did-jwt/lib.esm/encryption/X25519-ECDH-ES.js

Library for Signing and Verifying JWTs that use DIDs as issuers and JWEs that use DIDs as recipients

import { base64ToBytes, bytesToBase64url, generateKeyPair, generateKeyPairFromSeed } from '../util.js';
import { concatKDF } from '../Digest.js';
import { x25519 } from '@noble/curves/ed25519.js';
export async function computeX25519EcdhEsKek(recipient, receiverSecret, alg) {
    const crv = 'X25519';
    const keyLen = 256;
    const header = recipient.header;
    if (header.epk?.crv !== crv || typeof header.epk.x == 'undefined')
        return null;
    const publicKey = base64ToBytes(header.epk.x);
    let sharedSecret;
    if (receiverSecret instanceof Uint8Array) {
        sharedSecret = x25519.getSharedSecret(receiverSecret, publicKey);
    }
    else {
        sharedSecret = await receiverSecret(publicKey);
    }
    // Key Encryption Key
    let producerInfo = undefined;
    let consumerInfo = undefined;
    if (recipient.header.apu)
        producerInfo = base64ToBytes(recipient.header.apu);
    if (recipient.header.apv)
        consumerInfo = base64ToBytes(recipient.header.apv);
    return concatKDF(sharedSecret, keyLen, alg, producerInfo, consumerInfo);
}
export async function createX25519EcdhEsKek(recipientPublicKey, senderSecret, // unused
alg, apu, // unused
apv, ephemeralKeyPair) {
    const crv = 'X25519';
    const keyLen = 256;
    const ephemeral = ephemeralKeyPair ? generateKeyPairFromSeed(ephemeralKeyPair.secretKey) : generateKeyPair();
    const epk = { kty: 'OKP', crv, x: bytesToBase64url(ephemeral.publicKey) };
    const sharedSecret = x25519.getSharedSecret(ephemeral.secretKey, recipientPublicKey);
    // Key Encryption Key
    const consumerInfo = base64ToBytes(apv ?? '');
    const kek = concatKDF(sharedSecret, keyLen, alg, undefined, consumerInfo);
    return { epk, kek };
}
//# sourceMappingURL=X25519-ECDH-ES.js.map