[FEAT] support xkeys

.github/workflows/deno.yml

@@ -16,7 +16,7 @@ jobs:
 
     strategy:
       matrix:
-        deno-version: [1.36.4]
+        deno-version: [1.40.5]
 
     steps:
       - name: checkout project

.github/workflows/node.yml

@@ -17,7 +17,7 @@ jobs:
     strategy:
       matrix:
         deno-version: [1.36.4]
-        node-version: [20.x, 18.x]
+        node-version: [21.x]
 
     steps:
       - name: checkout nkeys

modules/cjs/index.ts

@@ -12,6 +12,9 @@ const helper = {
   verify: nacl.sign.detached.verify,
   fromSeed: nacl.sign.keyPair.fromSeed,
   sign: nacl.sign.detached,
+  scalarBaseMultiply: nacl.scalarMult.base,
+  seal: nacl.box,
+  open: nacl.box.open,
 };
 
 // This here to support node 10.

modules/esm/deps.ts

@@ -35,4 +35,7 @@ export const denoHelper = {
   sign: nacl.sign.detached,
   verify: nacl.sign.detached.verify,
   randomBytes: nacl.randomBytes,
+  scalarBaseMultiply: nacl.scalarMult.base,
+  seal: nacl.box,
+  open: nacl.box.open,
 } as Ed25519Helper;

node_test/basics_test.js

@@ -1,5 +1,5 @@
 /*
- * Copyright 2018 The NATS Authors
+ * Copyright 2018-2024 The NATS Authors
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
@@ -161,3 +161,150 @@ test("integration - encoded seed returns stable values albertor", (t) => {
   t.is(kp.getPublicKey(), data.public_key, "public key");
   t.is(td.decode(kp.getPrivateKey()), data.private_key, "private key");
 });
+
+test("integration - curve encrypt", (t) => {
+  // this is actual data generated by the nkeys go library
+  const expected = [
+    120,
+    107,
+    118,
+    49,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    103,
+    188,
+    195,
+    73,
+    0,
+    3,
+    119,
+    91,
+    181,
+    167,
+    162,
+    167,
+    105,
+    51,
+    102,
+    84,
+    94,
+    152,
+    189,
+    229,
+    149,
+    222,
+    47,
+    17,
+    149,
+    188,
+    170,
+  ];
+  const secret = "SXAESVBNK3UN2O24Z53ZJLFMX5OYHLAAVULRILWXRO775SDYFKI7FM3J7Y";
+  const recipient =
+    "SXAHMGVNIYUF4CA5G475EN64YWNG32HSIF4MZCPZHV7PAFYTWBE5J5USFE";
+
+  // parse the imported secret and public
+  const kp = fromSeed(new TextEncoder().encode(secret));
+  const kp2 = fromSeed(new TextEncoder().encode(recipient));
+  const pub2 = kp2.getPublicKey();
+
+  // nonce is 24 empty bytes for ease of inspection
+  const nonce = new Uint8Array(24);
+  const data = new TextEncoder().encode("hello world");
+
+  const enc = kp.seal(data, pub2, nonce);
+  t.deepEqual(enc, new Uint8Array(expected));
+});
+
+test("integration - curve decrypt", (t) => {
+  // this is actual data generated by the nkeys go library
+  const message = [
+    120,
+    107,
+    118,
+    49,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    0,
+    103,
+    188,
+    195,
+    73,
+    0,
+    3,
+    119,
+    91,
+    181,
+    167,
+    162,
+    167,
+    105,
+    51,
+    102,
+    84,
+    94,
+    152,
+    189,
+    229,
+    149,
+    222,
+    47,
+    17,
+    149,
+    188,
+    170,
+  ];
+  const sender = "SXAESVBNK3UN2O24Z53ZJLFMX5OYHLAAVULRILWXRO775SDYFKI7FM3J7Y";
+  const secret = "SXAHMGVNIYUF4CA5G475EN64YWNG32HSIF4MZCPZHV7PAFYTWBE5J5USFE";
+
+  // parse the imported secret and public
+  const kp = fromSeed(new TextEncoder().encode(secret));
+  const kp2 = fromSeed(new TextEncoder().encode(sender));
+  const senderPK = kp2.getPublicKey();
+
+  const enc = kp.open(new Uint8Array(message), senderPK) ?? new Uint8Array();
+  t.is(new TextDecoder().decode(enc), "hello world");
+});