xypriss 1.0.0 → 1.1.0

package/dist/cjs/mods/security/src/components/side-channel.js

@@ -0,0 +1,146 @@
+'use strict';
+
+/**
+ * Side-Channel Attack Protection Module
+ *
+ * This module provides protection against various side-channel attacks:
+ * - Timing attacks: Ensures operations take constant time regardless of input
+ * - Cache attacks: Implements cache-resistant operations
+ * - Power analysis: Reduces power analysis vectors through balanced operations
+ * - Fault injection: Detects and mitigates fault injection attempts
+ */
+/**
+ * Performs a constant-time comparison of two strings or arrays
+ * Prevents timing attacks by ensuring the comparison takes the same amount of time
+ * regardless of how many characters match
+ *
+ * @param a - First string or array to compare
+ * @param b - Second string or array to compare
+ * @returns True if the inputs are equal, false otherwise
+ */
+function constantTimeEqual(a, b) {
+    // Convert strings to Uint8Array if needed
+    const bufA = typeof a === "string" ? new TextEncoder().encode(a) : a;
+    const bufB = typeof b === "string" ? new TextEncoder().encode(b) : b;
+    // If lengths differ, return false but still do the full comparison
+    // to maintain constant time
+    const result = bufA.length === bufB.length ? 1 : 0;
+    // XOR each byte and OR the result
+    // This ensures we always process all bytes regardless of mismatches
+    let diff = 0;
+    const len = Math.max(bufA.length, bufB.length);
+    for (let i = 0; i < len; i++) {
+        // Use 0 for indices beyond array length
+        const byteA = i < bufA.length ? bufA[i] : 0;
+        const byteB = i < bufB.length ? bufB[i] : 0;
+        // XOR the bytes and OR with the running diff
+        diff |= byteA ^ byteB;
+    }
+    // Return true only if lengths match AND all bytes match
+    return diff === 0 && result === 1;
+}
+/**
+ * Implements a secure modular exponentiation algorithm resistant to timing attacks
+ * Used for cryptographic operations like RSA and Diffie-Hellman
+ *
+ * @param base - Base value
+ * @param exponent - Exponent value
+ * @param modulus - Modulus value
+ * @returns (base^exponent) mod modulus
+ */
+function secureModPow(base, exponent, modulus) {
+    if (modulus <= 0n) {
+        throw new Error("Modulus must be positive");
+    }
+    if (exponent < 0n) {
+        throw new Error("Negative exponents are not supported");
+    }
+    // Handle special cases
+    if (modulus === 1n)
+        return 0n;
+    if (exponent === 0n)
+        return 1n;
+    // Ensure base is within modulus range
+    base = base % modulus;
+    if (base === 0n)
+        return 0n;
+    // Real Montgomery ladder implementation for constant-time modular exponentiation
+    let r0 = 1n;
+    let r1 = base;
+    // Process each bit of the exponent from most significant to least significant
+    // This approach ensures the same operations are performed regardless of the bit value
+    const exponentBits = exponent.toString(2);
+    const bitLength = exponentBits.length;
+    for (let i = 0; i < bitLength; i++) {
+        // Get the current bit (0 or 1)
+        const bit = exponentBits[i] === "1" ? 1n : 0n;
+        // Constant-time conditional swap based on the bit
+        // We compute both possibilities and select the right one using a constant-time select
+        // Compute both possible next values for r0 and r1
+        const r0r0 = (r0 * r0) % modulus;
+        const r0r1 = (r0 * r1) % modulus;
+        const r1r1 = (r1 * r1) % modulus;
+        // Constant-time selection using bitwise operations on BigInts
+        // For bit = 0: r0 = r0*r0, r1 = r0*r1
+        // For bit = 1: r0 = r0*r1, r1 = r1*r1
+        // Create masks for selection (all 0s or all 1s)
+        const mask = -bit; // 0n -> 0n, 1n -> -1n (all bits set)
+        // Select r0 = bit ? r0r1 : r0r0
+        const newR0 = (r0r0 & ~mask) | (r0r1 & mask);
+        // Select r1 = bit ? r1r1 : r0r1
+        const newR1 = (r0r1 & ~mask) | (r1r1 & mask);
+        r0 = newR0;
+        r1 = newR1;
+    }
+    return r0;
+}
+/**
+ * Implements a secure memory comparison that's resistant to fault injection attacks
+ * This performs multiple comparisons and verifies the results match to detect glitches
+ *
+ * @param a - First buffer to compare
+ * @param b - Second buffer to compare
+ * @returns True if the buffers are equal, false otherwise
+ */
+function faultResistantEqual(a, b) {
+    // First check: standard constant-time comparison
+    const result1 = constantTimeEqual(a, b);
+    // Second check: reverse order comparison
+    let result2 = true;
+    if (a.length !== b.length) {
+        result2 = false;
+    }
+    else {
+        let diff = 0;
+        for (let i = a.length - 1; i >= 0; i--) {
+            diff |= a[i] ^ b[i];
+        }
+        result2 = diff === 0;
+    }
+    // Third check: chunked comparison
+    let result3 = true;
+    if (a.length !== b.length) {
+        result3 = false;
+    }
+    else {
+        const chunkSize = Math.max(1, Math.floor(a.length / 4));
+        for (let chunk = 0; chunk < 4; chunk++) {
+            let diff = 0;
+            const start = chunk * chunkSize;
+            const end = chunk === 3 ? a.length : (chunk + 1) * chunkSize;
+            for (let i = start; i < end; i++) {
+                diff |= a[i] ^ b[i];
+            }
+            if (diff !== 0) {
+                result3 = false;
+            }
+        }
+    }
+    // Verify all results match to detect fault injection
+    return result1 && result2 && result3;
+}
+
+exports.constantTimeEqual = constantTimeEqual;
+exports.faultResistantEqual = faultResistantEqual;
+exports.secureModPow = secureModPow;
+//# sourceMappingURL=side-channel.js.map

package/dist/cjs/mods/security/src/components/side-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"side-channel.js","sources":["../../../../../../mods/security/src/components/side-channel.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;;;;;;AAQG;AAEH;;;;;;;;AAQG;AACa,SAAA,iBAAiB,CAC7B,CAAsB,EACtB,CAAsB,EAAA;;IAGtB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;;AAIrE,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;;;IAInD,IAAI,IAAI,GAAG,CAAC,CAAC;AACb,IAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAE/C,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE;;AAE1B,QAAA,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC5C,QAAA,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;AAG5C,QAAA,IAAI,IAAI,KAAK,GAAG,KAAK,CAAC;KACzB;;AAGD,IAAA,OAAO,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC;AACtC,CAAC;AAuCD;;;;;;;;AAQG;SACa,YAAY,CACxB,IAAY,EACZ,QAAgB,EAChB,OAAe,EAAA;AAEf,IAAA,IAAI,OAAO,IAAI,EAAE,EAAE;AACf,QAAA,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;KAC/C;AAED,IAAA,IAAI,QAAQ,GAAG,EAAE,EAAE;AACf,QAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;KAC3D;;IAGD,IAAI,OAAO,KAAK,EAAE;AAAE,QAAA,OAAO,EAAE,CAAC;IAC9B,IAAI,QAAQ,KAAK,EAAE;AAAE,QAAA,OAAO,EAAE,CAAC;;AAG/B,IAAA,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC;IAEtB,IAAI,IAAI,KAAK,EAAE;AAAE,QAAA,OAAO,EAAE,CAAC;;IAG3B,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,EAAE,GAAG,IAAI,CAAC;;;IAId,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1C,IAAA,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC;AAEtC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE;;AAEhC,QAAA,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC;;;;QAM9C,MAAM,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,OAAO,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,OAAO,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,OAAO,CAAC;;;;;AAOjC,QAAA,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC;;AAGlB,QAAA,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;;AAG7C,QAAA,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;QAE7C,EAAE,GAAG,KAAK,CAAC;QACX,EAAE,GAAG,KAAK,CAAC;KACd;AAED,IAAA,OAAO,EAAE,CAAC;AACd,CAAC;AAED;;;;;;;AAOG;AACa,SAAA,mBAAmB,CAAC,CAAa,EAAE,CAAa,EAAA;;IAE5D,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;IAGxC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE;QACvB,OAAO,GAAG,KAAK,CAAC;KACnB;SAAM;QACH,IAAI,IAAI,GAAG,CAAC,CAAC;AACb,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;YACpC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SACvB;AACD,QAAA,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC;KACxB;;IAGD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE;QACvB,OAAO,GAAG,KAAK,CAAC;KACnB;SAAM;AACH,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AACxD,QAAA,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE;YACpC,IAAI,IAAI,GAAG,CAAC,CAAC;AACb,YAAA,MAAM,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;YAChC,MAAM,GAAG,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,SAAS,CAAC;AAE7D,YAAA,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC9B,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aACvB;AAED,YAAA,IAAI,IAAI,KAAK,CAAC,EAAE;gBACZ,OAAO,GAAG,KAAK,CAAC;aACnB;SACJ;KACJ;;AAGD,IAAA,OAAO,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC;AACzC;;;;;;"}

package/dist/cjs/mods/security/src/components/tamper-evident-logging.js

@@ -0,0 +1,391 @@
+'use strict';
+
+var hashCore = require('../core/hash/hash-core.js');
+require('../core/hash/hash-types.js');
+require('crypto');
+var encoding = require('../utils/encoding.js');
+require('../core/hash/hash-security.js');
+require('../core/hash/hash-advanced.js');
+require('../algorithms/hash-algorithms.js');
+var randomCore = require('../core/random/random-core.js');
+require('../core/random/random-types.js');
+require('../core/random/random-sources.js');
+require('nehonix-uri-processor');
+require('../utils/memory/index.js');
+require('../types.js');
+
+/* ---------------------------------------------------------------------------------------------
+ *  Copyright (c) NEHONIX INC. All rights reserved.
+ *  Licensed under the MIT License. See LICENSE in the project root for license information.
+ * -------------------------------------------------------------------------------------------
+ */
+/**
+ * @author NEHONIX INC.
+ * @version 1.0.0
+ * @license MIT
+ * @description Tamper-Evident Logging Module
+ *
+ * This module provides secure logging functionality with tamper detection.
+ * It creates a cryptographically linked chain of log entries that can detect
+ * if any entries have been modified, deleted, or inserted.
+ *
+ * This is useful for security-critical applications where log integrity
+ * is important, such as audit logs, security events, or financial transactions.
+ */
+/**
+ * Log level
+ */
+exports.LogLevel = void 0;
+(function (LogLevel) {
+    LogLevel["DEBUG"] = "DEBUG";
+    LogLevel["INFO"] = "INFO";
+    LogLevel["WARNING"] = "WARNING";
+    LogLevel["ERROR"] = "ERROR";
+    LogLevel["CRITICAL"] = "CRITICAL";
+})(exports.LogLevel || (exports.LogLevel = {}));
+/**
+ * Tamper-evident logger
+ */
+class TamperEvidentLogger {
+    /**
+     * Creates a new tamper-evident logger
+     *
+     * @param key - Secret key for hashing
+     * @param storageKey - Key for storing logs in localStorage (if available)
+     */
+    constructor(key, storageKey) {
+        this.entries = [];
+        this.lastHash = "";
+        this.sequence = 0;
+        this.key = key || encoding.bufferToHex(randomCore.SecureRandom.getRandomBytes(32));
+        this.storageKey = storageKey;
+        // Initialize with a genesis entry if storage is empty
+        if (this.entries.length === 0) {
+            this.addGenesisEntry();
+        }
+        // Load from storage if available
+        this.loadFromStorage();
+    }
+    /**
+     * Adds a genesis entry to the log
+     */
+    addGenesisEntry() {
+        const timestamp = Date.now();
+        const id = this.generateId();
+        const genesisEntry = {
+            id,
+            timestamp,
+            level: exports.LogLevel.INFO,
+            message: "Genesis entry",
+            previousHash: "0000000000000000000000000000000000000000000000000000000000000000",
+            hash: "",
+            sequence: 0,
+        };
+        // Calculate the hash
+        genesisEntry.hash = this.calculateHash(genesisEntry);
+        // Add to entries
+        this.entries.push(genesisEntry);
+        this.lastHash = genesisEntry.hash;
+        this.sequence = 1;
+        // Save to storage
+        this.saveToStorage();
+    }
+    /**
+     * Generates a unique ID for a log entry
+     *
+     * @returns Unique ID
+     */
+    generateId() {
+        return encoding.bufferToHex(randomCore.SecureRandom.getRandomBytes(16));
+    }
+    /**
+     * Calculates the hash of a log entry
+     *
+     * @param entry - Log entry to hash
+     * @returns Hash of the log entry
+     */
+    calculateHash(entry) {
+        // Create a string representation of the entry without the hash
+        const entryString = JSON.stringify({
+            id: entry.id,
+            timestamp: entry.timestamp,
+            level: entry.level,
+            message: entry.message,
+            data: entry.data,
+            previousHash: entry.previousHash,
+            sequence: entry.sequence,
+        });
+        // Calculate the hash
+        return hashCore.Hash.create(entryString, {
+            salt: this.key,
+            algorithm: "sha256",
+            iterations: 1,
+            outputFormat: "hex",
+        });
+    }
+    /**
+     * Loads logs from storage
+     */
+    loadFromStorage() {
+        if (!this.storageKey || typeof localStorage === "undefined") {
+            return;
+        }
+        try {
+            const storedData = localStorage.getItem(this.storageKey);
+            if (storedData) {
+                const parsed = JSON.parse(storedData);
+                if (Array.isArray(parsed)) {
+                    this.entries = parsed;
+                    if (this.entries.length > 0) {
+                        const lastEntry = this.entries[this.entries.length - 1];
+                        this.lastHash = lastEntry.hash;
+                        this.sequence = lastEntry.sequence + 1;
+                    }
+                    else {
+                        this.addGenesisEntry();
+                    }
+                }
+            }
+        }
+        catch (e) {
+            console.error("Failed to load logs from storage:", e);
+            this.addGenesisEntry();
+        }
+    }
+    /**
+     * Saves logs to storage
+     */
+    saveToStorage() {
+        if (!this.storageKey || typeof localStorage === "undefined") {
+            return;
+        }
+        try {
+            localStorage.setItem(this.storageKey, JSON.stringify(this.entries));
+        }
+        catch (e) {
+            console.error("Failed to save logs to storage:", e);
+        }
+    }
+    /**
+     * Adds a log entry
+     *
+     * @param level - Log level
+     * @param message - Log message
+     * @param data - Additional data
+     * @returns The created log entry
+     */
+    log(level, message, data) {
+        const timestamp = Date.now();
+        const id = this.generateId();
+        const entry = {
+            id,
+            timestamp,
+            level,
+            message,
+            data,
+            previousHash: this.lastHash,
+            hash: "",
+            sequence: this.sequence,
+        };
+        // Calculate the hash
+        entry.hash = this.calculateHash(entry);
+        // Add to entries
+        this.entries.push(entry);
+        this.lastHash = entry.hash;
+        this.sequence++;
+        // Save to storage
+        this.saveToStorage();
+        return entry;
+    }
+    /**
+     * Logs a debug message
+     *
+     * @param message - Log message
+     * @param data - Additional data
+     * @returns The created log entry
+     */
+    debug(message, data) {
+        return this.log(exports.LogLevel.DEBUG, message, data);
+    }
+    /**
+     * Logs an info message
+     *
+     * @param message - Log message
+     * @param data - Additional data
+     * @returns The created log entry
+     */
+    info(message, data) {
+        return this.log(exports.LogLevel.INFO, message, data);
+    }
+    /**
+     * Logs a warning message
+     *
+     * @param message - Log message
+     * @param data - Additional data
+     * @returns The created log entry
+     */
+    warning(message, data) {
+        return this.log(exports.LogLevel.WARNING, message, data);
+    }
+    /**
+     * Logs an error message
+     *
+     * @param message - Log message
+     * @param data - Additional data
+     * @returns The created log entry
+     */
+    error(message, data) {
+        return this.log(exports.LogLevel.ERROR, message, data);
+    }
+    /**
+     * Logs a critical message
+     *
+     * @param message - Log message
+     * @param data - Additional data
+     * @returns The created log entry
+     */
+    critical(message, data) {
+        return this.log(exports.LogLevel.CRITICAL, message, data);
+    }
+    /**
+     * Gets all log entries
+     *
+     * @returns All log entries
+     */
+    getEntries() {
+        return [...this.entries];
+    }
+    /**
+     * Gets log entries by level
+     *
+     * @param level - Log level
+     * @returns Log entries with the specified level
+     */
+    getEntriesByLevel(level) {
+        return this.entries.filter((entry) => entry.level === level);
+    }
+    /**
+     * Gets log entries by time range
+     *
+     * @param startTime - Start time
+     * @param endTime - End time
+     * @returns Log entries within the specified time range
+     */
+    getEntriesByTimeRange(startTime, endTime) {
+        return this.entries.filter((entry) => entry.timestamp >= startTime && entry.timestamp <= endTime);
+    }
+    /**
+     * Verifies the integrity of the log chain
+     *
+     * @returns Verification result
+     */
+    verify() {
+        const result = {
+            valid: true,
+            invalidEntries: [],
+            missingEntries: [],
+            tamperedEntries: [],
+        };
+        if (this.entries.length === 0) {
+            return result;
+        }
+        // Check the genesis entry
+        const genesisEntry = this.entries[0];
+        if (genesisEntry.previousHash !==
+            "0000000000000000000000000000000000000000000000000000000000000000") {
+            result.valid = false;
+            result.tamperedEntries.push(0);
+        }
+        // Verify each entry
+        for (let i = 0; i < this.entries.length; i++) {
+            const entry = this.entries[i];
+            // Verify the hash
+            const calculatedHash = this.calculateHash(entry);
+            if (calculatedHash !== entry.hash) {
+                result.valid = false;
+                result.tamperedEntries.push(i);
+            }
+            // Verify the previous hash (except for genesis)
+            if (i > 0) {
+                const previousEntry = this.entries[i - 1];
+                if (entry.previousHash !== previousEntry.hash) {
+                    result.valid = false;
+                    result.tamperedEntries.push(i);
+                }
+            }
+            // Verify the sequence
+            if (entry.sequence !== i) {
+                result.valid = false;
+                result.invalidEntries.push(i);
+            }
+        }
+        // Check for missing entries
+        for (let i = 1; i < this.entries.length; i++) {
+            const entry = this.entries[i];
+            const previousEntry = this.entries[i - 1];
+            if (entry.sequence - previousEntry.sequence > 1) {
+                result.valid = false;
+                for (let j = previousEntry.sequence + 1; j < entry.sequence; j++) {
+                    result.missingEntries.push(j);
+                }
+            }
+        }
+        return result;
+    }
+    /**
+     * Exports the logs to a string
+     *
+     * @returns Exported logs
+     */
+    export() {
+        return JSON.stringify(this.entries);
+    }
+    /**
+     * Imports logs from a string
+     *
+     * @param data - Exported logs
+     * @param verify - Whether to verify the logs after importing
+     * @returns Verification result if verify is true
+     */
+    import(data, verify = true) {
+        try {
+            const parsed = JSON.parse(data);
+            if (!Array.isArray(parsed)) {
+                throw new Error("Invalid log data");
+            }
+            this.entries = parsed;
+            if (this.entries.length > 0) {
+                const lastEntry = this.entries[this.entries.length - 1];
+                this.lastHash = lastEntry.hash;
+                this.sequence = lastEntry.sequence + 1;
+            }
+            else {
+                this.addGenesisEntry();
+            }
+            // Save to storage
+            this.saveToStorage();
+            // Verify if requested
+            if (verify) {
+                return this.verify();
+            }
+        }
+        catch (e) {
+            console.error("Failed to import logs:", e);
+            this.addGenesisEntry();
+        }
+        return undefined;
+    }
+    /**
+     * Clears all logs
+     */
+    clear() {
+        this.entries = [];
+        this.lastHash = "";
+        this.sequence = 0;
+        // Add genesis entry
+        this.addGenesisEntry();
+    }
+}
+
+exports.TamperEvidentLogger = TamperEvidentLogger;
+//# sourceMappingURL=tamper-evident-logging.js.map

package/dist/cjs/mods/security/src/components/tamper-evident-logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper-evident-logging.js","sources":["../../../../../../mods/security/src/components/tamper-evident-logging.ts"],"sourcesContent":[null],"names":["LogLevel","bufferToHex","SecureRandom","Hash"],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;AAIG;AAEH;;;;;;;;;;;;AAYG;AAMH;;AAEG;AACSA,0BAMX;AAND,CAAA,UAAY,QAAQ,EAAA;AAChB,IAAA,QAAA,CAAA,OAAA,CAAA,GAAA,OAAe,CAAA;AACf,IAAA,QAAA,CAAA,MAAA,CAAA,GAAA,MAAa,CAAA;AACb,IAAA,QAAA,CAAA,SAAA,CAAA,GAAA,SAAmB,CAAA;AACnB,IAAA,QAAA,CAAA,OAAA,CAAA,GAAA,OAAe,CAAA;AACf,IAAA,QAAA,CAAA,UAAA,CAAA,GAAA,UAAqB,CAAA;AACzB,CAAC,EANWA,gBAAQ,KAARA,gBAAQ,GAMnB,EAAA,CAAA,CAAA,CAAA;AAwED;;AAEG;MACU,mBAAmB,CAAA;AAO5B;;;;;AAKG;IACH,WAAY,CAAA,GAAY,EAAE,UAAmB,EAAA;QAZrC,IAAO,CAAA,OAAA,GAAe,EAAE,CAAC;QACzB,IAAQ,CAAA,QAAA,GAAW,EAAE,CAAC;QACtB,IAAQ,CAAA,QAAA,GAAW,CAAC,CAAC;AAWzB,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG,IAAIC,oBAAW,CAACC,uBAAY,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,QAAA,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;;QAG7B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;YAC3B,IAAI,CAAC,eAAe,EAAE,CAAC;SAC1B;;QAGD,IAAI,CAAC,eAAe,EAAE,CAAC;KAC1B;AAED;;AAEG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC7B,QAAA,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;AAE7B,QAAA,MAAM,YAAY,GAAa;YAC3B,EAAE;YACF,SAAS;YACT,KAAK,EAAEF,gBAAQ,CAAC,IAAI;AACpB,YAAA,OAAO,EAAE,eAAe;AACxB,YAAA,YAAY,EACR,kEAAkE;AACtE,YAAA,IAAI,EAAE,EAAE;AACR,YAAA,QAAQ,EAAE,CAAC;SACd,CAAC;;QAGF,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;;AAGrD,QAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAChC,QAAA,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC;AAClC,QAAA,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;;QAGlB,IAAI,CAAC,aAAa,EAAE,CAAC;KACxB;AAED;;;;AAIG;IACK,UAAU,GAAA;QACd,OAAOC,oBAAW,CAACC,uBAAY,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;KACvD;AAED;;;;;AAKG;AACK,IAAA,aAAa,CAAC,KAAe,EAAA;;AAEjC,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;AAC3B,SAAA,CAAC,CAAC;;AAGH,QAAA,OAAOC,aAAI,CAAC,MAAM,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,GAAG;AACd,YAAA,SAAS,EAAE,QAAQ;AACnB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,YAAY,EAAE,KAAK;AACtB,SAAA,CAAW,CAAC;KAChB;AAED;;AAEG;IACK,eAAe,GAAA;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE;YACzD,OAAO;SACV;AAED,QAAA,IAAI;YACA,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEzD,IAAI,UAAU,EAAE;gBACZ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAEtC,gBAAA,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;AACvB,oBAAA,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;oBAEtB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AACzB,wBAAA,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxD,wBAAA,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;wBAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC;qBAC1C;yBAAM;wBACH,IAAI,CAAC,eAAe,EAAE,CAAC;qBAC1B;iBACJ;aACJ;SACJ;QAAC,OAAO,CAAC,EAAE;AACR,YAAA,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,eAAe,EAAE,CAAC;SAC1B;KACJ;AAED;;AAEG;IACK,aAAa,GAAA;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE;YACzD,OAAO;SACV;AAED,QAAA,IAAI;AACA,YAAA,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;SACvE;QAAC,OAAO,CAAC,EAAE;AACR,YAAA,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,CAAC,CAAC,CAAC;SACvD;KACJ;AAED;;;;;;;AAOG;AACI,IAAA,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAU,EAAA;AACnD,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC7B,QAAA,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;AAE7B,QAAA,MAAM,KAAK,GAAa;YACpB,EAAE;YACF,SAAS;YACT,KAAK;YACL,OAAO;YACP,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,QAAQ;AAC3B,YAAA,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;;QAGF,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;;AAGvC,QAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzB,QAAA,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;;QAGhB,IAAI,CAAC,aAAa,EAAE,CAAC;AAErB,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;;;;;AAMG;IACI,KAAK,CAAC,OAAe,EAAE,IAAU,EAAA;AACpC,QAAA,OAAO,IAAI,CAAC,GAAG,CAACH,gBAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;KAClD;AAED;;;;;;AAMG;IACI,IAAI,CAAC,OAAe,EAAE,IAAU,EAAA;AACnC,QAAA,OAAO,IAAI,CAAC,GAAG,CAACA,gBAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;KACjD;AAED;;;;;;AAMG;IACI,OAAO,CAAC,OAAe,EAAE,IAAU,EAAA;AACtC,QAAA,OAAO,IAAI,CAAC,GAAG,CAACA,gBAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;KACpD;AAED;;;;;;AAMG;IACI,KAAK,CAAC,OAAe,EAAE,IAAU,EAAA;AACpC,QAAA,OAAO,IAAI,CAAC,GAAG,CAACA,gBAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;KAClD;AAED;;;;;;AAMG;IACI,QAAQ,CAAC,OAAe,EAAE,IAAU,EAAA;AACvC,QAAA,OAAO,IAAI,CAAC,GAAG,CAACA,gBAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;KACrD;AAED;;;;AAIG;IACI,UAAU,GAAA;AACb,QAAA,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;KAC5B;AAED;;;;;AAKG;AACI,IAAA,iBAAiB,CAAC,KAAe,EAAA;AACpC,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;KAChE;AAED;;;;;;AAMG;IACI,qBAAqB,CACxB,SAAiB,EACjB,OAAe,EAAA;QAEf,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CACtB,CAAC,KAAK,KACF,KAAK,CAAC,SAAS,IAAI,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,OAAO,CACjE,CAAC;KACL;AAED;;;;AAIG;IACI,MAAM,GAAA;AACT,QAAA,MAAM,MAAM,GAA0B;AAClC,YAAA,KAAK,EAAE,IAAI;AACX,YAAA,cAAc,EAAE,EAAE;AAClB,YAAA,cAAc,EAAE,EAAE;AAClB,YAAA,eAAe,EAAE,EAAE;SACtB,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AAC3B,YAAA,OAAO,MAAM,CAAC;SACjB;;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAErC,IACI,YAAY,CAAC,YAAY;AACzB,YAAA,kEAAkE,EACpE;AACE,YAAA,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;AACrB,YAAA,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAClC;;AAGD,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;;YAG9B,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AAEjD,YAAA,IAAI,cAAc,KAAK,KAAK,CAAC,IAAI,EAAE;AAC/B,gBAAA,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;AACrB,gBAAA,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAClC;;AAGD,YAAA,IAAI,CAAC,GAAG,CAAC,EAAE;gBACP,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE1C,IAAI,KAAK,CAAC,YAAY,KAAK,aAAa,CAAC,IAAI,EAAE;AAC3C,oBAAA,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;AACrB,oBAAA,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAClC;aACJ;;AAGD,YAAA,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE;AACtB,gBAAA,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;AACrB,gBAAA,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACjC;SACJ;;AAGD,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAE1C,IAAI,KAAK,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE;AAC7C,gBAAA,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;AAErB,gBAAA,KACI,IAAI,CAAC,GAAG,aAAa,CAAC,QAAQ,GAAG,CAAC,EAClC,CAAC,GAAG,KAAK,CAAC,QAAQ,EAClB,CAAC,EAAE,EACL;AACE,oBAAA,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACjC;aACJ;SACJ;AAED,QAAA,OAAO,MAAM,CAAC;KACjB;AAED;;;;AAIG;IACI,MAAM,GAAA;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;KACvC;AAED;;;;;;AAMG;AACI,IAAA,MAAM,CACT,IAAY,EACZ,MAAA,GAAkB,IAAI,EAAA;AAEtB,QAAA,IAAI;YACA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEhC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;AACxB,gBAAA,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;aACvC;AAED,YAAA,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YAEtB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AACzB,gBAAA,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxD,gBAAA,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;gBAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC;aAC1C;iBAAM;gBACH,IAAI,CAAC,eAAe,EAAE,CAAC;aAC1B;;YAGD,IAAI,CAAC,aAAa,EAAE,CAAC;;YAGrB,IAAI,MAAM,EAAE;AACR,gBAAA,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;aACxB;SACJ;QAAC,OAAO,CAAC,EAAE;AACR,YAAA,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,eAAe,EAAE,CAAC;SAC1B;AAED,QAAA,OAAO,SAAS,CAAC;KACpB;AAED;;AAEG;IACI,KAAK,GAAA;AACR,QAAA,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;AAClB,QAAA,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;AACnB,QAAA,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;;QAGlB,IAAI,CAAC,eAAe,EAAE,CAAC;KAC1B;AACJ;;;;"}

package/dist/cjs/mods/security/src/const/buffer.const.js

@@ -0,0 +1,15 @@
+'use strict';
+
+const BUFFER_SECURITY_CONSTANTS = {
+    CANARY_SIZE: 16,
+    ENCRYPTION_KEY_SIZE: 32,
+    NONCE_SIZE: 24,
+    MAC_SIZE: 16,
+    FRAGMENT_SIZE: 64,
+    MAX_FRAGMENTS: 256,
+    OBFUSCATION_ROUNDS: 7,
+    MEMORY_POISON_PATTERN: 0xdeadbeef,
+};
+
+exports.BUFFER_SECURITY_CONSTANTS = BUFFER_SECURITY_CONSTANTS;
+//# sourceMappingURL=buffer.const.js.map

package/dist/cjs/mods/security/src/const/buffer.const.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buffer.const.js","sources":["../../../../../../mods/security/src/const/buffer.const.ts"],"sourcesContent":[null],"names":[],"mappings":";;AACa,MAAA,yBAAyB,GAAG;AACrC,IAAA,WAAW,EAAE,EAAE;AACf,IAAA,mBAAmB,EAAE,EAAE;AACvB,IAAA,UAAU,EAAE,EAAE;AACd,IAAA,QAAQ,EAAE,EAAE;AACZ,IAAA,aAAa,EAAE,EAAE;AACjB,IAAA,aAAa,EAAE,GAAG;AAClB,IAAA,kBAAkB,EAAE,CAAC;AACrB,IAAA,qBAAqB,EAAE,UAAU;;;;;"}