nmshd · WyvernIXTL · Jun 26, 2025 · Jun 26, 2025 · Jun 26, 2025 · Jun 26, 2025
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/README.md b/README.md
@@ -48,6 +48,10 @@ This command uses the [@neon-rs/cli](https://www.npmjs.com/package/@neon-rs/cli)
 
     It is possible to filter according to modules (see the [docs](https://docs.rs/tracing-subscriber/latest/tracing_subscriber/filter/struct.EnvFilter.html)).
 
+    ```pwsh
+    $env:RUST_LOG="crypto_layer_node=trace,crypto_layer=warn"
+    ```
+
 - Activate full backtrace:
 
     ```bash

diff --git a/cSpell.json b/cSpell.json
@@ -8,10 +8,12 @@
         "fgrep",
         "fromjs",
         "Granual",
+        "HMAC",
         "keyhandle",
         "keypairhandle",
         "msvc",
         "nmshd",
+        "pswd",
         "robinraju",
         "rustup",
         "softprops",

diff --git a/crates/crypto-layer-node/src/fromjs/config.rs b/crates/crypto-layer-node/src/fromjs/config.rs
@@ -4,7 +4,7 @@ use neon::prelude::*;
 
 use super::error::{bad_parameter, js_result, rw_lock_poisoned, ConversionError};
 use super::{from_wrapped_enum, from_wrapped_simple_enum, wrapped_array_to_hash_set};
-use crate::{JsKeyHandle, JsKeyPairHandle};
+use crate::{BoxedKeyHandle, BoxedKeyPairHandle, JsKeyHandle, JsKeyPairHandle};
 
 /// Converts `ProviderConfig` from `crypto-layer-ts-types` to `ProviderConfig` from `crypto-layer`.
 #[tracing::instrument(level = "trace", skip_all)]
@@ -63,7 +63,21 @@ pub fn from_wrapped_provider_impl_config<'a>(
     })
 }
 
-/// Converts `AdditionalConfig` from `crypto-layer-ts-types` to `AdditionalConfig` from `crypto-layer`.
+fn boxed_key_handle_from_node_key_handle(
+    cx: &mut FunctionContext,
+    obj: Handle<JsObject>,
+) -> Result<BoxedKeyHandle, ConversionError> {
+    Ok((**bad_parameter(obj.get::<JsKeyHandle, _, _>(cx, "keyHandle"))?).clone())
+}
+
+fn boxed_key_pair_handle_from_node_key_pair_handle(
+    cx: &mut FunctionContext,
+    obj: Handle<JsObject>,
+) -> Result<BoxedKeyPairHandle, ConversionError> {
+    Ok((**bad_parameter(obj.get::<JsKeyPairHandle, _, _>(cx, "keyPairHandle"))?).clone())
+}
+
+/// Converts `AdditionalConfig` from `rs-crypto-types` to `AdditionalConfig` from `crypto-layer`.
 ///
 /// # Errors
 /// * `KVStoreConfig` is currently not supported and will crash the program with `unimplemented!()`.
@@ -81,41 +95,51 @@ pub fn from_wrapped_additional_config(
     }
 
     let obj = obj_option.unwrap();
+    let obj = bad_parameter(obj.downcast::<JsObject, _>(cx))?;
 
     let result = match additional_config {
         AdditionalConfigDiscriminants::FileStoreConfig => {
-            let obj = bad_parameter(obj.downcast::<JsObject, _>(cx))?;
             let db_path_js = bad_parameter(obj.get::<JsString, _, _>(cx, "db_dir"))?;
 
             AdditionalConfig::FileStoreConfig {
                 db_dir: db_path_js.value(cx),
             }
         }
         AdditionalConfigDiscriminants::KVStoreConfig => {
-            // Implementing this is problamatic:
+            // Implementing this is problematic:
             // There is only one node thread running.
             // Meaning that to call methods given to rust, rust queues theses method calls for node to run, when the thread
             // is available.
             // Rust waits for the call to finish. It never does, as the call can only execute, when the thread is free.
             unimplemented!()
         }
         AdditionalConfigDiscriminants::StorageConfigHMAC => {
-            let key_handle_js = bad_parameter(obj.downcast::<JsKeyHandle, _>(cx))?;
+            let boxed_key_handle = boxed_key_handle_from_node_key_handle(cx, obj)?;
 
-            let key_handle = rw_lock_poisoned(key_handle_js.read())?;
+            let key_handle = rw_lock_poisoned(boxed_key_handle.read())?;
 
             AdditionalConfig::StorageConfigHMAC(key_handle.clone())
         }
         AdditionalConfigDiscriminants::StorageConfigDSA => {
-            let key_pair_handle_js = bad_parameter(obj.downcast::<JsKeyPairHandle, _>(cx))?;
+            let key_pair_handle_js = boxed_key_pair_handle_from_node_key_pair_handle(cx, obj)?;
 
             let key_pair_handle = rw_lock_poisoned(key_pair_handle_js.read())?;
 
             AdditionalConfig::StorageConfigDSA(key_pair_handle.clone())
         }
-        AdditionalConfigDiscriminants::StorageConfigPass => {
-            let pass_js = bad_parameter(obj.downcast::<JsString, _>(cx))?;
-            AdditionalConfig::StorageConfigPass(pass_js.value(cx))
+        AdditionalConfigDiscriminants::StorageConfigSymmetricEncryption => {
+            let key_handle_js = boxed_key_handle_from_node_key_handle(cx, obj)?;
+
+            let key_handle = rw_lock_poisoned(key_handle_js.read())?;
+
+            AdditionalConfig::StorageConfigSymmetricEncryption(key_handle.clone())
+        }
+        AdditionalConfigDiscriminants::StorageConfigAsymmetricEncryption => {
+            let key_pair_handle_js = boxed_key_pair_handle_from_node_key_pair_handle(cx, obj)?;
+
+            let key_pair_handle = rw_lock_poisoned(key_pair_handle_js.read())?;
+
+            AdditionalConfig::StorageConfigAsymmetricEncryption(key_pair_handle.clone())
         }
     };
 
@@ -147,7 +171,7 @@ pub(crate) fn from_wrapped_key_pair_spec(
     cx: &mut FunctionContext,
     wrapped: Handle<JsObject>,
 ) -> Result<KeyPairSpec, ConversionError> {
-    let asymc_spec_js = js_result(wrapped.get(cx, "asym_spec"))?;
+    let asym_spec_js = js_result(wrapped.get(cx, "asym_spec"))?;
     let cipher_js = js_result(wrapped.get::<JsValue, _, _>(cx, "cipher"))?;
     let signing_hash_js = js_result(wrapped.get(cx, "signing_hash"))?;
     let ephemeral_js = js_result(wrapped.get::<JsBoolean, _, _>(cx, "ephemeral"))?;
@@ -160,7 +184,7 @@ pub(crate) fn from_wrapped_key_pair_spec(
     };
 
     Ok(KeyPairSpec {
-        asym_spec: from_wrapped_simple_enum(cx, asymc_spec_js)?,
+        asym_spec: from_wrapped_simple_enum(cx, asym_spec_js)?,
         cipher,
         signing_hash: from_wrapped_simple_enum(cx, signing_hash_js)?,
         ephemeral: ephemeral_js.value(cx),

diff --git a/crates/crypto-layer-node/src/lib.rs b/crates/crypto-layer-node/src/lib.rs
@@ -23,8 +23,10 @@ use fromjs::*;
 use tojs::config::wrap_provider_config;
 use tojs::*;
 
-type JsKeyHandle = JsBox<Arc<RwLock<Finalized<KeyHandle>>>>;
-type JsKeyPairHandle = JsBox<Arc<RwLock<Finalized<KeyPairHandle>>>>;
+type BoxedKeyHandle = Arc<RwLock<Finalized<KeyHandle>>>;
+type JsKeyHandle = JsBox<BoxedKeyHandle>;
+type BoxedKeyPairHandle = Arc<RwLock<Finalized<KeyPairHandle>>>;
+type JsKeyPairHandle = JsBox<BoxedKeyPairHandle>;
 type JsProvider = JsBox<Arc<RwLock<Finalized<Provider>>>>;
 type JsDhExchange = JsBox<Arc<RwLock<Finalized<DHExchange>>>>;
 

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nmshd/rs-crypto-node",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "crypto layer ts interface for nodejs",
   "homepage": "https://enmeshed.eu",
   "repository": "github:nmshd/crypto-layer-node",
@@ -56,18 +56,19 @@
     "jest": "^29.7.0",
     "jiti": "^2.4.2",
     "prettier": "3.5.3",
+    "tmp-promise": "^3.0.3",
     "ts-jest": "^29.2.5",
     "typescript": "^5.3.3",
     "typescript-eslint": "^8.25.0"
   },
   "dependencies": {
     "@neon-rs/load": "^0.1.73",
-    "@nmshd/rs-crypto-types": "^0.10.0"
+    "@nmshd/rs-crypto-types": "^0.11.0"
   },
   "optionalDependencies": {
-    "@nmshd/rs-crypto-node-darwin-arm64": "0.13.0",
-    "@nmshd/rs-crypto-node-darwin-x64": "0.13.0",
-    "@nmshd/rs-crypto-node-linux-x64-gnu": "0.13.0",
-    "@nmshd/rs-crypto-node-win32-x64-msvc": "0.13.0"
+    "@nmshd/rs-crypto-node-darwin-arm64": "0.14.0",
+    "@nmshd/rs-crypto-node-darwin-x64": "0.14.0",
+    "@nmshd/rs-crypto-node-linux-x64-gnu": "0.14.0",
+    "@nmshd/rs-crypto-node-win32-x64-msvc": "0.14.0"
   }
 }
diff --git a/platforms/darwin-arm64/package.json b/platforms/darwin-arm64/package.json
@@ -2,7 +2,7 @@
     "name": "@nmshd/rs-crypto-node-darwin-arm64",
     "description": "Prebuilt binary package for `rs-crypto-node` on `darwin-arm64`.",
     "repository": "github:nmshd/crypto-layer-node",
-    "version": "0.13.0",
+    "version": "0.14.0",
     "os": [
         "darwin"
     ],

diff --git a/platforms/darwin-x64/package.json b/platforms/darwin-x64/package.json
@@ -2,7 +2,7 @@
     "name": "@nmshd/rs-crypto-node-darwin-x64",
     "description": "Prebuilt binary package for `rs-layer-ts` on `darwin-x64`.",
     "repository": "github:nmshd/crypto-layer-node",
-    "version": "0.13.0",
+    "version": "0.14.0",
     "os": [
         "darwin"
     ],

diff --git a/platforms/linux-arm64-gnu/package.json b/platforms/linux-arm64-gnu/package.json
@@ -2,7 +2,7 @@
     "name": "@nmshd/rs-crypto-node-linux-arm64-gnu",
     "description": "Prebuilt binary package for `rs-layer-ts` on `linux-arm64-gnu`.",
     "repository": "github:nmshd/crypto-layer-node",
-    "version": "0.13.0",
+    "version": "0.14.0",
     "os": [
         "linux"
     ],

diff --git a/platforms/linux-x64-gnu/package.json b/platforms/linux-x64-gnu/package.json
@@ -2,7 +2,7 @@
     "name": "@nmshd/rs-crypto-node-linux-x64-gnu",
     "description": "Prebuilt binary package for `rs-layer-ts` on `linux-x64-gnu`.",
     "repository": "github:nmshd/crypto-layer-node",
-    "version": "0.13.0",
+    "version": "0.14.0",
     "os": [
         "linux"
     ],

diff --git a/platforms/win32-x64-msvc/package.json b/platforms/win32-x64-msvc/package.json
@@ -2,7 +2,7 @@
     "name": "@nmshd/rs-crypto-node-win32-x64-msvc",
     "description": "Prebuilt binary package for `rs-layer-ts` on `win32-x64-msvc`.",
     "repository": "github:nmshd/crypto-layer-node",
-    "version": "0.13.0",
+    "version": "0.14.0",
     "os": [
         "win32"
     ],
-Original file line number
+Diff line change
@@ Expand Up @@
         It is possible to filter according to modules (see the [docs](https://docs.rs/tracing-subscriber/latest/tracing_subscriber/filter/struct.EnvFilter.html)).
+        ```pwsh
+        $env:RUST_LOG="crypto_layer_node=trace,crypto_layer=warn"
+        ```
     - Activate full backtrace:
         ```bash
@@ Expand Down @@