From 0fa59888f6c3dbb2c97201144f19f2567002801b Mon Sep 17 00:00:00 2001 From: dajiaji Date: Sun, 4 Aug 2024 13:48:29 +0000 Subject: [PATCH] deploy: d517988cefaee9827bea059ac7afe01f0b98dcd3 --- .../docs/classes/Chacha20Poly1305.html | 12 +++---- core/docs/classes/Aes128Gcm.html | 12 +++---- core/docs/classes/Aes256Gcm.html | 12 +++---- core/docs/classes/BaseError.html | 4 +-- core/docs/classes/CipherSuite.html | 18 +++++------ core/docs/classes/DecapError.html | 4 +-- core/docs/classes/DeriveKeyPairError.html | 4 +-- core/docs/classes/DeserializeError.html | 4 +-- core/docs/classes/DhkemP256HkdfSha256.html | 22 ++++++------- core/docs/classes/DhkemP384HkdfSha384.html | 22 ++++++------- core/docs/classes/DhkemP521HkdfSha512.html | 22 ++++++------- core/docs/classes/EncapError.html | 4 +-- core/docs/classes/ExportError.html | 4 +-- core/docs/classes/ExportOnly.html | 12 +++---- core/docs/classes/HkdfSha256.html | 26 +++++++-------- core/docs/classes/HkdfSha384.html | 26 +++++++-------- core/docs/classes/HkdfSha512.html | 26 +++++++-------- core/docs/classes/HpkeError.html | 4 +-- core/docs/classes/InvalidParamError.html | 4 +-- .../classes/MessageLimitReachedError.html | 4 +-- core/docs/classes/NotSupportedError.html | 4 +-- core/docs/classes/OpenError.html | 4 +-- core/docs/classes/SealError.html | 4 +-- core/docs/classes/SerializeError.html | 4 +-- core/docs/classes/ValidationError.html | 4 +-- .../interfaces/AeadEncryptionContext.html | 6 ++-- core/docs/interfaces/AeadInterface.html | 12 +++---- core/docs/interfaces/CipherSuiteParams.html | 8 ++--- .../interfaces/CipherSuiteSealResponse.html | 6 ++-- core/docs/interfaces/EncryptionContext.html | 8 ++--- core/docs/interfaces/KdfInterface.html | 22 ++++++------- core/docs/interfaces/KemInterface.html | 30 ++++++++--------- core/docs/interfaces/PreSharedKey.html | 6 ++-- .../interfaces/RecipientContextParams.html | 12 +++---- core/docs/interfaces/SenderContext.html | 10 +++--- core/docs/interfaces/SenderContextParams.html | 12 +++---- core/docs/types/AeadId.html | 2 +- core/docs/types/KdfId.html | 2 +- core/docs/types/KemId.html | 2 +- core/docs/types/RecipientContext.html | 2 +- core/docs/variables/AeadId-1.html | 2 +- core/docs/variables/KdfId-1.html | 2 +- core/docs/variables/KemId-1.html | 2 +- .../classes/DhkemSecp256k1HkdfSha256.html | 32 +++++++++---------- dhkem-secp256k1/src/hpke-dhkem-secp256k1.js | 2 +- .../docs/classes/DhkemX25519HkdfSha256.html | 32 +++++++++---------- dhkem-x25519/src/hpke-dhkem-x25519.js | 8 +---- .../docs/classes/DhkemX448HkdfSha512.html | 32 +++++++++---------- dhkem-x448/src/hpke-dhkem-x448.js | 2 +- docs/classes/BaseError.html | 4 +-- docs/classes/CipherSuite.html | 24 +++++++------- docs/classes/DecapError.html | 4 +-- docs/classes/DeriveKeyPairError.html | 4 +-- docs/classes/DeserializeError.html | 4 +-- docs/classes/EncapError.html | 4 +-- docs/classes/ExportError.html | 4 +-- docs/classes/HpkeError.html | 4 +-- docs/classes/InvalidParamError.html | 4 +-- docs/classes/MessageLimitReachedError.html | 4 +-- docs/classes/NotSupportedError.html | 4 +-- docs/classes/OpenError.html | 4 +-- docs/classes/SealError.html | 4 +-- docs/classes/SerializeError.html | 4 +-- docs/classes/ValidationError.html | 4 +-- docs/interfaces/AeadEncryptionContext.html | 6 ++-- docs/interfaces/AeadInterface.html | 12 +++---- docs/interfaces/CipherSuiteParams.html | 8 ++--- docs/interfaces/CipherSuiteSealResponse.html | 6 ++-- docs/interfaces/EncryptionContext.html | 8 ++--- docs/interfaces/KdfInterface.html | 22 ++++++------- docs/interfaces/KemInterface.html | 30 ++++++++--------- docs/interfaces/PreSharedKey.html | 6 ++-- docs/interfaces/RecipientContextParams.html | 12 +++---- docs/interfaces/SenderContext.html | 10 +++--- docs/interfaces/SenderContextParams.html | 12 +++---- docs/types/Aead.html | 2 +- docs/types/AeadId.html | 2 +- docs/types/Kdf.html | 2 +- docs/types/KdfId.html | 2 +- docs/types/Kem.html | 2 +- docs/types/KemId.html | 2 +- docs/types/RecipientContext.html | 2 +- docs/variables/Aead-1.html | 2 +- docs/variables/AeadId-1.html | 2 +- docs/variables/Kdf-1.html | 2 +- docs/variables/KdfId-1.html | 2 +- docs/variables/Kem-1.html | 2 +- docs/variables/KemId-1.html | 2 +- .../docs/classes/HybridkemX25519Kyber768.html | 22 ++++++------- .../src/hpke-hybridkem-x25519-kyber768.js | 8 +---- src/hpke.js | 2 +- 91 files changed, 389 insertions(+), 401 deletions(-) diff --git a/chacha20poly1305/docs/classes/Chacha20Poly1305.html b/chacha20poly1305/docs/classes/Chacha20Poly1305.html index 041ef5775..5be87584f 100644 --- a/chacha20poly1305/docs/classes/Chacha20Poly1305.html +++ b/chacha20poly1305/docs/classes/Chacha20Poly1305.html @@ -7,17 +7,17 @@

This class is implemented using @noble/ciphers.

-

Implements

Constructors

constructor +

Implements

  • AeadInterface

Constructors

constructor

Properties

id keySize nonceSize tagSize

Methods

createEncryptionContext

Constructors

constructor

Properties

Readonlyid

id: AeadId = AeadId.Chacha20Poly1305

AeadId.Chacha20Poly1305 (0x0003)

-

ReadonlykeySize

keySize: number = 32

32

-

ReadonlynonceSize

nonceSize: number = 12

12

-

ReadonlytagSize

tagSize: number = 16

16

-

Methods

createEncryptionContext

  • createEncryptionContext(key): AeadEncryptionContext

  • Creates an AEAD encryption context which has seal/open operation.

    +

ReadonlykeySize

keySize: number = 32

32

+

ReadonlynonceSize

nonceSize: number = 12

12

+

ReadonlytagSize

tagSize: number = 16

16

+

Methods

createEncryptionContext

  • createEncryptionContext(key): AeadEncryptionContext

  • Creates an AEAD encryption context which has seal/open operation.

    Parameters

    • key: ArrayBuffer

      A byte string of the raw key.

    Returns AeadEncryptionContext

    An AEAD encryption context.

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/Aes128Gcm.html b/core/docs/classes/Aes128Gcm.html index e2e8da5ec..44096aab7 100644 --- a/core/docs/classes/Aes128Gcm.html +++ b/core/docs/classes/Aes128Gcm.html @@ -4,17 +4,17 @@

Example

import {
  Aes128Gcm,
  CipherSuite,
  DhkemP256HkdfSha256,
  HkdfSha256,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP256HkdfSha256(),
  kdf: new HkdfSha256(),
  aead: new Aes128Gcm(),
});
-

Hierarchy (view full)

Implements

Constructors

constructor +

Hierarchy (view full)

Implements

Constructors

constructor

Properties

id keySize nonceSize tagSize

Methods

createEncryptionContext

Constructors

constructor

Properties

Readonlyid

id: AeadId = AeadId.Aes128Gcm

AeadId.Aes128Gcm (0x0001)

-

ReadonlykeySize

keySize: number = 16

16

-

ReadonlynonceSize

nonceSize: number = 12

12

-

ReadonlytagSize

tagSize: number = 16

16

-

Methods

createEncryptionContext

ReadonlykeySize

keySize: number = 16

16

+

ReadonlynonceSize

nonceSize: number = 12

12

+

ReadonlytagSize

tagSize: number = 16

16

+

Methods

createEncryptionContext

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/Aes256Gcm.html b/core/docs/classes/Aes256Gcm.html index 41de6ea71..c3121a0e0 100644 --- a/core/docs/classes/Aes256Gcm.html +++ b/core/docs/classes/Aes256Gcm.html @@ -5,17 +5,17 @@

Example

import {
  Aes256Gcm,
  CipherSuite,
  DhkemP256HkdfSha256,
  HkdfSha256,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP256HkdfSha256(),
  kdf: new HkdfSha256(),
  aead: new Aes256Gcm(),
});
-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

id keySize nonceSize tagSize

Methods

createEncryptionContext

Constructors

constructor

Properties

Readonlyid

id: AeadId = AeadId.Aes256Gcm

AeadId.Aes256Gcm (0x0002)

-

ReadonlykeySize

keySize: number = 32

32

-

ReadonlynonceSize

nonceSize: number = 12

12

-

ReadonlytagSize

tagSize: number = 16

16

-

Methods

createEncryptionContext

ReadonlykeySize

keySize: number = 32

32

+

ReadonlynonceSize

nonceSize: number = 12

12

+

ReadonlytagSize

tagSize: number = 16

16

+

Methods

createEncryptionContext

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/BaseError.html b/core/docs/classes/BaseError.html index 373b05409..d9fe8ee37 100644 --- a/core/docs/classes/BaseError.html +++ b/core/docs/classes/BaseError.html @@ -1,7 +1,7 @@ BaseError | @hpke/core

Class BaseError

The base error class of hpke-js.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/CipherSuite.html b/core/docs/classes/CipherSuite.html index 21116e440..3fb51b2e2 100644 --- a/core/docs/classes/CipherSuite.html +++ b/core/docs/classes/CipherSuite.html @@ -39,7 +39,7 @@

Example: Use a ciphersuite which is currently not supported by Web Cryptography API.

import { Aes128Gcm, HkdfSha256, CipherSuite } from "http://deno.land/x/hpke/core/mod.ts";
import { DhkemX25519HkdfSha256 } from "https://deno.land/x/hpke/x/dhkem-x25519/mod.ts";
const suite = new CipherSuite({
  kem: new DhkemX25519HkdfSha256(),
  kdf: new HkdfSha256(),
  aead: new Aes128Gcm(),
});
-

Hierarchy

Constructors

constructor +

Hierarchy

  • CipherSuiteNative
    • CipherSuite

Constructors

constructor

Properties

_api _kem

Accessors

aead @@ -53,32 +53,32 @@

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_kem

_kem: KemInterface

Accessors

aead

kdf

kem

Methods

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

createRecipientContext

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_kem

_kem: KemInterface

Accessors

aead

kdf

kem

Methods

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

createRecipientContext

createSenderContext

createSenderContext

open

  • open(params, ct, aad?): Promise<ArrayBuffer>

  • Decrypts a message from a sender.

    +

open

  • open(params, ct, aad?): Promise<ArrayBuffer>

  • Decrypts a message from a sender.

    If the error occurred, throws DecapError | DeserializeError | OpenError | ValidationError.

    Parameters

    • params: RecipientContextParams

      A set of parameters for building a recipient encryption context.

    • ct: ArrayBuffer

      An encrypted text as bytes to be decrypted.

    • aad: ArrayBuffer = EMPTY

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    Throws

    DecapError, DeserializeError, OpenError, ValidationError

    -

seal

seal

Settings

Member Visibility

On This Page

Constructors
Properties
Accessors
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Accessors
Methods
diff --git a/core/docs/classes/DecapError.html b/core/docs/classes/DecapError.html index 13570d604..0e64cab9b 100644 --- a/core/docs/classes/DecapError.html +++ b/core/docs/classes/DecapError.html @@ -1,7 +1,7 @@ DecapError | @hpke/core

Class DecapError

decap() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/DeriveKeyPairError.html b/core/docs/classes/DeriveKeyPairError.html index 9487c4939..92846b61d 100644 --- a/core/docs/classes/DeriveKeyPairError.html +++ b/core/docs/classes/DeriveKeyPairError.html @@ -1,7 +1,7 @@ DeriveKeyPairError | @hpke/core

Class DeriveKeyPairError

Key pair derivation failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/DeserializeError.html b/core/docs/classes/DeserializeError.html index 08ccc3c9c..7f764f9ae 100644 --- a/core/docs/classes/DeserializeError.html +++ b/core/docs/classes/DeserializeError.html @@ -1,7 +1,7 @@ DeserializeError | @hpke/core

Class DeserializeError

Public or private key deserialization failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/DhkemP256HkdfSha256.html b/core/docs/classes/DhkemP256HkdfSha256.html index 489d8ee5a..9dd7eb80b 100644 --- a/core/docs/classes/DhkemP256HkdfSha256.html +++ b/core/docs/classes/DhkemP256HkdfSha256.html @@ -5,7 +5,7 @@

Example

import {
  Aes128Gcm,
  CipherSuite,
  DhkemP256HkdfSha256,
  HkdfSha256,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP256HkdfSha256(),
  kdf: new HkdfSha256(),
  aead: new Aes128Gcm(),
});
-

Hierarchy

Constructors

constructor +

Hierarchy

  • DhkemP256HkdfSha256Native
    • DhkemP256HkdfSha256

Constructors

constructor

Properties

_kdf _prim encSize @@ -22,38 +22,38 @@ importKey serializePrivateKey serializePublicKey -

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 65

Readonlyid

id: KemId = KemId.DhkemP256HkdfSha256

ReadonlyprivateKeySize

privateKeySize: number = 32

ReadonlypublicKeySize

publicKeySize: number = 65

ReadonlysecretSize

secretSize: number = 32

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    +

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 65

Readonlyid

id: KemId = KemId.DhkemP256HkdfSha256

ReadonlyprivateKeySize

privateKeySize: number = 32

ReadonlypublicKeySize

publicKeySize: number = 65

ReadonlysecretSize

secretSize: number = 32

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    +

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    If the error occurred, throws DeriveKeyPairError.

    Parameters

    • ikm: ArrayBuffer

      An input keying material.

    Returns Promise<CryptoKeyPair>

    A key pair derived.

    Throws

    DeriveKeyPairError

    -

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    +

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    +

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    +

generateKeyPair

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    +

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    Since key parameters for createSenderContext or createRecipientContext are CryptoKey format, you have to use this function to convert provided keys to CryptoKey.

    @@ -65,14 +65,14 @@
  • isPublic: boolean = true

    The indicator whether the provided key is a public key or not, which is used only for 'raw' format.

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    +

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    +

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/DhkemP384HkdfSha384.html b/core/docs/classes/DhkemP384HkdfSha384.html index 914146f07..1f85470cb 100644 --- a/core/docs/classes/DhkemP384HkdfSha384.html +++ b/core/docs/classes/DhkemP384HkdfSha384.html @@ -5,7 +5,7 @@

Example

import {
  Aes128Gcm,
  CipherSuite,
  DhkemP384HkdfSha384,
  HkdfSha384,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP384HkdfSha384(),
  kdf: new HkdfSha384(),
  aead: new Aes128Gcm(),
});
-

Hierarchy

Constructors

constructor +

Hierarchy

  • DhkemP384HkdfSha384Native
    • DhkemP384HkdfSha384

Constructors

constructor

Properties

_kdf _prim encSize @@ -22,38 +22,38 @@ importKey serializePrivateKey serializePublicKey -

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 97

Readonlyid

id: KemId = KemId.DhkemP384HkdfSha384

ReadonlyprivateKeySize

privateKeySize: number = 48

ReadonlypublicKeySize

publicKeySize: number = 97

ReadonlysecretSize

secretSize: number = 48

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    +

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 97

Readonlyid

id: KemId = KemId.DhkemP384HkdfSha384

ReadonlyprivateKeySize

privateKeySize: number = 48

ReadonlypublicKeySize

publicKeySize: number = 97

ReadonlysecretSize

secretSize: number = 48

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    +

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    If the error occurred, throws DeriveKeyPairError.

    Parameters

    • ikm: ArrayBuffer

      An input keying material.

    Returns Promise<CryptoKeyPair>

    A key pair derived.

    Throws

    DeriveKeyPairError

    -

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    +

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    +

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    +

generateKeyPair

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    +

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    Since key parameters for createSenderContext or createRecipientContext are CryptoKey format, you have to use this function to convert provided keys to CryptoKey.

    @@ -65,14 +65,14 @@
  • isPublic: boolean = true

    The indicator whether the provided key is a public key or not, which is used only for 'raw' format.

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    +

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    +

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/DhkemP521HkdfSha512.html b/core/docs/classes/DhkemP521HkdfSha512.html index e3fcedb4b..a05736967 100644 --- a/core/docs/classes/DhkemP521HkdfSha512.html +++ b/core/docs/classes/DhkemP521HkdfSha512.html @@ -5,7 +5,7 @@

Example

import {
  Aes256Gcm,
  CipherSuite,
  DhkemP521HkdfSha512,
  HkdfSha512,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP521HkdfSha512(),
  kdf: new HkdfSha512(),
  aead: new Aes256Gcm(),
});
-

Hierarchy

Constructors

constructor +

Hierarchy

  • DhkemP521HkdfSha512Native
    • DhkemP521HkdfSha512

Constructors

constructor

Properties

_kdf _prim encSize @@ -22,38 +22,38 @@ importKey serializePrivateKey serializePublicKey -

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 133

Readonlyid

id: KemId = KemId.DhkemP521HkdfSha512

ReadonlyprivateKeySize

privateKeySize: number = 64

ReadonlypublicKeySize

publicKeySize: number = 133

ReadonlysecretSize

secretSize: number = 64

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    +

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 133

Readonlyid

id: KemId = KemId.DhkemP521HkdfSha512

ReadonlyprivateKeySize

privateKeySize: number = 64

ReadonlypublicKeySize

publicKeySize: number = 133

ReadonlysecretSize

secretSize: number = 64

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    +

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    If the error occurred, throws DeriveKeyPairError.

    Parameters

    • ikm: ArrayBuffer

      An input keying material.

    Returns Promise<CryptoKeyPair>

    A key pair derived.

    Throws

    DeriveKeyPairError

    -

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    +

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    +

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    +

generateKeyPair

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    +

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    Since key parameters for createSenderContext or createRecipientContext are CryptoKey format, you have to use this function to convert provided keys to CryptoKey.

    @@ -65,14 +65,14 @@
  • isPublic: boolean = true

    The indicator whether the provided key is a public key or not, which is used only for 'raw' format.

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    +

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    +

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/EncapError.html b/core/docs/classes/EncapError.html index 287afb974..ced50dbc0 100644 --- a/core/docs/classes/EncapError.html +++ b/core/docs/classes/EncapError.html @@ -1,7 +1,7 @@ EncapError | @hpke/core

Class EncapError

encap() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/ExportError.html b/core/docs/classes/ExportError.html index c26ba0293..077c35469 100644 --- a/core/docs/classes/ExportError.html +++ b/core/docs/classes/ExportError.html @@ -1,7 +1,7 @@ ExportError | @hpke/core

Class ExportError

Secret export failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/ExportOnly.html b/core/docs/classes/ExportOnly.html index fbf8ab07c..91893f4fa 100644 --- a/core/docs/classes/ExportOnly.html +++ b/core/docs/classes/ExportOnly.html @@ -5,16 +5,16 @@

Example

import {
  CipherSuite,
  DhkemP256HkdfSha256,
  ExportOnly,
  HkdfSha256,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP256HkdfSha256(),
  kdf: new HkdfSha256(),
  aead: new ExportOnly(),
});
-

Implements

Constructors

constructor +

Implements

Constructors

constructor

Properties

id keySize nonceSize tagSize

Methods

createEncryptionContext

Constructors

constructor

Properties

Readonlyid

id: AeadId = AeadId.ExportOnly

The KDF identifier.

-

ReadonlykeySize

keySize: number = 0

The length in bytes of an AEAD key (Nk).

-

ReadonlynonceSize

nonceSize: number = 0

The length in bytes of an AEAD nonce (Nn).

-

ReadonlytagSize

tagSize: number = 0

The length in bytes of an AEAD authentication tag (Nt).

-

Methods

createEncryptionContext

ReadonlykeySize

keySize: number = 0

The length in bytes of an AEAD key (Nk).

+

ReadonlynonceSize

nonceSize: number = 0

The length in bytes of an AEAD nonce (Nn).

+

ReadonlytagSize

tagSize: number = 0

The length in bytes of an AEAD authentication tag (Nt).

+

Methods

createEncryptionContext

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/HkdfSha256.html b/core/docs/classes/HkdfSha256.html index 447f38a20..b0d1bfa0c 100644 --- a/core/docs/classes/HkdfSha256.html +++ b/core/docs/classes/HkdfSha256.html @@ -7,7 +7,7 @@

Example

import {
  Aes128Gcm,
  CipherSuite,
  DhkemP256HkdfSha256,
  HkdfSha256,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP256HkdfSha256(),
  kdf: new HkdfSha256(),
  aead: new Aes128Gcm(),
});
-

Hierarchy

Constructors

constructor +

Hierarchy

  • HkdfSha256Native
    • HkdfSha256

Constructors

constructor

Properties

_api _suiteId algHash @@ -23,43 +23,43 @@ init labeledExpand labeledExtract -

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_suiteId

_suiteId: Uint8Array = EMPTY

Protected ReadonlyalgHash

algHash: HmacKeyGenParams = ...

The parameters for Web Cryptography API

-

ReadonlyhashSize

hashSize: number = 32

32

-

Readonlyid

id: KdfId = KdfId.HkdfSha256

KdfId.HkdfSha256 (0x0001)

-

Methods

Protected_checkInit

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    +

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_suiteId

_suiteId: Uint8Array = EMPTY

Protected ReadonlyalgHash

algHash: HmacKeyGenParams = ...

The parameters for Web Cryptography API

+

ReadonlyhashSize

hashSize: number = 32

32

+

Readonlyid

id: KdfId = KdfId.HkdfSha256

KdfId.HkdfSha256 (0x0001)

+

Methods

Protected_checkInit

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

    Returns Uint8Array

    An input keying material as bytes.

    -

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    +

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length of the output byte string.

    Returns Uint8Array

    An info string as bytes.

    -

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    +

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    +

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    +

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    +

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    Parameters

    • suiteId: Uint8Array

      A suite_id defined in RFC9180.

      -

    Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/HkdfSha384.html b/core/docs/classes/HkdfSha384.html index 41218428f..404012646 100644 --- a/core/docs/classes/HkdfSha384.html +++ b/core/docs/classes/HkdfSha384.html @@ -7,7 +7,7 @@

Example

import {
  Aes128Gcm,
  CipherSuite,
  DhkemP384HkdfSha384,
  HkdfSha384,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP384HkdfSha384(),
  kdf: new HkdfSha384(),
  aead: new Aes128Gcm(),
});
-

Hierarchy

Constructors

constructor +

Hierarchy

  • HkdfSha384Native
    • HkdfSha384

Constructors

constructor

Properties

_api _suiteId algHash @@ -23,43 +23,43 @@ init labeledExpand labeledExtract -

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_suiteId

_suiteId: Uint8Array = EMPTY

Protected ReadonlyalgHash

algHash: HmacKeyGenParams = ...

The parameters for Web Cryptography API

-

ReadonlyhashSize

hashSize: number = 48

48

-

Readonlyid

id: KdfId = KdfId.HkdfSha384

KdfId.HkdfSha384 (0x0002)

-

Methods

Protected_checkInit

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    +

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_suiteId

_suiteId: Uint8Array = EMPTY

Protected ReadonlyalgHash

algHash: HmacKeyGenParams = ...

The parameters for Web Cryptography API

+

ReadonlyhashSize

hashSize: number = 48

48

+

Readonlyid

id: KdfId = KdfId.HkdfSha384

KdfId.HkdfSha384 (0x0002)

+

Methods

Protected_checkInit

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

    Returns Uint8Array

    An input keying material as bytes.

    -

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    +

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length of the output byte string.

    Returns Uint8Array

    An info string as bytes.

    -

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    +

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    +

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    +

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    +

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    Parameters

    • suiteId: Uint8Array

      A suite_id defined in RFC9180.

      -

    Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/HkdfSha512.html b/core/docs/classes/HkdfSha512.html index 28cb5311c..0e07df678 100644 --- a/core/docs/classes/HkdfSha512.html +++ b/core/docs/classes/HkdfSha512.html @@ -7,7 +7,7 @@

Example

import {
  Aes256Gcm,
  CipherSuite,
  DhkemP521HkdfSha512,
  HkdfSha512,
} from "http://deno.land/x/hpke/core/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemP521HkdfSha512(),
  kdf: new HkdfSha512(),
  aead: new Aes256Gcm(),
});
-

Hierarchy

Constructors

constructor +

Hierarchy

  • HkdfSha512Native
    • HkdfSha512

Constructors

constructor

Properties

_api _suiteId algHash @@ -23,43 +23,43 @@ init labeledExpand labeledExtract -

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_suiteId

_suiteId: Uint8Array = EMPTY

Protected ReadonlyalgHash

algHash: HmacKeyGenParams = ...

The parameters for Web Cryptography API

-

ReadonlyhashSize

hashSize: number = 64

64

-

Readonlyid

id: KdfId = KdfId.HkdfSha512

KdfId.HkdfSha512 (0x0003)

-

Methods

Protected_checkInit

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    +

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_suiteId

_suiteId: Uint8Array = EMPTY

Protected ReadonlyalgHash

algHash: HmacKeyGenParams = ...

The parameters for Web Cryptography API

+

ReadonlyhashSize

hashSize: number = 64

64

+

Readonlyid

id: KdfId = KdfId.HkdfSha512

KdfId.HkdfSha512 (0x0003)

+

Methods

Protected_checkInit

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

    Returns Uint8Array

    An input keying material as bytes.

    -

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    +

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length of the output byte string.

    Returns Uint8Array

    An info string as bytes.

    -

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    +

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    +

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    +

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    +

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    Parameters

    • suiteId: Uint8Array

      A suite_id defined in RFC9180.

      -

    Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/core/docs/classes/HpkeError.html b/core/docs/classes/HpkeError.html index 79b26d9f3..5bbdd35ca 100644 --- a/core/docs/classes/HpkeError.html +++ b/core/docs/classes/HpkeError.html @@ -1,7 +1,7 @@ HpkeError | @hpke/core

Class HpkeError

The base error class of hpke-js.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/InvalidParamError.html b/core/docs/classes/InvalidParamError.html index 844f90751..a77f69451 100644 --- a/core/docs/classes/InvalidParamError.html +++ b/core/docs/classes/InvalidParamError.html @@ -1,7 +1,7 @@ InvalidParamError | @hpke/core

Class InvalidParamError

Invalid parameter.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/MessageLimitReachedError.html b/core/docs/classes/MessageLimitReachedError.html index 4fe3faa56..61cd026e6 100644 --- a/core/docs/classes/MessageLimitReachedError.html +++ b/core/docs/classes/MessageLimitReachedError.html @@ -1,7 +1,7 @@ MessageLimitReachedError | @hpke/core

Class MessageLimitReachedError

Sequence number overflow on the encryption context.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/NotSupportedError.html b/core/docs/classes/NotSupportedError.html index cf074afdd..fcd741263 100644 --- a/core/docs/classes/NotSupportedError.html +++ b/core/docs/classes/NotSupportedError.html @@ -1,7 +1,7 @@ NotSupportedError | @hpke/core

Class NotSupportedError

Not supported failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/OpenError.html b/core/docs/classes/OpenError.html index c8dede59c..f4942e5db 100644 --- a/core/docs/classes/OpenError.html +++ b/core/docs/classes/OpenError.html @@ -1,7 +1,7 @@ OpenError | @hpke/core

Class OpenError

open() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/SealError.html b/core/docs/classes/SealError.html index 96dea8f7c..b5d32c7ec 100644 --- a/core/docs/classes/SealError.html +++ b/core/docs/classes/SealError.html @@ -1,7 +1,7 @@ SealError | @hpke/core

Class SealError

seal() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/SerializeError.html b/core/docs/classes/SerializeError.html index 66610e67d..f681a1b61 100644 --- a/core/docs/classes/SerializeError.html +++ b/core/docs/classes/SerializeError.html @@ -1,7 +1,7 @@ SerializeError | @hpke/core

Class SerializeError

Public or private key serialization failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/classes/ValidationError.html b/core/docs/classes/ValidationError.html index fcf526688..b2867f848 100644 --- a/core/docs/classes/ValidationError.html +++ b/core/docs/classes/ValidationError.html @@ -1,7 +1,7 @@ ValidationError | @hpke/core

Class ValidationError

KEM input or output validation failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/core/docs/interfaces/AeadEncryptionContext.html b/core/docs/interfaces/AeadEncryptionContext.html index 70ec69074..7391eb5c6 100644 --- a/core/docs/interfaces/AeadEncryptionContext.html +++ b/core/docs/interfaces/AeadEncryptionContext.html @@ -1,14 +1,14 @@ AeadEncryptionContext | @hpke/core

Interface AeadEncryptionContext

The AEAD encryption context interface.

-
interface AeadEncryptionContext {
    open(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
    seal(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
}

Methods

open +
interface AeadEncryptionContext {
    open(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
    seal(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
}

Methods

open seal

Methods

open

  • open(iv, data, aad): Promise<ArrayBuffer>

  • Decrypts data with an initialization vector and additional authenticated data.

    Parameters

    • iv: ArrayBuffer

      An initialization vector.

    • data: ArrayBuffer

      A plain text as bytes to be encrypted.

    • aad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    -

seal

seal

  • seal(iv, data, aad): Promise<ArrayBuffer>

  • Encrypts data with an initialization vector and additional authenticated data.

    Parameters

    • iv: ArrayBuffer

      An initialization vector.

    • data: ArrayBuffer

      A plain text as bytes to be encrypted.

    • aad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A cipher text as bytes.

    -

Settings

Member Visibility

On This Page

Methods
+

Settings

Member Visibility

On This Page

Methods
diff --git a/core/docs/interfaces/AeadInterface.html b/core/docs/interfaces/AeadInterface.html index 6b3982d19..5bf5d175c 100644 --- a/core/docs/interfaces/AeadInterface.html +++ b/core/docs/interfaces/AeadInterface.html @@ -1,14 +1,14 @@ AeadInterface | @hpke/core

Interface AeadInterface

The AEAD interface.

-
interface AeadInterface {
    id: AeadId;
    keySize: number;
    nonceSize: number;
    tagSize: number;
    createEncryptionContext(key: ArrayBuffer): AeadEncryptionContext;
}

Implemented by

Properties

id +
interface AeadInterface {
    id: AeadId;
    keySize: number;
    nonceSize: number;
    tagSize: number;
    createEncryptionContext(key: ArrayBuffer): AeadEncryptionContext;
}

Implemented by

Properties

id keySize nonceSize tagSize

Methods

createEncryptionContext

Properties

Readonlyid

id: AeadId

The KDF identifier.

-

ReadonlykeySize

keySize: number

The length in bytes of an AEAD key (Nk).

-

ReadonlynonceSize

nonceSize: number

The length in bytes of an AEAD nonce (Nn).

-

ReadonlytagSize

tagSize: number

The length in bytes of an AEAD authentication tag (Nt).

-

Methods

createEncryptionContext

ReadonlykeySize

keySize: number

The length in bytes of an AEAD key (Nk).

+

ReadonlynonceSize

nonceSize: number

The length in bytes of an AEAD nonce (Nn).

+

ReadonlytagSize

tagSize: number

The length in bytes of an AEAD authentication tag (Nt).

+

Methods

createEncryptionContext

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/core/docs/interfaces/CipherSuiteParams.html b/core/docs/interfaces/CipherSuiteParams.html index 85575e753..f1f1e3abe 100644 --- a/core/docs/interfaces/CipherSuiteParams.html +++ b/core/docs/interfaces/CipherSuiteParams.html @@ -1,8 +1,8 @@ CipherSuiteParams | @hpke/core

Interface CipherSuiteParams

The parameters used to configure the CipherSuite.

-
interface CipherSuiteParams {
    aead: AeadId | AeadInterface;
    kdf: KdfId | KdfInterface;
    kem: KemId | KemInterface;
}

Properties

aead +
interface CipherSuiteParams {
    aead: AeadId | AeadInterface;
    kdf: KdfId | KdfInterface;
    kem: KemId | KemInterface;
}

Properties

aead kdf kem

Properties

aead

aead: AeadId | AeadInterface

The AEAD (Authenticated Encryption with Addtional Data) identifier or the AEAD object.

-

kdf

kdf: KdfId | KdfInterface

The KDF (Key Derivation Function) identifier or the KDF object.

-

kem

kem: KemId | KemInterface

The KEM (Key Encapsulation Mechanism) identifier or the KEM object.

-

Settings

Member Visibility

On This Page

Properties
+

kdf

kdf: KdfId | KdfInterface

The KDF (Key Derivation Function) identifier or the KDF object.

+

kem

kem: KemId | KemInterface

The KEM (Key Encapsulation Mechanism) identifier or the KEM object.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/core/docs/interfaces/CipherSuiteSealResponse.html b/core/docs/interfaces/CipherSuiteSealResponse.html index 669b6023e..707177913 100644 --- a/core/docs/interfaces/CipherSuiteSealResponse.html +++ b/core/docs/interfaces/CipherSuiteSealResponse.html @@ -1,6 +1,6 @@ CipherSuiteSealResponse | @hpke/core

Interface CipherSuiteSealResponse

The response of the single-shot seal API.

-
interface CipherSuiteSealResponse {
    ct: ArrayBuffer;
    enc: ArrayBuffer;
}

Properties

ct +
interface CipherSuiteSealResponse {
    ct: ArrayBuffer;
    enc: ArrayBuffer;
}

Properties

ct enc

Properties

ct

ct: ArrayBuffer

The ciphertext as bytes.

-

enc

enc: ArrayBuffer

The encapsulated key.

-

Settings

Member Visibility

On This Page

Properties
+

enc

enc: ArrayBuffer

The encapsulated key.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/core/docs/interfaces/EncryptionContext.html b/core/docs/interfaces/EncryptionContext.html index 5fa80bb2b..2c1198e98 100644 --- a/core/docs/interfaces/EncryptionContext.html +++ b/core/docs/interfaces/EncryptionContext.html @@ -1,5 +1,5 @@ EncryptionContext | @hpke/core

Interface EncryptionContext

The encryption context interface for a recipient and a sender.

-
interface EncryptionContext {
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Methods

export +
interface EncryptionContext {
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Methods

export open seal

Methods

export

  • export(exporterContext, len): Promise<ArrayBuffer>

  • Exports a secret using a variable-length pseudorandom function.

    @@ -8,16 +8,16 @@
  • len: number

    A desired length in bytes of the output secret.

Returns Promise<ArrayBuffer>

A secret string as bytes.

Throws

ExportError

-

open

open

  • open(data, aad?): Promise<ArrayBuffer>

  • Decrypts data.

    If the error occurred, throws OpenError.

    Parameters

    • data: ArrayBuffer

      An encrypted text as bytes to be decrypted.

    • Optionalaad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    Throws

    OpenError

    -

seal

seal

  • seal(data, aad?): Promise<ArrayBuffer>

  • Encrypts data.

    If the error occurred, throws SealError | MessageLimitReachedError.

    Parameters

    • data: ArrayBuffer

      A plain text as bytes to be encrypted.

    • Optionalaad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A cipher text as bytes.

    Throws

    MessageLimitReachedError, SealError

    -

Settings

Member Visibility

On This Page

Methods
+

Settings

Member Visibility

On This Page

Methods
diff --git a/core/docs/interfaces/KdfInterface.html b/core/docs/interfaces/KdfInterface.html index d6e052a3b..196047305 100644 --- a/core/docs/interfaces/KdfInterface.html +++ b/core/docs/interfaces/KdfInterface.html @@ -1,5 +1,5 @@ KdfInterface | @hpke/core

Interface KdfInterface

The KDF interface.

-
interface KdfInterface {
    hashSize: number;
    id: KdfId;
    buildLabeledIkm(label: Uint8Array, ikm: Uint8Array): Uint8Array;
    buildLabeledInfo(label: Uint8Array, info: Uint8Array, len: number): Uint8Array;
    expand(prk: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    extract(salt: ArrayBuffer, ikm: ArrayBuffer): Promise<ArrayBuffer>;
    extractAndExpand(salt: ArrayBuffer, ikm: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    init(suiteId: Uint8Array): void;
    labeledExpand(prk: ArrayBuffer, label: Uint8Array, info: Uint8Array, len: number): Promise<ArrayBuffer>;
    labeledExtract(salt: ArrayBuffer, label: Uint8Array, ikm: Uint8Array): Promise<ArrayBuffer>;
}

Properties

hashSize +
interface KdfInterface {
    hashSize: number;
    id: KdfId;
    buildLabeledIkm(label: Uint8Array, ikm: Uint8Array): Uint8Array;
    buildLabeledInfo(label: Uint8Array, info: Uint8Array, len: number): Uint8Array;
    expand(prk: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    extract(salt: ArrayBuffer, ikm: ArrayBuffer): Promise<ArrayBuffer>;
    extractAndExpand(salt: ArrayBuffer, ikm: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    init(suiteId: Uint8Array): void;
    labeledExpand(prk: ArrayBuffer, label: Uint8Array, info: Uint8Array, len: number): Promise<ArrayBuffer>;
    labeledExtract(salt: ArrayBuffer, label: Uint8Array, ikm: Uint8Array): Promise<ArrayBuffer>;
}

Properties

hashSize id

Methods

buildLabeledIkm buildLabeledInfo @@ -10,41 +10,41 @@ labeledExpand labeledExtract

Properties

ReadonlyhashSize

hashSize: number

The output size of the extract() function in bytes (Nh).

-

Readonlyid

id: KdfId

The KDF identifier.

-

Methods

buildLabeledIkm

Readonlyid

id: KdfId

The KDF identifier.

+

Methods

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

    Returns Uint8Array

    An input keying material as bytes.

    -

buildLabeledInfo

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length of the output byte string.

    Returns Uint8Array

    An info string as bytes.

    -

expand

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

extract

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    +

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

init

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    Parameters

    • suiteId: Uint8Array

      A suite_id defined in RFC9180.

      -

    Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

labeledExtract

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/core/docs/interfaces/KemInterface.html b/core/docs/interfaces/KemInterface.html index b476b7d0d..2b6af1dfd 100644 --- a/core/docs/interfaces/KemInterface.html +++ b/core/docs/interfaces/KemInterface.html @@ -1,5 +1,5 @@ KemInterface | @hpke/core

Interface KemInterface

The KEM interface.

-
interface KemInterface {
    encSize: number;
    id: KemId;
    privateKeySize: number;
    publicKeySize: number;
    secretSize: number;
    decap(params: RecipientContextParams): Promise<ArrayBuffer>;
    deriveKeyPair(ikm: ArrayBuffer): Promise<CryptoKeyPair>;
    deserializePrivateKey(key: ArrayBuffer): Promise<CryptoKey>;
    deserializePublicKey(key: ArrayBuffer): Promise<CryptoKey>;
    encap(params: SenderContextParams): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>;
    generateKeyPair(): Promise<CryptoKeyPair>;
    importKey(format: "raw" | "jwk", key: ArrayBuffer | JsonWebKey, isPublic?: boolean): Promise<CryptoKey>;
    serializePrivateKey(key: CryptoKey): Promise<ArrayBuffer>;
    serializePublicKey(key: CryptoKey): Promise<ArrayBuffer>;
}

Properties

encSize +
interface KemInterface {
    encSize: number;
    id: KemId;
    privateKeySize: number;
    publicKeySize: number;
    secretSize: number;
    decap(params: RecipientContextParams): Promise<ArrayBuffer>;
    deriveKeyPair(ikm: ArrayBuffer): Promise<CryptoKeyPair>;
    deserializePrivateKey(key: ArrayBuffer): Promise<CryptoKey>;
    deserializePublicKey(key: ArrayBuffer): Promise<CryptoKey>;
    encap(params: SenderContextParams): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>;
    generateKeyPair(): Promise<CryptoKeyPair>;
    importKey(format: "raw" | "jwk", key: ArrayBuffer | JsonWebKey, isPublic?: boolean): Promise<CryptoKey>;
    serializePrivateKey(key: CryptoKey): Promise<ArrayBuffer>;
    serializePublicKey(key: CryptoKey): Promise<ArrayBuffer>;
}

Properties

encSize id privateKeySize publicKeySize @@ -14,42 +14,42 @@ serializePrivateKey serializePublicKey

Properties

ReadonlyencSize

encSize: number

The length in bytes of an encapsulated key produced by this KEM (Nenc).

-

Readonlyid

id: KemId

The KEM identifier.

-

ReadonlyprivateKeySize

privateKeySize: number

The length in bytes of an encoded private key for this KEM (Nsk).

-

ReadonlypublicKeySize

publicKeySize: number

The length in bytes of an encoded public key for this KEM (Npk).

-

ReadonlysecretSize

secretSize: number

The length in bytes of a KEM shared secret produced by this KEM (Nsecret).

-

Methods

decap

Readonlyid

id: KemId

The KEM identifier.

+

ReadonlyprivateKeySize

privateKeySize: number

The length in bytes of an encoded private key for this KEM (Nsk).

+

ReadonlypublicKeySize

publicKeySize: number

The length in bytes of an encoded public key for this KEM (Npk).

+

ReadonlysecretSize

secretSize: number

The length in bytes of a KEM shared secret produced by this KEM (Nsecret).

+

Methods

decap

deriveKeyPair

deriveKeyPair

deserializePrivateKey

deserializePrivateKey

deserializePublicKey

deserializePublicKey

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

generateKeyPair

importKey

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    Since key parameters for createSenderContext or createRecipientContext are CryptoKey format, you have to use this function to convert provided keys to CryptoKey.

    @@ -61,14 +61,14 @@
  • OptionalisPublic: boolean

    The indicator whether the provided key is a public key or not, which is used only for 'raw' format.

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

serializePrivateKey

serializePublicKey

serializePublicKey

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/core/docs/interfaces/PreSharedKey.html b/core/docs/interfaces/PreSharedKey.html index d05d1eea6..7ea9599c7 100644 --- a/core/docs/interfaces/PreSharedKey.html +++ b/core/docs/interfaces/PreSharedKey.html @@ -1,6 +1,6 @@ PreSharedKey | @hpke/core

Interface PreSharedKey

The pre-shared key interface.

-
interface PreSharedKey {
    id: ArrayBuffer;
    key: ArrayBuffer;
}

Properties

id +
interface PreSharedKey {
    id: ArrayBuffer;
    key: ArrayBuffer;
}

Properties

id key

Properties

id

id: ArrayBuffer

The key identifier.

-

key

key: ArrayBuffer

The body of the pre-shared key.

-

Settings

Member Visibility

On This Page

Properties
+

key

key: ArrayBuffer

The body of the pre-shared key.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/core/docs/interfaces/RecipientContextParams.html b/core/docs/interfaces/RecipientContextParams.html index 5ca6867c0..736e81156 100644 --- a/core/docs/interfaces/RecipientContextParams.html +++ b/core/docs/interfaces/RecipientContextParams.html @@ -1,13 +1,13 @@ RecipientContextParams | @hpke/core

Interface RecipientContextParams

The parameters used to setup the RecipientContext.

-
interface RecipientContextParams {
    enc: ArrayBuffer;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientKey: CryptoKeyPair | CryptoKey;
    senderPublicKey?: CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • RecipientContextParams

Properties

enc +
interface RecipientContextParams {
    enc: ArrayBuffer;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientKey: CryptoKeyPair | CryptoKey;
    senderPublicKey?: CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • RecipientContextParams

Properties

enc info? psk? recipientKey senderPublicKey?

Properties

enc

enc: ArrayBuffer

A byte string of the encapsulated key received from a sender.

-

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

-

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. +

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

+

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. The PSK should have at least 32 bytes :and the maxmum length of the PSK is 128 bytes.

-

recipientKey

recipientKey: CryptoKeyPair | CryptoKey

A recipient private key or a key pair.

-

OptionalsenderPublicKey

senderPublicKey?: CryptoKey

A sender public key for Auth mode.

-

Settings

Member Visibility

On This Page

Properties
+

recipientKey

recipientKey: CryptoKeyPair | CryptoKey

A recipient private key or a key pair.

+

OptionalsenderPublicKey

senderPublicKey?: CryptoKey

A sender public key for Auth mode.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/core/docs/interfaces/SenderContext.html b/core/docs/interfaces/SenderContext.html index 34811e71b..df4d79ac6 100644 --- a/core/docs/interfaces/SenderContext.html +++ b/core/docs/interfaces/SenderContext.html @@ -1,25 +1,25 @@ SenderContext | @hpke/core

Interface SenderContext

The sender encryption context.

-
interface SenderContext {
    enc: ArrayBuffer;
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Properties

enc +
interface SenderContext {
    enc: ArrayBuffer;
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Properties

enc

Methods

export open seal

Properties

enc

enc: ArrayBuffer

The encapsulated key generated by the sender.

-

Methods

export

Methods

export

  • export(exporterContext, len): Promise<ArrayBuffer>

  • Exports a secret using a variable-length pseudorandom function.

    If the error occurred, throws ExportError.

    Parameters

    • exporterContext: ArrayBuffer

      An exporter context string as bytes. The maximum length is 128 bytes.

    • len: number

      A desired length in bytes of the output secret.

    Returns Promise<ArrayBuffer>

    A secret string as bytes.

    Throws

    ExportError

    -

open

open

  • open(data, aad?): Promise<ArrayBuffer>

  • Decrypts data.

    If the error occurred, throws OpenError.

    Parameters

    • data: ArrayBuffer

      An encrypted text as bytes to be decrypted.

    • Optionalaad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    Throws

    OpenError

    -

seal

seal

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/core/docs/interfaces/SenderContextParams.html b/core/docs/interfaces/SenderContextParams.html index 8bfa48187..780962bb2 100644 --- a/core/docs/interfaces/SenderContextParams.html +++ b/core/docs/interfaces/SenderContextParams.html @@ -1,13 +1,13 @@ SenderContextParams | @hpke/core

Interface SenderContextParams

The parameters used to setup the SenderContext.

-
interface SenderContextParams {
    ekm?: ArrayBuffer | CryptoKeyPair;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientPublicKey: CryptoKey;
    senderKey?: CryptoKeyPair | CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • SenderContextParams

Properties

ekm? +
interface SenderContextParams {
    ekm?: ArrayBuffer | CryptoKeyPair;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientPublicKey: CryptoKey;
    senderKey?: CryptoKeyPair | CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • SenderContextParams

Properties

ekm? info? psk? recipientPublicKey senderKey?

Properties

Optionalekm

ekm?: ArrayBuffer | CryptoKeyPair

DO NOT USE. FOR DEBUGGING/TESTING PURPOSES ONLY.

-

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

-

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. +

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

+

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. The PSK should have at least 32 bytes :and the maxmum length of the PSK is 128 bytes.

-

recipientPublicKey

recipientPublicKey: CryptoKey

A recipient public key.

-

OptionalsenderKey

senderKey?: CryptoKeyPair | CryptoKey

A sender private key or a key pair for Auth mode.

-

Settings

Member Visibility

On This Page

Properties
+

recipientPublicKey

recipientPublicKey: CryptoKey

A recipient public key.

+

OptionalsenderKey

senderKey?: CryptoKeyPair | CryptoKey

A sender private key or a key pair for Auth mode.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/core/docs/types/AeadId.html b/core/docs/types/AeadId.html index 0db63e135..e59553477 100644 --- a/core/docs/types/AeadId.html +++ b/core/docs/types/AeadId.html @@ -1,2 +1,2 @@ AeadId | @hpke/core

Type Alias AeadId

AeadId: typeof AeadId[keyof typeof AeadId]

The type alias of the supported AEAD identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/core/docs/types/KdfId.html b/core/docs/types/KdfId.html index 12e65bdc9..5fb978c72 100644 --- a/core/docs/types/KdfId.html +++ b/core/docs/types/KdfId.html @@ -1,2 +1,2 @@ KdfId | @hpke/core

Type Alias KdfId

KdfId: typeof KdfId[keyof typeof KdfId]

The type alias of the supported KDF identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/core/docs/types/KemId.html b/core/docs/types/KemId.html index 9d9f029b8..141c44449 100644 --- a/core/docs/types/KemId.html +++ b/core/docs/types/KemId.html @@ -1,2 +1,2 @@ KemId | @hpke/core

Type Alias KemId

KemId: typeof KemId[keyof typeof KemId]

The type alias of the supported KEM identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/core/docs/types/RecipientContext.html b/core/docs/types/RecipientContext.html index 12d3ab702..21dba3434 100644 --- a/core/docs/types/RecipientContext.html +++ b/core/docs/types/RecipientContext.html @@ -1,2 +1,2 @@ RecipientContext | @hpke/core

Type Alias RecipientContext

RecipientContext: EncryptionContext

The recipient encryption context.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/core/docs/variables/AeadId-1.html b/core/docs/variables/AeadId-1.html index 3709964f2..5f7714515 100644 --- a/core/docs/variables/AeadId-1.html +++ b/core/docs/variables/AeadId-1.html @@ -1,2 +1,2 @@ AeadId | @hpke/core

Variable AeadIdConst

AeadId: {
    Aes128Gcm: 1;
    Aes256Gcm: 2;
    Chacha20Poly1305: 3;
    ExportOnly: 65535;
} = Aead

The supported Authenticated Encryption with Associated Data (AEAD) identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/core/docs/variables/KdfId-1.html b/core/docs/variables/KdfId-1.html index 2ea6a3384..fb9c4af55 100644 --- a/core/docs/variables/KdfId-1.html +++ b/core/docs/variables/KdfId-1.html @@ -1,2 +1,2 @@ KdfId | @hpke/core

Variable KdfIdConst

KdfId: {
    HkdfSha256: 1;
    HkdfSha384: 2;
    HkdfSha512: 3;
} = Kdf

The supported Key Derivation Function (KDF) identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/core/docs/variables/KemId-1.html b/core/docs/variables/KemId-1.html index eb6491147..24111e90e 100644 --- a/core/docs/variables/KemId-1.html +++ b/core/docs/variables/KemId-1.html @@ -1,2 +1,2 @@ KemId | @hpke/core

Variable KemIdConst

KemId: {
    DhkemP256HkdfSha256: 16;
    DhkemP384HkdfSha384: 17;
    DhkemP521HkdfSha512: 18;
    DhkemSecp256k1HkdfSha256: 19;
    DhkemX25519HkdfSha256: 32;
    DhkemX448HkdfSha512: 33;
    HybridkemX25519Kyber768: 48;
    NotAssigned: 0;
} = Kem

The supported Key Encapsulation Mechanism (KEM) identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html b/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html index 700a7fe71..b22c93265 100644 --- a/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html +++ b/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html @@ -13,7 +13,7 @@

Copy

Note that it is experimental and not standardized.

-

Hierarchy

  • Dhkem
    • DhkemSecp256k1HkdfSha256

Constructors

constructor +

Hierarchy

  • Dhkem
    • DhkemSecp256k1HkdfSha256

Constructors

constructor

Properties

_kdf _prim encSize @@ -30,43 +30,43 @@

importKey serializePrivateKey serializePublicKey -

Constructors

constructor

Properties

Protected Experimental_kdf

_kdf: KdfInterface

Protected Experimental_prim

_prim: DhkemPrimitives

Readonly ExperimentalencSize

encSize: number = 33

33

-

Readonly Experimentalid

id: KemId = KemId.DhkemSecp256k1HkdfSha256

KemId.DhkemSecp256k1HkdfSha256 (0x0013) EXPERIMENTAL

-

Readonly ExperimentalprivateKeySize

privateKeySize: number = 32

32

-

Readonly ExperimentalpublicKeySize

publicKeySize: number = 33

33

-

Readonly ExperimentalsecretSize

secretSize: number = 32

32

-

Methods

decap

  • decap(params): Promise<ArrayBuffer>
  • Experimental

    Recovers the ephemeral symmetric key from its encapsulated representation enc.

    +

Constructors

constructor

Properties

Protected Experimental_kdf

_kdf: KdfInterface

Protected Experimental_prim

_prim: DhkemPrimitives

Readonly ExperimentalencSize

encSize: number = 33

33

+

Readonly Experimentalid

id: KemId = KemId.DhkemSecp256k1HkdfSha256

KemId.DhkemSecp256k1HkdfSha256 (0x0013) EXPERIMENTAL

+

Readonly ExperimentalprivateKeySize

privateKeySize: number = 32

32

+

Readonly ExperimentalpublicKeySize

publicKeySize: number = 33

33

+

Readonly ExperimentalsecretSize

secretSize: number = 32

32

+

Methods

decap

  • decap(params): Promise<ArrayBuffer>
  • Experimental

    Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    • params: RecipientContextParams

      A set of parameters for the recipient context.

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>
  • Experimental

    Derives a key pair from the byte string ikm.

    +

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>
  • Experimental

    Derives a key pair from the byte string ikm.

    If the error occurred, throws DeriveKeyPairError.

    Parameters

    • ikm: ArrayBuffer

      An input keying material.

    Returns Promise<CryptoKeyPair>

    A key pair derived.

    Throws

    DeriveKeyPairError

    -

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>
  • Experimental

    Deserializes a private key as a byte string of length Nsk to CryptoKey.

    +

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>
  • Experimental

    Deserializes a private key as a byte string of length Nsk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>
  • Experimental

    Deserializes a public key as a byte string of length Npk to CryptoKey.

    +

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>
  • Experimental

    Deserializes a public key as a byte string of length Npk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>
  • Experimental

    Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>
  • Experimental

    Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    • params: SenderContextParams

      A set of parameters for the sender context.

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>
  • Experimental

    Generates a key pair.

    +

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>
  • Experimental

    Generates a key pair.

    If the error occurred, throws NotSupportedError.

    Returns Promise<CryptoKeyPair>

    A key pair generated.

    Throws

    NotSupportedError

    -

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>
  • Experimental

    Imports a public or private key and converts to a CryptoKey.

    +

importKey

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>
  • Experimental

    Serializes a private key as CryptoKey to a byte string of length Nsk.

    +

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>
  • Experimental

    Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>
  • Experimental

    Serializes a public key as CryptoKey to a byte string of length Npk.

    +

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>
  • Experimental

    Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js b/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js index 2f528e10d..8ff9ec42b 100644 --- a/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js +++ b/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js @@ -1,4 +1,4 @@ -var Ge=Object.defineProperty;var Ye=(r,t)=>{for(var e in t)Ge(r,e,{get:t[e],enumerable:!0})};var We={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},Xt=We,Xe={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},Qt=Xe;function ge(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`Wrong positive integer: ${r}`)}function Qe(r){return r instanceof Uint8Array||r!=null&&typeof r=="object"&&r.constructor.name==="Uint8Array"}function Jt(r,...t){if(!Qe(r))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(r.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${r.length}`)}function me(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");ge(r.outputLen),ge(r.blockLen)}function wt(r,t=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(t&&r.finished)throw new Error("Hash#digest() has already been called")}function xe(r,t){Jt(r);let e=t.outputLen;if(r.lengthnew DataView(r.buffer,r.byteOffset,r.byteLength),$=(r,t)=>r<<32-t|r>>>t,Je=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Je)throw new Error("Non little-endian hardware is not supported");function Fe(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function _t(r){if(typeof r=="string"&&(r=Fe(r)),!Ee(r))throw new Error(`expected Uint8Array, got ${typeof r}`);return r}function ve(...r){let t=0;for(let n=0;nr().update(_t(n)).digest(),e=r();return t.outputLen=e.outputLen,t.blockLen=e.blockLen,t.create=()=>r(),t}function _e(r=32){if(kt&&typeof kt.getRandomValues=="function")return kt.getRandomValues(new Uint8Array(r));throw new Error("crypto.getRandomValues must be defined")}var Ut=class extends pt{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,me(t);let n=_t(e);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(n.length>i?t.create().update(n).digest():n);for(let a=0;anew Ut(r,t).update(e).digest();At.create=(r,t)=>new Ut(r,t);function tr(r,t,e,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(t,e,n);let i=BigInt(32),o=BigInt(4294967295),a=Number(e>>i&o),s=Number(e&o),c=n?4:0,u=n?0:4;r.setUint32(t+c,a,n),r.setUint32(t+u,s,n)}var Ot=class extends pt{constructor(t,e,n,i){super(),this.blockLen=t,this.outputLen=e,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Lt(this.buffer)}update(t){wt(this);let{view:e,buffer:n,blockLen:i}=this;t=_t(t);let o=t.length;for(let a=0;ai-a&&(this.process(n,0),a=0);for(let l=a;ly.length)throw new Error("_sha2: outputLen bigger than state");for(let l=0;lr&t^~r&e,rr=(r,t,e)=>r&t^r&e^t&e,nr=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),rt=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),nt=new Uint32Array(64),Ft=class extends Ot{constructor(){super(64,32,8,!1),this.A=rt[0]|0,this.B=rt[1]|0,this.C=rt[2]|0,this.D=rt[3]|0,this.E=rt[4]|0,this.F=rt[5]|0,this.G=rt[6]|0,this.H=rt[7]|0}get(){let{A:t,B:e,C:n,D:i,E:o,F:a,G:s,H:c}=this;return[t,e,n,i,o,a,s,c]}set(t,e,n,i,o,a,s,c){this.A=t|0,this.B=e|0,this.C=n|0,this.D=i|0,this.E=o|0,this.F=a|0,this.G=s|0,this.H=c|0}process(t,e){for(let l=0;l<16;l++,e+=4)nt[l]=t.getUint32(e,!1);for(let l=16;l<64;l++){let m=nt[l-15],S=nt[l-2],g=$(m,7)^$(m,18)^m>>>3,f=$(S,17)^$(S,19)^S>>>10;nt[l]=f+nt[l-7]+g+nt[l-16]|0}let{A:n,B:i,C:o,D:a,E:s,F:c,G:u,H:y}=this;for(let l=0;l<64;l++){let m=$(s,6)^$(s,11)^$(s,25),S=y+m+er(s,c,u)+nr[l]+nt[l]|0,f=($(n,2)^$(n,13)^$(n,22))+rr(n,i,o)|0;y=u,u=c,c=s,s=a+S|0,a=o,o=i,i=n,n=S+f|0}n=n+this.A|0,i=i+this.B|0,o=o+this.C|0,a=a+this.D|0,s=s+this.E|0,c=c+this.F|0,u=u+this.G|0,y=y+this.H|0,this.set(n,i,o,a,s,c,u,y)}roundClean(){nt.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var Tt=Be(()=>new Ft);var ir={},Ae=or(globalThis,ir);function or(r,t){return new Proxy(r,{get(e,n,i){return n in t?t[n]:r[n]},set(e,n,i){return n in t&&delete t[n],r[n]=i,!0},deleteProperty(e,n){let i=!1;return n in t&&(delete t[n],i=!0),n in r&&(delete r[n],i=!0),i},ownKeys(e){let n=Reflect.ownKeys(r),i=Reflect.ownKeys(t),o=new Set(i);return[...n.filter(a=>!o.has(a)),...i]},defineProperty(e,n,i){return n in t&&delete t[n],Reflect.defineProperty(r,n,i),!0},getOwnPropertyDescriptor(e,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(r,n)},has(e,n){return n in t||n in r}})}var te=class extends Error{constructor(t){let e;t instanceof Error?e=t.message:typeof t=="string"?e=t:e="",super(e),this.name=this.constructor.name}},G=class extends te{},gt=class extends G{};var mt=class extends G{},ct=class extends G{},Ht=class extends G{},Nt=class extends G{};var qt=class extends G{},xt=class extends G{};async function cr(){if(Ae!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:r}=await import("crypto");return r.subtle}catch(r){throw new xt(r)}}var Rt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await cr())}};var Y=new Uint8Array(0);var Se=new Uint8Array([72,80,75,69,45,118,49]),ee=class extends Rt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Qt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:Y}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,e){this._checkInit();let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+e.byteLength);return n.set(Se,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(e,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,e,n){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+e.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(Se,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(e,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,e){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new gt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,e)}async expand(t,e,n){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(n),a=new Uint8Array(o),s=Y,c=new Uint8Array(e),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let y=new Uint8Array(this.hashSize+c.length+1);for(let l=1,m=0;m=s.length?(a.set(s,m),m+=s.length):(a.set(s.slice(0,a.length-m),m),m+=a.length-m);return o}async extractAndExpand(t,e,n,i){await this._setup();let o=await this._api.importKey("raw",e,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},o,i*8)}async labeledExtract(t,e,n){return await this.extract(t,this.buildLabeledIkm(e,n))}async labeledExpand(t,e,n,i){return await this.expand(t,this.buildLabeledInfo(e,n,i),i)}_checkInit(){if(this._suiteId===Y)throw new Error("Not initialized. Call init()")}},zt=class extends ee{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Qt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var Ct=class extends zt{async extract(t,e){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return At(Tt,new Uint8Array(t),new Uint8Array(e));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,e)}};var Ie=new Uint8Array([75,69,77,0,0]);var Et=r=>typeof r=="object"&&r!==null&&typeof r.privateKey=="object"&&typeof r.publicKey=="object";function Pe(r,t){if(t<=0)throw new Error("i2Osp: too small size");if(r>=256**t)throw new Error("i2Osp: too large integer");let e=new Uint8Array(t);for(let n=0;n>8;return e}function St(r,t){let e=new Uint8Array(r.length+t.length);return e.set(r,0),e.set(t,r.length),e}var ur=new Uint8Array([101,97,101,95,112,114,107]),fr=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]);function lr(r,t,e){let n=new Uint8Array(r.length+t.length+e.length);return n.set(r,0),n.set(t,r.length),n.set(e,r.length+t.length),n}var Dt=class{constructor(t,e,n){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.id=t,this._prim=e,this._kdf=n;let i=new Uint8Array(Ie);i.set(Pe(this.id,2),3),this._kdf.init(i)}async serializePublicKey(t){return await this._prim.serializePublicKey(t)}async deserializePublicKey(t){return await this._prim.deserializePublicKey(t)}async serializePrivateKey(t){return await this._prim.serializePrivateKey(t)}async deserializePrivateKey(t){return await this._prim.deserializePrivateKey(t)}async importKey(t,e,n=!0){return await this._prim.importKey(t,e,n)}async generateKeyPair(){return await this._prim.generateKeyPair()}async deriveKeyPair(t){if(t.byteLength>8192)throw new gt("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let e;t.ekm===void 0?e=await this.generateKeyPair():Et(t.ekm)?e=t.ekm:e=await this.deriveKeyPair(t.ekm);let n=await this._prim.serializePublicKey(e.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(e.privateKey,t.recipientPublicKey));else{let c=Et(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(e.privateKey,t.recipientPublicKey)),y=new Uint8Array(await this._prim.dh(c,t.recipientPublicKey));o=St(u,y)}let a;if(t.senderKey===void 0)a=St(new Uint8Array(n),new Uint8Array(i));else{let c=Et(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(c);a=lr(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let s=await this._generateSharedSecret(o,a);return{enc:n,sharedSecret:s}}catch(o){throw new Ht(o)}}async decap(t){let e=await this._prim.deserializePublicKey(t.enc),n=Et(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=Et(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let a;if(t.senderPublicKey===void 0)a=new Uint8Array(await this._prim.dh(n,e));else{let c=new Uint8Array(await this._prim.dh(n,e)),u=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));a=St(c,u)}let s;if(t.senderPublicKey===void 0)s=St(new Uint8Array(t.enc),new Uint8Array(o));else{let c=await this._prim.serializePublicKey(t.senderPublicKey);s=new Uint8Array(t.enc.byteLength+o.byteLength+c.byteLength),s.set(new Uint8Array(t.enc),0),s.set(new Uint8Array(o),t.enc.byteLength),s.set(new Uint8Array(c),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(a,s)}catch(a){throw new Nt(a)}}async _generateSharedSecret(t,e){let n=this._kdf.buildLabeledIkm(ur,t),i=this._kdf.buildLabeledInfo(fr,e,this.secretSize);return await this._kdf.extractAndExpand(Y,n,i,this.secretSize)}};var oe={};Ye(oe,{bitGet:()=>gr,bitLen:()=>pr,bitMask:()=>It,bitSet:()=>mr,bytesToHex:()=>at,bytesToNumberBE:()=>X,bytesToNumberLE:()=>Mt,concatBytes:()=>vt,createHmacDrbg:()=>ie,ensureBytes:()=>C,equalBytes:()=>br,hexToBytes:()=>ut,hexToNumber:()=>ne,isBytes:()=>V,numberToBytesBE:()=>it,numberToBytesLE:()=>$t,numberToHexUnpadded:()=>Ue,numberToVarBytesBE:()=>yr,utf8ToBytes:()=>wr,validateObject:()=>ot});var Le=BigInt(0),jt=BigInt(1),dr=BigInt(2);function V(r){return r instanceof Uint8Array||r!=null&&typeof r=="object"&&r.constructor.name==="Uint8Array"}var hr=Array.from({length:256},(r,t)=>t.toString(16).padStart(2,"0"));function at(r){if(!V(r))throw new Error("Uint8Array expected");let t="";for(let e=0;e=W._0&&r<=W._9)return r-W._0;if(r>=W._A&&r<=W._F)return r-(W._A-10);if(r>=W._a&&r<=W._f)return r-(W._a-10)}function ut(r){if(typeof r!="string")throw new Error("hex string expected, got "+typeof r);let t=r.length,e=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(e);for(let i=0,o=0;iLe;r>>=jt,t+=1);return t}function gr(r,t){return r>>BigInt(t)&jt}var mr=(r,t,e)=>r|(e?jt:Le)<(dr<new Uint8Array(r),ke=r=>Uint8Array.from(r);function ie(r,t,e){if(typeof r!="number"||r<2)throw new Error("hashLen must be a number");if(typeof t!="number"||t<2)throw new Error("qByteLen must be a number");if(typeof e!="function")throw new Error("hmacFn must be a function");let n=re(r),i=re(r),o=0,a=()=>{n.fill(1),i.fill(0),o=0},s=(...l)=>e(i,n,...l),c=(l=re())=>{i=s(ke([0]),l),n=s(),l.length!==0&&(i=s(ke([1]),l),n=s())},u=()=>{if(o++>=1e3)throw new Error("drbg: tried 1000 values");let l=0,m=[];for(;l{a(),c(l);let S;for(;!(S=m(u()));)c();return a(),S}}var xr={bigint:r=>typeof r=="bigint",function:r=>typeof r=="function",boolean:r=>typeof r=="boolean",string:r=>typeof r=="string",stringOrUint8Array:r=>typeof r=="string"||V(r),isSafeInteger:r=>Number.isSafeInteger(r),array:r=>Array.isArray(r),field:(r,t)=>t.Fp.isValid(r),hash:r=>typeof r=="function"&&Number.isSafeInteger(r.outputLen)};function ot(r,t,e={}){let n=(i,o,a)=>{let s=xr[o];if(typeof s!="function")throw new Error(`Invalid validator "${o}", expected function`);let c=r[i];if(!(a&&c===void 0)&&!s(c,r))throw new Error(`Invalid param ${String(i)}=${c} (${typeof c}), expected ${o}`)};for(let[i,o]of Object.entries(t))n(i,o,!1);for(let[i,o]of Object.entries(e))n(i,o,!0);return r}var O=BigInt(0),U=BigInt(1),ft=BigInt(2),Er=BigInt(3),se=BigInt(4),Oe=BigInt(5),Te=BigInt(8),vr=BigInt(9),Br=BigInt(16);function H(r,t){let e=r%t;return e>=O?e:t+e}function _r(r,t,e){if(e<=O||t 0");if(e===U)return O;let n=U;for(;t>O;)t&U&&(n=n*r%e),r=r*r%e,t>>=U;return n}function D(r,t,e){let n=r;for(;t-- >O;)n*=n,n%=e;return n}function Vt(r,t){if(r===O||t<=O)throw new Error(`invert: expected positive integers, got n=${r} mod=${t}`);let e=H(r,t),n=t,i=O,o=U,a=U,s=O;for(;e!==O;){let u=n/e,y=n%e,l=i-a*u,m=o-s*u;n=e,e=y,i=a,o=s,a=l,s=m}if(n!==U)throw new Error("invert: does not exist");return H(i,t)}function Ar(r){let t=(r-U)/ft,e,n,i;for(e=r-U,n=0;e%ft===O;e/=ft,n++);for(i=ft;i(n[i]="function",n),t);return ot(r,e)}function Pr(r,t,e){if(e 0");if(e===O)return r.ONE;if(e===U)return t;let n=r.ONE,i=t;for(;e>O;)e&U&&(n=r.mul(n,i)),i=r.sqr(i),e>>=U;return n}function Kr(r,t){let e=new Array(t.length),n=t.reduce((o,a,s)=>r.is0(a)?o:(e[s]=o,r.mul(o,a)),r.ONE),i=r.inv(n);return t.reduceRight((o,a,s)=>r.is0(a)?o:(e[s]=r.mul(o,e[s]),r.mul(o,a)),i),e}function ae(r,t){let e=t!==void 0?t:r.toString(2).length,n=Math.ceil(e/8);return{nBitLength:e,nByteLength:n}}function He(r,t,e=!1,n={}){if(r<=O)throw new Error(`Expected Field ORDER > 0, got ${r}`);let{nBitLength:i,nByteLength:o}=ae(r,t);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let a=Sr(r),s=Object.freeze({ORDER:r,BITS:i,BYTES:o,MASK:It(i),ZERO:O,ONE:U,create:c=>H(c,r),isValid:c=>{if(typeof c!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof c}`);return O<=c&&cc===O,isOdd:c=>(c&U)===U,neg:c=>H(-c,r),eql:(c,u)=>c===u,sqr:c=>H(c*c,r),add:(c,u)=>H(c+u,r),sub:(c,u)=>H(c-u,r),mul:(c,u)=>H(c*u,r),pow:(c,u)=>Pr(s,c,u),div:(c,u)=>H(c*Vt(u,r),r),sqrN:c=>c*c,addN:(c,u)=>c+u,subN:(c,u)=>c-u,mulN:(c,u)=>c*u,inv:c=>Vt(c,r),sqrt:n.sqrt||(c=>a(s,c)),invertBatch:c=>Kr(s,c),cmov:(c,u,y)=>y?u:c,toBytes:c=>e?$t(c,o):it(c,o),fromBytes:c=>{if(c.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${c.length}`);return e?Mt(c):X(c)}});return Object.freeze(s)}function Ne(r){if(typeof r!="bigint")throw new Error("field order must be bigint");let t=r.toString(2).length;return Math.ceil(t/8)}function ue(r){let t=Ne(r);return t+Math.ceil(t/2)}function qe(r,t,e=!1){let n=r.length,i=Ne(t),o=ue(t);if(n<16||n1024)throw new Error(`expected ${o}-1024 bytes of input, got ${n}`);let a=e?X(r):Mt(r),s=H(a,t-U)+U;return e?$t(s,i):it(s,i)}var Lr=BigInt(0),fe=BigInt(1);function Re(r,t){let e=(i,o)=>{let a=o.negate();return i?a:o},n=i=>{let o=Math.ceil(t/i)+1,a=2**(i-1);return{windows:o,windowSize:a}};return{constTimeNegate:e,unsafeLadder(i,o){let a=r.ZERO,s=i;for(;o>Lr;)o&fe&&(a=a.add(s)),s=s.double(),o>>=fe;return a},precomputeWindow(i,o){let{windows:a,windowSize:s}=n(o),c=[],u=i,y=u;for(let l=0;l>=S,h>c&&(h-=m,a+=fe);let b=f,x=f+Math.abs(h)-1,v=g%2!==0,I=h<0;h===0?y=y.add(e(v,o[b])):u=u.add(e(I,o[x]))}return{p:u,f:y}},wNAFCached(i,o,a,s){let c=i._WINDOW_SIZE||1,u=o.get(i);return u||(u=this.precomputeWindow(i,c),c!==1&&o.set(i,s(u))),this.wNAF(c,u,a)}}}function le(r){return ce(r.Fp),ot(r,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...ae(r.n,r.nBitLength),...r,p:r.Fp.ORDER})}function Ur(r){let t=le(r);ot(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});let{endo:e,Fp:n,a:i}=t;if(e){if(!n.eql(i,n.ZERO))throw new Error("Endomorphism can only be defined for Koblitz curves that have a=0");if(typeof e!="object"||typeof e.beta!="bigint"||typeof e.splitScalar!="function")throw new Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}var{bytesToNumberBE:Or,hexToBytes:Tr}=oe,lt={Err:class extends Error{constructor(t=""){super(t)}},_parseInt(r){let{Err:t}=lt;if(r.length<2||r[0]!==2)throw new t("Invalid signature integer tag");let e=r[1],n=r.subarray(2,e+2);if(!e||n.length!==e)throw new t("Invalid signature integer: wrong length");if(n[0]&128)throw new t("Invalid signature integer: negative");if(n[0]===0&&!(n[1]&128))throw new t("Invalid signature integer: unnecessary leading zero");return{d:Or(n),l:r.subarray(e+2)}},toSig(r){let{Err:t}=lt,e=typeof r=="string"?Tr(r):r;if(!V(e))throw new Error("ui8a expected");let n=e.length;if(n<2||e[0]!=48)throw new t("Invalid signature tag");if(e[1]!==n-2)throw new t("Invalid signature: incorrect length");let{d:i,l:o}=lt._parseInt(e.subarray(2)),{d:a,l:s}=lt._parseInt(o);if(s.length)throw new t("Invalid signature: left bytes after parsing");return{r:i,s:a}},hexFromSig(r){let t=u=>Number.parseInt(u[0],16)&8?"00"+u:u,e=u=>{let y=u.toString(16);return y.length&1?`0${y}`:y},n=t(e(r.s)),i=t(e(r.r)),o=n.length/2,a=i.length/2,s=e(o),c=e(a);return`30${e(a+o+4)}02${c}${i}02${s}${n}`}},Q=BigInt(0),M=BigInt(1),kn=BigInt(2),ze=BigInt(3),Ln=BigInt(4);function Hr(r){let t=Ur(r),{Fp:e}=t,n=t.toBytes||((g,f,h)=>{let b=f.toAffine();return vt(Uint8Array.from([4]),e.toBytes(b.x),e.toBytes(b.y))}),i=t.fromBytes||(g=>{let f=g.subarray(1),h=e.fromBytes(f.subarray(0,e.BYTES)),b=e.fromBytes(f.subarray(e.BYTES,2*e.BYTES));return{x:h,y:b}});function o(g){let{a:f,b:h}=t,b=e.sqr(g),x=e.mul(b,g);return e.add(e.add(x,e.mul(g,f)),h)}if(!e.eql(e.sqr(t.Gy),o(t.Gx)))throw new Error("bad generator point: equation left != right");function a(g){return typeof g=="bigint"&&Qe.eql(v,e.ZERO);return x(h)&&x(b)?l.ZERO:new l(h,b,e.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(f){let h=e.invertBatch(f.map(b=>b.pz));return f.map((b,x)=>b.toAffine(h[x])).map(l.fromAffine)}static fromHex(f){let h=l.fromAffine(i(C("pointHex",f)));return h.assertValidity(),h}static fromPrivateKey(f){return l.BASE.multiply(c(f))}_setWindowSize(f){this._WINDOW_SIZE=f,u.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!e.is0(this.py))return;throw new Error("bad point: ZERO")}let{x:f,y:h}=this.toAffine();if(!e.isValid(f)||!e.isValid(h))throw new Error("bad point: x or y not FE");let b=e.sqr(h),x=o(f);if(!e.eql(b,x))throw new Error("bad point: equation left != right");if(!this.isTorsionFree())throw new Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:f}=this.toAffine();if(e.isOdd)return!e.isOdd(f);throw new Error("Field doesn't support isOdd")}equals(f){y(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:A}=f,p=e.eql(e.mul(h,A),e.mul(v,x)),E=e.eql(e.mul(b,A),e.mul(I,x));return p&&E}negate(){return new l(this.px,e.neg(this.py),this.pz)}double(){let{a:f,b:h}=t,b=e.mul(h,ze),{px:x,py:v,pz:I}=this,A=e.ZERO,p=e.ZERO,E=e.ZERO,_=e.mul(x,x),j=e.mul(v,v),L=e.mul(I,I),P=e.mul(x,v);return P=e.add(P,P),E=e.mul(x,I),E=e.add(E,E),A=e.mul(f,E),p=e.mul(b,L),p=e.add(A,p),A=e.sub(j,p),p=e.add(j,p),p=e.mul(A,p),A=e.mul(P,A),E=e.mul(b,E),L=e.mul(f,L),P=e.sub(_,L),P=e.mul(f,P),P=e.add(P,E),E=e.add(_,_),_=e.add(E,_),_=e.add(_,L),_=e.mul(_,P),p=e.add(p,_),L=e.mul(v,I),L=e.add(L,L),_=e.mul(L,P),A=e.sub(A,_),E=e.mul(L,j),E=e.add(E,E),E=e.add(E,E),new l(A,p,E)}add(f){y(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:A}=f,p=e.ZERO,E=e.ZERO,_=e.ZERO,j=t.a,L=e.mul(t.b,ze),P=e.mul(h,v),N=e.mul(b,I),q=e.mul(x,A),J=e.add(h,b),d=e.add(v,I);J=e.mul(J,d),d=e.add(P,N),J=e.sub(J,d),d=e.add(h,x);let w=e.add(v,A);return d=e.mul(d,w),w=e.add(P,q),d=e.sub(d,w),w=e.add(b,x),p=e.add(I,A),w=e.mul(w,p),p=e.add(N,q),w=e.sub(w,p),_=e.mul(j,d),p=e.mul(L,q),_=e.add(p,_),p=e.sub(N,_),_=e.add(N,_),E=e.mul(p,_),N=e.add(P,P),N=e.add(N,P),q=e.mul(j,q),d=e.mul(L,d),N=e.add(N,q),q=e.sub(P,q),q=e.mul(j,q),d=e.add(d,q),P=e.mul(N,d),E=e.add(E,P),P=e.mul(w,d),p=e.mul(J,p),p=e.sub(p,P),P=e.mul(J,N),_=e.mul(w,_),_=e.add(_,P),new l(p,E,_)}subtract(f){return this.add(f.negate())}is0(){return this.equals(l.ZERO)}wNAF(f){return S.wNAFCached(this,u,f,h=>{let b=e.invertBatch(h.map(x=>x.pz));return h.map((x,v)=>x.toAffine(b[v])).map(l.fromAffine)})}multiplyUnsafe(f){let h=l.ZERO;if(f===Q)return h;if(s(f),f===M)return this;let{endo:b}=t;if(!b)return S.unsafeLadder(this,f);let{k1neg:x,k1:v,k2neg:I,k2:A}=b.splitScalar(f),p=h,E=h,_=this;for(;v>Q||A>Q;)v&M&&(p=p.add(_)),A&M&&(E=E.add(_)),_=_.double(),v>>=M,A>>=M;return x&&(p=p.negate()),I&&(E=E.negate()),E=new l(e.mul(E.px,b.beta),E.py,E.pz),p.add(E)}multiply(f){s(f);let h=f,b,x,{endo:v}=t;if(v){let{k1neg:I,k1:A,k2neg:p,k2:E}=v.splitScalar(h),{p:_,f:j}=this.wNAF(A),{p:L,f:P}=this.wNAF(E);_=S.constTimeNegate(I,_),L=S.constTimeNegate(p,L),L=new l(e.mul(L.px,v.beta),L.py,L.pz),b=_.add(L),x=j.add(P)}else{let{p:I,f:A}=this.wNAF(h);b=I,x=A}return l.normalizeZ([b,x])[0]}multiplyAndAddUnsafe(f,h,b){let x=l.BASE,v=(A,p)=>p===Q||p===M||!A.equals(x)?A.multiplyUnsafe(p):A.multiply(p),I=v(this,h).add(v(f,b));return I.is0()?void 0:I}toAffine(f){let{px:h,py:b,pz:x}=this,v=this.is0();f==null&&(f=v?e.ONE:e.inv(x));let I=e.mul(h,f),A=e.mul(b,f),p=e.mul(x,f);if(v)return{x:e.ZERO,y:e.ZERO};if(!e.eql(p,e.ONE))throw new Error("invZ was invalid");return{x:I,y:A}}isTorsionFree(){let{h:f,isTorsionFree:h}=t;if(f===M)return!0;if(h)return h(l,this);throw new Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){let{h:f,clearCofactor:h}=t;return f===M?this:h?h(l,this):this.multiplyUnsafe(t.h)}toRawBytes(f=!0){return this.assertValidity(),n(l,this,f)}toHex(f=!0){return at(this.toRawBytes(f))}}l.BASE=new l(t.Gx,t.Gy,e.ONE),l.ZERO=new l(e.ZERO,e.ONE,e.ZERO);let m=t.nBitLength,S=Re(l,t.endo?Math.ceil(m/2):m);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:o,isWithinCurveOrder:a}}function Nr(r){let t=le(r);return ot(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}function Ce(r){let t=Nr(r),{Fp:e,n}=t,i=e.BYTES+1,o=2*e.BYTES+1;function a(d){return Qat(it(d,t.nByteLength));function g(d){let w=n>>M;return d>w}function f(d){return g(d)?s(-d):d}let h=(d,w,B)=>X(d.slice(w,B));class b{constructor(w,B,k){this.r=w,this.s=B,this.recovery=k,this.assertValidity()}static fromCompact(w){let B=t.nByteLength;return w=C("compactSignature",w,B*2),new b(h(w,0,B),h(w,B,2*B))}static fromDER(w){let{r:B,s:k}=lt.toSig(C("DER",w));return new b(B,k)}assertValidity(){if(!m(this.r))throw new Error("r must be 0 < r < CURVE.n");if(!m(this.s))throw new Error("s must be 0 < s < CURVE.n")}addRecoveryBit(w){return new b(this.r,this.s,w)}recoverPublicKey(w){let{r:B,s:k,recovery:K}=this,T=E(C("msgHash",w));if(K==null||![0,1,2,3].includes(K))throw new Error("recovery id invalid");let R=K===2||K===3?B+t.n:B;if(R>=e.ORDER)throw new Error("recovery id 2 or 3 invalid");let z=K&1?"03":"02",F=u.fromHex(z+S(R)),tt=c(R),ht=s(-T*tt),Bt=s(k*tt),et=u.BASE.multiplyAndAddUnsafe(F,ht,Bt);if(!et)throw new Error("point at infinify");return et.assertValidity(),et}hasHighS(){return g(this.s)}normalizeS(){return this.hasHighS()?new b(this.r,s(-this.s),this.recovery):this}toDERRawBytes(){return ut(this.toDERHex())}toDERHex(){return lt.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return ut(this.toCompactHex())}toCompactHex(){return S(this.r)+S(this.s)}}let x={isValidPrivateKey(d){try{return y(d),!0}catch{return!1}},normPrivateKeyToScalar:y,randomPrivateKey:()=>{let d=ue(t.n);return qe(t.randomBytes(d),t.n)},precompute(d=8,w=u.BASE){return w._setWindowSize(d),w.multiply(BigInt(3)),w}};function v(d,w=!0){return u.fromPrivateKey(d).toRawBytes(w)}function I(d){let w=V(d),B=typeof d=="string",k=(w||B)&&d.length;return w?k===i||k===o:B?k===2*i||k===2*o:d instanceof u}function A(d,w,B=!0){if(I(d))throw new Error("first arg must be private key");if(!I(w))throw new Error("second arg must be public key");return u.fromHex(w).multiply(y(d)).toRawBytes(B)}let p=t.bits2int||function(d){let w=X(d),B=d.length*8-t.nBitLength;return B>0?w>>BigInt(B):w},E=t.bits2int_modN||function(d){return s(p(d))},_=It(t.nBitLength);function j(d){if(typeof d!="bigint")throw new Error("bigint expected");if(!(Q<=d&&d<_))throw new Error(`bigint expected < 2^${t.nBitLength}`);return it(d,t.nByteLength)}function L(d,w,B=P){if(["recovered","canonical"].some(st=>st in B))throw new Error("sign() legacy options not supported");let{hash:k,randomBytes:K}=t,{lowS:T,prehash:R,extraEntropy:z}=B;T==null&&(T=!0),d=C("msgHash",d),R&&(d=C("prehashed msgHash",k(d)));let F=E(d),tt=y(w),ht=[j(tt),j(F)];if(z!=null){let st=z===!0?K(e.BYTES):z;ht.push(C("extraEntropy",st))}let Bt=vt(...ht),et=F;function Wt(st){let yt=p(st);if(!m(yt))return;let be=c(yt),Z=u.BASE.multiply(yt).toAffine(),bt=s(Z.x);if(bt===Q)return;let Kt=s(be*s(et+bt*tt));if(Kt===Q)return;let we=(Z.x===bt?0:2)|Number(Z.y&M),pe=Kt;return T&&g(Kt)&&(pe=f(Kt),we^=1),new b(bt,pe,we)}return{seed:Bt,k2sig:Wt}}let P={lowS:t.lowS,prehash:!1},N={lowS:t.lowS,prehash:!1};function q(d,w,B=P){let{seed:k,k2sig:K}=L(d,w,B),T=t;return ie(T.hash.outputLen,T.nByteLength,T.hmac)(k,K)}u.BASE._setWindowSize(8);function J(d,w,B,k=N){let K=d;if(w=C("msgHash",w),B=C("publicKey",B),"strict"in k)throw new Error("options.strict was renamed to lowS");let{lowS:T,prehash:R}=k,z,F;try{if(typeof K=="string"||V(K))try{z=b.fromDER(K)}catch(Z){if(!(Z instanceof lt.Err))throw Z;z=b.fromCompact(K)}else if(typeof K=="object"&&typeof K.r=="bigint"&&typeof K.s=="bigint"){let{r:Z,s:bt}=K;z=new b(Z,bt)}else throw new Error("PARSE");F=u.fromHex(B)}catch(Z){if(Z.message==="PARSE")throw new Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(T&&z.hasHighS())return!1;R&&(w=t.hash(w));let{r:tt,s:ht}=z,Bt=E(w),et=c(ht),Wt=s(Bt*et),st=s(tt*et),yt=u.BASE.multiplyAndAddUnsafe(F,Wt,st)?.toAffine();return yt?s(yt.x)===tt:!1}return{CURVE:t,getPublicKey:v,getSharedSecret:A,sign:q,verify:J,ProjectivePoint:u,Signature:b,utils:x}}function qr(r){return{hash:r,hmac:(t,...e)=>At(r,t,ve(...e)),randomBytes:_e}}function De(r,t){let e=n=>Ce({...r,...qr(n)});return Object.freeze({...e(t),create:e})}var $e=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),je=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),Rr=BigInt(1),de=BigInt(2),Me=(r,t)=>(r+t/de)/t;function zr(r){let t=$e,e=BigInt(3),n=BigInt(6),i=BigInt(11),o=BigInt(22),a=BigInt(23),s=BigInt(44),c=BigInt(88),u=r*r*r%t,y=u*u*r%t,l=D(y,e,t)*y%t,m=D(l,e,t)*y%t,S=D(m,de,t)*u%t,g=D(S,i,t)*S%t,f=D(g,o,t)*g%t,h=D(f,s,t)*f%t,b=D(h,c,t)*h%t,x=D(b,s,t)*f%t,v=D(x,e,t)*y%t,I=D(v,a,t)*g%t,A=D(I,n,t)*u%t,p=D(A,de,t);if(!he.eql(he.sqr(p),r))throw new Error("Cannot find square root");return p}var he=He($e,void 0,void 0,{sqrt:zr}),Pt=De({a:BigInt(0),b:BigInt(7),Fp:he,n:je,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:r=>{let t=je,e=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),n=-Rr*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),i=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),o=e,a=BigInt("0x100000000000000000000000000000000"),s=Me(o*r,t),c=Me(-n*r,t),u=H(r-s*e-c*i,t),y=H(-s*n-c*o,t),l=u>a,m=y>a;if(l&&(u=t-u),m&&(y=t-y),u>a||y>a)throw new Error("splitScalar: Endomorphism failed, k="+r);return{k1neg:l,k1:u,k2neg:m,k2:y}}}},Tt),Cn=BigInt(0);var Dn=Pt.ProjectivePoint;var Zt=["deriveBits"],Ve=new Uint8Array([100,107,112,95,112,114,107]),Ze=new Uint8Array([115,107]);var dt=class{constructor(t,e,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=e,this.type=n,this.algorithm={name:t},this.usages=i,n==="public"&&(this.usages=[])}};var Gt="ECDH",Yt=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=33,this._nSk=32}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(e){throw new mt(e)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(e){throw new ct(e)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(e){throw new mt(e)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(e){throw new ct(e)}}async importKey(t,e,n){try{if(t!=="raw")throw new Error("Unsupported format");return await this._importRawKey(e,n)}catch(i){throw new ct(i)}}async generateKeyPair(){try{let t=Pt.utils.randomPrivateKey(),e=new dt(Gt,t,"private",Zt);return{publicKey:await this.derivePublicKey(e),privateKey:e}}catch(t){throw new xt(t)}}async deriveKeyPair(t){try{let e=await this._hkdf.labeledExtract(Y,Ve,new Uint8Array(t)),n=await this._hkdf.labeledExpand(e,Ze,Y,this._nSk),i=new dt(Gt,new Uint8Array(n),"private",Zt);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(e){throw new qt(e)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(e){throw new ct(e)}}async dh(t,e){try{return await this._dh(t,e)}catch(n){throw new mt(n)}}_serializePublicKey(t){return new Promise(e=>{e(t.key.buffer)})}_serializePrivateKey(t){return new Promise(e=>{e(t.key.buffer)})}_importRawKey(t,e){return new Promise((n,i)=>{e&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!e&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new dt(Gt,new Uint8Array(t),e?"public":"private",e?[]:Zt))})}_derivePublicKey(t){return new Promise((e,n)=>{try{let i=Pt.getPublicKey(t.key);e(new dt(Gt,i,"public"))}catch(i){n(i)}})}_dh(t,e){return new Promise((n,i)=>{try{n(Pt.getSharedSecret(t.key,e.key).buffer)}catch(o){i(o)}})}};var ye=class extends Dt{constructor(){let t=new Ct;super(Xt.DhkemSecp256k1HkdfSha256,new Yt(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Xt.DhkemSecp256k1HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{ye as DhkemSecp256k1HkdfSha256}; +var We=Object.defineProperty;var Xe=(r,t)=>{for(var e in t)We(r,e,{get:t[e],enumerable:!0})};var Qe={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},Jt=Qe,Je={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},Ft=Je;function me(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`positive integer expected, not ${r}`)}function Fe(r){return r instanceof Uint8Array||r!=null&&typeof r=="object"&&r.constructor.name==="Uint8Array"}function pt(r,...t){if(!Fe(r))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(r.length))throw new Error(`Uint8Array expected of length ${t}, not of length=${r.length}`)}function xe(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");me(r.outputLen),me(r.blockLen)}function wt(r,t=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(t&&r.finished)throw new Error("Hash#digest() has already been called")}function Ee(r,t){pt(r);let e=t.outputLen;if(r.lengthnew DataView(r.buffer,r.byteOffset,r.byteLength),V=(r,t)=>r<<32-t|r>>>t;var Vr=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;function tr(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function At(r){return typeof r=="string"&&(r=tr(r)),pt(r),r}function ve(...r){let t=0;for(let n=0;nr().update(At(n)).digest(),e=r();return t.outputLen=e.outputLen,t.blockLen=e.blockLen,t.create=()=>r(),t}function _e(r=32){if(Ut&&typeof Ut.getRandomValues=="function")return Ut.getRandomValues(new Uint8Array(r));throw new Error("crypto.getRandomValues must be defined")}var Tt=class extends gt{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,xe(t);let n=At(e);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(n.length>i?t.create().update(n).digest():n);for(let a=0;anew Tt(r,t).update(e).digest();It.create=(r,t)=>new Tt(r,t);function er(r,t,e,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(t,e,n);let i=BigInt(32),o=BigInt(4294967295),a=Number(e>>i&o),s=Number(e&o),c=n?4:0,u=n?0:4;r.setUint32(t+c,a,n),r.setUint32(t+u,s,n)}var Se=(r,t,e)=>r&t^~r&e,Ae=(r,t,e)=>r&t^r&e^t&e,Ht=class extends gt{constructor(t,e,n,i){super(),this.blockLen=t,this.outputLen=e,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Ot(this.buffer)}update(t){wt(this);let{view:e,buffer:n,blockLen:i}=this;t=At(t);let o=t.length;for(let a=0;ai-a&&(this.process(n,0),a=0);for(let l=a;ly.length)throw new Error("_sha2: outputLen bigger than state");for(let l=0;l>>3,f=V(A,17)^V(A,19)^A>>>10;nt[l]=f+nt[l-7]+g+nt[l-16]|0}let{A:n,B:i,C:o,D:a,E:s,F:c,G:u,H:y}=this;for(let l=0;l<64;l++){let m=V(s,6)^V(s,11)^V(s,25),A=y+m+Se(s,c,u)+rr[l]+nt[l]|0,f=(V(n,2)^V(n,13)^V(n,22))+Ae(n,i,o)|0;y=u,u=c,c=s,s=a+A|0,a=o,o=i,i=n,n=A+f|0}n=n+this.A|0,i=i+this.B|0,o=o+this.C|0,a=a+this.D|0,s=s+this.E|0,c=c+this.F|0,u=u+this.G|0,y=y+this.H|0,this.set(n,i,o,a,s,c,u,y)}roundClean(){nt.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var qt=Be(()=>new te);var nr={},Ie=ir(globalThis,nr);function ir(r,t){return new Proxy(r,{get(e,n,i){return n in t?t[n]:r[n]},set(e,n,i){return n in t&&delete t[n],r[n]=i,!0},deleteProperty(e,n){let i=!1;return n in t&&(delete t[n],i=!0),n in r&&(delete r[n],i=!0),i},ownKeys(e){let n=Reflect.ownKeys(r),i=Reflect.ownKeys(t),o=new Set(i);return[...n.filter(a=>!o.has(a)),...i]},defineProperty(e,n,i){return n in t&&delete t[n],Reflect.defineProperty(r,n,i),!0},getOwnPropertyDescriptor(e,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(r,n)},has(e,n){return n in t||n in r}})}var ee=class extends Error{constructor(t){let e;t instanceof Error?e=t.message:typeof t=="string"?e=t:e="",super(e),this.name=this.constructor.name}},G=class extends ee{},mt=class extends G{};var xt=class extends G{},at=class extends G{},Nt=class extends G{},Rt=class extends G{};var zt=class extends G{},Et=class extends G{};async function sr(){if(Ie!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:r}=await import("crypto");return r.subtle}catch(r){throw new Et(r)}}var Ct=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await sr())}};var Y=new Uint8Array(0);var Pe=new Uint8Array([72,80,75,69,45,118,49]),re=class extends Ct{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Ft.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:Y}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,e){this._checkInit();let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+e.byteLength);return n.set(Pe,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(e,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,e,n){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+e.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(Pe,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(e,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,e){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new mt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,e)}async expand(t,e,n){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(n),a=new Uint8Array(o),s=Y,c=new Uint8Array(e),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let y=new Uint8Array(this.hashSize+c.length+1);for(let l=1,m=0;m=s.length?(a.set(s,m),m+=s.length):(a.set(s.slice(0,a.length-m),m),m+=a.length-m);return o}async extractAndExpand(t,e,n,i){await this._setup();let o=await this._api.importKey("raw",e,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},o,i*8)}async labeledExtract(t,e,n){return await this.extract(t,this.buildLabeledIkm(e,n))}async labeledExpand(t,e,n,i){return await this.expand(t,this.buildLabeledInfo(e,n,i),i)}_checkInit(){if(this._suiteId===Y)throw new Error("Not initialized. Call init()")}},jt=class extends re{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Ft.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var Dt=class extends jt{async extract(t,e){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return It(qt,new Uint8Array(t),new Uint8Array(e));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,e)}};var Ke=new Uint8Array([75,69,77,0,0]);var vt=r=>typeof r=="object"&&r!==null&&typeof r.privateKey=="object"&&typeof r.publicKey=="object";function ke(r,t){if(t<=0)throw new Error("i2Osp: too small size");if(r>=256**t)throw new Error("i2Osp: too large integer");let e=new Uint8Array(t);for(let n=0;n>8;return e}function Pt(r,t){let e=new Uint8Array(r.length+t.length);return e.set(r,0),e.set(t,r.length),e}var ar=new Uint8Array([101,97,101,95,112,114,107]),ur=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]);function fr(r,t,e){let n=new Uint8Array(r.length+t.length+e.length);return n.set(r,0),n.set(t,r.length),n.set(e,r.length+t.length),n}var Mt=class{constructor(t,e,n){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.id=t,this._prim=e,this._kdf=n;let i=new Uint8Array(Ke);i.set(ke(this.id,2),3),this._kdf.init(i)}async serializePublicKey(t){return await this._prim.serializePublicKey(t)}async deserializePublicKey(t){return await this._prim.deserializePublicKey(t)}async serializePrivateKey(t){return await this._prim.serializePrivateKey(t)}async deserializePrivateKey(t){return await this._prim.deserializePrivateKey(t)}async importKey(t,e,n=!0){return await this._prim.importKey(t,e,n)}async generateKeyPair(){return await this._prim.generateKeyPair()}async deriveKeyPair(t){if(t.byteLength>8192)throw new mt("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let e;t.ekm===void 0?e=await this.generateKeyPair():vt(t.ekm)?e=t.ekm:e=await this.deriveKeyPair(t.ekm);let n=await this._prim.serializePublicKey(e.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(e.privateKey,t.recipientPublicKey));else{let c=vt(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(e.privateKey,t.recipientPublicKey)),y=new Uint8Array(await this._prim.dh(c,t.recipientPublicKey));o=Pt(u,y)}let a;if(t.senderKey===void 0)a=Pt(new Uint8Array(n),new Uint8Array(i));else{let c=vt(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(c);a=fr(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let s=await this._generateSharedSecret(o,a);return{enc:n,sharedSecret:s}}catch(o){throw new Nt(o)}}async decap(t){let e=await this._prim.deserializePublicKey(t.enc),n=vt(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=vt(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let a;if(t.senderPublicKey===void 0)a=new Uint8Array(await this._prim.dh(n,e));else{let c=new Uint8Array(await this._prim.dh(n,e)),u=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));a=Pt(c,u)}let s;if(t.senderPublicKey===void 0)s=Pt(new Uint8Array(t.enc),new Uint8Array(o));else{let c=await this._prim.serializePublicKey(t.senderPublicKey);s=new Uint8Array(t.enc.byteLength+o.byteLength+c.byteLength),s.set(new Uint8Array(t.enc),0),s.set(new Uint8Array(o),t.enc.byteLength),s.set(new Uint8Array(c),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(a,s)}catch(a){throw new Rt(a)}}async _generateSharedSecret(t,e){let n=this._kdf.buildLabeledIkm(ar,t),i=this._kdf.buildLabeledInfo(ur,e,this.secretSize);return await this._kdf.extractAndExpand(Y,n,i,this.secretSize)}};var se={};Xe(se,{abytes:()=>Bt,bitGet:()=>wr,bitLen:()=>pr,bitMask:()=>Kt,bitSet:()=>gr,bytesToHex:()=>ut,bytesToNumberBE:()=>X,bytesToNumberLE:()=>Vt,concatBytes:()=>_t,createHmacDrbg:()=>oe,ensureBytes:()=>C,equalBytes:()=>yr,hexToBytes:()=>ft,hexToNumber:()=>ie,isBytes:()=>it,numberToBytesBE:()=>ot,numberToBytesLE:()=>Zt,numberToHexUnpadded:()=>Te,numberToVarBytesBE:()=>hr,utf8ToBytes:()=>br,validateObject:()=>st});var Oe=BigInt(0),$t=BigInt(1),lr=BigInt(2);function it(r){return r instanceof Uint8Array||r!=null&&typeof r=="object"&&r.constructor.name==="Uint8Array"}function Bt(r){if(!it(r))throw new Error("Uint8Array expected")}var dr=Array.from({length:256},(r,t)=>t.toString(16).padStart(2,"0"));function ut(r){Bt(r);let t="";for(let e=0;e=W._0&&r<=W._9)return r-W._0;if(r>=W._A&&r<=W._F)return r-(W._A-10);if(r>=W._a&&r<=W._f)return r-(W._a-10)}function ft(r){if(typeof r!="string")throw new Error("hex string expected, got "+typeof r);let t=r.length,e=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(e);for(let i=0,o=0;iOe;r>>=$t,t+=1);return t}function wr(r,t){return r>>BigInt(t)&$t}function gr(r,t,e){return r|(e?$t:Oe)<(lr<new Uint8Array(r),Ue=r=>Uint8Array.from(r);function oe(r,t,e){if(typeof r!="number"||r<2)throw new Error("hashLen must be a number");if(typeof t!="number"||t<2)throw new Error("qByteLen must be a number");if(typeof e!="function")throw new Error("hmacFn must be a function");let n=ne(r),i=ne(r),o=0,a=()=>{n.fill(1),i.fill(0),o=0},s=(...l)=>e(i,n,...l),c=(l=ne())=>{i=s(Ue([0]),l),n=s(),l.length!==0&&(i=s(Ue([1]),l),n=s())},u=()=>{if(o++>=1e3)throw new Error("drbg: tried 1000 values");let l=0,m=[];for(;l{a(),c(l);let A;for(;!(A=m(u()));)c();return a(),A}}var mr={bigint:r=>typeof r=="bigint",function:r=>typeof r=="function",boolean:r=>typeof r=="boolean",string:r=>typeof r=="string",stringOrUint8Array:r=>typeof r=="string"||it(r),isSafeInteger:r=>Number.isSafeInteger(r),array:r=>Array.isArray(r),field:(r,t)=>t.Fp.isValid(r),hash:r=>typeof r=="function"&&Number.isSafeInteger(r.outputLen)};function st(r,t,e={}){let n=(i,o,a)=>{let s=mr[o];if(typeof s!="function")throw new Error(`Invalid validator "${o}", expected function`);let c=r[i];if(!(a&&c===void 0)&&!s(c,r))throw new Error(`Invalid param ${String(i)}=${c} (${typeof c}), expected ${o}`)};for(let[i,o]of Object.entries(t))n(i,o,!1);for(let[i,o]of Object.entries(e))n(i,o,!0);return r}var O=BigInt(0),U=BigInt(1),lt=BigInt(2),xr=BigInt(3),ce=BigInt(4),He=BigInt(5),qe=BigInt(8),Er=BigInt(9),vr=BigInt(16);function H(r,t){let e=r%t;return e>=O?e:t+e}function Br(r,t,e){if(e<=O||t 0");if(e===U)return O;let n=U;for(;t>O;)t&U&&(n=n*r%e),r=r*r%e,t>>=U;return n}function j(r,t,e){let n=r;for(;t-- >O;)n*=n,n%=e;return n}function Gt(r,t){if(r===O||t<=O)throw new Error(`invert: expected positive integers, got n=${r} mod=${t}`);let e=H(r,t),n=t,i=O,o=U,a=U,s=O;for(;e!==O;){let u=n/e,y=n%e,l=i-a*u,m=o-s*u;n=e,e=y,i=a,o=s,a=l,s=m}if(n!==U)throw new Error("invert: does not exist");return H(i,t)}function _r(r){let t=(r-U)/lt,e,n,i;for(e=r-U,n=0;e%lt===O;e/=lt,n++);for(i=lt;i(n[i]="function",n),t);return st(r,e)}function Ir(r,t,e){if(e 0");if(e===O)return r.ONE;if(e===U)return t;let n=r.ONE,i=t;for(;e>O;)e&U&&(n=r.mul(n,i)),i=r.sqr(i),e>>=U;return n}function Pr(r,t){let e=new Array(t.length),n=t.reduce((o,a,s)=>r.is0(a)?o:(e[s]=o,r.mul(o,a)),r.ONE),i=r.inv(n);return t.reduceRight((o,a,s)=>r.is0(a)?o:(e[s]=r.mul(o,e[s]),r.mul(o,a)),i),e}function ue(r,t){let e=t!==void 0?t:r.toString(2).length,n=Math.ceil(e/8);return{nBitLength:e,nByteLength:n}}function Ne(r,t,e=!1,n={}){if(r<=O)throw new Error(`Expected Field ORDER > 0, got ${r}`);let{nBitLength:i,nByteLength:o}=ue(r,t);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let a=Sr(r),s=Object.freeze({ORDER:r,BITS:i,BYTES:o,MASK:Kt(i),ZERO:O,ONE:U,create:c=>H(c,r),isValid:c=>{if(typeof c!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof c}`);return O<=c&&cc===O,isOdd:c=>(c&U)===U,neg:c=>H(-c,r),eql:(c,u)=>c===u,sqr:c=>H(c*c,r),add:(c,u)=>H(c+u,r),sub:(c,u)=>H(c-u,r),mul:(c,u)=>H(c*u,r),pow:(c,u)=>Ir(s,c,u),div:(c,u)=>H(c*Gt(u,r),r),sqrN:c=>c*c,addN:(c,u)=>c+u,subN:(c,u)=>c-u,mulN:(c,u)=>c*u,inv:c=>Gt(c,r),sqrt:n.sqrt||(c=>a(s,c)),invertBatch:c=>Pr(s,c),cmov:(c,u,y)=>y?u:c,toBytes:c=>e?Zt(c,o):ot(c,o),fromBytes:c=>{if(c.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${c.length}`);return e?Vt(c):X(c)}});return Object.freeze(s)}function Re(r){if(typeof r!="bigint")throw new Error("field order must be bigint");let t=r.toString(2).length;return Math.ceil(t/8)}function fe(r){let t=Re(r);return t+Math.ceil(t/2)}function ze(r,t,e=!1){let n=r.length,i=Re(t),o=fe(t);if(n<16||n1024)throw new Error(`expected ${o}-1024 bytes of input, got ${n}`);let a=e?X(r):Vt(r),s=H(a,t-U)+U;return e?Zt(s,i):ot(s,i)}var kr=BigInt(0),le=BigInt(1);function Ce(r,t){let e=(i,o)=>{let a=o.negate();return i?a:o},n=i=>{let o=Math.ceil(t/i)+1,a=2**(i-1);return{windows:o,windowSize:a}};return{constTimeNegate:e,unsafeLadder(i,o){let a=r.ZERO,s=i;for(;o>kr;)o&le&&(a=a.add(s)),s=s.double(),o>>=le;return a},precomputeWindow(i,o){let{windows:a,windowSize:s}=n(o),c=[],u=i,y=u;for(let l=0;l>=A,h>c&&(h-=m,a+=le);let b=f,x=f+Math.abs(h)-1,v=g%2!==0,I=h<0;h===0?y=y.add(e(v,o[b])):u=u.add(e(I,o[x]))}return{p:u,f:y}},wNAFCached(i,o,a,s){let c=i._WINDOW_SIZE||1,u=o.get(i);return u||(u=this.precomputeWindow(i,c),c!==1&&o.set(i,s(u))),this.wNAF(c,u,a)}}}function de(r){return ae(r.Fp),st(r,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...ue(r.n,r.nBitLength),...r,p:r.Fp.ORDER})}function Lr(r){let t=de(r);st(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});let{endo:e,Fp:n,a:i}=t;if(e){if(!n.eql(i,n.ZERO))throw new Error("Endomorphism can only be defined for Koblitz curves that have a=0");if(typeof e!="object"||typeof e.beta!="bigint"||typeof e.splitScalar!="function")throw new Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}var{bytesToNumberBE:Ur,hexToBytes:Or}=se,dt={Err:class extends Error{constructor(t=""){super(t)}},_parseInt(r){let{Err:t}=dt;if(r.length<2||r[0]!==2)throw new t("Invalid signature integer tag");let e=r[1],n=r.subarray(2,e+2);if(!e||n.length!==e)throw new t("Invalid signature integer: wrong length");if(n[0]&128)throw new t("Invalid signature integer: negative");if(n[0]===0&&!(n[1]&128))throw new t("Invalid signature integer: unnecessary leading zero");return{d:Ur(n),l:r.subarray(e+2)}},toSig(r){let{Err:t}=dt,e=typeof r=="string"?Or(r):r;Bt(e);let n=e.length;if(n<2||e[0]!=48)throw new t("Invalid signature tag");if(e[1]!==n-2)throw new t("Invalid signature: incorrect length");let{d:i,l:o}=dt._parseInt(e.subarray(2)),{d:a,l:s}=dt._parseInt(o);if(s.length)throw new t("Invalid signature: left bytes after parsing");return{r:i,s:a}},hexFromSig(r){let t=u=>Number.parseInt(u[0],16)&8?"00"+u:u,e=u=>{let y=u.toString(16);return y.length&1?`0${y}`:y},n=t(e(r.s)),i=t(e(r.r)),o=n.length/2,a=i.length/2,s=e(o),c=e(a);return`30${e(a+o+4)}02${c}${i}02${s}${n}`}},Q=BigInt(0),M=BigInt(1),Ln=BigInt(2),je=BigInt(3),Un=BigInt(4);function Tr(r){let t=Lr(r),{Fp:e}=t,n=t.toBytes||((g,f,h)=>{let b=f.toAffine();return _t(Uint8Array.from([4]),e.toBytes(b.x),e.toBytes(b.y))}),i=t.fromBytes||(g=>{let f=g.subarray(1),h=e.fromBytes(f.subarray(0,e.BYTES)),b=e.fromBytes(f.subarray(e.BYTES,2*e.BYTES));return{x:h,y:b}});function o(g){let{a:f,b:h}=t,b=e.sqr(g),x=e.mul(b,g);return e.add(e.add(x,e.mul(g,f)),h)}if(!e.eql(e.sqr(t.Gy),o(t.Gx)))throw new Error("bad generator point: equation left != right");function a(g){return typeof g=="bigint"&&Qe.eql(v,e.ZERO);return x(h)&&x(b)?l.ZERO:new l(h,b,e.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(f){let h=e.invertBatch(f.map(b=>b.pz));return f.map((b,x)=>b.toAffine(h[x])).map(l.fromAffine)}static fromHex(f){let h=l.fromAffine(i(C("pointHex",f)));return h.assertValidity(),h}static fromPrivateKey(f){return l.BASE.multiply(c(f))}_setWindowSize(f){this._WINDOW_SIZE=f,u.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!e.is0(this.py))return;throw new Error("bad point: ZERO")}let{x:f,y:h}=this.toAffine();if(!e.isValid(f)||!e.isValid(h))throw new Error("bad point: x or y not FE");let b=e.sqr(h),x=o(f);if(!e.eql(b,x))throw new Error("bad point: equation left != right");if(!this.isTorsionFree())throw new Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:f}=this.toAffine();if(e.isOdd)return!e.isOdd(f);throw new Error("Field doesn't support isOdd")}equals(f){y(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:S}=f,w=e.eql(e.mul(h,S),e.mul(v,x)),E=e.eql(e.mul(b,S),e.mul(I,x));return w&&E}negate(){return new l(this.px,e.neg(this.py),this.pz)}double(){let{a:f,b:h}=t,b=e.mul(h,je),{px:x,py:v,pz:I}=this,S=e.ZERO,w=e.ZERO,E=e.ZERO,_=e.mul(x,x),D=e.mul(v,v),L=e.mul(I,I),P=e.mul(x,v);return P=e.add(P,P),E=e.mul(x,I),E=e.add(E,E),S=e.mul(f,E),w=e.mul(b,L),w=e.add(S,w),S=e.sub(D,w),w=e.add(D,w),w=e.mul(S,w),S=e.mul(P,S),E=e.mul(b,E),L=e.mul(f,L),P=e.sub(_,L),P=e.mul(f,P),P=e.add(P,E),E=e.add(_,_),_=e.add(E,_),_=e.add(_,L),_=e.mul(_,P),w=e.add(w,_),L=e.mul(v,I),L=e.add(L,L),_=e.mul(L,P),S=e.sub(S,_),E=e.mul(L,D),E=e.add(E,E),E=e.add(E,E),new l(S,w,E)}add(f){y(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:S}=f,w=e.ZERO,E=e.ZERO,_=e.ZERO,D=t.a,L=e.mul(t.b,je),P=e.mul(h,v),R=e.mul(b,I),z=e.mul(x,S),J=e.add(h,b),d=e.add(v,I);J=e.mul(J,d),d=e.add(P,R),J=e.sub(J,d),d=e.add(h,x);let p=e.add(v,S);return d=e.mul(d,p),p=e.add(P,z),d=e.sub(d,p),p=e.add(b,x),w=e.add(I,S),p=e.mul(p,w),w=e.add(R,z),p=e.sub(p,w),_=e.mul(D,d),w=e.mul(L,z),_=e.add(w,_),w=e.sub(R,_),_=e.add(R,_),E=e.mul(w,_),R=e.add(P,P),R=e.add(R,P),z=e.mul(D,z),d=e.mul(L,d),R=e.add(R,z),z=e.sub(P,z),z=e.mul(D,z),d=e.add(d,z),P=e.mul(R,d),E=e.add(E,P),P=e.mul(p,d),w=e.mul(J,w),w=e.sub(w,P),P=e.mul(J,R),_=e.mul(p,_),_=e.add(_,P),new l(w,E,_)}subtract(f){return this.add(f.negate())}is0(){return this.equals(l.ZERO)}wNAF(f){return A.wNAFCached(this,u,f,h=>{let b=e.invertBatch(h.map(x=>x.pz));return h.map((x,v)=>x.toAffine(b[v])).map(l.fromAffine)})}multiplyUnsafe(f){let h=l.ZERO;if(f===Q)return h;if(s(f),f===M)return this;let{endo:b}=t;if(!b)return A.unsafeLadder(this,f);let{k1neg:x,k1:v,k2neg:I,k2:S}=b.splitScalar(f),w=h,E=h,_=this;for(;v>Q||S>Q;)v&M&&(w=w.add(_)),S&M&&(E=E.add(_)),_=_.double(),v>>=M,S>>=M;return x&&(w=w.negate()),I&&(E=E.negate()),E=new l(e.mul(E.px,b.beta),E.py,E.pz),w.add(E)}multiply(f){s(f);let h=f,b,x,{endo:v}=t;if(v){let{k1neg:I,k1:S,k2neg:w,k2:E}=v.splitScalar(h),{p:_,f:D}=this.wNAF(S),{p:L,f:P}=this.wNAF(E);_=A.constTimeNegate(I,_),L=A.constTimeNegate(w,L),L=new l(e.mul(L.px,v.beta),L.py,L.pz),b=_.add(L),x=D.add(P)}else{let{p:I,f:S}=this.wNAF(h);b=I,x=S}return l.normalizeZ([b,x])[0]}multiplyAndAddUnsafe(f,h,b){let x=l.BASE,v=(S,w)=>w===Q||w===M||!S.equals(x)?S.multiplyUnsafe(w):S.multiply(w),I=v(this,h).add(v(f,b));return I.is0()?void 0:I}toAffine(f){let{px:h,py:b,pz:x}=this,v=this.is0();f==null&&(f=v?e.ONE:e.inv(x));let I=e.mul(h,f),S=e.mul(b,f),w=e.mul(x,f);if(v)return{x:e.ZERO,y:e.ZERO};if(!e.eql(w,e.ONE))throw new Error("invZ was invalid");return{x:I,y:S}}isTorsionFree(){let{h:f,isTorsionFree:h}=t;if(f===M)return!0;if(h)return h(l,this);throw new Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){let{h:f,clearCofactor:h}=t;return f===M?this:h?h(l,this):this.multiplyUnsafe(t.h)}toRawBytes(f=!0){return this.assertValidity(),n(l,this,f)}toHex(f=!0){return ut(this.toRawBytes(f))}}l.BASE=new l(t.Gx,t.Gy,e.ONE),l.ZERO=new l(e.ZERO,e.ONE,e.ZERO);let m=t.nBitLength,A=Ce(l,t.endo?Math.ceil(m/2):m);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:o,isWithinCurveOrder:a}}function Hr(r){let t=de(r);return st(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}function De(r){let t=Hr(r),{Fp:e,n}=t,i=e.BYTES+1,o=2*e.BYTES+1;function a(d){return Qut(ot(d,t.nByteLength));function g(d){let p=n>>M;return d>p}function f(d){return g(d)?s(-d):d}let h=(d,p,B)=>X(d.slice(p,B));class b{constructor(p,B,k){this.r=p,this.s=B,this.recovery=k,this.assertValidity()}static fromCompact(p){let B=t.nByteLength;return p=C("compactSignature",p,B*2),new b(h(p,0,B),h(p,B,2*B))}static fromDER(p){let{r:B,s:k}=dt.toSig(C("DER",p));return new b(B,k)}assertValidity(){if(!m(this.r))throw new Error("r must be 0 < r < CURVE.n");if(!m(this.s))throw new Error("s must be 0 < s < CURVE.n")}addRecoveryBit(p){return new b(this.r,this.s,p)}recoverPublicKey(p){let{r:B,s:k,recovery:K}=this,T=E(C("msgHash",p));if(K==null||![0,1,2,3].includes(K))throw new Error("recovery id invalid");let q=K===2||K===3?B+t.n:B;if(q>=e.ORDER)throw new Error("recovery id 2 or 3 invalid");let N=K&1?"03":"02",F=u.fromHex(N+A(q)),$=c(q),tt=s(-T*$),St=s(k*$),et=u.BASE.multiplyAndAddUnsafe(F,tt,St);if(!et)throw new Error("point at infinify");return et.assertValidity(),et}hasHighS(){return g(this.s)}normalizeS(){return this.hasHighS()?new b(this.r,s(-this.s),this.recovery):this}toDERRawBytes(){return ft(this.toDERHex())}toDERHex(){return dt.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return ft(this.toCompactHex())}toCompactHex(){return A(this.r)+A(this.s)}}let x={isValidPrivateKey(d){try{return y(d),!0}catch{return!1}},normPrivateKeyToScalar:y,randomPrivateKey:()=>{let d=fe(t.n);return ze(t.randomBytes(d),t.n)},precompute(d=8,p=u.BASE){return p._setWindowSize(d),p.multiply(BigInt(3)),p}};function v(d,p=!0){return u.fromPrivateKey(d).toRawBytes(p)}function I(d){let p=it(d),B=typeof d=="string",k=(p||B)&&d.length;return p?k===i||k===o:B?k===2*i||k===2*o:d instanceof u}function S(d,p,B=!0){if(I(d))throw new Error("first arg must be private key");if(!I(p))throw new Error("second arg must be public key");return u.fromHex(p).multiply(y(d)).toRawBytes(B)}let w=t.bits2int||function(d){let p=X(d),B=d.length*8-t.nBitLength;return B>0?p>>BigInt(B):p},E=t.bits2int_modN||function(d){return s(w(d))},_=Kt(t.nBitLength);function D(d){if(typeof d!="bigint")throw new Error("bigint expected");if(!(Q<=d&&d<_))throw new Error(`bigint expected < 2^${t.nBitLength}`);return ot(d,t.nByteLength)}function L(d,p,B=P){if(["recovered","canonical"].some(ct=>ct in B))throw new Error("sign() legacy options not supported");let{hash:k,randomBytes:K}=t,{lowS:T,prehash:q,extraEntropy:N}=B;T==null&&(T=!0),d=C("msgHash",d),q&&(d=C("prehashed msgHash",k(d)));let F=E(d),$=y(p),tt=[D($),D(F)];if(N!=null&&N!==!1){let ct=N===!0?K(e.BYTES):N;tt.push(C("extraEntropy",ct))}let St=_t(...tt),et=F;function Qt(ct){let yt=w(ct);if(!m(yt))return;let pe=c(yt),Z=u.BASE.multiply(yt).toAffine(),bt=s(Z.x);if(bt===Q)return;let Lt=s(pe*s(et+bt*$));if(Lt===Q)return;let we=(Z.x===bt?0:2)|Number(Z.y&M),ge=Lt;return T&&g(Lt)&&(ge=f(Lt),we^=1),new b(bt,ge,we)}return{seed:St,k2sig:Qt}}let P={lowS:t.lowS,prehash:!1},R={lowS:t.lowS,prehash:!1};function z(d,p,B=P){let{seed:k,k2sig:K}=L(d,p,B),T=t;return oe(T.hash.outputLen,T.nByteLength,T.hmac)(k,K)}u.BASE._setWindowSize(8);function J(d,p,B,k=R){let K=d;if(p=C("msgHash",p),B=C("publicKey",B),"strict"in k)throw new Error("options.strict was renamed to lowS");let{lowS:T,prehash:q}=k,N,F;try{if(typeof K=="string"||it(K))try{N=b.fromDER(K)}catch(Z){if(!(Z instanceof dt.Err))throw Z;N=b.fromCompact(K)}else if(typeof K=="object"&&typeof K.r=="bigint"&&typeof K.s=="bigint"){let{r:Z,s:bt}=K;N=new b(Z,bt)}else throw new Error("PARSE");F=u.fromHex(B)}catch(Z){if(Z.message==="PARSE")throw new Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(T&&N.hasHighS())return!1;q&&(p=t.hash(p));let{r:$,s:tt}=N,St=E(p),et=c(tt),Qt=s(St*et),ct=s($*et),yt=u.BASE.multiplyAndAddUnsafe(F,Qt,ct)?.toAffine();return yt?s(yt.x)===$:!1}return{CURVE:t,getPublicKey:v,getSharedSecret:S,sign:z,verify:J,ProjectivePoint:u,Signature:b,utils:x}}function qr(r){return{hash:r,hmac:(t,...e)=>It(r,t,ve(...e)),randomBytes:_e}}function Me(r,t){let e=n=>De({...r,...qr(n)});return Object.freeze({...e(t),create:e})}var Ze=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),$e=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),Nr=BigInt(1),he=BigInt(2),Ve=(r,t)=>(r+t/he)/t;function Rr(r){let t=Ze,e=BigInt(3),n=BigInt(6),i=BigInt(11),o=BigInt(22),a=BigInt(23),s=BigInt(44),c=BigInt(88),u=r*r*r%t,y=u*u*r%t,l=j(y,e,t)*y%t,m=j(l,e,t)*y%t,A=j(m,he,t)*u%t,g=j(A,i,t)*A%t,f=j(g,o,t)*g%t,h=j(f,s,t)*f%t,b=j(h,c,t)*h%t,x=j(b,s,t)*f%t,v=j(x,e,t)*y%t,I=j(v,a,t)*g%t,S=j(I,n,t)*u%t,w=j(S,he,t);if(!ye.eql(ye.sqr(w),r))throw new Error("Cannot find square root");return w}var ye=Ne(Ze,void 0,void 0,{sqrt:Rr}),kt=Me({a:BigInt(0),b:BigInt(7),Fp:ye,n:$e,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:r=>{let t=$e,e=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),n=-Nr*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),i=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),o=e,a=BigInt("0x100000000000000000000000000000000"),s=Ve(o*r,t),c=Ve(-n*r,t),u=H(r-s*e-c*i,t),y=H(-s*n-c*o,t),l=u>a,m=y>a;if(l&&(u=t-u),m&&(y=t-y),u>a||y>a)throw new Error("splitScalar: Endomorphism failed, k="+r);return{k1neg:l,k1:u,k2neg:m,k2:y}}}},qt),jn=BigInt(0);var Dn=kt.ProjectivePoint;var Yt=["deriveBits"],Ge=new Uint8Array([100,107,112,95,112,114,107]),Ye=new Uint8Array([115,107]);var ht=class{constructor(t,e,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=e,this.type=n,this.algorithm={name:t},this.usages=i,n==="public"&&(this.usages=[])}};var Wt="ECDH",Xt=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=33,this._nSk=32}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(e){throw new xt(e)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(e){throw new at(e)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(e){throw new xt(e)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(e){throw new at(e)}}async importKey(t,e,n){try{if(t!=="raw")throw new Error("Unsupported format");return await this._importRawKey(e,n)}catch(i){throw new at(i)}}async generateKeyPair(){try{let t=kt.utils.randomPrivateKey(),e=new ht(Wt,t,"private",Yt);return{publicKey:await this.derivePublicKey(e),privateKey:e}}catch(t){throw new Et(t)}}async deriveKeyPair(t){try{let e=await this._hkdf.labeledExtract(Y,Ge,new Uint8Array(t)),n=await this._hkdf.labeledExpand(e,Ye,Y,this._nSk),i=new ht(Wt,new Uint8Array(n),"private",Yt);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(e){throw new zt(e)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(e){throw new at(e)}}async dh(t,e){try{return await this._dh(t,e)}catch(n){throw new xt(n)}}_serializePublicKey(t){return new Promise(e=>{e(t.key.buffer)})}_serializePrivateKey(t){return new Promise(e=>{e(t.key.buffer)})}_importRawKey(t,e){return new Promise((n,i)=>{e&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!e&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new ht(Wt,new Uint8Array(t),e?"public":"private",e?[]:Yt))})}_derivePublicKey(t){return new Promise((e,n)=>{try{let i=kt.getPublicKey(t.key);e(new ht(Wt,i,"public"))}catch(i){n(i)}})}_dh(t,e){return new Promise((n,i)=>{try{n(kt.getSharedSecret(t.key,e.key).buffer)}catch(o){i(o)}})}};var be=class extends Mt{constructor(){let t=new Dt;super(Jt.DhkemSecp256k1HkdfSha256,new Xt(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Jt.DhkemSecp256k1HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{be as DhkemSecp256k1HkdfSha256}; /*! Bundled license information: @noble/hashes/esm/utils.js: diff --git a/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html b/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html index 21badfdea..792027ad4 100644 --- a/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html +++ b/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html @@ -11,7 +11,7 @@

Example

import { AeadId, CipherSuite, KdfId, KemId } from "https://deno.land/x/hpke/mod.ts";

const suite = new CipherSuite({
  kem: KemId.DhkemX25519HkdfSha256,
  kdf: KdfId.HkdfSha256,
  aead: AeadId.Aes128Gcm,
});
-

Hierarchy

  • Dhkem
    • DhkemX25519HkdfSha256

Constructors

constructor +

Hierarchy

  • Dhkem
    • DhkemX25519HkdfSha256

Constructors

constructor

Properties

_kdf _prim encSize @@ -28,43 +28,43 @@

ExampleimportKey serializePrivateKey serializePublicKey -

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 32

32

-

Readonlyid

id: KemId = KemId.DhkemX25519HkdfSha256

KemId.DhkemX25519HkdfSha256 (0x0020)

-

ReadonlyprivateKeySize

privateKeySize: number = 32

32

-

ReadonlypublicKeySize

publicKeySize: number = 32

32

-

ReadonlysecretSize

secretSize: number = 32

32

-

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    +

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 32

32

+

Readonlyid

id: KemId = KemId.DhkemX25519HkdfSha256

KemId.DhkemX25519HkdfSha256 (0x0020)

+

ReadonlyprivateKeySize

privateKeySize: number = 32

32

+

ReadonlypublicKeySize

publicKeySize: number = 32

32

+

ReadonlysecretSize

secretSize: number = 32

32

+

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    • params: RecipientContextParams

      A set of parameters for the recipient context.

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    +

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    If the error occurred, throws DeriveKeyPairError.

    Parameters

    • ikm: ArrayBuffer

      An input keying material.

    Returns Promise<CryptoKeyPair>

    A key pair derived.

    Throws

    DeriveKeyPairError

    -

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    +

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    +

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    • params: SenderContextParams

      A set of parameters for the sender context.

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    +

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    If the error occurred, throws NotSupportedError.

    Returns Promise<CryptoKeyPair>

    A key pair generated.

    Throws

    NotSupportedError

    -

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    +

importKey

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    +

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    +

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/dhkem-x25519/src/hpke-dhkem-x25519.js b/dhkem-x25519/src/hpke-dhkem-x25519.js index 10f61bd1c..867d6a2d8 100644 --- a/dhkem-x25519/src/hpke-dhkem-x25519.js +++ b/dhkem-x25519/src/hpke-dhkem-x25519.js @@ -1,4 +1,4 @@ -var mn={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},Qt=mn,En={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},Jt=En;function Pe(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`Wrong positive integer: ${e}`)}function _n(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function te(e,...t){if(!_n(e))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function Ue(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");Pe(e.outputLen),Pe(e.blockLen)}function yt(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Ke(e,t){te(e);let n=t.outputLen;if(e.lengthnew DataView(e.buffer,e.byteOffset,e.byteLength),Y=(e,t)=>e<<32-t|e>>>t,Bn=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Bn)throw new Error("Non little-endian hardware is not supported");function ee(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function vt(e){if(typeof e=="string"&&(e=ee(e)),!ke(e))throw new Error(`expected Uint8Array, got ${typeof e}`);return e}function Te(...e){let t=0;for(let r=0;re().update(vt(r)).digest(),n=e();return t.outputLen=n.outputLen,t.blockLen=n.blockLen,t.create=()=>e(),t}function ne(e=32){if(Ot&&typeof Ot.getRandomValues=="function")return Ot.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Nt=class extends xt{constructor(t,n){super(),this.finished=!1,this.destroyed=!1,Ue(t);let r=vt(n);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(r.length>i?t.create().update(r).digest():r);for(let c=0;cnew Nt(e,t).update(n).digest();re.create=(e,t)=>new Nt(e,t);function An(e,t,n,r){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,n,r);let i=BigInt(32),o=BigInt(4294967295),c=Number(n>>i&o),a=Number(n&o),s=r?4:0,u=r?0:4;e.setUint32(t+s,c,r),e.setUint32(t+u,a,r)}var wt=class extends xt{constructor(t,n,r,i){super(),this.blockLen=t,this.outputLen=n,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Ct(this.buffer)}update(t){yt(this);let{view:n,buffer:r,blockLen:i}=this;t=vt(t);let o=t.length;for(let c=0;ci-c&&(this.process(r,0),c=0);for(let h=c;hf.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;he&t^~e&n,Sn=(e,t,n)=>e&t^e&n^t&n,In=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),at=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),ft=new Uint32Array(64),ie=class extends wt{constructor(){super(64,32,8,!1),this.A=at[0]|0,this.B=at[1]|0,this.C=at[2]|0,this.D=at[3]|0,this.E=at[4]|0,this.F=at[5]|0,this.G=at[6]|0,this.H=at[7]|0}get(){let{A:t,B:n,C:r,D:i,E:o,F:c,G:a,H:s}=this;return[t,n,r,i,o,c,a,s]}set(t,n,r,i,o,c,a,s){this.A=t|0,this.B=n|0,this.C=r|0,this.D=i|0,this.E=o|0,this.F=c|0,this.G=a|0,this.H=s|0}process(t,n){for(let h=0;h<16;h++,n+=4)ft[h]=t.getUint32(n,!1);for(let h=16;h<64;h++){let b=ft[h-15],B=ft[h-2],I=Y(b,7)^Y(b,18)^b>>>3,L=Y(B,17)^Y(B,19)^B>>>10;ft[h]=L+ft[h-7]+I+ft[h-16]|0}let{A:r,B:i,C:o,D:c,E:a,F:s,G:u,H:f}=this;for(let h=0;h<64;h++){let b=Y(a,6)^Y(a,11)^Y(a,25),B=f+b+vn(a,s,u)+In[h]+ft[h]|0,L=(Y(r,2)^Y(r,13)^Y(r,22))+Sn(r,i,o)|0;f=u,u=s,s=a,a=c+B|0,c=o,o=i,i=r,r=B+L|0}r=r+this.A|0,i=i+this.B|0,o=o+this.C|0,c=c+this.D|0,a=a+this.E|0,s=s+this.F|0,u=u+this.G|0,f=f+this.H|0,this.set(r,i,o,c,a,s,u,f)}roundClean(){ft.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var Oe=Rt(()=>new ie);var Ln={},Ce=Hn(globalThis,Ln);function Hn(e,t){return new Proxy(e,{get(n,r,i){return r in t?t[r]:e[r]},set(n,r,i){return r in t&&delete t[r],e[r]=i,!0},deleteProperty(n,r){let i=!1;return r in t&&(delete t[r],i=!0),r in e&&(delete e[r],i=!0),i},ownKeys(n){let r=Reflect.ownKeys(e),i=Reflect.ownKeys(t),o=new Set(i);return[...r.filter(c=>!o.has(c)),...i]},defineProperty(n,r,i){return r in t&&delete t[r],Reflect.defineProperty(e,r,i),!0},getOwnPropertyDescriptor(n,r){return r in t?Reflect.getOwnPropertyDescriptor(t,r):Reflect.getOwnPropertyDescriptor(e,r)},has(n,r){return r in t||r in e}})}var oe=class extends Error{constructor(t){let n;t instanceof Error?n=t.message:typeof t=="string"?n=t:n="",super(n),this.name=this.constructor.name}},tt=class extends oe{},gt=class extends tt{};var mt=class extends tt{},dt=class extends tt{},Dt=class extends tt{},zt=class extends tt{};var qt=class extends tt{},Et=class extends tt{};async function Un(){if(Ce!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:e}=await import("crypto");return e.subtle}catch(e){throw new Et(e)}}var Mt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await Un())}};var et=new Uint8Array(0);var Re=new Uint8Array([72,80,75,69,45,118,49]),se=class extends Mt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Jt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:et}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,n){this._checkInit();let r=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+n.byteLength);return r.set(Re,0),r.set(this._suiteId,7),r.set(t,7+this._suiteId.byteLength),r.set(n,7+this._suiteId.byteLength+t.byteLength),r}buildLabeledInfo(t,n,r){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+n.byteLength);return i.set(new Uint8Array([0,r]),0),i.set(Re,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(n,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new gt("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}async expand(t,n,r){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(r),c=new Uint8Array(o),a=et,s=new Uint8Array(n),u=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let f=new Uint8Array(this.hashSize+s.length+1);for(let h=1,b=0;b=a.length?(c.set(a,b),b+=a.length):(c.set(a.slice(0,c.length-b),b),b+=c.length-b);return o}async extractAndExpand(t,n,r,i){await this._setup();let o=await this._api.importKey("raw",n,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:r},o,i*8)}async labeledExtract(t,n,r){return await this.extract(t,this.buildLabeledIkm(n,r))}async labeledExpand(t,n,r,i){return await this.expand(t,this.buildLabeledInfo(n,r,i),i)}_checkInit(){if(this._suiteId===et)throw new Error("Not initialized. Call init()")}},Gt=class extends se{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Jt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var Ft=class extends Gt{async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return re(Oe,new Uint8Array(t),new Uint8Array(n));let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}};var Ne=new Uint8Array([75,69,77,0,0]);var _t=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function De(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let n=new Uint8Array(t);for(let r=0;r>8;return n}function St(e,t){let n=new Uint8Array(e.length+t.length);return n.set(e,0),n.set(t,e.length),n}function ce(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=atob(t),r=new Uint8Array(n.length);for(let i=0;i8192)throw new gt("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let n;t.ekm===void 0?n=await this.generateKeyPair():_t(t.ekm)?n=t.ekm:n=await this.deriveKeyPair(t.ekm);let r=await this._prim.serializePublicKey(n.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey));else{let s=_t(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey)),f=new Uint8Array(await this._prim.dh(s,t.recipientPublicKey));o=St(u,f)}let c;if(t.senderKey===void 0)c=St(new Uint8Array(r),new Uint8Array(i));else{let s=_t(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(s);c=On(new Uint8Array(r),new Uint8Array(i),new Uint8Array(u))}let a=await this._generateSharedSecret(o,c);return{enc:r,sharedSecret:a}}catch(o){throw new Dt(o)}}async decap(t){let n=await this._prim.deserializePublicKey(t.enc),r=_t(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=_t(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let c;if(t.senderPublicKey===void 0)c=new Uint8Array(await this._prim.dh(r,n));else{let s=new Uint8Array(await this._prim.dh(r,n)),u=new Uint8Array(await this._prim.dh(r,t.senderPublicKey));c=St(s,u)}let a;if(t.senderPublicKey===void 0)a=St(new Uint8Array(t.enc),new Uint8Array(o));else{let s=await this._prim.serializePublicKey(t.senderPublicKey);a=new Uint8Array(t.enc.byteLength+o.byteLength+s.byteLength),a.set(new Uint8Array(t.enc),0),a.set(new Uint8Array(o),t.enc.byteLength),a.set(new Uint8Array(s),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(c,a)}catch(c){throw new zt(c)}}async _generateSharedSecret(t,n){let r=this._kdf.buildLabeledIkm(kn,t),i=this._kdf.buildLabeledInfo(Tn,n,this.secretSize);return await this._kdf.extractAndExpand(et,r,i,this.secretSize)}};var $t=BigInt(4294967295),ae=BigInt(32);function ze(e,t=!1){return t?{h:Number(e&$t),l:Number(e>>ae&$t)}:{h:Number(e>>ae&$t)|0,l:Number(e&$t)|0}}function Cn(e,t=!1){let n=new Uint32Array(e.length),r=new Uint32Array(e.length);for(let i=0;iBigInt(e>>>0)<>>0),Nn=(e,t,n)=>e>>>n,Dn=(e,t,n)=>e<<32-n|t>>>n,zn=(e,t,n)=>e>>>n|t<<32-n,qn=(e,t,n)=>e<<32-n|t>>>n,Mn=(e,t,n)=>e<<64-n|t>>>n-32,Gn=(e,t,n)=>e>>>n-32|t<<64-n,Fn=(e,t)=>t,jn=(e,t)=>e,$n=(e,t,n)=>e<>>32-n,Zn=(e,t,n)=>t<>>32-n,Vn=(e,t,n)=>t<>>64-n,Xn=(e,t,n)=>e<>>64-n;function Yn(e,t,n,r){let i=(t>>>0)+(r>>>0);return{h:e+n+(i/2**32|0)|0,l:i|0}}var Wn=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),Qn=(e,t,n,r)=>t+n+r+(e/2**32|0)|0,Jn=(e,t,n,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0),tr=(e,t,n,r,i)=>t+n+r+i+(e/2**32|0)|0,er=(e,t,n,r,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0)+(i>>>0),nr=(e,t,n,r,i,o)=>t+n+r+i+o+(e/2**32|0)|0;var rr={fromBig:ze,split:Cn,toBig:Rn,shrSH:Nn,shrSL:Dn,rotrSH:zn,rotrSL:qn,rotrBH:Mn,rotrBL:Gn,rotr32H:Fn,rotr32L:jn,rotlSH:$n,rotlSL:Zn,rotlBH:Vn,rotlBL:Xn,add:Yn,add3L:Wn,add3H:Qn,add4L:Jn,add4H:tr,add5H:nr,add5L:er},g=rr;var[ir,or]=g.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),ut=new Uint32Array(80),lt=new Uint32Array(80),fe=class extends wt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:n,Bh:r,Bl:i,Ch:o,Cl:c,Dh:a,Dl:s,Eh:u,El:f,Fh:h,Fl:b,Gh:B,Gl:I,Hh:L,Hl:S}=this;return[t,n,r,i,o,c,a,s,u,f,h,b,B,I,L,S]}set(t,n,r,i,o,c,a,s,u,f,h,b,B,I,L,S){this.Ah=t|0,this.Al=n|0,this.Bh=r|0,this.Bl=i|0,this.Ch=o|0,this.Cl=c|0,this.Dh=a|0,this.Dl=s|0,this.Eh=u|0,this.El=f|0,this.Fh=h|0,this.Fl=b|0,this.Gh=B|0,this.Gl=I|0,this.Hh=L|0,this.Hl=S|0}process(t,n){for(let d=0;d<16;d++,n+=4)ut[d]=t.getUint32(n),lt[d]=t.getUint32(n+=4);for(let d=16;d<80;d++){let A=ut[d-15]|0,x=lt[d-15]|0,R=g.rotrSH(A,x,1)^g.rotrSH(A,x,8)^g.shrSH(A,x,7),X=g.rotrSL(A,x,1)^g.rotrSL(A,x,8)^g.shrSL(A,x,7),K=ut[d-2]|0,T=lt[d-2]|0,q=g.rotrSH(K,T,19)^g.rotrBH(K,T,61)^g.shrSH(K,T,6),N=g.rotrSL(K,T,19)^g.rotrBL(K,T,61)^g.shrSL(K,T,6),j=g.add4L(X,N,lt[d-7],lt[d-16]),O=g.add4H(j,R,q,ut[d-7],ut[d-16]);ut[d]=O|0,lt[d]=j|0}let{Ah:r,Al:i,Bh:o,Bl:c,Ch:a,Cl:s,Dh:u,Dl:f,Eh:h,El:b,Fh:B,Fl:I,Gh:L,Gl:S,Hh:z,Hl:F}=this;for(let d=0;d<80;d++){let A=g.rotrSH(h,b,14)^g.rotrSH(h,b,18)^g.rotrBH(h,b,41),x=g.rotrSL(h,b,14)^g.rotrSL(h,b,18)^g.rotrBL(h,b,41),R=h&B^~h&L,X=b&I^~b&S,K=g.add5L(F,x,X,or[d],lt[d]),T=g.add5H(K,z,A,R,ir[d],ut[d]),q=K|0,N=g.rotrSH(r,i,28)^g.rotrBH(r,i,34)^g.rotrBH(r,i,39),j=g.rotrSL(r,i,28)^g.rotrBL(r,i,34)^g.rotrBL(r,i,39),O=r&o^r&a^o&a,At=i&c^i&s^c&s;z=L|0,F=S|0,L=B|0,S=I|0,B=h|0,I=b|0,{h,l:b}=g.add(u|0,f|0,T|0,q|0),u=a|0,f=s|0,a=o|0,s=c|0,o=r|0,c=i|0;let st=g.add3L(q,j,At);r=g.add3H(st,T,N,O),i=st|0}({h:r,l:i}=g.add(this.Ah|0,this.Al|0,r|0,i|0)),{h:o,l:c}=g.add(this.Bh|0,this.Bl|0,o|0,c|0),{h:a,l:s}=g.add(this.Ch|0,this.Cl|0,a|0,s|0),{h:u,l:f}=g.add(this.Dh|0,this.Dl|0,u|0,f|0),{h,l:b}=g.add(this.Eh|0,this.El|0,h|0,b|0),{h:B,l:I}=g.add(this.Fh|0,this.Fl|0,B|0,I|0),{h:L,l:S}=g.add(this.Gh|0,this.Gl|0,L|0,S|0),{h:z,l:F}=g.add(this.Hh|0,this.Hl|0,z|0,F|0),this.set(r,i,o,c,a,s,u,f,h,b,B,I,L,S,z,F)}roundClean(){ut.fill(0),lt.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var ue=Rt(()=>new fe);var yi=BigInt(0),sr=BigInt(1),cr=BigInt(2);function It(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}var ar=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Zt(e){if(!It(e))throw new Error("Uint8Array expected");let t="";for(let n=0;n=nt._0&&e<=nt._9)return e-nt._0;if(e>=nt._A&&e<=nt._F)return e-(nt._A-10);if(e>=nt._a&&e<=nt._f)return e-(nt._a-10)}function Ge(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);let t=e.length,n=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let r=new Uint8Array(n);for(let i=0,o=0;i(cr<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",stringOrUint8Array:e=>typeof e=="string"||It(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function ht(e,t,n={}){let r=(i,o,c)=>{let a=fr[o];if(typeof a!="function")throw new Error(`Invalid validator "${o}", expected function`);let s=e[i];if(!(c&&s===void 0)&&!a(s,e))throw new Error(`Invalid param ${String(i)}=${s} (${typeof s}), expected ${o}`)};for(let[i,o]of Object.entries(t))r(i,o,!1);for(let[i,o]of Object.entries(n))r(i,o,!0);return e}var C=BigInt(0),k=BigInt(1),bt=BigInt(2),lr=BigInt(3),de=BigInt(4),$e=BigInt(5),Ze=BigInt(8),hr=BigInt(9),dr=BigInt(16);function U(e,t){let n=e%t;return n>=C?n:t+n}function pe(e,t,n){if(n<=C||t 0");if(n===k)return C;let r=k;for(;t>C;)t&k&&(r=r*e%n),e=e*e%n,t>>=k;return r}function V(e,t,n){let r=e;for(;t-- >C;)r*=r,r%=n;return r}function Ve(e,t){if(e===C||t<=C)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let n=U(e,t),r=t,i=C,o=k,c=k,a=C;for(;n!==C;){let u=r/n,f=r%n,h=i-c*u,b=o-a*u;r=n,n=f,i=c,o=a,c=h,a=b}if(r!==k)throw new Error("invert: does not exist");return U(i,t)}function pr(e){let t=(e-k)/bt,n,r,i;for(n=e-k,r=0;n%bt===C;n/=bt,r++);for(i=bt;i(U(e,t)&k)===k,yr=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Ye(e){let t={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},n=yr.reduce((r,i)=>(r[i]="function",r),t);return ht(e,n)}function xr(e,t,n){if(n 0");if(n===C)return e.ONE;if(n===k)return t;let r=e.ONE,i=t;for(;n>C;)n&k&&(r=e.mul(r,i)),i=e.sqr(i),n>>=k;return r}function wr(e,t){let n=new Array(t.length),r=t.reduce((o,c,a)=>e.is0(c)?o:(n[a]=o,e.mul(o,c)),e.ONE),i=e.inv(r);return t.reduceRight((o,c,a)=>e.is0(c)?o:(n[a]=e.mul(o,n[a]),e.mul(o,c)),i),n}function be(e,t){let n=t!==void 0?t:e.toString(2).length,r=Math.ceil(n/8);return{nBitLength:n,nByteLength:r}}function We(e,t,n=!1,r={}){if(e<=C)throw new Error(`Expected Field ORDER > 0, got ${e}`);let{nBitLength:i,nByteLength:o}=be(e,t);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let c=br(e),a=Object.freeze({ORDER:e,BITS:i,BYTES:o,MASK:je(i),ZERO:C,ONE:k,create:s=>U(s,e),isValid:s=>{if(typeof s!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof s}`);return C<=s&&ss===C,isOdd:s=>(s&k)===k,neg:s=>U(-s,e),eql:(s,u)=>s===u,sqr:s=>U(s*s,e),add:(s,u)=>U(s+u,e),sub:(s,u)=>U(s-u,e),mul:(s,u)=>U(s*u,e),pow:(s,u)=>xr(a,s,u),div:(s,u)=>U(s*Ve(u,e),e),sqrN:s=>s*s,addN:(s,u)=>s+u,subN:(s,u)=>s-u,mulN:(s,u)=>s*u,inv:s=>Ve(s,e),sqrt:r.sqrt||(s=>c(a,s)),invertBatch:s=>wr(a,s),cmov:(s,u,f)=>f?u:s,toBytes:s=>n?pt(s,o):le(s,o),fromBytes:s=>{if(s.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${s.length}`);return n?rt(s):Fe(s)}});return Object.freeze(a)}function Qe(e,t){if(!e.isOdd)throw new Error("Field doesn't have isOdd");let n=e.sqrt(t);return e.isOdd(n)?e.neg(n):n}var gr=BigInt(0),ye=BigInt(1);function Je(e,t){let n=(i,o)=>{let c=o.negate();return i?c:o},r=i=>{let o=Math.ceil(t/i)+1,c=2**(i-1);return{windows:o,windowSize:c}};return{constTimeNegate:n,unsafeLadder(i,o){let c=e.ZERO,a=i;for(;o>gr;)o&ye&&(c=c.add(a)),a=a.double(),o>>=ye;return c},precomputeWindow(i,o){let{windows:c,windowSize:a}=r(o),s=[],u=i,f=u;for(let h=0;h>=B,S>s&&(S-=b,c+=ye);let z=L,F=L+Math.abs(S)-1,d=I%2!==0,A=S<0;S===0?f=f.add(n(d,o[z])):u=u.add(n(A,o[F]))}return{p:u,f}},wNAFCached(i,o,c,a){let s=i._WINDOW_SIZE||1,u=o.get(i);return u||(u=this.precomputeWindow(i,s),s!==1&&o.set(i,a(u))),this.wNAF(s,u,c)}}}function tn(e){return Ye(e.Fp),ht(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...be(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var W=BigInt(0),Z=BigInt(1),Vt=BigInt(2),mr=BigInt(8),Er={zip215:!0};function _r(e){let t=tn(e);return ht(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function xe(e){let t=_r(e),{Fp:n,n:r,prehash:i,hash:o,randomBytes:c,nByteLength:a,h:s}=t,u=Vt<{try{return{isValid:!0,value:n.sqrt(p*n.inv(l))}}catch{return{isValid:!1,value:W}}}),b=t.adjustScalarBytes||(p=>p),B=t.domain||((p,l,y)=>{if(l.length||y)throw new Error("Contexts/pre-hash are not supported");return p}),I=p=>typeof p=="bigint"&&WI(p)&&I(l)&&pp===W||L(p,u);function z(p,l){if(L(p,l))return p;throw new Error(`Expected valid scalar < ${l}, got ${typeof p} ${p}`)}function F(p){return p===W?p:z(p,r)}let d=new Map;function A(p){if(!(p instanceof x))throw new Error("ExtendedPoint expected")}class x{constructor(l,y,w,m){if(this.ex=l,this.ey=y,this.ez=w,this.et=m,!S(l))throw new Error("x required");if(!S(y))throw new Error("y required");if(!S(w))throw new Error("z required");if(!S(m))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof x)throw new Error("extended point not allowed");let{x:y,y:w}=l||{};if(!S(y)||!S(w))throw new Error("invalid affine point");return new x(y,w,Z,f(y*w))}static normalizeZ(l){let y=n.invertBatch(l.map(w=>w.ez));return l.map((w,m)=>w.toAffine(y[m])).map(x.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,d.delete(this)}assertValidity(){let{a:l,d:y}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:w,ey:m,ez:E,et:v}=this,P=f(w*w),_=f(m*m),H=f(E*E),D=f(H*H),M=f(P*l),Q=f(H*f(M+_)),G=f(D+f(y*f(P*_)));if(Q!==G)throw new Error("bad point: equation left != right (1)");let ct=f(w*m),J=f(E*v);if(ct!==J)throw new Error("bad point: equation left != right (2)")}equals(l){A(l);let{ex:y,ey:w,ez:m}=this,{ex:E,ey:v,ez:P}=l,_=f(y*P),H=f(E*m),D=f(w*P),M=f(v*m);return _===H&&D===M}is0(){return this.equals(x.ZERO)}negate(){return new x(f(-this.ex),this.ey,this.ez,f(-this.et))}double(){let{a:l}=t,{ex:y,ey:w,ez:m}=this,E=f(y*y),v=f(w*w),P=f(Vt*f(m*m)),_=f(l*E),H=y+w,D=f(f(H*H)-E-v),M=_+v,Q=M-P,G=_-v,ct=f(D*Q),J=f(M*G),kt=f(D*G),Tt=f(Q*M);return new x(ct,J,Tt,kt)}add(l){A(l);let{a:y,d:w}=t,{ex:m,ey:E,ez:v,et:P}=this,{ex:_,ey:H,ez:D,et:M}=l;if(y===BigInt(-1)){let Be=f((E-m)*(H+_)),Ae=f((E+m)*(H-_)),Wt=f(Ae-Be);if(Wt===W)return this.double();let ve=f(v*Vt*M),Se=f(P*Vt*D),Ie=Se+ve,Le=Ae+Be,He=Se-ve,yn=f(Ie*Wt),xn=f(Le*He),wn=f(Ie*He),gn=f(Wt*Le);return new x(yn,xn,gn,wn)}let Q=f(m*_),G=f(E*H),ct=f(P*w*M),J=f(v*D),kt=f((m+E)*(_+H)-Q-G),Tt=J-ct,Ee=J+ct,_e=f(G-y*Q),hn=f(kt*Tt),dn=f(Ee*_e),pn=f(kt*_e),bn=f(Tt*Ee);return new x(hn,dn,bn,pn)}subtract(l){return this.add(l.negate())}wNAF(l){return K.wNAFCached(this,d,l,x.normalizeZ)}multiply(l){let{p:y,f:w}=this.wNAF(z(l,r));return x.normalizeZ([y,w])[0]}multiplyUnsafe(l){let y=F(l);return y===W?X:this.equals(X)||y===Z?this:this.equals(R)?this.wNAF(y).p:K.unsafeLadder(this,y)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}isTorsionFree(){return K.unsafeLadder(this,r).is0()}toAffine(l){let{ex:y,ey:w,ez:m}=this,E=this.is0();l==null&&(l=E?mr:n.inv(m));let v=f(y*l),P=f(w*l),_=f(m*l);if(E)return{x:W,y:Z};if(_!==Z)throw new Error("invZ was invalid");return{x:v,y:P}}clearCofactor(){let{h:l}=t;return l===Z?this:this.multiplyUnsafe(l)}static fromHex(l,y=!1){let{d:w,a:m}=t,E=n.BYTES;l=$("pointHex",l,E);let v=l.slice(),P=l[E-1];v[E-1]=P&-129;let _=rt(v);_===W||(y?z(_,u):z(_,n.ORDER));let H=f(_*_),D=f(H-Z),M=f(w*H-m),{isValid:Q,value:G}=h(D,M);if(!Q)throw new Error("Point.fromHex: invalid y coordinate");let ct=(G&Z)===Z,J=(P&128)!==0;if(!y&&G===W&&J)throw new Error("Point.fromHex: x=0 and x_0=1");return J!==ct&&(G=f(-G)),x.fromAffine({x:G,y:_})}static fromPrivateKey(l){return N(l).point}toRawBytes(){let{x:l,y}=this.toAffine(),w=pt(y,n.BYTES);return w[w.length-1]|=l&Z?128:0,w}toHex(){return Zt(this.toRawBytes())}}x.BASE=new x(t.Gx,t.Gy,Z,f(t.Gx*t.Gy)),x.ZERO=new x(W,Z,Z,W);let{BASE:R,ZERO:X}=x,K=Je(x,a*8);function T(p){return U(p,r)}function q(p){return T(rt(p))}function N(p){let l=a;p=$("private key",p,l);let y=$("hashed private key",o(p),2*l),w=b(y.slice(0,l)),m=y.slice(l,2*l),E=q(w),v=R.multiply(E),P=v.toRawBytes();return{head:w,prefix:m,scalar:E,point:v,pointBytes:P}}function j(p){return N(p).pointBytes}function O(p=new Uint8Array,...l){let y=he(...l);return q(o(B(y,$("context",p),!!i)))}function At(p,l,y={}){p=$("message",p),i&&(p=i(p));let{prefix:w,scalar:m,pointBytes:E}=N(l),v=O(y.context,w,p),P=R.multiply(v).toRawBytes(),_=O(y.context,P,E,p),H=T(v+_*m);F(H);let D=he(P,pt(H,n.BYTES));return $("result",D,a*2)}let st=Er;function Ut(p,l,y,w=st){let{context:m,zip215:E}=w,v=n.BYTES;p=$("signature",p,2*v),l=$("message",l),i&&(l=i(l));let P=rt(p.slice(v,2*v)),_,H,D;try{_=x.fromHex(y,E),H=x.fromHex(p.slice(0,v),E),D=R.multiplyUnsafe(P)}catch{return!1}if(!E&&_.isSmallOrder())return!1;let M=O(m,H.toRawBytes(),_.toRawBytes(),l);return H.add(_.multiplyUnsafe(M)).subtract(D).clearCofactor().equals(x.ZERO)}return R._setWindowSize(8),{CURVE:t,getPublicKey:j,sign:At,verify:Ut,ExtendedPoint:x,utils:{getExtendedPublicKey:N,randomPrivateKey:()=>c(n.BYTES),precompute(p=8,l=x.BASE){return l._setWindowSize(p),l.multiply(BigInt(3)),l}}}}var Lt=BigInt(0),we=BigInt(1);function Br(e){return ht(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function en(e){let t=Br(e),{P:n}=t,r=d=>U(d,n),i=t.montgomeryBits,o=Math.ceil(i/8),c=t.nByteLength,a=t.adjustScalarBytes||(d=>d),s=t.powPminus2||(d=>pe(d,n-BigInt(2),n));function u(d,A,x){let R=r(d*(A-x));return A=r(A-R),x=r(x+R),[A,x]}function f(d){if(typeof d=="bigint"&&Lt<=d&&d=Lt;st--){let Ut=R>>st&we;j^=Ut,O=u(j,K,q),K=O[0],q=O[1],O=u(j,T,N),T=O[0],N=O[1],j=Ut;let Kt=K+T,p=r(Kt*Kt),l=K-T,y=r(l*l),w=p-y,m=q+N,E=q-N,v=r(E*Kt),P=r(m*l),_=v+P,H=v-P;q=r(_*_),N=r(X*r(H*H)),K=r(p*y),T=r(w*(p+r(h*w)))}O=u(j,K,q),K=O[0],q=O[1],O=u(j,T,N),T=O[0],N=O[1];let At=s(T);return r(K*At)}function B(d){return pt(r(d),o)}function I(d){let A=$("u coordinate",d,o);return c===32&&(A[31]&=127),rt(A)}function L(d){let A=$("scalar",d),x=A.length;if(x!==o&&x!==c)throw new Error(`Expected ${o} or ${c} bytes, got ${x}`);return rt(a(A))}function S(d,A){let x=I(A),R=L(d),X=b(x,R);if(X===Lt)throw new Error("Invalid private or public key received");return B(X)}let z=B(t.Gu);function F(d){return S(d,z)}return{scalarMult:S,scalarMultBase:F,getSharedSecret:(d,A)=>S(d,A),getPublicKey:d=>F(d),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:z}}var Ht=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),nn=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),Ti=BigInt(0),Ar=BigInt(1),ge=BigInt(2),vr=BigInt(5),rn=BigInt(10),Sr=BigInt(20),Ir=BigInt(40),on=BigInt(80);function sn(e){let t=Ht,r=e*e%t*e%t,i=V(r,ge,t)*r%t,o=V(i,Ar,t)*e%t,c=V(o,vr,t)*o%t,a=V(c,rn,t)*c%t,s=V(a,Sr,t)*a%t,u=V(s,Ir,t)*s%t,f=V(u,on,t)*u%t,h=V(f,on,t)*u%t,b=V(h,rn,t)*c%t;return{pow_p_5_8:V(b,ge,t)*e%t,b2:r}}function cn(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}function Lr(e,t){let n=Ht,r=U(t*t*t,n),i=U(r*r*t,n),o=sn(e*i).pow_p_5_8,c=U(e*r*o,n),a=U(t*c*c,n),s=c,u=U(c*nn,n),f=a===e,h=a===U(-e,n),b=a===U(-e*nn,n);return f&&(c=s),(h||b)&&(c=u),Xe(c,n)&&(c=U(-c,n)),{isValid:f||h,value:c}}var it=We(Ht,void 0,!0),an={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:it,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:ue,randomBytes:ne,adjustScalarBytes:cn,uvRatio:Lr};function fn(e,t,n){if(t.length>255)throw new Error("Context is too big");return Te(ee("SigEd25519 no Ed25519 collisions"),new Uint8Array([n?1:0,t.length]),t,e)}var Oi=xe({...an,domain:fn}),Ci=xe({...an,domain:fn,prehash:ue}),Xt=en({P:Ht,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:e=>{let t=Ht,{pow_p_5_8:n,b2:r}=sn(e);return U(V(n,BigInt(3),t)*r,t)},adjustScalarBytes:cn,randomBytes:ne});var Hr=(it.ORDER+BigInt(3))/BigInt(8),Ri=it.pow(ge,Hr),Ni=it.sqrt(it.neg(it.ONE)),Di=(it.ORDER-BigInt(5))/BigInt(8),zi=BigInt(486662);var qi=Qe(it,it.neg(BigInt(486664)));var Mi=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Gi=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),Fi=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),ji=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");var $i=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var Pt=["deriveBits"],un=new Uint8Array([100,107,112,95,112,114,107]),ln=new Uint8Array([115,107]);var ot=class{constructor(t,n,r,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=n,this.type=r,this.algorithm={name:t},this.usages=i,r==="public"&&(this.usages=[])}};var Bt="X25519",Yt=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=32,this._nSk=32}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(n){throw new mt(n)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(n){throw new dt(n)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(n){throw new mt(n)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(n){throw new dt(n)}}async importKey(t,n,r){try{if(t==="raw")return await this._importRawKey(n,r);if(n instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(n,r)}catch(i){throw new dt(i)}}async generateKeyPair(){try{let t=Xt.utils.randomPrivateKey(),n=new ot(Bt,t,"private",Pt);return{publicKey:await this.derivePublicKey(n),privateKey:n}}catch(t){throw new Et(t)}}async deriveKeyPair(t){try{let n=await this._hkdf.labeledExtract(et,un,new Uint8Array(t)),r=await this._hkdf.labeledExpand(n,ln,et,this._nSk),i=new ot(Bt,new Uint8Array(r),"private",Pt);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(n){throw new qt(n)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(n){throw new dt(n)}}async dh(t,n){try{return await this._dh(t,n)}catch(r){throw new mt(r)}}_serializePublicKey(t){return new Promise(n=>{n(t.key.buffer)})}_serializePrivateKey(t){return new Promise(n=>{n(t.key.buffer)})}_importRawKey(t,n){return new Promise((r,i)=>{n&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!n&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),r(new ot(Bt,new Uint8Array(t),n?"public":"private",n?[]:Pt))})}_importJWK(t,n){return new Promise((r,i)=>{(typeof t.kty>"u"||t.kty!=="OKP")&&i(new Error(`Invalid kty: ${t.kty}`)),(typeof t.crv>"u"||t.crv!=="X25519")&&i(new Error(`Invalid crv: ${t.crv}`)),n?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x>"u"&&i(new Error("Invalid key: `x` not found")),r(new ot(Bt,ce(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),r(new ot(Bt,ce(t.d),"private",Pt)))})}_derivePublicKey(t){return new Promise((n,r)=>{try{let i=Xt.getPublicKey(t.key);n(new ot(Bt,i,"public"))}catch(i){r(i)}})}_dh(t,n){return new Promise((r,i)=>{try{r(Xt.getSharedSecret(t.key,n.key).buffer)}catch(o){i(o)}})}};var me=class extends jt{constructor(){let t=new Ft;super(Qt.DhkemX25519HkdfSha256,new Yt(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Qt.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{me as DhkemX25519HkdfSha256}; +var ue={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},gt=ue,fe={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},bt=fe;function Nt(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`positive integer expected, not ${e}`)}function le(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function $(e,...t){if(!le(e))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw new Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function Mt(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");Nt(e.outputLen),Nt(e.blockLen)}function O(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function qt(e,t){$(e);let n=t.outputLen;if(e.lengthnew DataView(e.buffer,e.byteOffset,e.byteLength),x=(e,t)=>e<<32-t|e>>>t;var Me=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;function Dt(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function V(e){return typeof e=="string"&&(e=Dt(e)),$(e),e}var C=class{clone(){return this._cloneInto()}},qe={}.toString;function Rt(e){let t=r=>e().update(V(r)).digest(),n=e();return t.outputLen=n.outputLen,t.blockLen=n.blockLen,t.create=()=>e(),t}function zt(e=32){if(Z&&typeof Z.getRandomValues=="function")return Z.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Y=class extends C{constructor(t,n){super(),this.finished=!1,this.destroyed=!1,Mt(t);let r=V(n);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(r.length>i?t.create().update(r).digest():r);for(let s=0;snew Y(e,t).update(n).digest();wt.create=(e,t)=>new Y(e,t);function he(e,t,n,r){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,n,r);let i=BigInt(32),o=BigInt(4294967295),s=Number(n>>i&o),c=Number(n&o),a=r?4:0,f=r?0:4;e.setUint32(t+a,s,r),e.setUint32(t+f,c,r)}var jt=(e,t,n)=>e&t^~e&n,$t=(e,t,n)=>e&t^e&n^t&n,J=class extends C{constructor(t,n,r,i){super(),this.blockLen=t,this.outputLen=n,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Q(this.buffer)}update(t){O(this);let{view:n,buffer:r,blockLen:i}=this;t=V(t);let o=t.length;for(let s=0;si-s&&(this.process(r,0),s=0);for(let u=s;uh.length)throw new Error("_sha2: outputLen bigger than state");for(let u=0;u>>3,I=x(y,17)^x(y,19)^y>>>10;P[u]=I+P[u-7]+k+P[u-16]|0}let{A:r,B:i,C:o,D:s,E:c,F:a,G:f,H:h}=this;for(let u=0;u<64;u++){let d=x(c,6)^x(c,11)^x(c,25),y=h+d+jt(c,a,f)+de[u]+P[u]|0,I=(x(r,2)^x(r,13)^x(r,22))+$t(r,i,o)|0;h=f,f=a,a=c,c=s+y|0,s=o,o=i,i=r,r=y+I|0}r=r+this.A|0,i=i+this.B|0,o=o+this.C|0,s=s+this.D|0,c=c+this.E|0,a=a+this.F|0,f=f+this.G|0,h=h+this.H|0,this.set(r,i,o,s,c,a,f,h)}roundClean(){P.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var Vt=Rt(()=>new xt);var pe={},Gt=ye(globalThis,pe);function ye(e,t){return new Proxy(e,{get(n,r,i){return r in t?t[r]:e[r]},set(n,r,i){return r in t&&delete t[r],e[r]=i,!0},deleteProperty(n,r){let i=!1;return r in t&&(delete t[r],i=!0),r in e&&(delete e[r],i=!0),i},ownKeys(n){let r=Reflect.ownKeys(e),i=Reflect.ownKeys(t),o=new Set(i);return[...r.filter(s=>!o.has(s)),...i]},defineProperty(n,r,i){return r in t&&delete t[r],Reflect.defineProperty(e,r,i),!0},getOwnPropertyDescriptor(n,r){return r in t?Reflect.getOwnPropertyDescriptor(t,r):Reflect.getOwnPropertyDescriptor(e,r)},has(n,r){return r in t||r in e}})}var mt=class extends Error{constructor(t){let n;t instanceof Error?n=t.message:typeof t=="string"?n=t:n="",super(n),this.name=this.constructor.name}},m=class extends mt{},N=class extends m{};var M=class extends m{},U=class extends m{},tt=class extends m{},et=class extends m{};var nt=class extends m{},q=class extends m{};async function be(){if(Gt!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:e}=await import("crypto");return e.subtle}catch(e){throw new q(e)}}var rt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await be())}};var _=new Uint8Array(0);var Xt=new Uint8Array([72,80,75,69,45,118,49]),_t=class extends rt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:bt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:_}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,n){this._checkInit();let r=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+n.byteLength);return r.set(Xt,0),r.set(this._suiteId,7),r.set(t,7+this._suiteId.byteLength),r.set(n,7+this._suiteId.byteLength+t.byteLength),r}buildLabeledInfo(t,n,r){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+n.byteLength);return i.set(new Uint8Array([0,r]),0),i.set(Xt,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(n,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new N("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}async expand(t,n,r){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(r),s=new Uint8Array(o),c=_,a=new Uint8Array(n),f=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let h=new Uint8Array(this.hashSize+a.length+1);for(let u=1,d=0;d=c.length?(s.set(c,d),d+=c.length):(s.set(c.slice(0,s.length-d),d),d+=s.length-d);return o}async extractAndExpand(t,n,r,i){await this._setup();let o=await this._api.importKey("raw",n,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:r},o,i*8)}async labeledExtract(t,n,r){return await this.extract(t,this.buildLabeledIkm(n,r))}async labeledExpand(t,n,r,i){return await this.expand(t,this.buildLabeledInfo(n,r,i),i)}_checkInit(){if(this._suiteId===_)throw new Error("Not initialized. Call init()")}},it=class extends _t{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:bt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var ot=class extends it{async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return wt(Vt,new Uint8Array(t),new Uint8Array(n));let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}};var Ft=new Uint8Array([75,69,77,0,0]);var D=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function Wt(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let n=new Uint8Array(t);for(let r=0;r>8;return n}function G(e,t){let n=new Uint8Array(e.length+t.length);return n.set(e,0),n.set(t,e.length),n}function Et(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=atob(t),r=new Uint8Array(n.length);for(let i=0;i8192)throw new N("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let n;t.ekm===void 0?n=await this.generateKeyPair():D(t.ekm)?n=t.ekm:n=await this.deriveKeyPair(t.ekm);let r=await this._prim.serializePublicKey(n.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey));else{let a=D(t.senderKey)?t.senderKey.privateKey:t.senderKey,f=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey)),h=new Uint8Array(await this._prim.dh(a,t.recipientPublicKey));o=G(f,h)}let s;if(t.senderKey===void 0)s=G(new Uint8Array(r),new Uint8Array(i));else{let a=D(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),f=await this._prim.serializePublicKey(a);s=_e(new Uint8Array(r),new Uint8Array(i),new Uint8Array(f))}let c=await this._generateSharedSecret(o,s);return{enc:r,sharedSecret:c}}catch(o){throw new tt(o)}}async decap(t){let n=await this._prim.deserializePublicKey(t.enc),r=D(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=D(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let s;if(t.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(r,n));else{let a=new Uint8Array(await this._prim.dh(r,n)),f=new Uint8Array(await this._prim.dh(r,t.senderPublicKey));s=G(a,f)}let c;if(t.senderPublicKey===void 0)c=G(new Uint8Array(t.enc),new Uint8Array(o));else{let a=await this._prim.serializePublicKey(t.senderPublicKey);c=new Uint8Array(t.enc.byteLength+o.byteLength+a.byteLength),c.set(new Uint8Array(t.enc),0),c.set(new Uint8Array(o),t.enc.byteLength),c.set(new Uint8Array(a),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,c)}catch(s){throw new et(s)}}async _generateSharedSecret(t,n){let r=this._kdf.buildLabeledIkm(xe,t),i=this._kdf.buildLabeledInfo(me,n,this.secretSize);return await this._kdf.extractAndExpand(_,r,i,this.secretSize)}};function vt(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function Qt(e){if(!vt(e))throw new Error("Uint8Array expected")}var Ee=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function ve(e){Qt(e);let t="";for(let n=0;n=E._0&&e<=E._9)return e-E._0;if(e>=E._A&&e<=E._F)return e-(E._A-10);if(e>=E._a&&e<=E._f)return e-(E._a-10)}function Yt(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);let t=e.length,n=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let r=new Uint8Array(n);for(let i=0,o=0;itypeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",stringOrUint8Array:e=>typeof e=="string"||vt(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function te(e,t,n={}){let r=(i,o,s)=>{let c=Se[o];if(typeof c!="function")throw new Error(`Invalid validator "${o}", expected function`);let a=e[i];if(!(s&&a===void 0)&&!c(a,e))throw new Error(`Invalid param ${String(i)}=${a} (${typeof a}), expected ${o}`)};for(let[i,o]of Object.entries(t))r(i,o,!1);for(let[i,o]of Object.entries(n))r(i,o,!0);return e}var R=BigInt(0),ct=BigInt(1),wn=BigInt(2),xn=BigInt(3),mn=BigInt(4),_n=BigInt(5),En=BigInt(8),vn=BigInt(9),Bn=BigInt(16);function at(e,t){let n=e%t;return n>=R?n:t+n}function ee(e,t,n){if(n<=R||t 0");if(n===ct)return R;let r=ct;for(;t>R;)t&ct&&(r=r*e%n),e=e*e%n,t>>=ct;return r}function w(e,t,n){let r=e;for(;t-- >R;)r*=r,r%=n;return r}var X=BigInt(0),St=BigInt(1);function Pe(e){return te(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function ne(e){let t=Pe(e),{P:n}=t,r=l=>at(l,n),i=t.montgomeryBits,o=Math.ceil(i/8),s=t.nByteLength,c=t.adjustScalarBytes||(l=>l),a=t.powPminus2||(l=>ee(l,n-BigInt(2),n));function f(l,p,g){let H=r(l*(p-g));return p=r(p-H),g=r(g+H),[p,g]}function h(l){if(typeof l=="bigint"&&X<=l&&l=X;ht--){let Kt=H>>ht&St;T^=Kt,b=f(T,B,L),B=b[0],L=b[1],b=f(T,A,K),A=b[0],K=b[1],T=Kt;let dt=B+A,pt=r(dt*dt),yt=B-A,Ut=r(yt*yt),kt=pt-Ut,ce=L+K,ae=L-K,Ht=r(ae*dt),Tt=r(ce*yt),Ot=Ht+Tt,Ct=Ht-Tt;L=r(Ot*Ot),K=r(W*r(Ct*Ct)),B=r(pt*Ut),A=r(kt*(pt+r(u*kt)))}b=f(T,B,L),B=b[0],L=b[1],b=f(T,A,K),A=b[0],K=b[1];let se=a(A);return r(B*se)}function y(l){return Jt(r(l),o)}function k(l){let p=At("u coordinate",l,o);return s===32&&(p[31]&=127),Bt(p)}function I(l){let p=At("scalar",l),g=p.length;if(g!==o&&g!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${g}`);return Bt(c(p))}function j(l,p){let g=k(p),H=I(l),W=d(g,H);if(W===X)throw new Error("Invalid private or public key received");return y(W)}let lt=y(t.Gu);function Lt(l){return j(l,lt)}return{scalarMult:j,scalarMultBase:Lt,getSharedSecret:(l,p)=>j(l,p),getPublicKey:l=>Lt(l),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:lt}}var Pt=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949");var Cn=BigInt(0),Ie=BigInt(1),re=BigInt(2),Le=BigInt(3),Ke=BigInt(5),Nn=BigInt(8);function Ue(e){let t=BigInt(10),n=BigInt(20),r=BigInt(40),i=BigInt(80),o=Pt,c=e*e%o*e%o,a=w(c,re,o)*c%o,f=w(a,Ie,o)*e%o,h=w(f,Ke,o)*f%o,u=w(h,t,o)*h%o,d=w(u,n,o)*u%o,y=w(d,r,o)*d%o,k=w(y,i,o)*y%o,I=w(k,i,o)*y%o,j=w(I,t,o)*h%o;return{pow_p_5_8:w(j,re,o)*e%o,b2:c}}function ke(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var ut=ne({P:Pt,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:e=>{let t=Pt,{pow_p_5_8:n,b2:r}=Ue(e);return at(w(n,Le,t)*r,t)},adjustScalarBytes:ke,randomBytes:zt});var F=["deriveBits"],ie=new Uint8Array([100,107,112,95,112,114,107]),oe=new Uint8Array([115,107]);var v=class{constructor(t,n,r,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=n,this.type=r,this.algorithm={name:t},this.usages=i,r==="public"&&(this.usages=[])}};var z="X25519",ft=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=32,this._nSk=32}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(n){throw new M(n)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(n){throw new U(n)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(n){throw new M(n)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(n){throw new U(n)}}async importKey(t,n,r){try{if(t==="raw")return await this._importRawKey(n,r);if(n instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(n,r)}catch(i){throw new U(i)}}async generateKeyPair(){try{let t=ut.utils.randomPrivateKey(),n=new v(z,t,"private",F);return{publicKey:await this.derivePublicKey(n),privateKey:n}}catch(t){throw new q(t)}}async deriveKeyPair(t){try{let n=await this._hkdf.labeledExtract(_,ie,new Uint8Array(t)),r=await this._hkdf.labeledExpand(n,oe,_,this._nSk),i=new v(z,new Uint8Array(r),"private",F);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(n){throw new nt(n)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(n){throw new U(n)}}async dh(t,n){try{return await this._dh(t,n)}catch(r){throw new M(r)}}_serializePublicKey(t){return new Promise(n=>{n(t.key.buffer)})}_serializePrivateKey(t){return new Promise(n=>{n(t.key.buffer)})}_importRawKey(t,n){return new Promise((r,i)=>{n&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!n&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),r(new v(z,new Uint8Array(t),n?"public":"private",n?[]:F))})}_importJWK(t,n){return new Promise((r,i)=>{(typeof t.kty>"u"||t.kty!=="OKP")&&i(new Error(`Invalid kty: ${t.kty}`)),(typeof t.crv>"u"||t.crv!=="X25519")&&i(new Error(`Invalid crv: ${t.crv}`)),n?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x>"u"&&i(new Error("Invalid key: `x` not found")),r(new v(z,Et(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),r(new v(z,Et(t.d),"private",F)))})}_derivePublicKey(t){return new Promise((n,r)=>{try{let i=ut.getPublicKey(t.key);n(new v(z,i,"public"))}catch(i){r(i)}})}_dh(t,n){return new Promise((r,i)=>{try{r(ut.getSharedSecret(t.key,n.key).buffer)}catch(o){i(o)}})}};var It=class extends st{constructor(){let t=new ot;super(gt.DhkemX25519HkdfSha256,new ft(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:gt.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{It as DhkemX25519HkdfSha256}; /*! Bundled license information: @noble/hashes/esm/utils.js: @@ -10,12 +10,6 @@ var mn={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521Hkd @noble/curves/esm/abstract/modular.js: (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) -@noble/curves/esm/abstract/curve.js: - (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) - -@noble/curves/esm/abstract/edwards.js: - (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) - @noble/curves/esm/abstract/montgomery.js: (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) diff --git a/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html b/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html index f0cf92b79..2925a6ae5 100644 --- a/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html +++ b/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html @@ -9,7 +9,7 @@

Example: Use with `@hpke/core` (`https://deno.land/x/hpke/core/mod.ts`).

import {
  Aes256Gcm,
  CipherSuite,
  HkdfSha512,
} from "https://deno.land/x/hpke/core/mod.ts";
import { DhkemX448HkdfSha512 } from "https://deno.land/x/hpke/x/dhkem-x448/mod.ts";

const suite = new CipherSuite({
  kem: new DhkemX448HkdfSha512(),
  kdf: new HkdfSha512(),
  aead: new Aes256Gcm(),
});
-

Hierarchy

  • Dhkem
    • DhkemX448HkdfSha512

Constructors

constructor +

Hierarchy

  • Dhkem
    • DhkemX448HkdfSha512

Constructors

constructor

Properties

_kdf _prim encSize @@ -26,43 +26,43 @@

importKey serializePrivateKey serializePublicKey -

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 56

56

-

Readonlyid

id: KemId = KemId.DhkemX448HkdfSha512

KemId.DhkemX448HkdfSha512 (0x0021)

-

ReadonlyprivateKeySize

privateKeySize: number = 56

56

-

ReadonlypublicKeySize

publicKeySize: number = 56

56

-

ReadonlysecretSize

secretSize: number = 64

64

-

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    +

Constructors

constructor

Properties

Protected_kdf

_kdf: KdfInterface

Protected_prim

_prim: DhkemPrimitives

ReadonlyencSize

encSize: number = 56

56

+

Readonlyid

id: KemId = KemId.DhkemX448HkdfSha512

KemId.DhkemX448HkdfSha512 (0x0021)

+

ReadonlyprivateKeySize

privateKeySize: number = 56

56

+

ReadonlypublicKeySize

publicKeySize: number = 56

56

+

ReadonlysecretSize

secretSize: number = 64

64

+

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    • params: RecipientContextParams

      A set of parameters for the recipient context.

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    +

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    If the error occurred, throws DeriveKeyPairError.

    Parameters

    • ikm: ArrayBuffer

      An input keying material.

    Returns Promise<CryptoKeyPair>

    A key pair derived.

    Throws

    DeriveKeyPairError

    -

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    +

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    +

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    • params: SenderContextParams

      A set of parameters for the sender context.

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    +

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    If the error occurred, throws NotSupportedError.

    Returns Promise<CryptoKeyPair>

    A key pair generated.

    Throws

    NotSupportedError

    -

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    +

importKey

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    +

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    +

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/dhkem-x448/src/hpke-dhkem-x448.js b/dhkem-x448/src/hpke-dhkem-x448.js index 333b6f71c..dc120bf2f 100644 --- a/dhkem-x448/src/hpke-dhkem-x448.js +++ b/dhkem-x448/src/hpke-dhkem-x448.js @@ -1,4 +1,4 @@ -var In={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},te=In,Ln={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},ee=Ln;function Bt(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`Wrong positive integer: ${e}`)}function kn(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function At(e,...t){if(!kn(e))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function Ke(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");Bt(e.outputLen),Bt(e.blockLen)}function Q(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Tt(e,t){At(e);let n=t.outputLen;if(e.lengthnew Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4));function Te(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}var Nt=e=>new DataView(e.buffer,e.byteOffset,e.byteLength);var Hn=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Hn)throw new Error("Non little-endian hardware is not supported");function ne(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function at(e){if(typeof e=="string"&&(e=ne(e)),!Te(e))throw new Error(`expected Uint8Array, got ${typeof e}`);return e}function Ce(...e){let t=0;for(let r=0;re().update(at(r)).digest(),n=e();return t.outputLen=n.outputLen,t.blockLen=n.blockLen,t.create=()=>e(),t}function Ne(e){let t=(r,i)=>e(i).update(at(r)).digest(),n=e({});return t.outputLen=n.outputLen,t.blockLen=n.blockLen,t.create=r=>e(r),t}function re(e=32){if(Ct&&typeof Ct.getRandomValues=="function")return Ct.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Rt=class extends ct{constructor(t,n){super(),this.finished=!1,this.destroyed=!1,Ke(t);let r=at(n);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(r.length>i?t.create().update(r).digest():r);for(let s=0;snew Rt(e,t).update(n).digest();ie.create=(e,t)=>new Rt(e,t);function Pn(e,t,n,r){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,n,r);let i=BigInt(32),o=BigInt(4294967295),s=Number(n>>i&o),c=Number(n&o),a=r?4:0,f=r?0:4;e.setUint32(t+a,s,r),e.setUint32(t+f,c,r)}var zt=class extends ct{constructor(t,n,r,i){super(),this.blockLen=t,this.outputLen=n,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Nt(this.buffer)}update(t){Q(this);let{view:n,buffer:r,blockLen:i}=this;t=at(t);let o=t.length;for(let s=0;si-s&&(this.process(r,0),s=0);for(let y=s;yu.length)throw new Error("_sha2: outputLen bigger than state");for(let y=0;y>oe&qt)}:{h:Number(e>>oe&qt)|0,l:Number(e&qt)|0}}function se(e,t=!1){let n=new Uint32Array(e.length),r=new Uint32Array(e.length);for(let i=0;iBigInt(e>>>0)<>>0),Kn=(e,t,n)=>e>>>n,On=(e,t,n)=>e<<32-n|t>>>n,Tn=(e,t,n)=>e>>>n|t<<32-n,Cn=(e,t,n)=>e<<32-n|t>>>n,Nn=(e,t,n)=>e<<64-n|t>>>n-32,Rn=(e,t,n)=>e>>>n-32|t<<64-n,zn=(e,t)=>t,qn=(e,t)=>e,ce=(e,t,n)=>e<>>32-n,ae=(e,t,n)=>t<>>32-n,ue=(e,t,n)=>t<>>64-n,fe=(e,t,n)=>e<>>64-n;function Dn(e,t,n,r){let i=(t>>>0)+(r>>>0);return{h:e+n+(i/2**32|0)|0,l:i|0}}var Mn=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),Fn=(e,t,n,r)=>t+n+r+(e/2**32|0)|0,Gn=(e,t,n,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0),jn=(e,t,n,r,i)=>t+n+r+i+(e/2**32|0)|0,Zn=(e,t,n,r,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0)+(i>>>0),$n=(e,t,n,r,i,o)=>t+n+r+i+o+(e/2**32|0)|0;var Vn={fromBig:Re,split:se,toBig:Un,shrSH:Kn,shrSL:On,rotrSH:Tn,rotrSL:Cn,rotrBH:Nn,rotrBL:Rn,rotr32H:zn,rotr32L:qn,rotlSH:ce,rotlSL:ae,rotlBH:ue,rotlBL:fe,add:Dn,add3L:Mn,add3H:Fn,add4L:Gn,add4H:jn,add5H:$n,add5L:Zn},g=Vn;var[Xn,Yn]=g.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),ut=new Uint32Array(80),ft=new Uint32Array(80),le=class extends zt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:n,Bh:r,Bl:i,Ch:o,Cl:s,Dh:c,Dl:a,Eh:f,El:u,Fh:y,Fl:b,Gh:A,Gl:k,Hh:H,Hl:S}=this;return[t,n,r,i,o,s,c,a,f,u,y,b,A,k,H,S]}set(t,n,r,i,o,s,c,a,f,u,y,b,A,k,H,S){this.Ah=t|0,this.Al=n|0,this.Bh=r|0,this.Bl=i|0,this.Ch=o|0,this.Cl=s|0,this.Dh=c|0,this.Dl=a|0,this.Eh=f|0,this.El=u|0,this.Fh=y|0,this.Fl=b|0,this.Gh=A|0,this.Gl=k|0,this.Hh=H|0,this.Hl=S|0}process(t,n){for(let h=0;h<16;h++,n+=4)ut[h]=t.getUint32(n),ft[h]=t.getUint32(n+=4);for(let h=16;h<80;h++){let B=ut[h-15]|0,w=ft[h-15]|0,N=g.rotrSH(B,w,1)^g.rotrSH(B,w,8)^g.shrSH(B,w,7),X=g.rotrSL(B,w,1)^g.rotrSL(B,w,8)^g.shrSL(B,w,7),P=ut[h-2]|0,U=ft[h-2]|0,D=g.rotrSH(P,U,19)^g.rotrBH(P,U,61)^g.shrSH(P,U,6),R=g.rotrSL(P,U,19)^g.rotrBL(P,U,61)^g.shrSL(P,U,6),j=g.add4L(X,R,ft[h-7],ft[h-16]),O=g.add4H(j,N,D,ut[h-7],ut[h-16]);ut[h]=O|0,ft[h]=j|0}let{Ah:r,Al:i,Bh:o,Bl:s,Ch:c,Cl:a,Dh:f,Dl:u,Eh:y,El:b,Fh:A,Fl:k,Gh:H,Gl:S,Hh:q,Hl:G}=this;for(let h=0;h<80;h++){let B=g.rotrSH(y,b,14)^g.rotrSH(y,b,18)^g.rotrBH(y,b,41),w=g.rotrSL(y,b,14)^g.rotrSL(y,b,18)^g.rotrBL(y,b,41),N=y&A^~y&H,X=b&k^~b&S,P=g.add5L(G,w,X,Yn[h],ft[h]),U=g.add5H(P,q,B,N,Xn[h],ut[h]),D=P|0,R=g.rotrSH(r,i,28)^g.rotrBH(r,i,34)^g.rotrBH(r,i,39),j=g.rotrSL(r,i,28)^g.rotrBL(r,i,34)^g.rotrBL(r,i,39),O=r&o^r&c^o&c,_t=i&s^i&a^s&a;q=H|0,G=S|0,H=A|0,S=k|0,A=y|0,k=b|0,{h:y,l:b}=g.add(f|0,u|0,U|0,D|0),f=c|0,u=a|0,c=o|0,a=s|0,o=r|0,s=i|0;let ot=g.add3L(D,j,_t);r=g.add3H(ot,U,R,O),i=ot|0}({h:r,l:i}=g.add(this.Ah|0,this.Al|0,r|0,i|0)),{h:o,l:s}=g.add(this.Bh|0,this.Bl|0,o|0,s|0),{h:c,l:a}=g.add(this.Ch|0,this.Cl|0,c|0,a|0),{h:f,l:u}=g.add(this.Dh|0,this.Dl|0,f|0,u|0),{h:y,l:b}=g.add(this.Eh|0,this.El|0,y|0,b|0),{h:A,l:k}=g.add(this.Fh|0,this.Fl|0,A|0,k|0),{h:H,l:S}=g.add(this.Gh|0,this.Gl|0,H|0,S|0),{h:q,l:G}=g.add(this.Hh|0,this.Hl|0,q|0,G|0),this.set(r,i,o,s,c,a,f,u,y,b,A,k,H,S,q,G)}roundClean(){ut.fill(0),ft.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var ze=dt(()=>new le);var Wn={},qe=Jn(globalThis,Wn);function Jn(e,t){return new Proxy(e,{get(n,r,i){return r in t?t[r]:e[r]},set(n,r,i){return r in t&&delete t[r],e[r]=i,!0},deleteProperty(n,r){let i=!1;return r in t&&(delete t[r],i=!0),r in e&&(delete e[r],i=!0),i},ownKeys(n){let r=Reflect.ownKeys(e),i=Reflect.ownKeys(t),o=new Set(i);return[...r.filter(s=>!o.has(s)),...i]},defineProperty(n,r,i){return r in t&&delete t[r],Reflect.defineProperty(e,r,i),!0},getOwnPropertyDescriptor(n,r){return r in t?Reflect.getOwnPropertyDescriptor(t,r):Reflect.getOwnPropertyDescriptor(e,r)},has(n,r){return r in t||r in e}})}var he=class extends Error{constructor(t){let n;t instanceof Error?n=t.message:typeof t=="string"?n=t:n="",super(n),this.name=this.constructor.name}},tt=class extends he{},wt=class extends tt{};var xt=class extends tt{},pt=class extends tt{},Dt=class extends tt{},Mt=class extends tt{};var Ft=class extends tt{},gt=class extends tt{};async function tr(){if(qe!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:e}=await import("crypto");return e.subtle}catch(e){throw new gt(e)}}var Gt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await tr())}};var et=new Uint8Array(0);var De=new Uint8Array([72,80,75,69,45,118,49]),de=class extends Gt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ee.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:et}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,n){this._checkInit();let r=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+n.byteLength);return r.set(De,0),r.set(this._suiteId,7),r.set(t,7+this._suiteId.byteLength),r.set(n,7+this._suiteId.byteLength+t.byteLength),r}buildLabeledInfo(t,n,r){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+n.byteLength);return i.set(new Uint8Array([0,r]),0),i.set(De,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(n,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new wt("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}async expand(t,n,r){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(r),s=new Uint8Array(o),c=et,a=new Uint8Array(n),f=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let u=new Uint8Array(this.hashSize+a.length+1);for(let y=1,b=0;b=c.length?(s.set(c,b),b+=c.length):(s.set(c.slice(0,s.length-b),b),b+=s.length-b);return o}async extractAndExpand(t,n,r,i){await this._setup();let o=await this._api.importKey("raw",n,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:r},o,i*8)}async labeledExtract(t,n,r){return await this.extract(t,this.buildLabeledIkm(n,r))}async labeledExpand(t,n,r,i){return await this.expand(t,this.buildLabeledInfo(n,r,i),i)}_checkInit(){if(this._suiteId===et)throw new Error("Not initialized. Call init()")}};var jt=class extends de{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ee.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Zt=class extends jt{async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return ie(ze,new Uint8Array(t),new Uint8Array(n));let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}};var Me=new Uint8Array([75,69,77,0,0]);var mt=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function Fe(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let n=new Uint8Array(t);for(let r=0;r>8;return n}function vt(e,t){let n=new Uint8Array(e.length+t.length);return n.set(e,0),n.set(t,e.length),n}function pe(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=atob(t),r=new Uint8Array(n.length);for(let i=0;i8192)throw new wt("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let n;t.ekm===void 0?n=await this.generateKeyPair():mt(t.ekm)?n=t.ekm:n=await this.deriveKeyPair(t.ekm);let r=await this._prim.serializePublicKey(n.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey));else{let a=mt(t.senderKey)?t.senderKey.privateKey:t.senderKey,f=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey)),u=new Uint8Array(await this._prim.dh(a,t.recipientPublicKey));o=vt(f,u)}let s;if(t.senderKey===void 0)s=vt(new Uint8Array(r),new Uint8Array(i));else{let a=mt(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),f=await this._prim.serializePublicKey(a);s=ir(new Uint8Array(r),new Uint8Array(i),new Uint8Array(f))}let c=await this._generateSharedSecret(o,s);return{enc:r,sharedSecret:c}}catch(o){throw new Dt(o)}}async decap(t){let n=await this._prim.deserializePublicKey(t.enc),r=mt(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=mt(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let s;if(t.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(r,n));else{let a=new Uint8Array(await this._prim.dh(r,n)),f=new Uint8Array(await this._prim.dh(r,t.senderPublicKey));s=vt(a,f)}let c;if(t.senderPublicKey===void 0)c=vt(new Uint8Array(t.enc),new Uint8Array(o));else{let a=await this._prim.serializePublicKey(t.senderPublicKey);c=new Uint8Array(t.enc.byteLength+o.byteLength+a.byteLength),c.set(new Uint8Array(t.enc),0),c.set(new Uint8Array(o),t.enc.byteLength),c.set(new Uint8Array(a),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,c)}catch(s){throw new Mt(s)}}async _generateSharedSecret(t,n){let r=this._kdf.buildLabeledIkm(nr,t),i=this._kdf.buildLabeledInfo(rr,n,this.secretSize);return await this._kdf.extractAndExpand(et,r,i,this.secretSize)}};var[Ze,$e,Ve]=[[],[],[]],or=BigInt(0),St=BigInt(1),sr=BigInt(2),cr=BigInt(7),ar=BigInt(256),ur=BigInt(113);for(let e=0,t=St,n=1,r=0;e<24;e++){[n,r]=[r,(2*n+3*r)%5],Ze.push(2*(5*r+n)),$e.push((e+1)*(e+2)/2%64);let i=or;for(let o=0;o<7;o++)t=(t<>cr)*ur)%ar,t&sr&&(i^=St<<(St<n>32?ue(e,t,n):ce(e,t,n),je=(e,t,n)=>n>32?fe(e,t,n):ae(e,t,n);function hr(e,t=24){let n=new Uint32Array(10);for(let r=24-t;r<24;r++){for(let s=0;s<10;s++)n[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let c=(s+8)%10,a=(s+2)%10,f=n[a],u=n[a+1],y=Ge(f,u,1)^n[c],b=je(f,u,1)^n[c+1];for(let A=0;A<50;A+=10)e[s+A]^=y,e[s+A+1]^=b}let i=e[2],o=e[3];for(let s=0;s<24;s++){let c=$e[s],a=Ge(i,o,c),f=je(i,o,c),u=Ze[s];i=e[u],o=e[u+1],e[u]=a,e[u+1]=f}for(let s=0;s<50;s+=10){for(let c=0;c<10;c++)n[c]=e[s+c];for(let c=0;c<10;c++)e[s+c]^=~n[(c+2)%10]&n[(c+4)%10]}e[0]^=fr[r],e[1]^=lr[r]}n.fill(0)}var Vt=class e extends ct{constructor(t,n,r,i=!1,o=24){if(super(),this.blockLen=t,this.suffix=n,this.outputLen=r,this.enableXOF=i,this.rounds=o,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,Bt(r),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=Oe(this.state)}keccak(){hr(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){Q(this);let{blockLen:n,state:r}=this;t=at(t);let i=t.length;for(let o=0;o=r&&this.keccak();let s=Math.min(r-this.posOut,o-i);t.set(n.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return Bt(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(Tt(t,this),this.finished)throw new Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){let{blockLen:n,suffix:r,outputLen:i,rounds:o,enableXOF:s}=this;return t||(t=new e(n,r,i,s,o)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=o,t.suffix=r,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}},lt=(e,t,n)=>dt(()=>new Vt(t,e,n)),Si=lt(6,144,224/8),Ii=lt(6,136,256/8),Li=lt(6,104,384/8),ki=lt(6,72,512/8),Hi=lt(1,144,224/8),Pi=lt(1,136,256/8),Ui=lt(1,104,384/8),Ki=lt(1,72,512/8),Xe=(e,t,n)=>Ne((r={})=>new Vt(t,e,r.dkLen===void 0?n:r.dkLen,!0)),Oi=Xe(31,168,128/8),ye=Xe(31,136,256/8);var Ci=BigInt(0),dr=BigInt(1),pr=BigInt(2);function It(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}var yr=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Xt(e){if(!It(e))throw new Error("Uint8Array expected");let t="";for(let n=0;n=nt._0&&e<=nt._9)return e-nt._0;if(e>=nt._A&&e<=nt._F)return e-(nt._A-10);if(e>=nt._a&&e<=nt._f)return e-(nt._a-10)}function Je(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);let t=e.length,n=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let r=new Uint8Array(n);for(let i=0,o=0;i(pr<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",stringOrUint8Array:e=>typeof e=="string"||It(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function ht(e,t,n={}){let r=(i,o,s)=>{let c=br[o];if(typeof c!="function")throw new Error(`Invalid validator "${o}", expected function`);let a=e[i];if(!(s&&a===void 0)&&!c(a,e))throw new Error(`Invalid param ${String(i)}=${a} (${typeof a}), expected ${o}`)};for(let[i,o]of Object.entries(t))r(i,o,!1);for(let[i,o]of Object.entries(n))r(i,o,!0);return e}var C=BigInt(0),T=BigInt(1),bt=BigInt(2),xr=BigInt(3),xe=BigInt(4),en=BigInt(5),nn=BigInt(8),gr=BigInt(9),mr=BigInt(16);function K(e,t){let n=e%t;return n>=C?n:t+n}function ge(e,t,n){if(n<=C||t 0");if(n===T)return C;let r=T;for(;t>C;)t&T&&(r=r*e%n),e=e*e%n,t>>=T;return r}function $(e,t,n){let r=e;for(;t-- >C;)r*=r,r%=n;return r}function rn(e,t){if(e===C||t<=C)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let n=K(e,t),r=t,i=C,o=T,s=T,c=C;for(;n!==C;){let f=r/n,u=r%n,y=i-s*f,b=o-c*f;r=n,n=u,i=s,o=c,s=y,c=b}if(r!==T)throw new Error("invert: does not exist");return K(i,t)}function Er(e){let t=(e-T)/bt,n,r,i;for(n=e-T,r=0;n%bt===C;n/=bt,r++);for(i=bt;i(r[i]="function",r),t);return ht(e,n)}function Ar(e,t,n){if(n 0");if(n===C)return e.ONE;if(n===T)return t;let r=e.ONE,i=t;for(;n>C;)n&T&&(r=e.mul(r,i)),i=e.sqr(i),n>>=T;return r}function vr(e,t){let n=new Array(t.length),r=t.reduce((o,s,c)=>e.is0(s)?o:(n[c]=o,e.mul(o,s)),e.ONE),i=e.inv(r);return t.reduceRight((o,s,c)=>e.is0(s)?o:(n[c]=e.mul(o,n[c]),e.mul(o,s)),i),n}function me(e,t){let n=t!==void 0?t:e.toString(2).length,r=Math.ceil(n/8);return{nBitLength:n,nByteLength:r}}function sn(e,t,n=!1,r={}){if(e<=C)throw new Error(`Expected Field ORDER > 0, got ${e}`);let{nBitLength:i,nByteLength:o}=me(e,t);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let s=_r(e),c=Object.freeze({ORDER:e,BITS:i,BYTES:o,MASK:tn(i),ZERO:C,ONE:T,create:a=>K(a,e),isValid:a=>{if(typeof a!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof a}`);return C<=a&&aa===C,isOdd:a=>(a&T)===T,neg:a=>K(-a,e),eql:(a,f)=>a===f,sqr:a=>K(a*a,e),add:(a,f)=>K(a+f,e),sub:(a,f)=>K(a-f,e),mul:(a,f)=>K(a*f,e),pow:(a,f)=>Ar(c,a,f),div:(a,f)=>K(a*rn(f,e),e),sqrN:a=>a*a,addN:(a,f)=>a+f,subN:(a,f)=>a-f,mulN:(a,f)=>a*f,inv:a=>rn(a,e),sqrt:r.sqrt||(a=>s(c,a)),invertBatch:a=>vr(c,a),cmov:(a,f,u)=>u?f:a,toBytes:a=>n?yt(a,o):be(a,o),fromBytes:a=>{if(a.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${a.length}`);return n?rt(a):Qe(a)}});return Object.freeze(c)}var Sr=BigInt(0),Ee=BigInt(1);function cn(e,t){let n=(i,o)=>{let s=o.negate();return i?s:o},r=i=>{let o=Math.ceil(t/i)+1,s=2**(i-1);return{windows:o,windowSize:s}};return{constTimeNegate:n,unsafeLadder(i,o){let s=e.ZERO,c=i;for(;o>Sr;)o&Ee&&(s=s.add(c)),c=c.double(),o>>=Ee;return s},precomputeWindow(i,o){let{windows:s,windowSize:c}=r(o),a=[],f=i,u=f;for(let y=0;y>=A,S>a&&(S-=b,s+=Ee);let q=H,G=H+Math.abs(S)-1,h=k%2!==0,B=S<0;S===0?u=u.add(n(h,o[q])):f=f.add(n(B,o[G]))}return{p:f,f:u}},wNAFCached(i,o,s,c){let a=i._WINDOW_SIZE||1,f=o.get(i);return f||(f=this.precomputeWindow(i,a),a!==1&&o.set(i,c(f))),this.wNAF(a,f,s)}}}function an(e){return on(e.Fp),ht(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...me(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var Y=BigInt(0),V=BigInt(1),Yt=BigInt(2),Ir=BigInt(8),Lr={zip215:!0};function kr(e){let t=an(e);return ht(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function un(e){let t=kr(e),{Fp:n,n:r,prehash:i,hash:o,randomBytes:s,nByteLength:c,h:a}=t,f=Yt<{try{return{isValid:!0,value:n.sqrt(d*n.inv(l))}}catch{return{isValid:!1,value:Y}}}),b=t.adjustScalarBytes||(d=>d),A=t.domain||((d,l,p)=>{if(l.length||p)throw new Error("Contexts/pre-hash are not supported");return d}),k=d=>typeof d=="bigint"&&Yk(d)&&k(l)&&dd===Y||H(d,f);function q(d,l){if(H(d,l))return d;throw new Error(`Expected valid scalar < ${l}, got ${typeof d} ${d}`)}function G(d){return d===Y?d:q(d,r)}let h=new Map;function B(d){if(!(d instanceof w))throw new Error("ExtendedPoint expected")}class w{constructor(l,p,x,m){if(this.ex=l,this.ey=p,this.ez=x,this.et=m,!S(l))throw new Error("x required");if(!S(p))throw new Error("y required");if(!S(x))throw new Error("z required");if(!S(m))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof w)throw new Error("extended point not allowed");let{x:p,y:x}=l||{};if(!S(p)||!S(x))throw new Error("invalid affine point");return new w(p,x,V,u(p*x))}static normalizeZ(l){let p=n.invertBatch(l.map(x=>x.ez));return l.map((x,m)=>x.toAffine(p[m])).map(w.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,h.delete(this)}assertValidity(){let{a:l,d:p}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:x,ey:m,ez:E,et:v}=this,L=u(x*x),_=u(m*m),I=u(E*E),z=u(I*I),M=u(L*l),W=u(I*u(M+_)),F=u(z+u(p*u(L*_)));if(W!==F)throw new Error("bad point: equation left != right (1)");let st=u(x*m),J=u(E*v);if(st!==J)throw new Error("bad point: equation left != right (2)")}equals(l){B(l);let{ex:p,ey:x,ez:m}=this,{ex:E,ey:v,ez:L}=l,_=u(p*L),I=u(E*m),z=u(x*L),M=u(v*m);return _===I&&z===M}is0(){return this.equals(w.ZERO)}negate(){return new w(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){let{a:l}=t,{ex:p,ey:x,ez:m}=this,E=u(p*p),v=u(x*x),L=u(Yt*u(m*m)),_=u(l*E),I=p+x,z=u(u(I*I)-E-v),M=_+v,W=M-L,F=_-v,st=u(z*W),J=u(M*F),Kt=u(z*F),Ot=u(W*M);return new w(st,J,Ot,Kt)}add(l){B(l);let{a:p,d:x}=t,{ex:m,ey:E,ez:v,et:L}=this,{ex:_,ey:I,ez:z,et:M}=l;if(p===BigInt(-1)){let Se=u((E-m)*(I+_)),Ie=u((E+m)*(I-_)),Qt=u(Ie-Se);if(Qt===Y)return this.double();let Le=u(v*Yt*M),ke=u(L*Yt*z),He=ke+Le,Pe=Ie+Se,Ue=ke-Le,Bn=u(He*Qt),An=u(Pe*Ue),vn=u(He*Ue),Sn=u(Qt*Pe);return new w(Bn,An,Sn,vn)}let W=u(m*_),F=u(E*I),st=u(L*x*M),J=u(v*z),Kt=u((m+E)*(_+I)-W-F),Ot=J-st,Ae=J+st,ve=u(F-p*W),gn=u(Kt*Ot),mn=u(Ae*ve),En=u(Kt*ve),_n=u(Ot*Ae);return new w(gn,mn,_n,En)}subtract(l){return this.add(l.negate())}wNAF(l){return P.wNAFCached(this,h,l,w.normalizeZ)}multiply(l){let{p,f:x}=this.wNAF(q(l,r));return w.normalizeZ([p,x])[0]}multiplyUnsafe(l){let p=G(l);return p===Y?X:this.equals(X)||p===V?this:this.equals(N)?this.wNAF(p).p:P.unsafeLadder(this,p)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return P.unsafeLadder(this,r).is0()}toAffine(l){let{ex:p,ey:x,ez:m}=this,E=this.is0();l==null&&(l=E?Ir:n.inv(m));let v=u(p*l),L=u(x*l),_=u(m*l);if(E)return{x:Y,y:V};if(_!==V)throw new Error("invZ was invalid");return{x:v,y:L}}clearCofactor(){let{h:l}=t;return l===V?this:this.multiplyUnsafe(l)}static fromHex(l,p=!1){let{d:x,a:m}=t,E=n.BYTES;l=Z("pointHex",l,E);let v=l.slice(),L=l[E-1];v[E-1]=L&-129;let _=rt(v);_===Y||(p?q(_,f):q(_,n.ORDER));let I=u(_*_),z=u(I-V),M=u(x*I-m),{isValid:W,value:F}=y(z,M);if(!W)throw new Error("Point.fromHex: invalid y coordinate");let st=(F&V)===V,J=(L&128)!==0;if(!p&&F===Y&&J)throw new Error("Point.fromHex: x=0 and x_0=1");return J!==st&&(F=u(-F)),w.fromAffine({x:F,y:_})}static fromPrivateKey(l){return R(l).point}toRawBytes(){let{x:l,y:p}=this.toAffine(),x=yt(p,n.BYTES);return x[x.length-1]|=l&V?128:0,x}toHex(){return Xt(this.toRawBytes())}}w.BASE=new w(t.Gx,t.Gy,V,u(t.Gx*t.Gy)),w.ZERO=new w(Y,V,V,Y);let{BASE:N,ZERO:X}=w,P=cn(w,c*8);function U(d){return K(d,r)}function D(d){return U(rt(d))}function R(d){let l=c;d=Z("private key",d,l);let p=Z("hashed private key",o(d),2*l),x=b(p.slice(0,l)),m=p.slice(l,2*l),E=D(x),v=N.multiply(E),L=v.toRawBytes();return{head:x,prefix:m,scalar:E,point:v,pointBytes:L}}function j(d){return R(d).pointBytes}function O(d=new Uint8Array,...l){let p=we(...l);return D(o(A(p,Z("context",d),!!i)))}function _t(d,l,p={}){d=Z("message",d),i&&(d=i(d));let{prefix:x,scalar:m,pointBytes:E}=R(l),v=O(p.context,x,d),L=N.multiply(v).toRawBytes(),_=O(p.context,L,E,d),I=U(v+_*m);G(I);let z=we(L,yt(I,n.BYTES));return Z("result",z,c*2)}let ot=Lr;function Pt(d,l,p,x=ot){let{context:m,zip215:E}=x,v=n.BYTES;d=Z("signature",d,2*v),l=Z("message",l),i&&(l=i(l));let L=rt(d.slice(v,2*v)),_,I,z;try{_=w.fromHex(p,E),I=w.fromHex(d.slice(0,v),E),z=N.multiplyUnsafe(L)}catch{return!1}if(!E&&_.isSmallOrder())return!1;let M=O(m,I.toRawBytes(),_.toRawBytes(),l);return I.add(_.multiplyUnsafe(M)).subtract(z).clearCofactor().equals(w.ZERO)}return N._setWindowSize(8),{CURVE:t,getPublicKey:j,sign:_t,verify:Pt,ExtendedPoint:w,utils:{getExtendedPublicKey:R,randomPrivateKey:()=>s(n.BYTES),precompute(d=8,l=w.BASE){return l._setWindowSize(d),l.multiply(BigInt(3)),l}}}}var Lt=BigInt(0),_e=BigInt(1);function Hr(e){return ht(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function fn(e){let t=Hr(e),{P:n}=t,r=h=>K(h,n),i=t.montgomeryBits,o=Math.ceil(i/8),s=t.nByteLength,c=t.adjustScalarBytes||(h=>h),a=t.powPminus2||(h=>ge(h,n-BigInt(2),n));function f(h,B,w){let N=r(h*(B-w));return B=r(B-N),w=r(w+N),[B,w]}function u(h){if(typeof h=="bigint"&&Lt<=h&&h=Lt;ot--){let Pt=N>>ot&_e;j^=Pt,O=f(j,P,D),P=O[0],D=O[1],O=f(j,U,R),U=O[0],R=O[1],j=Pt;let Ut=P+U,d=r(Ut*Ut),l=P-U,p=r(l*l),x=d-p,m=D+R,E=D-R,v=r(E*Ut),L=r(m*l),_=v+L,I=v-L;D=r(_*_),R=r(X*r(I*I)),P=r(d*p),U=r(x*(d+r(y*x)))}O=f(j,P,D),P=O[0],D=O[1],O=f(j,U,R),U=O[0],R=O[1];let _t=a(U);return r(P*_t)}function A(h){return yt(r(h),o)}function k(h){let B=Z("u coordinate",h,o);return s===32&&(B[31]&=127),rt(B)}function H(h){let B=Z("scalar",h),w=B.length;if(w!==o&&w!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${w}`);return rt(c(B))}function S(h,B){let w=k(B),N=H(h),X=b(w,N);if(X===Lt)throw new Error("Invalid private or public key received");return A(X)}let q=A(t.Gu);function G(h){return S(h,q)}return{scalarMult:S,scalarMultBase:G,getSharedSecret:(h,B)=>S(h,B),getPublicKey:h=>G(h),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:q}}var Pr=dt(()=>ye.create({dkLen:114})),Ur=dt(()=>ye.create({dkLen:64})),kt=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439"),Kr=BigInt(1),ln=BigInt(2),hn=BigInt(3),eo=BigInt(4),Or=BigInt(11),Tr=BigInt(22),dn=BigInt(44),Cr=BigInt(88),Nr=BigInt(223);function pn(e){let t=kt,n=e*e*e%t,r=n*n*e%t,i=$(r,hn,t)*r%t,o=$(i,hn,t)*r%t,s=$(o,ln,t)*n%t,c=$(s,Or,t)*s%t,a=$(c,Tr,t)*c%t,f=$(a,dn,t)*a%t,u=$(f,Cr,t)*f%t,y=$(u,dn,t)*a%t,b=$(y,ln,t)*n%t,A=$(b,Kr,t)*e%t;return $(A,Nr,t)*b%t}function yn(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function Rr(e,t){let n=kt,r=K(e*e*t,n),i=K(r*e,n),o=K(i*r*t,n),s=pn(o),c=K(i*s,n),a=K(c*c,n);return{isValid:K(a*t,n)===e,value:c}}var bn=sn(kt,456,!0),zr={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:bn,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Pr,randomBytes:re,adjustScalarBytes:yn,domain:(e,t,n)=>{if(t.length>255)throw new Error(`Context is too big: ${t.length}`);return Ce(ne("SigEd448"),new Uint8Array([n?1:0,t.length]),t,e)},uvRatio:Rr};var no=un({...zr,prehash:Ur}),Wt=fn({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:kt,Gu:BigInt(5),powPminus2:e=>{let t=kt,n=pn(e),r=$(n,BigInt(2),t);return K(r*e,t)},adjustScalarBytes:yn,randomBytes:re});var ro=(bn.ORDER-BigInt(3))/BigInt(4),io=BigInt(156326);var oo=BigInt("39082"),so=BigInt("78163"),co=BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),ao=BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716");var uo=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var Ht=["deriveBits"],wn=new Uint8Array([100,107,112,95,112,114,107]),xn=new Uint8Array([115,107]);var it=class{constructor(t,n,r,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=n,this.type=r,this.algorithm={name:t},this.usages=i,r==="public"&&(this.usages=[])}};var Et="X448",Jt=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=56,this._nSk=56}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(n){throw new xt(n)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(n){throw new pt(n)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(n){throw new xt(n)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(n){throw new pt(n)}}async importKey(t,n,r){try{if(t==="raw")return await this._importRawKey(n,r);if(n instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(n,r)}catch(i){throw new pt(i)}}async generateKeyPair(){try{let t=Wt.utils.randomPrivateKey(),n=new it(Et,t,"private",Ht);return{publicKey:await this.derivePublicKey(n),privateKey:n}}catch(t){throw new gt(t)}}async deriveKeyPair(t){try{let n=await this._hkdf.labeledExtract(et,wn,new Uint8Array(t)),r=await this._hkdf.labeledExpand(n,xn,et,this._nSk),i=new it(Et,new Uint8Array(r),"private",Ht);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(n){throw new Ft(n)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(n){throw new pt(n)}}async dh(t,n){try{return await this._dh(t,n)}catch(r){throw new xt(r)}}_serializePublicKey(t){return new Promise(n=>{n(t.key.buffer)})}_serializePrivateKey(t){return new Promise(n=>{n(t.key.buffer)})}_importRawKey(t,n){return new Promise((r,i)=>{n&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!n&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),r(new it(Et,new Uint8Array(t),n?"public":"private",n?[]:Ht))})}_importJWK(t,n){return new Promise((r,i)=>{t.kty!=="OKP"&&i(new Error(`Invalid kty: ${t.kty}`)),t.crv!=="X448"&&i(new Error(`Invalid crv: ${t.crv}`)),n?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x!="string"&&i(new Error("Invalid key: `x` not found")),r(new it(Et,pe(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),r(new it(Et,pe(t.d),"private",Ht)))})}_derivePublicKey(t){return new Promise((n,r)=>{try{let i=Wt.getPublicKey(t.key);n(new it(Et,i,"public"))}catch(i){r(i)}})}_dh(t,n){return new Promise((r,i)=>{try{r(Wt.getSharedSecret(t.key,n.key).buffer)}catch(o){i(o)}})}};var Be=class extends $t{constructor(){let t=new Zt;super(te.DhkemX448HkdfSha512,new Jt(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:te.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};export{Be as DhkemX448HkdfSha512}; +var kn={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},Qt=kn,Hn={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},te=Hn;function At(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`positive integer expected, not ${e}`)}function Pn(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function ct(e,...t){if(!Pn(e))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw new Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function Ce(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");At(e.outputLen),At(e.blockLen)}function Q(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Ot(e,t){ct(e);let n=t.outputLen;if(e.lengthnew Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Ct=e=>new DataView(e.buffer,e.byteOffset,e.byteLength);var ee=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68,Kn=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function ne(e){for(let t=0;te().update(ut(r)).digest(),n=e();return t.outputLen=n.outputLen,t.blockLen=n.blockLen,t.create=()=>e(),t}function ze(e){let t=(r,i)=>e(i).update(ut(r)).digest(),n=e({});return t.outputLen=n.outputLen,t.blockLen=n.blockLen,t.create=r=>e(r),t}function ie(e=32){if(Tt&&typeof Tt.getRandomValues=="function")return Tt.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Nt=class extends at{constructor(t,n){super(),this.finished=!1,this.destroyed=!1,Ce(t);let r=ut(n);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(r.length>i?t.create().update(r).digest():r);for(let s=0;snew Nt(e,t).update(n).digest();oe.create=(e,t)=>new Nt(e,t);function Un(e,t,n,r){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,n,r);let i=BigInt(32),o=BigInt(4294967295),s=Number(n>>i&o),c=Number(n&o),a=r?4:0,f=r?0:4;e.setUint32(t+a,s,r),e.setUint32(t+f,c,r)}var Rt=class extends at{constructor(t,n,r,i){super(),this.blockLen=t,this.outputLen=n,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Ct(this.buffer)}update(t){Q(this);let{view:n,buffer:r,blockLen:i}=this;t=ut(t);let o=t.length;for(let s=0;si-s&&(this.process(r,0),s=0);for(let y=s;yu.length)throw new Error("_sha2: outputLen bigger than state");for(let y=0;y>se&zt)}:{h:Number(e>>se&zt)|0,l:Number(e&zt)|0}}function ce(e,t=!1){let n=new Uint32Array(e.length),r=new Uint32Array(e.length);for(let i=0;iBigInt(e>>>0)<>>0),Tn=(e,t,n)=>e>>>n,Cn=(e,t,n)=>e<<32-n|t>>>n,Nn=(e,t,n)=>e>>>n|t<<32-n,Rn=(e,t,n)=>e<<32-n|t>>>n,zn=(e,t,n)=>e<<64-n|t>>>n-32,qn=(e,t,n)=>e>>>n-32|t<<64-n,Dn=(e,t)=>t,Mn=(e,t)=>e,ae=(e,t,n)=>e<>>32-n,ue=(e,t,n)=>t<>>32-n,fe=(e,t,n)=>t<>>64-n,le=(e,t,n)=>e<>>64-n;function Fn(e,t,n,r){let i=(t>>>0)+(r>>>0);return{h:e+n+(i/2**32|0)|0,l:i|0}}var Gn=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),jn=(e,t,n,r)=>t+n+r+(e/2**32|0)|0,Zn=(e,t,n,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0),$n=(e,t,n,r,i)=>t+n+r+i+(e/2**32|0)|0,Vn=(e,t,n,r,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0)+(i>>>0),Xn=(e,t,n,r,i,o)=>t+n+r+i+o+(e/2**32|0)|0;var Yn={fromBig:qe,split:ce,toBig:On,shrSH:Tn,shrSL:Cn,rotrSH:Nn,rotrSL:Rn,rotrBH:zn,rotrBL:qn,rotr32H:Dn,rotr32L:Mn,rotlSH:ae,rotlSL:ue,rotlBH:fe,rotlBL:le,add:Fn,add3L:Gn,add3H:jn,add4L:Zn,add4H:$n,add5H:Xn,add5L:Vn},g=Yn;var[Wn,Jn]=g.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),ft=new Uint32Array(80),lt=new Uint32Array(80),he=class extends Rt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:n,Bh:r,Bl:i,Ch:o,Cl:s,Dh:c,Dl:a,Eh:f,El:u,Fh:y,Fl:b,Gh:A,Gl:k,Hh:H,Hl:S}=this;return[t,n,r,i,o,s,c,a,f,u,y,b,A,k,H,S]}set(t,n,r,i,o,s,c,a,f,u,y,b,A,k,H,S){this.Ah=t|0,this.Al=n|0,this.Bh=r|0,this.Bl=i|0,this.Ch=o|0,this.Cl=s|0,this.Dh=c|0,this.Dl=a|0,this.Eh=f|0,this.El=u|0,this.Fh=y|0,this.Fl=b|0,this.Gh=A|0,this.Gl=k|0,this.Hh=H|0,this.Hl=S|0}process(t,n){for(let h=0;h<16;h++,n+=4)ft[h]=t.getUint32(n),lt[h]=t.getUint32(n+=4);for(let h=16;h<80;h++){let B=ft[h-15]|0,w=lt[h-15]|0,N=g.rotrSH(B,w,1)^g.rotrSH(B,w,8)^g.shrSH(B,w,7),X=g.rotrSL(B,w,1)^g.rotrSL(B,w,8)^g.shrSL(B,w,7),P=ft[h-2]|0,K=lt[h-2]|0,D=g.rotrSH(P,K,19)^g.rotrBH(P,K,61)^g.shrSH(P,K,6),R=g.rotrSL(P,K,19)^g.rotrBL(P,K,61)^g.shrSL(P,K,6),j=g.add4L(X,R,lt[h-7],lt[h-16]),O=g.add4H(j,N,D,ft[h-7],ft[h-16]);ft[h]=O|0,lt[h]=j|0}let{Ah:r,Al:i,Bh:o,Bl:s,Ch:c,Cl:a,Dh:f,Dl:u,Eh:y,El:b,Fh:A,Fl:k,Gh:H,Gl:S,Hh:q,Hl:G}=this;for(let h=0;h<80;h++){let B=g.rotrSH(y,b,14)^g.rotrSH(y,b,18)^g.rotrBH(y,b,41),w=g.rotrSL(y,b,14)^g.rotrSL(y,b,18)^g.rotrBL(y,b,41),N=y&A^~y&H,X=b&k^~b&S,P=g.add5L(G,w,X,Jn[h],lt[h]),K=g.add5H(P,q,B,N,Wn[h],ft[h]),D=P|0,R=g.rotrSH(r,i,28)^g.rotrBH(r,i,34)^g.rotrBH(r,i,39),j=g.rotrSL(r,i,28)^g.rotrBL(r,i,34)^g.rotrBL(r,i,39),O=r&o^r&c^o&c,Bt=i&s^i&a^s&a;q=H|0,G=S|0,H=A|0,S=k|0,A=y|0,k=b|0,{h:y,l:b}=g.add(f|0,u|0,K|0,D|0),f=c|0,u=a|0,c=o|0,a=s|0,o=r|0,s=i|0;let ot=g.add3L(D,j,Bt);r=g.add3H(ot,K,R,O),i=ot|0}({h:r,l:i}=g.add(this.Ah|0,this.Al|0,r|0,i|0)),{h:o,l:s}=g.add(this.Bh|0,this.Bl|0,o|0,s|0),{h:c,l:a}=g.add(this.Ch|0,this.Cl|0,c|0,a|0),{h:f,l:u}=g.add(this.Dh|0,this.Dl|0,f|0,u|0),{h:y,l:b}=g.add(this.Eh|0,this.El|0,y|0,b|0),{h:A,l:k}=g.add(this.Fh|0,this.Fl|0,A|0,k|0),{h:H,l:S}=g.add(this.Gh|0,this.Gl|0,H|0,S|0),{h:q,l:G}=g.add(this.Hh|0,this.Hl|0,q|0,G|0),this.set(r,i,o,s,c,a,f,u,y,b,A,k,H,S,q,G)}roundClean(){ft.fill(0),lt.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var De=pt(()=>new he);var Qn={},Me=tr(globalThis,Qn);function tr(e,t){return new Proxy(e,{get(n,r,i){return r in t?t[r]:e[r]},set(n,r,i){return r in t&&delete t[r],e[r]=i,!0},deleteProperty(n,r){let i=!1;return r in t&&(delete t[r],i=!0),r in e&&(delete e[r],i=!0),i},ownKeys(n){let r=Reflect.ownKeys(e),i=Reflect.ownKeys(t),o=new Set(i);return[...r.filter(s=>!o.has(s)),...i]},defineProperty(n,r,i){return r in t&&delete t[r],Reflect.defineProperty(e,r,i),!0},getOwnPropertyDescriptor(n,r){return r in t?Reflect.getOwnPropertyDescriptor(t,r):Reflect.getOwnPropertyDescriptor(e,r)},has(n,r){return r in t||r in e}})}var de=class extends Error{constructor(t){let n;t instanceof Error?n=t.message:typeof t=="string"?n=t:n="",super(n),this.name=this.constructor.name}},tt=class extends de{},xt=class extends tt{};var gt=class extends tt{},yt=class extends tt{},qt=class extends tt{},Dt=class extends tt{};var Mt=class extends tt{},mt=class extends tt{};async function nr(){if(Me!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:e}=await import("crypto");return e.subtle}catch(e){throw new mt(e)}}var Ft=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await nr())}};var et=new Uint8Array(0);var Fe=new Uint8Array([72,80,75,69,45,118,49]),pe=class extends Ft{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:te.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:et}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,n){this._checkInit();let r=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+n.byteLength);return r.set(Fe,0),r.set(this._suiteId,7),r.set(t,7+this._suiteId.byteLength),r.set(n,7+this._suiteId.byteLength+t.byteLength),r}buildLabeledInfo(t,n,r){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+n.byteLength);return i.set(new Uint8Array([0,r]),0),i.set(Fe,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(n,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new xt("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}async expand(t,n,r){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(r),s=new Uint8Array(o),c=et,a=new Uint8Array(n),f=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let u=new Uint8Array(this.hashSize+a.length+1);for(let y=1,b=0;b=c.length?(s.set(c,b),b+=c.length):(s.set(c.slice(0,s.length-b),b),b+=s.length-b);return o}async extractAndExpand(t,n,r,i){await this._setup();let o=await this._api.importKey("raw",n,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:r},o,i*8)}async labeledExtract(t,n,r){return await this.extract(t,this.buildLabeledIkm(n,r))}async labeledExpand(t,n,r,i){return await this.expand(t,this.buildLabeledInfo(n,r,i),i)}_checkInit(){if(this._suiteId===et)throw new Error("Not initialized. Call init()")}};var Gt=class extends pe{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:te.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var jt=class extends Gt{async extract(t,n){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return oe(De,new Uint8Array(t),new Uint8Array(n));let r=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,n)}};var Ge=new Uint8Array([75,69,77,0,0]);var Et=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function je(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let n=new Uint8Array(t);for(let r=0;r>8;return n}function vt(e,t){let n=new Uint8Array(e.length+t.length);return n.set(e,0),n.set(t,e.length),n}function ye(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=atob(t),r=new Uint8Array(n.length);for(let i=0;i8192)throw new xt("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let n;t.ekm===void 0?n=await this.generateKeyPair():Et(t.ekm)?n=t.ekm:n=await this.deriveKeyPair(t.ekm);let r=await this._prim.serializePublicKey(n.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey));else{let a=Et(t.senderKey)?t.senderKey.privateKey:t.senderKey,f=new Uint8Array(await this._prim.dh(n.privateKey,t.recipientPublicKey)),u=new Uint8Array(await this._prim.dh(a,t.recipientPublicKey));o=vt(f,u)}let s;if(t.senderKey===void 0)s=vt(new Uint8Array(r),new Uint8Array(i));else{let a=Et(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),f=await this._prim.serializePublicKey(a);s=sr(new Uint8Array(r),new Uint8Array(i),new Uint8Array(f))}let c=await this._generateSharedSecret(o,s);return{enc:r,sharedSecret:c}}catch(o){throw new qt(o)}}async decap(t){let n=await this._prim.deserializePublicKey(t.enc),r=Et(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=Et(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let s;if(t.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(r,n));else{let a=new Uint8Array(await this._prim.dh(r,n)),f=new Uint8Array(await this._prim.dh(r,t.senderPublicKey));s=vt(a,f)}let c;if(t.senderPublicKey===void 0)c=vt(new Uint8Array(t.enc),new Uint8Array(o));else{let a=await this._prim.serializePublicKey(t.senderPublicKey);c=new Uint8Array(t.enc.byteLength+o.byteLength+a.byteLength),c.set(new Uint8Array(t.enc),0),c.set(new Uint8Array(o),t.enc.byteLength),c.set(new Uint8Array(a),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,c)}catch(s){throw new Dt(s)}}async _generateSharedSecret(t,n){let r=this._kdf.buildLabeledIkm(ir,t),i=this._kdf.buildLabeledInfo(or,n,this.secretSize);return await this._kdf.extractAndExpand(et,r,i,this.secretSize)}};var Ve=[],Xe=[],Ye=[],cr=BigInt(0),St=BigInt(1),ar=BigInt(2),ur=BigInt(7),fr=BigInt(256),lr=BigInt(113);for(let e=0,t=St,n=1,r=0;e<24;e++){[n,r]=[r,(2*n+3*r)%5],Ve.push(2*(5*r+n)),Xe.push((e+1)*(e+2)/2%64);let i=cr;for(let o=0;o<7;o++)t=(t<>ur)*lr)%fr,t&ar&&(i^=St<<(St<n>32?fe(e,t,n):ae(e,t,n),$e=(e,t,n)=>n>32?le(e,t,n):ue(e,t,n);function pr(e,t=24){let n=new Uint32Array(10);for(let r=24-t;r<24;r++){for(let s=0;s<10;s++)n[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let c=(s+8)%10,a=(s+2)%10,f=n[a],u=n[a+1],y=Ze(f,u,1)^n[c],b=$e(f,u,1)^n[c+1];for(let A=0;A<50;A+=10)e[s+A]^=y,e[s+A+1]^=b}let i=e[2],o=e[3];for(let s=0;s<24;s++){let c=Xe[s],a=Ze(i,o,c),f=$e(i,o,c),u=Ve[s];i=e[u],o=e[u+1],e[u]=a,e[u+1]=f}for(let s=0;s<50;s+=10){for(let c=0;c<10;c++)n[c]=e[s+c];for(let c=0;c<10;c++)e[s+c]^=~n[(c+2)%10]&n[(c+4)%10]}e[0]^=hr[r],e[1]^=dr[r]}n.fill(0)}var $t=class e extends at{constructor(t,n,r,i=!1,o=24){if(super(),this.blockLen=t,this.suffix=n,this.outputLen=r,this.enableXOF=i,this.rounds=o,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,At(r),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=Ne(this.state)}keccak(){ee||ne(this.state32),pr(this.state32,this.rounds),ee||ne(this.state32),this.posOut=0,this.pos=0}update(t){Q(this);let{blockLen:n,state:r}=this;t=ut(t);let i=t.length;for(let o=0;o=r&&this.keccak();let s=Math.min(r-this.posOut,o-i);t.set(n.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return At(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(Ot(t,this),this.finished)throw new Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){let{blockLen:n,suffix:r,outputLen:i,rounds:o,enableXOF:s}=this;return t||(t=new e(n,r,i,s,o)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=o,t.suffix=r,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}},ht=(e,t,n)=>pt(()=>new $t(t,e,n)),ki=ht(6,144,224/8),Hi=ht(6,136,256/8),Pi=ht(6,104,384/8),Ki=ht(6,72,512/8),Ui=ht(1,144,224/8),Oi=ht(1,136,256/8),Ti=ht(1,104,384/8),Ci=ht(1,72,512/8),We=(e,t,n)=>ze((r={})=>new $t(t,e,r.dkLen===void 0?n:r.dkLen,!0)),Ni=We(31,168,128/8),be=We(31,136,256/8);var yr=BigInt(1),br=BigInt(2);function we(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function xe(e){if(!we(e))throw new Error("Uint8Array expected")}var wr=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Vt(e){xe(e);let t="";for(let n=0;n=nt._0&&e<=nt._9)return e-nt._0;if(e>=nt._A&&e<=nt._F)return e-(nt._A-10);if(e>=nt._a&&e<=nt._f)return e-(nt._a-10)}function tn(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);let t=e.length,n=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let r=new Uint8Array(n);for(let i=0,o=0;i(br<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",stringOrUint8Array:e=>typeof e=="string"||we(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function dt(e,t,n={}){let r=(i,o,s)=>{let c=xr[o];if(typeof c!="function")throw new Error(`Invalid validator "${o}", expected function`);let a=e[i];if(!(s&&a===void 0)&&!c(a,e))throw new Error(`Invalid param ${String(i)}=${a} (${typeof a}), expected ${o}`)};for(let[i,o]of Object.entries(t))r(i,o,!1);for(let[i,o]of Object.entries(n))r(i,o,!0);return e}var C=BigInt(0),T=BigInt(1),wt=BigInt(2),mr=BigInt(3),Ee=BigInt(4),rn=BigInt(5),on=BigInt(8),Er=BigInt(9),_r=BigInt(16);function U(e,t){let n=e%t;return n>=C?n:t+n}function _e(e,t,n){if(n<=C||t 0");if(n===T)return C;let r=T;for(;t>C;)t&T&&(r=r*e%n),e=e*e%n,t>>=T;return r}function $(e,t,n){let r=e;for(;t-- >C;)r*=r,r%=n;return r}function sn(e,t){if(e===C||t<=C)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let n=U(e,t),r=t,i=C,o=T,s=T,c=C;for(;n!==C;){let f=r/n,u=r%n,y=i-s*f,b=o-c*f;r=n,n=u,i=s,o=c,s=y,c=b}if(r!==T)throw new Error("invert: does not exist");return U(i,t)}function Br(e){let t=(e-T)/wt,n,r,i;for(n=e-T,r=0;n%wt===C;n/=wt,r++);for(i=wt;i(r[i]="function",r),t);return dt(e,n)}function Sr(e,t,n){if(n 0");if(n===C)return e.ONE;if(n===T)return t;let r=e.ONE,i=t;for(;n>C;)n&T&&(r=e.mul(r,i)),i=e.sqr(i),n>>=T;return r}function Ir(e,t){let n=new Array(t.length),r=t.reduce((o,s,c)=>e.is0(s)?o:(n[c]=o,e.mul(o,s)),e.ONE),i=e.inv(r);return t.reduceRight((o,s,c)=>e.is0(s)?o:(n[c]=e.mul(o,n[c]),e.mul(o,s)),i),n}function Be(e,t){let n=t!==void 0?t:e.toString(2).length,r=Math.ceil(n/8);return{nBitLength:n,nByteLength:r}}function an(e,t,n=!1,r={}){if(e<=C)throw new Error(`Expected Field ORDER > 0, got ${e}`);let{nBitLength:i,nByteLength:o}=Be(e,t);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let s=Ar(e),c=Object.freeze({ORDER:e,BITS:i,BYTES:o,MASK:nn(i),ZERO:C,ONE:T,create:a=>U(a,e),isValid:a=>{if(typeof a!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof a}`);return C<=a&&aa===C,isOdd:a=>(a&T)===T,neg:a=>U(-a,e),eql:(a,f)=>a===f,sqr:a=>U(a*a,e),add:(a,f)=>U(a+f,e),sub:(a,f)=>U(a-f,e),mul:(a,f)=>U(a*f,e),pow:(a,f)=>Sr(c,a,f),div:(a,f)=>U(a*sn(f,e),e),sqrN:a=>a*a,addN:(a,f)=>a+f,subN:(a,f)=>a-f,mulN:(a,f)=>a*f,inv:a=>sn(a,e),sqrt:r.sqrt||(a=>s(c,a)),invertBatch:a=>Ir(c,a),cmov:(a,f,u)=>u?f:a,toBytes:a=>n?bt(a,o):ge(a,o),fromBytes:a=>{if(a.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${a.length}`);return n?rt(a):en(a)}});return Object.freeze(c)}var Lr=BigInt(0),Ae=BigInt(1);function un(e,t){let n=(i,o)=>{let s=o.negate();return i?s:o},r=i=>{let o=Math.ceil(t/i)+1,s=2**(i-1);return{windows:o,windowSize:s}};return{constTimeNegate:n,unsafeLadder(i,o){let s=e.ZERO,c=i;for(;o>Lr;)o&Ae&&(s=s.add(c)),c=c.double(),o>>=Ae;return s},precomputeWindow(i,o){let{windows:s,windowSize:c}=r(o),a=[],f=i,u=f;for(let y=0;y>=A,S>a&&(S-=b,s+=Ae);let q=H,G=H+Math.abs(S)-1,h=k%2!==0,B=S<0;S===0?u=u.add(n(h,o[q])):f=f.add(n(B,o[G]))}return{p:f,f:u}},wNAFCached(i,o,s,c){let a=i._WINDOW_SIZE||1,f=o.get(i);return f||(f=this.precomputeWindow(i,a),a!==1&&o.set(i,c(f))),this.wNAF(a,f,s)}}}function fn(e){return cn(e.Fp),dt(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Be(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var Y=BigInt(0),V=BigInt(1),Xt=BigInt(2),kr=BigInt(8),Hr={zip215:!0};function Pr(e){let t=fn(e);return dt(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function ln(e){let t=Pr(e),{Fp:n,n:r,prehash:i,hash:o,randomBytes:s,nByteLength:c,h:a}=t,f=Xt<{try{return{isValid:!0,value:n.sqrt(d*n.inv(l))}}catch{return{isValid:!1,value:Y}}}),b=t.adjustScalarBytes||(d=>d),A=t.domain||((d,l,p)=>{if(l.length||p)throw new Error("Contexts/pre-hash are not supported");return d}),k=d=>typeof d=="bigint"&&Yk(d)&&k(l)&&dd===Y||H(d,f);function q(d,l){if(H(d,l))return d;throw new Error(`Expected valid scalar < ${l}, got ${typeof d} ${d}`)}function G(d){return d===Y?d:q(d,r)}let h=new Map;function B(d){if(!(d instanceof w))throw new Error("ExtendedPoint expected")}class w{constructor(l,p,x,m){if(this.ex=l,this.ey=p,this.ez=x,this.et=m,!S(l))throw new Error("x required");if(!S(p))throw new Error("y required");if(!S(x))throw new Error("z required");if(!S(m))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof w)throw new Error("extended point not allowed");let{x:p,y:x}=l||{};if(!S(p)||!S(x))throw new Error("invalid affine point");return new w(p,x,V,u(p*x))}static normalizeZ(l){let p=n.invertBatch(l.map(x=>x.ez));return l.map((x,m)=>x.toAffine(p[m])).map(w.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,h.delete(this)}assertValidity(){let{a:l,d:p}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:x,ey:m,ez:E,et:v}=this,L=u(x*x),_=u(m*m),I=u(E*E),z=u(I*I),M=u(L*l),W=u(I*u(M+_)),F=u(z+u(p*u(L*_)));if(W!==F)throw new Error("bad point: equation left != right (1)");let st=u(x*m),J=u(E*v);if(st!==J)throw new Error("bad point: equation left != right (2)")}equals(l){B(l);let{ex:p,ey:x,ez:m}=this,{ex:E,ey:v,ez:L}=l,_=u(p*L),I=u(E*m),z=u(x*L),M=u(v*m);return _===I&&z===M}is0(){return this.equals(w.ZERO)}negate(){return new w(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){let{a:l}=t,{ex:p,ey:x,ez:m}=this,E=u(p*p),v=u(x*x),L=u(Xt*u(m*m)),_=u(l*E),I=p+x,z=u(u(I*I)-E-v),M=_+v,W=M-L,F=_-v,st=u(z*W),J=u(M*F),Kt=u(z*F),Ut=u(W*M);return new w(st,J,Ut,Kt)}add(l){B(l);let{a:p,d:x}=t,{ex:m,ey:E,ez:v,et:L}=this,{ex:_,ey:I,ez:z,et:M}=l;if(p===BigInt(-1)){let ke=u((E-m)*(I+_)),He=u((E+m)*(I-_)),Jt=u(He-ke);if(Jt===Y)return this.double();let Pe=u(v*Xt*M),Ke=u(L*Xt*z),Ue=Ke+Pe,Oe=He+ke,Te=Ke-Pe,vn=u(Ue*Jt),Sn=u(Oe*Te),In=u(Ue*Te),Ln=u(Jt*Oe);return new w(vn,Sn,Ln,In)}let W=u(m*_),F=u(E*I),st=u(L*x*M),J=u(v*z),Kt=u((m+E)*(_+I)-W-F),Ut=J-st,Ie=J+st,Le=u(F-p*W),En=u(Kt*Ut),_n=u(Ie*Le),Bn=u(Kt*Le),An=u(Ut*Ie);return new w(En,_n,An,Bn)}subtract(l){return this.add(l.negate())}wNAF(l){return P.wNAFCached(this,h,l,w.normalizeZ)}multiply(l){let{p,f:x}=this.wNAF(q(l,r));return w.normalizeZ([p,x])[0]}multiplyUnsafe(l){let p=G(l);return p===Y?X:this.equals(X)||p===V?this:this.equals(N)?this.wNAF(p).p:P.unsafeLadder(this,p)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return P.unsafeLadder(this,r).is0()}toAffine(l){let{ex:p,ey:x,ez:m}=this,E=this.is0();l==null&&(l=E?kr:n.inv(m));let v=u(p*l),L=u(x*l),_=u(m*l);if(E)return{x:Y,y:V};if(_!==V)throw new Error("invZ was invalid");return{x:v,y:L}}clearCofactor(){let{h:l}=t;return l===V?this:this.multiplyUnsafe(l)}static fromHex(l,p=!1){let{d:x,a:m}=t,E=n.BYTES;l=Z("pointHex",l,E);let v=l.slice(),L=l[E-1];v[E-1]=L&-129;let _=rt(v);_===Y||(p?q(_,f):q(_,n.ORDER));let I=u(_*_),z=u(I-V),M=u(x*I-m),{isValid:W,value:F}=y(z,M);if(!W)throw new Error("Point.fromHex: invalid y coordinate");let st=(F&V)===V,J=(L&128)!==0;if(!p&&F===Y&&J)throw new Error("Point.fromHex: x=0 and x_0=1");return J!==st&&(F=u(-F)),w.fromAffine({x:F,y:_})}static fromPrivateKey(l){return R(l).point}toRawBytes(){let{x:l,y:p}=this.toAffine(),x=bt(p,n.BYTES);return x[x.length-1]|=l&V?128:0,x}toHex(){return Vt(this.toRawBytes())}}w.BASE=new w(t.Gx,t.Gy,V,u(t.Gx*t.Gy)),w.ZERO=new w(Y,V,V,Y);let{BASE:N,ZERO:X}=w,P=un(w,c*8);function K(d){return U(d,r)}function D(d){return K(rt(d))}function R(d){let l=c;d=Z("private key",d,l);let p=Z("hashed private key",o(d),2*l),x=b(p.slice(0,l)),m=p.slice(l,2*l),E=D(x),v=N.multiply(E),L=v.toRawBytes();return{head:x,prefix:m,scalar:E,point:v,pointBytes:L}}function j(d){return R(d).pointBytes}function O(d=new Uint8Array,...l){let p=me(...l);return D(o(A(p,Z("context",d),!!i)))}function Bt(d,l,p={}){d=Z("message",d),i&&(d=i(d));let{prefix:x,scalar:m,pointBytes:E}=R(l),v=O(p.context,x,d),L=N.multiply(v).toRawBytes(),_=O(p.context,L,E,d),I=K(v+_*m);G(I);let z=me(L,bt(I,n.BYTES));return Z("result",z,c*2)}let ot=Hr;function Ht(d,l,p,x=ot){let{context:m,zip215:E}=x,v=n.BYTES;d=Z("signature",d,2*v),l=Z("message",l),i&&(l=i(l));let L=rt(d.slice(v,2*v)),_,I,z;try{_=w.fromHex(p,E),I=w.fromHex(d.slice(0,v),E),z=N.multiplyUnsafe(L)}catch{return!1}if(!E&&_.isSmallOrder())return!1;let M=O(m,I.toRawBytes(),_.toRawBytes(),l);return I.add(_.multiplyUnsafe(M)).subtract(z).clearCofactor().equals(w.ZERO)}return N._setWindowSize(8),{CURVE:t,getPublicKey:j,sign:Bt,verify:Ht,ExtendedPoint:w,utils:{getExtendedPublicKey:R,randomPrivateKey:()=>s(n.BYTES),precompute(d=8,l=w.BASE){return l._setWindowSize(d),l.multiply(BigInt(3)),l}}}}var It=BigInt(0),ve=BigInt(1);function Kr(e){return dt(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function hn(e){let t=Kr(e),{P:n}=t,r=h=>U(h,n),i=t.montgomeryBits,o=Math.ceil(i/8),s=t.nByteLength,c=t.adjustScalarBytes||(h=>h),a=t.powPminus2||(h=>_e(h,n-BigInt(2),n));function f(h,B,w){let N=r(h*(B-w));return B=r(B-N),w=r(w+N),[B,w]}function u(h){if(typeof h=="bigint"&&It<=h&&h=It;ot--){let Ht=N>>ot&ve;j^=Ht,O=f(j,P,D),P=O[0],D=O[1],O=f(j,K,R),K=O[0],R=O[1],j=Ht;let Pt=P+K,d=r(Pt*Pt),l=P-K,p=r(l*l),x=d-p,m=D+R,E=D-R,v=r(E*Pt),L=r(m*l),_=v+L,I=v-L;D=r(_*_),R=r(X*r(I*I)),P=r(d*p),K=r(x*(d+r(y*x)))}O=f(j,P,D),P=O[0],D=O[1],O=f(j,K,R),K=O[0],R=O[1];let Bt=a(K);return r(P*Bt)}function A(h){return bt(r(h),o)}function k(h){let B=Z("u coordinate",h,o);return s===32&&(B[31]&=127),rt(B)}function H(h){let B=Z("scalar",h),w=B.length;if(w!==o&&w!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${w}`);return rt(c(B))}function S(h,B){let w=k(B),N=H(h),X=b(w,N);if(X===It)throw new Error("Invalid private or public key received");return A(X)}let q=A(t.Gu);function G(h){return S(h,q)}return{scalarMult:S,scalarMultBase:G,getSharedSecret:(h,B)=>S(h,B),getPublicKey:h=>G(h),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:q}}var Ur=pt(()=>be.create({dkLen:114})),Or=pt(()=>be.create({dkLen:64})),Lt=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439"),Tr=BigInt(1),dn=BigInt(2),pn=BigInt(3),ro=BigInt(4),Cr=BigInt(11),Nr=BigInt(22),yn=BigInt(44),Rr=BigInt(88),zr=BigInt(223);function bn(e){let t=Lt,n=e*e*e%t,r=n*n*e%t,i=$(r,pn,t)*r%t,o=$(i,pn,t)*r%t,s=$(o,dn,t)*n%t,c=$(s,Cr,t)*s%t,a=$(c,Nr,t)*c%t,f=$(a,yn,t)*a%t,u=$(f,Rr,t)*f%t,y=$(u,yn,t)*a%t,b=$(y,dn,t)*n%t,A=$(b,Tr,t)*e%t;return $(A,zr,t)*b%t}function wn(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function qr(e,t){let n=Lt,r=U(e*e*t,n),i=U(r*e,n),o=U(i*r*t,n),s=bn(o),c=U(i*s,n),a=U(c*c,n);return{isValid:U(a*t,n)===e,value:c}}var xn=an(Lt,456,!0),Dr={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:xn,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Ur,randomBytes:ie,adjustScalarBytes:wn,domain:(e,t,n)=>{if(t.length>255)throw new Error(`Context is too big: ${t.length}`);return Re(re("SigEd448"),new Uint8Array([n?1:0,t.length]),t,e)},uvRatio:qr};var io=ln({...Dr,prehash:Or}),Yt=hn({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:Lt,Gu:BigInt(5),powPminus2:e=>{let t=Lt,n=bn(e),r=$(n,BigInt(2),t);return U(r*e,t)},adjustScalarBytes:wn,randomBytes:ie});var oo=(xn.ORDER-BigInt(3))/BigInt(4),so=BigInt(156326);var co=BigInt("39082"),ao=BigInt("78163"),uo=BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),fo=BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716");var lo=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var kt=["deriveBits"],gn=new Uint8Array([100,107,112,95,112,114,107]),mn=new Uint8Array([115,107]);var it=class{constructor(t,n,r,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=n,this.type=r,this.algorithm={name:t},this.usages=i,r==="public"&&(this.usages=[])}};var _t="X448",Wt=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=56,this._nSk=56}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(n){throw new gt(n)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(n){throw new yt(n)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(n){throw new gt(n)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(n){throw new yt(n)}}async importKey(t,n,r){try{if(t==="raw")return await this._importRawKey(n,r);if(n instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(n,r)}catch(i){throw new yt(i)}}async generateKeyPair(){try{let t=Yt.utils.randomPrivateKey(),n=new it(_t,t,"private",kt);return{publicKey:await this.derivePublicKey(n),privateKey:n}}catch(t){throw new mt(t)}}async deriveKeyPair(t){try{let n=await this._hkdf.labeledExtract(et,gn,new Uint8Array(t)),r=await this._hkdf.labeledExpand(n,mn,et,this._nSk),i=new it(_t,new Uint8Array(r),"private",kt);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(n){throw new Mt(n)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(n){throw new yt(n)}}async dh(t,n){try{return await this._dh(t,n)}catch(r){throw new gt(r)}}_serializePublicKey(t){return new Promise(n=>{n(t.key.buffer)})}_serializePrivateKey(t){return new Promise(n=>{n(t.key.buffer)})}_importRawKey(t,n){return new Promise((r,i)=>{n&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!n&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),r(new it(_t,new Uint8Array(t),n?"public":"private",n?[]:kt))})}_importJWK(t,n){return new Promise((r,i)=>{t.kty!=="OKP"&&i(new Error(`Invalid kty: ${t.kty}`)),t.crv!=="X448"&&i(new Error(`Invalid crv: ${t.crv}`)),n?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x!="string"&&i(new Error("Invalid key: `x` not found")),r(new it(_t,ye(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),r(new it(_t,ye(t.d),"private",kt)))})}_derivePublicKey(t){return new Promise((n,r)=>{try{let i=Yt.getPublicKey(t.key);n(new it(_t,i,"public"))}catch(i){r(i)}})}_dh(t,n){return new Promise((r,i)=>{try{r(Yt.getSharedSecret(t.key,n.key).buffer)}catch(o){i(o)}})}};var Se=class extends Zt{constructor(){let t=new jt;super(Qt.DhkemX448HkdfSha512,new Wt(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Qt.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};export{Se as DhkemX448HkdfSha512}; /*! Bundled license information: @noble/hashes/esm/utils.js: diff --git a/docs/classes/BaseError.html b/docs/classes/BaseError.html index ffd97b56e..0a75d5fff 100644 --- a/docs/classes/BaseError.html +++ b/docs/classes/BaseError.html @@ -1,7 +1,7 @@ BaseError | hpke-js

Class BaseError

The base error class of hpke-js.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/CipherSuite.html b/docs/classes/CipherSuite.html index 76b6110b5..d73350f69 100644 --- a/docs/classes/CipherSuite.html +++ b/docs/classes/CipherSuite.html @@ -31,7 +31,7 @@

Example: Use a ciphersuite consisting of an external module.

import { AeadId, CipherSuite, KdfId } from "http://deno.land/x/hpke/mod.ts";
// Use an extension module.
import {
  HybridkemX25519Kyber768,
} from "https://deno.land/x/hpke/x/hybridkem-x25519-kyber768/mod.ts";

const suite = new CipherSuite({
  kem: new HybridkemX25519Kyber768(),
  kdf: KdfId.HkdfSha256,
  aead: AeadId.Aes128Gcm,
});
-

Hierarchy

  • CipherSuiteNative
    • CipherSuite

Constructors

constructor +

Hierarchy

  • CipherSuiteNative
    • CipherSuite

Constructors

constructor

Properties

_api _kem

Accessors

aead @@ -47,33 +47,33 @@

seal

Constructors

constructor

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_kem

_kem: KemInterface

Accessors

aead

kdf

kem

Methods

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

createRecipientContext

Properties

Protected_api

_api: SubtleCrypto = undefined

Protected_kem

_kem: KemInterface

Accessors

aead

kdf

kem

Methods

Protected_setup

  • _setup(): Promise<void>

  • Returns Promise<void>

createRecipientContext

createSenderContext

createSenderContext

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair for the cipher suite in the manner +

deriveKeyPair

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair for the cipher suite.

    +

generateKeyPair

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    +

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    Since key parameters for createSenderContext or createRecipientContext are CryptoKey format, you have to use this function to convert provided keys to CryptoKey.

    @@ -86,18 +86,18 @@

    Throws

Returns Promise<CryptoKey>

A public or private CryptoKey.

Deprecated

Use KemInterface.generateKeyPair instead.

Throws

DeserializeError

-

open

  • open(params, ct, aad?): Promise<ArrayBuffer>

  • Decrypts a message from a sender.

    +

open

  • open(params, ct, aad?): Promise<ArrayBuffer>

  • Decrypts a message from a sender.

    If the error occurred, throws DecapError | DeserializeError | OpenError | ValidationError.

    Parameters

    • params: RecipientContextParams

      A set of parameters for building a recipient encryption context.

    • ct: ArrayBuffer

      An encrypted text as bytes to be decrypted.

    • aad: ArrayBuffer = EMPTY

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    Throws

    DecapError, DeserializeError, OpenError, ValidationError

    -

seal

seal

Settings

Member Visibility

On This Page

Constructors
Properties
Accessors
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Accessors
Methods
diff --git a/docs/classes/DecapError.html b/docs/classes/DecapError.html index 2524647e7..44a6cbc78 100644 --- a/docs/classes/DecapError.html +++ b/docs/classes/DecapError.html @@ -1,7 +1,7 @@ DecapError | hpke-js

Class DecapError

decap() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/DeriveKeyPairError.html b/docs/classes/DeriveKeyPairError.html index 2f09267a0..03acd91f6 100644 --- a/docs/classes/DeriveKeyPairError.html +++ b/docs/classes/DeriveKeyPairError.html @@ -1,7 +1,7 @@ DeriveKeyPairError | hpke-js

Class DeriveKeyPairError

Key pair derivation failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/DeserializeError.html b/docs/classes/DeserializeError.html index d896c1987..c2af2f6b6 100644 --- a/docs/classes/DeserializeError.html +++ b/docs/classes/DeserializeError.html @@ -1,7 +1,7 @@ DeserializeError | hpke-js

Class DeserializeError

Public or private key deserialization failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/EncapError.html b/docs/classes/EncapError.html index 27b5af4cd..03ab203a1 100644 --- a/docs/classes/EncapError.html +++ b/docs/classes/EncapError.html @@ -1,7 +1,7 @@ EncapError | hpke-js

Class EncapError

encap() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/ExportError.html b/docs/classes/ExportError.html index 26304354c..d0491f4d4 100644 --- a/docs/classes/ExportError.html +++ b/docs/classes/ExportError.html @@ -1,7 +1,7 @@ ExportError | hpke-js

Class ExportError

Secret export failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/HpkeError.html b/docs/classes/HpkeError.html index f7d217a9d..a1b404299 100644 --- a/docs/classes/HpkeError.html +++ b/docs/classes/HpkeError.html @@ -1,7 +1,7 @@ HpkeError | hpke-js

Class HpkeError

The base error class of hpke-js.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/InvalidParamError.html b/docs/classes/InvalidParamError.html index 8b5d42e1f..8c9233f02 100644 --- a/docs/classes/InvalidParamError.html +++ b/docs/classes/InvalidParamError.html @@ -1,7 +1,7 @@ InvalidParamError | hpke-js

Class InvalidParamError

Invalid parameter.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/MessageLimitReachedError.html b/docs/classes/MessageLimitReachedError.html index b4d3fb3d6..7e5149b1f 100644 --- a/docs/classes/MessageLimitReachedError.html +++ b/docs/classes/MessageLimitReachedError.html @@ -1,7 +1,7 @@ MessageLimitReachedError | hpke-js

Class MessageLimitReachedError

Sequence number overflow on the encryption context.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/NotSupportedError.html b/docs/classes/NotSupportedError.html index dd12b739e..de802fb59 100644 --- a/docs/classes/NotSupportedError.html +++ b/docs/classes/NotSupportedError.html @@ -1,7 +1,7 @@ NotSupportedError | hpke-js

Class NotSupportedError

Not supported failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/OpenError.html b/docs/classes/OpenError.html index d33989c80..9f6623cef 100644 --- a/docs/classes/OpenError.html +++ b/docs/classes/OpenError.html @@ -1,7 +1,7 @@ OpenError | hpke-js

Class OpenError

open() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/SealError.html b/docs/classes/SealError.html index 3a35c3c8b..8f95c9888 100644 --- a/docs/classes/SealError.html +++ b/docs/classes/SealError.html @@ -1,7 +1,7 @@ SealError | hpke-js

Class SealError

seal() failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/SerializeError.html b/docs/classes/SerializeError.html index de93f0bac..be3918b33 100644 --- a/docs/classes/SerializeError.html +++ b/docs/classes/SerializeError.html @@ -1,7 +1,7 @@ SerializeError | hpke-js

Class SerializeError

Public or private key serialization failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/classes/ValidationError.html b/docs/classes/ValidationError.html index 7786fd2da..c35bbf92e 100644 --- a/docs/classes/ValidationError.html +++ b/docs/classes/ValidationError.html @@ -1,7 +1,7 @@ ValidationError | hpke-js

Class ValidationError

KEM input or output validation failure.

-

Hierarchy (view full)

Constructors

constructor +

Hierarchy (view full)

Constructors

constructor

Properties

cause? message name stack? -

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
+

Constructors

constructor

Properties

Optionalcause

cause?: unknown

message

message: string

name

name: string

Optionalstack

stack?: string

Settings

Member Visibility

On This Page

Constructors
Properties
diff --git a/docs/interfaces/AeadEncryptionContext.html b/docs/interfaces/AeadEncryptionContext.html index f068f8941..35e2261d0 100644 --- a/docs/interfaces/AeadEncryptionContext.html +++ b/docs/interfaces/AeadEncryptionContext.html @@ -1,14 +1,14 @@ AeadEncryptionContext | hpke-js

Interface AeadEncryptionContext

The AEAD encryption context interface.

-
interface AeadEncryptionContext {
    open(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
    seal(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
}

Methods

open +
interface AeadEncryptionContext {
    open(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
    seal(iv: ArrayBuffer, data: ArrayBuffer, aad: ArrayBuffer): Promise<ArrayBuffer>;
}

Methods

open seal

Methods

open

  • open(iv, data, aad): Promise<ArrayBuffer>

  • Decrypts data with an initialization vector and additional authenticated data.

    Parameters

    • iv: ArrayBuffer

      An initialization vector.

    • data: ArrayBuffer

      A plain text as bytes to be encrypted.

    • aad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    -

seal

seal

  • seal(iv, data, aad): Promise<ArrayBuffer>

  • Encrypts data with an initialization vector and additional authenticated data.

    Parameters

    • iv: ArrayBuffer

      An initialization vector.

    • data: ArrayBuffer

      A plain text as bytes to be encrypted.

    • aad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A cipher text as bytes.

    -

Settings

Member Visibility

On This Page

Methods
+

Settings

Member Visibility

On This Page

Methods
diff --git a/docs/interfaces/AeadInterface.html b/docs/interfaces/AeadInterface.html index c2b01aa12..48ef6d07d 100644 --- a/docs/interfaces/AeadInterface.html +++ b/docs/interfaces/AeadInterface.html @@ -1,14 +1,14 @@ AeadInterface | hpke-js

Interface AeadInterface

The AEAD interface.

-
interface AeadInterface {
    id: AeadId;
    keySize: number;
    nonceSize: number;
    tagSize: number;
    createEncryptionContext(key: ArrayBuffer): AeadEncryptionContext;
}

Properties

id +
interface AeadInterface {
    id: AeadId;
    keySize: number;
    nonceSize: number;
    tagSize: number;
    createEncryptionContext(key: ArrayBuffer): AeadEncryptionContext;
}

Properties

id keySize nonceSize tagSize

Methods

createEncryptionContext

Properties

Readonlyid

id: AeadId

The KDF identifier.

-

ReadonlykeySize

keySize: number

The length in bytes of an AEAD key (Nk).

-

ReadonlynonceSize

nonceSize: number

The length in bytes of an AEAD nonce (Nn).

-

ReadonlytagSize

tagSize: number

The length in bytes of an AEAD authentication tag (Nt).

-

Methods

createEncryptionContext

ReadonlykeySize

keySize: number

The length in bytes of an AEAD key (Nk).

+

ReadonlynonceSize

nonceSize: number

The length in bytes of an AEAD nonce (Nn).

+

ReadonlytagSize

tagSize: number

The length in bytes of an AEAD authentication tag (Nt).

+

Methods

createEncryptionContext

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/docs/interfaces/CipherSuiteParams.html b/docs/interfaces/CipherSuiteParams.html index 3477cff65..e71a38e30 100644 --- a/docs/interfaces/CipherSuiteParams.html +++ b/docs/interfaces/CipherSuiteParams.html @@ -1,8 +1,8 @@ CipherSuiteParams | hpke-js

Interface CipherSuiteParams

The parameters used to configure the CipherSuite.

-
interface CipherSuiteParams {
    aead: AeadId | AeadInterface;
    kdf: KdfId | KdfInterface;
    kem: KemId | KemInterface;
}

Properties

aead +
interface CipherSuiteParams {
    aead: AeadId | AeadInterface;
    kdf: KdfId | KdfInterface;
    kem: KemId | KemInterface;
}

Properties

aead kdf kem

Properties

aead

aead: AeadId | AeadInterface

The AEAD (Authenticated Encryption with Addtional Data) identifier or the AEAD object.

-

kdf

kdf: KdfId | KdfInterface

The KDF (Key Derivation Function) identifier or the KDF object.

-

kem

kem: KemId | KemInterface

The KEM (Key Encapsulation Mechanism) identifier or the KEM object.

-

Settings

Member Visibility

On This Page

Properties
+

kdf

kdf: KdfId | KdfInterface

The KDF (Key Derivation Function) identifier or the KDF object.

+

kem

kem: KemId | KemInterface

The KEM (Key Encapsulation Mechanism) identifier or the KEM object.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/docs/interfaces/CipherSuiteSealResponse.html b/docs/interfaces/CipherSuiteSealResponse.html index b3eb7c863..3504406d7 100644 --- a/docs/interfaces/CipherSuiteSealResponse.html +++ b/docs/interfaces/CipherSuiteSealResponse.html @@ -1,6 +1,6 @@ CipherSuiteSealResponse | hpke-js

Interface CipherSuiteSealResponse

The response of the single-shot seal API.

-
interface CipherSuiteSealResponse {
    ct: ArrayBuffer;
    enc: ArrayBuffer;
}

Properties

ct +
interface CipherSuiteSealResponse {
    ct: ArrayBuffer;
    enc: ArrayBuffer;
}

Properties

ct enc

Properties

ct

ct: ArrayBuffer

The ciphertext as bytes.

-

enc

enc: ArrayBuffer

The encapsulated key.

-

Settings

Member Visibility

On This Page

Properties
+

enc

enc: ArrayBuffer

The encapsulated key.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/docs/interfaces/EncryptionContext.html b/docs/interfaces/EncryptionContext.html index e4a79dd93..e6e429858 100644 --- a/docs/interfaces/EncryptionContext.html +++ b/docs/interfaces/EncryptionContext.html @@ -1,5 +1,5 @@ EncryptionContext | hpke-js

Interface EncryptionContext

The encryption context interface for a recipient and a sender.

-
interface EncryptionContext {
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Methods

export +
interface EncryptionContext {
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Methods

export open seal

Methods

export

  • export(exporterContext, len): Promise<ArrayBuffer>

  • Exports a secret using a variable-length pseudorandom function.

    @@ -8,16 +8,16 @@
  • len: number

    A desired length in bytes of the output secret.

Returns Promise<ArrayBuffer>

A secret string as bytes.

Throws

ExportError

-

open

open

  • open(data, aad?): Promise<ArrayBuffer>

  • Decrypts data.

    If the error occurred, throws OpenError.

    Parameters

    • data: ArrayBuffer

      An encrypted text as bytes to be decrypted.

    • Optionalaad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    Throws

    OpenError

    -

seal

seal

  • seal(data, aad?): Promise<ArrayBuffer>

  • Encrypts data.

    If the error occurred, throws SealError | MessageLimitReachedError.

    Parameters

    • data: ArrayBuffer

      A plain text as bytes to be encrypted.

    • Optionalaad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A cipher text as bytes.

    Throws

    MessageLimitReachedError, SealError

    -

Settings

Member Visibility

On This Page

Methods
+

Settings

Member Visibility

On This Page

Methods
diff --git a/docs/interfaces/KdfInterface.html b/docs/interfaces/KdfInterface.html index 8b3a1db54..6e6481244 100644 --- a/docs/interfaces/KdfInterface.html +++ b/docs/interfaces/KdfInterface.html @@ -1,5 +1,5 @@ KdfInterface | hpke-js

Interface KdfInterface

The KDF interface.

-
interface KdfInterface {
    hashSize: number;
    id: KdfId;
    buildLabeledIkm(label: Uint8Array, ikm: Uint8Array): Uint8Array;
    buildLabeledInfo(label: Uint8Array, info: Uint8Array, len: number): Uint8Array;
    expand(prk: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    extract(salt: ArrayBuffer, ikm: ArrayBuffer): Promise<ArrayBuffer>;
    extractAndExpand(salt: ArrayBuffer, ikm: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    init(suiteId: Uint8Array): void;
    labeledExpand(prk: ArrayBuffer, label: Uint8Array, info: Uint8Array, len: number): Promise<ArrayBuffer>;
    labeledExtract(salt: ArrayBuffer, label: Uint8Array, ikm: Uint8Array): Promise<ArrayBuffer>;
}

Properties

hashSize +
interface KdfInterface {
    hashSize: number;
    id: KdfId;
    buildLabeledIkm(label: Uint8Array, ikm: Uint8Array): Uint8Array;
    buildLabeledInfo(label: Uint8Array, info: Uint8Array, len: number): Uint8Array;
    expand(prk: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    extract(salt: ArrayBuffer, ikm: ArrayBuffer): Promise<ArrayBuffer>;
    extractAndExpand(salt: ArrayBuffer, ikm: ArrayBuffer, info: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    init(suiteId: Uint8Array): void;
    labeledExpand(prk: ArrayBuffer, label: Uint8Array, info: Uint8Array, len: number): Promise<ArrayBuffer>;
    labeledExtract(salt: ArrayBuffer, label: Uint8Array, ikm: Uint8Array): Promise<ArrayBuffer>;
}

Properties

hashSize id

Methods

buildLabeledIkm buildLabeledInfo @@ -10,41 +10,41 @@ labeledExpand labeledExtract

Properties

ReadonlyhashSize

hashSize: number

The output size of the extract() function in bytes (Nh).

-

Readonlyid

id: KdfId

The KDF identifier.

-

Methods

buildLabeledIkm

Readonlyid

id: KdfId

The KDF identifier.

+

Methods

buildLabeledIkm

  • buildLabeledIkm(label, ikm): Uint8Array

  • Builds a labeled input keying material.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

    Returns Uint8Array

    An input keying material as bytes.

    -

buildLabeledInfo

buildLabeledInfo

  • buildLabeledInfo(label, info, len): Uint8Array

  • Builds a labeled info string.

    Parameters

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length of the output byte string.

    Returns Uint8Array

    An info string as bytes.

    -

expand

expand

  • expand(prk, info, len): Promise<ArrayBuffer>

  • Expands a pseudorandom key prk.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

extract

extract

  • extract(salt, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key of fixed length (Nh) bytes.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    +

extractAndExpand

  • extractAndExpand(salt, ikm, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key and expand it to a specified length keying material.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • ikm: ArrayBuffer

      An input keying material

    • info: ArrayBuffer

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

init

init

  • init(suiteId): void

  • Initializes the instance by setting a suite_id defined in RFC9180.

    Parameters

    • suiteId: Uint8Array

      A suite_id defined in RFC9180.

      -

    Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    +

Returns void

labeledExpand

  • labeledExpand(prk, label, info, len): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • prk: ArrayBuffer

      A pseudorandom key.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • info: Uint8Array

      An additional byte string.

    • len: number

      The length in bytes of the output keying material.

    Returns Promise<ArrayBuffer>

    An output keying material as bytes.

    -

labeledExtract

labeledExtract

  • labeledExtract(salt, label, ikm): Promise<ArrayBuffer>

  • Extracts a pseudorandom key with label.

    Parameters

    • salt: ArrayBuffer

      An additional random byte string.

    • label: Uint8Array

      A byte string indicating the cryptographic context/operation.

    • ikm: Uint8Array

      An input keying material

    Returns Promise<ArrayBuffer>

    A pseudorandom key as bytes.

    -

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/docs/interfaces/KemInterface.html b/docs/interfaces/KemInterface.html index b08e025fe..7e58a4715 100644 --- a/docs/interfaces/KemInterface.html +++ b/docs/interfaces/KemInterface.html @@ -1,5 +1,5 @@ KemInterface | hpke-js

Interface KemInterface

The KEM interface.

-
interface KemInterface {
    encSize: number;
    id: KemId;
    privateKeySize: number;
    publicKeySize: number;
    secretSize: number;
    decap(params: RecipientContextParams): Promise<ArrayBuffer>;
    deriveKeyPair(ikm: ArrayBuffer): Promise<CryptoKeyPair>;
    deserializePrivateKey(key: ArrayBuffer): Promise<CryptoKey>;
    deserializePublicKey(key: ArrayBuffer): Promise<CryptoKey>;
    encap(params: SenderContextParams): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>;
    generateKeyPair(): Promise<CryptoKeyPair>;
    importKey(format: "raw" | "jwk", key: ArrayBuffer | JsonWebKey, isPublic?: boolean): Promise<CryptoKey>;
    serializePrivateKey(key: CryptoKey): Promise<ArrayBuffer>;
    serializePublicKey(key: CryptoKey): Promise<ArrayBuffer>;
}

Properties

encSize +
interface KemInterface {
    encSize: number;
    id: KemId;
    privateKeySize: number;
    publicKeySize: number;
    secretSize: number;
    decap(params: RecipientContextParams): Promise<ArrayBuffer>;
    deriveKeyPair(ikm: ArrayBuffer): Promise<CryptoKeyPair>;
    deserializePrivateKey(key: ArrayBuffer): Promise<CryptoKey>;
    deserializePublicKey(key: ArrayBuffer): Promise<CryptoKey>;
    encap(params: SenderContextParams): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>;
    generateKeyPair(): Promise<CryptoKeyPair>;
    importKey(format: "raw" | "jwk", key: ArrayBuffer | JsonWebKey, isPublic?: boolean): Promise<CryptoKey>;
    serializePrivateKey(key: CryptoKey): Promise<ArrayBuffer>;
    serializePublicKey(key: CryptoKey): Promise<ArrayBuffer>;
}

Properties

encSize id privateKeySize publicKeySize @@ -14,42 +14,42 @@ serializePrivateKey serializePublicKey

Properties

ReadonlyencSize

encSize: number

The length in bytes of an encapsulated key produced by this KEM (Nenc).

-

Readonlyid

id: KemId

The KEM identifier.

-

ReadonlyprivateKeySize

privateKeySize: number

The length in bytes of an encoded private key for this KEM (Nsk).

-

ReadonlypublicKeySize

publicKeySize: number

The length in bytes of an encoded public key for this KEM (Npk).

-

ReadonlysecretSize

secretSize: number

The length in bytes of a KEM shared secret produced by this KEM (Nsecret).

-

Methods

decap

Readonlyid

id: KemId

The KEM identifier.

+

ReadonlyprivateKeySize

privateKeySize: number

The length in bytes of an encoded private key for this KEM (Nsk).

+

ReadonlypublicKeySize

publicKeySize: number

The length in bytes of an encoded public key for this KEM (Npk).

+

ReadonlysecretSize

secretSize: number

The length in bytes of a KEM shared secret produced by this KEM (Nsecret).

+

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

deriveKeyPair

deserializePrivateKey

deserializePrivateKey

deserializePublicKey

deserializePublicKey

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

generateKeyPair

importKey

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    Since key parameters for createSenderContext or createRecipientContext are CryptoKey format, you have to use this function to convert provided keys to CryptoKey.

    @@ -61,14 +61,14 @@
  • OptionalisPublic: boolean

    The indicator whether the provided key is a public key or not, which is used only for 'raw' format.

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/docs/interfaces/PreSharedKey.html b/docs/interfaces/PreSharedKey.html index 33a02581b..70c975614 100644 --- a/docs/interfaces/PreSharedKey.html +++ b/docs/interfaces/PreSharedKey.html @@ -1,6 +1,6 @@ PreSharedKey | hpke-js

Interface PreSharedKey

The pre-shared key interface.

-
interface PreSharedKey {
    id: ArrayBuffer;
    key: ArrayBuffer;
}

Properties

id +
interface PreSharedKey {
    id: ArrayBuffer;
    key: ArrayBuffer;
}

Properties

id key

Properties

id

id: ArrayBuffer

The key identifier.

-

key

key: ArrayBuffer

The body of the pre-shared key.

-

Settings

Member Visibility

On This Page

Properties
+

key

key: ArrayBuffer

The body of the pre-shared key.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/docs/interfaces/RecipientContextParams.html b/docs/interfaces/RecipientContextParams.html index c16a57c5b..6cf2e92b5 100644 --- a/docs/interfaces/RecipientContextParams.html +++ b/docs/interfaces/RecipientContextParams.html @@ -1,13 +1,13 @@ RecipientContextParams | hpke-js

Interface RecipientContextParams

The parameters used to setup the RecipientContext.

-
interface RecipientContextParams {
    enc: ArrayBuffer;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientKey: CryptoKeyPair | CryptoKey;
    senderPublicKey?: CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • RecipientContextParams

Properties

enc +
interface RecipientContextParams {
    enc: ArrayBuffer;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientKey: CryptoKeyPair | CryptoKey;
    senderPublicKey?: CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • RecipientContextParams

Properties

enc info? psk? recipientKey senderPublicKey?

Properties

enc

enc: ArrayBuffer

A byte string of the encapsulated key received from a sender.

-

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

-

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. +

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

+

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. The PSK should have at least 32 bytes :and the maxmum length of the PSK is 128 bytes.

-

recipientKey

recipientKey: CryptoKeyPair | CryptoKey

A recipient private key or a key pair.

-

OptionalsenderPublicKey

senderPublicKey?: CryptoKey

A sender public key for Auth mode.

-

Settings

Member Visibility

On This Page

Properties
+

recipientKey

recipientKey: CryptoKeyPair | CryptoKey

A recipient private key or a key pair.

+

OptionalsenderPublicKey

senderPublicKey?: CryptoKey

A sender public key for Auth mode.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/docs/interfaces/SenderContext.html b/docs/interfaces/SenderContext.html index 76c945927..947ff23d3 100644 --- a/docs/interfaces/SenderContext.html +++ b/docs/interfaces/SenderContext.html @@ -1,25 +1,25 @@ SenderContext | hpke-js

Interface SenderContext

The sender encryption context.

-
interface SenderContext {
    enc: ArrayBuffer;
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Properties

enc +
interface SenderContext {
    enc: ArrayBuffer;
    export(exporterContext: ArrayBuffer, len: number): Promise<ArrayBuffer>;
    open(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
    seal(data: ArrayBuffer, aad?: ArrayBuffer): Promise<ArrayBuffer>;
}

Hierarchy (view full)

Properties

enc

Methods

export open seal

Properties

enc

enc: ArrayBuffer

The encapsulated key generated by the sender.

-

Methods

export

Methods

export

  • export(exporterContext, len): Promise<ArrayBuffer>

  • Exports a secret using a variable-length pseudorandom function.

    If the error occurred, throws ExportError.

    Parameters

    • exporterContext: ArrayBuffer

      An exporter context string as bytes. The maximum length is 128 bytes.

    • len: number

      A desired length in bytes of the output secret.

    Returns Promise<ArrayBuffer>

    A secret string as bytes.

    Throws

    ExportError

    -

open

open

  • open(data, aad?): Promise<ArrayBuffer>

  • Decrypts data.

    If the error occurred, throws OpenError.

    Parameters

    • data: ArrayBuffer

      An encrypted text as bytes to be decrypted.

    • Optionalaad: ArrayBuffer

      Additional authenticated data as bytes fed by an application.

    Returns Promise<ArrayBuffer>

    A decrypted plain text as bytes.

    Throws

    OpenError

    -

seal

seal

Settings

Member Visibility

On This Page

Properties
Methods
+

Settings

Member Visibility

On This Page

Properties
Methods
diff --git a/docs/interfaces/SenderContextParams.html b/docs/interfaces/SenderContextParams.html index 9325738ad..c54f5de1a 100644 --- a/docs/interfaces/SenderContextParams.html +++ b/docs/interfaces/SenderContextParams.html @@ -1,13 +1,13 @@ SenderContextParams | hpke-js

Interface SenderContextParams

The parameters used to setup the SenderContext.

-
interface SenderContextParams {
    ekm?: ArrayBuffer | CryptoKeyPair;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientPublicKey: CryptoKey;
    senderKey?: CryptoKeyPair | CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • SenderContextParams

Properties

ekm? +
interface SenderContextParams {
    ekm?: ArrayBuffer | CryptoKeyPair;
    info?: ArrayBuffer;
    psk?: PreSharedKey;
    recipientPublicKey: CryptoKey;
    senderKey?: CryptoKeyPair | CryptoKey;
}

Hierarchy

  • KeyScheduleParams
    • SenderContextParams

Properties

ekm? info? psk? recipientPublicKey senderKey?

Properties

Optionalekm

ekm?: ArrayBuffer | CryptoKeyPair

DO NOT USE. FOR DEBUGGING/TESTING PURPOSES ONLY.

-

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

-

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. +

Optionalinfo

info?: ArrayBuffer

Application supplied information. The maximum length is 128 bytes.

+

Optionalpsk

psk?: PreSharedKey

A pre-shared key (PSK) held by both the sender and recipient. The PSK should have at least 32 bytes :and the maxmum length of the PSK is 128 bytes.

-

recipientPublicKey

recipientPublicKey: CryptoKey

A recipient public key.

-

OptionalsenderKey

senderKey?: CryptoKeyPair | CryptoKey

A sender private key or a key pair for Auth mode.

-

Settings

Member Visibility

On This Page

Properties
+

recipientPublicKey

recipientPublicKey: CryptoKey

A recipient public key.

+

OptionalsenderKey

senderKey?: CryptoKeyPair | CryptoKey

A sender private key or a key pair for Auth mode.

+

Settings

Member Visibility

On This Page

Properties
diff --git a/docs/types/Aead.html b/docs/types/Aead.html index 1ec487c6e..8439ed7b1 100644 --- a/docs/types/Aead.html +++ b/docs/types/Aead.html @@ -1,3 +1,3 @@ Aead | hpke-js

Type Alias Aead

Aead: typeof Aead[keyof typeof Aead]

The type alias of the supported AEAD identifiers.

Deprecated

Use AeadId instead.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/types/AeadId.html b/docs/types/AeadId.html index 2b903a040..aaeb26596 100644 --- a/docs/types/AeadId.html +++ b/docs/types/AeadId.html @@ -1,2 +1,2 @@ AeadId | hpke-js

Type Alias AeadId

AeadId: typeof AeadId[keyof typeof AeadId]

The type alias of the supported AEAD identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/types/Kdf.html b/docs/types/Kdf.html index ac66a58f4..09e4f98eb 100644 --- a/docs/types/Kdf.html +++ b/docs/types/Kdf.html @@ -1,3 +1,3 @@ Kdf | hpke-js

Type Alias Kdf

Kdf: typeof Kdf[keyof typeof Kdf]

The type alias of the supported KDF identifiers.

Deprecated

Use KdfId instead.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/types/KdfId.html b/docs/types/KdfId.html index 2fac2c682..5a1b179ee 100644 --- a/docs/types/KdfId.html +++ b/docs/types/KdfId.html @@ -1,2 +1,2 @@ KdfId | hpke-js

Type Alias KdfId

KdfId: typeof KdfId[keyof typeof KdfId]

The type alias of the supported KDF identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/types/Kem.html b/docs/types/Kem.html index d35038fba..a8a8b51bf 100644 --- a/docs/types/Kem.html +++ b/docs/types/Kem.html @@ -1,3 +1,3 @@ Kem | hpke-js

Type Alias Kem

Kem: typeof Kem[keyof typeof Kem]

The type alias of the supported KEM identifiers.

Deprecated

Use KdfId instead.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/types/KemId.html b/docs/types/KemId.html index 0b5652b8b..9535ab8e3 100644 --- a/docs/types/KemId.html +++ b/docs/types/KemId.html @@ -1,2 +1,2 @@ KemId | hpke-js

Type Alias KemId

KemId: typeof KemId[keyof typeof KemId]

The type alias of the supported KEM identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/types/RecipientContext.html b/docs/types/RecipientContext.html index d68dad11d..1492fb7c2 100644 --- a/docs/types/RecipientContext.html +++ b/docs/types/RecipientContext.html @@ -1,2 +1,2 @@ RecipientContext | hpke-js

Type Alias RecipientContext

RecipientContext: EncryptionContext

The recipient encryption context.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/variables/Aead-1.html b/docs/variables/Aead-1.html index 89fde64c5..32b9f8845 100644 --- a/docs/variables/Aead-1.html +++ b/docs/variables/Aead-1.html @@ -1,3 +1,3 @@ Aead | hpke-js

Variable AeadConst

Aead: {
    Aes128Gcm: 1;
    Aes256Gcm: 2;
    Chacha20Poly1305: 3;
    ExportOnly: 65535;
} = ...

The supported Authenticated Encryption with Associated Data (AEAD) identifiers.

Deprecated

Use AeadId instead.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/variables/AeadId-1.html b/docs/variables/AeadId-1.html index 80902b971..c70a462ca 100644 --- a/docs/variables/AeadId-1.html +++ b/docs/variables/AeadId-1.html @@ -1,2 +1,2 @@ AeadId | hpke-js

Variable AeadIdConst

AeadId: {
    Aes128Gcm: 1;
    Aes256Gcm: 2;
    Chacha20Poly1305: 3;
    ExportOnly: 65535;
} = Aead

The supported Authenticated Encryption with Associated Data (AEAD) identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/variables/Kdf-1.html b/docs/variables/Kdf-1.html index 0fa54811c..6b18a16e8 100644 --- a/docs/variables/Kdf-1.html +++ b/docs/variables/Kdf-1.html @@ -1,3 +1,3 @@ Kdf | hpke-js

Variable KdfConst

Kdf: {
    HkdfSha256: 1;
    HkdfSha384: 2;
    HkdfSha512: 3;
} = ...

The supported Key Derivation Function (KDF) identifiers.

Deprecated

Use KdfId instead.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/variables/KdfId-1.html b/docs/variables/KdfId-1.html index 7a92e9fa7..baf0ef9f6 100644 --- a/docs/variables/KdfId-1.html +++ b/docs/variables/KdfId-1.html @@ -1,2 +1,2 @@ KdfId | hpke-js

Variable KdfIdConst

KdfId: {
    HkdfSha256: 1;
    HkdfSha384: 2;
    HkdfSha512: 3;
} = Kdf

The supported Key Derivation Function (KDF) identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/variables/Kem-1.html b/docs/variables/Kem-1.html index 063f2d00b..7fd3388a9 100644 --- a/docs/variables/Kem-1.html +++ b/docs/variables/Kem-1.html @@ -1,3 +1,3 @@ Kem | hpke-js

Variable KemConst

Kem: {
    DhkemP256HkdfSha256: 16;
    DhkemP384HkdfSha384: 17;
    DhkemP521HkdfSha512: 18;
    DhkemSecp256k1HkdfSha256: 19;
    DhkemX25519HkdfSha256: 32;
    DhkemX448HkdfSha512: 33;
    HybridkemX25519Kyber768: 48;
    NotAssigned: 0;
} = ...

The supported Key Encapsulation Mechanism (KEM) identifiers.

Deprecated

Use KdfId instead.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/docs/variables/KemId-1.html b/docs/variables/KemId-1.html index b5acefda1..123772a63 100644 --- a/docs/variables/KemId-1.html +++ b/docs/variables/KemId-1.html @@ -1,2 +1,2 @@ KemId | hpke-js

Variable KemIdConst

KemId: {
    DhkemP256HkdfSha256: 16;
    DhkemP384HkdfSha384: 17;
    DhkemP521HkdfSha512: 18;
    DhkemSecp256k1HkdfSha256: 19;
    DhkemX25519HkdfSha256: 32;
    DhkemX448HkdfSha512: 33;
    HybridkemX25519Kyber768: 48;
    NotAssigned: 0;
} = Kem

The supported Key Encapsulation Mechanism (KEM) identifiers.

-

Settings

Member Visibility
+

Settings

Member Visibility
diff --git a/hybridkem-x25519-kyber768/docs/classes/HybridkemX25519Kyber768.html b/hybridkem-x25519-kyber768/docs/classes/HybridkemX25519Kyber768.html index 3096f06b4..9df205144 100644 --- a/hybridkem-x25519-kyber768/docs/classes/HybridkemX25519Kyber768.html +++ b/hybridkem-x25519-kyber768/docs/classes/HybridkemX25519Kyber768.html @@ -6,7 +6,7 @@

Example

import { Aes128Gcm, CipherSuite, HkdfSha256 } from "http://deno.land/x/hpke/core/mod.ts";
import { HybridkemX25519Kyber768 } from "https://deno.land/x/hpke/x/hybridkem-x25519-kyber768/mod.ts";
const suite = new CipherSuite({
  kem: new HybridkemX25519Kyber768(),
  kdf: new HkdfSha256(),
  aead: new Aes128Gcm(),
});
-

Hierarchy

  • Hybridkem
    • HybridkemX25519Kyber768

Constructors

constructor +

Hierarchy

  • Hybridkem
    • HybridkemX25519Kyber768

Constructors

constructor

Properties

_a _b _kdf @@ -26,38 +26,38 @@ importKey serializePrivateKey serializePublicKey -

Constructors

constructor

Properties

Protected_a

_a: DhkemInterface

Protected_b

_b: KemInterface

Protected_kdf

_kdf: KdfInterface

Readonlyauth

auth: boolean = false

ReadonlyencSize

encSize: number = 1120

Readonlyid

id: KemId = KemId.HybridkemX25519Kyber768

Readonlyname

name: string = "X25519Kyber25519"

ReadonlyprivateKeySize

privateKeySize: number = 2432

ReadonlypublicKeySize

publicKeySize: number = 1216

ReadonlysecretSize

secretSize: number = 64

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    +

Constructors

constructor

Properties

Protected_a

_a: DhkemInterface

Protected_b

_b: KemInterface

Protected_kdf

_kdf: KdfInterface

Readonlyauth

auth: boolean = false

ReadonlyencSize

encSize: number = 1120

Readonlyid

id: KemId = KemId.HybridkemX25519Kyber768

Readonlyname

name: string = "X25519Kyber25519"

ReadonlyprivateKeySize

privateKeySize: number = 2432

ReadonlypublicKeySize

publicKeySize: number = 1216

ReadonlysecretSize

secretSize: number = 64

Methods

decap

  • decap(params): Promise<ArrayBuffer>

  • Recovers the ephemeral symmetric key from its encapsulated representation enc.

    If the error occurred, throws DecapError.

    Parameters

    • params: RecipientContextParams

      A set of parameters for the recipient context.

    Returns Promise<ArrayBuffer>

    A shared secret as the output of the decapsulation step.

    Throws

    DecapError

    -

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    +

deriveKeyPair

  • deriveKeyPair(ikm): Promise<CryptoKeyPair>

  • Derives a key pair from the byte string ikm.

    If the error occurred, throws DeriveKeyPairError.

    Parameters

    • ikm: ArrayBuffer

      An input keying material.

    Returns Promise<CryptoKeyPair>

    A key pair derived.

    Throws

    DeriveKeyPairError

    -

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    +

deserializePrivateKey

  • deserializePrivateKey(key): Promise<CryptoKey>

  • Deserializes a private key as a byte string of length Nsk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    +

deserializePublicKey

  • deserializePublicKey(key): Promise<CryptoKey>

  • Deserializes a public key as a byte string of length Npk to CryptoKey.

    If the error occurred, throws DeserializeError.

    Parameters

    • key: ArrayBuffer

      A key as bytes.

    Returns Promise<CryptoKey>

    A CryptoKey.

    Throws

    DeserializeError

    -

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and +

encap

  • encap(params): Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

  • Generates an ephemeral, fixed-length symmetric key and a fixed-length encapsulation of the key that can be decapsulated by the holder of the private key corresponding to pkR.

    If the error occurred, throws EncapError.

    Parameters

    • params: SenderContextParams

      A set of parameters for the sender context.

    Returns Promise<{
        enc: ArrayBuffer;
        sharedSecret: ArrayBuffer;
    }>

    A shared secret and an encapsulated key as the output of the encapsulation step.

    Throws

    EncapError

    -

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    +

generateKeyPair

  • generateKeyPair(): Promise<CryptoKeyPair>

  • Generates a key pair.

    If the error occurred, throws NotSupportedError.

    Returns Promise<CryptoKeyPair>

    A key pair generated.

    Throws

    NotSupportedError

    -

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    +

importKey

  • importKey(format, key, isPublic?): Promise<CryptoKey>

  • Imports a public or private key and converts to a CryptoKey.

    Since key parameters for createSenderContext or createRecipientContext are CryptoKey format, you have to use this function to convert provided keys to CryptoKey.

    @@ -69,14 +69,14 @@
  • isPublic: boolean = true

    The indicator whether the provided key is a public key or not, which is used only for 'raw' format.

Returns Promise<CryptoKey>

A public or private CryptoKey.

Throws

DeserializeError

-

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    +

serializePrivateKey

  • serializePrivateKey(key): Promise<ArrayBuffer>

  • Serializes a private key as CryptoKey to a byte string of length Nsk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    +

serializePublicKey

  • serializePublicKey(key): Promise<ArrayBuffer>

  • Serializes a public key as CryptoKey to a byte string of length Npk.

    If the error occurred, throws SerializeError.

    Parameters

    • key: CryptoKey

      A CryptoKey.

    Returns Promise<ArrayBuffer>

    A key as bytes.

    Throws

    SerializeError

    -

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
+

Settings

Member Visibility

On This Page

Constructors
Properties
Methods
diff --git a/hybridkem-x25519-kyber768/src/hpke-hybridkem-x25519-kyber768.js b/hybridkem-x25519-kyber768/src/hpke-hybridkem-x25519-kyber768.js index 415762a84..078383070 100644 --- a/hybridkem-x25519-kyber768/src/hpke-hybridkem-x25519-kyber768.js +++ b/hybridkem-x25519-kyber768/src/hpke-hybridkem-x25519-kyber768.js @@ -1,4 +1,4 @@ -var Sn={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},de=Sn,kn={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},zt=kn;function Fe(t){if(!Number.isSafeInteger(t)||t<0)throw new Error(`Wrong positive integer: ${t}`)}function Pn(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}function qe(t,...e){if(!Pn(t))throw new Error("Expected Uint8Array");if(e.length>0&&!e.includes(t.length))throw new Error(`Expected Uint8Array of length ${e}, not of length=${t.length}`)}function mr(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");Fe(t.outputLen),Fe(t.blockLen)}function ye(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function nt(t,e){qe(t);let r=e.outputLen;if(t.lengthnew Uint32Array(t.buffer,t.byteOffset,Math.floor(t.byteLength/4));function _r(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}var st=t=>new DataView(t.buffer,t.byteOffset,t.byteLength),ce=(t,e)=>t<<32-e|t>>>e,Kn=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Kn)throw new Error("Non little-endian hardware is not supported");function Ut(t){if(typeof t!="string")throw new Error(`utf8ToBytes expected string, got ${typeof t}`);return new Uint8Array(new TextEncoder().encode(t))}function ve(t){if(typeof t=="string"&&(t=Ut(t)),!_r(t))throw new Error(`expected Uint8Array, got ${typeof t}`);return t}function vr(...t){let e=0;for(let n=0;nt().update(ve(n)).digest(),r=t();return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=()=>t(),e}function Er(t){let e=(n,i)=>t(i).update(ve(n)).digest(),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=n=>t(n),e}function Ht(t=32){if(it&&typeof it.getRandomValues=="function")return it.getRandomValues(new Uint8Array(t));throw new Error("crypto.getRandomValues must be defined")}var ot=class extends _e{constructor(e,r){super(),this.finished=!1,this.destroyed=!1,mr(e);let n=ve(r);if(this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,s=new Uint8Array(i);s.set(n.length>i?e.create().update(n).digest():n);for(let o=0;onew ot(t,e).update(r).digest();Ot.create=(t,e)=>new ot(t,e);function Ln(t,e,r,n){if(typeof t.setBigUint64=="function")return t.setBigUint64(e,r,n);let i=BigInt(32),s=BigInt(4294967295),o=Number(r>>i&s),a=Number(r&s),u=n?4:0,l=n?0:4;t.setUint32(e+u,o,n),t.setUint32(e+l,a,n)}var Te=class extends _e{constructor(e,r,n,i){super(),this.blockLen=e,this.outputLen=r,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=st(this.buffer)}update(e){ye(this);let{view:r,buffer:n,blockLen:i}=this;e=ve(e);let s=e.length;for(let o=0;oi-o&&(this.process(n,0),o=0);for(let h=o;hc.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;ht&e^~t&r,zn=(t,e,r)=>t&e^t&r^e&r,Un=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ee=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Ae=new Uint32Array(64),Tt=class extends Te{constructor(){super(64,32,8,!1),this.A=Ee[0]|0,this.B=Ee[1]|0,this.C=Ee[2]|0,this.D=Ee[3]|0,this.E=Ee[4]|0,this.F=Ee[5]|0,this.G=Ee[6]|0,this.H=Ee[7]|0}get(){let{A:e,B:r,C:n,D:i,E:s,F:o,G:a,H:u}=this;return[e,r,n,i,s,o,a,u]}set(e,r,n,i,s,o,a,u){this.A=e|0,this.B=r|0,this.C=n|0,this.D=i|0,this.E=s|0,this.F=o|0,this.G=a|0,this.H=u|0}process(e,r){for(let h=0;h<16;h++,r+=4)Ae[h]=e.getUint32(r,!1);for(let h=16;h<64;h++){let d=Ae[h-15],g=Ae[h-2],p=ce(d,7)^ce(d,18)^d>>>3,P=ce(g,17)^ce(g,19)^g>>>10;Ae[h]=P+Ae[h-7]+p+Ae[h-16]|0}let{A:n,B:i,C:s,D:o,E:a,F:u,G:l,H:c}=this;for(let h=0;h<64;h++){let d=ce(a,6)^ce(a,11)^ce(a,25),g=c+d+In(a,u,l)+Un[h]+Ae[h]|0,P=(ce(n,2)^ce(n,13)^ce(n,22))+zn(n,i,s)|0;c=l,l=u,u=a,a=o+g|0,o=s,s=i,i=n,n=g+P|0}n=n+this.A|0,i=i+this.B|0,s=s+this.C|0,o=o+this.D|0,a=a+this.E|0,u=u+this.F|0,l=l+this.G|0,c=c+this.H|0,this.set(n,i,s,o,a,u,l,c)}roundClean(){Ae.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var Ar=Oe(()=>new Tt);var Hn={},at=On(globalThis,Hn);function On(t,e){return new Proxy(t,{get(r,n,i){return n in e?e[n]:t[n]},set(r,n,i){return n in e&&delete e[n],t[n]=i,!0},deleteProperty(r,n){let i=!1;return n in e&&(delete e[n],i=!0),n in t&&(delete t[n],i=!0),i},ownKeys(r){let n=Reflect.ownKeys(t),i=Reflect.ownKeys(e),s=new Set(i);return[...n.filter(o=>!s.has(o)),...i]},defineProperty(r,n,i){return n in e&&delete e[n],Reflect.defineProperty(t,n,i),!0},getOwnPropertyDescriptor(r,n){return n in e?Reflect.getOwnPropertyDescriptor(e,n):Reflect.getOwnPropertyDescriptor(t,n)},has(r,n){return n in e||n in t}})}var Ge=class extends Error{constructor(e){let r;e instanceof Error?r=e.message:typeof e=="string"?r=e:r="",super(r),this.name=this.constructor.name}},pe=class extends Ge{},ee=class extends pe{};var te=class extends pe{},Y=class extends pe{},Ne=class extends pe{},Ce=class extends pe{};var Re=class extends pe{},fe=class extends pe{};async function Tn(){if(at!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:t}=await import("crypto");return t.subtle}catch(t){throw new fe(t)}}var ct=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await Tn())}};var re=new Uint8Array(0);var Sr=new Uint8Array([72,80,75,69,45,118,49]),Nt=class extends ct{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:zt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:re}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(e){this._suiteId=e}buildLabeledIkm(e,r){this._checkInit();let n=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+r.byteLength);return n.set(Sr,0),n.set(this._suiteId,7),n.set(e,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+e.byteLength),n}buildLabeledInfo(e,r,n){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+r.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(Sr,2),i.set(this._suiteId,9),i.set(e,9+this._suiteId.byteLength),i.set(r,9+this._suiteId.byteLength+e.byteLength),i}async extract(e,r){if(await this._setup(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new ee("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(e,r,n){await this._setup();let i=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),s=new ArrayBuffer(n),o=new Uint8Array(s),a=re,u=new Uint8Array(r),l=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let c=new Uint8Array(this.hashSize+u.length+1);for(let h=1,d=0;d=a.length?(o.set(a,d),d+=a.length):(o.set(a.slice(0,o.length-d),d),d+=o.length-d);return s}async extractAndExpand(e,r,n,i){await this._setup();let s=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:n},s,i*8)}async labeledExtract(e,r,n){return await this.extract(e,this.buildLabeledIkm(r,n))}async labeledExpand(e,r,n,i){return await this.expand(e,this.buildLabeledInfo(r,n,i),i)}_checkInit(){if(this._suiteId===re)throw new Error("Not initialized. Call init()")}},ut=class extends Nt{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:zt.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var $e=class extends ut{async extract(e,r){if(await this._setup(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return Ot(Ar,new Uint8Array(e),new Uint8Array(r));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var lt=new Uint8Array([75,69,77,0,0]);var ne=t=>typeof t=="object"&&t!==null&&typeof t.privateKey=="object"&&typeof t.publicKey=="object";function ft(t,e){if(e<=0)throw new Error("i2Osp: too small size");if(t>=256**e)throw new Error("i2Osp: too large integer");let r=new Uint8Array(e);for(let n=0;n>8;return r}function W(t,e){let r=new Uint8Array(t.length+e.length);return r.set(t,0),r.set(e,t.length),r}function Ct(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),r=atob(e),n=new Uint8Array(r.length);for(let i=0;i8192)throw new ee("Too long ikm");return await this._prim.deriveKeyPair(e)}async encap(e){let r;e.ekm===void 0?r=await this.generateKeyPair():ne(e.ekm)?r=e.ekm:r=await this.deriveKeyPair(e.ekm);let n=await this._prim.serializePublicKey(r.publicKey),i=await this._prim.serializePublicKey(e.recipientPublicKey);try{let s;if(e.senderKey===void 0)s=new Uint8Array(await this._prim.dh(r.privateKey,e.recipientPublicKey));else{let u=ne(e.senderKey)?e.senderKey.privateKey:e.senderKey,l=new Uint8Array(await this._prim.dh(r.privateKey,e.recipientPublicKey)),c=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));s=W(l,c)}let o;if(e.senderKey===void 0)o=W(new Uint8Array(n),new Uint8Array(i));else{let u=ne(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),l=await this._prim.serializePublicKey(u);o=Rn(new Uint8Array(n),new Uint8Array(i),new Uint8Array(l))}let a=await this._generateSharedSecret(s,o);return{enc:n,sharedSecret:a}}catch(s){throw new Ne(s)}}async decap(e){let r=await this._prim.deserializePublicKey(e.enc),n=ne(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,i=ne(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),s=await this._prim.serializePublicKey(i);try{let o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(n,r));else{let u=new Uint8Array(await this._prim.dh(n,r)),l=new Uint8Array(await this._prim.dh(n,e.senderPublicKey));o=W(u,l)}let a;if(e.senderPublicKey===void 0)a=W(new Uint8Array(e.enc),new Uint8Array(s));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);a=new Uint8Array(e.enc.byteLength+s.byteLength+u.byteLength),a.set(new Uint8Array(e.enc),0),a.set(new Uint8Array(s),e.enc.byteLength),a.set(new Uint8Array(u),e.enc.byteLength+s.byteLength)}return await this._generateSharedSecret(o,a)}catch(o){throw new Ce(o)}}async _generateSharedSecret(e,r){let n=this._kdf.buildLabeledIkm(Nn,e),i=this._kdf.buildLabeledInfo(Cn,r,this.secretSize);return await this._kdf.extractAndExpand(re,n,i,this.secretSize)}};var dt=BigInt(4294967295),Dt=BigInt(32);function kr(t,e=!1){return e?{h:Number(t&dt),l:Number(t>>Dt&dt)}:{h:Number(t>>Dt&dt)|0,l:Number(t&dt)|0}}function jt(t,e=!1){let r=new Uint32Array(t.length),n=new Uint32Array(t.length);for(let i=0;iBigInt(t>>>0)<>>0),jn=(t,e,r)=>t>>>r,Mn=(t,e,r)=>t<<32-r|e>>>r,Fn=(t,e,r)=>t>>>r|e<<32-r,qn=(t,e,r)=>t<<32-r|e>>>r,Gn=(t,e,r)=>t<<64-r|e>>>r-32,$n=(t,e,r)=>t>>>r-32|e<<64-r,Vn=(t,e)=>e,Zn=(t,e)=>t,Mt=(t,e,r)=>t<>>32-r,Ft=(t,e,r)=>e<>>32-r,qt=(t,e,r)=>e<>>64-r,Gt=(t,e,r)=>t<>>64-r;function Xn(t,e,r,n){let i=(e>>>0)+(n>>>0);return{h:t+r+(i/2**32|0)|0,l:i|0}}var Yn=(t,e,r)=>(t>>>0)+(e>>>0)+(r>>>0),Wn=(t,e,r,n)=>e+r+n+(t/2**32|0)|0,Qn=(t,e,r,n)=>(t>>>0)+(e>>>0)+(r>>>0)+(n>>>0),Jn=(t,e,r,n,i)=>e+r+n+i+(t/2**32|0)|0,ei=(t,e,r,n,i)=>(t>>>0)+(e>>>0)+(r>>>0)+(n>>>0)+(i>>>0),ti=(t,e,r,n,i,s)=>e+r+n+i+s+(t/2**32|0)|0;var ri={fromBig:kr,split:jt,toBig:Dn,shrSH:jn,shrSL:Mn,rotrSH:Fn,rotrSL:qn,rotrBH:Gn,rotrBL:$n,rotr32H:Vn,rotr32L:Zn,rotlSH:Mt,rotlSL:Ft,rotlBH:qt,rotlBL:Gt,add:Xn,add3L:Yn,add3H:Wn,add4L:Qn,add4H:Jn,add5H:ti,add5L:ei},_=ri;var[ni,ii]=_.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(t=>BigInt(t))),Be=new Uint32Array(80),Se=new Uint32Array(80),$t=class extends Te{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:e,Al:r,Bh:n,Bl:i,Ch:s,Cl:o,Dh:a,Dl:u,Eh:l,El:c,Fh:h,Fl:d,Gh:g,Gl:p,Hh:P,Hl:k}=this;return[e,r,n,i,s,o,a,u,l,c,h,d,g,p,P,k]}set(e,r,n,i,s,o,a,u,l,c,h,d,g,p,P,k){this.Ah=e|0,this.Al=r|0,this.Bh=n|0,this.Bl=i|0,this.Ch=s|0,this.Cl=o|0,this.Dh=a|0,this.Dl=u|0,this.Eh=l|0,this.El=c|0,this.Fh=h|0,this.Fl=d|0,this.Gh=g|0,this.Gl=p|0,this.Hh=P|0,this.Hl=k|0}process(e,r){for(let y=0;y<16;y++,r+=4)Be[y]=e.getUint32(r),Se[y]=e.getUint32(r+=4);for(let y=16;y<80;y++){let B=Be[y-15]|0,x=Se[y-15]|0,D=_.rotrSH(B,x,1)^_.rotrSH(B,x,8)^_.shrSH(B,x,7),ae=_.rotrSL(B,x,1)^_.rotrSL(B,x,8)^_.shrSL(B,x,7),H=Be[y-2]|0,T=Se[y-2]|0,q=_.rotrSH(H,T,19)^_.rotrBH(H,T,61)^_.shrSH(H,T,6),j=_.rotrSL(H,T,19)^_.rotrBL(H,T,61)^_.shrSL(H,T,6),X=_.add4L(ae,j,Se[y-7],Se[y-16]),N=_.add4H(X,D,q,Be[y-7],Be[y-16]);Be[y]=N|0,Se[y]=X|0}let{Ah:n,Al:i,Bh:s,Bl:o,Ch:a,Cl:u,Dh:l,Dl:c,Eh:h,El:d,Fh:g,Fl:p,Gh:P,Gl:k,Hh:F,Hl:Z}=this;for(let y=0;y<80;y++){let B=_.rotrSH(h,d,14)^_.rotrSH(h,d,18)^_.rotrBH(h,d,41),x=_.rotrSL(h,d,14)^_.rotrSL(h,d,18)^_.rotrBL(h,d,41),D=h&g^~h&P,ae=d&p^~d&k,H=_.add5L(Z,x,ae,ii[y],Se[y]),T=_.add5H(H,F,B,D,ni[y],Be[y]),q=H|0,j=_.rotrSH(n,i,28)^_.rotrBH(n,i,34)^_.rotrBH(n,i,39),X=_.rotrSL(n,i,28)^_.rotrBL(n,i,34)^_.rotrBL(n,i,39),N=n&s^n&a^s&a,Me=i&o^i&u^o&u;F=P|0,Z=k|0,P=g|0,k=p|0,g=h|0,p=d|0,{h,l:d}=_.add(l|0,c|0,T|0,q|0),l=a|0,c=u|0,a=s|0,u=o|0,s=n|0,o=i|0;let me=_.add3L(q,X,Me);n=_.add3H(me,T,j,N),i=me|0}({h:n,l:i}=_.add(this.Ah|0,this.Al|0,n|0,i|0)),{h:s,l:o}=_.add(this.Bh|0,this.Bl|0,s|0,o|0),{h:a,l:u}=_.add(this.Ch|0,this.Cl|0,a|0,u|0),{h:l,l:c}=_.add(this.Dh|0,this.Dl|0,l|0,c|0),{h,l:d}=_.add(this.Eh|0,this.El|0,h|0,d|0),{h:g,l:p}=_.add(this.Fh|0,this.Fl|0,g|0,p|0),{h:P,l:k}=_.add(this.Gh|0,this.Gl|0,P|0,k|0),{h:F,l:Z}=_.add(this.Hh|0,this.Hl|0,F|0,Z|0),this.set(n,i,s,o,a,u,l,c,h,d,g,p,P,k,F,Z)}roundClean(){Be.fill(0),Se.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var Vt=Oe(()=>new $t);var Ks=BigInt(0),si=BigInt(1),oi=BigInt(2);function Ve(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}var ai=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function yt(t){if(!Ve(t))throw new Error("Uint8Array expected");let e="";for(let r=0;r=be._0&&t<=be._9)return t-be._0;if(t>=be._A&&t<=be._F)return t-(be._A-10);if(t>=be._a&&t<=be._f)return t-(be._a-10)}function Lr(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);let e=t.length,r=e/2;if(e%2)throw new Error("padded hex string expected, got unpadded hex of length "+e);let n=new Uint8Array(r);for(let i=0,s=0;i(oi<typeof t=="bigint",function:t=>typeof t=="function",boolean:t=>typeof t=="boolean",string:t=>typeof t=="string",stringOrUint8Array:t=>typeof t=="string"||Ve(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>typeof t=="function"&&Number.isSafeInteger(t.outputLen)};function ke(t,e,r={}){let n=(i,s,o)=>{let a=ci[s];if(typeof a!="function")throw new Error(`Invalid validator "${s}", expected function`);let u=t[i];if(!(o&&u===void 0)&&!a(u,t))throw new Error(`Invalid param ${String(i)}=${u} (${typeof u}), expected ${s}`)};for(let[i,s]of Object.entries(e))n(i,s,!1);for(let[i,s]of Object.entries(r))n(i,s,!0);return t}var C=BigInt(0),O=BigInt(1),ze=BigInt(2),li=BigInt(3),Yt=BigInt(4),Ur=BigInt(5),Hr=BigInt(8),fi=BigInt(9),hi=BigInt(16);function U(t,e){let r=t%e;return r>=C?r:e+r}function Wt(t,e,r){if(r<=C||e 0");if(r===O)return C;let n=O;for(;e>C;)e&O&&(n=n*t%r),t=t*t%r,e>>=O;return n}function ie(t,e,r){let n=t;for(;e-- >C;)n*=n,n%=r;return n}function Or(t,e){if(t===C||e<=C)throw new Error(`invert: expected positive integers, got n=${t} mod=${e}`);let r=U(t,e),n=e,i=C,s=O,o=O,a=C;for(;r!==C;){let l=n/r,c=n%r,h=i-o*l,d=s-a*l;n=r,r=c,i=o,s=a,o=h,a=d}if(n!==O)throw new Error("invert: does not exist");return U(i,e)}function di(t){let e=(t-O)/ze,r,n,i;for(r=t-O,n=0;r%ze===C;r/=ze,n++);for(i=ze;i(U(t,e)&O)===O,pi=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Nr(t){let e={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},r=pi.reduce((n,i)=>(n[i]="function",n),e);return ke(t,r)}function bi(t,e,r){if(r 0");if(r===C)return t.ONE;if(r===O)return e;let n=t.ONE,i=e;for(;r>C;)r&O&&(n=t.mul(n,i)),i=t.sqr(i),r>>=O;return n}function wi(t,e){let r=new Array(e.length),n=e.reduce((s,o,a)=>t.is0(o)?s:(r[a]=s,t.mul(s,o)),t.ONE),i=t.inv(n);return e.reduceRight((s,o,a)=>t.is0(o)?s:(r[a]=t.mul(s,r[a]),t.mul(s,o)),i),r}function Qt(t,e){let r=e!==void 0?e:t.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function Cr(t,e,r=!1,n={}){if(t<=C)throw new Error(`Expected Field ORDER > 0, got ${t}`);let{nBitLength:i,nByteLength:s}=Qt(t,e);if(s>2048)throw new Error("Field lengths over 2048 bytes are not supported");let o=yi(t),a=Object.freeze({ORDER:t,BITS:i,BYTES:s,MASK:zr(i),ZERO:C,ONE:O,create:u=>U(u,t),isValid:u=>{if(typeof u!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof u}`);return C<=u&&uu===C,isOdd:u=>(u&O)===O,neg:u=>U(-u,t),eql:(u,l)=>u===l,sqr:u=>U(u*u,t),add:(u,l)=>U(u+l,t),sub:(u,l)=>U(u-l,t),mul:(u,l)=>U(u*l,t),pow:(u,l)=>bi(a,u,l),div:(u,l)=>U(u*Or(l,t),t),sqrN:u=>u*u,addN:(u,l)=>u+l,subN:(u,l)=>u-l,mulN:(u,l)=>u*l,inv:u=>Or(u,t),sqrt:n.sqrt||(u=>o(a,u)),invertBatch:u=>wi(a,u),cmov:(u,l,c)=>c?l:u,toBytes:u=>r?Ie(u,s):Zt(u,s),fromBytes:u=>{if(u.length!==s)throw new Error(`Fp.fromBytes: expected ${s}, got ${u.length}`);return r?we(u):Ir(u)}});return Object.freeze(a)}function Rr(t,e){if(!t.isOdd)throw new Error("Field doesn't have isOdd");let r=t.sqrt(e);return t.isOdd(r)?t.neg(r):r}var xi=BigInt(0),Jt=BigInt(1);function Dr(t,e){let r=(i,s)=>{let o=s.negate();return i?o:s},n=i=>{let s=Math.ceil(e/i)+1,o=2**(i-1);return{windows:s,windowSize:o}};return{constTimeNegate:r,unsafeLadder(i,s){let o=t.ZERO,a=i;for(;s>xi;)s&Jt&&(o=o.add(a)),a=a.double(),s>>=Jt;return o},precomputeWindow(i,s){let{windows:o,windowSize:a}=n(s),u=[],l=i,c=l;for(let h=0;h>=g,k>u&&(k-=d,o+=Jt);let F=P,Z=P+Math.abs(k)-1,y=p%2!==0,B=k<0;k===0?c=c.add(r(y,s[F])):l=l.add(r(B,s[Z]))}return{p:l,f:c}},wNAFCached(i,s,o,a){let u=i._WINDOW_SIZE||1,l=s.get(i);return l||(l=this.precomputeWindow(i,u),u!==1&&s.set(i,a(l))),this.wNAF(u,l,o)}}}function jr(t){return Nr(t.Fp),ke(t,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Qt(t.n,t.nBitLength),...t,p:t.Fp.ORDER})}var ue=BigInt(0),J=BigInt(1),pt=BigInt(2),mi=BigInt(8),gi={zip215:!0};function _i(t){let e=jr(t);return ke(t,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}function er(t){let e=_i(t),{Fp:r,n,prehash:i,hash:s,randomBytes:o,nByteLength:a,h:u}=e,l=pt<{try{return{isValid:!0,value:r.sqrt(b*r.inv(f))}}catch{return{isValid:!1,value:ue}}}),d=e.adjustScalarBytes||(b=>b),g=e.domain||((b,f,w)=>{if(f.length||w)throw new Error("Contexts/pre-hash are not supported");return b}),p=b=>typeof b=="bigint"&&uep(b)&&p(f)&&bb===ue||P(b,l);function F(b,f){if(P(b,f))return b;throw new Error(`Expected valid scalar < ${f}, got ${typeof b} ${b}`)}function Z(b){return b===ue?b:F(b,n)}let y=new Map;function B(b){if(!(b instanceof x))throw new Error("ExtendedPoint expected")}class x{constructor(f,w,m,v){if(this.ex=f,this.ey=w,this.ez=m,this.et=v,!k(f))throw new Error("x required");if(!k(w))throw new Error("y required");if(!k(m))throw new Error("z required");if(!k(v))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(f){if(f instanceof x)throw new Error("extended point not allowed");let{x:w,y:m}=f||{};if(!k(w)||!k(m))throw new Error("invalid affine point");return new x(w,m,J,c(w*m))}static normalizeZ(f){let w=r.invertBatch(f.map(m=>m.ez));return f.map((m,v)=>m.toAffine(w[v])).map(x.fromAffine)}_setWindowSize(f){this._WINDOW_SIZE=f,y.delete(this)}assertValidity(){let{a:f,d:w}=e;if(this.is0())throw new Error("bad point: ZERO");let{ex:m,ey:v,ez:E,et:S}=this,I=c(m*m),A=c(v*v),K=c(E*E),M=c(K*K),$=c(I*f),le=c(K*c($+A)),V=c(M+c(w*c(I*A)));if(le!==V)throw new Error("bad point: equation left != right (1)");let ge=c(m*v),he=c(E*S);if(ge!==he)throw new Error("bad point: equation left != right (2)")}equals(f){B(f);let{ex:w,ey:m,ez:v}=this,{ex:E,ey:S,ez:I}=f,A=c(w*I),K=c(E*v),M=c(m*I),$=c(S*v);return A===K&&M===$}is0(){return this.equals(x.ZERO)}negate(){return new x(c(-this.ex),this.ey,this.ez,c(-this.et))}double(){let{a:f}=e,{ex:w,ey:m,ez:v}=this,E=c(w*w),S=c(m*m),I=c(pt*c(v*v)),A=c(f*E),K=w+m,M=c(c(K*K)-E-S),$=A+S,le=$-I,V=A-S,ge=c(M*le),he=c($*V),tt=c(M*V),rt=c(le*$);return new x(ge,he,rt,tt)}add(f){B(f);let{a:w,d:m}=e,{ex:v,ey:E,ez:S,et:I}=this,{ex:A,ey:K,ez:M,et:$}=f;if(w===BigInt(-1)){let hr=c((E-v)*(K+A)),dr=c((E+v)*(K-A)),It=c(dr-hr);if(It===ue)return this.double();let yr=c(S*pt*$),pr=c(I*pt*M),br=pr+yr,wr=dr+hr,xr=pr-yr,vn=c(br*It),En=c(wr*xr),An=c(br*xr),Bn=c(It*wr);return new x(vn,En,Bn,An)}let le=c(v*A),V=c(E*K),ge=c(I*m*$),he=c(S*M),tt=c((v+E)*(A+K)-le-V),rt=he-ge,lr=he+ge,fr=c(V-w*le),xn=c(tt*rt),mn=c(lr*fr),gn=c(tt*fr),_n=c(rt*lr);return new x(xn,mn,_n,gn)}subtract(f){return this.add(f.negate())}wNAF(f){return H.wNAFCached(this,y,f,x.normalizeZ)}multiply(f){let{p:w,f:m}=this.wNAF(F(f,n));return x.normalizeZ([w,m])[0]}multiplyUnsafe(f){let w=Z(f);return w===ue?ae:this.equals(ae)||w===J?this:this.equals(D)?this.wNAF(w).p:H.unsafeLadder(this,w)}isSmallOrder(){return this.multiplyUnsafe(u).is0()}isTorsionFree(){return H.unsafeLadder(this,n).is0()}toAffine(f){let{ex:w,ey:m,ez:v}=this,E=this.is0();f==null&&(f=E?mi:r.inv(v));let S=c(w*f),I=c(m*f),A=c(v*f);if(E)return{x:ue,y:J};if(A!==J)throw new Error("invZ was invalid");return{x:S,y:I}}clearCofactor(){let{h:f}=e;return f===J?this:this.multiplyUnsafe(f)}static fromHex(f,w=!1){let{d:m,a:v}=e,E=r.BYTES;f=Q("pointHex",f,E);let S=f.slice(),I=f[E-1];S[E-1]=I&-129;let A=we(S);A===ue||(w?F(A,l):F(A,r.ORDER));let K=c(A*A),M=c(K-J),$=c(m*K-v),{isValid:le,value:V}=h(M,$);if(!le)throw new Error("Point.fromHex: invalid y coordinate");let ge=(V&J)===J,he=(I&128)!==0;if(!w&&V===ue&&he)throw new Error("Point.fromHex: x=0 and x_0=1");return he!==ge&&(V=c(-V)),x.fromAffine({x:V,y:A})}static fromPrivateKey(f){return j(f).point}toRawBytes(){let{x:f,y:w}=this.toAffine(),m=Ie(w,r.BYTES);return m[m.length-1]|=f&J?128:0,m}toHex(){return yt(this.toRawBytes())}}x.BASE=new x(e.Gx,e.Gy,J,c(e.Gx*e.Gy)),x.ZERO=new x(ue,J,J,ue);let{BASE:D,ZERO:ae}=x,H=Dr(x,a*8);function T(b){return U(b,n)}function q(b){return T(we(b))}function j(b){let f=a;b=Q("private key",b,f);let w=Q("hashed private key",s(b),2*f),m=d(w.slice(0,f)),v=w.slice(f,2*f),E=q(m),S=D.multiply(E),I=S.toRawBytes();return{head:m,prefix:v,scalar:E,point:S,pointBytes:I}}function X(b){return j(b).pointBytes}function N(b=new Uint8Array,...f){let w=Xt(...f);return q(s(g(w,Q("context",b),!!i)))}function Me(b,f,w={}){b=Q("message",b),i&&(b=i(b));let{prefix:m,scalar:v,pointBytes:E}=j(f),S=N(w.context,m,b),I=D.multiply(S).toRawBytes(),A=N(w.context,I,E,b),K=T(S+A*v);Z(K);let M=Xt(I,Ie(K,r.BYTES));return Q("result",M,a*2)}let me=gi;function Je(b,f,w,m=me){let{context:v,zip215:E}=m,S=r.BYTES;b=Q("signature",b,2*S),f=Q("message",f),i&&(f=i(f));let I=we(b.slice(S,2*S)),A,K,M;try{A=x.fromHex(w,E),K=x.fromHex(b.slice(0,S),E),M=D.multiplyUnsafe(I)}catch{return!1}if(!E&&A.isSmallOrder())return!1;let $=N(v,K.toRawBytes(),A.toRawBytes(),f);return K.add(A.multiplyUnsafe($)).subtract(M).clearCofactor().equals(x.ZERO)}return D._setWindowSize(8),{CURVE:e,getPublicKey:X,sign:Me,verify:Je,ExtendedPoint:x,utils:{getExtendedPublicKey:j,randomPrivateKey:()=>o(r.BYTES),precompute(b=8,f=x.BASE){return f._setWindowSize(b),f.multiply(BigInt(3)),f}}}}var Ze=BigInt(0),tr=BigInt(1);function vi(t){return ke(t,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...t})}function Mr(t){let e=vi(t),{P:r}=e,n=y=>U(y,r),i=e.montgomeryBits,s=Math.ceil(i/8),o=e.nByteLength,a=e.adjustScalarBytes||(y=>y),u=e.powPminus2||(y=>Wt(y,r-BigInt(2),r));function l(y,B,x){let D=n(y*(B-x));return B=n(B-D),x=n(x+D),[B,x]}function c(y){if(typeof y=="bigint"&&Ze<=y&&y=Ze;me--){let Je=D>>me&tr;X^=Je,N=l(X,H,q),H=N[0],q=N[1],N=l(X,T,j),T=N[0],j=N[1],X=Je;let et=H+T,b=n(et*et),f=H-T,w=n(f*f),m=b-w,v=q+j,E=q-j,S=n(E*et),I=n(v*f),A=S+I,K=S-I;q=n(A*A),j=n(ae*n(K*K)),H=n(b*w),T=n(m*(b+n(h*m)))}N=l(X,H,q),H=N[0],q=N[1],N=l(X,T,j),T=N[0],j=N[1];let Me=u(T);return n(H*Me)}function g(y){return Ie(n(y),s)}function p(y){let B=Q("u coordinate",y,s);return o===32&&(B[31]&=127),we(B)}function P(y){let B=Q("scalar",y),x=B.length;if(x!==s&&x!==o)throw new Error(`Expected ${s} or ${o} bytes, got ${x}`);return we(a(B))}function k(y,B){let x=p(B),D=P(y),ae=d(x,D);if(ae===Ze)throw new Error("Invalid private or public key received");return g(ae)}let F=g(e.Gu);function Z(y){return k(y,F)}return{scalarMult:k,scalarMultBase:Z,getSharedSecret:(y,B)=>k(y,B),getPublicKey:y=>Z(y),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:F}}var Xe=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),Fr=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),Vs=BigInt(0),Ei=BigInt(1),rr=BigInt(2),Ai=BigInt(5),qr=BigInt(10),Bi=BigInt(20),Si=BigInt(40),Gr=BigInt(80);function $r(t){let e=Xe,n=t*t%e*t%e,i=ie(n,rr,e)*n%e,s=ie(i,Ei,e)*t%e,o=ie(s,Ai,e)*s%e,a=ie(o,qr,e)*o%e,u=ie(a,Bi,e)*a%e,l=ie(u,Si,e)*u%e,c=ie(l,Gr,e)*l%e,h=ie(c,Gr,e)*l%e,d=ie(h,qr,e)*o%e;return{pow_p_5_8:ie(d,rr,e)*t%e,b2:n}}function Vr(t){return t[0]&=248,t[31]&=127,t[31]|=64,t}function ki(t,e){let r=Xe,n=U(e*e*e,r),i=U(n*n*e,r),s=$r(t*i).pow_p_5_8,o=U(t*n*s,r),a=U(e*o*o,r),u=o,l=U(o*Fr,r),c=a===t,h=a===U(-t,r),d=a===U(-t*Fr,r);return c&&(o=u),(h||d)&&(o=l),Tr(o,r)&&(o=U(-o,r)),{isValid:c||h,value:o}}var xe=Cr(Xe,void 0,!0),Zr={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:xe,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:Vt,randomBytes:Ht,adjustScalarBytes:Vr,uvRatio:ki};function Xr(t,e,r){if(e.length>255)throw new Error("Context is too big");return vr(Ut("SigEd25519 no Ed25519 collisions"),new Uint8Array([r?1:0,e.length]),e,t)}var Zs=er({...Zr,domain:Xr}),Xs=er({...Zr,domain:Xr,prehash:Vt}),bt=Mr({P:Xe,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:t=>{let e=Xe,{pow_p_5_8:r,b2:n}=$r(t);return U(ie(r,BigInt(3),e)*n,e)},adjustScalarBytes:Vr,randomBytes:Ht});var Pi=(xe.ORDER+BigInt(3))/BigInt(8),Ys=xe.pow(rr,Pi),Ws=xe.sqrt(xe.neg(xe.ONE)),Qs=(xe.ORDER-BigInt(5))/BigInt(8),Js=BigInt(486662);var eo=Rr(xe,xe.neg(BigInt(486664)));var to=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),ro=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),no=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),io=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");var so=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var Ye=["deriveBits"],wt=new Uint8Array([100,107,112,95,112,114,107]),xt=new Uint8Array([115,107]);var G=class{constructor(e,r,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:e},this.usages=i,n==="public"&&(this.usages=[])}};var De="X25519",mt=class{constructor(e){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=e,this._nPk=32,this._nSk=32}async serializePublicKey(e){try{return await this._serializePublicKey(e)}catch(r){throw new te(r)}}async deserializePublicKey(e){try{return await this._importRawKey(e,!0)}catch(r){throw new Y(r)}}async serializePrivateKey(e){try{return await this._serializePrivateKey(e)}catch(r){throw new te(r)}}async deserializePrivateKey(e){try{return await this._importRawKey(e,!1)}catch(r){throw new Y(r)}}async importKey(e,r,n){try{if(e==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new Y(i)}}async generateKeyPair(){try{let e=bt.utils.randomPrivateKey(),r=new G(De,e,"private",Ye);return{publicKey:await this.derivePublicKey(r),privateKey:r}}catch(e){throw new fe(e)}}async deriveKeyPair(e){try{let r=await this._hkdf.labeledExtract(re,wt,new Uint8Array(e)),n=await this._hkdf.labeledExpand(r,xt,re,this._nSk),i=new G(De,new Uint8Array(n),"private",Ye);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new Re(r)}}async derivePublicKey(e){try{return await this._derivePublicKey(e)}catch(r){throw new Y(r)}}async dh(e,r){try{return await this._dh(e,r)}catch(n){throw new te(n)}}_serializePublicKey(e){return new Promise(r=>{r(e.key.buffer)})}_serializePrivateKey(e){return new Promise(r=>{r(e.key.buffer)})}_importRawKey(e,r){return new Promise((n,i)=>{r&&e.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!r&&e.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new G(De,new Uint8Array(e),r?"public":"private",r?[]:Ye))})}_importJWK(e,r){return new Promise((n,i)=>{(typeof e.kty>"u"||e.kty!=="OKP")&&i(new Error(`Invalid kty: ${e.kty}`)),(typeof e.crv>"u"||e.crv!=="X25519")&&i(new Error(`Invalid crv: ${e.crv}`)),r?(typeof e.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof e.x>"u"&&i(new Error("Invalid key: `x` not found")),n(new G(De,Ct(e.x),"public"))):(typeof e.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new G(De,Ct(e.d),"private",Ye)))})}_derivePublicKey(e){return new Promise((r,n)=>{try{let i=bt.getPublicKey(e.key);r(new G(De,i,"public"))}catch(i){n(i)}})}_dh(e,r){return new Promise((n,i)=>{try{n(bt.getSharedSecret(e.key,r.key).buffer)}catch(s){i(s)}})}};var gt=class{constructor(e,r,n,i){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:de.NotAssigned}),Object.defineProperty(this,"name",{enumerable:!0,configurable:!0,writable:!0,value:""}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_a",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_b",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.id=e,this._a=r,this._b=n,this._kdf=i;let s=new Uint8Array(lt);s.set(ft(this.id,2),3),this._kdf.init(s)}async serializePublicKey(e){try{return await this._serializePublicKey(e)}catch(r){throw new te(r)}}async deserializePublicKey(e){try{return await this._deserializePublicKey(e)}catch(r){throw new Y(r)}}async serializePrivateKey(e){try{return await this._serializePrivateKey(e)}catch(r){throw new te(r)}}async deserializePrivateKey(e){try{return await this._deserializePrivateKey(e)}catch(r){throw new Y(r)}}async generateKeyPair(){let e=await this._a.generateKeyPair(),r=await this._b.generateKeyPair(),n=await this._a.serializePublicKey(e.publicKey),i=await this._a.serializePrivateKey(e.privateKey),s=await this._b.serializePublicKey(r.publicKey),o=await this._b.serializePrivateKey(r.privateKey);return{publicKey:await this.deserializePublicKey(W(new Uint8Array(n),new Uint8Array(s))),privateKey:await this.deserializePrivateKey(W(new Uint8Array(i),new Uint8Array(o)))}}async deriveKeyPair(e){let r=await this._kdf.labeledExtract(re,wt,new Uint8Array(e)),n=new Uint8Array(await this._kdf.labeledExpand(r,xt,re,96)),i=n.slice(0,32),s=n.slice(32,96),o=await this._a.deriveKeyPair(i),a=await this._b.deriveKeyPair(s),u=await this._a.serializePublicKey(o.publicKey),l=await this._a.serializePrivateKey(o.privateKey),c=await this._b.serializePublicKey(a.publicKey),h=await this._b.serializePrivateKey(a.privateKey);return{publicKey:await this.deserializePublicKey(W(new Uint8Array(u),new Uint8Array(c))),privateKey:await this.deserializePrivateKey(W(new Uint8Array(l),new Uint8Array(h)))}}async importKey(e,r,n=!0){if(e!=="raw")throw new fe("'jwk' is not supported");if(!(r instanceof ArrayBuffer))throw new ee("Invalid type of key");return n?await this.deserializePublicKey(r):await this.deserializePrivateKey(r)}async encap(e){let r,n;if(e.ekm!==void 0&&!ne(e.ekm)){if(e.ekm.byteLength!==64)throw new ee("ekm must be 64 bytes in length");r=e.ekm.slice(0,32),n=e.ekm.slice(32)}let i=new Uint8Array(await this.serializePublicKey(e.recipientPublicKey)),s=await this._a.deserializePublicKey(i.slice(0,this._a.publicKeySize)),o=await this._b.deserializePublicKey(i.slice(this._a.publicKeySize)),a=await this._a.encap({recipientPublicKey:s,ekm:r}),u=await this._b.encap({recipientPublicKey:o,ekm:n});return{sharedSecret:W(new Uint8Array(a.sharedSecret),new Uint8Array(u.sharedSecret)),enc:W(new Uint8Array(a.enc),new Uint8Array(u.enc))}}async decap(e){let r=ne(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=new Uint8Array(await this.serializePrivateKey(r)),i=await this._a.deserializePrivateKey(n.slice(0,this._a.privateKeySize)),s=await this._b.deserializePrivateKey(n.slice(this._a.privateKeySize)),o=await this._a.decap({recipientKey:i,enc:e.enc.slice(0,this._a.encSize)}),a=await this._b.decap({recipientKey:s,enc:e.enc.slice(this._a.encSize)});return W(new Uint8Array(o),new Uint8Array(a))}_serializePublicKey(e){return new Promise((r,n)=>{e.type!=="public"&&n(new Error("Not public key")),e.algorithm.name!==this.name&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePublicKey(e){return new Promise((r,n)=>{e.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new G(this.name,new Uint8Array(e),"public"))})}_serializePrivateKey(e){return new Promise((r,n)=>{e.type!=="private"&&n(new Error("Not private key")),e.algorithm.name!==this.name&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePrivateKey(e){return new Promise((r,n)=>{e.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new G(this.name,new Uint8Array(e),"private",["deriveBits"]))})}};var _t=[2285,2571,2970,1812,1493,1422,287,202,3158,622,1577,182,962,2127,1855,1468,573,2004,264,383,2500,1458,1727,3199,2648,1017,732,608,1787,411,3124,1758,1223,652,2777,1015,2036,1491,3047,1785,516,3321,3009,2663,1711,2167,126,1469,2476,3239,3058,830,107,1908,3082,2378,2931,961,1821,2604,448,2264,677,2054,2226,430,555,843,2078,871,1550,105,422,587,177,3094,3038,2869,1574,1653,3083,778,1159,3182,2552,1483,2727,1119,1739,644,2457,349,418,329,3173,3254,817,1097,603,610,1322,2044,1864,384,2114,3193,1218,1994,2455,220,2142,1670,2144,1799,2051,794,1819,2475,2459,478,3221,3021,996,991,958,1869,1522,1628],nr=[1701,1807,1460,2371,2338,2333,308,108,2851,870,854,1510,2535,1278,1530,1185,1659,1187,3109,874,1335,2111,136,1215,2945,1465,1285,2007,2719,2726,2232,2512,75,156,3e3,2911,2980,872,2685,1590,2210,602,1846,777,147,2170,2551,246,1676,1755,460,291,235,3152,2742,2907,3224,1779,2458,1251,2486,2774,2899,1103,1275,2652,1065,2881,725,1508,2368,398,951,247,1421,3222,2499,271,90,853,1860,3203,1162,1618,666,320,8,2813,1544,282,1838,1293,2314,552,2677,2106,1571,205,2918,1542,2721,2597,2312,681,130,1602,1871,829,2946,3065,1325,2756,1861,1474,1202,2367,3147,1752,2707,171,3127,3042,1907,1836,1517,359,758,1441];var[Qr,Jr,en]=[[],[],[]],Ki=BigInt(0),We=BigInt(1),Li=BigInt(2),Ii=BigInt(7),zi=BigInt(256),Ui=BigInt(113);for(let t=0,e=We,r=1,n=0;t<24;t++){[r,n]=[n,(2*r+3*n)%5],Qr.push(2*(5*n+r)),Jr.push((t+1)*(t+2)/2%64);let i=Ki;for(let s=0;s<7;s++)e=(e<>Ii)*Ui)%zi,e&Li&&(i^=We<<(We<r>32?qt(t,e,r):Mt(t,e,r),Wr=(t,e,r)=>r>32?Gt(t,e,r):Ft(t,e,r);function Ti(t,e=24){let r=new Uint32Array(10);for(let n=24-e;n<24;n++){for(let o=0;o<10;o++)r[o]=t[o]^t[o+10]^t[o+20]^t[o+30]^t[o+40];for(let o=0;o<10;o+=2){let a=(o+8)%10,u=(o+2)%10,l=r[u],c=r[u+1],h=Yr(l,c,1)^r[a],d=Wr(l,c,1)^r[a+1];for(let g=0;g<50;g+=10)t[o+g]^=h,t[o+g+1]^=d}let i=t[2],s=t[3];for(let o=0;o<24;o++){let a=Jr[o],u=Yr(i,s,a),l=Wr(i,s,a),c=Qr[o];i=t[c],s=t[c+1],t[c]=u,t[c+1]=l}for(let o=0;o<50;o+=10){for(let a=0;a<10;a++)r[a]=t[o+a];for(let a=0;a<10;a++)t[o+a]^=~r[(a+2)%10]&r[(a+4)%10]}t[0]^=Hi[n],t[1]^=Oi[n]}r.fill(0)}var vt=class t extends _e{constructor(e,r,n,i=!1,s=24){if(super(),this.blockLen=e,this.suffix=r,this.outputLen=n,this.enableXOF=i,this.rounds=s,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,Fe(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=gr(this.state)}keccak(){Ti(this.state32,this.rounds),this.posOut=0,this.pos=0}update(e){ye(this);let{blockLen:r,state:n}=this;e=ve(e);let i=e.length;for(let s=0;s=n&&this.keccak();let o=Math.min(n-this.posOut,s-i);e.set(r.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Fe(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(nt(e,this),this.finished)throw new Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){let{blockLen:r,suffix:n,outputLen:i,rounds:s,enableXOF:o}=this;return e||(e=new t(r,n,i,o,s)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=s,e.suffix=n,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}},Pe=(t,e,r)=>Oe(()=>new vt(e,t,r)),Ko=Pe(6,144,224/8),tn=Pe(6,136,256/8),Lo=Pe(6,104,384/8),rn=Pe(6,72,512/8),Io=Pe(1,144,224/8),zo=Pe(1,136,256/8),Uo=Pe(1,104,384/8),Ho=Pe(1,72,512/8),nn=(t,e,r)=>Er((n={})=>new vt(e,t,n.dkLen===void 0?r:n.dkLen,!0)),sn=nn(31,168,128/8),Et=nn(31,136,256/8);var Ue=class extends Ge{};function se(t){return t%256}function oe(t){return t>=-32768&&t<=32767?t:t<-32768?(t=t+32769,t=t%65536,32767+t):(t=t-32768,t=t%65536,-32768+t)}function L(t){return t%65536}function At(t){return t>=-2147483648&&t<=2147483647?t:t<-2147483648?(t=t+2147483649,t=t%4294967296,2147483647+t):(t=t-2147483648,t=t%4294967296,-2147483648+t)}function Ke(t){return t%4294967296}function on(t,e){if(t.length!=e.length)return 0;let r=new Uint8Array([0]);for(let i=0;i>4,n[0]&=n[0]>>2,n[0]&=n[0]>>1,n[0]}async function an(){if(at!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto;try{let{webcrypto:t}=await import("crypto");return t}catch{throw new Error("failed to load Crypto")}}function ir(t,e,r){return Et.create({dkLen:t}).update(e).update(new Uint8Array([r])).digest()}function cn(t){let e=Ke(t[0]);return e|=Ke(t[1])<<8,e|=Ke(t[2])<<16,e|=Ke(t[3])<<24,Ke(e)}var kt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_k",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_du",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_dv",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_eta1",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_eta2",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_skSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_pkSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_compressedUSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_compressedVSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}async generateKeyPair(){await this._setup();try{let e=new Uint8Array(64);return this._api.getRandomValues(e),this._deriveKeyPair(e)}catch(e){throw new Ue(e)}}async deriveKeyPair(e){await this._setup();try{if(e.byteLength!==64)throw new Error("seed must be 64 bytes in length");return this._deriveKeyPair(e)}catch(r){throw new Ue(r)}}async encap(e,r){await this._setup();try{let n=je(this._getSeed(r)),[i,s]=sr(n,je(e)),o=this._encap(e,n,s),a=or(i,je(o));return[o,a]}catch(n){throw new Ue(n)}}async decap(e,r){await this._setup();try{if(e.byteLength!==this._compressedUSize+this._compressedVSize)throw new Error("Invalid ct size");let n=r.subarray(0,this._skSize),i=r.subarray(this._skSize,this._skSize+this._pkSize),s=r.subarray(this._skSize+this._pkSize,this._skSize+this._pkSize+32),o=r.subarray(this._skSize+this._pkSize+32,this._skSize+this._pkSize+64),a=this._decap(e,n),[u,l]=sr(a,s),c=this._encap(i,a,l);return on(e,c)==1?or(u,je(e)):or(o,je(e))}catch(n){throw new Ue(n)}}async _setup(){this._api===void 0&&(this._api=await an())}_getSeed(e){if(e==null){let r=new Uint8Array(32);return this._api.getRandomValues(r),r}if(e.byteLength!==32)throw new Error("seed must be 32 bytes in length");return e}_deriveKeyPair(e){let r=e.subarray(0,32),n=e.subarray(32,64),[i,s]=this._deriveCpaKeyPair(r),o=je(i),a=new Uint8Array(this._skSize+this._pkSize+64);return a.set(s,0),a.set(i,this._skSize),a.set(o,this._skSize+this._pkSize),a.set(n,this._skSize+this._pkSize+32),[i,a]}_deriveCpaKeyPair(e){let[r,n]=sr(e),i=this._sampleMatrix(r,!1),s=this._sampleNoise1(n,0,this._k),o=this._sampleNoise1(n,this._k,this._k);for(let c=0;c>0),e[i++]=se(n[0]>>8|n[1]<<2),e[i++]=se(n[1]>>6|n[2]<<4),e[i++]=se(n[2]>>4|n[3]<<6),e[i++]=se(n[3]>>2)}return e}_compressV(e,r){let n=new Uint8Array(8);for(let i=0,s=0;s<256/8;s++){for(let o=0;o<8;o++)n[o]=se(((r[8*s+o]<<4)+3329/2)/3329)&15;e[i++]=n[0]|n[1]<<4,e[i++]=n[2]|n[3]<<4,e[i++]=n[4]|n[5]<<4,e[i++]=n[6]|n[7]<<4}return e}_decompressU(e){let r=new Array(this._k);for(let i=0;i>0|L(e[i+1])<<8,n[1]=L(e[i+1])>>2|L(e[i+2])<<6,n[2]=L(e[i+2])>>4|L(e[i+3])<<4,n[3]=L(e[i+3])>>6|L(e[i+4])<<2,i=i+5;for(let a=0;a<4;a++)r[s][4*o+a]=oe(Ke(n[a]&1023)*Ke(3329)+512>>10)}return r}_decompressV(e){let r=new Array(384);for(let n=0,i=0;i<256/2;i++,n++)r[2*i+0]=oe(L(e[n]&15)*L(3329)+8>>4),r[2*i+1]=oe(L(e[n]>>4)*L(3329)+8>>4);return r}};function sr(t,e){let r=rn.create().update(t);e!==void 0&&r.update(e);let n=r.digest();return[n.subarray(0,32),n.subarray(32,64)]}function je(t){return tn.create().update(t).digest()}function or(t,e){let r=Et.create({dkLen:32}).update(t);return e!==void 0&&r.update(e),r.digest()}function Ci(t,e){return sn.create({dkLen:672}).update(t).update(e).digest()}function un(t){let e=0,r=0,n=new Uint8Array(384),i=wn(t);for(let s=0;s<256/2;s++)e=L(i[2*s]),r=L(i[2*s+1]),n[3*s+0]=se(e>>0),n[3*s+1]=se(e>>8)|se(r<<4),n[3*s+2]=se(r>>4);return n}function ln(t){let e=new Array(384).fill(0);for(let r=0;r<256/2;r++)e[2*r]=oe((L(t[3*r+0])>>0|L(t[3*r+1])<<8)&4095),e[2*r+1]=oe((L(t[3*r+1])>>4|L(t[3*r+2])<<4)&4095);return e}function Ri(t){let e=new Uint8Array(32),r,n=wn(t);for(let i=0;i<256/8;i++){e[i]=0;for(let s=0;s<8;s++)r=((L(n[8*i+s])<<1)+L(3329/2))/L(3329)&1,e[i]|=se(r<>i&1),e[8*n+i]=r&oe(3330/2);return e}function fn(t,e,r){let n=new Array(384).fill(0),i=0,s,o;for(let a=0;i>0)|L(t[a+1])<<8)&4095,o=(L(t[a+1]>>4)|L(t[a+2])<<4)&4095,a=a+3,s<3329&&(n[i]=s,i=i+1),i>1&1431655765);for(let u=0;u<8;u++)i=oe(n>>4*u+0&3),s=oe(n>>4*u+e&3),o[8*a+u]=i-s}return o}function Bt(t){for(let e=0,r=1,n=128;n>=2;n>>=1)for(let i=0;i<256;i=e+n){let s=_t[r];for(r=r+1,e=i;e>24;return r=r*3329,t-r}function bn(t){let r=oe(At(t)*62209)*3329;return r=t-r,r>>=16,oe(r)}function ji(t){for(let r=0;r<256;r++)t[r]=bn(At(t[r])*At(1353));return t}function St(t,e){let r=dn(t[0],e[0]),n;for(let i=1;i>31&3329;return t}var Pt=class extends kt{constructor(){super(),Object.defineProperty(this,"_k",{enumerable:!0,configurable:!0,writable:!0,value:3}),Object.defineProperty(this,"_du",{enumerable:!0,configurable:!0,writable:!0,value:10}),Object.defineProperty(this,"_dv",{enumerable:!0,configurable:!0,writable:!0,value:4}),Object.defineProperty(this,"_eta1",{enumerable:!0,configurable:!0,writable:!0,value:2}),Object.defineProperty(this,"_eta2",{enumerable:!0,configurable:!0,writable:!0,value:2}),this._skSize=12*this._k*256/8,this._pkSize=this._skSize+32,this._compressedUSize=this._k*this._du*256/8,this._compressedVSize=this._dv*256/8}};var Kt="Keyber768",Lt=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:de.NotAssigned}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:1088}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:1184}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:2400}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=new Pt}async serializePublicKey(e){try{return await this._serializePublicKey(e)}catch(r){throw new te(r)}}async deserializePublicKey(e){try{return await this._deserializePublicKey(e)}catch(r){throw new Y(r)}}async serializePrivateKey(e){try{return await this._serializePrivateKey(e)}catch(r){throw new te(r)}}async deserializePrivateKey(e){try{return await this._deserializePrivateKey(e)}catch(r){throw new Y(r)}}async generateKeyPair(){let e=await this._prim.generateKeyPair(),r=await this.deserializePrivateKey(e[1]);return{publicKey:await this.deserializePublicKey(e[0]),privateKey:r}}async deriveKeyPair(e){if(e.byteLength>8192)throw new ee("Too long ikm");try{let r=await this._prim.deriveKeyPair(new Uint8Array(e)),n=await this.deserializePrivateKey(r[1]);return{publicKey:await this.deserializePublicKey(r[0]),privateKey:n}}catch(r){throw new Re(r)}}async importKey(e,r,n=!0){if(e!=="raw")throw new fe("'jwk' is not supported");return n?await this.deserializePublicKey(r):await this.deserializePrivateKey(r)}async encap(e){let r;if(e.ekm!==void 0&&!ne(e)){if(e.ekm.byteLength!==32)throw new ee("ekm must be 32 bytes in length");r=new Uint8Array(e.ekm)}let n=new Uint8Array(await this.serializePublicKey(e.recipientPublicKey));try{let i=await this._prim.encap(n,r);return{sharedSecret:i[1],enc:i[0]}}catch(i){throw new Ne(i)}}async decap(e){let r=ne(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=new Uint8Array(await this.serializePrivateKey(r));try{return await this._prim.decap(new Uint8Array(e.enc),n)}catch(i){throw new Ce(i)}}_serializePublicKey(e){return new Promise((r,n)=>{e.type!=="public"&&n(new Error("Not public key")),e.algorithm.name!==Kt&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePublicKey(e){return new Promise((r,n)=>{e.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new G(Kt,new Uint8Array(e),"public"))})}_serializePrivateKey(e){return new Promise((r,n)=>{e.type!=="private"&&n(new Error("Not private key")),e.algorithm.name!==Kt&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePrivateKey(e){return new Promise((r,n)=>{e.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new G(Kt,new Uint8Array(e),"private",["deriveBits"]))})}};var cr=class extends ht{constructor(){let e=new $e;super(de.DhkemX25519HkdfSha256,new mt(e),e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:de.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}get kdf(){return this._kdf}},ur=class extends gt{constructor(){super(de.HybridkemX25519Kyber768,new cr,new Lt,new $e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:de.HybridkemX25519Kyber768}),Object.defineProperty(this,"name",{enumerable:!0,configurable:!0,writable:!0,value:"X25519Kyber25519"}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:1120}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:1216}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:2432}),Object.defineProperty(this,"auth",{enumerable:!0,configurable:!0,writable:!0,value:!1})}};export{ur as HybridkemX25519Kyber768}; +var mr={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},O=mr,_r={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},We=_r;function ce(t){if(!Number.isSafeInteger(t)||t<0)throw new Error(`positive integer expected, not ${t}`)}function xr(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}function Q(t,...e){if(!xr(t))throw new Error("Uint8Array expected");if(e.length>0&&!e.includes(t.length))throw new Error(`Uint8Array expected of length ${e}, not of length=${t.length}`)}function Kt(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");ce(t.outputLen),ce(t.blockLen)}function T(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function be(t,e){Q(t);let r=e.outputLen;if(t.lengthnew Uint32Array(t.buffer,t.byteOffset,Math.floor(t.byteLength/4)),ge=t=>new DataView(t.buffer,t.byteOffset,t.byteLength),z=(t,e)=>t<<32-e|t>>>e;var Ye=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68,vr=t=>t<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;function Je(t){for(let e=0;et().update(R(n)).digest(),r=t();return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=()=>t(),e}function St(t){let e=(n,i)=>t(i).update(R(n)).digest(),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=n=>t(n),e}function Bt(t=32){if(we&&typeof we.getRandomValues=="function")return we.getRandomValues(new Uint8Array(t));throw new Error("crypto.getRandomValues must be defined")}var _e=class extends M{constructor(e,r){super(),this.finished=!1,this.destroyed=!1,Kt(e);let n=R(r);if(this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(n.length>i?e.create().update(n).digest():n);for(let s=0;snew _e(t,e).update(r).digest();et.create=(t,e)=>new _e(t,e);function Pr(t,e,r,n){if(typeof t.setBigUint64=="function")return t.setBigUint64(e,r,n);let i=BigInt(32),o=BigInt(4294967295),s=Number(r>>i&o),a=Number(r&o),u=n?4:0,l=n?0:4;t.setUint32(e+u,s,n),t.setUint32(e+l,a,n)}var It=(t,e,r)=>t&e^~t&r,Lt=(t,e,r)=>t&e^t&r^e&r,xe=class extends M{constructor(e,r,n,i){super(),this.blockLen=e,this.outputLen=r,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=ge(this.buffer)}update(e){T(this);let{view:r,buffer:n,blockLen:i}=this;e=R(e);let o=e.length;for(let s=0;si-s&&(this.process(n,0),s=0);for(let f=s;fc.length)throw new Error("_sha2: outputLen bigger than state");for(let f=0;f>>3,G=z(w,17)^z(w,19)^w>>>10;q[f]=G+q[f-7]+h+q[f-16]|0}let{A:n,B:i,C:o,D:s,E:a,F:u,G:l,H:c}=this;for(let f=0;f<64;f++){let d=z(a,6)^z(a,11)^z(a,25),w=c+d+It(a,u,l)+kr[f]+q[f]|0,G=(z(n,2)^z(n,13)^z(n,22))+Lt(n,i,o)|0;c=l,l=u,u=a,a=s+w|0,s=o,o=i,i=n,n=w+G|0}n=n+this.A|0,i=i+this.B|0,o=o+this.C|0,s=s+this.D|0,a=a+this.E|0,u=u+this.F|0,l=l+this.G|0,c=c+this.H|0,this.set(n,i,o,s,a,u,l,c)}roundClean(){q.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var zt=me(()=>new tt);var Kr={},ve=Er(globalThis,Kr);function Er(t,e){return new Proxy(t,{get(r,n,i){return n in e?e[n]:t[n]},set(r,n,i){return n in e&&delete e[n],t[n]=i,!0},deleteProperty(r,n){let i=!1;return n in e&&(delete e[n],i=!0),n in t&&(delete t[n],i=!0),i},ownKeys(r){let n=Reflect.ownKeys(t),i=Reflect.ownKeys(e),o=new Set(i);return[...n.filter(s=>!o.has(s)),...i]},defineProperty(r,n,i){return n in e&&delete e[n],Reflect.defineProperty(t,n,i),!0},getOwnPropertyDescriptor(r,n){return n in e?Reflect.getOwnPropertyDescriptor(e,n):Reflect.getOwnPropertyDescriptor(t,n)},has(r,n){return n in e||n in t}})}var ue=class extends Error{constructor(e){let r;e instanceof Error?r=e.message:typeof e=="string"?r=e:r="",super(r),this.name=this.constructor.name}},H=class extends ue{},K=class extends H{};var E=class extends H{},v=class extends H{},te=class extends H{},re=class extends H{};var ne=class extends H{},U=class extends H{};async function Ar(){if(ve!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:t}=await import("crypto");return t.subtle}catch(t){throw new U(t)}}var Pe=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await Ar())}};var A=new Uint8Array(0);var Ot=new Uint8Array([72,80,75,69,45,118,49]),rt=class extends Pe{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:We.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:A}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(e){this._suiteId=e}buildLabeledIkm(e,r){this._checkInit();let n=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+r.byteLength);return n.set(Ot,0),n.set(this._suiteId,7),n.set(e,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+e.byteLength),n}buildLabeledInfo(e,r,n){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+r.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(Ot,2),i.set(this._suiteId,9),i.set(e,9+this._suiteId.byteLength),i.set(r,9+this._suiteId.byteLength+e.byteLength),i}async extract(e,r){if(await this._setup(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new K("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(e,r,n){await this._setup();let i=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),o=new ArrayBuffer(n),s=new Uint8Array(o),a=A,u=new Uint8Array(r),l=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let c=new Uint8Array(this.hashSize+u.length+1);for(let f=1,d=0;d=a.length?(s.set(a,d),d+=a.length):(s.set(a.slice(0,s.length-d),d),d+=s.length-d);return o}async extractAndExpand(e,r,n,i){await this._setup();let o=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:n},o,i*8)}async labeledExtract(e,r,n){return await this.extract(e,this.buildLabeledIkm(r,n))}async labeledExpand(e,r,n,i){return await this.expand(e,this.buildLabeledInfo(r,n,i),i)}_checkInit(){if(this._suiteId===A)throw new Error("Not initialized. Call init()")}},ke=class extends rt{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:We.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var le=class extends ke{async extract(e,r){if(await this._setup(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return et(zt,new Uint8Array(e),new Uint8Array(r));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var Ke=new Uint8Array([75,69,77,0,0]);var S=t=>typeof t=="object"&&t!==null&&typeof t.privateKey=="object"&&typeof t.publicKey=="object";function Ee(t,e){if(e<=0)throw new Error("i2Osp: too small size");if(t>=256**e)throw new Error("i2Osp: too large integer");let r=new Uint8Array(e);for(let n=0;n>8;return r}function P(t,e){let r=new Uint8Array(t.length+e.length);return r.set(t,0),r.set(e,t.length),r}function nt(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),r=atob(e),n=new Uint8Array(r.length);for(let i=0;i8192)throw new K("Too long ikm");return await this._prim.deriveKeyPair(e)}async encap(e){let r;e.ekm===void 0?r=await this.generateKeyPair():S(e.ekm)?r=e.ekm:r=await this.deriveKeyPair(e.ekm);let n=await this._prim.serializePublicKey(r.publicKey),i=await this._prim.serializePublicKey(e.recipientPublicKey);try{let o;if(e.senderKey===void 0)o=new Uint8Array(await this._prim.dh(r.privateKey,e.recipientPublicKey));else{let u=S(e.senderKey)?e.senderKey.privateKey:e.senderKey,l=new Uint8Array(await this._prim.dh(r.privateKey,e.recipientPublicKey)),c=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));o=P(l,c)}let s;if(e.senderKey===void 0)s=P(new Uint8Array(n),new Uint8Array(i));else{let u=S(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),l=await this._prim.serializePublicKey(u);s=Ir(new Uint8Array(n),new Uint8Array(i),new Uint8Array(l))}let a=await this._generateSharedSecret(o,s);return{enc:n,sharedSecret:a}}catch(o){throw new te(o)}}async decap(e){let r=await this._prim.deserializePublicKey(e.enc),n=S(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,i=S(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),o=await this._prim.serializePublicKey(i);try{let s;if(e.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(n,r));else{let u=new Uint8Array(await this._prim.dh(n,r)),l=new Uint8Array(await this._prim.dh(n,e.senderPublicKey));s=P(u,l)}let a;if(e.senderPublicKey===void 0)a=P(new Uint8Array(e.enc),new Uint8Array(o));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);a=new Uint8Array(e.enc.byteLength+o.byteLength+u.byteLength),a.set(new Uint8Array(e.enc),0),a.set(new Uint8Array(o),e.enc.byteLength),a.set(new Uint8Array(u),e.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,a)}catch(s){throw new re(s)}}async _generateSharedSecret(e,r){let n=this._kdf.buildLabeledIkm(Sr,e),i=this._kdf.buildLabeledInfo(Br,r,this.secretSize);return await this._kdf.extractAndExpand(A,n,i,this.secretSize)}};var Se=BigInt(4294967295),Tt=BigInt(32);function Lr(t,e=!1){return e?{h:Number(t&Se),l:Number(t>>Tt&Se)}:{h:Number(t>>Tt&Se)|0,l:Number(t&Se)|0}}function Ht(t,e=!1){let r=new Uint32Array(t.length),n=new Uint32Array(t.length);for(let i=0;it<>>32-r,jt=(t,e,r)=>e<>>32-r,Ct=(t,e,r)=>e<>>64-r,Mt=(t,e,r)=>t<>>64-r;function ot(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}function Dt(t){if(!ot(t))throw new Error("Uint8Array expected")}var zr=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function Ur(t){Dt(t);let e="";for(let r=0;r=N._0&&t<=N._9)return t-N._0;if(t>=N._A&&t<=N._F)return t-(N._A-10);if(t>=N._a&&t<=N._f)return t-(N._a-10)}function qt(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);let e=t.length,r=e/2;if(e%2)throw new Error("padded hex string expected, got unpadded hex of length "+e);let n=new Uint8Array(r);for(let i=0,o=0;itypeof t=="bigint",function:t=>typeof t=="function",boolean:t=>typeof t=="boolean",string:t=>typeof t=="string",stringOrUint8Array:t=>typeof t=="string"||ot(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>typeof t=="function"&&Number.isSafeInteger(t.outputLen)};function Vt(t,e,r={}){let n=(i,o,s)=>{let a=Hr[o];if(typeof a!="function")throw new Error(`Invalid validator "${o}", expected function`);let u=t[i];if(!(s&&u===void 0)&&!a(u,t))throw new Error(`Invalid param ${String(i)}=${u} (${typeof u}), expected ${o}`)};for(let[i,o]of Object.entries(e))n(i,o,!1);for(let[i,o]of Object.entries(r))n(i,o,!0);return t}var ie=BigInt(0),Be=BigInt(1),Dn=BigInt(2),qn=BigInt(3),$n=BigInt(4),Vn=BigInt(5),Fn=BigInt(8),Gn=BigInt(9),Xn=BigInt(16);function Ie(t,e){let r=t%e;return r>=ie?r:e+r}function Ft(t,e,r){if(r<=ie||e 0");if(r===Be)return ie;let n=Be;for(;e>ie;)e&Be&&(n=n*t%r),t=t*t%r,e>>=Be;return n}function B(t,e,r){let n=t;for(;e-- >ie;)n*=n,n%=r;return n}var fe=BigInt(0),ct=BigInt(1);function Nr(t){return Vt(t,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...t})}function Gt(t){let e=Nr(t),{P:r}=e,n=y=>Ie(y,r),i=e.montgomeryBits,o=Math.ceil(i/8),s=e.nByteLength,a=e.adjustScalarBytes||(y=>y),u=e.powPminus2||(y=>Ft(y,r-BigInt(2),r));function l(y,m,x){let J=n(y*(m-x));return m=n(m-J),x=n(x+J),[m,x]}function c(y){if(typeof y=="bigint"&&fe<=y&&y=fe;Ge--){let gt=J>>Ge&ct;ee^=gt,k=l(ee,j,X),j=k[0],X=k[1],k=l(ee,C,Z),C=k[0],Z=k[1],ee=gt;let Xe=j+C,Ze=n(Xe*Xe),Qe=j-C,mt=n(Qe*Qe),_t=Ze-mt,wr=X+Z,gr=X-Z,xt=n(gr*Xe),vt=n(wr*Qe),Pt=xt+vt,kt=xt-vt;X=n(Pt*Pt),Z=n(pe*n(kt*kt)),j=n(Ze*mt),C=n(_t*(Ze+n(f*_t)))}k=l(ee,j,X),j=k[0],X=k[1],k=l(ee,C,Z),C=k[0],Z=k[1];let br=u(C);return n(j*br)}function w(y){return $t(n(y),o)}function h(y){let m=at("u coordinate",y,o);return s===32&&(m[31]&=127),st(m)}function G(y){let m=at("scalar",y),x=m.length;if(x!==o&&x!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${x}`);return st(a(m))}function ae(y,m){let x=h(m),J=G(y),pe=d(x,J);if(pe===fe)throw new Error("Invalid private or public key received");return w(pe)}let Fe=w(e.Gu);function wt(y){return ae(y,Fe)}return{scalarMult:ae,scalarMultBase:wt,getSharedSecret:(y,m)=>ae(y,m),getPublicKey:y=>wt(y),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:Fe}}var ut=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949");var si=BigInt(0),jr=BigInt(1),Xt=BigInt(2),Cr=BigInt(3),Mr=BigInt(5),ai=BigInt(8);function Rr(t){let e=BigInt(10),r=BigInt(20),n=BigInt(40),i=BigInt(80),o=ut,a=t*t%o*t%o,u=B(a,Xt,o)*a%o,l=B(u,jr,o)*t%o,c=B(l,Mr,o)*l%o,f=B(c,e,o)*c%o,d=B(f,r,o)*f%o,w=B(d,n,o)*d%o,h=B(w,i,o)*w%o,G=B(h,i,o)*w%o,ae=B(G,e,o)*c%o;return{pow_p_5_8:B(ae,Xt,o)*t%o,b2:a}}function Dr(t){return t[0]&=248,t[31]&=127,t[31]|=64,t}var Le=Gt({P:ut,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:t=>{let e=ut,{pow_p_5_8:r,b2:n}=Rr(t);return Ie(B(r,Cr,e)*n,e)},adjustScalarBytes:Dr,randomBytes:Bt});var he=["deriveBits"],ze=new Uint8Array([100,107,112,95,112,114,107]),Ue=new Uint8Array([115,107]);var _=class{constructor(e,r,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:e},this.usages=i,n==="public"&&(this.usages=[])}};var oe="X25519",Oe=class{constructor(e){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=e,this._nPk=32,this._nSk=32}async serializePublicKey(e){try{return await this._serializePublicKey(e)}catch(r){throw new E(r)}}async deserializePublicKey(e){try{return await this._importRawKey(e,!0)}catch(r){throw new v(r)}}async serializePrivateKey(e){try{return await this._serializePrivateKey(e)}catch(r){throw new E(r)}}async deserializePrivateKey(e){try{return await this._importRawKey(e,!1)}catch(r){throw new v(r)}}async importKey(e,r,n){try{if(e==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new v(i)}}async generateKeyPair(){try{let e=Le.utils.randomPrivateKey(),r=new _(oe,e,"private",he);return{publicKey:await this.derivePublicKey(r),privateKey:r}}catch(e){throw new U(e)}}async deriveKeyPair(e){try{let r=await this._hkdf.labeledExtract(A,ze,new Uint8Array(e)),n=await this._hkdf.labeledExpand(r,Ue,A,this._nSk),i=new _(oe,new Uint8Array(n),"private",he);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new ne(r)}}async derivePublicKey(e){try{return await this._derivePublicKey(e)}catch(r){throw new v(r)}}async dh(e,r){try{return await this._dh(e,r)}catch(n){throw new E(n)}}_serializePublicKey(e){return new Promise(r=>{r(e.key.buffer)})}_serializePrivateKey(e){return new Promise(r=>{r(e.key.buffer)})}_importRawKey(e,r){return new Promise((n,i)=>{r&&e.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!r&&e.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new _(oe,new Uint8Array(e),r?"public":"private",r?[]:he))})}_importJWK(e,r){return new Promise((n,i)=>{(typeof e.kty>"u"||e.kty!=="OKP")&&i(new Error(`Invalid kty: ${e.kty}`)),(typeof e.crv>"u"||e.crv!=="X25519")&&i(new Error(`Invalid crv: ${e.crv}`)),r?(typeof e.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof e.x>"u"&&i(new Error("Invalid key: `x` not found")),n(new _(oe,nt(e.x),"public"))):(typeof e.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new _(oe,nt(e.d),"private",he)))})}_derivePublicKey(e){return new Promise((r,n)=>{try{let i=Le.getPublicKey(e.key);r(new _(oe,i,"public"))}catch(i){n(i)}})}_dh(e,r){return new Promise((n,i)=>{try{n(Le.getSharedSecret(e.key,r.key).buffer)}catch(o){i(o)}})}};var Te=class{constructor(e,r,n,i){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:O.NotAssigned}),Object.defineProperty(this,"name",{enumerable:!0,configurable:!0,writable:!0,value:""}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_a",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_b",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.id=e,this._a=r,this._b=n,this._kdf=i;let o=new Uint8Array(Ke);o.set(Ee(this.id,2),3),this._kdf.init(o)}async serializePublicKey(e){try{return await this._serializePublicKey(e)}catch(r){throw new E(r)}}async deserializePublicKey(e){try{return await this._deserializePublicKey(e)}catch(r){throw new v(r)}}async serializePrivateKey(e){try{return await this._serializePrivateKey(e)}catch(r){throw new E(r)}}async deserializePrivateKey(e){try{return await this._deserializePrivateKey(e)}catch(r){throw new v(r)}}async generateKeyPair(){let e=await this._a.generateKeyPair(),r=await this._b.generateKeyPair(),n=await this._a.serializePublicKey(e.publicKey),i=await this._a.serializePrivateKey(e.privateKey),o=await this._b.serializePublicKey(r.publicKey),s=await this._b.serializePrivateKey(r.privateKey);return{publicKey:await this.deserializePublicKey(P(new Uint8Array(n),new Uint8Array(o))),privateKey:await this.deserializePrivateKey(P(new Uint8Array(i),new Uint8Array(s)))}}async deriveKeyPair(e){let r=await this._kdf.labeledExtract(A,ze,new Uint8Array(e)),n=new Uint8Array(await this._kdf.labeledExpand(r,Ue,A,96)),i=n.slice(0,32),o=n.slice(32,96),s=await this._a.deriveKeyPair(i),a=await this._b.deriveKeyPair(o),u=await this._a.serializePublicKey(s.publicKey),l=await this._a.serializePrivateKey(s.privateKey),c=await this._b.serializePublicKey(a.publicKey),f=await this._b.serializePrivateKey(a.privateKey);return{publicKey:await this.deserializePublicKey(P(new Uint8Array(u),new Uint8Array(c))),privateKey:await this.deserializePrivateKey(P(new Uint8Array(l),new Uint8Array(f)))}}async importKey(e,r,n=!0){if(e!=="raw")throw new U("'jwk' is not supported");if(!(r instanceof ArrayBuffer))throw new K("Invalid type of key");return n?await this.deserializePublicKey(r):await this.deserializePrivateKey(r)}async encap(e){let r,n;if(e.ekm!==void 0&&!S(e.ekm)){if(e.ekm.byteLength!==64)throw new K("ekm must be 64 bytes in length");r=e.ekm.slice(0,32),n=e.ekm.slice(32)}let i=new Uint8Array(await this.serializePublicKey(e.recipientPublicKey)),o=await this._a.deserializePublicKey(i.slice(0,this._a.publicKeySize)),s=await this._b.deserializePublicKey(i.slice(this._a.publicKeySize)),a=await this._a.encap({recipientPublicKey:o,ekm:r}),u=await this._b.encap({recipientPublicKey:s,ekm:n});return{sharedSecret:P(new Uint8Array(a.sharedSecret),new Uint8Array(u.sharedSecret)),enc:P(new Uint8Array(a.enc),new Uint8Array(u.enc))}}async decap(e){let r=S(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=new Uint8Array(await this.serializePrivateKey(r)),i=await this._a.deserializePrivateKey(n.slice(0,this._a.privateKeySize)),o=await this._b.deserializePrivateKey(n.slice(this._a.privateKeySize)),s=await this._a.decap({recipientKey:i,enc:e.enc.slice(0,this._a.encSize)}),a=await this._b.decap({recipientKey:o,enc:e.enc.slice(this._a.encSize)});return P(new Uint8Array(s),new Uint8Array(a))}_serializePublicKey(e){return new Promise((r,n)=>{e.type!=="public"&&n(new Error("Not public key")),e.algorithm.name!==this.name&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePublicKey(e){return new Promise((r,n)=>{e.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new _(this.name,new Uint8Array(e),"public"))})}_serializePrivateKey(e){return new Promise((r,n)=>{e.type!=="private"&&n(new Error("Not private key")),e.algorithm.name!==this.name&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePrivateKey(e){return new Promise((r,n)=>{e.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new _(this.name,new Uint8Array(e),"private",["deriveBits"]))})}};var He=[2285,2571,2970,1812,1493,1422,287,202,3158,622,1577,182,962,2127,1855,1468,573,2004,264,383,2500,1458,1727,3199,2648,1017,732,608,1787,411,3124,1758,1223,652,2777,1015,2036,1491,3047,1785,516,3321,3009,2663,1711,2167,126,1469,2476,3239,3058,830,107,1908,3082,2378,2931,961,1821,2604,448,2264,677,2054,2226,430,555,843,2078,871,1550,105,422,587,177,3094,3038,2869,1574,1653,3083,778,1159,3182,2552,1483,2727,1119,1739,644,2457,349,418,329,3173,3254,817,1097,603,610,1322,2044,1864,384,2114,3193,1218,1994,2455,220,2142,1670,2144,1799,2051,794,1819,2475,2459,478,3221,3021,996,991,958,1869,1522,1628],lt=[1701,1807,1460,2371,2338,2333,308,108,2851,870,854,1510,2535,1278,1530,1185,1659,1187,3109,874,1335,2111,136,1215,2945,1465,1285,2007,2719,2726,2232,2512,75,156,3e3,2911,2980,872,2685,1590,2210,602,1846,777,147,2170,2551,246,1676,1755,460,291,235,3152,2742,2907,3224,1779,2458,1251,2486,2774,2899,1103,1275,2652,1065,2881,725,1508,2368,398,951,247,1421,3222,2499,271,90,853,1860,3203,1162,1618,666,320,8,2813,1544,282,1838,1293,2314,552,2677,2106,1571,205,2918,1542,2721,2597,2312,681,130,1602,1871,829,2946,3065,1325,2756,1861,1474,1202,2367,3147,1752,2707,171,3127,3042,1907,1836,1517,359,758,1441];var Wt=[],Yt=[],Jt=[],qr=BigInt(0),de=BigInt(1),$r=BigInt(2),Vr=BigInt(7),Fr=BigInt(256),Gr=BigInt(113);for(let t=0,e=de,r=1,n=0;t<24;t++){[r,n]=[n,(2*r+3*n)%5],Wt.push(2*(5*n+r)),Yt.push((t+1)*(t+2)/2%64);let i=qr;for(let o=0;o<7;o++)e=(e<>Vr)*Gr)%Fr,e&$r&&(i^=de<<(de<r>32?Ct(t,e,r):Nt(t,e,r),Qt=(t,e,r)=>r>32?Mt(t,e,r):jt(t,e,r);function Qr(t,e=24){let r=new Uint32Array(10);for(let n=24-e;n<24;n++){for(let s=0;s<10;s++)r[s]=t[s]^t[s+10]^t[s+20]^t[s+30]^t[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,u=(s+2)%10,l=r[u],c=r[u+1],f=Zt(l,c,1)^r[a],d=Qt(l,c,1)^r[a+1];for(let w=0;w<50;w+=10)t[s+w]^=f,t[s+w+1]^=d}let i=t[2],o=t[3];for(let s=0;s<24;s++){let a=Yt[s],u=Zt(i,o,a),l=Qt(i,o,a),c=Wt[s];i=t[c],o=t[c+1],t[c]=u,t[c+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=t[s+a];for(let a=0;a<10;a++)t[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}t[0]^=Xr[n],t[1]^=Zr[n]}r.fill(0)}var Ne=class t extends M{constructor(e,r,n,i=!1,o=24){if(super(),this.blockLen=e,this.suffix=r,this.outputLen=n,this.enableXOF=i,this.rounds=o,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,ce(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=Et(this.state)}keccak(){Ye||Je(this.state32),Qr(this.state32,this.rounds),Ye||Je(this.state32),this.posOut=0,this.pos=0}update(e){T(this);let{blockLen:r,state:n}=this;e=R(e);let i=e.length;for(let o=0;o=n&&this.keccak();let s=Math.min(n-this.posOut,o-i);e.set(r.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return ce(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(be(e,this),this.finished)throw new Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){let{blockLen:r,suffix:n,outputLen:i,rounds:o,enableXOF:s}=this;return e||(e=new t(r,n,i,s,o)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=o,e.suffix=n,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}},$=(t,e,r)=>me(()=>new Ne(e,t,r)),Ii=$(6,144,224/8),er=$(6,136,256/8),Li=$(6,104,384/8),tr=$(6,72,512/8),zi=$(1,144,224/8),Ui=$(1,136,256/8),Oi=$(1,104,384/8),Ti=$(1,72,512/8),rr=(t,e,r)=>St((n={})=>new Ne(e,t,n.dkLen===void 0?r:n.dkLen,!0)),nr=rr(31,168,128/8),je=rr(31,136,256/8);var W=class extends ue{};function I(t){return t%256}function L(t){return t>=-32768&&t<=32767?t:t<-32768?(t=t+32769,t=t%65536,32767+t):(t=t-32768,t=t%65536,-32768+t)}function p(t){return t%65536}function Ce(t){return t>=-2147483648&&t<=2147483647?t:t<-2147483648?(t=t+2147483649,t=t%4294967296,2147483647+t):(t=t-2147483648,t=t%4294967296,-2147483648+t)}function V(t){return t%4294967296}function ir(t,e){if(t.length!=e.length)return 0;let r=new Uint8Array([0]);for(let i=0;i>4,n[0]&=n[0]>>2,n[0]&=n[0]>>1,n[0]}async function or(){if(ve!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto;try{let{webcrypto:t}=await import("crypto");return t}catch{throw new Error("failed to load Crypto")}}function ft(t,e,r){return je.create({dkLen:t}).update(e).update(new Uint8Array([r])).digest()}function sr(t){let e=V(t[0]);return e|=V(t[1])<<8,e|=V(t[2])<<16,e|=V(t[3])<<24,V(e)}var De=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_k",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_du",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_dv",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_eta1",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_eta2",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_skSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_pkSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_compressedUSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_compressedVSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}async generateKeyPair(){await this._setup();try{let e=new Uint8Array(64);return this._api.getRandomValues(e),this._deriveKeyPair(e)}catch(e){throw new W(e)}}async deriveKeyPair(e){await this._setup();try{if(e.byteLength!==64)throw new Error("seed must be 64 bytes in length");return this._deriveKeyPair(e)}catch(r){throw new W(r)}}async encap(e,r){await this._setup();try{let n=se(this._getSeed(r)),[i,o]=ht(n,se(e)),s=this._encap(e,n,o),a=dt(i,se(s));return[s,a]}catch(n){throw new W(n)}}async decap(e,r){await this._setup();try{if(e.byteLength!==this._compressedUSize+this._compressedVSize)throw new Error("Invalid ct size");let n=r.subarray(0,this._skSize),i=r.subarray(this._skSize,this._skSize+this._pkSize),o=r.subarray(this._skSize+this._pkSize,this._skSize+this._pkSize+32),s=r.subarray(this._skSize+this._pkSize+32,this._skSize+this._pkSize+64),a=this._decap(e,n),[u,l]=ht(a,o),c=this._encap(i,a,l);return ir(e,c)==1?dt(u,se(e)):dt(s,se(e))}catch(n){throw new W(n)}}async _setup(){this._api===void 0&&(this._api=await or())}_getSeed(e){if(e==null){let r=new Uint8Array(32);return this._api.getRandomValues(r),r}if(e.byteLength!==32)throw new Error("seed must be 32 bytes in length");return e}_deriveKeyPair(e){let r=e.subarray(0,32),n=e.subarray(32,64),[i,o]=this._deriveCpaKeyPair(r),s=se(i),a=new Uint8Array(this._skSize+this._pkSize+64);return a.set(o,0),a.set(i,this._skSize),a.set(s,this._skSize+this._pkSize),a.set(n,this._skSize+this._pkSize+32),[i,a]}_deriveCpaKeyPair(e){let[r,n]=ht(e),i=this._sampleMatrix(r,!1),o=this._sampleNoise1(n,0,this._k),s=this._sampleNoise1(n,this._k,this._k);for(let c=0;c>0),e[i++]=I(n[0]>>8|n[1]<<2),e[i++]=I(n[1]>>6|n[2]<<4),e[i++]=I(n[2]>>4|n[3]<<6),e[i++]=I(n[3]>>2)}return e}_compressV(e,r){let n=new Uint8Array(8);for(let i=0,o=0;o<256/8;o++){for(let s=0;s<8;s++)n[s]=I(((r[8*o+s]<<4)+3329/2)/3329)&15;e[i++]=n[0]|n[1]<<4,e[i++]=n[2]|n[3]<<4,e[i++]=n[4]|n[5]<<4,e[i++]=n[6]|n[7]<<4}return e}_decompressU(e){let r=new Array(this._k);for(let i=0;i>0|p(e[i+1])<<8,n[1]=p(e[i+1])>>2|p(e[i+2])<<6,n[2]=p(e[i+2])>>4|p(e[i+3])<<4,n[3]=p(e[i+3])>>6|p(e[i+4])<<2,i=i+5;for(let a=0;a<4;a++)r[o][4*s+a]=L(V(n[a]&1023)*V(3329)+512>>10)}return r}_decompressV(e){let r=new Array(384);for(let n=0,i=0;i<256/2;i++,n++)r[2*i+0]=L(p(e[n]&15)*p(3329)+8>>4),r[2*i+1]=L(p(e[n]>>4)*p(3329)+8>>4);return r}};function ht(t,e){let r=tr.create().update(t);e!==void 0&&r.update(e);let n=r.digest();return[n.subarray(0,32),n.subarray(32,64)]}function se(t){return er.create().update(t).digest()}function dt(t,e){let r=je.create({dkLen:32}).update(t);return e!==void 0&&r.update(e),r.digest()}function Yr(t,e){return nr.create({dkLen:672}).update(t).update(e).digest()}function ar(t){let e=0,r=0,n=new Uint8Array(384),i=pr(t);for(let o=0;o<256/2;o++)e=p(i[2*o]),r=p(i[2*o+1]),n[3*o+0]=I(e>>0),n[3*o+1]=I(e>>8)|I(r<<4),n[3*o+2]=I(r>>4);return n}function cr(t){let e=new Array(384).fill(0);for(let r=0;r<256/2;r++)e[2*r]=L((p(t[3*r+0])>>0|p(t[3*r+1])<<8)&4095),e[2*r+1]=L((p(t[3*r+1])>>4|p(t[3*r+2])<<4)&4095);return e}function Jr(t){let e=new Uint8Array(32),r,n=pr(t);for(let i=0;i<256/8;i++){e[i]=0;for(let o=0;o<8;o++)r=((p(n[8*i+o])<<1)+p(3329/2))/p(3329)&1,e[i]|=I(r<>i&1),e[8*n+i]=r&L(3330/2);return e}function ur(t,e,r){let n=new Array(384).fill(0),i=0,o,s;for(let a=0;i>0)|p(t[a+1])<<8)&4095,s=(p(t[a+1]>>4)|p(t[a+2])<<4)&4095,a=a+3,o<3329&&(n[i]=o,i=i+1),i>1&1431655765);for(let u=0;u<8;u++)i=L(n>>4*u+0&3),o=L(n>>4*u+e&3),s[8*a+u]=i-o}return s}function Me(t){for(let e=0,r=1,n=128;n>=2;n>>=1)for(let i=0;i<256;i=e+n){let o=He[r];for(r=r+1,e=i;e>24;return r=r*3329,t-r}function yr(t){let r=L(Ce(t)*62209)*3329;return r=t-r,r>>=16,L(r)}function tn(t){for(let r=0;r<256;r++)t[r]=yr(Ce(t[r])*Ce(1353));return t}function Re(t,e){let r=fr(t[0],e[0]),n;for(let i=1;i>31&3329;return t}var qe=class extends De{constructor(){super(),Object.defineProperty(this,"_k",{enumerable:!0,configurable:!0,writable:!0,value:3}),Object.defineProperty(this,"_du",{enumerable:!0,configurable:!0,writable:!0,value:10}),Object.defineProperty(this,"_dv",{enumerable:!0,configurable:!0,writable:!0,value:4}),Object.defineProperty(this,"_eta1",{enumerable:!0,configurable:!0,writable:!0,value:2}),Object.defineProperty(this,"_eta2",{enumerable:!0,configurable:!0,writable:!0,value:2}),this._skSize=12*this._k*256/8,this._pkSize=this._skSize+32,this._compressedUSize=this._k*this._du*256/8,this._compressedVSize=this._dv*256/8}};var $e="Keyber768",Ve=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:O.NotAssigned}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:1088}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:1184}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:2400}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=new qe}async serializePublicKey(e){try{return await this._serializePublicKey(e)}catch(r){throw new E(r)}}async deserializePublicKey(e){try{return await this._deserializePublicKey(e)}catch(r){throw new v(r)}}async serializePrivateKey(e){try{return await this._serializePrivateKey(e)}catch(r){throw new E(r)}}async deserializePrivateKey(e){try{return await this._deserializePrivateKey(e)}catch(r){throw new v(r)}}async generateKeyPair(){let e=await this._prim.generateKeyPair(),r=await this.deserializePrivateKey(e[1]);return{publicKey:await this.deserializePublicKey(e[0]),privateKey:r}}async deriveKeyPair(e){if(e.byteLength>8192)throw new K("Too long ikm");try{let r=await this._prim.deriveKeyPair(new Uint8Array(e)),n=await this.deserializePrivateKey(r[1]);return{publicKey:await this.deserializePublicKey(r[0]),privateKey:n}}catch(r){throw new ne(r)}}async importKey(e,r,n=!0){if(e!=="raw")throw new U("'jwk' is not supported");return n?await this.deserializePublicKey(r):await this.deserializePrivateKey(r)}async encap(e){let r;if(e.ekm!==void 0&&!S(e)){if(e.ekm.byteLength!==32)throw new K("ekm must be 32 bytes in length");r=new Uint8Array(e.ekm)}let n=new Uint8Array(await this.serializePublicKey(e.recipientPublicKey));try{let i=await this._prim.encap(n,r);return{sharedSecret:i[1],enc:i[0]}}catch(i){throw new te(i)}}async decap(e){let r=S(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=new Uint8Array(await this.serializePrivateKey(r));try{return await this._prim.decap(new Uint8Array(e.enc),n)}catch(i){throw new re(i)}}_serializePublicKey(e){return new Promise((r,n)=>{e.type!=="public"&&n(new Error("Not public key")),e.algorithm.name!==$e&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePublicKey(e){return new Promise((r,n)=>{e.byteLength!==this.publicKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new _($e,new Uint8Array(e),"public"))})}_serializePrivateKey(e){return new Promise((r,n)=>{e.type!=="private"&&n(new Error("Not private key")),e.algorithm.name!==$e&&n(new Error(`Invalid algorithm name: ${e.algorithm.name}`)),e.key.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.key.byteLength}`)),r(e.key.buffer)})}_deserializePrivateKey(e){return new Promise((r,n)=>{e.byteLength!==this.privateKeySize&&n(new Error(`Invalid key length: ${e.byteLength}`)),r(new _($e,new Uint8Array(e),"private",["deriveBits"]))})}};var pt=class extends Ae{constructor(){let e=new le;super(O.DhkemX25519HkdfSha256,new Oe(e),e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:O.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}get kdf(){return this._kdf}},bt=class extends Te{constructor(){super(O.HybridkemX25519Kyber768,new pt,new Ve,new le),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:O.HybridkemX25519Kyber768}),Object.defineProperty(this,"name",{enumerable:!0,configurable:!0,writable:!0,value:"X25519Kyber25519"}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:1120}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:1216}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:2432}),Object.defineProperty(this,"auth",{enumerable:!0,configurable:!0,writable:!0,value:!1})}};export{bt as HybridkemX25519Kyber768}; /*! Bundled license information: @noble/hashes/esm/utils.js: @@ -10,12 +10,6 @@ var Sn={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521Hkd @noble/curves/esm/abstract/modular.js: (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) -@noble/curves/esm/abstract/curve.js: - (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) - -@noble/curves/esm/abstract/edwards.js: - (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) - @noble/curves/esm/abstract/montgomery.js: (*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) *) diff --git a/src/hpke.js b/src/hpke.js index 4abc155df..70c5991ea 100644 --- a/src/hpke.js +++ b/src/hpke.js @@ -1,4 +1,4 @@ -var ai={},Vr=fi(globalThis,ai);function fi(e,t){return new Proxy(e,{get(r,n,i){return n in t?t[n]:e[n]},set(r,n,i){return n in t&&delete t[n],e[n]=i,!0},deleteProperty(r,n){let i=!1;return n in t&&(delete t[n],i=!0),n in e&&(delete e[n],i=!0),i},ownKeys(r){let n=Reflect.ownKeys(e),i=Reflect.ownKeys(t),o=new Set(i);return[...n.filter(s=>!o.has(s)),...i]},defineProperty(r,n,i){return n in t&&delete t[n],Reflect.defineProperty(e,n,i),!0},getOwnPropertyDescriptor(r,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(e,n)},has(r,n){return n in t||n in e}})}var sr=class extends Error{constructor(t){let r;t instanceof Error?r=t.message:typeof t=="string"?r=t:r="",super(r),this.name=this.constructor.name}},ot=class extends sr{},tt=class extends ot{},Zr=class extends ot{},st=class extends ot{},et=class extends ot{},be=class extends ot{},we=class extends ot{},xe=class extends ot{},me=class extends ot{},ge=class extends ot{},_e=class extends ot{},It=class extends ot{},ct=class extends ot{};async function li(){if(Vr!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:e}=await import("crypto");return e.subtle}catch(e){throw new ct(e)}}var wt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await li())}};var _t={Base:0,Psk:1,Auth:2,AuthPsk:3},Xr={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},V=Xr,Wr={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},Et=Wr,Yr={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},at=Yr;var Jr=["encrypt","decrypt"];var cr=class extends wt{constructor(t){super(),Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._rawKey=t}async seal(t,r,n){await this._setupKey();let i={name:"AES-GCM",iv:t,additionalData:n};return await this._api.encrypt(i,this._key,r)}async open(t,r,n){await this._setupKey();let i={name:"AES-GCM",iv:t,additionalData:n};return await this._api.decrypt(i,this._key,r)}async _setupKey(){if(this._key!==void 0)return;await this._setup();let t=await this._importKey(this._rawKey);new Uint8Array(this._rawKey).fill(0),this._key=t}async _importKey(t){return await this._api.importKey("raw",t,{name:"AES-GCM"},!0,Jr)}},ee=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(t){return new cr(t)}},Ee=class extends ee{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}};var ve=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(t){throw new ct("Export only")}};function ke(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`positive integer expected, not ${e}`)}function ar(e){if(typeof e!="boolean")throw new Error(`boolean expected, not ${e}`)}function fr(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function ft(e,...t){if(!fr(e))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw new Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function ur(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Qr(e,t){ft(e);let r=t.outputLen;if(e.lengthnew Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),tn=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),hi=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!hi)throw new Error("Non little-endian hardware is not supported");function di(e){if(typeof e!="string")throw new Error(`string expected, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function Ae(e){if(typeof e=="string")e=di(e);else if(fr(e))e=e.slice();else throw new Error(`Uint8Array expected, got ${typeof e}`);return e}function en(e,t){if(t==null||typeof t!="object")throw new Error("options must be defined");return Object.assign(e,t)}function rn(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n(Object.assign(t,e),t);function hr(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let i=BigInt(32),o=BigInt(4294967295),s=Number(r>>i&o),c=Number(r&o),a=n?4:0,u=n?0:4;e.setUint32(t+a,s,n),e.setUint32(t+u,c,n)}var rt=(e,t)=>e[t++]&255|(e[t++]&255)<<8,dr=class{constructor(t){this.blockLen=16,this.outputLen=16,this.buffer=new Uint8Array(16),this.r=new Uint16Array(10),this.h=new Uint16Array(10),this.pad=new Uint16Array(8),this.pos=0,this.finished=!1,t=Ae(t),ft(t,32);let r=rt(t,0),n=rt(t,2),i=rt(t,4),o=rt(t,6),s=rt(t,8),c=rt(t,10),a=rt(t,12),u=rt(t,14);this.r[0]=r&8191,this.r[1]=(r>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|o<<9)&8191,this.r[4]=(o>>>4|s<<12)&255,this.r[5]=s>>>1&8190,this.r[6]=(s>>>14|c<<2)&8191,this.r[7]=(c>>>11|a<<5)&8065,this.r[8]=(a>>>8|u<<8)&8191,this.r[9]=u>>>5&127;for(let f=0;f<8;f++)this.pad[f]=rt(t,16+2*f)}process(t,r,n=!1){let i=n?0:2048,{h:o,r:s}=this,c=s[0],a=s[1],u=s[2],f=s[3],h=s[4],d=s[5],b=s[6],m=s[7],g=s[8],x=s[9],A=rt(t,r+0),I=rt(t,r+2),p=rt(t,r+4),S=rt(t,r+6),v=rt(t,r+8),D=rt(t,r+10),$=rt(t,r+12),H=rt(t,r+14),B=o[0]+(A&8191),O=o[1]+((A>>>13|I<<3)&8191),L=o[2]+((I>>>10|p<<6)&8191),T=o[3]+((p>>>7|S<<9)&8191),P=o[4]+((S>>>4|v<<12)&8191),q=o[5]+(v>>>1&8191),N=o[6]+((v>>>14|D<<2)&8191),F=o[7]+((D>>>11|$<<5)&8191),G=o[8]+(($>>>8|H<<8)&8191),y=o[9]+(H>>>5|i),l=0,w=l+B*c+O*(5*x)+L*(5*g)+T*(5*m)+P*(5*b);l=w>>>13,w&=8191,w+=q*(5*d)+N*(5*h)+F*(5*f)+G*(5*u)+y*(5*a),l+=w>>>13,w&=8191;let E=l+B*a+O*c+L*(5*x)+T*(5*g)+P*(5*m);l=E>>>13,E&=8191,E+=q*(5*b)+N*(5*d)+F*(5*h)+G*(5*f)+y*(5*u),l+=E>>>13,E&=8191;let k=l+B*u+O*a+L*c+T*(5*x)+P*(5*g);l=k>>>13,k&=8191,k+=q*(5*m)+N*(5*b)+F*(5*d)+G*(5*h)+y*(5*f),l+=k>>>13,k&=8191;let K=l+B*f+O*u+L*a+T*c+P*(5*x);l=K>>>13,K&=8191,K+=q*(5*g)+N*(5*m)+F*(5*b)+G*(5*d)+y*(5*h),l+=K>>>13,K&=8191;let R=l+B*h+O*f+L*u+T*a+P*c;l=R>>>13,R&=8191,R+=q*(5*x)+N*(5*g)+F*(5*m)+G*(5*b)+y*(5*d),l+=R>>>13,R&=8191;let j=l+B*d+O*h+L*f+T*u+P*a;l=j>>>13,j&=8191,j+=q*c+N*(5*x)+F*(5*g)+G*(5*m)+y*(5*b),l+=j>>>13,j&=8191;let C=l+B*b+O*d+L*h+T*f+P*u;l=C>>>13,C&=8191,C+=q*a+N*c+F*(5*x)+G*(5*g)+y*(5*m),l+=C>>>13,C&=8191;let z=l+B*m+O*b+L*d+T*h+P*f;l=z>>>13,z&=8191,z+=q*u+N*a+F*c+G*(5*x)+y*(5*g),l+=z>>>13,z&=8191;let W=l+B*g+O*m+L*b+T*d+P*h;l=W>>>13,W&=8191,W+=q*f+N*u+F*a+G*c+y*(5*x),l+=W>>>13,W&=8191;let J=l+B*x+O*g+L*m+T*b+P*d;l=J>>>13,J&=8191,J+=q*h+N*f+F*u+G*a+y*c,l+=J>>>13,J&=8191,l=(l<<2)+l|0,l=l+w|0,w=l&8191,l=l>>>13,E+=l,o[0]=w,o[1]=E,o[2]=k,o[3]=K,o[4]=R,o[5]=j,o[6]=C,o[7]=z,o[8]=W,o[9]=J}finalize(){let{h:t,pad:r}=this,n=new Uint16Array(10),i=t[1]>>>13;t[1]&=8191;for(let c=2;c<10;c++)t[c]+=i,i=t[c]>>>13,t[c]&=8191;t[0]+=i*5,i=t[0]>>>13,t[0]&=8191,t[1]+=i,i=t[1]>>>13,t[1]&=8191,t[2]+=i,n[0]=t[0]+5,i=n[0]>>>13,n[0]&=8191;for(let c=1;c<10;c++)n[c]=t[c]+i,i=n[c]>>>13,n[c]&=8191;n[9]-=8192;let o=(i^1)-1;for(let c=0;c<10;c++)n[c]&=o;o=~o;for(let c=0;c<10;c++)t[c]=t[c]&o|n[c];t[0]=(t[0]|t[1]<<13)&65535,t[1]=(t[1]>>>3|t[2]<<10)&65535,t[2]=(t[2]>>>6|t[3]<<7)&65535,t[3]=(t[3]>>>9|t[4]<<4)&65535,t[4]=(t[4]>>>12|t[5]<<1|t[6]<<14)&65535,t[5]=(t[6]>>>2|t[7]<<11)&65535,t[6]=(t[7]>>>5|t[8]<<8)&65535,t[7]=(t[8]>>>8|t[9]<<5)&65535;let s=t[0]+r[0];t[0]=s&65535;for(let c=1;c<8;c++)s=(t[c]+r[c]|0)+(s>>>16)|0,t[c]=s&65535}update(t){ur(this);let{buffer:r,blockLen:n}=this;t=Ae(t);let i=t.length;for(let o=0;o>>0,t[o++]=n[s]>>>8;return t}digest(){let{buffer:t,outputLen:r}=this;this.digestInto(t);let n=t.slice(0,r);return this.destroy(),n}};function pi(e){let t=(n,i)=>e(i).update(Ae(n)).digest(),r=e(new Uint8Array(32));return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=n=>e(n),t}var nn=pi(e=>new dr(e));var sn=e=>Uint8Array.from(e.split("").map(t=>t.charCodeAt(0))),yi=sn("expand 16-byte k"),bi=sn("expand 32-byte k"),wi=vt(yi),cn=vt(bi),vs=cn.slice();function _(e,t){return e<>>32-t}function pr(e){return e.byteOffset%4===0}var Se=64,xi=16,an=2**32-1,on=new Uint32Array;function mi(e,t,r,n,i,o,s,c){let a=i.length,u=new Uint8Array(Se),f=vt(u),h=pr(i)&&pr(o),d=h?vt(i):on,b=h?vt(o):on;for(let m=0;m=an)throw new Error("arx: counter overflow");let g=Math.min(Se,a-m);if(h&&g===Se){let x=m/4;if(m%4!==0)throw new Error("arx: invalid block position");for(let A=0,I;A{ft(c),ft(a),ft(u);let d=u.length;if(f||(f=new Uint8Array(d)),ft(f),ke(h),h<0||h>=an)throw new Error("arx: counter overflow");if(f.length0;)b.pop().fill(0);return f}}function ln(e,t,r,n,i,o=20){let s=e[0],c=e[1],a=e[2],u=e[3],f=t[0],h=t[1],d=t[2],b=t[3],m=t[4],g=t[5],x=t[6],A=t[7],I=i,p=r[0],S=r[1],v=r[2],D=s,$=c,H=a,B=u,O=f,L=h,T=d,P=b,q=m,N=g,F=x,G=A,y=I,l=p,w=S,E=v;for(let K=0;K{e.update(t);let r=t.length%16;r&&e.update(vi.subarray(r))},ki=new Uint8Array(32);function un(e,t,r,n,i){let o=e(t,r,ki),s=nn.create(o);i&&fn(s,i),fn(s,n);let c=new Uint8Array(16),a=tn(c);hr(a,0,BigInt(i?i.length:0),!0),hr(a,8,BigInt(n.length),!0),s.update(c);let u=s.digest();return o.fill(0),u}var hn=e=>(t,r,n)=>(ft(t,32),ft(r),{encrypt:(o,s)=>{let c=o.length,a=c+16;s?ft(s,a):s=new Uint8Array(a),e(t,r,o,s,1);let u=un(e,t,r,s.subarray(0,-16),n);return s.set(u,c),s},decrypt:(o,s)=>{let c=o.length,a=c-16;if(c<16)throw new Error("encrypted data must be at least 16 bytes");s?ft(s,a):s=new Uint8Array(a);let u=o.subarray(0,-16),f=o.subarray(-16),h=un(e,t,r,u,n);if(!rn(f,h))throw new Error("invalid tag");return e(t,r,u,s,1),s}}),br=lr({blockSize:64,nonceLength:12,tagLength:16},hn(_i)),Is=lr({blockSize:64,nonceLength:24,tagLength:16},hn(Ei));var wr=class{constructor(t){Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._key=new Uint8Array(t)}async seal(t,r,n){return await this._seal(t,r,n)}async open(t,r,n){return await this._open(t,r,n)}_seal(t,r,n){return new Promise(i=>{let o=br(this._key,new Uint8Array(t),new Uint8Array(n)).encrypt(new Uint8Array(r));i(o.buffer)})}_open(t,r,n){return new Promise(i=>{let o=br(this._key,new Uint8Array(t),new Uint8Array(n)).decrypt(new Uint8Array(r));i(o.buffer)})}},Be=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.Chacha20Poly1305}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(t){return new wr(t)}};function re(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`Wrong positive integer: ${e}`)}function Ai(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function ne(e,...t){if(!Ai(e))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function dn(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");re(e.outputLen),re(e.blockLen)}function kt(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Pe(e,t){ne(e);let r=t.outputLen;if(e.lengthnew Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4));function yn(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}var Le=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),pt=(e,t)=>e<<32-t|e>>>t,Si=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Si)throw new Error("Non little-endian hardware is not supported");function ie(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function Kt(e){if(typeof e=="string"&&(e=ie(e)),!yn(e))throw new Error(`expected Uint8Array, got ${typeof e}`);return e}function Ke(...e){let t=0;for(let n=0;ne().update(Kt(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function bn(e){let t=(n,i)=>e(i).update(Kt(n)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=n=>e(n),t}function $t(e=32){if(Ie&&typeof Ie.getRandomValues=="function")return Ie.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Ue=class extends Lt{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,dn(t);let n=Kt(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(n.length>i?t.create().update(n).digest():n);for(let s=0;snew Ue(e,t).update(r).digest();Mt.create=(e,t)=>new Ue(e,t);function Bi(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let i=BigInt(32),o=BigInt(4294967295),s=Number(r>>i&o),c=Number(r&o),a=n?4:0,u=n?0:4;e.setUint32(t+a,s,n),e.setUint32(t+u,c,n)}var Vt=class extends Lt{constructor(t,r,n,i){super(),this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Le(this.buffer)}update(t){kt(this);let{view:r,buffer:n,blockLen:i}=this;t=Kt(t);let o=t.length;for(let s=0;si-s&&(this.process(n,0),s=0);for(let h=s;hf.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;he&t^~e&r,Ii=(e,t,r)=>e&t^e&r^t&r,Li=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ut=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Ot=new Uint32Array(64),xr=class extends Vt{constructor(){super(64,32,8,!1),this.A=Ut[0]|0,this.B=Ut[1]|0,this.C=Ut[2]|0,this.D=Ut[3]|0,this.E=Ut[4]|0,this.F=Ut[5]|0,this.G=Ut[6]|0,this.H=Ut[7]|0}get(){let{A:t,B:r,C:n,D:i,E:o,F:s,G:c,H:a}=this;return[t,r,n,i,o,s,c,a]}set(t,r,n,i,o,s,c,a){this.A=t|0,this.B=r|0,this.C=n|0,this.D=i|0,this.E=o|0,this.F=s|0,this.G=c|0,this.H=a|0}process(t,r){for(let h=0;h<16;h++,r+=4)Ot[h]=t.getUint32(r,!1);for(let h=16;h<64;h++){let d=Ot[h-15],b=Ot[h-2],m=pt(d,7)^pt(d,18)^d>>>3,g=pt(b,17)^pt(b,19)^b>>>10;Ot[h]=g+Ot[h-7]+m+Ot[h-16]|0}let{A:n,B:i,C:o,D:s,E:c,F:a,G:u,H:f}=this;for(let h=0;h<64;h++){let d=pt(c,6)^pt(c,11)^pt(c,25),b=f+d+Pi(c,a,u)+Li[h]+Ot[h]|0,g=(pt(n,2)^pt(n,13)^pt(n,22))+Ii(n,i,o)|0;f=u,u=a,a=c,c=s+b|0,s=o,o=i,i=n,n=b+g|0}n=n+this.A|0,i=i+this.B|0,o=o+this.C|0,s=s+this.D|0,c=c+this.E|0,a=a+this.F|0,u=u+this.G|0,f=f+this.H|0,this.set(n,i,o,s,c,a,u,f)}roundClean(){Ot.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var wn=xt(()=>new xr);var Z=new Uint8Array(0);var xn=new Uint8Array([72,80,75,69,45,118,49]),oe=class extends wt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:Z}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,r){this._checkInit();let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+r.byteLength);return n.set(xn,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,r,n){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+r.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(xn,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(r,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new tt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(t,r,n){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(n),s=new Uint8Array(o),c=Z,a=new Uint8Array(r),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let f=new Uint8Array(this.hashSize+a.length+1);for(let h=1,d=0;d=c.length?(s.set(c,d),d+=c.length):(s.set(c.slice(0,s.length-d),d),d+=s.length-d);return o}async extractAndExpand(t,r,n,i){await this._setup();let o=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},o,i*8)}async labeledExtract(t,r,n){return await this.extract(t,this.buildLabeledIkm(r,n))}async labeledExpand(t,r,n,i){return await this.expand(t,this.buildLabeledInfo(r,n,i),i)}_checkInit(){if(this._suiteId===Z)throw new Error("Not initialized. Call init()")}},Oe=class extends oe{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},He=class extends oe{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},Te=class extends oe{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ht=class extends Oe{async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return Mt(wn,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var Ce=BigInt(4294967295),mr=BigInt(32);function mn(e,t=!1){return t?{h:Number(e&Ce),l:Number(e>>mr&Ce)}:{h:Number(e>>mr&Ce)|0,l:Number(e&Ce)|0}}function gr(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let i=0;iBigInt(e>>>0)<>>0),Ui=(e,t,r)=>e>>>r,Oi=(e,t,r)=>e<<32-r|t>>>r,Hi=(e,t,r)=>e>>>r|t<<32-r,Ti=(e,t,r)=>e<<32-r|t>>>r,Ci=(e,t,r)=>e<<64-r|t>>>r-32,Ri=(e,t,r)=>e>>>r-32|t<<64-r,Di=(e,t)=>t,Ni=(e,t)=>e,_r=(e,t,r)=>e<>>32-r,Er=(e,t,r)=>t<>>32-r,vr=(e,t,r)=>t<>>64-r,kr=(e,t,r)=>e<>>64-r;function zi(e,t,r,n){let i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:i|0}}var ji=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Mi=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,qi=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Fi=(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,Gi=(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0),$i=(e,t,r,n,i,o)=>t+r+n+i+o+(e/2**32|0)|0;var Vi={fromBig:mn,split:gr,toBig:Ki,shrSH:Ui,shrSL:Oi,rotrSH:Hi,rotrSL:Ti,rotrBH:Ci,rotrBL:Ri,rotr32H:Di,rotr32L:Ni,rotlSH:_r,rotlSL:Er,rotlBH:vr,rotlBL:kr,add:zi,add3L:ji,add3H:Mi,add4L:qi,add4H:Fi,add5H:$i,add5L:Gi},U=Vi;var[Zi,Xi]=U.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),Tt=new Uint32Array(80),Ct=new Uint32Array(80),Re=class extends Vt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:r,Bh:n,Bl:i,Ch:o,Cl:s,Dh:c,Dl:a,Eh:u,El:f,Fh:h,Fl:d,Gh:b,Gl:m,Hh:g,Hl:x}=this;return[t,r,n,i,o,s,c,a,u,f,h,d,b,m,g,x]}set(t,r,n,i,o,s,c,a,u,f,h,d,b,m,g,x){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=i|0,this.Ch=o|0,this.Cl=s|0,this.Dh=c|0,this.Dl=a|0,this.Eh=u|0,this.El=f|0,this.Fh=h|0,this.Fl=d|0,this.Gh=b|0,this.Gl=m|0,this.Hh=g|0,this.Hl=x|0}process(t,r){for(let p=0;p<16;p++,r+=4)Tt[p]=t.getUint32(r),Ct[p]=t.getUint32(r+=4);for(let p=16;p<80;p++){let S=Tt[p-15]|0,v=Ct[p-15]|0,D=U.rotrSH(S,v,1)^U.rotrSH(S,v,8)^U.shrSH(S,v,7),$=U.rotrSL(S,v,1)^U.rotrSL(S,v,8)^U.shrSL(S,v,7),H=Tt[p-2]|0,B=Ct[p-2]|0,O=U.rotrSH(H,B,19)^U.rotrBH(H,B,61)^U.shrSH(H,B,6),L=U.rotrSL(H,B,19)^U.rotrBL(H,B,61)^U.shrSL(H,B,6),T=U.add4L($,L,Ct[p-7],Ct[p-16]),P=U.add4H(T,D,O,Tt[p-7],Tt[p-16]);Tt[p]=P|0,Ct[p]=T|0}let{Ah:n,Al:i,Bh:o,Bl:s,Ch:c,Cl:a,Dh:u,Dl:f,Eh:h,El:d,Fh:b,Fl:m,Gh:g,Gl:x,Hh:A,Hl:I}=this;for(let p=0;p<80;p++){let S=U.rotrSH(h,d,14)^U.rotrSH(h,d,18)^U.rotrBH(h,d,41),v=U.rotrSL(h,d,14)^U.rotrSL(h,d,18)^U.rotrBL(h,d,41),D=h&b^~h&g,$=d&m^~d&x,H=U.add5L(I,v,$,Xi[p],Ct[p]),B=U.add5H(H,A,S,D,Zi[p],Tt[p]),O=H|0,L=U.rotrSH(n,i,28)^U.rotrBH(n,i,34)^U.rotrBH(n,i,39),T=U.rotrSL(n,i,28)^U.rotrBL(n,i,34)^U.rotrBL(n,i,39),P=n&o^n&c^o&c,q=i&s^i&a^s&a;A=g|0,I=x|0,g=b|0,x=m|0,b=h|0,m=d|0,{h,l:d}=U.add(u|0,f|0,B|0,O|0),u=c|0,f=a|0,c=o|0,a=s|0,o=n|0,s=i|0;let N=U.add3L(O,T,q);n=U.add3H(N,B,L,P),i=N|0}({h:n,l:i}=U.add(this.Ah|0,this.Al|0,n|0,i|0)),{h:o,l:s}=U.add(this.Bh|0,this.Bl|0,o|0,s|0),{h:c,l:a}=U.add(this.Ch|0,this.Cl|0,c|0,a|0),{h:u,l:f}=U.add(this.Dh|0,this.Dl|0,u|0,f|0),{h,l:d}=U.add(this.Eh|0,this.El|0,h|0,d|0),{h:b,l:m}=U.add(this.Fh|0,this.Fl|0,b|0,m|0),{h:g,l:x}=U.add(this.Gh|0,this.Gl|0,g|0,x|0),{h:A,l:I}=U.add(this.Hh|0,this.Hl|0,A|0,I|0),this.set(n,i,o,s,c,a,u,f,h,d,b,m,g,x,A,I)}roundClean(){Tt.fill(0),Ct.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var Ar=class extends Re{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},se=xt(()=>new Re);var gn=xt(()=>new Ar);var Zt=class extends He{async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return Mt(gn,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var Rt=class extends Te{async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return Mt(se,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var _n=new Uint8Array([75,69,77,0,0]);var Xt=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function mt(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let r=new Uint8Array(t);for(let n=0;n>8;return r}function ce(e,t){let r=new Uint8Array(e.length+t.length);return r.set(e,0),r.set(t,e.length),r}function Dt(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new Uint8Array(r.length);for(let i=0;i8192)throw new tt("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let r;t.ekm===void 0?r=await this.generateKeyPair():Xt(t.ekm)?r=t.ekm:r=await this.deriveKeyPair(t.ekm);let n=await this._prim.serializePublicKey(r.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey));else{let a=Xt(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey)),f=new Uint8Array(await this._prim.dh(a,t.recipientPublicKey));o=ce(u,f)}let s;if(t.senderKey===void 0)s=ce(new Uint8Array(n),new Uint8Array(i));else{let a=Xt(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(a);s=Ji(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let c=await this._generateSharedSecret(o,s);return{enc:n,sharedSecret:c}}catch(o){throw new be(o)}}async decap(t){let r=await this._prim.deserializePublicKey(t.enc),n=Xt(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=Xt(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let s;if(t.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(n,r));else{let a=new Uint8Array(await this._prim.dh(n,r)),u=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));s=ce(a,u)}let c;if(t.senderPublicKey===void 0)c=ce(new Uint8Array(t.enc),new Uint8Array(o));else{let a=await this._prim.serializePublicKey(t.senderPublicKey);c=new Uint8Array(t.enc.byteLength+o.byteLength+a.byteLength),c.set(new Uint8Array(t.enc),0),c.set(new Uint8Array(o),t.enc.byteLength),c.set(new Uint8Array(a),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,c)}catch(s){throw new we(s)}}async _generateSharedSecret(t,r){let n=this._kdf.buildLabeledIkm(Wi,t),i=this._kdf.buildLabeledInfo(Yi,r,this.secretSize);return await this._kdf.extractAndExpand(Z,n,i,this.secretSize)}};var ut=["deriveBits"],Wt=new Uint8Array([100,107,112,95,112,114,107]),De=new Uint8Array([115,107]);var Ne=class{constructor(t){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(t)}val(){return this._num}reset(){this._num.fill(0)}set(t){if(t.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(t)}isZero(){for(let t=0;tt[r])return!1}return!1}};var Qi=new Uint8Array([99,97,110,100,105,100,97,116,101]),to=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),eo=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ro=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),no=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),io=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),oo=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),Nt=class extends wt{constructor(t,r){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=r,t){case V.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=to,this._bitmask=255,this._pkcs8AlgId=no;break;case V.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=eo,this._bitmask=255,this._pkcs8AlgId=io;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ro,this._bitmask=1,this._pkcs8AlgId=oo;break}}async serializePublicKey(t){await this._setup();try{return await this._api.exportKey("raw",t)}catch(r){throw new st(r)}}async deserializePublicKey(t){await this._setup();try{return await this._importRawKey(t,!0)}catch(r){throw new et(r)}}async serializePrivateKey(t){await this._setup();try{let r=await this._api.exportKey("jwk",t);if(!("d"in r))throw new Error("Not private key");return Dt(r.d)}catch(r){throw new st(r)}}async deserializePrivateKey(t){await this._setup();try{return await this._importRawKey(t,!1)}catch(r){throw new et(r)}}async importKey(t,r,n){await this._setup();try{if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new et(i)}}async generateKeyPair(){await this._setup();try{return await this._api.generateKey(this._alg,!0,ut)}catch(t){throw new ct(t)}}async deriveKeyPair(t){await this._setup();try{let r=await this._hkdf.labeledExtract(Z,Wt,new Uint8Array(t)),n=new Ne(this._nSk);for(let o=0;n.isZero()||!n.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(r,Qi,mt(o,1),this._nSk));s[0]=s[0]&this._bitmask,n.set(s)}let i=await this._deserializePkcs8Key(n.val());return n.reset(),{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new It(r)}}async derivePublicKey(t){await this._setup();try{let r=await this._api.exportKey("jwk",t);return delete r.d,delete r.key_ops,await this._api.importKey("jwk",r,this._alg,!0,[])}catch(r){throw new et(r)}}async dh(t,r){try{return await this._setup(),await this._api.deriveBits({name:"ECDH",public:r},t,this._nDh*8)}catch(n){throw new st(n)}}async _importRawKey(t,r){if(r&&t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!r&&t.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");return r?await this._api.importKey("raw",t,this._alg,!0,[]):await this._deserializePkcs8Key(new Uint8Array(t))}async _importJWK(t,r){if(typeof t.crv>"u"||t.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${t.crv}`);if(r){if(typeof t.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",t,this._alg,!0,[])}if(typeof t.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",t,this._alg,!0,ut)}async _deserializePkcs8Key(t){let r=new Uint8Array(this._pkcs8AlgId.length+t.length);return r.set(this._pkcs8AlgId,0),r.set(t,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",r,this._alg,!0,ut)}};var ze=class extends dt{constructor(){let t=new Ht,r=new Nt(V.DhkemP256HkdfSha256,t);super(V.DhkemP256HkdfSha256,r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:V.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var je=class extends dt{constructor(){let t=new Zt,r=new Nt(V.DhkemP384HkdfSha384,t);super(V.DhkemP384HkdfSha384,r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:V.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}};var Me=class extends dt{constructor(){let t=new Rt,r=new Nt(V.DhkemP521HkdfSha512,t);super(V.DhkemP521HkdfSha512,r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:V.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Xc=BigInt(0),so=BigInt(1),co=BigInt(2);function ae(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}var ao=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function qe(e){if(!ae(e))throw new Error("Uint8Array expected");let t="";for(let r=0;r=At._0&&e<=At._9)return e-At._0;if(e>=At._A&&e<=At._F)return e-(At._A-10);if(e>=At._a&&e<=At._f)return e-(At._a-10)}function kn(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);let t=e.length,r=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(r);for(let i=0,o=0;i(co<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",stringOrUint8Array:e=>typeof e=="string"||ae(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function zt(e,t,r={}){let n=(i,o,s)=>{let c=fo[o];if(typeof c!="function")throw new Error(`Invalid validator "${o}", expected function`);let a=e[i];if(!(s&&a===void 0)&&!c(a,e))throw new Error(`Invalid param ${String(i)}=${a} (${typeof a}), expected ${o}`)};for(let[i,o]of Object.entries(t))n(i,o,!1);for(let[i,o]of Object.entries(r))n(i,o,!0);return e}var Q=BigInt(0),Y=BigInt(1),Gt=BigInt(2),lo=BigInt(3),Pr=BigInt(4),Bn=BigInt(5),Pn=BigInt(8),ho=BigInt(9),po=BigInt(16);function M(e,t){let r=e%t;return r>=Q?r:t+r}function Ir(e,t,r){if(r<=Q||t 0");if(r===Y)return Q;let n=Y;for(;t>Q;)t&Y&&(n=n*e%r),e=e*e%r,t>>=Y;return n}function X(e,t,r){let n=e;for(;t-- >Q;)n*=n,n%=r;return n}function In(e,t){if(e===Q||t<=Q)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=M(e,t),n=t,i=Q,o=Y,s=Y,c=Q;for(;r!==Q;){let u=n/r,f=n%r,h=i-s*u,d=o-c*u;n=r,r=f,i=s,o=c,s=h,c=d}if(n!==Y)throw new Error("invert: does not exist");return M(i,t)}function yo(e){let t=(e-Y)/Gt,r,n,i;for(r=e-Y,n=0;r%Gt===Q;r/=Gt,n++);for(i=Gt;i(M(e,t)&Y)===Y,wo=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Ln(e){let t={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},r=wo.reduce((n,i)=>(n[i]="function",n),t);return zt(e,r)}function xo(e,t,r){if(r 0");if(r===Q)return e.ONE;if(r===Y)return t;let n=e.ONE,i=t;for(;r>Q;)r&Y&&(n=e.mul(n,i)),i=e.sqr(i),r>>=Y;return n}function mo(e,t){let r=new Array(t.length),n=t.reduce((o,s,c)=>e.is0(s)?o:(r[c]=o,e.mul(o,s)),e.ONE),i=e.inv(n);return t.reduceRight((o,s,c)=>e.is0(s)?o:(r[c]=e.mul(o,r[c]),e.mul(o,s)),i),r}function Kr(e,t){let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function Fe(e,t,r=!1,n={}){if(e<=Q)throw new Error(`Expected Field ORDER > 0, got ${e}`);let{nBitLength:i,nByteLength:o}=Kr(e,t);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let s=bo(e),c=Object.freeze({ORDER:e,BITS:i,BYTES:o,MASK:Sn(i),ZERO:Q,ONE:Y,create:a=>M(a,e),isValid:a=>{if(typeof a!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof a}`);return Q<=a&&aa===Q,isOdd:a=>(a&Y)===Y,neg:a=>M(-a,e),eql:(a,u)=>a===u,sqr:a=>M(a*a,e),add:(a,u)=>M(a+u,e),sub:(a,u)=>M(a-u,e),mul:(a,u)=>M(a*u,e),pow:(a,u)=>xo(c,a,u),div:(a,u)=>M(a*In(u,e),e),sqrN:a=>a*a,addN:(a,u)=>a+u,subN:(a,u)=>a-u,mulN:(a,u)=>a*u,inv:a=>In(a,e),sqrt:n.sqrt||(a=>s(c,a)),invertBatch:a=>mo(c,a),cmov:(a,u,f)=>f?u:a,toBytes:a=>r?Ft(a,o):Sr(a,o),fromBytes:a=>{if(a.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${a.length}`);return r?St(a):An(a)}});return Object.freeze(c)}function Kn(e,t){if(!e.isOdd)throw new Error("Field doesn't have isOdd");let r=e.sqrt(t);return e.isOdd(r)?e.neg(r):r}var go=BigInt(0),Ur=BigInt(1);function Un(e,t){let r=(i,o)=>{let s=o.negate();return i?s:o},n=i=>{let o=Math.ceil(t/i)+1,s=2**(i-1);return{windows:o,windowSize:s}};return{constTimeNegate:r,unsafeLadder(i,o){let s=e.ZERO,c=i;for(;o>go;)o&Ur&&(s=s.add(c)),c=c.double(),o>>=Ur;return s},precomputeWindow(i,o){let{windows:s,windowSize:c}=n(o),a=[],u=i,f=u;for(let h=0;h>=b,x>a&&(x-=d,s+=Ur);let A=g,I=g+Math.abs(x)-1,p=m%2!==0,S=x<0;x===0?f=f.add(r(p,o[A])):u=u.add(r(S,o[I]))}return{p:u,f}},wNAFCached(i,o,s,c){let a=i._WINDOW_SIZE||1,u=o.get(i);return u||(u=this.precomputeWindow(i,a),a!==1&&o.set(i,c(u))),this.wNAF(a,u,s)}}}function On(e){return Ln(e.Fp),zt(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Kr(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var yt=BigInt(0),ht=BigInt(1),Ge=BigInt(2),_o=BigInt(8),Eo={zip215:!0};function vo(e){let t=On(e);return zt(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function fe(e){let t=vo(e),{Fp:r,n,prehash:i,hash:o,randomBytes:s,nByteLength:c,h:a}=t,u=Ge<{try{return{isValid:!0,value:r.sqrt(y*r.inv(l))}}catch{return{isValid:!1,value:yt}}}),d=t.adjustScalarBytes||(y=>y),b=t.domain||((y,l,w)=>{if(l.length||w)throw new Error("Contexts/pre-hash are not supported");return y}),m=y=>typeof y=="bigint"&&ytm(y)&&m(l)&&yy===yt||g(y,u);function A(y,l){if(g(y,l))return y;throw new Error(`Expected valid scalar < ${l}, got ${typeof y} ${y}`)}function I(y){return y===yt?y:A(y,n)}let p=new Map;function S(y){if(!(y instanceof v))throw new Error("ExtendedPoint expected")}class v{constructor(l,w,E,k){if(this.ex=l,this.ey=w,this.ez=E,this.et=k,!x(l))throw new Error("x required");if(!x(w))throw new Error("y required");if(!x(E))throw new Error("z required");if(!x(k))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof v)throw new Error("extended point not allowed");let{x:w,y:E}=l||{};if(!x(w)||!x(E))throw new Error("invalid affine point");return new v(w,E,ht,f(w*E))}static normalizeZ(l){let w=r.invertBatch(l.map(E=>E.ez));return l.map((E,k)=>E.toAffine(w[k])).map(v.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,p.delete(this)}assertValidity(){let{a:l,d:w}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:E,ey:k,ez:K,et:R}=this,j=f(E*E),C=f(k*k),z=f(K*K),W=f(z*z),J=f(j*l),bt=f(z*f(J+C)),it=f(W+f(w*f(j*C)));if(bt!==it)throw new Error("bad point: equation left != right (1)");let Pt=f(E*k),gt=f(K*R);if(Pt!==gt)throw new Error("bad point: equation left != right (2)")}equals(l){S(l);let{ex:w,ey:E,ez:k}=this,{ex:K,ey:R,ez:j}=l,C=f(w*j),z=f(K*k),W=f(E*j),J=f(R*k);return C===z&&W===J}is0(){return this.equals(v.ZERO)}negate(){return new v(f(-this.ex),this.ey,this.ez,f(-this.et))}double(){let{a:l}=t,{ex:w,ey:E,ez:k}=this,K=f(w*w),R=f(E*E),j=f(Ge*f(k*k)),C=f(l*K),z=w+E,W=f(f(z*z)-K-R),J=C+R,bt=J-j,it=C-R,Pt=f(W*bt),gt=f(J*it),pe=f(W*it),ye=f(bt*J);return new v(Pt,gt,ye,pe)}add(l){S(l);let{a:w,d:E}=t,{ex:k,ey:K,ez:R,et:j}=this,{ex:C,ey:z,ez:W,et:J}=l;if(w===BigInt(-1)){let zr=f((K-k)*(z+C)),jr=f((K+k)*(z-C)),or=f(jr-zr);if(or===yt)return this.double();let Mr=f(R*Ge*J),qr=f(j*Ge*W),Fr=qr+Mr,Gr=jr+zr,$r=qr-Mr,ii=f(Fr*or),oi=f(Gr*$r),si=f(Fr*$r),ci=f(or*Gr);return new v(ii,oi,ci,si)}let bt=f(k*C),it=f(K*z),Pt=f(j*E*J),gt=f(R*W),pe=f((k+K)*(C+z)-bt-it),ye=gt-Pt,Dr=gt+Pt,Nr=f(it-w*bt),ti=f(pe*ye),ei=f(Dr*Nr),ri=f(pe*Nr),ni=f(ye*Dr);return new v(ti,ei,ni,ri)}subtract(l){return this.add(l.negate())}wNAF(l){return H.wNAFCached(this,p,l,v.normalizeZ)}multiply(l){let{p:w,f:E}=this.wNAF(A(l,n));return v.normalizeZ([w,E])[0]}multiplyUnsafe(l){let w=I(l);return w===yt?$:this.equals($)||w===ht?this:this.equals(D)?this.wNAF(w).p:H.unsafeLadder(this,w)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return H.unsafeLadder(this,n).is0()}toAffine(l){let{ex:w,ey:E,ez:k}=this,K=this.is0();l==null&&(l=K?_o:r.inv(k));let R=f(w*l),j=f(E*l),C=f(k*l);if(K)return{x:yt,y:ht};if(C!==ht)throw new Error("invZ was invalid");return{x:R,y:j}}clearCofactor(){let{h:l}=t;return l===ht?this:this.multiplyUnsafe(l)}static fromHex(l,w=!1){let{d:E,a:k}=t,K=r.BYTES;l=lt("pointHex",l,K);let R=l.slice(),j=l[K-1];R[K-1]=j&-129;let C=St(R);C===yt||(w?A(C,u):A(C,r.ORDER));let z=f(C*C),W=f(z-ht),J=f(E*z-k),{isValid:bt,value:it}=h(W,J);if(!bt)throw new Error("Point.fromHex: invalid y coordinate");let Pt=(it&ht)===ht,gt=(j&128)!==0;if(!w&&it===yt&>)throw new Error("Point.fromHex: x=0 and x_0=1");return gt!==Pt&&(it=f(-it)),v.fromAffine({x:it,y:C})}static fromPrivateKey(l){return L(l).point}toRawBytes(){let{x:l,y:w}=this.toAffine(),E=Ft(w,r.BYTES);return E[E.length-1]|=l&ht?128:0,E}toHex(){return qe(this.toRawBytes())}}v.BASE=new v(t.Gx,t.Gy,ht,f(t.Gx*t.Gy)),v.ZERO=new v(yt,ht,ht,yt);let{BASE:D,ZERO:$}=v,H=Un(v,c*8);function B(y){return M(y,n)}function O(y){return B(St(y))}function L(y){let l=c;y=lt("private key",y,l);let w=lt("hashed private key",o(y),2*l),E=d(w.slice(0,l)),k=w.slice(l,2*l),K=O(E),R=D.multiply(K),j=R.toRawBytes();return{head:E,prefix:k,scalar:K,point:R,pointBytes:j}}function T(y){return L(y).pointBytes}function P(y=new Uint8Array,...l){let w=Br(...l);return O(o(b(w,lt("context",y),!!i)))}function q(y,l,w={}){y=lt("message",y),i&&(y=i(y));let{prefix:E,scalar:k,pointBytes:K}=L(l),R=P(w.context,E,y),j=D.multiply(R).toRawBytes(),C=P(w.context,j,K,y),z=B(R+C*k);I(z);let W=Br(j,Ft(z,r.BYTES));return lt("result",W,c*2)}let N=Eo;function F(y,l,w,E=N){let{context:k,zip215:K}=E,R=r.BYTES;y=lt("signature",y,2*R),l=lt("message",l),i&&(l=i(l));let j=St(y.slice(R,2*R)),C,z,W;try{C=v.fromHex(w,K),z=v.fromHex(y.slice(0,R),K),W=D.multiplyUnsafe(j)}catch{return!1}if(!K&&C.isSmallOrder())return!1;let J=P(k,z.toRawBytes(),C.toRawBytes(),l);return z.add(C.multiplyUnsafe(J)).subtract(W).clearCofactor().equals(v.ZERO)}return D._setWindowSize(8),{CURVE:t,getPublicKey:T,sign:q,verify:F,ExtendedPoint:v,utils:{getExtendedPublicKey:L,randomPrivateKey:()=>s(r.BYTES),precompute(y=8,l=v.BASE){return l._setWindowSize(y),l.multiply(BigInt(3)),l}}}}var ue=BigInt(0),Or=BigInt(1);function ko(e){return zt(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function $e(e){let t=ko(e),{P:r}=t,n=p=>M(p,r),i=t.montgomeryBits,o=Math.ceil(i/8),s=t.nByteLength,c=t.adjustScalarBytes||(p=>p),a=t.powPminus2||(p=>Ir(p,r-BigInt(2),r));function u(p,S,v){let D=n(p*(S-v));return S=n(S-D),v=n(v+D),[S,v]}function f(p){if(typeof p=="bigint"&&ue<=p&&p=ue;N--){let F=D>>N⩔T^=F,P=u(T,H,O),H=P[0],O=P[1],P=u(T,B,L),B=P[0],L=P[1],T=F;let G=H+B,y=n(G*G),l=H-B,w=n(l*l),E=y-w,k=O+L,K=O-L,R=n(K*G),j=n(k*l),C=R+j,z=R-j;O=n(C*C),L=n($*n(z*z)),H=n(y*w),B=n(E*(y+n(h*E)))}P=u(T,H,O),H=P[0],O=P[1],P=u(T,B,L),B=P[0],L=P[1];let q=a(B);return n(H*q)}function b(p){return Ft(n(p),o)}function m(p){let S=lt("u coordinate",p,o);return s===32&&(S[31]&=127),St(S)}function g(p){let S=lt("scalar",p),v=S.length;if(v!==o&&v!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${v}`);return St(c(S))}function x(p,S){let v=m(S),D=g(p),$=d(v,D);if($===ue)throw new Error("Invalid private or public key received");return b($)}let A=b(t.Gu);function I(p){return x(p,A)}return{scalarMult:x,scalarMultBase:I,getSharedSecret:(p,S)=>x(p,S),getPublicKey:p=>I(p),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:A}}var le=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),Hn=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),da=BigInt(0),Ao=BigInt(1),Hr=BigInt(2),So=BigInt(5),Tn=BigInt(10),Bo=BigInt(20),Po=BigInt(40),Cn=BigInt(80);function Rn(e){let t=le,n=e*e%t*e%t,i=X(n,Hr,t)*n%t,o=X(i,Ao,t)*e%t,s=X(o,So,t)*o%t,c=X(s,Tn,t)*s%t,a=X(c,Bo,t)*c%t,u=X(a,Po,t)*a%t,f=X(u,Cn,t)*u%t,h=X(f,Cn,t)*u%t,d=X(h,Tn,t)*s%t;return{pow_p_5_8:X(d,Hr,t)*e%t,b2:n}}function Dn(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}function Io(e,t){let r=le,n=M(t*t*t,r),i=M(n*n*t,r),o=Rn(e*i).pow_p_5_8,s=M(e*n*o,r),c=M(t*s*s,r),a=s,u=M(s*Hn,r),f=c===e,h=c===M(-e,r),d=c===M(-e*Hn,r);return f&&(s=a),(h||d)&&(s=u),Lr(s,r)&&(s=M(-s,r)),{isValid:f||h,value:s}}var Bt=Fe(le,void 0,!0),Nn={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:Bt,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:se,randomBytes:$t,adjustScalarBytes:Dn,uvRatio:Io};function zn(e,t,r){if(t.length>255)throw new Error("Context is too big");return Ke(ie("SigEd25519 no Ed25519 collisions"),new Uint8Array([r?1:0,t.length]),t,e)}var pa=fe({...Nn,domain:zn}),ya=fe({...Nn,domain:zn,prehash:se}),Ve=$e({P:le,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:e=>{let t=le,{pow_p_5_8:r,b2:n}=Rn(e);return M(X(r,BigInt(3),t)*n,t)},adjustScalarBytes:Dn,randomBytes:$t});var Lo=(Bt.ORDER+BigInt(3))/BigInt(8),ba=Bt.pow(Hr,Lo),wa=Bt.sqrt(Bt.neg(Bt.ONE)),xa=(Bt.ORDER-BigInt(5))/BigInt(8),ma=BigInt(486662);var ga=Kn(Bt,Bt.neg(BigInt(486664)));var _a=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Ea=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),va=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),ka=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");var Aa=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var nt=class{constructor(t,r,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:t},this.usages=i,n==="public"&&(this.usages=[])}};var Yt="X25519",Ze=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=32,this._nSk=32}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(r){throw new st(r)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(r){throw new et(r)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(r){throw new st(r)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(r){throw new et(r)}}async importKey(t,r,n){try{if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new et(i)}}async generateKeyPair(){try{let t=Ve.utils.randomPrivateKey(),r=new nt(Yt,t,"private",ut);return{publicKey:await this.derivePublicKey(r),privateKey:r}}catch(t){throw new ct(t)}}async deriveKeyPair(t){try{let r=await this._hkdf.labeledExtract(Z,Wt,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,De,Z,this._nSk),i=new nt(Yt,new Uint8Array(n),"private",ut);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new It(r)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(r){throw new et(r)}}async dh(t,r){try{return await this._dh(t,r)}catch(n){throw new st(n)}}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_serializePrivateKey(t){return new Promise(r=>{r(t.key.buffer)})}_importRawKey(t,r){return new Promise((n,i)=>{r&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!r&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new nt(Yt,new Uint8Array(t),r?"public":"private",r?[]:ut))})}_importJWK(t,r){return new Promise((n,i)=>{(typeof t.kty>"u"||t.kty!=="OKP")&&i(new Error(`Invalid kty: ${t.kty}`)),(typeof t.crv>"u"||t.crv!=="X25519")&&i(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x>"u"&&i(new Error("Invalid key: `x` not found")),n(new nt(Yt,Dt(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new nt(Yt,Dt(t.d),"private",ut)))})}_derivePublicKey(t){return new Promise((r,n)=>{try{let i=Ve.getPublicKey(t.key);r(new nt(Yt,i,"public"))}catch(i){n(i)}})}_dh(t,r){return new Promise((n,i)=>{try{n(Ve.getSharedSecret(t.key,r.key).buffer)}catch(o){i(o)}})}};var Xe=class extends dt{constructor(){let t=new Ht;super(V.DhkemX25519HkdfSha256,new Ze(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:V.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var[qn,Fn,Gn]=[[],[],[]],Ko=BigInt(0),he=BigInt(1),Uo=BigInt(2),Oo=BigInt(7),Ho=BigInt(256),To=BigInt(113);for(let e=0,t=he,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],qn.push(2*(5*n+r)),Fn.push((e+1)*(e+2)/2%64);let i=Ko;for(let o=0;o<7;o++)t=(t<>Oo)*To)%Ho,t&Uo&&(i^=he<<(he<r>32?vr(e,t,r):_r(e,t,r),Mn=(e,t,r)=>r>32?kr(e,t,r):Er(e,t,r);function Do(e,t=24){let r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let c=(s+8)%10,a=(s+2)%10,u=r[a],f=r[a+1],h=jn(u,f,1)^r[c],d=Mn(u,f,1)^r[c+1];for(let b=0;b<50;b+=10)e[s+b]^=h,e[s+b+1]^=d}let i=e[2],o=e[3];for(let s=0;s<24;s++){let c=Fn[s],a=jn(i,o,c),u=Mn(i,o,c),f=qn[s];i=e[f],o=e[f+1],e[f]=a,e[f+1]=u}for(let s=0;s<50;s+=10){for(let c=0;c<10;c++)r[c]=e[s+c];for(let c=0;c<10;c++)e[s+c]^=~r[(c+2)%10]&r[(c+4)%10]}e[0]^=Co[n],e[1]^=Ro[n]}r.fill(0)}var We=class e extends Lt{constructor(t,r,n,i=!1,o=24){if(super(),this.blockLen=t,this.suffix=r,this.outputLen=n,this.enableXOF=i,this.rounds=o,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,re(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=pn(this.state)}keccak(){Do(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){kt(this);let{blockLen:r,state:n}=this;t=Kt(t);let i=t.length;for(let o=0;o=n&&this.keccak();let s=Math.min(n-this.posOut,o-i);t.set(r.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return re(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(Pe(t,this),this.finished)throw new Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){let{blockLen:r,suffix:n,outputLen:i,rounds:o,enableXOF:s}=this;return t||(t=new e(r,n,i,s,o)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=o,t.suffix=n,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}},jt=(e,t,r)=>xt(()=>new We(t,e,r)),qa=jt(6,144,224/8),Fa=jt(6,136,256/8),Ga=jt(6,104,384/8),$a=jt(6,72,512/8),Va=jt(1,144,224/8),Za=jt(1,136,256/8),Xa=jt(1,104,384/8),Wa=jt(1,72,512/8),$n=(e,t,r)=>bn((n={})=>new We(t,e,n.dkLen===void 0?r:n.dkLen,!0)),Ya=$n(31,168,128/8),Tr=$n(31,136,256/8);var No=xt(()=>Tr.create({dkLen:114})),zo=xt(()=>Tr.create({dkLen:64})),de=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439"),jo=BigInt(1),Vn=BigInt(2),Zn=BigInt(3),of=BigInt(4),Mo=BigInt(11),qo=BigInt(22),Xn=BigInt(44),Fo=BigInt(88),Go=BigInt(223);function Wn(e){let t=de,r=e*e*e%t,n=r*r*e%t,i=X(n,Zn,t)*n%t,o=X(i,Zn,t)*n%t,s=X(o,Vn,t)*r%t,c=X(s,Mo,t)*s%t,a=X(c,qo,t)*c%t,u=X(a,Xn,t)*a%t,f=X(u,Fo,t)*u%t,h=X(f,Xn,t)*a%t,d=X(h,Vn,t)*r%t,b=X(d,jo,t)*e%t;return X(b,Go,t)*d%t}function Yn(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function $o(e,t){let r=de,n=M(e*e*t,r),i=M(n*e,r),o=M(i*n*t,r),s=Wn(o),c=M(i*s,r),a=M(c*c,r);return{isValid:M(a*t,r)===e,value:c}}var Jn=Fe(de,456,!0),Vo={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Jn,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:No,randomBytes:$t,adjustScalarBytes:Yn,domain:(e,t,r)=>{if(t.length>255)throw new Error(`Context is too big: ${t.length}`);return Ke(ie("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:$o};var sf=fe({...Vo,prehash:zo}),Ye=$e({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:de,Gu:BigInt(5),powPminus2:e=>{let t=de,r=Wn(e),n=X(r,BigInt(2),t);return M(n*e,t)},adjustScalarBytes:Yn,randomBytes:$t});var cf=(Jn.ORDER-BigInt(3))/BigInt(4),af=BigInt(156326);var ff=BigInt("39082"),uf=BigInt("78163"),lf=BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),hf=BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716");var df=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var Jt="X448",Je=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=56,this._nSk=56}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(r){throw new st(r)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(r){throw new et(r)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(r){throw new st(r)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(r){throw new et(r)}}async importKey(t,r,n){try{if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new et(i)}}async generateKeyPair(){try{let t=Ye.utils.randomPrivateKey(),r=new nt(Jt,t,"private",ut);return{publicKey:await this.derivePublicKey(r),privateKey:r}}catch(t){throw new ct(t)}}async deriveKeyPair(t){try{let r=await this._hkdf.labeledExtract(Z,Wt,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,De,Z,this._nSk),i=new nt(Jt,new Uint8Array(n),"private",ut);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new It(r)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(r){throw new et(r)}}async dh(t,r){try{return await this._dh(t,r)}catch(n){throw new st(n)}}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_serializePrivateKey(t){return new Promise(r=>{r(t.key.buffer)})}_importRawKey(t,r){return new Promise((n,i)=>{r&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!r&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new nt(Jt,new Uint8Array(t),r?"public":"private",r?[]:ut))})}_importJWK(t,r){return new Promise((n,i)=>{t.kty!=="OKP"&&i(new Error(`Invalid kty: ${t.kty}`)),t.crv!=="X448"&&i(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x!="string"&&i(new Error("Invalid key: `x` not found")),n(new nt(Jt,Dt(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new nt(Jt,Dt(t.d),"private",ut)))})}_derivePublicKey(t){return new Promise((r,n)=>{try{let i=Ye.getPublicKey(t.key);r(new nt(Jt,i,"public"))}catch(i){n(i)}})}_dh(t,r){return new Promise((n,i)=>{try{n(Ye.getSharedSecret(t.key,r.key).buffer)}catch(o){i(o)}})}};var Qe=class extends dt{constructor(){let t=new Rt;super(V.DhkemX448HkdfSha512,new Je(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:V.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};function Cr(){return new Promise((e,t)=>{t(new ct("Not supported"))})}var Zo=new Uint8Array([115,101,99]),Qt=class{constructor(t,r,n){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=t,this._kdf=r,this.exporterSecret=n}async seal(t,r){return await Cr()}async open(t,r){return await Cr()}async export(t,r){if(t.byteLength>8192)throw new tt("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Zo,new Uint8Array(t),r)}catch(n){throw new xe(n)}}},tr=class extends Qt{},er=class extends Qt{constructor(t,r,n,i){super(t,r,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}};function Xo(e,t){if(e.byteLength!==t.byteLength)throw new Error("xor: different length inputs");let r=new Uint8Array(e.byteLength);for(let n=0;nNumber.MAX_SAFE_INTEGER)throw new _e("Message limit reached");t.seq+=1}};var rr=class extends te{async open(t,r=Z){let n;try{n=await this._ctx.key.open(this.computeNonce(this._ctx),t,r)}catch(i){throw new ge(i)}return this.incrementSeq(this._ctx),n}};var nr=class extends te{constructor(t,r,n,i){super(t,r,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}async seal(t,r=Z){let n;try{n=await this._ctx.key.seal(this.computeNonce(this._ctx),t,r)}catch(i){throw new me(i)}return this.incrementSeq(this._ctx),n}};var Wo=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Yo=new Uint8Array([101,120,112]),Jo=new Uint8Array([105,110,102,111,95,104,97,115,104]),Qo=new Uint8Array([107,101,121]),ts=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),es=new Uint8Array([115,101,99,114,101,116]),rs=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),ir=class extends wt{constructor(t){if(super(),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof t.kem=="number")throw new tt("KemId cannot be used");if(this._kem=t.kem,typeof t.kdf=="number")throw new tt("KdfId cannot be used");if(this._kdf=t.kdf,typeof t.aead=="number")throw new tt("AeadId cannot be used");this._aead=t.aead,this._suiteId=new Uint8Array(rs),this._suiteId.set(mt(this._kem.id,2),4),this._suiteId.set(mt(this._kdf.id,2),6),this._suiteId.set(mt(this._aead.id,2),8),this._kdf.init(this._suiteId)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async createSenderContext(t){this._validateInputLength(t),await this._setup();let r=await this._kem.encap(t),n;return t.psk!==void 0?n=t.senderKey!==void 0?_t.AuthPsk:_t.Psk:n=t.senderKey!==void 0?_t.Auth:_t.Base,await this._keyScheduleS(n,r.sharedSecret,r.enc,t)}async createRecipientContext(t){this._validateInputLength(t),await this._setup();let r=await this._kem.decap(t),n;return t.psk!==void 0?n=t.senderPublicKey!==void 0?_t.AuthPsk:_t.Psk:n=t.senderPublicKey!==void 0?_t.Auth:_t.Base,await this._keyScheduleR(n,r,t)}async seal(t,r,n=Z){let i=await this.createSenderContext(t);return{ct:await i.seal(r,n),enc:i.enc}}async open(t,r,n=Z){return await(await this.createRecipientContext(t)).open(r,n)}async _keySchedule(t,r,n){let i=n.psk===void 0?Z:new Uint8Array(n.psk.id),o=await this._kdf.labeledExtract(Z,ts,i),s=n.info===void 0?Z:new Uint8Array(n.info),c=await this._kdf.labeledExtract(Z,Jo,s),a=new Uint8Array(1+o.byteLength+c.byteLength);a.set(new Uint8Array([t]),0),a.set(new Uint8Array(o),1),a.set(new Uint8Array(c),1+o.byteLength);let u=n.psk===void 0?Z:new Uint8Array(n.psk.key),f=this._kdf.buildLabeledIkm(es,u),h=this._kdf.buildLabeledInfo(Yo,a,this._kdf.hashSize),d=await this._kdf.extractAndExpand(r,f,h,this._kdf.hashSize);if(this._aead.id===at.ExportOnly)return{aead:this._aead,exporterSecret:d};let b=this._kdf.buildLabeledInfo(Qo,a,this._aead.keySize),m=await this._kdf.extractAndExpand(r,f,b,this._aead.keySize),g=this._kdf.buildLabeledInfo(Wo,a,this._aead.nonceSize),x=await this._kdf.extractAndExpand(r,f,g,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:m,baseNonce:new Uint8Array(x),seq:0}}async _keyScheduleS(t,r,n,i){let o=await this._keySchedule(t,r,i);return o.key===void 0?new er(this._api,this._kdf,o.exporterSecret,n):new nr(this._api,this._kdf,o,n)}async _keyScheduleR(t,r,n){let i=await this._keySchedule(t,r,n);return i.key===void 0?new tr(this._api,this._kdf,i.exporterSecret):new rr(this._api,this._kdf,i)}_validateInputLength(t){if(t.info!==void 0&&t.info.byteLength>8192)throw new tt("Too long info");if(t.psk!==void 0){if(t.psk.key.byteLength<32)throw new tt(`PSK must have at least ${32} bytes`);if(t.psk.key.byteLength>8192)throw new tt("Too long psk.key");if(t.psk.id.byteLength>8192)throw new tt("Too long psk.id")}}};var Rr=class extends ir{constructor(t){if(typeof t.kem=="number")switch(t.kem){case V.DhkemP256HkdfSha256:t.kem=new ze;break;case V.DhkemP384HkdfSha384:t.kem=new je;break;case V.DhkemP521HkdfSha512:t.kem=new Me;break;case V.DhkemX25519HkdfSha256:t.kem=new Xe;break;case V.DhkemX448HkdfSha512:t.kem=new Qe;break;default:throw new tt(`The KEM (${t.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof t.kdf=="number")switch(t.kdf){case Et.HkdfSha256:t.kdf=new Ht;break;case Et.HkdfSha384:t.kdf=new Zt;break;default:t.kdf=new Rt;break}if(typeof t.aead=="number")switch(t.aead){case at.Aes128Gcm:t.aead=new ee;break;case at.Aes256Gcm:t.aead=new Ee;break;case at.Chacha20Poly1305:t.aead=new Be;break;default:t.aead=new ve;break}super(t)}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(t){return await this._setup(),await this._kem.deriveKeyPair(t)}async importKey(t,r,n=!0){return await this._setup(),await this._kem.importKey(t,r,n)}};export{Yr as Aead,at as AeadId,sr as BaseError,Rr as CipherSuite,we as DecapError,It as DeriveKeyPairError,et as DeserializeError,be as EncapError,xe as ExportError,ot as HpkeError,tt as InvalidParamError,Wr as Kdf,Et as KdfId,Xr as Kem,V as KemId,_e as MessageLimitReachedError,ct as NotSupportedError,ge as OpenError,me as SealError,st as SerializeError,Zr as ValidationError}; +var ri={},Gr=ni(globalThis,ri);function ni(e,t){return new Proxy(e,{get(r,n,i){return n in t?t[n]:e[n]},set(r,n,i){return n in t&&delete t[n],e[n]=i,!0},deleteProperty(r,n){let i=!1;return n in t&&(delete t[n],i=!0),n in e&&(delete e[n],i=!0),i},ownKeys(r){let n=Reflect.ownKeys(e),i=Reflect.ownKeys(t),o=new Set(i);return[...n.filter(s=>!o.has(s)),...i]},defineProperty(r,n,i){return n in t&&delete t[n],Reflect.defineProperty(e,n,i),!0},getOwnPropertyDescriptor(r,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(e,n)},has(r,n){return n in t||n in e}})}var Qe=class extends Error{constructor(t){let r;t instanceof Error?r=t.message:typeof t=="string"?r=t:r="",super(r),this.name=this.constructor.name}},ot=class extends Qe{},tt=class extends ot{},$r=class extends ot{},st=class extends ot{},et=class extends ot{},ue=class extends ot{},le=class extends ot{},he=class extends ot{},de=class extends ot{},pe=class extends ot{},ye=class extends ot{},Pt=class extends ot{},ct=class extends ot{};async function oi(){if(Gr!==void 0&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:e}=await import("crypto");return e.subtle}catch(e){throw new ct(e)}}var xt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}async _setup(){this._api===void 0&&(this._api=await oi())}};var _t={Base:0,Psk:1,Auth:2,AuthPsk:3},Vr={NotAssigned:0,DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33,HybridkemX25519Kyber768:48},$=Vr,Zr={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},Et=Zr,Xr={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},at=Xr;var Yr=["encrypt","decrypt"];var tr=class extends xt{constructor(t){super(),Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._rawKey=t}async seal(t,r,n){await this._setupKey();let i={name:"AES-GCM",iv:t,additionalData:n};return await this._api.encrypt(i,this._key,r)}async open(t,r,n){await this._setupKey();let i={name:"AES-GCM",iv:t,additionalData:n};return await this._api.decrypt(i,this._key,r)}async _setupKey(){if(this._key!==void 0)return;await this._setup();let t=await this._importKey(this._rawKey);new Uint8Array(this._rawKey).fill(0),this._key=t}async _importKey(t){return await this._api.importKey("raw",t,{name:"AES-GCM"},!0,Yr)}},te=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(t){return new tr(t)}},be=class extends te{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}};var xe=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(t){throw new ct("Export only")}};function we(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`positive integer expected, not ${e}`)}function er(e){if(typeof e!="boolean")throw new Error(`boolean expected, not ${e}`)}function rr(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function ft(e,...t){if(!rr(e))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw new Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function nr(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Wr(e,t){ft(e);let r=t.outputLen;if(e.lengthnew Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Jr=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),si=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!si)throw new Error("Non little-endian hardware is not supported");function ci(e){if(typeof e!="string")throw new Error(`string expected, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function me(e){if(typeof e=="string")e=ci(e);else if(rr(e))e=e.slice();else throw new Error(`Uint8Array expected, got ${typeof e}`);return e}function Qr(e,t){if(t==null||typeof t!="object")throw new Error("options must be defined");return Object.assign(e,t)}function tn(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n(Object.assign(t,e),t);function or(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let i=BigInt(32),o=BigInt(4294967295),s=Number(r>>i&o),c=Number(r&o),a=n?4:0,u=n?0:4;e.setUint32(t+a,s,n),e.setUint32(t+u,c,n)}var rt=(e,t)=>e[t++]&255|(e[t++]&255)<<8,sr=class{constructor(t){this.blockLen=16,this.outputLen=16,this.buffer=new Uint8Array(16),this.r=new Uint16Array(10),this.h=new Uint16Array(10),this.pad=new Uint16Array(8),this.pos=0,this.finished=!1,t=me(t),ft(t,32);let r=rt(t,0),n=rt(t,2),i=rt(t,4),o=rt(t,6),s=rt(t,8),c=rt(t,10),a=rt(t,12),u=rt(t,14);this.r[0]=r&8191,this.r[1]=(r>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|o<<9)&8191,this.r[4]=(o>>>4|s<<12)&255,this.r[5]=s>>>1&8190,this.r[6]=(s>>>14|c<<2)&8191,this.r[7]=(c>>>11|a<<5)&8065,this.r[8]=(a>>>8|u<<8)&8191,this.r[9]=u>>>5&127;for(let f=0;f<8;f++)this.pad[f]=rt(t,16+2*f)}process(t,r,n=!1){let i=n?0:2048,{h:o,r:s}=this,c=s[0],a=s[1],u=s[2],f=s[3],h=s[4],d=s[5],b=s[6],m=s[7],g=s[8],w=s[9],S=rt(t,r+0),I=rt(t,r+2),p=rt(t,r+4),A=rt(t,r+6),v=rt(t,r+8),D=rt(t,r+10),G=rt(t,r+12),H=rt(t,r+14),B=o[0]+(S&8191),O=o[1]+((S>>>13|I<<3)&8191),L=o[2]+((I>>>10|p<<6)&8191),T=o[3]+((p>>>7|A<<9)&8191),P=o[4]+((A>>>4|v<<12)&8191),M=o[5]+(v>>>1&8191),N=o[6]+((v>>>14|D<<2)&8191),q=o[7]+((D>>>11|G<<5)&8191),F=o[8]+((G>>>8|H<<8)&8191),y=o[9]+(H>>>5|i),l=0,x=l+B*c+O*(5*w)+L*(5*g)+T*(5*m)+P*(5*b);l=x>>>13,x&=8191,x+=M*(5*d)+N*(5*h)+q*(5*f)+F*(5*u)+y*(5*a),l+=x>>>13,x&=8191;let E=l+B*a+O*c+L*(5*w)+T*(5*g)+P*(5*m);l=E>>>13,E&=8191,E+=M*(5*b)+N*(5*d)+q*(5*h)+F*(5*f)+y*(5*u),l+=E>>>13,E&=8191;let k=l+B*u+O*a+L*c+T*(5*w)+P*(5*g);l=k>>>13,k&=8191,k+=M*(5*m)+N*(5*b)+q*(5*d)+F*(5*h)+y*(5*f),l+=k>>>13,k&=8191;let K=l+B*f+O*u+L*a+T*c+P*(5*w);l=K>>>13,K&=8191,K+=M*(5*g)+N*(5*m)+q*(5*b)+F*(5*d)+y*(5*h),l+=K>>>13,K&=8191;let R=l+B*h+O*f+L*u+T*a+P*c;l=R>>>13,R&=8191,R+=M*(5*w)+N*(5*g)+q*(5*m)+F*(5*b)+y*(5*d),l+=R>>>13,R&=8191;let j=l+B*d+O*h+L*f+T*u+P*a;l=j>>>13,j&=8191,j+=M*c+N*(5*w)+q*(5*g)+F*(5*m)+y*(5*b),l+=j>>>13,j&=8191;let C=l+B*b+O*d+L*h+T*f+P*u;l=C>>>13,C&=8191,C+=M*a+N*c+q*(5*w)+F*(5*g)+y*(5*m),l+=C>>>13,C&=8191;let z=l+B*m+O*b+L*d+T*h+P*f;l=z>>>13,z&=8191,z+=M*u+N*a+q*c+F*(5*w)+y*(5*g),l+=z>>>13,z&=8191;let X=l+B*g+O*m+L*b+T*d+P*h;l=X>>>13,X&=8191,X+=M*f+N*u+q*a+F*c+y*(5*w),l+=X>>>13,X&=8191;let W=l+B*w+O*g+L*m+T*b+P*d;l=W>>>13,W&=8191,W+=M*h+N*f+q*u+F*a+y*c,l+=W>>>13,W&=8191,l=(l<<2)+l|0,l=l+x|0,x=l&8191,l=l>>>13,E+=l,o[0]=x,o[1]=E,o[2]=k,o[3]=K,o[4]=R,o[5]=j,o[6]=C,o[7]=z,o[8]=X,o[9]=W}finalize(){let{h:t,pad:r}=this,n=new Uint16Array(10),i=t[1]>>>13;t[1]&=8191;for(let c=2;c<10;c++)t[c]+=i,i=t[c]>>>13,t[c]&=8191;t[0]+=i*5,i=t[0]>>>13,t[0]&=8191,t[1]+=i,i=t[1]>>>13,t[1]&=8191,t[2]+=i,n[0]=t[0]+5,i=n[0]>>>13,n[0]&=8191;for(let c=1;c<10;c++)n[c]=t[c]+i,i=n[c]>>>13,n[c]&=8191;n[9]-=8192;let o=(i^1)-1;for(let c=0;c<10;c++)n[c]&=o;o=~o;for(let c=0;c<10;c++)t[c]=t[c]&o|n[c];t[0]=(t[0]|t[1]<<13)&65535,t[1]=(t[1]>>>3|t[2]<<10)&65535,t[2]=(t[2]>>>6|t[3]<<7)&65535,t[3]=(t[3]>>>9|t[4]<<4)&65535,t[4]=(t[4]>>>12|t[5]<<1|t[6]<<14)&65535,t[5]=(t[6]>>>2|t[7]<<11)&65535,t[6]=(t[7]>>>5|t[8]<<8)&65535,t[7]=(t[8]>>>8|t[9]<<5)&65535;let s=t[0]+r[0];t[0]=s&65535;for(let c=1;c<8;c++)s=(t[c]+r[c]|0)+(s>>>16)|0,t[c]=s&65535}update(t){nr(this);let{buffer:r,blockLen:n}=this;t=me(t);let i=t.length;for(let o=0;o>>0,t[o++]=n[s]>>>8;return t}digest(){let{buffer:t,outputLen:r}=this;this.digestInto(t);let n=t.slice(0,r);return this.destroy(),n}};function ai(e){let t=(n,i)=>e(i).update(me(n)).digest(),r=e(new Uint8Array(32));return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=n=>e(n),t}var en=ai(e=>new sr(e));var nn=e=>Uint8Array.from(e.split("").map(t=>t.charCodeAt(0))),fi=nn("expand 16-byte k"),ui=nn("expand 32-byte k"),li=vt(fi),on=vt(ui),ys=on.slice();function _(e,t){return e<>>32-t}function cr(e){return e.byteOffset%4===0}var ge=64,hi=16,sn=2**32-1,rn=new Uint32Array;function di(e,t,r,n,i,o,s,c){let a=i.length,u=new Uint8Array(ge),f=vt(u),h=cr(i)&&cr(o),d=h?vt(i):rn,b=h?vt(o):rn;for(let m=0;m=sn)throw new Error("arx: counter overflow");let g=Math.min(ge,a-m);if(h&&g===ge){let w=m/4;if(m%4!==0)throw new Error("arx: invalid block position");for(let S=0,I;S{ft(c),ft(a),ft(u);let d=u.length;if(f||(f=new Uint8Array(d)),ft(f),we(h),h<0||h>=sn)throw new Error("arx: counter overflow");if(f.length0;)b.pop().fill(0);return f}}function fn(e,t,r,n,i,o=20){let s=e[0],c=e[1],a=e[2],u=e[3],f=t[0],h=t[1],d=t[2],b=t[3],m=t[4],g=t[5],w=t[6],S=t[7],I=i,p=r[0],A=r[1],v=r[2],D=s,G=c,H=a,B=u,O=f,L=h,T=d,P=b,M=m,N=g,q=w,F=S,y=I,l=p,x=A,E=v;for(let K=0;K{e.update(t);let r=t.length%16;r&&e.update(xi.subarray(r))},wi=new Uint8Array(32);function an(e,t,r,n,i){let o=e(t,r,wi),s=en.create(o);i&&cn(s,i),cn(s,n);let c=new Uint8Array(16),a=Jr(c);or(a,0,BigInt(i?i.length:0),!0),or(a,8,BigInt(n.length),!0),s.update(c);let u=s.digest();return o.fill(0),u}var un=e=>(t,r,n)=>(ft(t,32),ft(r),{encrypt:(o,s)=>{let c=o.length,a=c+16;s?ft(s,a):s=new Uint8Array(a),e(t,r,o,s,1);let u=an(e,t,r,s.subarray(0,-16),n);return s.set(u,c),s},decrypt:(o,s)=>{let c=o.length,a=c-16;if(c<16)throw new Error("encrypted data must be at least 16 bytes");s?ft(s,a):s=new Uint8Array(a);let u=o.subarray(0,-16),f=o.subarray(-16),h=an(e,t,r,u,n);if(!tn(f,h))throw new Error("invalid tag");return e(t,r,u,s,1),s}}),fr=ir({blockSize:64,nonceLength:12,tagLength:16},un(yi)),_s=ir({blockSize:64,nonceLength:24,tagLength:16},un(bi));var ur=class{constructor(t){Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._key=new Uint8Array(t)}async seal(t,r,n){return await this._seal(t,r,n)}async open(t,r,n){return await this._open(t,r,n)}_seal(t,r,n){return new Promise(i=>{let o=fr(this._key,new Uint8Array(t),new Uint8Array(n)).encrypt(new Uint8Array(r));i(o.buffer)})}_open(t,r,n){return new Promise(i=>{let o=fr(this._key,new Uint8Array(t),new Uint8Array(n)).decrypt(new Uint8Array(r));i(o.buffer)})}},_e=class{constructor(){Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:at.Chacha20Poly1305}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(t){return new ur(t)}};function ee(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`positive integer expected, not ${e}`)}function mi(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function It(e,...t){if(!mi(e))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw new Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function ln(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");ee(e.outputLen),ee(e.blockLen)}function kt(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Ee(e,t){It(e);let r=t.outputLen;if(e.lengthnew Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),ke=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),pt=(e,t)=>e<<32-t|e>>>t;var lr=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68,gi=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function hr(e){for(let t=0;te().update(Kt(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function dn(e){let t=(n,i)=>e(i).update(Kt(n)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=n=>e(n),t}function re(e=32){if(ve&&typeof ve.getRandomValues=="function")return ve.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Ae=class extends Lt{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,ln(t);let n=Kt(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(n.length>i?t.create().update(n).digest():n);for(let s=0;snew Ae(e,t).update(r).digest();Mt.create=(e,t)=>new Ae(e,t);function _i(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let i=BigInt(32),o=BigInt(4294967295),s=Number(r>>i&o),c=Number(r&o),a=n?4:0,u=n?0:4;e.setUint32(t+a,s,n),e.setUint32(t+u,c,n)}var pn=(e,t,r)=>e&t^~e&r,yn=(e,t,r)=>e&t^e&r^t&r,$t=class extends Lt{constructor(t,r,n,i){super(),this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=ke(this.buffer)}update(t){kt(this);let{view:r,buffer:n,blockLen:i}=this;t=Kt(t);let o=t.length;for(let s=0;si-s&&(this.process(n,0),s=0);for(let h=s;hf.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;h>>3,g=pt(b,17)^pt(b,19)^b>>>10;Ot[h]=g+Ot[h-7]+m+Ot[h-16]|0}let{A:n,B:i,C:o,D:s,E:c,F:a,G:u,H:f}=this;for(let h=0;h<64;h++){let d=pt(c,6)^pt(c,11)^pt(c,25),b=f+d+pn(c,a,u)+Ei[h]+Ot[h]|0,g=(pt(n,2)^pt(n,13)^pt(n,22))+yn(n,i,o)|0;f=u,u=a,a=c,c=s+b|0,s=o,o=i,i=n,n=b+g|0}n=n+this.A|0,i=i+this.B|0,o=o+this.C|0,s=s+this.D|0,c=c+this.E|0,a=a+this.F|0,u=u+this.G|0,f=f+this.H|0,this.set(n,i,o,s,c,a,u,f)}roundClean(){Ot.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}};var bn=wt(()=>new pr);var V=new Uint8Array(0);var xn=new Uint8Array([72,80,75,69,45,118,49]),ne=class extends xt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:V}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}init(t){this._suiteId=t}buildLabeledIkm(t,r){this._checkInit();let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+r.byteLength);return n.set(xn,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,r,n){this._checkInit();let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+r.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(xn,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(r,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new tt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(t,r,n){await this._setup();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),o=new ArrayBuffer(n),s=new Uint8Array(o),c=V,a=new Uint8Array(r),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let f=new Uint8Array(this.hashSize+a.length+1);for(let h=1,d=0;d=c.length?(s.set(c,d),d+=c.length):(s.set(c.slice(0,s.length-d),d),d+=s.length-d);return o}async extractAndExpand(t,r,n,i){await this._setup();let o=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},o,i*8)}async labeledExtract(t,r,n){return await this.extract(t,this.buildLabeledIkm(r,n))}async labeledExpand(t,r,n,i){return await this.expand(t,this.buildLabeledInfo(r,n,i),i)}_checkInit(){if(this._suiteId===V)throw new Error("Not initialized. Call init()")}},Be=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},Pe=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},Ie=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Et.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ht=class extends Be{async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return Mt(bn,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var Le=BigInt(4294967295),yr=BigInt(32);function wn(e,t=!1){return t?{h:Number(e&Le),l:Number(e>>yr&Le)}:{h:Number(e>>yr&Le)|0,l:Number(e&Le)|0}}function br(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let i=0;iBigInt(e>>>0)<>>0),ki=(e,t,r)=>e>>>r,Si=(e,t,r)=>e<<32-r|t>>>r,Ai=(e,t,r)=>e>>>r|t<<32-r,Bi=(e,t,r)=>e<<32-r|t>>>r,Pi=(e,t,r)=>e<<64-r|t>>>r-32,Ii=(e,t,r)=>e>>>r-32|t<<64-r,Li=(e,t)=>t,Ki=(e,t)=>e,xr=(e,t,r)=>e<>>32-r,wr=(e,t,r)=>t<>>32-r,mr=(e,t,r)=>t<>>64-r,gr=(e,t,r)=>e<>>64-r;function Ui(e,t,r,n){let i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:i|0}}var Oi=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Hi=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,Ti=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Ci=(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,Ri=(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0),Di=(e,t,r,n,i,o)=>t+r+n+i+o+(e/2**32|0)|0;var Ni={fromBig:wn,split:br,toBig:vi,shrSH:ki,shrSL:Si,rotrSH:Ai,rotrSL:Bi,rotrBH:Pi,rotrBL:Ii,rotr32H:Li,rotr32L:Ki,rotlSH:xr,rotlSL:wr,rotlBH:mr,rotlBL:gr,add:Ui,add3L:Oi,add3H:Hi,add4L:Ti,add4H:Ci,add5H:Di,add5L:Ri},U=Ni;var[zi,ji]=U.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),Tt=new Uint32Array(80),Ct=new Uint32Array(80),Ke=class extends $t{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:r,Bh:n,Bl:i,Ch:o,Cl:s,Dh:c,Dl:a,Eh:u,El:f,Fh:h,Fl:d,Gh:b,Gl:m,Hh:g,Hl:w}=this;return[t,r,n,i,o,s,c,a,u,f,h,d,b,m,g,w]}set(t,r,n,i,o,s,c,a,u,f,h,d,b,m,g,w){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=i|0,this.Ch=o|0,this.Cl=s|0,this.Dh=c|0,this.Dl=a|0,this.Eh=u|0,this.El=f|0,this.Fh=h|0,this.Fl=d|0,this.Gh=b|0,this.Gl=m|0,this.Hh=g|0,this.Hl=w|0}process(t,r){for(let p=0;p<16;p++,r+=4)Tt[p]=t.getUint32(r),Ct[p]=t.getUint32(r+=4);for(let p=16;p<80;p++){let A=Tt[p-15]|0,v=Ct[p-15]|0,D=U.rotrSH(A,v,1)^U.rotrSH(A,v,8)^U.shrSH(A,v,7),G=U.rotrSL(A,v,1)^U.rotrSL(A,v,8)^U.shrSL(A,v,7),H=Tt[p-2]|0,B=Ct[p-2]|0,O=U.rotrSH(H,B,19)^U.rotrBH(H,B,61)^U.shrSH(H,B,6),L=U.rotrSL(H,B,19)^U.rotrBL(H,B,61)^U.shrSL(H,B,6),T=U.add4L(G,L,Ct[p-7],Ct[p-16]),P=U.add4H(T,D,O,Tt[p-7],Tt[p-16]);Tt[p]=P|0,Ct[p]=T|0}let{Ah:n,Al:i,Bh:o,Bl:s,Ch:c,Cl:a,Dh:u,Dl:f,Eh:h,El:d,Fh:b,Fl:m,Gh:g,Gl:w,Hh:S,Hl:I}=this;for(let p=0;p<80;p++){let A=U.rotrSH(h,d,14)^U.rotrSH(h,d,18)^U.rotrBH(h,d,41),v=U.rotrSL(h,d,14)^U.rotrSL(h,d,18)^U.rotrBL(h,d,41),D=h&b^~h&g,G=d&m^~d&w,H=U.add5L(I,v,G,ji[p],Ct[p]),B=U.add5H(H,S,A,D,zi[p],Tt[p]),O=H|0,L=U.rotrSH(n,i,28)^U.rotrBH(n,i,34)^U.rotrBH(n,i,39),T=U.rotrSL(n,i,28)^U.rotrBL(n,i,34)^U.rotrBL(n,i,39),P=n&o^n&c^o&c,M=i&s^i&a^s&a;S=g|0,I=w|0,g=b|0,w=m|0,b=h|0,m=d|0,{h,l:d}=U.add(u|0,f|0,B|0,O|0),u=c|0,f=a|0,c=o|0,a=s|0,o=n|0,s=i|0;let N=U.add3L(O,T,M);n=U.add3H(N,B,L,P),i=N|0}({h:n,l:i}=U.add(this.Ah|0,this.Al|0,n|0,i|0)),{h:o,l:s}=U.add(this.Bh|0,this.Bl|0,o|0,s|0),{h:c,l:a}=U.add(this.Ch|0,this.Cl|0,c|0,a|0),{h:u,l:f}=U.add(this.Dh|0,this.Dl|0,u|0,f|0),{h,l:d}=U.add(this.Eh|0,this.El|0,h|0,d|0),{h:b,l:m}=U.add(this.Fh|0,this.Fl|0,b|0,m|0),{h:g,l:w}=U.add(this.Gh|0,this.Gl|0,g|0,w|0),{h:S,l:I}=U.add(this.Hh|0,this.Hl|0,S|0,I|0),this.set(n,i,o,s,c,a,u,f,h,d,b,m,g,w,S,I)}roundClean(){Tt.fill(0),Ct.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var _r=class extends Ke{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},mn=wt(()=>new Ke);var gn=wt(()=>new _r);var Vt=class extends Pe{async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return Mt(gn,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var Rt=class extends Ie{async extract(t,r){if(await this._setup(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return Mt(mn,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var _n=new Uint8Array([75,69,77,0,0]);var Zt=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function mt(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let r=new Uint8Array(t);for(let n=0;n>8;return r}function ie(e,t){let r=new Uint8Array(e.length+t.length);return r.set(e,0),r.set(t,e.length),r}function Dt(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new Uint8Array(r.length);for(let i=0;i8192)throw new tt("Too long ikm");return await this._prim.deriveKeyPair(t)}async encap(t){let r;t.ekm===void 0?r=await this.generateKeyPair():Zt(t.ekm)?r=t.ekm:r=await this.deriveKeyPair(t.ekm);let n=await this._prim.serializePublicKey(r.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey);try{let o;if(t.senderKey===void 0)o=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey));else{let a=Zt(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey)),f=new Uint8Array(await this._prim.dh(a,t.recipientPublicKey));o=ie(u,f)}let s;if(t.senderKey===void 0)s=ie(new Uint8Array(n),new Uint8Array(i));else{let a=Zt(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(a);s=Fi(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let c=await this._generateSharedSecret(o,s);return{enc:n,sharedSecret:c}}catch(o){throw new ue(o)}}async decap(t){let r=await this._prim.deserializePublicKey(t.enc),n=Zt(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=Zt(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),o=await this._prim.serializePublicKey(i);try{let s;if(t.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(n,r));else{let a=new Uint8Array(await this._prim.dh(n,r)),u=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));s=ie(a,u)}let c;if(t.senderPublicKey===void 0)c=ie(new Uint8Array(t.enc),new Uint8Array(o));else{let a=await this._prim.serializePublicKey(t.senderPublicKey);c=new Uint8Array(t.enc.byteLength+o.byteLength+a.byteLength),c.set(new Uint8Array(t.enc),0),c.set(new Uint8Array(o),t.enc.byteLength),c.set(new Uint8Array(a),t.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,c)}catch(s){throw new le(s)}}async _generateSharedSecret(t,r){let n=this._kdf.buildLabeledIkm(Mi,t),i=this._kdf.buildLabeledInfo(qi,r,this.secretSize);return await this._kdf.extractAndExpand(V,n,i,this.secretSize)}};var ut=["deriveBits"],Xt=new Uint8Array([100,107,112,95,112,114,107]),Ue=new Uint8Array([115,107]);var Oe=class{constructor(t){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(t)}val(){return this._num}reset(){this._num.fill(0)}set(t){if(t.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(t)}isZero(){for(let t=0;tt[r])return!1}return!1}};var Gi=new Uint8Array([99,97,110,100,105,100,97,116,101]),$i=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Vi=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),Zi=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),Xi=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Yi=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Wi=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),Nt=class extends xt{constructor(t,r){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=r,t){case $.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=$i,this._bitmask=255,this._pkcs8AlgId=Xi;break;case $.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Vi,this._bitmask=255,this._pkcs8AlgId=Yi;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=Zi,this._bitmask=1,this._pkcs8AlgId=Wi;break}}async serializePublicKey(t){await this._setup();try{return await this._api.exportKey("raw",t)}catch(r){throw new st(r)}}async deserializePublicKey(t){await this._setup();try{return await this._importRawKey(t,!0)}catch(r){throw new et(r)}}async serializePrivateKey(t){await this._setup();try{let r=await this._api.exportKey("jwk",t);if(!("d"in r))throw new Error("Not private key");return Dt(r.d)}catch(r){throw new st(r)}}async deserializePrivateKey(t){await this._setup();try{return await this._importRawKey(t,!1)}catch(r){throw new et(r)}}async importKey(t,r,n){await this._setup();try{if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new et(i)}}async generateKeyPair(){await this._setup();try{return await this._api.generateKey(this._alg,!0,ut)}catch(t){throw new ct(t)}}async deriveKeyPair(t){await this._setup();try{let r=await this._hkdf.labeledExtract(V,Xt,new Uint8Array(t)),n=new Oe(this._nSk);for(let o=0;n.isZero()||!n.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(r,Gi,mt(o,1),this._nSk));s[0]=s[0]&this._bitmask,n.set(s)}let i=await this._deserializePkcs8Key(n.val());return n.reset(),{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new Pt(r)}}async derivePublicKey(t){await this._setup();try{let r=await this._api.exportKey("jwk",t);return delete r.d,delete r.key_ops,await this._api.importKey("jwk",r,this._alg,!0,[])}catch(r){throw new et(r)}}async dh(t,r){try{return await this._setup(),await this._api.deriveBits({name:"ECDH",public:r},t,this._nDh*8)}catch(n){throw new st(n)}}async _importRawKey(t,r){if(r&&t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!r&&t.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");return r?await this._api.importKey("raw",t,this._alg,!0,[]):await this._deserializePkcs8Key(new Uint8Array(t))}async _importJWK(t,r){if(typeof t.crv>"u"||t.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${t.crv}`);if(r){if(typeof t.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",t,this._alg,!0,[])}if(typeof t.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",t,this._alg,!0,ut)}async _deserializePkcs8Key(t){let r=new Uint8Array(this._pkcs8AlgId.length+t.length);return r.set(this._pkcs8AlgId,0),r.set(t,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",r,this._alg,!0,ut)}};var He=class extends dt{constructor(){let t=new Ht,r=new Nt($.DhkemP256HkdfSha256,t);super($.DhkemP256HkdfSha256,r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:$.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var Te=class extends dt{constructor(){let t=new Vt,r=new Nt($.DhkemP384HkdfSha384,t);super($.DhkemP384HkdfSha384,r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:$.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}};var Ce=class extends dt{constructor(){let t=new Rt,r=new Nt($.DhkemP521HkdfSha512,t);super($.DhkemP521HkdfSha512,r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:$.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ji=BigInt(1),Qi=BigInt(2);function Er(e){return e instanceof Uint8Array||e!=null&&typeof e=="object"&&e.constructor.name==="Uint8Array"}function vr(e){if(!Er(e))throw new Error("Uint8Array expected")}var to=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Re(e){vr(e);let t="";for(let r=0;r=St._0&&e<=St._9)return e-St._0;if(e>=St._A&&e<=St._F)return e-(St._A-10);if(e>=St._a&&e<=St._f)return e-(St._a-10)}function kn(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);let t=e.length,r=t/2;if(t%2)throw new Error("padded hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(r);for(let i=0,o=0;i(Qi<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",stringOrUint8Array:e=>typeof e=="string"||Er(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function zt(e,t,r={}){let n=(i,o,s)=>{let c=eo[o];if(typeof c!="function")throw new Error(`Invalid validator "${o}", expected function`);let a=e[i];if(!(s&&a===void 0)&&!c(a,e))throw new Error(`Invalid param ${String(i)}=${a} (${typeof a}), expected ${o}`)};for(let[i,o]of Object.entries(t))n(i,o,!1);for(let[i,o]of Object.entries(r))n(i,o,!0);return e}var Q=BigInt(0),J=BigInt(1),Gt=BigInt(2),no=BigInt(3),Ar=BigInt(4),Bn=BigInt(5),Pn=BigInt(8),io=BigInt(9),oo=BigInt(16);function Y(e,t){let r=e%t;return r>=Q?r:t+r}function Br(e,t,r){if(r<=Q||t 0");if(r===J)return Q;let n=J;for(;t>Q;)t&J&&(n=n*e%r),e=e*e%r,t>>=J;return n}function Z(e,t,r){let n=e;for(;t-- >Q;)n*=n,n%=r;return n}function In(e,t){if(e===Q||t<=Q)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=Y(e,t),n=t,i=Q,o=J,s=J,c=Q;for(;r!==Q;){let u=n/r,f=n%r,h=i-s*u,d=o-c*u;n=r,r=f,i=s,o=c,s=h,c=d}if(n!==J)throw new Error("invert: does not exist");return Y(i,t)}function so(e){let t=(e-J)/Gt,r,n,i;for(r=e-J,n=0;r%Gt===Q;r/=Gt,n++);for(i=Gt;i(n[i]="function",n),t);return zt(e,r)}function fo(e,t,r){if(r 0");if(r===Q)return e.ONE;if(r===J)return t;let n=e.ONE,i=t;for(;r>Q;)r&J&&(n=e.mul(n,i)),i=e.sqr(i),r>>=J;return n}function uo(e,t){let r=new Array(t.length),n=t.reduce((o,s,c)=>e.is0(s)?o:(r[c]=o,e.mul(o,s)),e.ONE),i=e.inv(n);return t.reduceRight((o,s,c)=>e.is0(s)?o:(r[c]=e.mul(o,r[c]),e.mul(o,s)),i),r}function Pr(e,t){let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function Ir(e,t,r=!1,n={}){if(e<=Q)throw new Error(`Expected Field ORDER > 0, got ${e}`);let{nBitLength:i,nByteLength:o}=Pr(e,t);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let s=co(e),c=Object.freeze({ORDER:e,BITS:i,BYTES:o,MASK:An(i),ZERO:Q,ONE:J,create:a=>Y(a,e),isValid:a=>{if(typeof a!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof a}`);return Q<=a&&aa===Q,isOdd:a=>(a&J)===J,neg:a=>Y(-a,e),eql:(a,u)=>a===u,sqr:a=>Y(a*a,e),add:(a,u)=>Y(a+u,e),sub:(a,u)=>Y(a-u,e),mul:(a,u)=>Y(a*u,e),pow:(a,u)=>fo(c,a,u),div:(a,u)=>Y(a*In(u,e),e),sqrN:a=>a*a,addN:(a,u)=>a+u,subN:(a,u)=>a-u,mulN:(a,u)=>a*u,inv:a=>In(a,e),sqrt:n.sqrt||(a=>s(c,a)),invertBatch:a=>uo(c,a),cmov:(a,u,f)=>f?u:a,toBytes:a=>r?Ft(a,o):kr(a,o),fromBytes:a=>{if(a.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${a.length}`);return r?At(a):Sn(a)}});return Object.freeze(c)}var lo=BigInt(0),Lr=BigInt(1);function Kn(e,t){let r=(i,o)=>{let s=o.negate();return i?s:o},n=i=>{let o=Math.ceil(t/i)+1,s=2**(i-1);return{windows:o,windowSize:s}};return{constTimeNegate:r,unsafeLadder(i,o){let s=e.ZERO,c=i;for(;o>lo;)o&Lr&&(s=s.add(c)),c=c.double(),o>>=Lr;return s},precomputeWindow(i,o){let{windows:s,windowSize:c}=n(o),a=[],u=i,f=u;for(let h=0;h>=b,w>a&&(w-=d,s+=Lr);let S=g,I=g+Math.abs(w)-1,p=m%2!==0,A=w<0;w===0?f=f.add(r(p,o[S])):u=u.add(r(A,o[I]))}return{p:u,f}},wNAFCached(i,o,s,c){let a=i._WINDOW_SIZE||1,u=o.get(i);return u||(u=this.precomputeWindow(i,a),a!==1&&o.set(i,c(u))),this.wNAF(a,u,s)}}}function Un(e){return Ln(e.Fp),zt(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Pr(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var yt=BigInt(0),ht=BigInt(1),De=BigInt(2),ho=BigInt(8),po={zip215:!0};function yo(e){let t=Un(e);return zt(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function On(e){let t=yo(e),{Fp:r,n,prehash:i,hash:o,randomBytes:s,nByteLength:c,h:a}=t,u=De<{try{return{isValid:!0,value:r.sqrt(y*r.inv(l))}}catch{return{isValid:!1,value:yt}}}),d=t.adjustScalarBytes||(y=>y),b=t.domain||((y,l,x)=>{if(l.length||x)throw new Error("Contexts/pre-hash are not supported");return y}),m=y=>typeof y=="bigint"&&ytm(y)&&m(l)&&yy===yt||g(y,u);function S(y,l){if(g(y,l))return y;throw new Error(`Expected valid scalar < ${l}, got ${typeof y} ${y}`)}function I(y){return y===yt?y:S(y,n)}let p=new Map;function A(y){if(!(y instanceof v))throw new Error("ExtendedPoint expected")}class v{constructor(l,x,E,k){if(this.ex=l,this.ey=x,this.ez=E,this.et=k,!w(l))throw new Error("x required");if(!w(x))throw new Error("y required");if(!w(E))throw new Error("z required");if(!w(k))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof v)throw new Error("extended point not allowed");let{x,y:E}=l||{};if(!w(x)||!w(E))throw new Error("invalid affine point");return new v(x,E,ht,f(x*E))}static normalizeZ(l){let x=r.invertBatch(l.map(E=>E.ez));return l.map((E,k)=>E.toAffine(x[k])).map(v.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,p.delete(this)}assertValidity(){let{a:l,d:x}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:E,ey:k,ez:K,et:R}=this,j=f(E*E),C=f(k*k),z=f(K*K),X=f(z*z),W=f(j*l),bt=f(z*f(W+C)),it=f(X+f(x*f(j*C)));if(bt!==it)throw new Error("bad point: equation left != right (1)");let Bt=f(E*k),gt=f(K*R);if(Bt!==gt)throw new Error("bad point: equation left != right (2)")}equals(l){A(l);let{ex:x,ey:E,ez:k}=this,{ex:K,ey:R,ez:j}=l,C=f(x*j),z=f(K*k),X=f(E*j),W=f(R*k);return C===z&&X===W}is0(){return this.equals(v.ZERO)}negate(){return new v(f(-this.ex),this.ey,this.ez,f(-this.et))}double(){let{a:l}=t,{ex:x,ey:E,ez:k}=this,K=f(x*x),R=f(E*E),j=f(De*f(k*k)),C=f(l*K),z=x+E,X=f(f(z*z)-K-R),W=C+R,bt=W-j,it=C-R,Bt=f(X*bt),gt=f(W*it),ae=f(X*it),fe=f(bt*W);return new v(Bt,gt,fe,ae)}add(l){A(l);let{a:x,d:E}=t,{ex:k,ey:K,ez:R,et:j}=this,{ex:C,ey:z,ez:X,et:W}=l;if(x===BigInt(-1)){let Dr=f((K-k)*(z+C)),Nr=f((K+k)*(z-C)),Je=f(Nr-Dr);if(Je===yt)return this.double();let zr=f(R*De*W),jr=f(j*De*X),Mr=jr+zr,qr=Nr+Dr,Fr=jr-zr,Jn=f(Mr*Je),Qn=f(qr*Fr),ti=f(Mr*Fr),ei=f(Je*qr);return new v(Jn,Qn,ei,ti)}let bt=f(k*C),it=f(K*z),Bt=f(j*E*W),gt=f(R*X),ae=f((k+K)*(C+z)-bt-it),fe=gt-Bt,Cr=gt+Bt,Rr=f(it-x*bt),Zn=f(ae*fe),Xn=f(Cr*Rr),Yn=f(ae*Rr),Wn=f(fe*Cr);return new v(Zn,Xn,Wn,Yn)}subtract(l){return this.add(l.negate())}wNAF(l){return H.wNAFCached(this,p,l,v.normalizeZ)}multiply(l){let{p:x,f:E}=this.wNAF(S(l,n));return v.normalizeZ([x,E])[0]}multiplyUnsafe(l){let x=I(l);return x===yt?G:this.equals(G)||x===ht?this:this.equals(D)?this.wNAF(x).p:H.unsafeLadder(this,x)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return H.unsafeLadder(this,n).is0()}toAffine(l){let{ex:x,ey:E,ez:k}=this,K=this.is0();l==null&&(l=K?ho:r.inv(k));let R=f(x*l),j=f(E*l),C=f(k*l);if(K)return{x:yt,y:ht};if(C!==ht)throw new Error("invZ was invalid");return{x:R,y:j}}clearCofactor(){let{h:l}=t;return l===ht?this:this.multiplyUnsafe(l)}static fromHex(l,x=!1){let{d:E,a:k}=t,K=r.BYTES;l=lt("pointHex",l,K);let R=l.slice(),j=l[K-1];R[K-1]=j&-129;let C=At(R);C===yt||(x?S(C,u):S(C,r.ORDER));let z=f(C*C),X=f(z-ht),W=f(E*z-k),{isValid:bt,value:it}=h(X,W);if(!bt)throw new Error("Point.fromHex: invalid y coordinate");let Bt=(it&ht)===ht,gt=(j&128)!==0;if(!x&&it===yt&>)throw new Error("Point.fromHex: x=0 and x_0=1");return gt!==Bt&&(it=f(-it)),v.fromAffine({x:it,y:C})}static fromPrivateKey(l){return L(l).point}toRawBytes(){let{x:l,y:x}=this.toAffine(),E=Ft(x,r.BYTES);return E[E.length-1]|=l&ht?128:0,E}toHex(){return Re(this.toRawBytes())}}v.BASE=new v(t.Gx,t.Gy,ht,f(t.Gx*t.Gy)),v.ZERO=new v(yt,ht,ht,yt);let{BASE:D,ZERO:G}=v,H=Kn(v,c*8);function B(y){return Y(y,n)}function O(y){return B(At(y))}function L(y){let l=c;y=lt("private key",y,l);let x=lt("hashed private key",o(y),2*l),E=d(x.slice(0,l)),k=x.slice(l,2*l),K=O(E),R=D.multiply(K),j=R.toRawBytes();return{head:E,prefix:k,scalar:K,point:R,pointBytes:j}}function T(y){return L(y).pointBytes}function P(y=new Uint8Array,...l){let x=Sr(...l);return O(o(b(x,lt("context",y),!!i)))}function M(y,l,x={}){y=lt("message",y),i&&(y=i(y));let{prefix:E,scalar:k,pointBytes:K}=L(l),R=P(x.context,E,y),j=D.multiply(R).toRawBytes(),C=P(x.context,j,K,y),z=B(R+C*k);I(z);let X=Sr(j,Ft(z,r.BYTES));return lt("result",X,c*2)}let N=po;function q(y,l,x,E=N){let{context:k,zip215:K}=E,R=r.BYTES;y=lt("signature",y,2*R),l=lt("message",l),i&&(l=i(l));let j=At(y.slice(R,2*R)),C,z,X;try{C=v.fromHex(x,K),z=v.fromHex(y.slice(0,R),K),X=D.multiplyUnsafe(j)}catch{return!1}if(!K&&C.isSmallOrder())return!1;let W=P(k,z.toRawBytes(),C.toRawBytes(),l);return z.add(C.multiplyUnsafe(W)).subtract(X).clearCofactor().equals(v.ZERO)}return D._setWindowSize(8),{CURVE:t,getPublicKey:T,sign:M,verify:q,ExtendedPoint:v,utils:{getExtendedPublicKey:L,randomPrivateKey:()=>s(r.BYTES),precompute(y=8,l=v.BASE){return l._setWindowSize(y),l.multiply(BigInt(3)),l}}}}var oe=BigInt(0),Kr=BigInt(1);function bo(e){return zt(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function Ne(e){let t=bo(e),{P:r}=t,n=p=>Y(p,r),i=t.montgomeryBits,o=Math.ceil(i/8),s=t.nByteLength,c=t.adjustScalarBytes||(p=>p),a=t.powPminus2||(p=>Br(p,r-BigInt(2),r));function u(p,A,v){let D=n(p*(A-v));return A=n(A-D),v=n(v+D),[A,v]}function f(p){if(typeof p=="bigint"&&oe<=p&&p=oe;N--){let q=D>>N&Kr;T^=q,P=u(T,H,O),H=P[0],O=P[1],P=u(T,B,L),B=P[0],L=P[1],T=q;let F=H+B,y=n(F*F),l=H-B,x=n(l*l),E=y-x,k=O+L,K=O-L,R=n(K*F),j=n(k*l),C=R+j,z=R-j;O=n(C*C),L=n(G*n(z*z)),H=n(y*x),B=n(E*(y+n(h*E)))}P=u(T,H,O),H=P[0],O=P[1],P=u(T,B,L),B=P[0],L=P[1];let M=a(B);return n(H*M)}function b(p){return Ft(n(p),o)}function m(p){let A=lt("u coordinate",p,o);return s===32&&(A[31]&=127),At(A)}function g(p){let A=lt("scalar",p),v=A.length;if(v!==o&&v!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${v}`);return At(c(A))}function w(p,A){let v=m(A),D=g(p),G=d(v,D);if(G===oe)throw new Error("Invalid private or public key received");return b(G)}let S=b(t.Gu);function I(p){return w(p,S)}return{scalarMult:w,scalarMultBase:I,getSharedSecret:(p,A)=>w(p,A),getPublicKey:p=>I(p),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:S}}var Ur=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949");var ia=BigInt(0),wo=BigInt(1),Hn=BigInt(2),mo=BigInt(3),go=BigInt(5),oa=BigInt(8);function _o(e){let t=BigInt(10),r=BigInt(20),n=BigInt(40),i=BigInt(80),o=Ur,c=e*e%o*e%o,a=Z(c,Hn,o)*c%o,u=Z(a,wo,o)*e%o,f=Z(u,go,o)*u%o,h=Z(f,t,o)*f%o,d=Z(h,r,o)*h%o,b=Z(d,n,o)*d%o,m=Z(b,i,o)*b%o,g=Z(m,i,o)*b%o,w=Z(g,t,o)*f%o;return{pow_p_5_8:Z(w,Hn,o)*e%o,b2:c}}function Eo(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var ze=Ne({P:Ur,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:e=>{let t=Ur,{pow_p_5_8:r,b2:n}=_o(e);return Y(Z(r,mo,t)*n,t)},adjustScalarBytes:Eo,randomBytes:re});var nt=class{constructor(t,r,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:t},this.usages=i,n==="public"&&(this.usages=[])}};var Yt="X25519",je=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=32,this._nSk=32}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(r){throw new st(r)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(r){throw new et(r)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(r){throw new st(r)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(r){throw new et(r)}}async importKey(t,r,n){try{if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new et(i)}}async generateKeyPair(){try{let t=ze.utils.randomPrivateKey(),r=new nt(Yt,t,"private",ut);return{publicKey:await this.derivePublicKey(r),privateKey:r}}catch(t){throw new ct(t)}}async deriveKeyPair(t){try{let r=await this._hkdf.labeledExtract(V,Xt,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,Ue,V,this._nSk),i=new nt(Yt,new Uint8Array(n),"private",ut);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new Pt(r)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(r){throw new et(r)}}async dh(t,r){try{return await this._dh(t,r)}catch(n){throw new st(n)}}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_serializePrivateKey(t){return new Promise(r=>{r(t.key.buffer)})}_importRawKey(t,r){return new Promise((n,i)=>{r&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!r&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new nt(Yt,new Uint8Array(t),r?"public":"private",r?[]:ut))})}_importJWK(t,r){return new Promise((n,i)=>{(typeof t.kty>"u"||t.kty!=="OKP")&&i(new Error(`Invalid kty: ${t.kty}`)),(typeof t.crv>"u"||t.crv!=="X25519")&&i(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x>"u"&&i(new Error("Invalid key: `x` not found")),n(new nt(Yt,Dt(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new nt(Yt,Dt(t.d),"private",ut)))})}_derivePublicKey(t){return new Promise((r,n)=>{try{let i=ze.getPublicKey(t.key);r(new nt(Yt,i,"public"))}catch(i){n(i)}})}_dh(t,r){return new Promise((n,i)=>{try{n(ze.getSharedSecret(t.key,r.key).buffer)}catch(o){i(o)}})}};var Me=class extends dt{constructor(){let t=new Ht;super($.DhkemX25519HkdfSha256,new je(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:$.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var Rn=[],Dn=[],Nn=[],vo=BigInt(0),se=BigInt(1),ko=BigInt(2),So=BigInt(7),Ao=BigInt(256),Bo=BigInt(113);for(let e=0,t=se,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],Rn.push(2*(5*n+r)),Dn.push((e+1)*(e+2)/2%64);let i=vo;for(let o=0;o<7;o++)t=(t<>So)*Bo)%Ao,t&ko&&(i^=se<<(se<r>32?mr(e,t,r):xr(e,t,r),Cn=(e,t,r)=>r>32?gr(e,t,r):wr(e,t,r);function Lo(e,t=24){let r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let c=(s+8)%10,a=(s+2)%10,u=r[a],f=r[a+1],h=Tn(u,f,1)^r[c],d=Cn(u,f,1)^r[c+1];for(let b=0;b<50;b+=10)e[s+b]^=h,e[s+b+1]^=d}let i=e[2],o=e[3];for(let s=0;s<24;s++){let c=Dn[s],a=Tn(i,o,c),u=Cn(i,o,c),f=Rn[s];i=e[f],o=e[f+1],e[f]=a,e[f+1]=u}for(let s=0;s<50;s+=10){for(let c=0;c<10;c++)r[c]=e[s+c];for(let c=0;c<10;c++)e[s+c]^=~r[(c+2)%10]&r[(c+4)%10]}e[0]^=Po[n],e[1]^=Io[n]}r.fill(0)}var qe=class e extends Lt{constructor(t,r,n,i=!1,o=24){if(super(),this.blockLen=t,this.suffix=r,this.outputLen=n,this.enableXOF=i,this.rounds=o,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,ee(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=hn(this.state)}keccak(){lr||hr(this.state32),Lo(this.state32,this.rounds),lr||hr(this.state32),this.posOut=0,this.pos=0}update(t){kt(this);let{blockLen:r,state:n}=this;t=Kt(t);let i=t.length;for(let o=0;o=n&&this.keccak();let s=Math.min(n-this.posOut,o-i);t.set(r.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return ee(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(Ee(t,this),this.finished)throw new Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){let{blockLen:r,suffix:n,outputLen:i,rounds:o,enableXOF:s}=this;return t||(t=new e(r,n,i,s,o)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=o,t.suffix=n,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}},jt=(e,t,r)=>wt(()=>new qe(t,e,r)),va=jt(6,144,224/8),ka=jt(6,136,256/8),Sa=jt(6,104,384/8),Aa=jt(6,72,512/8),Ba=jt(1,144,224/8),Pa=jt(1,136,256/8),Ia=jt(1,104,384/8),La=jt(1,72,512/8),zn=(e,t,r)=>dn((n={})=>new qe(t,e,n.dkLen===void 0?r:n.dkLen,!0)),Ka=zn(31,168,128/8),Or=zn(31,136,256/8);var Ko=wt(()=>Or.create({dkLen:114})),Uo=wt(()=>Or.create({dkLen:64})),ce=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439"),Oo=BigInt(1),jn=BigInt(2),Mn=BigInt(3),Da=BigInt(4),Ho=BigInt(11),To=BigInt(22),qn=BigInt(44),Co=BigInt(88),Ro=BigInt(223);function Fn(e){let t=ce,r=e*e*e%t,n=r*r*e%t,i=Z(n,Mn,t)*n%t,o=Z(i,Mn,t)*n%t,s=Z(o,jn,t)*r%t,c=Z(s,Ho,t)*s%t,a=Z(c,To,t)*c%t,u=Z(a,qn,t)*a%t,f=Z(u,Co,t)*u%t,h=Z(f,qn,t)*a%t,d=Z(h,jn,t)*r%t,b=Z(d,Oo,t)*e%t;return Z(b,Ro,t)*d%t}function Gn(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function Do(e,t){let r=ce,n=Y(e*e*t,r),i=Y(n*e,r),o=Y(i*n*t,r),s=Fn(o),c=Y(i*s,r),a=Y(c*c,r);return{isValid:Y(a*t,r)===e,value:c}}var $n=Ir(ce,456,!0),No={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:$n,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Ko,randomBytes:re,adjustScalarBytes:Gn,domain:(e,t,r)=>{if(t.length>255)throw new Error(`Context is too big: ${t.length}`);return dr(Se("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:Do};var Na=On({...No,prehash:Uo}),Fe=Ne({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:ce,Gu:BigInt(5),powPminus2:e=>{let t=ce,r=Fn(e),n=Z(r,BigInt(2),t);return Y(n*e,t)},adjustScalarBytes:Gn,randomBytes:re});var za=($n.ORDER-BigInt(3))/BigInt(4),ja=BigInt(156326);var Ma=BigInt("39082"),qa=BigInt("78163"),Fa=BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),Ga=BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716");var $a=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var Wt="X448",Ge=class{constructor(t){Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=56,this._nSk=56}async serializePublicKey(t){try{return await this._serializePublicKey(t)}catch(r){throw new st(r)}}async deserializePublicKey(t){try{return await this._importRawKey(t,!0)}catch(r){throw new et(r)}}async serializePrivateKey(t){try{return await this._serializePrivateKey(t)}catch(r){throw new st(r)}}async deserializePrivateKey(t){try{return await this._importRawKey(t,!1)}catch(r){throw new et(r)}}async importKey(t,r,n){try{if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}catch(i){throw new et(i)}}async generateKeyPair(){try{let t=Fe.utils.randomPrivateKey(),r=new nt(Wt,t,"private",ut);return{publicKey:await this.derivePublicKey(r),privateKey:r}}catch(t){throw new ct(t)}}async deriveKeyPair(t){try{let r=await this._hkdf.labeledExtract(V,Xt,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,Ue,V,this._nSk),i=new nt(Wt,new Uint8Array(n),"private",ut);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}catch(r){throw new Pt(r)}}async derivePublicKey(t){try{return await this._derivePublicKey(t)}catch(r){throw new et(r)}}async dh(t,r){try{return await this._dh(t,r)}catch(n){throw new st(n)}}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_serializePrivateKey(t){return new Promise(r=>{r(t.key.buffer)})}_importRawKey(t,r){return new Promise((n,i)=>{r&&t.byteLength!==this._nPk&&i(new Error("Invalid length of the key")),!r&&t.byteLength!==this._nSk&&i(new Error("Invalid length of the key")),n(new nt(Wt,new Uint8Array(t),r?"public":"private",r?[]:ut))})}_importJWK(t,r){return new Promise((n,i)=>{t.kty!=="OKP"&&i(new Error(`Invalid kty: ${t.kty}`)),t.crv!=="X448"&&i(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof t.x!="string"&&i(new Error("Invalid key: `x` not found")),n(new nt(Wt,Dt(t.x),"public"))):(typeof t.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new nt(Wt,Dt(t.d),"private",ut)))})}_derivePublicKey(t){return new Promise((r,n)=>{try{let i=Fe.getPublicKey(t.key);r(new nt(Wt,i,"public"))}catch(i){n(i)}})}_dh(t,r){return new Promise((n,i)=>{try{n(Fe.getSharedSecret(t.key,r.key).buffer)}catch(o){i(o)}})}};var $e=class extends dt{constructor(){let t=new Rt;super($.DhkemX448HkdfSha512,new Ge(t),t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:$.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};function Hr(){return new Promise((e,t)=>{t(new ct("Not supported"))})}var zo=new Uint8Array([115,101,99]),Jt=class{constructor(t,r,n){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=t,this._kdf=r,this.exporterSecret=n}async seal(t,r){return await Hr()}async open(t,r){return await Hr()}async export(t,r){if(t.byteLength>8192)throw new tt("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,zo,new Uint8Array(t),r)}catch(n){throw new he(n)}}},Ve=class extends Jt{},Ze=class extends Jt{constructor(t,r,n,i){super(t,r,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}};function jo(e,t){if(e.byteLength!==t.byteLength)throw new Error("xor: different length inputs");let r=new Uint8Array(e.byteLength);for(let n=0;nNumber.MAX_SAFE_INTEGER)throw new ye("Message limit reached");t.seq+=1}};var Xe=class extends Qt{async open(t,r=V){let n;try{n=await this._ctx.key.open(this.computeNonce(this._ctx),t,r)}catch(i){throw new pe(i)}return this.incrementSeq(this._ctx),n}};var Ye=class extends Qt{constructor(t,r,n,i){super(t,r,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}async seal(t,r=V){let n;try{n=await this._ctx.key.seal(this.computeNonce(this._ctx),t,r)}catch(i){throw new de(i)}return this.incrementSeq(this._ctx),n}};var Mo=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),qo=new Uint8Array([101,120,112]),Fo=new Uint8Array([105,110,102,111,95,104,97,115,104]),Go=new Uint8Array([107,101,121]),$o=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Vo=new Uint8Array([115,101,99,114,101,116]),Zo=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),We=class extends xt{constructor(t){if(super(),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof t.kem=="number")throw new tt("KemId cannot be used");if(this._kem=t.kem,typeof t.kdf=="number")throw new tt("KdfId cannot be used");if(this._kdf=t.kdf,typeof t.aead=="number")throw new tt("AeadId cannot be used");this._aead=t.aead,this._suiteId=new Uint8Array(Zo),this._suiteId.set(mt(this._kem.id,2),4),this._suiteId.set(mt(this._kdf.id,2),6),this._suiteId.set(mt(this._aead.id,2),8),this._kdf.init(this._suiteId)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async createSenderContext(t){this._validateInputLength(t),await this._setup();let r=await this._kem.encap(t),n;return t.psk!==void 0?n=t.senderKey!==void 0?_t.AuthPsk:_t.Psk:n=t.senderKey!==void 0?_t.Auth:_t.Base,await this._keyScheduleS(n,r.sharedSecret,r.enc,t)}async createRecipientContext(t){this._validateInputLength(t),await this._setup();let r=await this._kem.decap(t),n;return t.psk!==void 0?n=t.senderPublicKey!==void 0?_t.AuthPsk:_t.Psk:n=t.senderPublicKey!==void 0?_t.Auth:_t.Base,await this._keyScheduleR(n,r,t)}async seal(t,r,n=V){let i=await this.createSenderContext(t);return{ct:await i.seal(r,n),enc:i.enc}}async open(t,r,n=V){return await(await this.createRecipientContext(t)).open(r,n)}async _keySchedule(t,r,n){let i=n.psk===void 0?V:new Uint8Array(n.psk.id),o=await this._kdf.labeledExtract(V,$o,i),s=n.info===void 0?V:new Uint8Array(n.info),c=await this._kdf.labeledExtract(V,Fo,s),a=new Uint8Array(1+o.byteLength+c.byteLength);a.set(new Uint8Array([t]),0),a.set(new Uint8Array(o),1),a.set(new Uint8Array(c),1+o.byteLength);let u=n.psk===void 0?V:new Uint8Array(n.psk.key),f=this._kdf.buildLabeledIkm(Vo,u),h=this._kdf.buildLabeledInfo(qo,a,this._kdf.hashSize),d=await this._kdf.extractAndExpand(r,f,h,this._kdf.hashSize);if(this._aead.id===at.ExportOnly)return{aead:this._aead,exporterSecret:d};let b=this._kdf.buildLabeledInfo(Go,a,this._aead.keySize),m=await this._kdf.extractAndExpand(r,f,b,this._aead.keySize),g=this._kdf.buildLabeledInfo(Mo,a,this._aead.nonceSize),w=await this._kdf.extractAndExpand(r,f,g,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:m,baseNonce:new Uint8Array(w),seq:0}}async _keyScheduleS(t,r,n,i){let o=await this._keySchedule(t,r,i);return o.key===void 0?new Ze(this._api,this._kdf,o.exporterSecret,n):new Ye(this._api,this._kdf,o,n)}async _keyScheduleR(t,r,n){let i=await this._keySchedule(t,r,n);return i.key===void 0?new Ve(this._api,this._kdf,i.exporterSecret):new Xe(this._api,this._kdf,i)}_validateInputLength(t){if(t.info!==void 0&&t.info.byteLength>8192)throw new tt("Too long info");if(t.psk!==void 0){if(t.psk.key.byteLength<32)throw new tt(`PSK must have at least ${32} bytes`);if(t.psk.key.byteLength>8192)throw new tt("Too long psk.key");if(t.psk.id.byteLength>8192)throw new tt("Too long psk.id")}}};var Tr=class extends We{constructor(t){if(typeof t.kem=="number")switch(t.kem){case $.DhkemP256HkdfSha256:t.kem=new He;break;case $.DhkemP384HkdfSha384:t.kem=new Te;break;case $.DhkemP521HkdfSha512:t.kem=new Ce;break;case $.DhkemX25519HkdfSha256:t.kem=new Me;break;case $.DhkemX448HkdfSha512:t.kem=new $e;break;default:throw new tt(`The KEM (${t.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof t.kdf=="number")switch(t.kdf){case Et.HkdfSha256:t.kdf=new Ht;break;case Et.HkdfSha384:t.kdf=new Vt;break;default:t.kdf=new Rt;break}if(typeof t.aead=="number")switch(t.aead){case at.Aes128Gcm:t.aead=new te;break;case at.Aes256Gcm:t.aead=new be;break;case at.Chacha20Poly1305:t.aead=new _e;break;default:t.aead=new xe;break}super(t)}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(t){return await this._setup(),await this._kem.deriveKeyPair(t)}async importKey(t,r,n=!0){return await this._setup(),await this._kem.importKey(t,r,n)}};export{Xr as Aead,at as AeadId,Qe as BaseError,Tr as CipherSuite,le as DecapError,Pt as DeriveKeyPairError,et as DeserializeError,ue as EncapError,he as ExportError,ot as HpkeError,tt as InvalidParamError,Zr as Kdf,Et as KdfId,Vr as Kem,$ as KemId,ye as MessageLimitReachedError,ct as NotSupportedError,pe as OpenError,de as SealError,st as SerializeError,$r as ValidationError}; /*! Bundled license information: @noble/ciphers/esm/utils.js: