awaforge

Crypto / Utils

Apache-2.0Release 1L3

Utilities: DRBG, key generation, algebraic primitives (BN, bitArray), formats (PEM, ASN.1, key formats), high-level wrappers, UUID identifiers.

Module Returns Deps Description
random {fill, float, int, bytes, words, bits, range, drbg, health, isReady, selfTest, _internal} bitArray, aes, sha256 CTR_DRBG-AES-256 (SP 800-90A) + RCT/APT (SP 800-90B); AES-128/192 + df via _internal.makeDrbg
rsaKeygen {generate, generateProbablePrime, _internal} bn, random RSA 2048+ generation (FIPS 186-5 §A.1.3, probable primes)
bn constructor BN + statics bitArray, random Big integer (SJCL-derived, BSD-2-Clause; see provenance) — ECDSA / RSA arithmetic
bitArray {...} none Bit-precise representation (SJCL convention, see provenance; 32-bit words + partial last word)
pad {pad, strip} none PKCS#7 padding (RFC 5652 §6.3)
pem {encode, decode} none PEM (RFC 7468) — Base64 encoding + BEGIN/END headers
asn1 {encode, decode, oid, ...} none ASN.1 DER (X.690) — primitive tag serialisation
asn1Oid {lookup, byName, findByCategory, OID_DATABASE} none ASN.1 OID database — bidirectional name ↔ OID resolution (≥ 180 OIDs, 12 categories)
keyformat {encodePkcs8Edwards, decodePkcs8Edwards, encodeSpkiEdwards, decodeSpkiEdwards, encodeSec1, decodeSec1, encodePkcs8Ec, decodePkcs8Ec, encodeSpkiEc, decodeSpkiEc, OID} asn1, pem, bitArray EC (P-256/384/521) / Ed25519 / X25519 key serialisation — PKCS#8 + SPKI + SEC1 (RFC 5915 / RFC 8410)
jws {sign, verify, decode} bitArray, utf8, b64, hmac, sha256, sha512, ed25519 JSON Web Signature (RFC 7515) HS*/EdDSA
aes_modes {cbc, ctr, gcm, kw, kwp} bitArray, aes, cbc, ctr, gcm, kw, pad Uniform Uint8Array wrapper over all AES modes
aes_ctr {ui8} bitArray, aes, ctr, pad @deprecated legacy CTR wrapper — prefer aes_modes.ctr
totp {generate, verify, enroll, uri} hmac, random, base32 TOTP RFC 6238 + HOTP RFC 4226 — time-based OTP codes
uuid {v1, v4} hex UUID v1 (time-based) + v4 (random) — RFC 4122 / RFC 9562

Common pattern (explicit DRBG)

const random = fw.runtime.resolve('random');

// Simple path: direct OS RBG
const k = random.bytes(32);

// FIPS 140-3 path: instantiated DRBG + controlled reseed
const drbg = random.drbg({ personalisation: utf8.toBytes('app-id-v1') });
const out  = drbg.generate(64);                  // 512 derived bits
drbg.reseed();                                   // re-pull entropy

See also