feat(OCLT-30): add Argon2id wrapper

build/exports.js

@@ -2,3 +2,4 @@ export { bytesToHex, hexToBytes, bytesToBase64, base64ToBytes, base64ToHex, hexT
 export { randomBytes } from "@occult-app/crypto/random";
 export { sha256, sha512 } from "@occult-app/crypto/sha2";
 export { kdf } from "@occult-app/crypto/kdf";
+export { ppf } from "@occult-app/crypto/ppf";

jest.config.json

@@ -8,5 +8,6 @@
     },
     "transform": {
         "^.+\\.(ts|tsx)$": ["ts-jest", { "tsconfig": "./tsconfig.json" }]
-    }
+    },
+    "setupFiles": ["./setup.jest.ts"]
 }

setup.jest.ts

@@ -0,0 +1,3 @@
+import { TextEncoder, TextDecoder } from "util";
+
+Object.assign(global, { TextDecoder, TextEncoder });

src/index.ts

@@ -13,3 +13,4 @@ import {
 import { randomBytes } from "./random";
 import { sha256, sha512 } from "./sha2";
 import { kdf } from "./kdf";
+import { ppf } from "./ppf";

src/ppf.ts

@@ -0,0 +1,25 @@
+import { ByteArray } from "./types";
+import { argon2id } from "@noble/hashes/argon2";
+
+const ARGON2ID_ITERATION_COUNT: number = 3;
+const ARGON2ID_MEMORY_COST: number = 65536; // 65536 KB = 64 MiB
+const ARGON2ID_PARALLELISM: number = 2;
+
+/**
+ * Password Processing Function : Derives a password using Argon2id.
+ *
+ * @param password The password to derive.
+ * @param salt PPF salt
+ * @param outputLength The length of the output key in bytes.
+ * @returns The derived key.
+ */
+function ppf(password: string, salt: ByteArray, outputLength: number = 32): ByteArray {
+    return argon2id(password, salt, {
+        t: ARGON2ID_ITERATION_COUNT,
+        m: ARGON2ID_MEMORY_COST,
+        p: ARGON2ID_PARALLELISM,
+        dkLen: outputLength
+    });
+}
+
+export { ppf };

tests/ppf.spec.ts

@@ -0,0 +1,26 @@
+import { ppf } from "../src/ppf";
+import { ByteArray, bytesToHex } from "../src/types";
+
+describe("Password Processing Function", () => {
+    const password: string = "SuperS3cret!";
+    const salt: ByteArray = new Uint8Array([
+        121, 242, 146, 172, 41, 234, 112, 205, 222, 96, 195, 136, 193, 80, 218, 41, 123, 174, 77,
+        21, 34, 42, 99, 51, 122, 60, 188, 65, 213, 142, 189, 132
+    ]);
+
+    it("should compute the Argon2id hash", () => {
+        const derivedPassword: ByteArray = ppf(password, salt);
+
+        expect(bytesToHex(derivedPassword)).toEqual(
+            "3482e8e7e70165709a15a690d8a6a3312ae0ea5e645f9be767b7e68aa3bead61"
+        );
+    });
+
+    it("should compute the Argon2id hash (512 bits)", () => {
+        const derivedPassword: ByteArray = ppf(password, salt, 64);
+
+        expect(bytesToHex(derivedPassword)).toEqual(
+            "ab2c298ec6e0f1e87d79ba4b43b96daa3e53350d4631983306050507d690053b162c2067b6c6bfd1601cf8b33081464647d5ec817c810af44aa0c68d7b3a40c3"
+        );
+    });
+});