAAI,CAACG,MAAM,CAAC;AAC5B;;AAEA;AACA;AACO,SAASE,eAAeA,CAC7B7B,MAAc,EACd8B,GAAgB,EAChBlB,IAAU,GAAG,IAAImB,UAAU,CAAC,CAAC,CAAC,EACtB;EACR,MAAMjB,gBAAgB,GAAG,IAAAC,wBAAiB,EAACf,MAAM,CAAC;EAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;EAC7C,MAAMkB,YAAY,GAAG5C,aAAa,CAAC0C,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMb,aAAa,GAAG7B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;EAEjD,MAAMe,MAAM,GAAG9C,SAAS,CAAC,CAAC,CAAC+C,aAAa,CACtCd,gBAAgB,EAChBkB,YAAY,EACZf,aAAa,EACb,IAAIgB,WAAW,CAAC,CAAC,CAAC,EAClBhC,OAAO,EACP,SACF,CAAC;EAED,OAAOsB,yBAAM,CAACC,IAAI,CAACG,MAAM,CAAC;AAC5B;;AAEA;AACA;AACO,SAASO,WAAWA,CACzBlC,MAAc,EACd8B,GAAgB,EAChBlB,IAAU,EACV3B,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM6B,gBAAgB,GAAG,IAAAC,wBAAiB,EAACf,MAAM,CAAC;IAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;IAC7C,MAAMkB,YAAY,GAAG5C,aAAa,CAAC0C,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMb,aAAa,GAAG7B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;IAEjD/B,SAAS,CAAC,CAAC,CACRuC,SAAS,CACRN,gBAAgB,EAChBkB,YAAY,EACZf,aAAa,EACb,IAAIgB,WAAW,CAAC,CAAC,CAAC,EAClBhC,OAAO,EACP,SACF,CAAC,CACAoB,IAAI,CACHC,GAAG,IAAIrC,QAAQ,CAAC,IAAI,EAAEsC,yBAAM,CAACC,IAAI,CAACF,GAAG,CAAC,CAAC,EACvCG,GAAG,IAAIxC,QAAQ,CAACwC,GAAG,CACrB,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZxC,QAAQ,CAACwC,GAAY,CAAC;EACxB;AACF;;AAEA;AACA;AACO,SAASU,cAAcA,CAC5BnC,MAAc,EACdoC,GAAgB,EAChBvB,IAAU,EACVR,MAAc,EACN;EACR,MAAMS,gBAAgB,GAAG,IAAAC,wBAAiB,EAACf,MAAM,CAAC;EAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;EAC7C,MAAMuB,YAAY,GAAGjD,aAAa,CAACgD,GAAG,EAAE,KAAK,CAAC;EAC9C,IAAIC,YAAY,CAACC,UAAU,GAAGrC,OAAO,EAAE;IACrC,MAAM,IAAIQ,UAAU,CAClB,6CAA6CR,OAAO,eAAeD,MAAM,EAC3E,CAAC;EACH;EACA,MAAMkB,aAAa,GAAG9B,aAAa,CAACyB,IAAI,EAAE,MAAM,CAAC;EAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;EAE5C,MAAMsB,MAAM,GAAG9C,SAAS,CAAC,CAAC,CAAC+C,aAAa,CACtCd,gBAAgB,EAChBuB,YAAY,EACZ,IAAIJ,WAAW,CAAC,CAAC,CAAC,EAClBf,aAAa,EACbb,MAAM,EACN,QACF,CAAC;EAED,OAAOkB,yBAAM,CAACC,IAAI,CAACG,MAAM,CAAC;AAC5B;;AAEA;AACO,SAASY,UAAUA,CACxBvC,MAAc,EACdoC,GAAgB,EAChBvB,IAAU,EACVR,MAAc,EACdpB,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM6B,gBAAgB,GAAG,IAAAC,wBAAiB,EAACf,MAAM,CAAC;IAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;IAC7C,MAAMuB,YAAY,GAAGjD,aAAa,CAACgD,GAAG,EAAE,KAAK,CAAC;IAC9C,IAAIC,YAAY,CAACC,UAAU,GAAGrC,OAAO,EAAE;MACrC,MAAM,IAAIQ,UAAU,CAClB,6CAA6CR,OAAO,eAAeD,MAAM,EAC3E,CAAC;IACH;IACA,MAAMkB,aAAa,GAAG9B,aAAa,CAACyB,IAAI,EAAE,MAAM,CAAC;IAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;IAE5CxB,SAAS,CAAC,CAAC,CACRuC,SAAS,CACRN,gBAAgB,EAChBuB,YAAY,EACZ,IAAIJ,WAAW,CAAC,CAAC,CAAC,EAClBf,aAAa,EACbb,MAAM,EACN,QACF,CAAC,CACAgB,IAAI,CACHC,GAAG,IAAIrC,QAAQ,CAAC,IAAI,EAAEsC,yBAAM,CAACC,IAAI,CAACF,GAAG,CAAC,CAAC,EACvCG,GAAG,IAAIxC,QAAQ,CAACwC,GAAG,CACrB,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZxC,QAAQ,CAACwC,GAAY,CAAC;EACxB;AACF;AAEO,SAASe,cAAcA,CAC5BC,SAAwB,EACxBC,OAAkB,EAClBC,MAAc,EACD;EACb,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI;EAC3B,MAAMhC,IAAI,GAAG6B,SAAS,CAAC7B,IAAI;EAC3B,MAAMC,IAAI,GAAG4B,SAAS,CAAC5B,IAAI;;EAE3B;EACA;EACA,MAAMgC,SAAS,GAAGH,OAAO,CAACI,SAAS,CAACC,MAAM,CAAC,CAAC;;EAE5C;EACA,MAAM1C,MAAM,GAAG2C,IAAI,CAACC,IAAI,CAACN,MAAM,GAAG,CAAC,CAAC;EAEpC,MAAMO,QAAQ,GAAG,OAAON,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,CAACtD,IAAI;EAC5D,MAAMwB,gBAAgB,GAAG,IAAAC,wBAAiB,EAACmC,QAAQ,CAAC;EAEpD9C,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;EAE5C,MAAMc,SAAS,GAAGtC,SAAS,CAAC,CAAC;EAC7B,MAAM8C,MAAM,GAAGR,SAAS,CAACS,aAAa,CACpCd,gBAAgB,EAChB,IAAAvB,8BAAuB,EAACsD,SAAS,CAAC,EAClC,IAAAtD,8BAAuB,EAACqB,IAAI,CAAC,EAC7B,IAAArB,8BAAuB,EAACsB,IAAI,CAAC,EAC7BR,MAAM,EACN,MACF,CAAC;EAED,OAAOsB,MAAM;AACf","ignoreList":[]}

package/lib/module/hkdf.js

@@ -40,6 +40,13 @@ const HKDF_HASH_BYTES = {
   'sha3-512': 64,
   ripemd160: 20
 };
+function hkdfHashLen(digest) {
+  const hashLen = HKDF_HASH_BYTES[digest.toLowerCase()];
+  if (hashLen === undefined) {
+    throw new TypeError(`Unsupported HKDF digest: ${digest}`);
+  }
+  return hashLen;
+}
 function validateHkdfKeylen(digest, keylen) {
   if (typeof keylen !== 'number' || !Number.isFinite(keylen) || !Number.isInteger(keylen) || keylen < 0 || keylen > 0x7fff_ffff) {
     throw new TypeError('Bad key length');
@@ -62,7 +69,7 @@ export function hkdf(digest, key, salt, info, keylen, callback) {
     const sanitizedInfo = sanitizeInput(info, 'Info');
     validateHkdfKeylen(normalizedDigest, keylen);
     const nativeMod = getNative();
-    nativeMod.deriveKey(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen).then(res => {
+    nativeMod.deriveKey(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen, 'full').then(res => {
       callback(null, Buffer.from(res));
     }, err => {
       callback(err);
@@ -78,9 +85,68 @@ export function hkdfSync(digest, key, salt, info, keylen) {
   const sanitizedInfo = sanitizeInput(info, 'Info');
   validateHkdfKeylen(normalizedDigest, keylen);
   const nativeMod = getNative();
-  const result = nativeMod.deriveKeySync(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen);
+  const result = nativeMod.deriveKeySync(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen, 'full');
+  return Buffer.from(result);
+}
+
+// RFC 5869 §2.2 HKDF-Extract (sync): PRK = HMAC(salt, IKM). Salt defaults to
+// a string of HashLen zeros when omitted. Returns a PRK of HashLen bytes.
+export function hkdfExtractSync(digest, ikm, salt = new Uint8Array(0)) {
+  const normalizedDigest = normalizeHashName(digest);
+  const hashLen = hkdfHashLen(normalizedDigest);
+  const sanitizedIkm = sanitizeInput(ikm, 'IKM');
+  const sanitizedSalt = sanitizeInput(salt, 'Salt');
+  const result = getNative().deriveKeySync(normalizedDigest, sanitizedIkm, sanitizedSalt, new ArrayBuffer(0), hashLen, 'extract');
+  return Buffer.from(result);
+}
+
+// Async HKDF-Extract, mirroring `hkdf`. Unlike the sync form, `salt` is
+// required here because the callback occupies the trailing argument.
+export function hkdfExtract(digest, ikm, salt, callback) {
+  validateCallback(callback);
+  try {
+    const normalizedDigest = normalizeHashName(digest);
+    const hashLen = hkdfHashLen(normalizedDigest);
+    const sanitizedIkm = sanitizeInput(ikm, 'IKM');
+    const sanitizedSalt = sanitizeInput(salt, 'Salt');
+    getNative().deriveKey(normalizedDigest, sanitizedIkm, sanitizedSalt, new ArrayBuffer(0), hashLen, 'extract').then(res => callback(null, Buffer.from(res)), err => callback(err));
+  } catch (err) {
+    callback(err);
+  }
+}
+
+// RFC 5869 §2.3 HKDF-Expand (sync): OKM = expand(PRK, info, L). `prk` must be
+// at least HashLen bytes (a pseudorandom key, e.g. from hkdfExtract).
+export function hkdfExpandSync(digest, prk, info, keylen) {
+  const normalizedDigest = normalizeHashName(digest);
+  const hashLen = hkdfHashLen(normalizedDigest);
+  const sanitizedPrk = sanitizeInput(prk, 'PRK');
+  if (sanitizedPrk.byteLength < hashLen) {
+    throw new RangeError(`HKDF-Expand PRK must be at least HashLen (${hashLen}) bytes for ${digest}`);
+  }
+  const sanitizedInfo = sanitizeInput(info, 'Info');
+  validateHkdfKeylen(normalizedDigest, keylen);
+  const result = getNative().deriveKeySync(normalizedDigest, sanitizedPrk, new ArrayBuffer(0), sanitizedInfo, keylen, 'expand');
   return Buffer.from(result);
 }
+
+// Async HKDF-Expand, mirroring `hkdf`.
+export function hkdfExpand(digest, prk, info, keylen, callback) {
+  validateCallback(callback);
+  try {
+    const normalizedDigest = normalizeHashName(digest);
+    const hashLen = hkdfHashLen(normalizedDigest);
+    const sanitizedPrk = sanitizeInput(prk, 'PRK');
+    if (sanitizedPrk.byteLength < hashLen) {
+      throw new RangeError(`HKDF-Expand PRK must be at least HashLen (${hashLen}) bytes for ${digest}`);
+    }
+    const sanitizedInfo = sanitizeInput(info, 'Info');
+    validateHkdfKeylen(normalizedDigest, keylen);
+    getNative().deriveKey(normalizedDigest, sanitizedPrk, new ArrayBuffer(0), sanitizedInfo, keylen, 'expand').then(res => callback(null, Buffer.from(res)), err => callback(err));
+  } catch (err) {
+    callback(err);
+  }
+}
 export function hkdfDeriveBits(algorithm, baseKey, length) {
   const hash = algorithm.hash;
   const salt = algorithm.salt;
@@ -96,7 +162,7 @@ export function hkdfDeriveBits(algorithm, baseKey, length) {
   const normalizedDigest = normalizeHashName(hashName);
   validateHkdfKeylen(normalizedDigest, keylen);
   const nativeMod = getNative();
-  const result = nativeMod.deriveKeySync(normalizedDigest, binaryLikeToArrayBuffer(keyBuffer), binaryLikeToArrayBuffer(salt), binaryLikeToArrayBuffer(info), keylen);
+  const result = nativeMod.deriveKeySync(normalizedDigest, binaryLikeToArrayBuffer(keyBuffer), binaryLikeToArrayBuffer(salt), binaryLikeToArrayBuffer(info), keylen, 'full');
   return result;
 }
 //# sourceMappingURL=hkdf.js.map

package/lib/module/hkdf.js.map

@@ -1 +1 @@
-{"version":3,"names":["Buffer","NitroModules","binaryLikeToArrayBuffer","normalizeHashName","native","getNative","createHybridObject","validateCallback","callback","undefined","Error","sanitizeInput","input","name","HKDF_HASH_BYTES","sha1","sha224","sha256","sha384","sha512","ripemd160","validateHkdfKeylen","digest","keylen","Number","isFinite","isInteger","TypeError","hashLen","toLowerCase","RangeError","hkdf","key","salt","info","normalizedDigest","sanitizedKey","sanitizedSalt","sanitizedInfo","nativeMod","deriveKey","then","res","from","err","hkdfSync","result","deriveKeySync","hkdfDeriveBits","algorithm","baseKey","length","hash","keyBuffer","keyObject","export","Math","ceil","hashName"],"sourceRoot":"../../src","sources":["hkdf.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,SAAS;AAmBpE;AACA,IAAIC,MAAkB;AACtB,SAASC,SAASA,CAAA,EAAe;EAC/B,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGH,YAAY,CAACK,kBAAkB,CAAa,MAAM,CAAC;EAC9D;EACA,OAAOF,MAAM;AACf;AAEA,SAASG,gBAAgBA,CAACC,QAAsB,EAAE;EAChD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,8BAA8B,CAAC;EACjD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAOX,uBAAuB,CAACU,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,MAAMC,eAAiD,GAAG;EACxDC,IAAI,EAAE,EAAE;EACRC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACV,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACdC,SAAS,EAAE;AACb,CAAC;AAED,SAASC,kBAAkBA,CAACC,MAAc,EAAEC,MAAc,EAAQ;EAChE,IACE,OAAOA,MAAM,KAAK,QAAQ,IAC1B,CAACC,MAAM,CAACC,QAAQ,CAACF,MAAM,CAAC,IACxB,CAACC,MAAM,CAACE,SAAS,CAACH,MAAM,CAAC,IACzBA,MAAM,GAAG,CAAC,IACVA,MAAM,GAAG,WAAW,EACpB;IACA,MAAM,IAAII,SAAS,CAAC,gBAAgB,CAAC;EACvC;EACA,MAAMC,OAAO,GAAGd,eAAe,CAACQ,MAAM,CAACO,WAAW,CAAC,CAAC,CAAC;EACrD,IAAID,OAAO,KAAKnB,SAAS,EAAE;IACzB,MAAM,IAAIkB,SAAS,CAAC,4BAA4BL,MAAM,EAAE,CAAC;EAC3D;EACA;EACA,IAAIC,MAAM,GAAG,GAAG,GAAGK,OAAO,EAAE;IAC1B,MAAM,IAAIE,UAAU,CAClB,eAAeP,MAAM,4BAA4B,GAC/C,kBAAkB,GAAG,GAAGK,OAAO,SAASN,MAAM,EAClD,CAAC;EACH;AACF;AAEA,OAAO,SAASS,IAAIA,CAClBT,MAAc,EACdU,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVX,MAAc,EACdf,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM2B,gBAAgB,GAAGhC,iBAAiB,CAACmB,MAAM,CAAC;IAClD,MAAMc,YAAY,GAAGzB,aAAa,CAACqB,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMK,aAAa,GAAG1B,aAAa,CAACsB,IAAI,EAAE,MAAM,CAAC;IACjD,MAAMK,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;IAEjDb,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;IAE5C,MAAMgB,SAAS,GAAGlC,SAAS,CAAC,CAAC;IAC7BkC,SAAS,CACNC,SAAS,CACRL,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbf,MACF,CAAC,CACAkB,IAAI,CACHC,GAAG,IAAI;MACLlC,QAAQ,CAAC,IAAI,EAAER,MAAM,CAAC2C,IAAI,CAACD,GAAG,CAAC,CAAC;IAClC,CAAC,EACDE,GAAG,IAAI;MACLpC,QAAQ,CAACoC,GAAG,CAAC;IACf,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZpC,QAAQ,CAACoC,GAAY,CAAC;EACxB;AACF;AAEA,OAAO,SAASC,QAAQA,CACtBvB,MAAc,EACdU,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVX,MAAc,EACN;EACR,MAAMY,gBAAgB,GAAGhC,iBAAiB,CAACmB,MAAM,CAAC;EAClD,MAAMc,YAAY,GAAGzB,aAAa,CAACqB,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMK,aAAa,GAAG1B,aAAa,CAACsB,IAAI,EAAE,MAAM,CAAC;EACjD,MAAMK,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;EAEjDb,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;EAE5C,MAAMgB,SAAS,GAAGlC,SAAS,CAAC,CAAC;EAC7B,MAAMyC,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCZ,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbf,MACF,CAAC;EAED,OAAOvB,MAAM,CAAC2C,IAAI,CAACG,MAAM,CAAC;AAC5B;AAEA,OAAO,SAASE,cAAcA,CAC5BC,SAAwB,EACxBC,OAAkB,EAClBC,MAAc,EACD;EACb,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI;EAC3B,MAAMnB,IAAI,GAAGgB,SAAS,CAAChB,IAAI;EAC3B,MAAMC,IAAI,GAAGe,SAAS,CAACf,IAAI;;EAE3B;EACA;EACA,MAAMmB,SAAS,GAAGH,OAAO,CAACI,SAAS,CAACC,MAAM,CAAC,CAAC;;EAE5C;EACA,MAAMhC,MAAM,GAAGiC,IAAI,CAACC,IAAI,CAACN,MAAM,GAAG,CAAC,CAAC;EAEpC,MAAMO,QAAQ,GAAG,OAAON,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,CAACvC,IAAI;EAC5D,MAAMsB,gBAAgB,GAAGhC,iBAAiB,CAACuD,QAAQ,CAAC;EAEpDrC,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;EAE5C,MAAMgB,SAAS,GAAGlC,SAAS,CAAC,CAAC;EAC7B,MAAMyC,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCZ,gBAAgB,EAChBjC,uBAAuB,CAACmD,SAAS,CAAC,EAClCnD,uBAAuB,CAAC+B,IAAI,CAAC,EAC7B/B,uBAAuB,CAACgC,IAAI,CAAC,EAC7BX,MACF,CAAC;EAED,OAAOuB,MAAM;AACf","ignoreList":[]}
+{"version":3,"names":["Buffer","NitroModules","binaryLikeToArrayBuffer","normalizeHashName","native","getNative","createHybridObject","validateCallback","callback","undefined","Error","sanitizeInput","input","name","HKDF_HASH_BYTES","sha1","sha224","sha256","sha384","sha512","ripemd160","hkdfHashLen","digest","hashLen","toLowerCase","TypeError","validateHkdfKeylen","keylen","Number","isFinite","isInteger","RangeError","hkdf","key","salt","info","normalizedDigest","sanitizedKey","sanitizedSalt","sanitizedInfo","nativeMod","deriveKey","then","res","from","err","hkdfSync","result","deriveKeySync","hkdfExtractSync","ikm","Uint8Array","sanitizedIkm","ArrayBuffer","hkdfExtract","hkdfExpandSync","prk","sanitizedPrk","byteLength","hkdfExpand","hkdfDeriveBits","algorithm","baseKey","length","hash","keyBuffer","keyObject","export","Math","ceil","hashName"],"sourceRoot":"../../src","sources":["hkdf.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,SAAS;AAmBpE;AACA,IAAIC,MAAkB;AACtB,SAASC,SAASA,CAAA,EAAe;EAC/B,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGH,YAAY,CAACK,kBAAkB,CAAa,MAAM,CAAC;EAC9D;EACA,OAAOF,MAAM;AACf;AAEA,SAASG,gBAAgBA,CAACC,QAAsB,EAAE;EAChD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,8BAA8B,CAAC;EACjD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAOX,uBAAuB,CAACU,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,MAAMC,eAAiD,GAAG;EACxDC,IAAI,EAAE,EAAE;EACRC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACV,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACdC,SAAS,EAAE;AACb,CAAC;AAED,SAASC,WAAWA,CAACC,MAAc,EAAU;EAC3C,MAAMC,OAAO,GAAGT,eAAe,CAACQ,MAAM,CAACE,WAAW,CAAC,CAAC,CAAC;EACrD,IAAID,OAAO,KAAKd,SAAS,EAAE;IACzB,MAAM,IAAIgB,SAAS,CAAC,4BAA4BH,MAAM,EAAE,CAAC;EAC3D;EACA,OAAOC,OAAO;AAChB;AAEA,SAASG,kBAAkBA,CAACJ,MAAc,EAAEK,MAAc,EAAQ;EAChE,IACE,OAAOA,MAAM,KAAK,QAAQ,IAC1B,CAACC,MAAM,CAACC,QAAQ,CAACF,MAAM,CAAC,IACxB,CAACC,MAAM,CAACE,SAAS,CAACH,MAAM,CAAC,IACzBA,MAAM,GAAG,CAAC,IACVA,MAAM,GAAG,WAAW,EACpB;IACA,MAAM,IAAIF,SAAS,CAAC,gBAAgB,CAAC;EACvC;EACA,MAAMF,OAAO,GAAGT,eAAe,CAACQ,MAAM,CAACE,WAAW,CAAC,CAAC,CAAC;EACrD,IAAID,OAAO,KAAKd,SAAS,EAAE;IACzB,MAAM,IAAIgB,SAAS,CAAC,4BAA4BH,MAAM,EAAE,CAAC;EAC3D;EACA;EACA,IAAIK,MAAM,GAAG,GAAG,GAAGJ,OAAO,EAAE;IAC1B,MAAM,IAAIQ,UAAU,CAClB,eAAeJ,MAAM,4BAA4B,GAC/C,kBAAkB,GAAG,GAAGJ,OAAO,SAASD,MAAM,EAClD,CAAC;EACH;AACF;AAEA,OAAO,SAASU,IAAIA,CAClBV,MAAc,EACdW,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVR,MAAc,EACdnB,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM4B,gBAAgB,GAAGjC,iBAAiB,CAACmB,MAAM,CAAC;IAClD,MAAMe,YAAY,GAAG1B,aAAa,CAACsB,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMK,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;IACjD,MAAMK,aAAa,GAAG5B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;IAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;IAE5C,MAAMa,SAAS,GAAGnC,SAAS,CAAC,CAAC;IAC7BmC,SAAS,CACNC,SAAS,CACRL,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbZ,MAAM,EACN,MACF,CAAC,CACAe,IAAI,CACHC,GAAG,IAAI;MACLnC,QAAQ,CAAC,IAAI,EAAER,MAAM,CAAC4C,IAAI,CAACD,GAAG,CAAC,CAAC;IAClC,CAAC,EACDE,GAAG,IAAI;MACLrC,QAAQ,CAACqC,GAAG,CAAC;IACf,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZrC,QAAQ,CAACqC,GAAY,CAAC;EACxB;AACF;AAEA,OAAO,SAASC,QAAQA,CACtBxB,MAAc,EACdW,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVR,MAAc,EACN;EACR,MAAMS,gBAAgB,GAAGjC,iBAAiB,CAACmB,MAAM,CAAC;EAClD,MAAMe,YAAY,GAAG1B,aAAa,CAACsB,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMK,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;EACjD,MAAMK,aAAa,GAAG5B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;EAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;EAE5C,MAAMa,SAAS,GAAGnC,SAAS,CAAC,CAAC;EAC7B,MAAM0C,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCZ,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbZ,MAAM,EACN,MACF,CAAC;EAED,OAAO3B,MAAM,CAAC4C,IAAI,CAACG,MAAM,CAAC;AAC5B;;AAEA;AACA;AACA,OAAO,SAASE,eAAeA,CAC7B3B,MAAc,EACd4B,GAAgB,EAChBhB,IAAU,GAAG,IAAIiB,UAAU,CAAC,CAAC,CAAC,EACtB;EACR,MAAMf,gBAAgB,GAAGjC,iBAAiB,CAACmB,MAAM,CAAC;EAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;EAC7C,MAAMgB,YAAY,GAAGzC,aAAa,CAACuC,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMZ,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;EAEjD,MAAMa,MAAM,GAAG1C,SAAS,CAAC,CAAC,CAAC2C,aAAa,CACtCZ,gBAAgB,EAChBgB,YAAY,EACZd,aAAa,EACb,IAAIe,WAAW,CAAC,CAAC,CAAC,EAClB9B,OAAO,EACP,SACF,CAAC;EAED,OAAOvB,MAAM,CAAC4C,IAAI,CAACG,MAAM,CAAC;AAC5B;;AAEA;AACA;AACA,OAAO,SAASO,WAAWA,CACzBhC,MAAc,EACd4B,GAAgB,EAChBhB,IAAU,EACV1B,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM4B,gBAAgB,GAAGjC,iBAAiB,CAACmB,MAAM,CAAC;IAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;IAC7C,MAAMgB,YAAY,GAAGzC,aAAa,CAACuC,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMZ,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;IAEjD7B,SAAS,CAAC,CAAC,CACRoC,SAAS,CACRL,gBAAgB,EAChBgB,YAAY,EACZd,aAAa,EACb,IAAIe,WAAW,CAAC,CAAC,CAAC,EAClB9B,OAAO,EACP,SACF,CAAC,CACAmB,IAAI,CACHC,GAAG,IAAInC,QAAQ,CAAC,IAAI,EAAER,MAAM,CAAC4C,IAAI,CAACD,GAAG,CAAC,CAAC,EACvCE,GAAG,IAAIrC,QAAQ,CAACqC,GAAG,CACrB,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZrC,QAAQ,CAACqC,GAAY,CAAC;EACxB;AACF;;AAEA;AACA;AACA,OAAO,SAASU,cAAcA,CAC5BjC,MAAc,EACdkC,GAAgB,EAChBrB,IAAU,EACVR,MAAc,EACN;EACR,MAAMS,gBAAgB,GAAGjC,iBAAiB,CAACmB,MAAM,CAAC;EAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;EAC7C,MAAMqB,YAAY,GAAG9C,aAAa,CAAC6C,GAAG,EAAE,KAAK,CAAC;EAC9C,IAAIC,YAAY,CAACC,UAAU,GAAGnC,OAAO,EAAE;IACrC,MAAM,IAAIQ,UAAU,CAClB,6CAA6CR,OAAO,eAAeD,MAAM,EAC3E,CAAC;EACH;EACA,MAAMiB,aAAa,GAAG5B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;EAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;EAE5C,MAAMoB,MAAM,GAAG1C,SAAS,CAAC,CAAC,CAAC2C,aAAa,CACtCZ,gBAAgB,EAChBqB,YAAY,EACZ,IAAIJ,WAAW,CAAC,CAAC,CAAC,EAClBd,aAAa,EACbZ,MAAM,EACN,QACF,CAAC;EAED,OAAO3B,MAAM,CAAC4C,IAAI,CAACG,MAAM,CAAC;AAC5B;;AAEA;AACA,OAAO,SAASY,UAAUA,CACxBrC,MAAc,EACdkC,GAAgB,EAChBrB,IAAU,EACVR,MAAc,EACdnB,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM4B,gBAAgB,GAAGjC,iBAAiB,CAACmB,MAAM,CAAC;IAClD,MAAMC,OAAO,GAAGF,WAAW,CAACe,gBAAgB,CAAC;IAC7C,MAAMqB,YAAY,GAAG9C,aAAa,CAAC6C,GAAG,EAAE,KAAK,CAAC;IAC9C,IAAIC,YAAY,CAACC,UAAU,GAAGnC,OAAO,EAAE;MACrC,MAAM,IAAIQ,UAAU,CAClB,6CAA6CR,OAAO,eAAeD,MAAM,EAC3E,CAAC;IACH;IACA,MAAMiB,aAAa,GAAG5B,aAAa,CAACwB,IAAI,EAAE,MAAM,CAAC;IAEjDT,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;IAE5CtB,SAAS,CAAC,CAAC,CACRoC,SAAS,CACRL,gBAAgB,EAChBqB,YAAY,EACZ,IAAIJ,WAAW,CAAC,CAAC,CAAC,EAClBd,aAAa,EACbZ,MAAM,EACN,QACF,CAAC,CACAe,IAAI,CACHC,GAAG,IAAInC,QAAQ,CAAC,IAAI,EAAER,MAAM,CAAC4C,IAAI,CAACD,GAAG,CAAC,CAAC,EACvCE,GAAG,IAAIrC,QAAQ,CAACqC,GAAG,CACrB,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZrC,QAAQ,CAACqC,GAAY,CAAC;EACxB;AACF;AAEA,OAAO,SAASe,cAAcA,CAC5BC,SAAwB,EACxBC,OAAkB,EAClBC,MAAc,EACD;EACb,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI;EAC3B,MAAM9B,IAAI,GAAG2B,SAAS,CAAC3B,IAAI;EAC3B,MAAMC,IAAI,GAAG0B,SAAS,CAAC1B,IAAI;;EAE3B;EACA;EACA,MAAM8B,SAAS,GAAGH,OAAO,CAACI,SAAS,CAACC,MAAM,CAAC,CAAC;;EAE5C;EACA,MAAMxC,MAAM,GAAGyC,IAAI,CAACC,IAAI,CAACN,MAAM,GAAG,CAAC,CAAC;EAEpC,MAAMO,QAAQ,GAAG,OAAON,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,CAACnD,IAAI;EAC5D,MAAMuB,gBAAgB,GAAGjC,iBAAiB,CAACmE,QAAQ,CAAC;EAEpD5C,kBAAkB,CAACU,gBAAgB,EAAET,MAAM,CAAC;EAE5C,MAAMa,SAAS,GAAGnC,SAAS,CAAC,CAAC;EAC7B,MAAM0C,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCZ,gBAAgB,EAChBlC,uBAAuB,CAAC+D,SAAS,CAAC,EAClC/D,uBAAuB,CAACgC,IAAI,CAAC,EAC7BhC,uBAAuB,CAACiC,IAAI,CAAC,EAC7BR,MAAM,EACN,MACF,CAAC;EAED,OAAOoB,MAAM;AACf","ignoreList":[]}

package/lib/typescript/hkdf.d.ts

@@ -17,6 +17,10 @@ export interface HkdfCallback {
 }
 export declare function hkdf(digest: string, key: KeyMaterial, salt: Salt, info: Info, keylen: number, callback: HkdfCallback): void;
 export declare function hkdfSync(digest: string, key: KeyMaterial, salt: Salt, info: Info, keylen: number): Buffer;
+export declare function hkdfExtractSync(digest: string, ikm: KeyMaterial, salt?: Salt): Buffer;
+export declare function hkdfExtract(digest: string, ikm: KeyMaterial, salt: Salt, callback: HkdfCallback): void;
+export declare function hkdfExpandSync(digest: string, prk: KeyMaterial, info: Info, keylen: number): Buffer;
+export declare function hkdfExpand(digest: string, prk: KeyMaterial, info: Info, keylen: number, callback: HkdfCallback): void;
 export declare function hkdfDeriveBits(algorithm: HkdfAlgorithm, baseKey: CryptoKey, length: number): ArrayBuffer;
 export {};
 //# sourceMappingURL=hkdf.d.ts.map

package/lib/typescript/hkdf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../../src/hkdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAIxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,KAAK,WAAW,GAAG,UAAU,CAAC;AAC9B,KAAK,IAAI,GAAG,UAAU,CAAC;AACvB,KAAK,IAAI,GAAG,UAAU,CAAC;AAEvB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAmED,wBAAgB,IAAI,CAClB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,YAAY,GACrB,IAAI,CA+BN;AAED,wBAAgB,QAAQ,CACtB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,GACb,MAAM,CAkBR;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,MAAM,GACb,WAAW,CA2Bb"}
+{"version":3,"file":"hkdf.d.ts","sourceRoot":"","sources":["../../src/hkdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAIxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,KAAK,WAAW,GAAG,UAAU,CAAC;AAC9B,KAAK,IAAI,GAAG,UAAU,CAAC;AACvB,KAAK,IAAI,GAAG,UAAU,CAAC;AAEvB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AA2ED,wBAAgB,IAAI,CAClB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,YAAY,GACrB,IAAI,CAgCN;AAED,wBAAgB,QAAQ,CACtB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,GACb,MAAM,CAmBR;AAID,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,GAAE,IAAwB,GAC7B,MAAM,CAgBR;AAID,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,YAAY,GACrB,IAAI,CAyBN;AAID,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,GACb,MAAM,CAuBR;AAGD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,YAAY,GACrB,IAAI,CAgCN;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,MAAM,GACb,WAAW,CA4Bb"}

package/lib/typescript/index.d.ts

@@ -139,6 +139,10 @@ declare const QuickCrypto: {
     pbkdf2DeriveBits(algorithm: utils.SubtleAlgorithm, baseKey: keys.CryptoKey, length: number): Promise<ArrayBuffer>;
     hkdf(digest: string, key: utils.BinaryLike, salt: utils.BinaryLike, info: utils.BinaryLike, keylen: number, callback: hkdf.HkdfCallback): void;
     hkdfSync(digest: string, key: utils.BinaryLike, salt: utils.BinaryLike, info: utils.BinaryLike, keylen: number): Buffer;
+    hkdfExtractSync(digest: string, ikm: utils.BinaryLike, salt?: utils.BinaryLike): Buffer;
+    hkdfExtract(digest: string, ikm: utils.BinaryLike, salt: utils.BinaryLike, callback: hkdf.HkdfCallback): void;
+    hkdfExpandSync(digest: string, prk: utils.BinaryLike, info: utils.BinaryLike, keylen: number): Buffer;
+    hkdfExpand(digest: string, prk: utils.BinaryLike, info: utils.BinaryLike, keylen: number, callback: hkdf.HkdfCallback): void;
     hkdfDeriveBits(algorithm: hkdf.HkdfAlgorithm, baseKey: keys.CryptoKey, length: number): ArrayBuffer;
     createHmac: typeof import("./hmac").createHmac;
     createHash: typeof import("./hash").createHash;

package/lib/typescript/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAGxD,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,mBAAmB,EAAE,CACvB,CAAC,EAAE,MAAM,EACT,gBAAgB,CAAC,EAAE,OAAO,KACvB,WAAW,CAAC;IAEjB,IAAI,qBAAqB,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;CAC1E;AAGD,OAAO,KAAK,YAAY,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC/B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,MAAM,CAAC;AAG3B,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAE/B,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAIjC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC;;;GAGG;AACH,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAmFqK,cAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BArF3L,yCAA+B,EAAC,YAAe;qBAiC5C,0BACN,EACE,2EAA2E;IAC3E,2BADoB;qBA8BlB,oCACS,EAAC,2BACA;;;;;;qIAkBkhE,CAAC;mKAA85B,CAAC;;;;;;;;;;;;;;+DApB97F,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAlDD,CAAD;gBAEC,CAAF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,OAAO,YAYnB,CAAC;AAYF,eAAe,WAAW,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACxE,cAAc,UAAU,CAAC;AACzB,cAAc,MAAM,CAAC;AACrB,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAGxD,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,mBAAmB,EAAE,CACvB,CAAC,EAAE,MAAM,EACT,gBAAgB,CAAC,EAAE,OAAO,KACvB,WAAW,CAAC;IAEjB,IAAI,qBAAqB,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;CAC1E;AAGD,OAAO,KAAK,YAAY,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC/B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,MAAM,CAAC;AAG3B,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAE/B,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAIjC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC;;;GAGG;AACH,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAmFqK,cAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BArF3L,yCAA+B,EAAC,YAAe;qBAiC5C,0BACN,EACE,2EAA2E;IAC3E,2BADoB;qBA8BlB,oCACS,EAAC,2BACA;;;;;;qIAkBkhE,CAAC;mKAA85B,CAAC;;;;;;;;;;;;;;+DApB97F,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAlDD,CAAD;gBAEC,CAAF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,OAAO,YAYnB,CAAC;AAYF,eAAe,WAAW,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACxE,cAAc,UAAU,CAAC;AACzB,cAAc,MAAM,CAAC;AACrB,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC"}

package/lib/typescript/specs/hkdf.nitro.d.ts

@@ -1,9 +1,10 @@
 import type { HybridObject } from 'react-native-nitro-modules';
+export type HkdfMode = 'full' | 'extract' | 'expand';
 export interface Hkdf extends HybridObject<{
     ios: 'c++';
     android: 'c++';
 }> {
-    deriveKeySync(algorithm: string, key: ArrayBuffer, salt: ArrayBuffer, info: ArrayBuffer, length: number): ArrayBuffer;
-    deriveKey(algorithm: string, key: ArrayBuffer, salt: ArrayBuffer, info: ArrayBuffer, length: number): Promise<ArrayBuffer>;
+    deriveKeySync(algorithm: string, key: ArrayBuffer, salt: ArrayBuffer, info: ArrayBuffer, length: number, mode: HkdfMode): ArrayBuffer;
+    deriveKey(algorithm: string, key: ArrayBuffer, salt: ArrayBuffer, info: ArrayBuffer, length: number, mode: HkdfMode): Promise<ArrayBuffer>;
 }
 //# sourceMappingURL=hkdf.nitro.d.ts.map

package/lib/typescript/specs/hkdf.nitro.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hkdf.nitro.d.ts","sourceRoot":"","sources":["../../../src/specs/hkdf.nitro.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,WAAW,IAAK,SAAQ,YAAY,CAAC;IAAE,GAAG,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,KAAK,CAAA;CAAE,CAAC;IACxE,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,GACb,WAAW,CAAC;IAEf,SAAS,CACP,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB"}
+{"version":3,"file":"hkdf.nitro.d.ts","sourceRoot":"","sources":["../../../src/specs/hkdf.nitro.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAI/D,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,IAAK,SAAQ,YAAY,CAAC;IAAE,GAAG,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,KAAK,CAAA;CAAE,CAAC;IACxE,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,GACb,WAAW,CAAC;IAEf,SAAS,CACP,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB"}

package/nitrogen/generated/shared/c++/HkdfMode.hpp

@@ -0,0 +1,80 @@
+///
+/// HkdfMode.hpp
+/// This file was generated by nitrogen. DO NOT MODIFY THIS FILE.
+/// https://github.com/mrousavy/nitro
+/// Copyright © Marc Rousavy @ Margelo
+///
+
+#pragma once
+
+#if __has_include(<NitroModules/NitroHash.hpp>)
+#include <NitroModules/NitroHash.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/JSIConverter.hpp>)
+#include <NitroModules/JSIConverter.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/NitroDefines.hpp>)
+#include <NitroModules/NitroDefines.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+
+namespace margelo::nitro::crypto {
+
+  /**
+   * An enum which can be represented as a JavaScript union (HkdfMode).
+   */
+  enum class HkdfMode {
+    FULL      SWIFT_NAME(full) = 0,
+    EXTRACT      SWIFT_NAME(extract) = 1,
+    EXPAND      SWIFT_NAME(expand) = 2,
+  } CLOSED_ENUM;
+
+} // namespace margelo::nitro::crypto
+
+namespace margelo::nitro {
+
+  // C++ HkdfMode <> JS HkdfMode (union)
+  template <>
+  struct JSIConverter<margelo::nitro::crypto::HkdfMode> final {
+    static inline margelo::nitro::crypto::HkdfMode fromJSI(jsi::Runtime& runtime, const jsi::Value& arg) {
+      std::string unionValue = JSIConverter<std::string>::fromJSI(runtime, arg);
+      switch (hashString(unionValue.c_str(), unionValue.size())) {
+        case hashString("full"): return margelo::nitro::crypto::HkdfMode::FULL;
+        case hashString("extract"): return margelo::nitro::crypto::HkdfMode::EXTRACT;
+        case hashString("expand"): return margelo::nitro::crypto::HkdfMode::EXPAND;
+        default: [[unlikely]]
+          throw std::invalid_argument("Cannot convert \"" + unionValue + "\" to enum HkdfMode - invalid value!");
+      }
+    }
+    static inline jsi::Value toJSI(jsi::Runtime& runtime, margelo::nitro::crypto::HkdfMode arg) {
+      switch (arg) {
+        case margelo::nitro::crypto::HkdfMode::FULL: return JSIConverter<std::string>::toJSI(runtime, "full");
+        case margelo::nitro::crypto::HkdfMode::EXTRACT: return JSIConverter<std::string>::toJSI(runtime, "extract");
+        case margelo::nitro::crypto::HkdfMode::EXPAND: return JSIConverter<std::string>::toJSI(runtime, "expand");
+        default: [[unlikely]]
+          throw std::invalid_argument("Cannot convert HkdfMode to JS - invalid value: "
+                                    + std::to_string(static_cast<int>(arg)) + "!");
+      }
+    }
+    static inline bool canConvert(jsi::Runtime& runtime, const jsi::Value& value) {
+      if (!value.isString()) {
+        return false;
+      }
+      std::string unionValue = JSIConverter<std::string>::fromJSI(runtime, value);
+      switch (hashString(unionValue.c_str(), unionValue.size())) {
+        case hashString("full"):
+        case hashString("extract"):
+        case hashString("expand"):
+          return true;
+        default:
+          return false;
+      }
+    }
+  };
+
+} // namespace margelo::nitro

package/nitrogen/generated/shared/c++/HybridHkdfSpec.hpp

@@ -13,10 +13,12 @@
 #error NitroModules cannot be found! Are you sure you installed NitroModules properly?
 #endif
 
-
+// Forward declaration of `HkdfMode` to properly resolve imports.
+namespace margelo::nitro::crypto { enum class HkdfMode; }
 
 #include <NitroModules/ArrayBuffer.hpp>
 #include <string>
+#include "HkdfMode.hpp"
 #include <NitroModules/Promise.hpp>
 
 namespace margelo::nitro::crypto {
@@ -50,8 +52,8 @@ namespace margelo::nitro::crypto {
 
     public:
       // Methods
-      virtual std::shared_ptr<ArrayBuffer> deriveKeySync(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key, const std::shared_ptr<ArrayBuffer>& salt, const std::shared_ptr<ArrayBuffer>& info, double length) = 0;
-      virtual std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> deriveKey(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key, const std::shared_ptr<ArrayBuffer>& salt, const std::shared_ptr<ArrayBuffer>& info, double length) = 0;
+      virtual std::shared_ptr<ArrayBuffer> deriveKeySync(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key, const std::shared_ptr<ArrayBuffer>& salt, const std::shared_ptr<ArrayBuffer>& info, double length, HkdfMode mode) = 0;
+      virtual std::shared_ptr<Promise<std::shared_ptr<ArrayBuffer>>> deriveKey(const std::string& algorithm, const std::shared_ptr<ArrayBuffer>& key, const std::shared_ptr<ArrayBuffer>& salt, const std::shared_ptr<ArrayBuffer>& info, double length, HkdfMode mode) = 0;
 
     protected:
       // Hybrid Setup

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-quick-crypto",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "description": "A fast implementation of Node's `crypto` module written in C/C++ JSI",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",

package/src/hkdf.ts

@@ -62,6 +62,14 @@ const HKDF_HASH_BYTES: Readonly<Record<string, number>> = {
   ripemd160: 20,
 };
 
+function hkdfHashLen(digest: string): number {
+  const hashLen = HKDF_HASH_BYTES[digest.toLowerCase()];
+  if (hashLen === undefined) {
+    throw new TypeError(`Unsupported HKDF digest: ${digest}`);
+  }
+  return hashLen;
+}
+
 function validateHkdfKeylen(digest: string, keylen: number): void {
   if (
     typeof keylen !== 'number' ||
@@ -111,6 +119,7 @@ export function hkdf(
         sanitizedSalt,
         sanitizedInfo,
         keylen,
+        'full',
       )
       .then(
         res => {
@@ -146,11 +155,143 @@ export function hkdfSync(
     sanitizedSalt,
     sanitizedInfo,
     keylen,
+    'full',
+  );
+
+  return Buffer.from(result);
+}
+
+// RFC 5869 §2.2 HKDF-Extract (sync): PRK = HMAC(salt, IKM). Salt defaults to
+// a string of HashLen zeros when omitted. Returns a PRK of HashLen bytes.
+export function hkdfExtractSync(
+  digest: string,
+  ikm: KeyMaterial,
+  salt: Salt = new Uint8Array(0),
+): Buffer {
+  const normalizedDigest = normalizeHashName(digest);
+  const hashLen = hkdfHashLen(normalizedDigest);
+  const sanitizedIkm = sanitizeInput(ikm, 'IKM');
+  const sanitizedSalt = sanitizeInput(salt, 'Salt');
+
+  const result = getNative().deriveKeySync(
+    normalizedDigest,
+    sanitizedIkm,
+    sanitizedSalt,
+    new ArrayBuffer(0),
+    hashLen,
+    'extract',
   );
 
   return Buffer.from(result);
 }
 
+// Async HKDF-Extract, mirroring `hkdf`. Unlike the sync form, `salt` is
+// required here because the callback occupies the trailing argument.
+export function hkdfExtract(
+  digest: string,
+  ikm: KeyMaterial,
+  salt: Salt,
+  callback: HkdfCallback,
+): void {
+  validateCallback(callback);
+
+  try {
+    const normalizedDigest = normalizeHashName(digest);
+    const hashLen = hkdfHashLen(normalizedDigest);
+    const sanitizedIkm = sanitizeInput(ikm, 'IKM');
+    const sanitizedSalt = sanitizeInput(salt, 'Salt');
+
+    getNative()
+      .deriveKey(
+        normalizedDigest,
+        sanitizedIkm,
+        sanitizedSalt,
+        new ArrayBuffer(0),
+        hashLen,
+        'extract',
+      )
+      .then(
+        res => callback(null, Buffer.from(res)),
+        err => callback(err),
+      );
+  } catch (err) {
+    callback(err as Error);
+  }
+}
+
+// RFC 5869 §2.3 HKDF-Expand (sync): OKM = expand(PRK, info, L). `prk` must be
+// at least HashLen bytes (a pseudorandom key, e.g. from hkdfExtract).
+export function hkdfExpandSync(
+  digest: string,
+  prk: KeyMaterial,
+  info: Info,
+  keylen: number,
+): Buffer {
+  const normalizedDigest = normalizeHashName(digest);
+  const hashLen = hkdfHashLen(normalizedDigest);
+  const sanitizedPrk = sanitizeInput(prk, 'PRK');
+  if (sanitizedPrk.byteLength < hashLen) {
+    throw new RangeError(
+      `HKDF-Expand PRK must be at least HashLen (${hashLen}) bytes for ${digest}`,
+    );
+  }
+  const sanitizedInfo = sanitizeInput(info, 'Info');
+
+  validateHkdfKeylen(normalizedDigest, keylen);
+
+  const result = getNative().deriveKeySync(
+    normalizedDigest,
+    sanitizedPrk,
+    new ArrayBuffer(0),
+    sanitizedInfo,
+    keylen,
+    'expand',
+  );
+
+  return Buffer.from(result);
+}
+
+// Async HKDF-Expand, mirroring `hkdf`.
+export function hkdfExpand(
+  digest: string,
+  prk: KeyMaterial,
+  info: Info,
+  keylen: number,
+  callback: HkdfCallback,
+): void {
+  validateCallback(callback);
+
+  try {
+    const normalizedDigest = normalizeHashName(digest);
+    const hashLen = hkdfHashLen(normalizedDigest);
+    const sanitizedPrk = sanitizeInput(prk, 'PRK');
+    if (sanitizedPrk.byteLength < hashLen) {
+      throw new RangeError(
+        `HKDF-Expand PRK must be at least HashLen (${hashLen}) bytes for ${digest}`,
+      );
+    }
+    const sanitizedInfo = sanitizeInput(info, 'Info');
+
+    validateHkdfKeylen(normalizedDigest, keylen);
+
+    getNative()
+      .deriveKey(
+        normalizedDigest,
+        sanitizedPrk,
+        new ArrayBuffer(0),
+        sanitizedInfo,
+        keylen,
+        'expand',
+      )
+      .then(
+        res => callback(null, Buffer.from(res)),
+        err => callback(err),
+      );
+  } catch (err) {
+    callback(err as Error);
+  }
+}
+
 export function hkdfDeriveBits(
   algorithm: HkdfAlgorithm,
   baseKey: CryptoKey,
@@ -179,6 +320,7 @@ export function hkdfDeriveBits(
     binaryLikeToArrayBuffer(salt),
     binaryLikeToArrayBuffer(info),
     keylen,
+    'full',
   );
 
   return result;

package/src/specs/hkdf.nitro.ts

@@ -1,5 +1,9 @@
 import type { HybridObject } from 'react-native-nitro-modules';
 
+// RFC 5869 stage: 'full' (extract+expand), 'extract' (PRK only), or
+// 'expand' (from an existing PRK).
+export type HkdfMode = 'full' | 'extract' | 'expand';
+
 export interface Hkdf extends HybridObject<{ ios: 'c++'; android: 'c++' }> {
   deriveKeySync(
     algorithm: string,
@@ -7,6 +11,7 @@ export interface Hkdf extends HybridObject<{ ios: 'c++'; android: 'c++' }> {
     salt: ArrayBuffer,
     info: ArrayBuffer,
     length: number,
+    mode: HkdfMode,
   ): ArrayBuffer;
 
   deriveKey(
@@ -15,5 +20,6 @@ export interface Hkdf extends HybridObject<{ ios: 'c++'; android: 'c++' }> {
     salt: ArrayBuffer,
     info: ArrayBuffer,
     length: number,
+    mode: HkdfMode,
   ): Promise<ArrayBuffer>;
 }