Zepar

WebAssembly port of Aes128Ctr128Be and ChaCha20Poly1305 encryption algorithms

npm i @hazae41/zepar

Node Package 📦 • Deno Module 🦖 • Next.js CodeSandbox 🪣

Algorithms

  • Aes128Ctr128Be from RustCrypto (aes, ctr) (audited)
  • ChaCha20Poly1305 from RustCrypto (chacha20poly1305)

Features

  • Reproducible building
  • Pre-bundled and streamed
  • Zero-copy memory slices

Usage

import { Zepar, Aes128Ctr128BEKey } from "@hazae41/zepar";
import { randomBytes } from "crypto";

// Wait for WASM to load
await Zepar.initBundledOnce()

// Random key
const key = randomBytes(16)

// Random IV
const iv = randomBytes(16)

// Build a cipher from key and IV
const cipher = new Aes128Ctr128BEKey(key, iv)

// Byte arrays to encrypt
const hello = new TextEncoder().encode("Hello World")

// Encrypt with counter = 0
const encrypted0 = cipher.apply_keystream(hello).copyAndDispose()

// Encrypt with counter = 1
const encrypted1 = cipher.apply_keystream(hello).copyAndDispose()

// encrypted0 !== encrypted1
console.log(encrypted0, encrypted1)

cipher.free()

Building

Unreproducible building

You need to install Rust

Then, install wasm-pack

cargo install wasm-pack

Finally, do a clean install and build

npm ci && npm run build

Reproducible building

You can build the exact same bytecode using Docker, just be sure you're on a linux/amd64 host

docker compose up --build

Then check that all the files are the same using git status

git status --porcelain

If the output is empty then the bytecode is the same as the one I commited

Automated checks

Each time I commit to the repository, the GitHub's CI does the following:

  • Clone the repository
  • Reproduce the build using docker compose up --build
  • Throw an error if the git status --porcelain output is not empty

Each time I release a new version tag on GitHub, the GitHub's CI does the following:

  • Clone the repository
  • Do not reproduce the build, as it's already checked by the task above
  • Throw an error if there is a npm diff between the cloned repository and the same version tag on NPM

If a version is present on NPM but not on GitHub, do not use!