simple-hpke 0.0.11 → 0.1.0

package/dist/meta.json

@@ -691,7 +691,7 @@
       "format": "esm"
     },
     "src/index.ts": {
-      "bytes": 11805,
+      "bytes": 13195,
       "imports": [
         {
           "path": "node_modules/uint8arrays/dist/src/index.js",
@@ -717,7 +717,7 @@
       "format": "esm"
     },
     "src/util.ts": {
-      "bytes": 13984,
+      "bytes": 14284,
       "imports": [
         {
           "path": "node_modules/uint8arrays/dist/src/index.js",
@@ -759,7 +759,7 @@
       "imports": [],
       "exports": [],
       "inputs": {},
-      "bytes": 112099
+      "bytes": 114273
     },
     "dist/constants.js": {
       "imports": [],
@@ -865,26 +865,27 @@
           "bytesInOutput": 258
         },
         "src/index.ts": {
-          "bytesInOutput": 5466
+          "bytesInOutput": 5825
         },
         "src/util.ts": {
-          "bytesInOutput": 6624
+          "bytesInOutput": 6789
         },
         "src/constants.ts": {
           "bytesInOutput": 452
         }
       },
-      "bytes": 50973
+      "bytes": 51497
     },
     "dist/index.js.map": {
       "imports": [],
       "exports": [],
       "inputs": {},
-      "bytes": 112090
+      "bytes": 114264
     },
     "dist/index.js": {
       "imports": [],
       "exports": [
+        "create",
         "decrypt",
         "encrypt",
         "open",
@@ -980,19 +981,19 @@
           "bytesInOutput": 452
         },
         "src/util.ts": {
-          "bytesInOutput": 6611
+          "bytesInOutput": 6776
         },
         "src/index.ts": {
-          "bytesInOutput": 5471
+          "bytesInOutput": 5830
         }
       },
-      "bytes": 50833
+      "bytes": 51378
     },
     "dist/util.js.map": {
       "imports": [],
       "exports": [],
       "inputs": {},
-      "bytes": 112096
+      "bytes": 114270
     },
     "dist/util.js": {
       "imports": [],
@@ -1100,13 +1101,13 @@
           "bytesInOutput": 452
         },
         "src/index.ts": {
-          "bytesInOutput": 5466
+          "bytesInOutput": 5825
         },
         "src/util.ts": {
-          "bytesInOutput": 6624
+          "bytesInOutput": 6789
         }
       },
-      "bytes": 50981
+      "bytes": 51505
     }
   }
 }

package/dist/util.cjs

@@ -1339,51 +1339,19 @@ var HPKE_SUITE_ID = concat2(
 
 // src/index.ts
 var subtle = globalThis.crypto.subtle;
+async function create2(recipient, opts) {
+  const { wrapped, key } = await encryptKey(recipient, null, opts);
+  return { enc: wrapped, key };
+}
+__name(create2, "create");
 async function seal(recipient, aesKey, opts) {
-  const info = normalizeInfo(opts?.info);
-  let keyBytes;
-  if (aesKey instanceof Uint8Array) {
-    validateRawKeyBytes(aesKey);
-    keyBytes = aesKey;
-  } else if (aesKey) {
-    keyBytes = await exportAesKeyBytes(aesKey);
-    validateRawKeyBytes(keyBytes);
-  } else {
-    const keysize = opts?.keysize ?? 256;
-    validateKeysize(keysize);
-    keyBytes = globalThis.crypto.getRandomValues(
-      new Uint8Array(keysize / 8)
-    );
-  }
-  const publicKey = await resolveRecipientPublicKey(recipient);
-  const { sharedSecret, enc } = await encap(publicKey);
-  const { key, baseNonce } = await keySchedule(sharedSecret, info);
-  const ciphertext = await aeadSeal(key, baseNonce, keyBytes);
-  const wrapped = concat2(enc, ciphertext);
-  const aesGcmKey = await importAesKey(keyBytes);
-  return { wrapped, key: aesGcmKey };
+  const { wrapped, key } = await encryptKey(recipient, aesKey, opts);
+  return { enc: wrapped, key };
 }
 __name(seal, "seal");
 var open = Object.assign(openBytes, {
   raw: openRawBytes
 });
-async function openBytes(keypair, wrapped, opts) {
-  const keyBytes = await openRawBytes(keypair, wrapped, opts);
-  return importAesKey(keyBytes);
-}
-__name(openBytes, "openBytes");
-async function openRawBytes(keypair, wrapped, opts) {
-  if (wrapped.byteLength < ENC_LENGTH + AEAD_TAG_LENGTH) {
-    throw new Error("malformed envelope: too short");
-  }
-  const info = normalizeInfo(opts?.info);
-  const enc = wrapped.slice(0, ENC_LENGTH);
-  const ciphertext = wrapped.slice(ENC_LENGTH);
-  const sharedSecret = await decap(enc, keypair);
-  const { key, baseNonce } = await keySchedule(sharedSecret, info);
-  return aeadOpen(key, baseNonce, ciphertext);
-}
-__name(openRawBytes, "openRawBytes");
 var encrypt = Object.assign(encryptBytes, {
   asString: encryptToString
 });
@@ -1522,6 +1490,48 @@ async function keySchedule(sharedSecret, info) {
   return { key, baseNonce };
 }
 __name(keySchedule, "keySchedule");
+async function openRawBytes(keypair, wrapped, opts) {
+  if (wrapped.byteLength < ENC_LENGTH + AEAD_TAG_LENGTH) {
+    throw new Error("malformed envelope: too short");
+  }
+  const info = normalizeInfo(opts?.info);
+  const enc = wrapped.slice(0, ENC_LENGTH);
+  const ciphertext = wrapped.slice(ENC_LENGTH);
+  const sharedSecret = await decap(enc, keypair);
+  const { key, baseNonce } = await keySchedule(sharedSecret, info);
+  return aeadOpen(key, baseNonce, ciphertext);
+}
+__name(openRawBytes, "openRawBytes");
+async function openBytes(keypair, wrapped, opts) {
+  const keyBytes = await openRawBytes(keypair, wrapped, opts);
+  return importAesKey(keyBytes);
+}
+__name(openBytes, "openBytes");
+async function encryptKey(recipient, aesKey, opts) {
+  const info = normalizeInfo(opts?.info);
+  let keyBytes;
+  if (aesKey instanceof Uint8Array) {
+    validateRawKeyBytes(aesKey);
+    keyBytes = aesKey;
+  } else if (aesKey) {
+    keyBytes = await exportAesKeyBytes(aesKey);
+    validateRawKeyBytes(keyBytes);
+  } else {
+    const keysize = opts?.size ?? 256;
+    validateKeysize(keysize);
+    keyBytes = globalThis.crypto.getRandomValues(
+      new Uint8Array(keysize / 8)
+    );
+  }
+  const publicKey = await resolveRecipientPublicKey(recipient);
+  const { sharedSecret, enc } = await encap(publicKey);
+  const { key, baseNonce } = await keySchedule(sharedSecret, info);
+  const ciphertext = await aeadSeal(key, baseNonce, keyBytes);
+  const wrapped = concat2(enc, ciphertext);
+  const aesGcmKey = await importAesKey(keyBytes);
+  return { wrapped, key: aesGcmKey };
+}
+__name(encryptKey, "encryptKey");
 
 // src/util.ts
 var subtle2 = globalThis.crypto.subtle;
@@ -1559,14 +1569,24 @@ async function aeadOpen(key, nonce, ciphertext) {
 __name(aeadOpen, "aeadOpen");
 async function encryptBytes(recipient, message, aesKey, opts) {
   const plaintext = typeof message === "string" ? new TextEncoder().encode(message) : message;
-  const { wrapped, key } = await seal(recipient, aesKey, opts);
+  let enc;
+  let key;
+  if (!aesKey) {
+    const keys = await create2(recipient, opts);
+    enc = keys.enc;
+    key = keys.key;
+  } else {
+    const keys = await seal(recipient, aesKey, opts);
+    enc = keys.enc;
+    key = keys.key;
+  }
   const iv = globalThis.crypto.getRandomValues(new Uint8Array(NN));
   const ct = new Uint8Array(await subtle2.encrypt(
     { name: "AES-GCM", iv },
     key,
     plaintext
   ));
-  return concat2(i2osp(wrapped.length, WRAPPED_LEN_PREFIX), wrapped, iv, ct);
+  return concat2(i2osp(enc.length, WRAPPED_LEN_PREFIX), enc, iv, ct);
 }
 __name(encryptBytes, "encryptBytes");
 async function encryptToString(recipient, message, aesKey, opts) {