@noble/hashes 2.3.0: scrypt

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify @noble/hashes.scrypt in pkg:npm/%40noble/hashes@2.3.0
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:npm/%40noble/hashes@2.3.0
Demonstrate these symbols/APIs:
  - @noble/hashes.scrypt

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:9b597bd26bc59019f36c963a1c68e011cda7dc106f880973b6d2d80ce0179517","contract":["scrypt synchronously derives deterministic cryptographic keys from string and byte inputs conforming to RFC 7914 test vectors","scryptAsync asynchronously derives keys identical to synchronous scrypt and tracks derivation progress via onProgress callback","scrypt validates cost and memory parameters, throwing descriptive errors when N is not a power of 2, r or p or dkLen are invalid, or maxmem is exceeded"],"goal":"verify @noble/hashes.scrypt in pkg:npm/%40noble/hashes@2.3.0","kind":"HOW","packages":["pkg:npm/%40noble/hashes@2.3.0"],"schemaVersion":1,"symbols":["@noble/hashes.scrypt"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","executionContext":"node","language":"javascript","libc":"glibc","libcVersion":"2.39","moduleSystem":"cjs","os":"linux","osVersionBucket":"24","packageManager":"npm","packageManagerVersion":"10.9.8","runtime":"node","runtimeVersion":"22.23.2","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/%40noble/hashes@2.3.0"],"schemaVersion":1,"subject":"pkg:npm/%40noble/hashes@2.3.0","symbols":["@noble/hashes.scrypt"],"verifierAdapter":"node-typescript@1"}

{
  "name": "sample-noble-hashes-scrypt",
  "version": "1.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sample-noble-hashes-scrypt",
      "version": "1.0.0",
      "dependencies": {
        "@noble/hashes": "2.3.0"
      }
    },
    "node_modules/@noble/hashes": {
      "version": "2.3.0",
      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.3.0.tgz",
      "integrity": "sha512-oN+QwyX7VSHotibwubG3kpzbwKrfnyR6OOO+3Nk/53ADL7FmgHHz4TgrbaYKvvOw09u6QTx0oiH1cNCIOuN0CQ==",
      "license": "MIT",
      "engines": {
        "node": ">= 20.19.0"
      },
      "funding": {
        "url": "https://paulmillr.com/funding/"
      }
    }
  }
}

{
  "name": "sample-noble-hashes-scrypt",
  "version": "1.0.0",
  "type": "module",
  "dependencies": {
    "@noble/hashes": "2.3.0"
  }
}

{
  "schemaVersion": 1,
  "goal": "verify @noble/hashes.scrypt in pkg:npm/%40noble/hashes@2.3.0",
  "kind": "HOW",
  "packages": [
    "pkg:npm/%40noble/hashes@2.3.0"
  ],
  "symbols": [
    "@noble/hashes.scrypt"
  ]
}

import { scrypt, scryptAsync } from '@noble/hashes/scrypt.js';
import { bytesToHex, hexToBytes, utf8ToBytes } from '@noble/hashes/utils.js';

export {
  scrypt,
  scryptAsync,
  bytesToHex,
  hexToBytes,
  utf8ToBytes
};

/**
 * Derives a cryptographic key using synchronous scrypt.
 * @param {string|Uint8Array} password
 * @param {string|Uint8Array} salt
 * @param {object} opts
 * @returns {Uint8Array}
 */
export function deriveKey(password, salt, opts) {
  const pwdBytes = typeof password === 'string' ? utf8ToBytes(password) : password;
  const saltBytes = typeof salt === 'string' ? utf8ToBytes(salt) : salt;
  return scrypt(pwdBytes, saltBytes, opts);
}

/**
 * Derives a cryptographic key using asynchronous scrypt.
 * @param {string|Uint8Array} password
 * @param {string|Uint8Array} salt
 * @param {object} opts
 * @returns {Promise<Uint8Array>}
 */
export async function deriveKeyAsync(password, salt, opts) {
  const pwdBytes = typeof password === 'string' ? utf8ToBytes(password) : password;
  const saltBytes = typeof salt === 'string' ? utf8ToBytes(salt) : salt;
  return await scryptAsync(pwdBytes, saltBytes, opts);
}

import assert from 'node:assert';
import {
  scrypt,
  scryptAsync,
  deriveKey,
  deriveKeyAsync,
  bytesToHex,
  hexToBytes,
  utf8ToBytes
} from '../src/index.mjs';

// 1. scrypt synchronously derives deterministic cryptographic keys from string and byte inputs conforming to RFC 7914 test vectors
const vec1 = scrypt('', '', { N: 16, r: 1, p: 1, dkLen: 64 });
assert.strictEqual(
  bytesToHex(vec1),
  '77d6576238657b203b19ca42c18a0497f16b4844e3074ae8dfdffa3fede21442fcd0069ded0948f8326a753a0fc81f17e8d3e0fb2e0d3628cf35e20c38d18906'
);

const vec2 = deriveKey(utf8ToBytes('password'), utf8ToBytes('NaCl'), { N: 1024, r: 8, p: 16, dkLen: 64 });
assert.strictEqual(
  bytesToHex(vec2),
  'fdbabe1c9d3472007856e7190d01e9fe7c6ad7cbc8237830e77376634b3731622eaf30d92e22a3886ff109279d9830dac727afb94a83ee6d8360cbdfa2cc0640'
);

// 2. scryptAsync asynchronously derives keys identical to synchronous scrypt and tracks derivation progress via onProgress callback
const syncKey = deriveKey('password', 'salt', { N: 1024, r: 8, p: 1, dkLen: 32 });
assert.strictEqual(bytesToHex(syncKey), '16dbc8906763c7f048977a68f9d305f7710e068ca2cd95dab372125bb3f19608');

let progressEvents = 0;
const asyncKey = await deriveKeyAsync('password', 'salt', {
  N: 1024,
  r: 8,
  p: 1,
  dkLen: 32,
  onProgress(fraction) {
    if (fraction >= 0 && fraction <= 1) {
      progressEvents++;
    }
  }
});
assert.strictEqual(bytesToHex(asyncKey), bytesToHex(syncKey));
assert.ok(progressEvents > 0, 'onProgress must be called during async derivation');

// 3. scrypt validates cost and memory parameters, throwing descriptive errors when N is not a power of 2, r or p or dkLen are invalid, or maxmem is exceeded
assert.throws(() => scrypt('pass', 'salt', { N: 15, r: 8, p: 1 }), /"N" expected a power of 2/);
assert.throws(() => scrypt('pass', 'salt', { N: 16, r: 0, p: 1 }), /"r" expected integer >= 1/);
assert.throws(() => scrypt('pass', 'salt', { N: 16, r: 8, p: 0 }), /"p" expected integer/);
assert.throws(() => scrypt('pass', 'salt', { N: 16, r: 8, p: 1, dkLen: 0 }), /"dkLen" expected integer/);
assert.throws(() => scrypt('pass', 'salt', { N: 16, r: 8, p: 1, maxmem: 100 }), /"maxmem" limit was hit/);

console.log('Contract tests passed successfully.');