secure-comms-hybrid 1.0.3 → 1.0.4

package/lib/backend/HybridCrypto.js

@@ -2,7 +2,7 @@ const crypto = require('crypto');
 const {
   CRYPTO_CONFIG,
   ERRORS
-} = require('../shared/constants');
+} = require('./constants');
 class HybridCrypto {
   constructor(options = {}) {
     this.options = {

package/lib/backend/constants.js

@@ -0,0 +1,40 @@
+export const CRYPTO_CONFIG = {
+  RSA: {
+    MODULUS_LENGTH: 2048,
+    PUBLIC_KEY_ENCODING: {
+      type: 'spki',
+      format: 'pem'
+    },
+    PRIVATE_KEY_ENCODING: {
+      type: 'pkcs8',
+      format: 'pem'
+    },
+    PADDING: 'RSA_PKCS1_OAEP_PADDING',
+    HASH: 'SHA-256'
+  },
+  AES: {
+    ALGORITHM: 'AES-GCM',
+    KEY_LENGTH: 256,
+    IV_LENGTH: 12,
+    TAG_LENGTH: 128
+  },
+  SESSION: {
+    EXPIRY_MS: 5 * 60 * 1000,
+    // 5 minutes
+    CLEANUP_INTERVAL: 60 * 1000 // 1 minute
+  },
+  HEADERS: {
+    ENCRYPTED: 'X-Encrypted',
+    CLIENT_ID: 'X-Client-ID',
+    ENCRYPTION_ALGORITHM: 'X-Encryption-Algorithm',
+    SESSION_EXPIRY: 'X-Session-Expiry'
+  }
+};
+export const ERRORS = {
+  NOT_INITIALIZED: 'Encryption not initialized',
+  SESSION_EXPIRED: 'Session expired',
+  DECRYPTION_FAILED: 'Decryption failed',
+  ENCRYPTION_FAILED: 'Encryption failed',
+  INVALID_REQUEST: 'Invalid encrypted request',
+  MISSING_CLIENT_ID: 'Missing client ID'
+};

package/lib/backend/middleware.js

@@ -1,7 +1,7 @@
 const {
   CRYPTO_CONFIG,
   ERRORS
-} = require('../shared/constants');
+} = require('./constants');
 function createEncryptionMiddleware(hybridCrypto, options = {}) {
   const {
     excludedPaths = ['/health', '/'],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secure-comms-hybrid",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Hybrid encryption (RSA + AES) for secure client-server communications",
   "main": "lib/backend/index.js",
   "browser": "dist/frontend/index.js",