HPKE wrapped transmission key

Adds quantum-resistant HPKE wrapped transmission key implementation,
which is opt-in via the `useHpkeForTransmissionKey` config option.
Not all environments support this yet, but should be suitable for
testing. Remaining public keys will be added ASAP.

Updates protobufs to get needed ecKeyId field on QrcMessageKey.

Author: tylerccarson

keeperapi/jest.config.js

@@ -8,6 +8,9 @@ module.exports = {
   // Ignore dist folder and node_modules
   testPathIgnorePatterns: ["/node_modules/", "/dist/"],
 
+  // Transform ESM packages from node_modules
+  transformIgnorePatterns: ["node_modules/(?!@noble/)"],
+
   // Module file extensions
   moduleFileExtensions: ["ts", "tsx", "js", "jsx", "json", "node"],
 };

keeperapi/package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@keeper-security/keeperapi",
   "description": "Keeper API Javascript SDK",
-  "version": "16.0.90",
+  "version": "16.0.91",
   "browser": "dist/index.es.js",
   "main": "dist/index.cjs.js",
   "types": "dist/node/index.d.ts",
@@ -19,6 +19,7 @@
     "publish-to-npm": "npm publish"
   },
   "dependencies": {
+    "@noble/post-quantum": "^0.5.2",
     "asmcrypto.js": "^2.3.2",
     "faye-websocket": "^0.11.3",
     "form-data": "^4.0.4",

keeperapi/package.json

@@ -20,7 +20,8 @@ export default [
         ],
         external: [
             ...Object.keys(pkg.dependencies || {}),
-            "protobufjs/minimal"
+            "protobufjs/minimal",
+            "@noble/post-quantum/ml-kem.js"
         ],
         plugins: [
             typescript({
@@ -56,7 +57,8 @@ export default [
         ],
         external: [
             ...Object.keys(pkg.dependencies || {}),
-            "crypto", "constants", "https", "protobufjs/minimal"
+            "crypto", "constants", "https", "protobufjs/minimal",
+            "@noble/post-quantum/ml-kem.js"
         ],
         plugins: [
             typescript({