sm-crypto-wasm 0.1.2 → 0.3.0

package/dist/sm9/kem.js

@@ -0,0 +1,123 @@
+/**
+ * SM9 密钥封装（KEM，GM/T 0044.4）。
+ *
+ * 两种封装入口：
+ * - `kemEncrypt(ke, id, klen, r?)`：用加密主私钥派生 Ppub-e（既有已发布接口）。
+ * - `kemEncapsulateWithMasterPublic(pub, id, klen, r?)`：直接用加密主公钥
+ *   `[ke]P1`（发送方的典型形态；供 `hybrid.ts` 使用，不改变既有 `kemEncrypt`）。
+ *
+ * 解封装只有 `kemDecrypt(ke, id, encapsulation, klen)`：必须持有加密主私钥。
+ *
+ * spec/plan 对应：`docs/superpowers/plans/2026-10-16-sm2-sm9-hybrid-encryption.md`
+ * Task 4。
+ */
+import { DecryptionError, InvalidKeyError } from '../runtime/errors.js';
+import { getModule } from './core.js';
+import { masterPrivateBytes, masterPublicBytes, putBytes, randomRHex, readHex, requireLen, toBytes, } from './input.js';
+function requireKlen(klen) {
+    if (!Number.isInteger(klen) || klen <= 0)
+        throw new RangeError('sm9: klen 必须为正整数');
+}
+/**
+ * SM9 密钥封装（GM/T 0044.4）：用接收方 id 与其加密主公钥 [ke]P1 封装一个会话密钥。
+ *
+ * @param ke   32 字节加密主私钥 hex（用于派生主公钥 [ke]P1）
+ * @param id   接收方标识
+ * @param klen 会话密钥字节长度（默认 32）
+ * @param r    32 字节随机数 hex（可选；不传则由宿主 CSPRNG 提供）
+ * @returns    `{ key, encapsulation }`
+ */
+export function kemEncrypt(ke, id, klen = 32, r) {
+    const keB = masterPrivateBytes(ke, 'ke');
+    const idB = toBytes(id, 'id');
+    const rB = r !== undefined ? toBytes(r, 'r') : toBytes(randomRHex(), 'r');
+    requireLen(rB, 32, 'r');
+    requireKlen(klen);
+    const { exports } = getModule();
+    const keP = exports.alloc(32);
+    const idP = exports.alloc(idB.length);
+    const rP = exports.alloc(32);
+    const c1P = exports.alloc(65);
+    const kP = exports.alloc(klen);
+    try {
+        putBytes(keB, keP);
+        putBytes(idB, idP);
+        putBytes(rB, rP);
+        const rc = exports.sm9KemEncryptOut(keP, idP, idB.length, rP, klen, c1P, kP);
+        if (rc !== 1)
+            throw new Error('sm9: kemEncrypt 失败（K 全 0，需换随机数重试）');
+        return { key: readHex(kP, klen), encapsulation: readHex(c1P, 65) };
+    }
+    finally {
+        exports.freeAll();
+    }
+}
+/**
+ * 用加密主公钥封装的内部入口（`hybridEncrypt` 使用）。
+ *
+ * 与 `kemEncrypt` 的区别只在密钥参数：这里不需要 KGC 的加密主私钥。
+ *
+ * @param masterPublicKey 64 字节加密主公钥 `[ke]P1`（点字节 / SPKI 主公钥 PEM）。
+ * @param id 接收方标识。
+ * @param klen 会话密钥字节长度（默认 32）。
+ * @param r 32 字节随机数 hex（可选）。
+ */
+export function kemEncapsulateWithMasterPublic(masterPublicKey, id, klen = 32, r) {
+    const pub = masterPublicBytes(masterPublicKey, 'masterPublicKey');
+    if (pub.length !== 64) {
+        throw new InvalidKeyError(`sm9: masterPublicKey 必须是 64 字节加密主公钥，实际 ${pub.length}`);
+    }
+    const idB = toBytes(id, 'id');
+    const rB = r !== undefined ? toBytes(r, 'r') : toBytes(randomRHex(), 'r');
+    requireLen(rB, 32, 'r');
+    requireKlen(klen);
+    const { exports } = getModule();
+    const pubP = exports.alloc(64);
+    const idP = exports.alloc(idB.length);
+    const rP = exports.alloc(32);
+    const c1P = exports.alloc(65);
+    const kP = exports.alloc(klen);
+    try {
+        putBytes(pub, pubP);
+        putBytes(idB, idP);
+        putBytes(rB, rP);
+        const rc = exports.sm9KemEncryptPubOut(pubP, idP, idB.length, rP, klen, c1P, kP);
+        if (rc !== 1)
+            throw new Error('sm9: kemEncapsulate 失败（K 全 0，需换随机数重试）');
+        return { key: readHex(kP, klen), encapsulation: readHex(c1P, 65) };
+    }
+    finally {
+        exports.freeAll();
+    }
+}
+/**
+ * SM9 密钥解封装：用本端加密主私钥 ke 与 id 从封装点 C1 恢复会话密钥。
+ *
+ * @param encapsulation 65 字节封装点 C1 hex
+ * @returns 会话密钥 hex
+ */
+export function kemDecrypt(ke, id, encapsulation, klen = 32) {
+    const keB = masterPrivateBytes(ke, 'ke');
+    const idB = toBytes(id, 'id');
+    const c1B = toBytes(encapsulation, 'encapsulation');
+    if (c1B.length !== 65)
+        throw new RangeError(`sm9: encapsulation 必须是 65 字节，实际 ${c1B.length}`);
+    requireKlen(klen);
+    const { exports } = getModule();
+    const keP = exports.alloc(32);
+    const idP = exports.alloc(idB.length);
+    const c1P = exports.alloc(65);
+    const kP = exports.alloc(klen);
+    try {
+        putBytes(keB, keP);
+        putBytes(idB, idP);
+        putBytes(c1B, c1P);
+        const rc = exports.sm9KemDecryptOut(keP, idP, idB.length, c1P, klen, kP);
+        if (rc !== 1)
+            throw new DecryptionError('sm9: kemDecrypt 失败（封装非法 / K 全 0）');
+        return readHex(kP, klen);
+    }
+    finally {
+        exports.freeAll();
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sm-crypto-wasm",
-  "version": "0.1.2",
+  "version": "0.3.0",
   "description": "国密 SM2/SM3/SM4/SM9/ZUC 的 WASM 实现，Node 18+ 与现代浏览器均可使用，按算法分包懒加载。",
   "description:en": "SM2/SM3/SM4/SM9/ZUC (China crypto) implemented in AssemblyScript -> WASM. Node 18+ & modern browsers, per-algorithm lazy loading.",
   "license": "Apache-2.0",
@@ -92,6 +92,7 @@
     "format": "biome format --write src tests bench",
     "typecheck": "tsc --noEmit",
     "bench": "node --import tsx bench/run.ts",
+    "bench:cubelrti": "node --import tsx bench/compare-cubelrti.bench.ts",
     "docs:dev": "pnpm build && vitepress dev website",
     "docs:build": "pnpm build && vitepress build website",
     "docs:preview": "vitepress preview website",
@@ -106,6 +107,7 @@
     "happy-dom": "21.0.1",
     "mitata": "^1.0.34",
     "release-it": "^21.1.1",
+    "sm-crypto-v2": "1.15.1",
     "tsx": "^4.19.2",
     "typescript": "^7.0.2",
     "vitepress": "^1.6.4",