ts-mls 1.1.0 → 1.2.0

package/dist/groupContext.d.ts

@@ -0,0 +1,19 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { CiphersuiteName } from "./crypto/ciphersuite.js";
+import { Kdf } from "./crypto/kdf.js";
+import { Extension } from "./extension.js";
+import { ProtocolVersionName } from "./protocolVersion.js";
+export interface GroupContext {
+    version: ProtocolVersionName;
+    cipherSuite: CiphersuiteName;
+    groupId: Uint8Array;
+    epoch: bigint;
+    treeHash: Uint8Array;
+    confirmedTranscriptHash: Uint8Array;
+    extensions: Extension[];
+}
+export declare const encodeGroupContext: Encoder<GroupContext>;
+export declare const decodeGroupContext: Decoder<GroupContext>;
+export declare function extractEpochSecret(context: GroupContext, joinerSecret: Uint8Array, kdf: Kdf, pskSecret?: Uint8Array): Promise<Uint8Array<ArrayBufferLike>>;
+export declare function extractJoinerSecret(context: GroupContext, previousInitSecret: Uint8Array, commitSecret: Uint8Array, kdf: Kdf): Promise<Uint8Array<ArrayBufferLike>>;

package/dist/groupContext.js

@@ -0,0 +1,44 @@
+import { decodeUint64, encodeUint64 } from "./codec/number.js";
+import { mapDecoders } from "./codec/tlsDecoder.js";
+import { contramapEncoders } from "./codec/tlsEncoder.js";
+import { decodeVarLenData, decodeVarLenType, encodeVarLenData, encodeVarLenType } from "./codec/variableLength.js";
+import { decodeCiphersuite, encodeCiphersuite } from "./crypto/ciphersuite.js";
+import { expandWithLabel } from "./crypto/kdf.js";
+import { decodeExtension, encodeExtension } from "./extension.js";
+import { decodeProtocolVersion, encodeProtocolVersion } from "./protocolVersion.js";
+export const encodeGroupContext = contramapEncoders([
+    encodeProtocolVersion,
+    encodeCiphersuite,
+    encodeVarLenData, // groupId
+    encodeUint64, // epoch
+    encodeVarLenData, // treeHash
+    encodeVarLenData, // confirmedTranscriptHash
+    encodeVarLenType(encodeExtension),
+], (gc) => [gc.version, gc.cipherSuite, gc.groupId, gc.epoch, gc.treeHash, gc.confirmedTranscriptHash, gc.extensions]);
+export const decodeGroupContext = mapDecoders([
+    decodeProtocolVersion,
+    decodeCiphersuite,
+    decodeVarLenData, // groupId
+    decodeUint64, // epoch
+    decodeVarLenData, // treeHash
+    decodeVarLenData, // confirmedTranscriptHash
+    decodeVarLenType(decodeExtension),
+], (version, cipherSuite, groupId, epoch, treeHash, confirmedTranscriptHash, extensions) => ({
+    version,
+    cipherSuite,
+    groupId,
+    epoch,
+    treeHash,
+    confirmedTranscriptHash,
+    extensions,
+}));
+export async function extractEpochSecret(context, joinerSecret, kdf, pskSecret) {
+    const psk = pskSecret === undefined ? new Uint8Array(kdf.size) : pskSecret;
+    const extracted = await kdf.extract(joinerSecret, psk);
+    return expandWithLabel(extracted, "epoch", encodeGroupContext(context), kdf.size, kdf);
+}
+export async function extractJoinerSecret(context, previousInitSecret, commitSecret, kdf) {
+    const extracted = await kdf.extract(previousInitSecret, commitSecret);
+    return expandWithLabel(extracted, "joiner", encodeGroupContext(context), kdf.size, kdf);
+}
+//# sourceMappingURL=groupContext.js.map

package/dist/groupContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupContext.js","sourceRoot":"","sources":["../src/groupContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAW,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAW,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAClH,OAAO,EAAmB,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAE/F,OAAO,EAAE,eAAe,EAAO,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAa,MAAM,gBAAgB,CAAA;AAE5E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAuB,MAAM,sBAAsB,CAAA;AAYxG,MAAM,CAAC,MAAM,kBAAkB,GAA0B,iBAAiB,CACxE;IACE,qBAAqB;IACrB,iBAAiB;IACjB,gBAAgB,EAAE,UAAU;IAC5B,YAAY,EAAE,QAAQ;IACtB,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,0BAA0B;IAC5C,gBAAgB,CAAC,eAAe,CAAC;CAClC,EACD,CAAC,EAAE,EAAE,EAAE,CACL,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,EAAE,EAAE,CAAC,UAAU,CAAU,CACtH,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAA0B,WAAW,CAClE;IACE,qBAAqB;IACrB,iBAAiB;IACjB,gBAAgB,EAAE,UAAU;IAC5B,YAAY,EAAE,QAAQ;IACtB,gBAAgB,EAAE,WAAW;IAC7B,gBAAgB,EAAE,0BAA0B;IAC5C,gBAAgB,CAAC,eAAe,CAAC;CAClC,EACD,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,uBAAuB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACxF,OAAO;IACP,WAAW;IACX,OAAO;IACP,KAAK;IACL,QAAQ;IACR,uBAAuB;IACvB,UAAU;CACX,CAAC,CACH,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAqB,EACrB,YAAwB,EACxB,GAAQ,EACR,SAAsB;IAEtB,MAAM,GAAG,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAEtD,OAAO,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,kBAA8B,EAC9B,YAAwB,EACxB,GAAQ;IAER,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAA;IAErE,OAAO,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACzF,CAAC"}

package/dist/groupInfo.d.ts

@@ -0,0 +1,26 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { CiphersuiteImpl } from "./crypto/ciphersuite.js";
+import { Kdf } from "./crypto/kdf.js";
+import { Signature } from "./crypto/signature.js";
+import { Extension } from "./extension.js";
+import { GroupContext } from "./groupContext.js";
+import { RatchetTree } from "./ratchetTree.js";
+export interface GroupInfoTBS {
+    groupContext: GroupContext;
+    extensions: Extension[];
+    confirmationTag: Uint8Array;
+    signer: number;
+}
+export declare const encodeGroupInfoTBS: Encoder<GroupInfoTBS>;
+export declare const decodeGroupInfoTBS: Decoder<GroupInfoTBS>;
+export type GroupInfo = GroupInfoTBS & {
+    signature: Uint8Array;
+};
+export declare const encodeGroupInfo: Encoder<GroupInfo>;
+export declare const decodeGroupInfo: Decoder<GroupInfo>;
+export declare function ratchetTreeFromExtension(info: GroupInfo): RatchetTree | undefined;
+export declare function signGroupInfo(tbs: GroupInfoTBS, privateKey: Uint8Array, s: Signature): Promise<GroupInfo>;
+export declare function verifyGroupInfoSignature(gi: GroupInfo, publicKey: Uint8Array, s: Signature): Promise<boolean>;
+export declare function verifyGroupInfoConfirmationTag(gi: GroupInfo, joinerSecret: Uint8Array, pskSecret: Uint8Array, cs: CiphersuiteImpl): Promise<boolean>;
+export declare function extractWelcomeSecret(joinerSecret: Uint8Array, pskSecret: Uint8Array, kdf: Kdf): Promise<Uint8Array<ArrayBufferLike>>;

package/dist/groupInfo.js

@@ -0,0 +1,47 @@
+import { decodeUint32, encodeUint32 } from "./codec/number.js";
+import { mapDecoders } from "./codec/tlsDecoder.js";
+import { contramapEncoders } from "./codec/tlsEncoder.js";
+import { decodeVarLenData, decodeVarLenType, encodeVarLenData, encodeVarLenType } from "./codec/variableLength.js";
+import { deriveSecret } from "./crypto/kdf.js";
+import { signWithLabel, verifyWithLabel } from "./crypto/signature.js";
+import { decodeExtension, encodeExtension } from "./extension.js";
+import { decodeGroupContext, encodeGroupContext, extractEpochSecret } from "./groupContext.js";
+import { CodecError } from "./mlsError.js";
+import { decodeRatchetTree } from "./ratchetTree.js";
+export const encodeGroupInfoTBS = contramapEncoders([encodeGroupContext, encodeVarLenType(encodeExtension), encodeVarLenData, encodeUint32], (g) => [g.groupContext, g.extensions, g.confirmationTag, g.signer]);
+export const decodeGroupInfoTBS = mapDecoders([decodeGroupContext, decodeVarLenType(decodeExtension), decodeVarLenData, decodeUint32], (groupContext, extensions, confirmationTag, signer) => ({
+    groupContext,
+    extensions,
+    confirmationTag,
+    signer,
+}));
+export const encodeGroupInfo = contramapEncoders([encodeGroupInfoTBS, encodeVarLenData], (g) => [g, g.signature]);
+export const decodeGroupInfo = mapDecoders([decodeGroupInfoTBS, decodeVarLenData], (tbs, signature) => ({
+    ...tbs,
+    signature,
+}));
+export function ratchetTreeFromExtension(info) {
+    const treeExtension = info.extensions.find((ex) => ex.extensionType === "ratchet_tree");
+    if (treeExtension !== undefined) {
+        const tree = decodeRatchetTree(treeExtension.extensionData, 0);
+        if (tree === undefined)
+            throw new CodecError("Could not decode RatchetTree");
+        return tree[0];
+    }
+}
+export async function signGroupInfo(tbs, privateKey, s) {
+    const signature = await signWithLabel(privateKey, "GroupInfoTBS", encodeGroupInfoTBS(tbs), s);
+    return { ...tbs, signature };
+}
+export function verifyGroupInfoSignature(gi, publicKey, s) {
+    return verifyWithLabel(publicKey, "GroupInfoTBS", encodeGroupInfoTBS(gi), gi.signature, s);
+}
+export async function verifyGroupInfoConfirmationTag(gi, joinerSecret, pskSecret, cs) {
+    const epochSecret = await extractEpochSecret(gi.groupContext, joinerSecret, cs.kdf, pskSecret);
+    const key = await deriveSecret(epochSecret, "confirm", cs.kdf);
+    return cs.hash.verifyMac(key, gi.confirmationTag, gi.groupContext.confirmedTranscriptHash);
+}
+export async function extractWelcomeSecret(joinerSecret, pskSecret, kdf) {
+    return deriveSecret(await kdf.extract(joinerSecret, pskSecret), "welcome", kdf);
+}
+//# sourceMappingURL=groupInfo.js.map

package/dist/groupInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupInfo.js","sourceRoot":"","sources":["../src/groupInfo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAW,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAW,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAElH,OAAO,EAAE,YAAY,EAAO,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAa,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAa,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAgB,MAAM,mBAAmB,CAAA;AAC5G,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAe,MAAM,kBAAkB,CAAA;AASjE,MAAM,CAAC,MAAM,kBAAkB,GAA0B,iBAAiB,CACxE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,eAAe,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,EACvF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAU,CAC5E,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAA0B,WAAW,CAClE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,eAAe,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,EACvF,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,YAAY;IACZ,UAAU;IACV,eAAe;IACf,MAAM;CACP,CAAC,CACH,CAAA;AAMD,MAAM,CAAC,MAAM,eAAe,GAAuB,iBAAiB,CAClE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAU,CACjC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAuB,WAAW,CAC5D,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EACtC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACnB,GAAG,GAAG;IACN,SAAS;CACV,CAAC,CACH,CAAA;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAe;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,KAAK,cAAc,CAAC,CAAA;IAEvF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,iBAAiB,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QAC9D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAiB,EAAE,UAAsB,EAAE,CAAY;IACzF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,cAAc,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7F,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAa,EAAE,SAAqB,EAAE,CAAY;IACzF,OAAO,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,EAAa,EACb,YAAwB,EACxB,SAAqB,EACrB,EAAmB;IAEnB,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC9F,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;IAC9D,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,YAAwB,EAAE,SAAqB,EAAE,GAAQ;IAClG,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;AACjF,CAAC"}

package/dist/groupSecrets.d.ts

@@ -0,0 +1,10 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { PreSharedKeyID } from "./presharedkey.js";
+export interface GroupSecrets {
+    joinerSecret: Uint8Array;
+    pathSecret: Uint8Array | undefined;
+    psks: PreSharedKeyID[];
+}
+export declare const encodeGroupSecrets: Encoder<GroupSecrets>;
+export declare const decodeGroupSecrets: Decoder<GroupSecrets>;

package/dist/groupSecrets.js

@@ -0,0 +1,8 @@
+import { decodeOptional, encodeOptional } from "./codec/optional.js";
+import { mapDecoders } from "./codec/tlsDecoder.js";
+import { contramapEncoders } from "./codec/tlsEncoder.js";
+import { decodeVarLenData, decodeVarLenType, encodeVarLenData, encodeVarLenType } from "./codec/variableLength.js";
+import { decodePskId, encodePskId } from "./presharedkey.js";
+export const encodeGroupSecrets = contramapEncoders([encodeVarLenData, encodeOptional(encodeVarLenData), encodeVarLenType(encodePskId)], (gs) => [gs.joinerSecret, gs.pathSecret, gs.psks]);
+export const decodeGroupSecrets = mapDecoders([decodeVarLenData, decodeOptional(decodeVarLenData), decodeVarLenType(decodePskId)], (joinerSecret, pathSecret, psks) => ({ joinerSecret, pathSecret, psks }));
+//# sourceMappingURL=groupSecrets.js.map

package/dist/groupSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupSecrets.js","sourceRoot":"","sources":["../src/groupSecrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EAAW,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAW,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAClH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAkB,MAAM,mBAAmB,CAAA;AAQ5E,MAAM,CAAC,MAAM,kBAAkB,GAA0B,iBAAiB,CACxE,CAAC,gBAAgB,EAAE,cAAc,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC,EACnF,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAU,CAC3D,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAA0B,WAAW,CAClE,CAAC,gBAAgB,EAAE,cAAc,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC,EACnF,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CACzE,CAAA"}

package/dist/hpkeCiphertext.d.ts

@@ -0,0 +1,8 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+export interface HPKECiphertext {
+    kemOutput: Uint8Array;
+    ciphertext: Uint8Array;
+}
+export declare const encodeHpkeCiphertext: Encoder<HPKECiphertext>;
+export declare const decodeHpkeCiphertext: Decoder<HPKECiphertext>;

package/dist/hpkeCiphertext.js

@@ -0,0 +1,6 @@
+import { mapDecoders } from "./codec/tlsDecoder.js";
+import { contramapEncoders } from "./codec/tlsEncoder.js";
+import { encodeVarLenData, decodeVarLenData } from "./codec/variableLength.js";
+export const encodeHpkeCiphertext = contramapEncoders([encodeVarLenData, encodeVarLenData], (egs) => [egs.kemOutput, egs.ciphertext]);
+export const decodeHpkeCiphertext = mapDecoders([decodeVarLenData, decodeVarLenData], (kemOutput, ciphertext) => ({ kemOutput, ciphertext }));
+//# sourceMappingURL=hpkeCiphertext.js.map

package/dist/hpkeCiphertext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpkeCiphertext.js","sourceRoot":"","sources":["../src/hpkeCiphertext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAW,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAO9E,MAAM,CAAC,MAAM,oBAAoB,GAA4B,iBAAiB,CAC5E,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EACpC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAU,CAClD,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAA4B,WAAW,CACtE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EACpC,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CACvD,CAAA"}

package/dist/incomingMessageAction.d.ts

@@ -0,0 +1,10 @@
+import { ProposalWithSender } from "./unappliedProposals.js";
+export type IncomingMessageAction = "accept" | "reject";
+export type IncomingMessageCallback = (incoming: {
+    kind: "commit";
+    proposals: ProposalWithSender[];
+} | {
+    kind: "proposal";
+    proposal: ProposalWithSender;
+}) => IncomingMessageAction;
+export declare const acceptAll: IncomingMessageCallback;

package/dist/incomingMessageAction.js

@@ -0,0 +1,2 @@
+export const acceptAll = () => "accept";
+//# sourceMappingURL=incomingMessageAction.js.map

package/dist/incomingMessageAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incomingMessageAction.js","sourceRoot":"","sources":["../src/incomingMessageAction.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,SAAS,GAA4B,GAAG,EAAE,CAAC,QAAQ,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+export { type Extension, type ExtensionType } from "./extension.js";
+export { defaultProposalTypes, type DefaultProposalTypeName } from "./defaultProposalType.js";
+export { defaultExtensionTypes, type DefaultExtensionTypeName } from "./defaultExtensionType.js";
+export { type PrivateKeyPath } from "./privateKeyPath.js";
+export { type RatchetTree } from "./ratchetTree.js";
+export { acceptAll, type IncomingMessageCallback, type IncomingMessageAction } from "./incomingMessageAction.js";
+export { proposeAddExternal, proposeExternal } from "./externalProposal.js";
+export { type GroupContext } from "./groupContext.js";
+export { decodeExternalSender, encodeExternalSender, type ExternalSender } from "./externalSender.js";
+export { decodeRequiredCapabilities, encodeRequiredCapabilities, type RequiredCapabilities, } from "./requiredCapabilities.js";
+export { type AuthenticationService, defaultAuthenticationService } from "./authenticationService.js";
+export { type PaddingConfig, defaultPaddingConfig } from "./paddingConfig.js";
+export { defaultKeyPackageEqualityConfig, type KeyPackageEqualityConfig } from "./keyPackageEqualityConfig.js";
+export { type LifetimeConfig, defaultLifetimeConfig } from "./lifetimeConfig.js";
+export { type PrivateKeyPackage, type KeyPackage, generateKeyPackage } from "./keyPackage.js";
+export { type KeyRetentionConfig, defaultKeyRetentionConfig } from "./keyRetentionConfig.js";
+export { createGroup, makePskIndex, joinGroup, type ClientState, type GroupActiveState, type EpochReceiverData, } from "./clientState.js";
+export { createApplicationMessage, createProposal } from "./createMessage.js";
+export { joinGroupExternal, createCommit, createGroupInfoWithExternalPub, createGroupInfoWithExternalPubAndRatchetTree, type CreateCommitResult, } from "./createCommit.js";
+export { processPrivateMessage, processMessage, processPublicMessage, type ProcessMessageResult, } from "./processMessages.js";
+export { type PrivateMessage } from "./privateMessage.js";
+export { type PskIndex, emptyPskIndex } from "./pskIndex.js";
+export { joinGroupFromReinit, reinitCreateNewGroup, reinitGroup, joinGroupFromBranch, branchGroup, } from "./resumption.js";
+export { type Credential } from "./credential.js";
+export { type Proposal } from "./proposal.js";
+export { type ClientConfig } from "./clientConfig.js";
+export { type Welcome } from "./welcome.js";
+export { type Ciphersuite, type CiphersuiteName, type CiphersuiteImpl, ciphersuites, getCiphersuiteFromName, } from "./crypto/ciphersuite.js";
+export { getCiphersuiteImpl } from "./crypto/getCiphersuiteImpl.js";
+export { type CryptoProvider } from "./crypto/provider.js";
+export { nobleCryptoProvider } from "./crypto/implementation/noble/provider.js";
+export { defaultCryptoProvider } from "./crypto/implementation/default/provider.js";
+export { bytesToBase64 } from "./util/byteArray.js";
+export { decodeMlsMessage, encodeMlsMessage, type MlsPublicMessage, type MlsPrivateMessage } from "./message.js";
+export { type Lifetime, defaultLifetime } from "./lifetime.js";
+export { type Capabilities } from "./capabilities.js";
+export { defaultCapabilities } from "./defaultCapabilities.js";

package/dist/index.js

@@ -0,0 +1,27 @@
+export { defaultProposalTypes } from "./defaultProposalType.js";
+export { defaultExtensionTypes } from "./defaultExtensionType.js";
+export { acceptAll } from "./incomingMessageAction.js";
+export { proposeAddExternal, proposeExternal } from "./externalProposal.js";
+export { decodeExternalSender, encodeExternalSender } from "./externalSender.js";
+export { decodeRequiredCapabilities, encodeRequiredCapabilities, } from "./requiredCapabilities.js";
+export { defaultAuthenticationService } from "./authenticationService.js";
+export { defaultPaddingConfig } from "./paddingConfig.js";
+export { defaultKeyPackageEqualityConfig } from "./keyPackageEqualityConfig.js";
+export { defaultLifetimeConfig } from "./lifetimeConfig.js";
+export { generateKeyPackage } from "./keyPackage.js";
+export { defaultKeyRetentionConfig } from "./keyRetentionConfig.js";
+export { createGroup, makePskIndex, joinGroup, } from "./clientState.js";
+export { createApplicationMessage, createProposal } from "./createMessage.js";
+export { joinGroupExternal, createCommit, createGroupInfoWithExternalPub, createGroupInfoWithExternalPubAndRatchetTree, } from "./createCommit.js";
+export { processPrivateMessage, processMessage, processPublicMessage, } from "./processMessages.js";
+export { emptyPskIndex } from "./pskIndex.js";
+export { joinGroupFromReinit, reinitCreateNewGroup, reinitGroup, joinGroupFromBranch, branchGroup, } from "./resumption.js";
+export { ciphersuites, getCiphersuiteFromName, } from "./crypto/ciphersuite.js";
+export { getCiphersuiteImpl } from "./crypto/getCiphersuiteImpl.js";
+export { nobleCryptoProvider } from "./crypto/implementation/noble/provider.js";
+export { defaultCryptoProvider } from "./crypto/implementation/default/provider.js";
+export { bytesToBase64 } from "./util/byteArray.js";
+export { decodeMlsMessage, encodeMlsMessage } from "./message.js";
+export { defaultLifetime } from "./lifetime.js";
+export { defaultCapabilities } from "./defaultCapabilities.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAgC,MAAM,0BAA0B,CAAA;AAE7F,OAAO,EAAE,qBAAqB,EAAiC,MAAM,2BAA2B,CAAA;AAMhG,OAAO,EAAE,SAAS,EAA4D,MAAM,4BAA4B,CAAA;AAEhH,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAI3E,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAuB,MAAM,qBAAqB,CAAA;AAErG,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAE3B,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAA8B,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AAErG,OAAO,EAAsB,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAE7E,OAAO,EAAE,+BAA+B,EAAiC,MAAM,+BAA+B,CAAA;AAE9G,OAAO,EAAuB,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhF,OAAO,EAA2C,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAC7F,OAAO,EAA2B,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAE5F,OAAO,EACL,WAAW,EACX,YAAY,EACZ,SAAS,GAIV,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAE7E,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,8BAA8B,EAC9B,4CAA4C,GAE7C,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,oBAAoB,GAErB,MAAM,sBAAsB,CAAA;AAI7B,OAAO,EAAiB,aAAa,EAAE,MAAM,eAAe,CAAA;AAE5D,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,mBAAmB,EACnB,WAAW,GACZ,MAAM,iBAAiB,CAAA;AAUxB,OAAO,EAIL,YAAY,EACZ,sBAAsB,GACvB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAGnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAA;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AAEnF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAiD,MAAM,cAAc,CAAA;AAChH,OAAO,EAAiB,eAAe,EAAE,MAAM,eAAe,CAAA;AAE9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/keyPackage.d.ts

@@ -0,0 +1,38 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { CiphersuiteImpl, CiphersuiteName } from "./crypto/ciphersuite.js";
+import { Hash } from "./crypto/hash.js";
+import { Signature } from "./crypto/signature.js";
+import { Extension } from "./extension.js";
+import { ProtocolVersionName } from "./protocolVersion.js";
+import { LeafNodeKeyPackage } from "./leafNode.js";
+import { Capabilities } from "./capabilities.js";
+import { Lifetime } from "./lifetime.js";
+import { Credential } from "./credential.js";
+type KeyPackageTBS = {
+    version: ProtocolVersionName;
+    cipherSuite: CiphersuiteName;
+    initKey: Uint8Array;
+    leafNode: LeafNodeKeyPackage;
+    extensions: Extension[];
+};
+export declare const encodeKeyPackageTBS: Encoder<KeyPackageTBS>;
+export declare const decodeKeyPackageTBS: Decoder<KeyPackageTBS>;
+export type KeyPackage = KeyPackageTBS & {
+    signature: Uint8Array;
+};
+export declare const encodeKeyPackage: Encoder<KeyPackage>;
+export declare const decodeKeyPackage: Decoder<KeyPackage>;
+export declare function signKeyPackage(tbs: KeyPackageTBS, signKey: Uint8Array, s: Signature): Promise<KeyPackage>;
+export declare function verifyKeyPackage(kp: KeyPackage, s: Signature): Promise<boolean>;
+export declare function makeKeyPackageRef(value: KeyPackage, h: Hash): Promise<Uint8Array<ArrayBufferLike>>;
+export interface PrivateKeyPackage {
+    initPrivateKey: Uint8Array;
+    hpkePrivateKey: Uint8Array;
+    signaturePrivateKey: Uint8Array;
+}
+export declare function generateKeyPackage(credential: Credential, capabilities: Capabilities, lifetime: Lifetime, extensions: Extension[], cs: CiphersuiteImpl): Promise<{
+    publicPackage: KeyPackage;
+    privatePackage: PrivateKeyPackage;
+}>;
+export {};

package/dist/keyPackage.js

@@ -0,0 +1,72 @@
+import { mapDecoders } from "./codec/tlsDecoder.js";
+import { contramapEncoders } from "./codec/tlsEncoder.js";
+import { decodeVarLenData, decodeVarLenType, encodeVarLenData, encodeVarLenType } from "./codec/variableLength.js";
+import { decodeCiphersuite, encodeCiphersuite } from "./crypto/ciphersuite.js";
+import { refhash } from "./crypto/hash.js";
+import { signWithLabel, verifyWithLabel } from "./crypto/signature.js";
+import { decodeExtension, encodeExtension } from "./extension.js";
+import { decodeProtocolVersion, encodeProtocolVersion } from "./protocolVersion.js";
+import { decodeLeafNodeKeyPackage, encodeLeafNode, signLeafNodeKeyPackage, } from "./leafNode.js";
+export const encodeKeyPackageTBS = contramapEncoders([encodeProtocolVersion, encodeCiphersuite, encodeVarLenData, encodeLeafNode, encodeVarLenType(encodeExtension)], (keyPackageTBS) => [
+    keyPackageTBS.version,
+    keyPackageTBS.cipherSuite,
+    keyPackageTBS.initKey,
+    keyPackageTBS.leafNode,
+    keyPackageTBS.extensions,
+]);
+export const decodeKeyPackageTBS = mapDecoders([
+    decodeProtocolVersion,
+    decodeCiphersuite,
+    decodeVarLenData,
+    decodeLeafNodeKeyPackage,
+    decodeVarLenType(decodeExtension),
+], (version, cipherSuite, initKey, leafNode, extensions) => ({
+    version,
+    cipherSuite,
+    initKey,
+    leafNode,
+    extensions,
+}));
+export const encodeKeyPackage = contramapEncoders([encodeKeyPackageTBS, encodeVarLenData], (keyPackage) => [keyPackage, keyPackage.signature]);
+export const decodeKeyPackage = mapDecoders([decodeKeyPackageTBS, decodeVarLenData], (keyPackageTBS, signature) => ({
+    ...keyPackageTBS,
+    signature,
+}));
+export async function signKeyPackage(tbs, signKey, s) {
+    return { ...tbs, signature: await signWithLabel(signKey, "KeyPackageTBS", encodeKeyPackageTBS(tbs), s) };
+}
+export async function verifyKeyPackage(kp, s) {
+    return verifyWithLabel(kp.leafNode.signaturePublicKey, "KeyPackageTBS", encodeKeyPackageTBS(kp), kp.signature, s);
+}
+export function makeKeyPackageRef(value, h) {
+    return refhash("MLS 1.0 KeyPackage Reference", encodeKeyPackage(value), h);
+}
+export async function generateKeyPackage(credential, capabilities, lifetime, extensions, cs) {
+    const sigKeys = await cs.signature.keygen();
+    const initKeys = await cs.hpke.generateKeyPair();
+    const hpkeKeys = await cs.hpke.generateKeyPair();
+    const privatePackage = {
+        initPrivateKey: await cs.hpke.exportPrivateKey(initKeys.privateKey),
+        hpkePrivateKey: await cs.hpke.exportPrivateKey(hpkeKeys.privateKey),
+        signaturePrivateKey: sigKeys.signKey,
+    };
+    const leafNodeTbs = {
+        leafNodeSource: "key_package",
+        hpkePublicKey: await cs.hpke.exportPublicKey(hpkeKeys.publicKey),
+        signaturePublicKey: sigKeys.publicKey,
+        info: { leafNodeSource: "key_package" },
+        extensions,
+        credential,
+        capabilities,
+        lifetime,
+    };
+    const tbs = {
+        version: "mls10",
+        cipherSuite: cs.name,
+        initKey: await cs.hpke.exportPublicKey(initKeys.publicKey),
+        leafNode: await signLeafNodeKeyPackage(leafNodeTbs, sigKeys.signKey, cs.signature),
+        extensions,
+    };
+    return { publicPackage: await signKeyPackage(tbs, sigKeys.signKey, cs.signature), privatePackage };
+}
+//# sourceMappingURL=keyPackage.js.map

package/dist/keyPackage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyPackage.js","sourceRoot":"","sources":["../src/keyPackage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAW,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAClH,OAAO,EAAoC,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAChH,OAAO,EAAQ,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAa,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAa,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAuB,MAAM,sBAAsB,CAAA;AACxG,OAAO,EACL,wBAAwB,EACxB,cAAc,EAGd,sBAAsB,GACvB,MAAM,eAAe,CAAA;AAatB,MAAM,CAAC,MAAM,mBAAmB,GAA2B,iBAAiB,CAC1E,CAAC,qBAAqB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC,EAC/G,CAAC,aAAa,EAAE,EAAE,CAChB;IACE,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,WAAW;IACzB,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,QAAQ;IACtB,aAAa,CAAC,UAAU;CAChB,CACb,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAA2B,WAAW,CACpE;IACE,qBAAqB;IACrB,iBAAiB;IACjB,gBAAgB;IAChB,wBAAwB;IACxB,gBAAgB,CAAC,eAAe,CAAC;CAClC,EACD,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO;IACP,WAAW;IACX,OAAO;IACP,QAAQ;IACR,UAAU;CACX,CAAC,CACH,CAAA;AAID,MAAM,CAAC,MAAM,gBAAgB,GAAwB,iBAAiB,CACpE,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EACvC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAU,CAC5D,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAwB,WAAW,CAC9D,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EACvC,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7B,GAAG,aAAa;IAChB,SAAS;CACV,CAAC,CACH,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAkB,EAAE,OAAmB,EAAE,CAAY;IACxF,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAC1G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAc,EAAE,CAAY;IACjE,OAAO,eAAe,CAAC,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;AACnH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAiB,EAAE,CAAO;IAC1D,OAAO,OAAO,CAAC,8BAA8B,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;AAC5E,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAsB,EACtB,YAA0B,EAC1B,QAAkB,EAClB,UAAuB,EACvB,EAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAA;IAEhD,MAAM,cAAc,GAAG;QACrB,cAAc,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnE,cAAc,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnE,mBAAmB,EAAE,OAAO,CAAC,OAAO;KACrC,CAAA;IAED,MAAM,WAAW,GAA0B;QACzC,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChE,kBAAkB,EAAE,OAAO,CAAC,SAAS;QACrC,IAAI,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE;QACvC,UAAU;QACV,UAAU;QACV,YAAY;QACZ,QAAQ;KACT,CAAA;IAED,MAAM,GAAG,GAAkB;QACzB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,EAAE,CAAC,IAAI;QACpB,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC1D,QAAQ,EAAE,MAAM,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC;QAClF,UAAU;KACX,CAAA;IAED,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAA;AACpG,CAAC"}

package/dist/keyPackageEqualityConfig.d.ts

@@ -0,0 +1,7 @@
+import { KeyPackage } from "./keyPackage.js";
+import { LeafNode } from "./leafNode.js";
+export interface KeyPackageEqualityConfig {
+    compareKeyPackages(a: KeyPackage, b: KeyPackage): boolean;
+    compareKeyPackageToLeafNode(a: KeyPackage, b: LeafNode): boolean;
+}
+export declare const defaultKeyPackageEqualityConfig: KeyPackageEqualityConfig;

package/dist/keyPackageEqualityConfig.js

@@ -0,0 +1,10 @@
+import { constantTimeEqual } from "./util/constantTimeCompare.js";
+export const defaultKeyPackageEqualityConfig = {
+    compareKeyPackages(a, b) {
+        return constantTimeEqual(a.leafNode.signaturePublicKey, b.leafNode.signaturePublicKey);
+    },
+    compareKeyPackageToLeafNode(a, b) {
+        return constantTimeEqual(a.leafNode.signaturePublicKey, b.signaturePublicKey);
+    },
+};
+//# sourceMappingURL=keyPackageEqualityConfig.js.map

package/dist/keyPackageEqualityConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyPackageEqualityConfig.js","sourceRoot":"","sources":["../src/keyPackageEqualityConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAOjE,MAAM,CAAC,MAAM,+BAA+B,GAA6B;IACvE,kBAAkB,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACxF,CAAC;IACD,2BAA2B,CAAC,CAAC,EAAE,CAAC;QAC9B,OAAO,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;IAC/E,CAAC;CACF,CAAA"}

package/dist/keyRetentionConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyRetentionConfig.js","sourceRoot":"","sources":["../src/keyRetentionConfig.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,wBAAwB,EAAE,EAAE;IAC5B,mBAAmB,EAAE,CAAC;IACtB,0BAA0B,EAAE,GAAG;CAChC,CAAA"}

package/dist/keySchedule.d.ts

@@ -0,0 +1,24 @@
+import { CiphersuiteImpl } from "./crypto/ciphersuite.js";
+import { Kdf } from "./crypto/kdf.js";
+import { GroupContext } from "./groupContext.js";
+export interface KeySchedule {
+    epochSecret: Uint8Array;
+    senderDataSecret: Uint8Array;
+    encryptionSecret: Uint8Array;
+    exporterSecret: Uint8Array;
+    externalSecret: Uint8Array;
+    confirmationKey: Uint8Array;
+    membershipKey: Uint8Array;
+    resumptionPsk: Uint8Array;
+    epochAuthenticator: Uint8Array;
+    initSecret: Uint8Array;
+}
+export interface EpochSecrets {
+    keySchedule: KeySchedule;
+    joinerSecret: Uint8Array;
+    welcomeSecret: Uint8Array;
+}
+export declare function mlsExporter(exporterSecret: Uint8Array, label: string, context: Uint8Array, length: number, cs: CiphersuiteImpl): Promise<Uint8Array<ArrayBufferLike>>;
+export declare function deriveKeySchedule(joinerSecret: Uint8Array, pskSecret: Uint8Array, groupContext: GroupContext, kdf: Kdf): Promise<KeySchedule>;
+export declare function initializeKeySchedule(epochSecret: Uint8Array, kdf: Kdf): Promise<KeySchedule>;
+export declare function initializeEpoch(initSecret: Uint8Array, commitSecret: Uint8Array, groupContext: GroupContext, pskSecret: Uint8Array, kdf: Kdf): Promise<EpochSecrets>;

package/dist/keySchedule.js

@@ -0,0 +1,43 @@
+import { deriveSecret, expandWithLabel } from "./crypto/kdf.js";
+import { extractEpochSecret, extractJoinerSecret } from "./groupContext.js";
+import { extractWelcomeSecret } from "./groupInfo.js";
+export async function mlsExporter(exporterSecret, label, context, length, cs) {
+    const secret = await deriveSecret(exporterSecret, label, cs.kdf);
+    const hash = await cs.hash.digest(context);
+    return expandWithLabel(secret, "exported", hash, length, cs.kdf);
+}
+export async function deriveKeySchedule(joinerSecret, pskSecret, groupContext, kdf) {
+    const epochSecret = await extractEpochSecret(groupContext, joinerSecret, kdf, pskSecret);
+    return await initializeKeySchedule(epochSecret, kdf);
+}
+export async function initializeKeySchedule(epochSecret, kdf) {
+    const newInitSecret = await deriveSecret(epochSecret, "init", kdf);
+    const senderDataSecret = await deriveSecret(epochSecret, "sender data", kdf);
+    const encryptionSecret = await deriveSecret(epochSecret, "encryption", kdf);
+    const exporterSecret = await deriveSecret(epochSecret, "exporter", kdf);
+    const externalSecret = await deriveSecret(epochSecret, "external", kdf);
+    const confirmationKey = await deriveSecret(epochSecret, "confirm", kdf);
+    const membershipKey = await deriveSecret(epochSecret, "membership", kdf);
+    const resumptionPsk = await deriveSecret(epochSecret, "resumption", kdf);
+    const epochAuthenticator = await deriveSecret(epochSecret, "authentication", kdf);
+    const newKeySchedule = {
+        epochSecret: epochSecret,
+        initSecret: newInitSecret,
+        senderDataSecret,
+        encryptionSecret,
+        exporterSecret,
+        externalSecret,
+        confirmationKey,
+        membershipKey,
+        resumptionPsk,
+        epochAuthenticator,
+    };
+    return newKeySchedule;
+}
+export async function initializeEpoch(initSecret, commitSecret, groupContext, pskSecret, kdf) {
+    const joinerSecret = await extractJoinerSecret(groupContext, initSecret, commitSecret, kdf);
+    const welcomeSecret = await extractWelcomeSecret(joinerSecret, pskSecret, kdf);
+    const newKeySchedule = await deriveKeySchedule(joinerSecret, pskSecret, groupContext, kdf);
+    return { welcomeSecret, joinerSecret, keySchedule: newKeySchedule };
+}
+//# sourceMappingURL=keySchedule.js.map

package/dist/keySchedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keySchedule.js","sourceRoot":"","sources":["../src/keySchedule.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,eAAe,EAAO,MAAM,iBAAiB,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAgB,MAAM,mBAAmB,CAAA;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAqBrD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,cAA0B,EAC1B,KAAa,EACb,OAAmB,EACnB,MAAc,EACd,EAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;IAEhE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1C,OAAO,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAwB,EACxB,SAAqB,EACrB,YAA0B,EAC1B,GAAQ;IAER,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAExF,OAAO,MAAM,qBAAqB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAuB,EAAE,GAAQ;IAC3E,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;IAClE,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC,CAAA;IAC5E,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAC3E,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IACvE,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IACvE,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IACvE,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IACxE,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IACxE,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAEjF,MAAM,cAAc,GAAgB;QAClC,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,aAAa;QACzB,gBAAgB;QAChB,gBAAgB;QAChB,cAAc;QACd,cAAc;QACd,eAAe;QACf,aAAa;QACb,aAAa;QACb,kBAAkB;KACnB,CAAA;IAED,OAAO,cAAc,CAAA;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAsB,EACtB,YAAwB,EACxB,YAA0B,EAC1B,SAAqB,EACrB,GAAQ;IAER,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAE3F,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAE9E,MAAM,cAAc,GAAgB,MAAM,iBAAiB,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;IAEvG,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA;AACrE,CAAC"}

package/dist/leafNode.d.ts

@@ -0,0 +1,78 @@
+import { Capabilities } from "./capabilities.js";
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { Credential } from "./credential.js";
+import { Signature } from "./crypto/signature.js";
+import { Extension } from "./extension.js";
+import { LeafNodeSourceName } from "./leafNodeSource.js";
+import { Lifetime } from "./lifetime.js";
+export interface LeafNodeData {
+    hpkePublicKey: Uint8Array;
+    signaturePublicKey: Uint8Array;
+    credential: Credential;
+    capabilities: Capabilities;
+}
+export declare const encodeLeafNodeData: Encoder<LeafNodeData>;
+export declare const decodeLeafNodeData: Decoder<LeafNodeData>;
+export type LeafNodeInfo = LeafNodeInfoKeyPackage | LeafNodeInfoUpdate | LeafNodeInfoCommit;
+export interface LeafNodeInfoKeyPackage {
+    leafNodeSource: "key_package";
+    lifetime: Lifetime;
+}
+export interface LeafNodeInfoUpdate {
+    leafNodeSource: "update";
+}
+export interface LeafNodeInfoCommit {
+    leafNodeSource: "commit";
+    parentHash: Uint8Array;
+}
+export declare const encodeLeafNodeInfoLifetime: Encoder<LeafNodeInfoKeyPackage>;
+export declare const encodeLeafNodeInfoUpdate: Encoder<LeafNodeInfoUpdate>;
+export declare const encodeLeafNodeInfoCommit: Encoder<LeafNodeInfoCommit>;
+export declare const encodeLeafNodeInfo: Encoder<LeafNodeInfo>;
+export declare const decodeLeafNodeInfoLifetime: Decoder<LeafNodeInfoKeyPackage>;
+export declare const decodeLeafNodeInfoCommit: Decoder<LeafNodeInfoCommit>;
+export declare const decodeLeafNodeInfo: Decoder<LeafNodeInfo>;
+export interface LeafNodeExtensions {
+    extensions: Extension[];
+}
+export declare const encodeLeafNodeExtensions: Encoder<LeafNodeExtensions>;
+export declare const decodeLeafNodeExtensions: Decoder<LeafNodeExtensions>;
+type GroupIdLeafIndex = {
+    leafNodeSource: Exclude<LeafNodeSourceName, "key_package">;
+    groupId: Uint8Array;
+    leafIndex: number;
+};
+export declare const encodeGroupIdLeafIndex: Encoder<GroupIdLeafIndex>;
+export type LeafNodeGroupInfo = GroupIdLeafIndex | {
+    leafNodeSource: "key_package";
+};
+export declare const encodeLeafNodeGroupInfo: Encoder<LeafNodeGroupInfo>;
+export type LeafNodeTBS = LeafNodeData & LeafNodeInfo & LeafNodeExtensions & {
+    info: LeafNodeGroupInfo;
+};
+export type LeafNodeTBSCommit = LeafNodeData & LeafNodeInfoCommit & LeafNodeExtensions & {
+    info: GroupIdLeafIndex;
+};
+export type LeafNodeTBSKeyPackage = LeafNodeData & LeafNodeInfoKeyPackage & LeafNodeExtensions & {
+    info: {
+        leafNodeSource: "key_package";
+    };
+};
+export declare const encodeLeafNodeTBS: Encoder<LeafNodeTBS>;
+export type LeafNode = LeafNodeData & LeafNodeInfo & LeafNodeExtensions & {
+    signature: Uint8Array;
+};
+export declare const encodeLeafNode: Encoder<LeafNode>;
+export declare const decodeLeafNode: Decoder<LeafNode>;
+export type LeafNodeKeyPackage = LeafNode & LeafNodeInfoKeyPackage;
+export declare const decodeLeafNodeKeyPackage: Decoder<LeafNodeKeyPackage>;
+export type LeafNodeCommit = LeafNode & LeafNodeInfoCommit;
+export declare const decodeLeafNodeCommit: Decoder<LeafNodeCommit>;
+export type LeafNodeUpdate = LeafNode & LeafNodeInfoUpdate;
+export declare const decodeLeafNodeUpdate: Decoder<LeafNodeUpdate>;
+export declare function signLeafNodeCommit(tbs: LeafNodeTBSCommit, signaturePrivateKey: Uint8Array, sig: Signature): Promise<LeafNodeCommit>;
+export declare function signLeafNodeKeyPackage(tbs: LeafNodeTBSKeyPackage, signaturePrivateKey: Uint8Array, sig: Signature): Promise<LeafNodeKeyPackage>;
+export declare function verifyLeafNodeSignature(leaf: LeafNode, groupId: Uint8Array, leafIndex: number, sig: Signature): Promise<boolean>;
+export declare function verifyLeafNodeSignatureKeyPackage(leaf: LeafNodeKeyPackage, sig: Signature): Promise<boolean>;
+export {};