ts-mls 1.0.1

package/dist/src/groupSecrets.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeGroupSecrets = exports.encodeGroupSecrets = void 0;
+const optional_1 = require("./codec/optional");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const presharedkey_1 = require("./presharedkey");
+exports.encodeGroupSecrets = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, (0, optional_1.encodeOptional)(variableLength_1.encodeVarLenData), (0, variableLength_1.encodeVarLenType)(presharedkey_1.encodePskId)], (gs) => [gs.joinerSecret, gs.pathSecret, gs.psks]);
+exports.decodeGroupSecrets = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, (0, optional_1.decodeOptional)(variableLength_1.decodeVarLenData), (0, variableLength_1.decodeVarLenType)(presharedkey_1.decodePskId)], (joinerSecret, pathSecret, psks) => ({ joinerSecret, pathSecret, psks }));
+//# sourceMappingURL=groupSecrets.js.map

package/dist/src/groupSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupSecrets.js","sourceRoot":"","sources":["../../src/groupSecrets.ts"],"names":[],"mappings":";;;AAAA,+CAAiE;AACjE,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA+G;AAC/G,iDAAyE;AAQ5D,QAAA,kBAAkB,GAA0B,IAAA,8BAAiB,EACxE,CAAC,iCAAgB,EAAE,IAAA,yBAAc,EAAC,iCAAgB,CAAC,EAAE,IAAA,iCAAgB,EAAC,0BAAW,CAAC,CAAC,EACnF,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAU,CAC3D,CAAA;AAEY,QAAA,kBAAkB,GAA0B,IAAA,wBAAW,EAClE,CAAC,iCAAgB,EAAE,IAAA,yBAAc,EAAC,iCAAgB,CAAC,EAAE,IAAA,iCAAgB,EAAC,0BAAW,CAAC,CAAC,EACnF,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CACzE,CAAA"}

package/dist/src/hpkeCiphertext.d.ts

@@ -0,0 +1,8 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+export type HPKECiphertext = {
+    kemOutput: Uint8Array;
+    ciphertext: Uint8Array;
+};
+export declare const encodeHpkeCiphertext: Encoder<HPKECiphertext>;
+export declare const decodeHpkeCiphertext: Decoder<HPKECiphertext>;

package/dist/src/hpkeCiphertext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpkeCiphertext.d.ts","sourceRoot":"","sources":["../../src/hpkeCiphertext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAA;AAG/D,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,UAAU,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;CACvB,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAGxD,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAGxD,CAAA"}

package/dist/src/hpkeCiphertext.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeHpkeCiphertext = exports.encodeHpkeCiphertext = void 0;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+exports.encodeHpkeCiphertext = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, variableLength_1.encodeVarLenData], (egs) => [egs.kemOutput, egs.ciphertext]);
+exports.decodeHpkeCiphertext = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, variableLength_1.decodeVarLenData], (kemOutput, ciphertext) => ({ kemOutput, ciphertext }));
+//# sourceMappingURL=hpkeCiphertext.js.map

package/dist/src/hpkeCiphertext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpkeCiphertext.js","sourceRoot":"","sources":["../../src/hpkeCiphertext.ts"],"names":[],"mappings":";;;AAAA,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA2E;AAO9D,QAAA,oBAAoB,GAA4B,IAAA,8BAAiB,EAC5E,CAAC,iCAAgB,EAAE,iCAAgB,CAAC,EACpC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAU,CAClD,CAAA;AAEY,QAAA,oBAAoB,GAA4B,IAAA,wBAAW,EACtE,CAAC,iCAAgB,EAAE,iCAAgB,CAAC,EACpC,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CACvD,CAAA"}

package/dist/src/index.d.ts

@@ -0,0 +1,32 @@
+export { type Extension, type ExtensionType } from "./extension";
+export { defaultProposalTypes, type DefaultProposalTypeName } from "./defaultProposalType";
+export { defaultExtensionTypes, type DefaultExtensionTypeName } from "./defaultExtensionType";
+export { type PrivateKeyPath } from "./privateKeyPath";
+export { type RatchetTree } from "./ratchetTree";
+export { acceptAll, type IncomingMessageCallback, type IncomingMessageAction } from "./IncomingMessageAction";
+export { proposeAddExternal, proposeExternal } from "./externalProposal";
+export { type GroupContext } from "./groupContext";
+export { decodeExternalSender, encodeExternalSender, type ExternalSender } from "./externalSender";
+export { decodeRequiredCapabilities, encodeRequiredCapabilities, type RequiredCapabilities, } from "./requiredCapabilities";
+export { type AuthenticationService, defaultAuthenticationService } from "./authenticationService";
+export { type PaddingConfig, defaultPaddingConfig } from "./paddingConfig";
+export { defaultKeyPackageEqualityConfig, type KeyPackageEqualityConfig } from "./keyPackageEqualityConfig";
+export { type LifetimeConfig, defaultLifetimeConfig } from "./lifetimeConfig";
+export { type PrivateKeyPackage, type KeyPackage, generateKeyPackage } from "./keyPackage";
+export { type KeyRetentionConfig, defaultKeyRetentionConfig } from "./keyRetentionConfig";
+export { createGroup, makePskIndex, joinGroup, type ClientState, type GroupActiveState, type EpochReceiverData, } from "./clientState";
+export { createApplicationMessage, createProposal } from "./createMessage";
+export { joinGroupExternal, createCommit, createGroupInfoWithExternalPub, createGroupInfoWithExternalPubAndRatchetTree, type CreateCommitResult, } from "./createCommit";
+export { processPrivateMessage, processMessage, processPublicMessage, type ProcessMessageResult, } from "./processMessages";
+export { type PskIndex, emptyPskIndex } from "./pskIndex";
+export { joinGroupFromReinit, reinitCreateNewGroup, reinitGroup, joinGroupFromBranch, branchGroup } from "./resumption";
+export { type Credential } from "./credential";
+export { type Proposal } from "./proposal";
+export { type ClientConfig } from "./clientConfig";
+export { type Welcome } from "./welcome";
+export { type CiphersuiteName, type CiphersuiteImpl, ciphersuites, getCiphersuiteFromName, getCiphersuiteImpl, } from "./crypto/ciphersuite";
+export { bytesToBase64 } from "./util/byteArray";
+export { decodeMlsMessage, encodeMlsMessage } from "./message";
+export { type Lifetime, defaultLifetime } from "./lifetime";
+export { type Capabilities } from "./capabilities";
+export { defaultCapabilities } from "./defaultCapabilities";

package/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAEpE,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAE1E,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,8BAA8B,EAC9B,4CAA4C,GAC7C,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE/E,OAAO,EAAE,KAAK,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEzD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAEvH,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAA;AAE9C,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE1C,OAAO,EAAE,KAAK,eAAe,EAAE,YAAY,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAErH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,KAAK,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/src/index.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultCapabilities = exports.defaultLifetime = exports.encodeMlsMessage = exports.decodeMlsMessage = exports.bytesToBase64 = exports.getCiphersuiteImpl = exports.getCiphersuiteFromName = exports.ciphersuites = exports.branchGroup = exports.joinGroupFromBranch = exports.reinitGroup = exports.reinitCreateNewGroup = exports.joinGroupFromReinit = exports.emptyPskIndex = exports.processPublicMessage = exports.processMessage = exports.processPrivateMessage = exports.createGroupInfoWithExternalPubAndRatchetTree = exports.createGroupInfoWithExternalPub = exports.createCommit = exports.joinGroupExternal = exports.createProposal = exports.createApplicationMessage = exports.joinGroup = exports.makePskIndex = exports.createGroup = exports.defaultKeyRetentionConfig = exports.generateKeyPackage = exports.defaultLifetimeConfig = exports.defaultKeyPackageEqualityConfig = exports.defaultPaddingConfig = exports.defaultAuthenticationService = exports.encodeRequiredCapabilities = exports.decodeRequiredCapabilities = exports.encodeExternalSender = exports.decodeExternalSender = exports.proposeExternal = exports.proposeAddExternal = exports.acceptAll = exports.defaultExtensionTypes = exports.defaultProposalTypes = void 0;
+var defaultProposalType_1 = require("./defaultProposalType");
+Object.defineProperty(exports, "defaultProposalTypes", { enumerable: true, get: function () { return defaultProposalType_1.defaultProposalTypes; } });
+var defaultExtensionType_1 = require("./defaultExtensionType");
+Object.defineProperty(exports, "defaultExtensionTypes", { enumerable: true, get: function () { return defaultExtensionType_1.defaultExtensionTypes; } });
+var IncomingMessageAction_1 = require("./IncomingMessageAction");
+Object.defineProperty(exports, "acceptAll", { enumerable: true, get: function () { return IncomingMessageAction_1.acceptAll; } });
+var externalProposal_1 = require("./externalProposal");
+Object.defineProperty(exports, "proposeAddExternal", { enumerable: true, get: function () { return externalProposal_1.proposeAddExternal; } });
+Object.defineProperty(exports, "proposeExternal", { enumerable: true, get: function () { return externalProposal_1.proposeExternal; } });
+var externalSender_1 = require("./externalSender");
+Object.defineProperty(exports, "decodeExternalSender", { enumerable: true, get: function () { return externalSender_1.decodeExternalSender; } });
+Object.defineProperty(exports, "encodeExternalSender", { enumerable: true, get: function () { return externalSender_1.encodeExternalSender; } });
+var requiredCapabilities_1 = require("./requiredCapabilities");
+Object.defineProperty(exports, "decodeRequiredCapabilities", { enumerable: true, get: function () { return requiredCapabilities_1.decodeRequiredCapabilities; } });
+Object.defineProperty(exports, "encodeRequiredCapabilities", { enumerable: true, get: function () { return requiredCapabilities_1.encodeRequiredCapabilities; } });
+var authenticationService_1 = require("./authenticationService");
+Object.defineProperty(exports, "defaultAuthenticationService", { enumerable: true, get: function () { return authenticationService_1.defaultAuthenticationService; } });
+var paddingConfig_1 = require("./paddingConfig");
+Object.defineProperty(exports, "defaultPaddingConfig", { enumerable: true, get: function () { return paddingConfig_1.defaultPaddingConfig; } });
+var keyPackageEqualityConfig_1 = require("./keyPackageEqualityConfig");
+Object.defineProperty(exports, "defaultKeyPackageEqualityConfig", { enumerable: true, get: function () { return keyPackageEqualityConfig_1.defaultKeyPackageEqualityConfig; } });
+var lifetimeConfig_1 = require("./lifetimeConfig");
+Object.defineProperty(exports, "defaultLifetimeConfig", { enumerable: true, get: function () { return lifetimeConfig_1.defaultLifetimeConfig; } });
+var keyPackage_1 = require("./keyPackage");
+Object.defineProperty(exports, "generateKeyPackage", { enumerable: true, get: function () { return keyPackage_1.generateKeyPackage; } });
+var keyRetentionConfig_1 = require("./keyRetentionConfig");
+Object.defineProperty(exports, "defaultKeyRetentionConfig", { enumerable: true, get: function () { return keyRetentionConfig_1.defaultKeyRetentionConfig; } });
+var clientState_1 = require("./clientState");
+Object.defineProperty(exports, "createGroup", { enumerable: true, get: function () { return clientState_1.createGroup; } });
+Object.defineProperty(exports, "makePskIndex", { enumerable: true, get: function () { return clientState_1.makePskIndex; } });
+Object.defineProperty(exports, "joinGroup", { enumerable: true, get: function () { return clientState_1.joinGroup; } });
+var createMessage_1 = require("./createMessage");
+Object.defineProperty(exports, "createApplicationMessage", { enumerable: true, get: function () { return createMessage_1.createApplicationMessage; } });
+Object.defineProperty(exports, "createProposal", { enumerable: true, get: function () { return createMessage_1.createProposal; } });
+var createCommit_1 = require("./createCommit");
+Object.defineProperty(exports, "joinGroupExternal", { enumerable: true, get: function () { return createCommit_1.joinGroupExternal; } });
+Object.defineProperty(exports, "createCommit", { enumerable: true, get: function () { return createCommit_1.createCommit; } });
+Object.defineProperty(exports, "createGroupInfoWithExternalPub", { enumerable: true, get: function () { return createCommit_1.createGroupInfoWithExternalPub; } });
+Object.defineProperty(exports, "createGroupInfoWithExternalPubAndRatchetTree", { enumerable: true, get: function () { return createCommit_1.createGroupInfoWithExternalPubAndRatchetTree; } });
+var processMessages_1 = require("./processMessages");
+Object.defineProperty(exports, "processPrivateMessage", { enumerable: true, get: function () { return processMessages_1.processPrivateMessage; } });
+Object.defineProperty(exports, "processMessage", { enumerable: true, get: function () { return processMessages_1.processMessage; } });
+Object.defineProperty(exports, "processPublicMessage", { enumerable: true, get: function () { return processMessages_1.processPublicMessage; } });
+var pskIndex_1 = require("./pskIndex");
+Object.defineProperty(exports, "emptyPskIndex", { enumerable: true, get: function () { return pskIndex_1.emptyPskIndex; } });
+var resumption_1 = require("./resumption");
+Object.defineProperty(exports, "joinGroupFromReinit", { enumerable: true, get: function () { return resumption_1.joinGroupFromReinit; } });
+Object.defineProperty(exports, "reinitCreateNewGroup", { enumerable: true, get: function () { return resumption_1.reinitCreateNewGroup; } });
+Object.defineProperty(exports, "reinitGroup", { enumerable: true, get: function () { return resumption_1.reinitGroup; } });
+Object.defineProperty(exports, "joinGroupFromBranch", { enumerable: true, get: function () { return resumption_1.joinGroupFromBranch; } });
+Object.defineProperty(exports, "branchGroup", { enumerable: true, get: function () { return resumption_1.branchGroup; } });
+var ciphersuite_1 = require("./crypto/ciphersuite");
+Object.defineProperty(exports, "ciphersuites", { enumerable: true, get: function () { return ciphersuite_1.ciphersuites; } });
+Object.defineProperty(exports, "getCiphersuiteFromName", { enumerable: true, get: function () { return ciphersuite_1.getCiphersuiteFromName; } });
+Object.defineProperty(exports, "getCiphersuiteImpl", { enumerable: true, get: function () { return ciphersuite_1.getCiphersuiteImpl; } });
+var byteArray_1 = require("./util/byteArray");
+Object.defineProperty(exports, "bytesToBase64", { enumerable: true, get: function () { return byteArray_1.bytesToBase64; } });
+var message_1 = require("./message");
+Object.defineProperty(exports, "decodeMlsMessage", { enumerable: true, get: function () { return message_1.decodeMlsMessage; } });
+Object.defineProperty(exports, "encodeMlsMessage", { enumerable: true, get: function () { return message_1.encodeMlsMessage; } });
+var lifetime_1 = require("./lifetime");
+Object.defineProperty(exports, "defaultLifetime", { enumerable: true, get: function () { return lifetime_1.defaultLifetime; } });
+var defaultCapabilities_1 = require("./defaultCapabilities");
+Object.defineProperty(exports, "defaultCapabilities", { enumerable: true, get: function () { return defaultCapabilities_1.defaultCapabilities; } });
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAEA,6DAA0F;AAAjF,2HAAA,oBAAoB,OAAA;AAE7B,+DAA6F;AAApF,6HAAA,qBAAqB,OAAA;AAM9B,iEAA6G;AAApG,kHAAA,SAAS,OAAA;AAElB,uDAAwE;AAA/D,sHAAA,kBAAkB,OAAA;AAAE,mHAAA,eAAe,OAAA;AAI5C,mDAAkG;AAAzF,sHAAA,oBAAoB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAEnD,+DAI+B;AAH7B,kIAAA,0BAA0B,OAAA;AAC1B,kIAAA,0BAA0B,OAAA;AAI5B,iEAAkG;AAA7D,qIAAA,4BAA4B,OAAA;AAEjE,iDAA0E;AAA7C,qHAAA,oBAAoB,OAAA;AAEjD,uEAA2G;AAAlG,2IAAA,+BAA+B,OAAA;AAExC,mDAA6E;AAA/C,uHAAA,qBAAqB,OAAA;AAEnD,2CAA0F;AAAxC,gHAAA,kBAAkB,OAAA;AACpE,2DAAyF;AAAvD,+HAAA,yBAAyB,OAAA;AAE3D,6CAOsB;AANpB,0GAAA,WAAW,OAAA;AACX,2GAAA,YAAY,OAAA;AACZ,wGAAA,SAAS,OAAA;AAMX,iDAA0E;AAAjE,yHAAA,wBAAwB,OAAA;AAAE,+GAAA,cAAc,OAAA;AAEjD,+CAMuB;AALrB,iHAAA,iBAAiB,OAAA;AACjB,4GAAA,YAAY,OAAA;AACZ,8HAAA,8BAA8B,OAAA;AAC9B,4IAAA,4CAA4C,OAAA;AAI9C,qDAK0B;AAJxB,wHAAA,qBAAqB,OAAA;AACrB,iHAAA,cAAc,OAAA;AACd,uHAAA,oBAAoB,OAAA;AAItB,uCAAyD;AAAjC,yGAAA,aAAa,OAAA;AAErC,2CAAuH;AAA9G,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAAE,yGAAA,WAAW,OAAA;AAAE,iHAAA,mBAAmB,OAAA;AAAE,yGAAA,WAAW,OAAA;AAUjG,oDAM6B;AAH3B,2GAAA,YAAY,OAAA;AACZ,qHAAA,sBAAsB,OAAA;AACtB,iHAAA,kBAAkB,OAAA;AAGpB,8CAAgD;AAAvC,0GAAA,aAAa,OAAA;AAEtB,qCAA8D;AAArD,2GAAA,gBAAgB,OAAA;AAAE,2GAAA,gBAAgB,OAAA;AAC3C,uCAA2D;AAAnC,2GAAA,eAAe,OAAA;AAEvC,6DAA2D;AAAlD,0HAAA,mBAAmB,OAAA"}

package/dist/src/keyPackage.d.ts

@@ -0,0 +1,38 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { CiphersuiteImpl, CiphersuiteName } from "./crypto/ciphersuite";
+import { Hash } from "./crypto/hash";
+import { Signature } from "./crypto/signature";
+import { Extension } from "./extension";
+import { ProtocolVersionName } from "./protocolVersion";
+import { LeafNodeKeyPackage } from "./leafNode";
+import { Capabilities } from "./capabilities";
+import { Lifetime } from "./lifetime";
+import { Credential } from "./credential";
+type KeyPackageTBS = {
+    version: ProtocolVersionName;
+    cipherSuite: CiphersuiteName;
+    initKey: Uint8Array;
+    leafNode: LeafNodeKeyPackage;
+    extensions: Extension[];
+};
+export declare const encodeKeyPackageTBS: Encoder<KeyPackageTBS>;
+export declare const decodeKeyPackageTBS: Decoder<KeyPackageTBS>;
+export type KeyPackage = KeyPackageTBS & {
+    signature: Uint8Array;
+};
+export declare const encodeKeyPackage: Encoder<KeyPackage>;
+export declare const decodeKeyPackage: Decoder<KeyPackage>;
+export declare function signKeyPackage(tbs: KeyPackageTBS, signKey: Uint8Array, s: Signature): Promise<KeyPackage>;
+export declare function verifyKeyPackage(kp: KeyPackage, s: Signature): Promise<boolean>;
+export declare function makeKeyPackageRef(value: KeyPackage, h: Hash): Promise<Uint8Array<ArrayBufferLike>>;
+export type PrivateKeyPackage = {
+    initPrivateKey: Uint8Array;
+    hpkePrivateKey: Uint8Array;
+    signaturePrivateKey: Uint8Array;
+};
+export declare function generateKeyPackage(credential: Credential, capabilities: Capabilities, lifetime: Lifetime, extensions: Extension[], cs: CiphersuiteImpl): Promise<{
+    publicPackage: KeyPackage;
+    privatePackage: PrivateKeyPackage;
+}>;
+export {};

package/dist/src/keyPackage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyPackage.d.ts","sourceRoot":"","sources":["../../src/keyPackage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAwC,MAAM,sBAAsB,CAAA;AAC7G,OAAO,EAAE,IAAI,EAAW,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAkC,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAoC,SAAS,EAAE,MAAM,aAAa,CAAA;AACzE,OAAO,EAAgD,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACrG,OAAO,EAGL,kBAAkB,EAGnB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC,KAAK,aAAa,GAAG;IACnB,OAAO,EAAE,mBAAmB,CAAA;IAC5B,WAAW,EAAE,eAAe,CAAA;IAC5B,OAAO,EAAE,UAAU,CAAA;IACnB,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,UAAU,EAAE,SAAS,EAAE,CAAA;CACxB,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAUtD,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAetD,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG;IAAE,SAAS,EAAE,UAAU,CAAA;CAAE,CAAA;AAElE,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAGhD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAMhD,CAAA;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAE/G;AAED,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAErF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,wCAE3D;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,UAAU,CAAA;IAC1B,cAAc,EAAE,UAAU,CAAA;IAC1B,mBAAmB,EAAE,UAAU,CAAA;CAChC,CAAA;AAED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,SAAS,EAAE,EACvB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC;IAAE,aAAa,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,iBAAiB,CAAA;CAAE,CAAC,CA+B3E"}

package/dist/src/keyPackage.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeKeyPackage = exports.encodeKeyPackage = exports.decodeKeyPackageTBS = exports.encodeKeyPackageTBS = void 0;
+exports.signKeyPackage = signKeyPackage;
+exports.verifyKeyPackage = verifyKeyPackage;
+exports.makeKeyPackageRef = makeKeyPackageRef;
+exports.generateKeyPackage = generateKeyPackage;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const ciphersuite_1 = require("./crypto/ciphersuite");
+const hash_1 = require("./crypto/hash");
+const signature_1 = require("./crypto/signature");
+const extension_1 = require("./extension");
+const protocolVersion_1 = require("./protocolVersion");
+const leafNode_1 = require("./leafNode");
+exports.encodeKeyPackageTBS = (0, tlsEncoder_1.contramapEncoders)([protocolVersion_1.encodeProtocolVersion, ciphersuite_1.encodeCiphersuite, variableLength_1.encodeVarLenData, leafNode_1.encodeLeafNode, (0, variableLength_1.encodeVarLenType)(extension_1.encodeExtension)], (keyPackageTBS) => [
+    keyPackageTBS.version,
+    keyPackageTBS.cipherSuite,
+    keyPackageTBS.initKey,
+    keyPackageTBS.leafNode,
+    keyPackageTBS.extensions,
+]);
+exports.decodeKeyPackageTBS = (0, tlsDecoder_1.mapDecoders)([
+    protocolVersion_1.decodeProtocolVersion,
+    ciphersuite_1.decodeCiphersuite,
+    variableLength_1.decodeVarLenData,
+    leafNode_1.decodeLeafNodeKeyPackage,
+    (0, variableLength_1.decodeVarLenType)(extension_1.decodeExtension),
+], (version, cipherSuite, initKey, leafNode, extensions) => ({
+    version,
+    cipherSuite,
+    initKey,
+    leafNode,
+    extensions,
+}));
+exports.encodeKeyPackage = (0, tlsEncoder_1.contramapEncoders)([exports.encodeKeyPackageTBS, variableLength_1.encodeVarLenData], (keyPackage) => [keyPackage, keyPackage.signature]);
+exports.decodeKeyPackage = (0, tlsDecoder_1.mapDecoders)([exports.decodeKeyPackageTBS, variableLength_1.decodeVarLenData], (keyPackageTBS, signature) => ({
+    ...keyPackageTBS,
+    signature,
+}));
+async function signKeyPackage(tbs, signKey, s) {
+    return { ...tbs, signature: await (0, signature_1.signWithLabel)(signKey, "KeyPackageTBS", (0, exports.encodeKeyPackageTBS)(tbs), s) };
+}
+async function verifyKeyPackage(kp, s) {
+    return (0, signature_1.verifyWithLabel)(kp.leafNode.signaturePublicKey, "KeyPackageTBS", (0, exports.encodeKeyPackageTBS)(kp), kp.signature, s);
+}
+function makeKeyPackageRef(value, h) {
+    return (0, hash_1.refhash)("MLS 1.0 KeyPackage Reference", (0, exports.encodeKeyPackage)(value), h);
+}
+async function generateKeyPackage(credential, capabilities, lifetime, extensions, cs) {
+    const sigKeys = await cs.signature.keygen();
+    const initKeys = await cs.hpke.generateKeyPair();
+    const hpkeKeys = await cs.hpke.generateKeyPair();
+    const privatePackage = {
+        initPrivateKey: await cs.hpke.exportPrivateKey(initKeys.privateKey),
+        hpkePrivateKey: await cs.hpke.exportPrivateKey(hpkeKeys.privateKey),
+        signaturePrivateKey: sigKeys.signKey,
+    };
+    const leafNodeTbs = {
+        leafNodeSource: "key_package",
+        hpkePublicKey: await cs.hpke.exportPublicKey(hpkeKeys.publicKey),
+        signaturePublicKey: sigKeys.publicKey,
+        info: { leafNodeSource: "key_package" },
+        extensions,
+        credential,
+        capabilities,
+        lifetime,
+    };
+    const tbs = {
+        version: "mls10",
+        cipherSuite: cs.name,
+        initKey: await cs.hpke.exportPublicKey(initKeys.publicKey),
+        leafNode: await (0, leafNode_1.signLeafNodeKeyPackage)(leafNodeTbs, sigKeys.signKey, cs.signature),
+        extensions,
+    };
+    return { publicPackage: await signKeyPackage(tbs, sigKeys.signKey, cs.signature), privatePackage };
+}
+//# sourceMappingURL=keyPackage.js.map

package/dist/src/keyPackage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyPackage.js","sourceRoot":"","sources":["../../src/keyPackage.ts"],"names":[],"mappings":";;;AAuEA,wCAEC;AAED,4CAEC;AAED,8CAEC;AAQD,gDAqCC;AA9HD,mDAAyD;AACzD,mDAA+D;AAC/D,2DAA+G;AAC/G,sDAA6G;AAC7G,wCAA6C;AAC7C,kDAA8E;AAC9E,2CAAyE;AACzE,uDAAqG;AACrG,yCAMmB;AAaN,QAAA,mBAAmB,GAA2B,IAAA,8BAAiB,EAC1E,CAAC,uCAAqB,EAAE,+BAAiB,EAAE,iCAAgB,EAAE,yBAAc,EAAE,IAAA,iCAAgB,EAAC,2BAAe,CAAC,CAAC,EAC/G,CAAC,aAAa,EAAE,EAAE,CAChB;IACE,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,WAAW;IACzB,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,QAAQ;IACtB,aAAa,CAAC,UAAU;CAChB,CACb,CAAA;AAEY,QAAA,mBAAmB,GAA2B,IAAA,wBAAW,EACpE;IACE,uCAAqB;IACrB,+BAAiB;IACjB,iCAAgB;IAChB,mCAAwB;IACxB,IAAA,iCAAgB,EAAC,2BAAe,CAAC;CAClC,EACD,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO;IACP,WAAW;IACX,OAAO;IACP,QAAQ;IACR,UAAU;CACX,CAAC,CACH,CAAA;AAIY,QAAA,gBAAgB,GAAwB,IAAA,8BAAiB,EACpE,CAAC,2BAAmB,EAAE,iCAAgB,CAAC,EACvC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAU,CAC5D,CAAA;AAEY,QAAA,gBAAgB,GAAwB,IAAA,wBAAW,EAC9D,CAAC,2BAAmB,EAAE,iCAAgB,CAAC,EACvC,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7B,GAAG,aAAa;IAChB,SAAS;CACV,CAAC,CACH,CAAA;AAEM,KAAK,UAAU,cAAc,CAAC,GAAkB,EAAE,OAAmB,EAAE,CAAY;IACxF,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,MAAM,IAAA,yBAAa,EAAC,OAAO,EAAE,eAAe,EAAE,IAAA,2BAAmB,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAC1G,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,EAAc,EAAE,CAAY;IACjE,OAAO,IAAA,2BAAe,EAAC,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,eAAe,EAAE,IAAA,2BAAmB,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;AACnH,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAiB,EAAE,CAAO;IAC1D,OAAO,IAAA,cAAO,EAAC,8BAA8B,EAAE,IAAA,wBAAgB,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;AAC5E,CAAC;AAQM,KAAK,UAAU,kBAAkB,CACtC,UAAsB,EACtB,YAA0B,EAC1B,QAAkB,EAClB,UAAuB,EACvB,EAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAA;IAEhD,MAAM,cAAc,GAAG;QACrB,cAAc,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnE,cAAc,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnE,mBAAmB,EAAE,OAAO,CAAC,OAAO;KACrC,CAAA;IAED,MAAM,WAAW,GAA0B;QACzC,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChE,kBAAkB,EAAE,OAAO,CAAC,SAAS;QACrC,IAAI,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE;QACvC,UAAU;QACV,UAAU;QACV,YAAY;QACZ,QAAQ;KACT,CAAA;IAED,MAAM,GAAG,GAAkB;QACzB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,EAAE,CAAC,IAAI;QACpB,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC1D,QAAQ,EAAE,MAAM,IAAA,iCAAsB,EAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC;QAClF,UAAU;KACX,CAAA;IAED,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAA;AACpG,CAAC"}

package/dist/src/keyPackageEqualityConfig.d.ts

@@ -0,0 +1,7 @@
+import { KeyPackage } from "./keyPackage";
+import { LeafNode } from "./leafNode";
+export type KeyPackageEqualityConfig = {
+    compareKeyPackages(a: KeyPackage, b: KeyPackage): boolean;
+    compareKeyPackageToLeafNode(a: KeyPackage, b: LeafNode): boolean;
+};
+export declare const defaultKeyPackageEqualityConfig: KeyPackageEqualityConfig;

package/dist/src/keyPackageEqualityConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyPackageEqualityConfig.d.ts","sourceRoot":"","sources":["../../src/keyPackageEqualityConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAGrC,MAAM,MAAM,wBAAwB,GAAG;IACrC,kBAAkB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAA;IACzD,2BAA2B,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAA;CACjE,CAAA;AAED,eAAO,MAAM,+BAA+B,EAAE,wBAO7C,CAAA"}

package/dist/src/keyPackageEqualityConfig.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultKeyPackageEqualityConfig = void 0;
+const constantTimeCompare_1 = require("./util/constantTimeCompare");
+exports.defaultKeyPackageEqualityConfig = {
+    compareKeyPackages(a, b) {
+        return (0, constantTimeCompare_1.constantTimeEqual)(a.leafNode.signaturePublicKey, b.leafNode.signaturePublicKey);
+    },
+    compareKeyPackageToLeafNode(a, b) {
+        return (0, constantTimeCompare_1.constantTimeEqual)(a.leafNode.signaturePublicKey, b.signaturePublicKey);
+    },
+};
+//# sourceMappingURL=keyPackageEqualityConfig.js.map

package/dist/src/keyPackageEqualityConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyPackageEqualityConfig.js","sourceRoot":"","sources":["../../src/keyPackageEqualityConfig.ts"],"names":[],"mappings":";;;AAEA,oEAA8D;AAOjD,QAAA,+BAA+B,GAA6B;IACvE,kBAAkB,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,IAAA,uCAAiB,EAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACxF,CAAC;IACD,2BAA2B,CAAC,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAA,uCAAiB,EAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;IAC/E,CAAC;CACF,CAAA"}

package/dist/src/keyRetentionConfig.d.ts

@@ -0,0 +1,6 @@
+export type KeyRetentionConfig = {
+    retainKeysForGenerations: number;
+    retainKeysForEpochs: number;
+    maximumForwardRatchetSteps: number;
+};
+export declare const defaultKeyRetentionConfig: KeyRetentionConfig;

package/dist/src/keyRetentionConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyRetentionConfig.d.ts","sourceRoot":"","sources":["../../src/keyRetentionConfig.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wBAAwB,EAAE,MAAM,CAAA;IAChC,mBAAmB,EAAE,MAAM,CAAA;IAC3B,0BAA0B,EAAE,MAAM,CAAA;CACnC,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,kBAIvC,CAAA"}

package/dist/src/keyRetentionConfig.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultKeyRetentionConfig = void 0;
+exports.defaultKeyRetentionConfig = {
+    retainKeysForGenerations: 10,
+    retainKeysForEpochs: 4,
+    maximumForwardRatchetSteps: 200,
+};
+//# sourceMappingURL=keyRetentionConfig.js.map

package/dist/src/keyRetentionConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyRetentionConfig.js","sourceRoot":"","sources":["../../src/keyRetentionConfig.ts"],"names":[],"mappings":";;;AAMa,QAAA,yBAAyB,GAAuB;IAC3D,wBAAwB,EAAE,EAAE;IAC5B,mBAAmB,EAAE,CAAC;IACtB,0BAA0B,EAAE,GAAG;CAChC,CAAA"}

package/dist/src/keySchedule.d.ts

@@ -0,0 +1,24 @@
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { Kdf } from "./crypto/kdf";
+import { GroupContext } from "./groupContext";
+export type KeySchedule = {
+    epochSecret: Uint8Array;
+    senderDataSecret: Uint8Array;
+    encryptionSecret: Uint8Array;
+    exporterSecret: Uint8Array;
+    externalSecret: Uint8Array;
+    confirmationKey: Uint8Array;
+    membershipKey: Uint8Array;
+    resumptionPsk: Uint8Array;
+    epochAuthenticator: Uint8Array;
+    initSecret: Uint8Array;
+};
+export type EpochSecrets = {
+    keySchedule: KeySchedule;
+    joinerSecret: Uint8Array;
+    welcomeSecret: Uint8Array;
+};
+export declare function mlsExporter(exporterSecret: Uint8Array, label: string, context: Uint8Array, length: number, cs: CiphersuiteImpl): Promise<Uint8Array<ArrayBufferLike>>;
+export declare function deriveKeySchedule(joinerSecret: Uint8Array, pskSecret: Uint8Array, groupContext: GroupContext, kdf: Kdf): Promise<KeySchedule>;
+export declare function initializeKeySchedule(epochSecret: Uint8Array, kdf: Kdf): Promise<KeySchedule>;
+export declare function initializeEpoch(initSecret: Uint8Array, commitSecret: Uint8Array, groupContext: GroupContext, pskSecret: Uint8Array, kdf: Kdf): Promise<EpochSecrets>;

package/dist/src/keySchedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keySchedule.d.ts","sourceRoot":"","sources":["../../src/keySchedule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAiC,GAAG,EAAE,MAAM,cAAc,CAAA;AACjE,OAAO,EAA2C,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAGtF,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE,UAAU,CAAA;IACvB,gBAAgB,EAAE,UAAU,CAAA;IAC5B,gBAAgB,EAAE,UAAU,CAAA;IAC5B,cAAc,EAAE,UAAU,CAAA;IAC1B,cAAc,EAAE,UAAU,CAAA;IAC1B,eAAe,EAAE,UAAU,CAAA;IAC3B,aAAa,EAAE,UAAU,CAAA;IACzB,aAAa,EAAE,UAAU,CAAA;IACzB,kBAAkB,EAAE,UAAU,CAAA;IAC9B,UAAU,EAAE,UAAU,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,WAAW,CAAA;IACxB,YAAY,EAAE,UAAU,CAAA;IACxB,aAAa,EAAE,UAAU,CAAA;CAC1B,CAAA;AAED,wBAAsB,WAAW,CAC/B,cAAc,EAAE,UAAU,EAC1B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,eAAe,wCAMpB;AAED,wBAAsB,iBAAiB,CACrC,YAAY,EAAE,UAAU,EACxB,SAAS,EAAE,UAAU,EACrB,YAAY,EAAE,YAAY,EAC1B,GAAG,EAAE,GAAG,wBAKT;AAED,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAyBnG;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,UAAU,EACxB,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,YAAY,CAAC,CAQvB"}

package/dist/src/keySchedule.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mlsExporter = mlsExporter;
+exports.deriveKeySchedule = deriveKeySchedule;
+exports.initializeKeySchedule = initializeKeySchedule;
+exports.initializeEpoch = initializeEpoch;
+const kdf_1 = require("./crypto/kdf");
+const groupContext_1 = require("./groupContext");
+const groupInfo_1 = require("./groupInfo");
+async function mlsExporter(exporterSecret, label, context, length, cs) {
+    const secret = await (0, kdf_1.deriveSecret)(exporterSecret, label, cs.kdf);
+    const hash = await cs.hash.digest(context);
+    return (0, kdf_1.expandWithLabel)(secret, "exported", hash, length, cs.kdf);
+}
+async function deriveKeySchedule(joinerSecret, pskSecret, groupContext, kdf) {
+    const epochSecret = await (0, groupContext_1.extractEpochSecret)(groupContext, joinerSecret, kdf, pskSecret);
+    return await initializeKeySchedule(epochSecret, kdf);
+}
+async function initializeKeySchedule(epochSecret, kdf) {
+    const newInitSecret = await (0, kdf_1.deriveSecret)(epochSecret, "init", kdf);
+    const senderDataSecret = await (0, kdf_1.deriveSecret)(epochSecret, "sender data", kdf);
+    const encryptionSecret = await (0, kdf_1.deriveSecret)(epochSecret, "encryption", kdf);
+    const exporterSecret = await (0, kdf_1.deriveSecret)(epochSecret, "exporter", kdf);
+    const externalSecret = await (0, kdf_1.deriveSecret)(epochSecret, "external", kdf);
+    const confirmationKey = await (0, kdf_1.deriveSecret)(epochSecret, "confirm", kdf);
+    const membershipKey = await (0, kdf_1.deriveSecret)(epochSecret, "membership", kdf);
+    const resumptionPsk = await (0, kdf_1.deriveSecret)(epochSecret, "resumption", kdf);
+    const epochAuthenticator = await (0, kdf_1.deriveSecret)(epochSecret, "authentication", kdf);
+    const newKeySchedule = {
+        epochSecret: epochSecret,
+        initSecret: newInitSecret,
+        senderDataSecret,
+        encryptionSecret,
+        exporterSecret,
+        externalSecret,
+        confirmationKey,
+        membershipKey,
+        resumptionPsk,
+        epochAuthenticator,
+    };
+    return newKeySchedule;
+}
+async function initializeEpoch(initSecret, commitSecret, groupContext, pskSecret, kdf) {
+    const joinerSecret = await (0, groupContext_1.extractJoinerSecret)(groupContext, initSecret, commitSecret, kdf);
+    const welcomeSecret = await (0, groupInfo_1.extractWelcomeSecret)(joinerSecret, pskSecret, kdf);
+    const newKeySchedule = await deriveKeySchedule(joinerSecret, pskSecret, groupContext, kdf);
+    return { welcomeSecret, joinerSecret, keySchedule: newKeySchedule };
+}
+//# sourceMappingURL=keySchedule.js.map

package/dist/src/keySchedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keySchedule.js","sourceRoot":"","sources":["../../src/keySchedule.ts"],"names":[],"mappings":";;AAwBA,kCAWC;AAED,8CASC;AAED,sDAyBC;AAED,0CAcC;AAxFD,sCAAiE;AACjE,iDAAsF;AACtF,2CAAkD;AAqB3C,KAAK,UAAU,WAAW,CAC/B,cAA0B,EAC1B,KAAa,EACb,OAAmB,EACnB,MAAc,EACd,EAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAY,EAAC,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;IAEhE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1C,OAAO,IAAA,qBAAe,EAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;AAClE,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,YAAwB,EACxB,SAAqB,EACrB,YAA0B,EAC1B,GAAQ;IAER,MAAM,WAAW,GAAG,MAAM,IAAA,iCAAkB,EAAC,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAExF,OAAO,MAAM,qBAAqB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;AACtD,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,WAAuB,EAAE,GAAQ;IAC3E,MAAM,aAAa,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;IAClE,MAAM,gBAAgB,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC,CAAA;IAC5E,MAAM,gBAAgB,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAC3E,MAAM,cAAc,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IACvE,MAAM,cAAc,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IACvE,MAAM,eAAe,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IACvE,MAAM,aAAa,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IACxE,MAAM,aAAa,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IACxE,MAAM,kBAAkB,GAAG,MAAM,IAAA,kBAAY,EAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAEjF,MAAM,cAAc,GAAgB;QAClC,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,aAAa;QACzB,gBAAgB;QAChB,gBAAgB;QAChB,cAAc;QACd,cAAc;QACd,eAAe;QACf,aAAa;QACb,aAAa;QACb,kBAAkB;KACnB,CAAA;IAED,OAAO,cAAc,CAAA;AACvB,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,UAAsB,EACtB,YAAwB,EACxB,YAA0B,EAC1B,SAAqB,EACrB,GAAQ;IAER,MAAM,YAAY,GAAG,MAAM,IAAA,kCAAmB,EAAC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAE3F,MAAM,aAAa,GAAG,MAAM,IAAA,gCAAoB,EAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAE9E,MAAM,cAAc,GAAgB,MAAM,iBAAiB,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAEvG,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA;AACrE,CAAC"}

package/dist/src/leafNode.d.ts

@@ -0,0 +1,78 @@
+import { Capabilities } from "./capabilities";
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Credential } from "./credential";
+import { Signature } from "./crypto/signature";
+import { Extension } from "./extension";
+import { LeafNodeSourceName } from "./leafNodeSource";
+import { Lifetime } from "./lifetime";
+export type LeafNodeData = {
+    hpkePublicKey: Uint8Array;
+    signaturePublicKey: Uint8Array;
+    credential: Credential;
+    capabilities: Capabilities;
+};
+export declare const encodeLeafNodeData: Encoder<LeafNodeData>;
+export declare const decodeLeafNodeData: Decoder<LeafNodeData>;
+export type LeafNodeInfo = LeafNodeInfoKeyPackage | LeafNodeInfoUpdate | LeafNodeInfoCommit;
+export type LeafNodeInfoKeyPackage = {
+    leafNodeSource: "key_package";
+    lifetime: Lifetime;
+};
+export type LeafNodeInfoUpdate = {
+    leafNodeSource: "update";
+};
+export type LeafNodeInfoCommit = {
+    leafNodeSource: "commit";
+    parentHash: Uint8Array;
+};
+export declare const encodeLeafNodeInfoLifetime: Encoder<LeafNodeInfoKeyPackage>;
+export declare const encodeLeafNodeInfoUpdate: Encoder<LeafNodeInfoUpdate>;
+export declare const encodeLeafNodeInfoCommit: Encoder<LeafNodeInfoCommit>;
+export declare const encodeLeafNodeInfo: Encoder<LeafNodeInfo>;
+export declare const decodeLeafNodeInfoLifetime: Decoder<LeafNodeInfoKeyPackage>;
+export declare const decodeLeafNodeInfoCommit: Decoder<LeafNodeInfoCommit>;
+export declare const decodeLeafNodeInfo: Decoder<LeafNodeInfo>;
+export type LeafNodeExtensions = {
+    extensions: Extension[];
+};
+export declare const encodeLeafNodeExtensions: Encoder<LeafNodeExtensions>;
+export declare const decodeLeafNodeExtensions: Decoder<LeafNodeExtensions>;
+type GroupIdLeafIndex = {
+    leafNodeSource: Exclude<LeafNodeSourceName, "key_package">;
+    groupId: Uint8Array;
+    leafIndex: number;
+};
+export declare const encodeGroupIdLeafIndex: Encoder<GroupIdLeafIndex>;
+export type LeafNodeGroupInfo = GroupIdLeafIndex | {
+    leafNodeSource: "key_package";
+};
+export declare const encodeLeafNodeGroupInfo: Encoder<LeafNodeGroupInfo>;
+export type LeafNodeTBS = LeafNodeData & LeafNodeInfo & LeafNodeExtensions & {
+    info: LeafNodeGroupInfo;
+};
+export type LeafNodeTBSCommit = LeafNodeData & LeafNodeInfoCommit & LeafNodeExtensions & {
+    info: GroupIdLeafIndex;
+};
+export type LeafNodeTBSKeyPackage = LeafNodeData & LeafNodeInfoKeyPackage & LeafNodeExtensions & {
+    info: {
+        leafNodeSource: "key_package";
+    };
+};
+export declare const encodeLeafNodeTBS: Encoder<LeafNodeTBS>;
+export type LeafNode = LeafNodeData & LeafNodeInfo & LeafNodeExtensions & {
+    signature: Uint8Array;
+};
+export declare const encodeLeafNode: Encoder<LeafNode>;
+export declare const decodeLeafNode: Decoder<LeafNode>;
+export type LeafNodeKeyPackage = LeafNode & LeafNodeInfoKeyPackage;
+export declare const decodeLeafNodeKeyPackage: Decoder<LeafNodeKeyPackage>;
+export type LeafNodeCommit = LeafNode & LeafNodeInfoCommit;
+export declare const decodeLeafNodeCommit: Decoder<LeafNodeCommit>;
+export type LeafNodeUpdate = LeafNode & LeafNodeInfoUpdate;
+export declare const decodeLeafNodeUpdate: Decoder<LeafNodeUpdate>;
+export declare function signLeafNodeCommit(tbs: LeafNodeTBSCommit, signaturePrivateKey: Uint8Array, sig: Signature): Promise<LeafNodeCommit>;
+export declare function signLeafNodeKeyPackage(tbs: LeafNodeTBSKeyPackage, signaturePrivateKey: Uint8Array, sig: Signature): Promise<LeafNodeKeyPackage>;
+export declare function verifyLeafNodeSignature(leaf: LeafNode, groupId: Uint8Array, leafIndex: number, sig: Signature): Promise<boolean>;
+export declare function verifyLeafNodeSignatureKeyPackage(leaf: LeafNodeKeyPackage, sig: Signature): Promise<boolean>;
+export {};

package/dist/src/leafNode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leafNode.d.ts","sourceRoot":"","sources":["../../src/leafNode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0C,MAAM,gBAAgB,CAAA;AAErF,OAAO,EAAE,OAAO,EAA6E,MAAM,oBAAoB,CAAA;AACvH,OAAO,EAAE,OAAO,EAAuC,MAAM,oBAAoB,CAAA;AAEjF,OAAO,EAAsC,UAAU,EAAE,MAAM,cAAc,CAAA;AAC7E,OAAO,EAAE,SAAS,EAAkC,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAE,SAAS,EAAoC,MAAM,aAAa,CAAA;AACzE,OAAO,EAA8C,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAE,QAAQ,EAAkC,MAAM,YAAY,CAAA;AAErE,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,EAAE,UAAU,CAAA;IACzB,kBAAkB,EAAE,UAAU,CAAA;IAC9B,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,YAAY,CAAA;CAC3B,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAGpD,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAQpD,CAAA;AAED,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG,kBAAkB,GAAG,kBAAkB,CAAA;AAC3F,MAAM,MAAM,sBAAsB,GAAG;IAAE,cAAc,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAA;AAC1F,MAAM,MAAM,kBAAkB,GAAG;IAAE,cAAc,EAAE,QAAQ,CAAA;CAAE,CAAA;AAC7D,MAAM,MAAM,kBAAkB,GAAG;IAAE,cAAc,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AAErF,eAAO,MAAM,0BAA0B,EAAE,OAAO,CAAC,sBAAsB,CAGtE,CAAA;AAED,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,kBAAkB,CAGhE,CAAA;AAED,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,kBAAkB,CAGhE,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CASpD,CAAA;AAED,eAAO,MAAM,0BAA0B,EAAE,OAAO,CAAC,sBAAsB,CAGpE,CAAA;AAEH,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,kBAAkB,CAG9D,CAAA;AAEH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAYpD,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAA;AAE5D,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,kBAAkB,CAGhE,CAAA;AAED,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,kBAAkB,CAGhE,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,cAAc,EAAE,OAAO,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAA;IAC1D,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,gBAAgB,CAG5D,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG;IAAE,cAAc,EAAE,aAAa,CAAA;CAAE,CAAA;AAEpF,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAQ9D,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,kBAAkB,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAA;AAExG,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,kBAAkB,GAAG,kBAAkB,GAAG;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAA;AAEnH,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAC9C,sBAAsB,GACtB,kBAAkB,GAAG;IAAE,IAAI,EAAE;QAAE,cAAc,EAAE,aAAa,CAAA;KAAE,CAAA;CAAE,CAAA;AAElE,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,WAAW,CAGlD,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,YAAY,GAAG,kBAAkB,GAAG;IAAE,SAAS,EAAE,UAAU,CAAA;CAAE,CAAA;AAEnG,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,QAAQ,CAG5C,CAAA;AAED,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,QAAQ,CAQ5C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,sBAAsB,CAAA;AAElE,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,kBAAkB,CAEhE,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,kBAAkB,CAAA;AAE1D,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAExD,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,kBAAkB,CAAA;AAE1D,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAExD,CAAA;AAMD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,iBAAiB,EACtB,mBAAmB,EAAE,UAAU,EAC/B,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,cAAc,CAAC,CAEzB;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,qBAAqB,EAC1B,mBAAmB,EAAE,UAAU,EAC/B,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ5G"}