ts-mls 1.1.0 → 1.3.1

package/dist/crypto/implementation/default/makeHashImpl.js

@@ -0,0 +1,23 @@
+import { bytesToBuffer } from "../../../util/byteArray.js";
+export function makeHashImpl(sc, h) {
+    return {
+        async digest(data) {
+            const result = await sc.digest(h, bytesToBuffer(data));
+            return new Uint8Array(result);
+        },
+        async mac(key, data) {
+            const result = await sc.sign("HMAC", await importMacKey(key, h), bytesToBuffer(data));
+            return new Uint8Array(result);
+        },
+        async verifyMac(key, mac, data) {
+            return sc.verify("HMAC", await importMacKey(key, h), bytesToBuffer(mac), bytesToBuffer(data));
+        },
+    };
+}
+function importMacKey(rawKey, h) {
+    return crypto.subtle.importKey("raw", bytesToBuffer(rawKey), {
+        name: "HMAC",
+        hash: { name: h },
+    }, false, ["sign", "verify"]);
+}
+//# sourceMappingURL=makeHashImpl.js.map

package/dist/crypto/implementation/default/makeHashImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeHashImpl.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/default/makeHashImpl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,UAAU,YAAY,CAAC,EAAgB,EAAE,CAAgB;IAC7D,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;YACtD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI;YACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;YACrF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI;YAC5B,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/F,CAAC;KACF,CAAA;AACH,CAAC;AACD,SAAS,YAAY,CAAC,MAAkB,EAAE,CAAgB;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,aAAa,CAAC,MAAM,CAAC,EACrB;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;KAClB,EACD,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAA;AACH,CAAC"}

package/dist/crypto/implementation/default/makeHpke.d.ts

@@ -0,0 +1,2 @@
+import { Hpke, HpkeAlgorithm } from "../../hpke.js";
+export declare function makeHpke(hpkealg: HpkeAlgorithm): Promise<Hpke>;

package/dist/crypto/implementation/default/makeHpke.js

@@ -0,0 +1,15 @@
+import { CipherSuite } from "@hpke/core";
+import { makeGenericHpke } from "../hpke.js";
+import { makeAead } from "./makeAead.js";
+import { makeKdf } from "./makeKdfImpl.js";
+import { makeDhKem } from "./makeDhKem.js";
+export async function makeHpke(hpkealg) {
+    const [aead, aeadInterface] = await makeAead(hpkealg.aead);
+    const cs = new CipherSuite({
+        kem: await makeDhKem(hpkealg.kem),
+        kdf: makeKdf(hpkealg.kdf),
+        aead: aeadInterface,
+    });
+    return makeGenericHpke(hpkealg, aead, cs);
+}
+//# sourceMappingURL=makeHpke.js.map

package/dist/crypto/implementation/default/makeHpke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeHpke.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/default/makeHpke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAsB;IACnD,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC;QACzB,GAAG,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;QACjC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACzB,IAAI,EAAE,aAAa;KACpB,CAAC,CAAA;IAEF,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;AAC3C,CAAC"}

package/dist/crypto/implementation/default/makeKdfImpl.d.ts

@@ -0,0 +1,4 @@
+import { KdfInterface } from "@hpke/core";
+import { Kdf, KdfAlgorithm } from "../../kdf.js";
+export declare function makeKdfImpl(k: KdfInterface): Kdf;
+export declare function makeKdf(kdfAlg: KdfAlgorithm): KdfInterface;

package/dist/crypto/implementation/default/makeKdfImpl.js

@@ -0,0 +1,26 @@
+import { HkdfSha256, HkdfSha384, HkdfSha512 } from "@hpke/core";
+import { bytesToBuffer } from "../../../util/byteArray.js";
+export function makeKdfImpl(k) {
+    return {
+        async extract(salt, ikm) {
+            const result = await k.extract(bytesToBuffer(salt), bytesToBuffer(ikm));
+            return new Uint8Array(result);
+        },
+        async expand(prk, info, len) {
+            const result = await k.expand(bytesToBuffer(prk), bytesToBuffer(info), len);
+            return new Uint8Array(result);
+        },
+        size: k.hashSize,
+    };
+}
+export function makeKdf(kdfAlg) {
+    switch (kdfAlg) {
+        case "HKDF-SHA256":
+            return new HkdfSha256();
+        case "HKDF-SHA384":
+            return new HkdfSha384();
+        case "HKDF-SHA512":
+            return new HkdfSha512();
+    }
+}
+//# sourceMappingURL=makeKdfImpl.js.map

package/dist/crypto/implementation/default/makeKdfImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeKdfImpl.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/default/makeKdfImpl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,UAAU,WAAW,CAAC,CAAe;IACzC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAgB,EAAE,GAAe;YAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;YACvE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAe,EAAE,IAAgB,EAAE,GAAW;YACzD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;YAC3E,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QACD,IAAI,EAAE,CAAC,CAAC,QAAQ;KACjB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,MAAoB;IAC1C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,IAAI,UAAU,EAAE,CAAA;QACzB,KAAK,aAAa;YAChB,OAAO,IAAI,UAAU,EAAE,CAAA;QACzB,KAAK,aAAa;YAChB,OAAO,IAAI,UAAU,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC"}

package/dist/crypto/implementation/default/makeNobleSignatureImpl.d.ts

@@ -0,0 +1,2 @@
+import { SignatureAlgorithm, Signature } from "../../signature.js";
+export declare function makeNobleSignatureImpl(alg: SignatureAlgorithm): Promise<Signature>;

package/dist/crypto/implementation/default/makeNobleSignatureImpl.js

@@ -0,0 +1,120 @@
+import { DependencyError } from "../../../mlsError.js";
+export async function makeNobleSignatureImpl(alg) {
+    switch (alg) {
+        case "Ed25519":
+            try {
+                const { ed25519 } = await import("@noble/curves/ed25519.js");
+                return {
+                    async sign(signKey, message) {
+                        return ed25519.sign(message, signKey);
+                    },
+                    async verify(publicKey, message, signature) {
+                        return ed25519.verify(signature, message, publicKey);
+                    },
+                    async keygen() {
+                        const signKey = ed25519.utils.randomSecretKey();
+                        return { signKey, publicKey: ed25519.getPublicKey(signKey) };
+                    },
+                };
+            }
+            catch (err) {
+                throw new DependencyError("Optional dependency '@noble/curves' is not installed. Please install it to use this feature.");
+            }
+        case "Ed448":
+            try {
+                const { ed448 } = await import("@noble/curves/ed448.js");
+                return {
+                    async sign(signKey, message) {
+                        return ed448.sign(message, signKey);
+                    },
+                    async verify(publicKey, message, signature) {
+                        return ed448.verify(signature, message, publicKey);
+                    },
+                    async keygen() {
+                        const signKey = ed448.utils.randomSecretKey();
+                        return { signKey, publicKey: ed448.getPublicKey(signKey) };
+                    },
+                };
+            }
+            catch (err) {
+                throw new DependencyError("Optional dependency '@noble/curves' is not installed. Please install it to use this feature.");
+            }
+        case "P256":
+            try {
+                const { p256 } = await import("@noble/curves/nist.js");
+                return {
+                    async sign(signKey, message) {
+                        return p256.sign(message, signKey, { prehash: true, format: "der", lowS: false });
+                    },
+                    async verify(publicKey, message, signature) {
+                        return p256.verify(signature, message, publicKey, { prehash: true, format: "der", lowS: false });
+                    },
+                    async keygen() {
+                        const signKey = p256.utils.randomSecretKey();
+                        return { signKey, publicKey: p256.getPublicKey(signKey) };
+                    },
+                };
+            }
+            catch (err) {
+                throw new DependencyError("Optional dependency '@noble/curves' is not installed. Please install it to use this feature.");
+            }
+        case "P384":
+            try {
+                const { p384 } = await import("@noble/curves/nist.js");
+                return {
+                    async sign(signKey, message) {
+                        return p384.sign(message, signKey, { prehash: true, format: "der", lowS: false });
+                    },
+                    async verify(publicKey, message, signature) {
+                        return p384.verify(signature, message, publicKey, { prehash: true, format: "der", lowS: false });
+                    },
+                    async keygen() {
+                        const signKey = p384.utils.randomSecretKey();
+                        return { signKey, publicKey: p384.getPublicKey(signKey) };
+                    },
+                };
+            }
+            catch (err) {
+                throw new DependencyError("Optional dependency '@noble/curves' is not installed. Please install it to use this feature.");
+            }
+        case "P521":
+            try {
+                const { p521 } = await import("@noble/curves/nist.js");
+                return {
+                    async sign(signKey, message) {
+                        return p521.sign(message, signKey, { prehash: true, format: "der", lowS: false });
+                    },
+                    async verify(publicKey, message, signature) {
+                        return p521.verify(signature, message, publicKey, { prehash: true, format: "der", lowS: false });
+                    },
+                    async keygen() {
+                        const signKey = p521.utils.randomSecretKey();
+                        return { signKey, publicKey: p521.getPublicKey(signKey) };
+                    },
+                };
+            }
+            catch (err) {
+                throw new DependencyError("Optional dependency '@noble/curves' is not installed. Please install it to use this feature.");
+            }
+        case "ML-DSA-87":
+            try {
+                const { ml_dsa87 } = await import("@noble/post-quantum/ml-dsa.js");
+                return {
+                    async sign(signKey, message) {
+                        return ml_dsa87.sign(message, signKey);
+                    },
+                    async verify(publicKey, message, signature) {
+                        return ml_dsa87.verify(signature, message, publicKey);
+                    },
+                    async keygen() {
+                        const keys = ml_dsa87.keygen(crypto.getRandomValues(new Uint8Array(32)));
+                        return { signKey: keys.secretKey, publicKey: keys.publicKey };
+                    },
+                };
+            }
+            catch (err) {
+                throw new DependencyError("Optional dependency '@noble/post-quantum' is not installed. Please install it to use this feature.");
+            }
+    }
+}
+//# sourceMappingURL=makeNobleSignatureImpl.js.map

package/dist/crypto/implementation/default/makeNobleSignatureImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeNobleSignatureImpl.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/default/makeNobleSignatureImpl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAGtD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAuB;IAClE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAA;gBAC5D,OAAO;oBACL,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;wBACzB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBACvC,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS;wBACxC,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;oBACtD,CAAC;oBACD,KAAK,CAAC,MAAM;wBACV,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;wBAC/C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;oBAC9D,CAAC;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACvB,8FAA8F,CAC/F,CAAA;YACH,CAAC;QAEH,KAAK,OAAO;YACV,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAA;gBACxD,OAAO;oBACL,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;wBACzB,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBACrC,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS;wBACxC,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;oBACpD,CAAC;oBACD,KAAK,CAAC,MAAM;wBACV,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;wBAC7C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;oBAC5D,CAAC;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACvB,8FAA8F,CAC/F,CAAA;YACH,CAAC;QAEH,KAAK,MAAM;YACT,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;gBACtD,OAAO;oBACL,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;wBACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;oBACnF,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS;wBACxC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;oBAClG,CAAC;oBACD,KAAK,CAAC,MAAM;wBACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;wBAC5C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;oBAC3D,CAAC;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACvB,8FAA8F,CAC/F,CAAA;YACH,CAAC;QACH,KAAK,MAAM;YACT,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;gBACtD,OAAO;oBACL,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;wBACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;oBACnF,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS;wBACxC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;oBAClG,CAAC;oBACD,KAAK,CAAC,MAAM;wBACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;wBAC5C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;oBAC3D,CAAC;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACvB,8FAA8F,CAC/F,CAAA;YACH,CAAC;QACH,KAAK,MAAM;YACT,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;gBACtD,OAAO;oBACL,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;wBACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;oBACnF,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS;wBACxC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;oBAClG,CAAC;oBACD,KAAK,CAAC,MAAM;wBACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;wBAC5C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;oBAC3D,CAAC;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACvB,8FAA8F,CAC/F,CAAA;YACH,CAAC;QACH,KAAK,WAAW;YACd,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAA;gBAClE,OAAO;oBACL,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;wBACzB,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBACxC,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS;wBACxC,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;oBACvD,CAAC;oBACD,KAAK,CAAC,MAAM;wBACV,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;wBACxE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;oBAC/D,CAAC;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACvB,oGAAoG,CACrG,CAAA;YACH,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/crypto/implementation/default/provider.d.ts

@@ -0,0 +1,4 @@
+import { Ciphersuite, CiphersuiteImpl } from "../../ciphersuite.js";
+export declare const defaultCryptoProvider: {
+    getCiphersuiteImpl(cs: Ciphersuite): Promise<CiphersuiteImpl>;
+};

package/dist/crypto/implementation/default/provider.js

@@ -0,0 +1,20 @@
+import { makeHashImpl } from "./makeHashImpl.js";
+import { makeHpke } from "./makeHpke.js";
+import { makeKdf } from "./makeKdfImpl.js";
+import { makeKdfImpl } from "./makeKdfImpl.js";
+import { defaultRng } from "./rng.js";
+import { makeNobleSignatureImpl } from "./makeNobleSignatureImpl.js";
+export const defaultCryptoProvider = {
+    async getCiphersuiteImpl(cs) {
+        const sc = crypto.subtle;
+        return {
+            kdf: makeKdfImpl(makeKdf(cs.hpke.kdf)),
+            hash: makeHashImpl(sc, cs.hash),
+            signature: await makeNobleSignatureImpl(cs.signature),
+            hpke: await makeHpke(cs.hpke),
+            rng: defaultRng,
+            name: cs.name,
+        };
+    },
+};
+//# sourceMappingURL=provider.js.map

package/dist/crypto/implementation/default/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/default/provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEpE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,CAAC,kBAAkB,CAAC,EAAe;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAA;QACxB,OAAO;YACL,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;YAC/B,SAAS,EAAE,MAAM,sBAAsB,CAAC,EAAE,CAAC,SAAS,CAAC;YACrD,IAAI,EAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC;YAC7B,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;SACd,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/crypto/implementation/default/rng.d.ts

@@ -0,0 +1,2 @@
+import { Rng } from "../../rng.js";
+export declare const defaultRng: Rng;

package/dist/crypto/implementation/default/rng.js

@@ -0,0 +1,6 @@
+export const defaultRng = {
+    randomBytes(n) {
+        return crypto.getRandomValues(new Uint8Array(n));
+    },
+};
+//# sourceMappingURL=rng.js.map

package/dist/crypto/implementation/default/rng.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rng.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/default/rng.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,UAAU,GAAQ;IAC7B,WAAW,CAAC,CAAC;QACX,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;CACF,CAAA"}

package/dist/crypto/implementation/hpke.d.ts

@@ -0,0 +1,4 @@
+import { CipherSuite } from "@hpke/core";
+import { Aead } from "../../crypto/aead.js";
+import { HpkeAlgorithm, Hpke } from "../../crypto/hpke.js";
+export declare function makeGenericHpke(hpkealg: HpkeAlgorithm, aead: Aead, cs: CipherSuite): Promise<Hpke>;

package/dist/crypto/implementation/hpke.js

@@ -0,0 +1,92 @@
+import { bytesToBuffer, concatUint8Arrays } from "../../util/byteArray.js";
+import { CryptoError } from "../../mlsError.js";
+export async function makeGenericHpke(hpkealg, aead, cs) {
+    return {
+        async open(privateKey, kemOutput, ciphertext, info, aad) {
+            try {
+                const result = await cs.open({ recipientKey: privateKey, enc: bytesToBuffer(kemOutput), info: bytesToBuffer(info) }, bytesToBuffer(ciphertext), aad ? bytesToBuffer(aad) : new ArrayBuffer());
+                return new Uint8Array(result);
+            }
+            catch (e) {
+                throw new CryptoError(`${e}`);
+            }
+        },
+        async seal(publicKey, plaintext, info, aad) {
+            const result = await cs.seal({ recipientPublicKey: publicKey, info: bytesToBuffer(info) }, bytesToBuffer(plaintext), aad ? bytesToBuffer(aad) : new ArrayBuffer());
+            return {
+                ct: new Uint8Array(result.ct),
+                enc: new Uint8Array(result.enc),
+            };
+        },
+        async exportSecret(publicKey, exporterContext, length, info) {
+            const context = await cs.createSenderContext({ recipientPublicKey: publicKey, info: bytesToBuffer(info) });
+            return {
+                enc: new Uint8Array(context.enc),
+                secret: new Uint8Array(await context.export(bytesToBuffer(exporterContext), length)),
+            };
+        },
+        async importSecret(privateKey, exporterContext, kemOutput, length, info) {
+            try {
+                const context = await cs.createRecipientContext({
+                    recipientKey: privateKey,
+                    info: bytesToBuffer(info),
+                    enc: bytesToBuffer(kemOutput),
+                });
+                return new Uint8Array(await context.export(bytesToBuffer(exporterContext), length));
+            }
+            catch (e) {
+                throw new CryptoError(`${e}`);
+            }
+        },
+        async importPrivateKey(k) {
+            try {
+                // See https://github.com/mlswg/mls-implementations/issues/176#issuecomment-1817043142
+                const key = hpkealg.kem === "DHKEM-P521-HKDF-SHA512" ? prepadPrivateKeyP521(k) : k;
+                return (await cs.kem.deserializePrivateKey(bytesToBuffer(key)));
+            }
+            catch (e) {
+                throw new CryptoError(`${e}`);
+            }
+        },
+        async importPublicKey(k) {
+            try {
+                return (await cs.kem.deserializePublicKey(bytesToBuffer(k)));
+            }
+            catch (e) {
+                throw new CryptoError(`${e}`);
+            }
+        },
+        async exportPublicKey(k) {
+            return new Uint8Array(await cs.kem.serializePublicKey(k));
+        },
+        async exportPrivateKey(k) {
+            return new Uint8Array(await cs.kem.serializePrivateKey(k));
+        },
+        async encryptAead(key, nonce, aad, plaintext) {
+            return aead.encrypt(key, nonce, aad ? aad : new Uint8Array(), plaintext);
+        },
+        async decryptAead(key, nonce, aad, ciphertext) {
+            try {
+                return await aead.decrypt(key, nonce, aad ? aad : new Uint8Array(), ciphertext);
+            }
+            catch (e) {
+                throw new CryptoError(`${e}`);
+            }
+        },
+        async deriveKeyPair(ikm) {
+            const kp = await cs.kem.deriveKeyPair(bytesToBuffer(ikm));
+            return { privateKey: kp.privateKey, publicKey: kp.publicKey };
+        },
+        async generateKeyPair() {
+            const kp = await cs.kem.generateKeyPair();
+            return { privateKey: kp.privateKey, publicKey: kp.publicKey };
+        },
+        keyLength: cs.aead.keySize,
+        nonceLength: cs.aead.nonceSize,
+    };
+}
+function prepadPrivateKeyP521(k) {
+    const lengthDifference = 66 - k.byteLength;
+    return concatUint8Arrays(new Uint8Array(lengthDifference), k);
+}
+//# sourceMappingURL=hpke.js.map

package/dist/crypto/implementation/hpke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke.js","sourceRoot":"","sources":["../../../src/crypto/implementation/hpke.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAsB,EAAE,IAAU,EAAE,EAAe;IACvF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG;YACrD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAC1B,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EACtF,aAAa,CAAC,UAAU,CAAC,EACzB,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAC7C,CAAA;gBACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG;YACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAC1B,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAC5D,aAAa,CAAC,SAAS,CAAC,EACxB,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAC7C,CAAA;YACD,OAAO;gBACL,EAAE,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,GAAG,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;aAChC,CAAA;QACH,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC1G,OAAO;gBACL,GAAG,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;gBAChC,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;aACrF,CAAA;QACH,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI;YACrE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC;oBAC9C,YAAY,EAAE,UAAU;oBACxB,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;oBACzB,GAAG,EAAE,aAAa,CAAC,SAAS,CAAC;iBAC9B,CAAC,CAAA;gBACF,OAAO,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;YACrF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACtB,IAAI,CAAC;gBACH,sFAAsF;gBACtF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBAClF,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAe,CAAA;YAC/E,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAc,CAAA;YAC3E,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,CAAC;YACrB,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACtB,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS;YAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,EAAE,SAAS,CAAC,CAAA;QAC1E,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU;YAC3C,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,EAAE,UAAU,CAAC,CAAA;YACjF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,GAAG;YACrB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;YACzD,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,UAAwB,EAAE,SAAS,EAAE,EAAE,CAAC,SAAsB,EAAE,CAAA;QAC1F,CAAC;QACD,KAAK,CAAC,eAAe;YACnB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA;YACzC,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,UAAwB,EAAE,SAAS,EAAE,EAAE,CAAC,SAAsB,EAAE,CAAA;QAC1F,CAAC;QACD,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO;QAC1B,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS;KAC/B,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAa;IACzC,MAAM,gBAAgB,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAA;IAC1C,OAAO,iBAAiB,CAAC,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAA;AAC/D,CAAC"}

package/dist/crypto/implementation/noble/makeAead.d.ts

@@ -0,0 +1,3 @@
+import { AeadInterface } from "@hpke/core";
+import { Aead, AeadAlgorithm } from "../../aead.js";
+export declare function makeAead(aeadAlg: AeadAlgorithm): Promise<[Aead, AeadInterface]>;

package/dist/crypto/implementation/noble/makeAead.js

@@ -0,0 +1,59 @@
+import { Aes128Gcm, Aes256Gcm } from "@hpke/core";
+import { DependencyError } from "../../../mlsError.js";
+import { gcm } from "@noble/ciphers/aes.js";
+export async function makeAead(aeadAlg) {
+    switch (aeadAlg) {
+        case "AES128GCM":
+            return [
+                {
+                    encrypt(key, nonce, aad, plaintext) {
+                        return encryptAesGcm(key, nonce, aad, plaintext);
+                    },
+                    decrypt(key, nonce, aad, ciphertext) {
+                        return decryptAesGcm(key, nonce, aad, ciphertext);
+                    },
+                },
+                new Aes128Gcm(),
+            ];
+        case "AES256GCM":
+            return [
+                {
+                    encrypt(key, nonce, aad, plaintext) {
+                        return encryptAesGcm(key, nonce, aad, plaintext);
+                    },
+                    decrypt(key, nonce, aad, ciphertext) {
+                        return decryptAesGcm(key, nonce, aad, ciphertext);
+                    },
+                },
+                new Aes256Gcm(),
+            ];
+        case "CHACHA20POLY1305":
+            try {
+                const { Chacha20Poly1305 } = await import("@hpke/chacha20poly1305");
+                const { chacha20poly1305 } = await import("@noble/ciphers/chacha.js");
+                return [
+                    {
+                        async encrypt(key, nonce, aad, plaintext) {
+                            return chacha20poly1305(key, nonce, aad).encrypt(plaintext);
+                        },
+                        async decrypt(key, nonce, aad, ciphertext) {
+                            return chacha20poly1305(key, nonce, aad).decrypt(ciphertext);
+                        },
+                    },
+                    new Chacha20Poly1305(),
+                ];
+            }
+            catch (err) {
+                throw new DependencyError("Optional dependency '@hpke/chacha20poly1305' is not installed. Please install it to use this feature.");
+            }
+    }
+}
+async function encryptAesGcm(key, nonce, aad, plaintext) {
+    const cipher = gcm(key, nonce, aad);
+    return cipher.encrypt(plaintext);
+}
+async function decryptAesGcm(key, nonce, aad, ciphertext) {
+    const cipher = gcm(key, nonce, aad);
+    return cipher.decrypt(ciphertext);
+}
+//# sourceMappingURL=makeAead.js.map

package/dist/crypto/implementation/noble/makeAead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeAead.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/makeAead.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAA;AAE3C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAsB;IACnD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,WAAW;YACd,OAAO;gBACL;oBACE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS;wBAChC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;oBAClD,CAAC;oBACD,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU;wBACjC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;oBACnD,CAAC;iBACF;gBACD,IAAI,SAAS,EAAE;aAChB,CAAA;QACH,KAAK,WAAW;YACd,OAAO;gBACL;oBACE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS;wBAChC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;oBAClD,CAAC;oBACD,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU;wBACjC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;oBACnD,CAAC;iBACF;gBACD,IAAI,SAAS,EAAE;aAChB,CAAA;QACH,KAAK,kBAAkB;YACrB,IAAI,CAAC;gBACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAA;gBACnE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAA;gBACrE,OAAO;oBACL;wBACE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS;4BACtC,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;wBAC7D,CAAC;wBACD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU;4BACvC,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;wBAC9D,CAAC;qBACF;oBACD,IAAI,gBAAgB,EAAE;iBACvB,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACvB,uGAAuG,CACxG,CAAA;YACH,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAe,EACf,KAAiB,EACjB,GAAe,EACf,SAAqB;IAErB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IACnC,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AAClC,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAe,EACf,KAAiB,EACjB,GAAe,EACf,UAAsB;IAEtB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IACnC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;AACnC,CAAC"}

package/dist/crypto/implementation/noble/makeDhKem.d.ts

@@ -0,0 +1 @@
+export * from "../default/makeDhKem.js";

package/dist/crypto/implementation/noble/makeDhKem.js

@@ -0,0 +1,2 @@
+export * from "../default/makeDhKem.js";
+//# sourceMappingURL=makeDhKem.js.map

package/dist/crypto/implementation/noble/makeDhKem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeDhKem.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/makeDhKem.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAA"}

package/dist/crypto/implementation/noble/makeHashImpl.d.ts

@@ -0,0 +1,2 @@
+import { HashAlgorithm, Hash } from "../../hash.js";
+export declare function makeHashImpl(h: HashAlgorithm): Hash;

package/dist/crypto/implementation/noble/makeHashImpl.js

@@ -0,0 +1,35 @@
+import { sha256, sha384, sha512 } from "@noble/hashes/sha2.js";
+import { hmac } from "@noble/hashes/hmac.js";
+export function makeHashImpl(h) {
+    return {
+        async digest(data) {
+            switch (h) {
+                case "SHA-256":
+                    return sha256(data);
+                case "SHA-384":
+                    return sha384(data);
+                case "SHA-512":
+                    return sha512(data);
+                default:
+                    throw new Error(`Unsupported hash algorithm: ${h}`);
+            }
+        },
+        async mac(key, data) {
+            switch (h) {
+                case "SHA-256":
+                    return hmac(sha256, key, data);
+                case "SHA-384":
+                    return hmac(sha384, key, data);
+                case "SHA-512":
+                    return hmac(sha512, key, data);
+                default:
+                    throw new Error(`Unsupported hash algorithm: ${h}`);
+            }
+        },
+        async verifyMac(key, mac, data) {
+            const expectedMac = await this.mac(key, data);
+            return mac.length === expectedMac.length && mac.every((byte, i) => byte === expectedMac[i]);
+        },
+    };
+}
+//# sourceMappingURL=makeHashImpl.js.map

package/dist/crypto/implementation/noble/makeHashImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeHashImpl.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/makeHashImpl.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAE5C,MAAM,UAAU,YAAY,CAAC,CAAgB;IAC3C,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,SAAS;oBACZ,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;gBACrB,KAAK,SAAS;oBACZ,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;gBACrB,KAAK,SAAS;oBACZ,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;gBACrB;oBACE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAA;YACvD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI;YACjB,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBAChC,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBAChC,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBAChC;oBACE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAA;YACvD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI;YAC5B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC7C,OAAO,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7F,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/crypto/implementation/noble/makeHpke.d.ts

@@ -0,0 +1,2 @@
+import { Hpke, HpkeAlgorithm } from "../../hpke.js";
+export declare function makeHpke(hpkealg: HpkeAlgorithm): Promise<Hpke>;

package/dist/crypto/implementation/noble/makeHpke.js

@@ -0,0 +1,15 @@
+import { CipherSuite } from "@hpke/core";
+import { makeGenericHpke } from "../hpke.js";
+import { makeAead } from "./makeAead.js";
+import { makeKdf } from "./makeKdfImpl.js";
+import { makeDhKem } from "./makeDhKem.js";
+export async function makeHpke(hpkealg) {
+    const [aead, aeadInterface] = await makeAead(hpkealg.aead);
+    const cs = new CipherSuite({
+        kem: await makeDhKem(hpkealg.kem),
+        kdf: makeKdf(hpkealg.kdf),
+        aead: aeadInterface,
+    });
+    return makeGenericHpke(hpkealg, aead, cs);
+}
+//# sourceMappingURL=makeHpke.js.map

package/dist/crypto/implementation/noble/makeHpke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeHpke.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/makeHpke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAsB;IACnD,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC;QACzB,GAAG,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;QACjC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACzB,IAAI,EAAE,aAAa;KACpB,CAAC,CAAA;IAEF,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;AAC3C,CAAC"}

package/dist/crypto/implementation/noble/makeKdfImpl.d.ts

@@ -0,0 +1 @@
+export * from "../default/makeKdfImpl.js";

package/dist/crypto/implementation/noble/makeKdfImpl.js

@@ -0,0 +1,2 @@
+export * from "../default/makeKdfImpl.js";
+//# sourceMappingURL=makeKdfImpl.js.map

package/dist/crypto/implementation/noble/makeKdfImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeKdfImpl.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/makeKdfImpl.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAA"}

package/dist/crypto/implementation/noble/makeNobleSignatureImpl.d.ts

@@ -0,0 +1 @@
+export * from "../default/makeNobleSignatureImpl.js";

package/dist/crypto/implementation/noble/makeNobleSignatureImpl.js

@@ -0,0 +1,2 @@
+export * from "../default/makeNobleSignatureImpl.js";
+//# sourceMappingURL=makeNobleSignatureImpl.js.map

package/dist/crypto/implementation/noble/makeNobleSignatureImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeNobleSignatureImpl.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/makeNobleSignatureImpl.ts"],"names":[],"mappings":"AAAA,cAAc,sCAAsC,CAAA"}

package/dist/crypto/implementation/noble/provider.d.ts

@@ -0,0 +1,4 @@
+import { Ciphersuite, CiphersuiteImpl } from "../../ciphersuite.js";
+export declare const nobleCryptoProvider: {
+    getCiphersuiteImpl(cs: Ciphersuite): Promise<CiphersuiteImpl>;
+};

package/dist/crypto/implementation/noble/provider.js

@@ -0,0 +1,18 @@
+import { makeHashImpl } from "./makeHashImpl.js";
+import { makeNobleSignatureImpl } from "./makeNobleSignatureImpl.js";
+import { makeHpke } from "./makeHpke.js";
+import { makeKdfImpl, makeKdf } from "./makeKdfImpl.js";
+import { defaultRng } from "./rng.js";
+export const nobleCryptoProvider = {
+    async getCiphersuiteImpl(cs) {
+        return {
+            kdf: makeKdfImpl(makeKdf(cs.hpke.kdf)),
+            hash: makeHashImpl(cs.hash),
+            signature: await makeNobleSignatureImpl(cs.signature),
+            hpke: await makeHpke(cs.hpke),
+            rng: defaultRng,
+            name: cs.name,
+        };
+    },
+};
+//# sourceMappingURL=provider.js.map

package/dist/crypto/implementation/noble/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAErC,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,CAAC,kBAAkB,CAAC,EAAe;QACtC,OAAO;YACL,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC;YAC3B,SAAS,EAAE,MAAM,sBAAsB,CAAC,EAAE,CAAC,SAAS,CAAC;YACrD,IAAI,EAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC;YAC7B,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;SACd,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/crypto/implementation/noble/rng.d.ts

@@ -0,0 +1 @@
+export * from "../default/rng.js";

package/dist/crypto/implementation/noble/rng.js

@@ -0,0 +1,2 @@
+export * from "../default/rng.js";
+//# sourceMappingURL=rng.js.map

package/dist/crypto/implementation/noble/rng.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rng.js","sourceRoot":"","sources":["../../../../src/crypto/implementation/noble/rng.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA"}

package/dist/crypto/kdf.d.ts

@@ -0,0 +1,9 @@
+export interface Kdf {
+    extract(salt: Uint8Array, ikm: Uint8Array): Promise<Uint8Array>;
+    expand(prk: Uint8Array, info: Uint8Array, len: number): Promise<Uint8Array>;
+    size: number;
+}
+export type KdfAlgorithm = "HKDF-SHA256" | "HKDF-SHA384" | "HKDF-SHA512";
+export declare function expandWithLabel(secret: Uint8Array, label: string, context: Uint8Array, length: number, kdf: Kdf): Promise<Uint8Array>;
+export declare function deriveSecret(secret: Uint8Array, label: string, kdf: Kdf): Promise<Uint8Array>;
+export declare function deriveTreeSecret(secret: Uint8Array, label: string, generation: number, length: number, kdf: Kdf): Promise<Uint8Array>;